- Discuss - lists.centos.org

Unable to load dynamic library 'twig.so'
by Ilyass Kaouam 04 Dec '18

04 Dec '18

I have this problem. Ca you please help me : php -v PHP Warning: PHP Startup: Unable to load dynamic library 'twig.so' (tried: /usr/lib64/php/modules/twig.so (/usr/lib64/php/modules/twig.so: undefined symbol: zval_used_for_init), /usr/lib64/php/modules/twig.so.so (/usr/lib64/php/modules/twig.so.so: cannot open shared object file: No such file or directory)) in Unknown on line 0 PHP 7.2.11 (cli) (built: Oct 11 2018 19:14:35) ( NTS ) Copyright (c) 1997-2018 The PHP Group Zend Engine v3.2.0, Copyright (c) 1998-2018 Zend Technologies with Zend OPcache v7.2.11, Copyright (c) 1999-2018, by Zend Technologies -- *Ilyass kaouam* *Ingénieur System OpenSource* *Mastère européen Manager de Projets Informatiques*

2 1

CentOS-announce Digest, Vol 166, Issue 1
by centos-announce-request＠centos.org 04 Dec '18

04 Dec '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Release for CentOS Linux 7 (1810) on the x86_64 Architecture (Johnny Hughes) 2. Release for CentOS Linux 7 (1810) on aarch64 i386 ppc64le and power9 (Pablo Sebasti?n Greco) 3. Release for CentOS Linux 7 (1810) on armhfp (Pablo Sebasti?n Greco) ---------------------------------------------------------------------- Message: 1 Date: Mon, 3 Dec 2018 09:18:22 -0600 From: Johnny Hughes <johnny(a)centos.org> To: CentOS-Announce <centos-announce(a)centos.org> Subject: [CentOS-announce] Release for CentOS Linux 7 (1810) on the x86_64 Architecture Message-ID: <1cf9af45-fd45-b32e-0aea-eae0ff9966d1(a)centos.org> Content-Type: text/plain; charset="utf-8" We are pleased to announce the general availability of CentOS Linux 7 (1810) for the x86_64 architecture. Effectively immediately, this is the current release for CentOS Linux 7 and is tagged as 1810, derived from Red Hat Enterprise Linux 7.6 Source Code. As always, read through the Release Notes at : http://wiki.centos.org/Manuals/ReleaseNotes/CentOS7 - these notes contain important information about the release and details about some of the content inside the release from the CentOS QA team. These notes are updated constantly to include issues and incorporate feedback from the users. ---------- Updates, Sources, and DebugInfos Updates released since the upstream release are all posted, across all architectures. We strongly recommend every user apply all updates, including the content released today, on your existing CentOS Linux 7 machine by just running 'yum update'. As with all CentOS Linux 7 components, this release was built from sources hosted at git.centos.org. In addition, SRPMs that are a byproduct of the build (and also considered critical in the code and buildsys process) are being published to match every binary RPM we release. Sources will be available from vault.centos.org in their own dedicated directories to match the corresponding binary RPMs. Since there is far less traffic to the CentOS source RPMs compared with the binary RPMs, we are not putting this content on the main mirror network. If users wish to mirror this content they can do so using the reposync command available in the yum-utils package. All CentOS source RPMs are signed with the same key used to sign their binary counterparts. Developers and end users looking at inspecting and contributing patches to the CentOS Linux distro will find the code hosted at git.centos.org far simpler to work against. Details on how to best consume those are documented along with a quick start at : http://wiki.centos.org/Sources Debuginfo packages are also being signed and pushed. Yum configs shipped in the new release file will have all the context required for debuginfo to be available on every CentOS Linux install. This release supersedes all previously released content for CentOS Linux 7, and therefore we highly encourage all users to upgrade their machines. Information on different upgrade strategies and how to handle stale content is included in the Release Notes. Note that older content, obsoleted by newer versions of the same applications are trim'd off from repos like Extras/ and Plus/ However this time we have also extended this to the SIG content hosted at mirror.centos.org, and some older End of Life content has been dropped. Everything we ever release, is always available on the vault service for people still looking for and have a real need for it. ---------- Download In order to conserve donor bandwidth, and to make it possible to get the mirror content sync'd out as soon as possible, we recommend using torrents to get your initial installer images: Details on the images are available on the mirrors at http://mirror.centos.org/centos/7/isos/x86_64/0_README.txt - that file clearly highlights the difference in the images, and when one might be more suitable than the others. sha256sum x86_64: 3213b2c34cecbb3bb817030c7f025396b658634c0cf9c4435fc0b52ec9644667? CentOS-7-x86_64-LiveGNOME-1810.iso 38d5d51d9d100fd73df031ffd6bd8b1297ce24660dc8c13a3b8b4534a4bd291c? CentOS-7-x86_64-Minimal-1810.iso 6d44331cc4f6c506c7bbe9feb8468fad6c51a88ca1393ca6b8b486ea04bec3c1? CentOS-7-x86_64-DVD-1810.iso 87623c8ab590ad0866c5f5d86a2d7ed631c61d69f38acc42ce2c8ddec65ecea2? CentOS-7-x86_64-LiveKDE-1810.iso 918975cdf947e858c9a0c77d6b90a9a56d9977f3a4496a56437f46f46200cf71? CentOS-7-x86_64-Everything-1810.iso 19d94274ef856c4dfcacb2e7cfe4be73e442a71dd65cc3fb6e46db826040b56e? CentOS-7-x86_64-NetInstall-1810.iso Information for the torrent files and sums are available at http://mirror.centos.org/centos/7/isos/x86_64 -------- Additional Images The container, Vagrant, Cloud and Atomic Host images are being prepared and will be released in the next few days. Look for an announcement posted to the centos-announce list for more information on availability for these in the coming days. ---------- Getting Help The CentOS ecosystem is sustained by community driven help and guidance. The best place to start for new users is at http://wiki.centos.org/GettingHelp We are also on social media, you can find the project: on Twitter at? : http://twitter.com/CentOSProject on Facebook at : https://www.facebook.com/groups/centosproject/ on LinkedIn at : https://www.linkedin.com/groups/22405 And you will find the core team and a majority of the contributors on irc, on freenode.net in #centos ; talking about the finer points of distribution engineering and platform enablement. ---------- Contributors This release was made possible due to the hard work of many people, foremost on that list are the Red Hat Engineers for producing a great distribution and the CentOS QA team, without them CentOS Linux would look very different. Many of the team went further and beyond expectations to bring this release to you, and I would like to thank everyone for their help. We are also looking for people to get involved with the QA process in CentOS, if you would like to join this please introduce yourself on the centos-devel list (http://lists.centos.org/mailman/listinfo/centos-devel ). Finally, please join me in thanking the donors who all make this possible for us. Enjoy the fresh new release! Thanks, Johnny Hughes

1 0

Update failure: Mate requires libgtop-2.0.so.10
by Frank Cox 04 Dec '18

04 Dec '18

I just tried updating this laptop to the shiny new Centos version and it appears that Mate doesn't like the new version of libgtop, as you can see here: Error: Package: marco-1.16.1-3.el7.x86_64 (@epel) Requires: libgtop-2.0.so.10()(64bit) Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) libgtop-2.0.so.10()(64bit) Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) ~libgtop-2.0.so.11()(64bit) Error: Package: mate-applets-1.16.0-1.el7.x86_64 (@epel) Requires: libgtop-2.0.so.10()(64bit) Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) libgtop-2.0.so.10()(64bit) Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) ~libgtop-2.0.so.11()(64bit) Error: Package: mate-disk-usage-analyzer-1.16.1-1.el7.x86_64 (@epel) Requires: libgtop-2.0.so.10()(64bit) Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) libgtop-2.0.so.10()(64bit) Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) ~libgtop-2.0.so.11()(64bit) Error: Package: mate-system-monitor-1.16.0-1.el7.x86_64 (@epel) Requires: libgtop-2.0.so.10()(64bit) Removing: libgtop2-2.34.2-2.el7.x86_64 (@base) libgtop-2.0.so.10()(64bit) Updated By: libgtop2-2.38.0-3.el7.x86_64 (base) ~libgtop-2.0.so.11()(64bit) -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 0

Connect CentOS 7 / GNOME to wireless WPA2/AES ?
by Nicolas Kovacs 03 Dec '18

03 Dec '18

Hi, I just shipped a CentOS 7 laptop with a slightly customized GNOME desktop to one of my clients who works for a belgian public broadcasting service. He wants to move away from the world of proprietary software, so he sent me a list of specifications, which we have almost completed. There's a handful of items we still have to work out. One of them is the specific wireless connection available at his workplace. He can connect to his home network OK using the NetworkManager applet provided in the GNOME desktop. But at his workplace, it's a different setup with WPA2/AES. Has anybody on this list ever used this kind of wireless connection method, which involves installing a certificate? Or maybe you can point me to the relevant documentation? Cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 1

Centos7- WiFi not recognized - HWaddress - Or Any Idea
by Cristian Danciu 03 Dec '18

03 Dec '18

Hello, I recently installed centos7+Gnome on my macbook air , at first start the wireless adaptor , which is the (infamous?) BCMA4360 , seemed to work because I was asked to choose the network and provided password, but thereafter wifi did not appear, so I can connect to the Internet only by cable. Googling a few days and checking on my computer I found the following:- the infamous wifi adapter BCM4360 appears on lshw list- the driver for wifi adapter appears on lsmod list as BCMA, and I also find the driver, bcm-pci-bridge in sys/bus/drivers- i didn't find any file in /etc/sysconfig/network_scripts where the device is bcma wifi adapter, or any wifi. My idea to workaround this is: to create a file in /etc/sysconfig/network_scripts/, in wich i inteded to pass the HWadress of the device(BCMA4360), but I wasn't able to find a way to get this address.If somebody can help me to find a way to get this HWaddr would be very appreciated.Or any ideas to get wifi on my fancy macbook air with centos and no macos at all, because at installation somehow i accomplished the performance to format the entire disk.I also mention that I am not an IT guy, but I want to learn a lot about the linux centos, but first things first : I need wifi. Regards, Cristian

3 2

OT: good free email service ?
by Valeri Galtsev 02 Dec '18

02 Dec '18

Dear All, I know it is an oxymoron: good free ... service ;-) Still, can someone recommend good free email service? I definitely will not go with google, Microsoft, Apple. I don't have same strong feeling about yahoo as I have about above, but... Anyway, thanks in advance for all your advises. Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

9 9

Re: [CentOS] OT: good free email service ?
by Alice Wonder 02 Dec '18

02 Dec '18

On 12/02/2018 06:41 AM, Chris wrote: > On Sat, 10 Nov 2018 00:22:00 -0800 > Alice Wonder <alice(a)domblogger.net> wrote: > >> I run my own, using postfix + dovecot + roundcube, but because I >> can't afford my own subnet - I end up constantly on spam blacklists >> when someone else on my subnet sends spam. > > which blacklists are this? > spamhaus zen

1 0

In centos, how to switch to default gcc after switched to a higher version of gcc with devtoolset.
by yf chu 01 Dec '18

01 Dec '18

I want to install several gcc with different versions in centos. The default version of gcc in centos6 is 4.9.3. So I use devtoolset install a higher version of gcc. Then I switch to the higher version of gcc by executing "source /opt/rh/devtoolset-5/enable". But now if I want to switch back to the default gcc, how should I do? By the way, is there any solution to install multiple gcc with different versions in centos 5?

2 1

Php script not running
by Jerry Geis 30 Nov '18

30 Nov '18

Hi All, I have centos 7. Apache and php are installed. CGI runs fine - php does not seem to run. I have the /etc/httpd/conf.d/php.conf file php.conf # # Cause the PHP interpreter to handle files with a .php extension. # <FilesMatch \.php$> SetHandler application/x-httpd-php </FilesMatch> # # Allow php to handle Multiviews # AddType text/html .php # # Add index.php to the list of files that will be served as directory # indexes. # DirectoryIndex index.php # # Uncomment the following lines to allow PHP to pretty-print .phps # files as PHP source code: # #<FilesMatch \.phps$> # SetHandler application/x-httpd-php-source #</FilesMatch> # # Apache specific PHP configuration options # those can be override in each configured vhost # php_value session.save_handler "files" php_value session.save_path "/var/lib/php/session" I have: AddHandler cgi-script .cgi .php The result is 500 internal server error. everything seems like its setup - I have restarted httpd. These are the PHP that are loaded: rpm -qa | grep php php-common-5.4.16-45.el7.x86_64 php-5.4.16-45.el7.x86_64 php-fpm-5.4.16-45.el7.x86_64 php-cli-5.4.16-45.el7.x86_64 I do not see any reason in any of the httpd/log files just the 500 internal server error returned. If I do the file with the PHP info line <?php phpinfo(); ?> this displays correctly, but my other script does not run. I have checked the permissions on the script and it is executable and owned by the same user my CGI programs are owned that work. What might I be missing? Jerry

2 1

CentOS Dojo at FOSDEM, February 1, 2019
by Rich Bowen 30 Nov '18

30 Nov '18

The final schedule for the CentOS Dojo at FOSDEM is now live at https://wiki.centos.org/Newsletter and registration is open. We've got a whole day of content for you, covering technical topics, information about RHEL 8 (and what's coming in CentOS), and updates from our Special Interest Groups (SIGs). Registration is free, but we do need you to register, so that we can adequately plan. We'll see you in Brussels! If you're not going to be at FOSDEM, but are interested in hosting a Dojo in your home town, get in touch with us on the centos-promo mailing list - https://lists.centos.org/mailman/listinfo/centos-promo - with your proposal. -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

2 1

[OT] Where to buy S/MIME ??
by Alice Wonder 29 Nov '18

29 Nov '18

Hi, I'm getting increasingly paranoid. Something I said on a certain social media site several months ago was modified - then reported - then by account was banned until I agreed to delete it. Obviously since what I said was modified I didn't have any issue with deleting it but I want more than just DKIM sigs on my e-mail now. Anyway looking for S/MIME I can use to sign and/or encrypt but mostly sign. Not interested in GnuPG or self-signed S/MIME - I want something that can be trusted because someone else that is trusted actually vouched for me. The "free for personal" S/MIME from Comodo didn't work. Browser said it did but there was nothing to export for me to then import. I suspect it is because I used private browser window, I really don't like the idea of a private key stored in browser anyway. And it never asked for a password to encrypt the private key, nor let me specify key strength (only let me choose between medium and high - I assume high is 4096 but I don't know, it didn't say) Didn't like the "browser generated" process, even if it had worked and generated the final product I could export - I really didn't like the process and have serious questions about the wisdom of a private key without a pass phrase stored in an application that interacts with web sites. Anyway so used openssl to create private key (with aes-256 encryption and pass phrase) and then a CSR. But I can't find anyone who sells certs for S/MIME to send the CSR too. Globalsign but they wanted $89 - no one else. Found a few sites that offered to "send me a quote" that I think were intended for corporate accounts. Where do regular users who just want an inexpensive certificate usable for S/MIME from a CSR generated the traditional way go to buy a cert? -=- Off Topic 2 I'm going to strangle whoever it is at Google that thinks it is a good idea to put so many video results at the top of search results for this kind of thing. I'm really getting sick of how highly ranked videos now are in search engines.

8 12

Gnome_shell out of memory
by Jerry Geis 28 Nov '18

28 Nov '18

Hi All, I have a CentOS 7.5 box running. Its crashing after some time with NO memory. I have 4G in the box, and 4G swap. Nov 28 07:43:20 mediacontroller01 kernel: gnome-shell cpuset=/ mems_allowed=0 Nov 28 07:43:20 mediacontroller01 kernel: CPU: 2 PID: 1419 Comm: gnome-shell Tainted: G OE ------------ 3.10.0-862.3.3.el7.x86_64 #1 Nov 28 07:43:20 mediacontroller01 kernel: 763965 total pagecache pages Nov 28 07:43:20 mediacontroller01 kernel: 792 pages in swap cache Nov 28 07:43:20 mediacontroller01 kernel: Swap cache stats: add 1762910, delete 1762118, find 15701/18190 Nov 28 07:43:20 mediacontroller01 kernel: Free swap = 0kB Nov 28 07:43:20 mediacontroller01 kernel: Total swap = 4095996kB Nov 28 07:43:20 mediacontroller01 kernel: 1020385 pages RAM Nov 28 07:43:20 mediacontroller01 kernel: 0 pages HighMem/MovableOnly Nov 28 07:43:20 mediacontroller01 kernel: 78196 pages reserved Nov 28 07:43:20 mediacontroller01 kernel: Out of memory: Kill process 1419 (gnome-shell) score 25 or sacrifice child Nov 28 07:43:20 mediacontroller01 kernel: Killed process 1419 (gnome-shell) total-vm:9632020kB, anon-rss:179608kB, file-rss:924kB, shmem-rss:4504kB Nov 28 07:43:20 mediacontroller01 gnome-session-binary[1332]: WARNING: Application 'org.gnome.Shell.desktop' killed by signal 9 Nov 28 07:43:20 mediacontroller01 gnome-session: gnome-session-binary[1332]: WARNING: Application 'org.gnome.Shell.desktop' killed by signal 9 Nov 28 07:43:22 mediacontroller01 journal: JS WARNING: [resource:///org/gnome/shell/ui/main.js 315]: reference to undefined property "MetaStage" Nov 28 07:43:22 mediacontroller01 journal: JS WARNING: [resource:///org/gnome/shell/ui/layout.js 221]: reference to undefined property "MetaWindowGroup" Nov 28 07:43:22 mediacontroller01 journal: JS WARNING: [resource:///org/gnome/shell/ui/osdMonitorLabeler.js 59]: reference to undefined property "MetaDBusDisplayConfigSkeleton" Nov 28 07:43:22 mediacontroller01 journal: Failed to launch ibus-daemon: Failed to execute child process “ibus-daemon” (No such file or directory) Nov 28 07:43:23 mediacontroller01 journal: JS WARNING: [resource:///org/gnome/shell/ui/slider.js 38]: reference to undefined property "CallyActor" Nov 28 07:43:23 mediacontroller01 dbus[817]: [system] Activating via systemd: service name='org.freedesktop.GeoClue2' unit='geoclue.service' Nov 28 07:43:23 mediacontroller01 systemd: Cannot add dependency job for unit firewalld.service, ignoring: Unit is masked. Nov 28 07:43:23 mediacontroller01 systemd: Starting Location Lookup Service... Nov 28 07:43:23 mediacontroller01 dbus[817]: [system] Activating via systemd: service name='org.freedesktop.Avahi' unit='dbus-org.freedesktop.Avahi.service' Nov 28 07:43:23 mediacontroller01 dbus[817]: [system] Activation via systemd failed for unit 'dbus-org.freedesktop.Avahi.service': Unit not found. Nov 28 07:43:23 mediacontroller01 journal: Failed to connect to avahi service: Daemon not running Nov 28 07:43:23 mediacontroller01 dbus[817]: [system] Successfully activated service 'org.freedesktop.GeoClue2' Nov 28 07:43:23 mediacontroller01 systemd: Started Location Lookup Service. Nov 28 07:43:23 mediacontroller01 journal: No permission to trigger offline updates: Polkit.Error: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Action org.freedesktop.packagekit.trigger-offline-update is not registered Nov 28 07:43:23 mediacontroller01 org.gnome.Shell.desktop: Window manager warning: "XF86RFKill" is not a valid accelerator Nov 28 07:43:23 mediacontroller01 journal: Error looking up permission: GDBus.Error:org.freedesktop.portal.Error.NotFound: No entry for geolocation Nov 28 07:43:24 mediacontroller01 gnome-shell: GNOME Shell started at Wed Nov 28 2018 07:43:23 GMT-0500 (EST) Nov 28 07:44:19 mediacontroller01 journal: failed to commit changes to dconf: The connection is closed I have not ran into that before - What does one do ? Thanks Jerry

1 0

Tools/mechanisms for the management of access permissions in big filebased datasets
by Frank Thommen 28 Nov '18

28 Nov '18

Hello, we are currently managing access permissions through classical user-group-others permissions on a multi-petabyte directory tree with partially very deep and broad directories. Projects are represented by directory trees and mapped through GIDs. Lately we had lots of "singular" permission request (one single user needs access to a single dataset but should not be able to see all other datasets belonging to the same project). We realized, that the UGO model doesn't scale and is becoming more and more unmanageable. Can you recommend tools/mechanisms/technologies to overcome the drawbacks of the UGO model? We are thinking about some purely ACL based mechanism (but are open to other ideas). All filesystems in question are mounted via NFSv4 and the clients are (almost) completely CentOS 7.x hsots. Ideally the tool would have some web UI and some kind of (REST)API which allows us to modify permissions from our inhouse data management application (which does /not/ manage permissions, just the structure of the data). Additionally it should be able to visualize/report permissions in directory. I wasn't very successful in googling possible candidates, hence the question to the list. Cheers frank

4 4

CentOS 7 package not present in Red Hat EL 7 - qt-assistant
by Toralf Lund 28 Nov '18

28 Nov '18

I'm using CentOS 7 for development of software that is sometimes used on Red Hat Enterprise Linux 7. I conjunction with an update of one of the applications, I asked some Red Hat users to install the Qt 4 Assistant application via the qt-assistant package (which is used by a "help" function in our software.) It seemed like there was no such package in the Red Hat package set, however, and I also see no mention of it in "package manifests" like https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/ht…. Yet I can install the package from the "base" repository on my CentOS machine. Questions: Isn't CentOS base supposed to contain exactly the same packages as Red Hat Enterprise, except in some special cases that relate to distribution information, installation sources etc.? Does anyone know what's going on with the specific package I mention above? - Toralf

3 4

aarch64 boot up process/EFI
by Asya Dvorkin 28 Nov '18

28 Nov '18

Hello, I am not sure if this is the correct place to ask, but I do not have anyone else to go to. I'm working on building our own custom aarch64 RHEL distribution and using CentOS SRPMs to rebuild necessary packages. I am also utilizing kickstart. At this point, my kickstart installs all packages (by using a local repository with newly rebuild packages), but in the end I get an error "failed to write boot loader configuration". I noticed that i have /boot/efi/EFI/redhat directory on my newly "installed" server, while centos server has /boot/efi/EFI/centos directory. According to efibootmgr it is trying to boot \EFI\centos\shimaa64.efi, which doesn't exist (EFI\redhat\shimaa64.efi does). Those files are created by shim rpms and they are a total mess. I don't even know where to start or what to look for. `efibootmgr -v` shows 0000 in the beginning of BootOrder Boot0000* CentOS: HD (1,GPT,.......)/File(\EFI\centos\shimaa64.efi). Shim package has the following files/directories: $ rpm -qlp shim-aa64-12-1 /boot/efi/EFI/BOOT/BOOTAA64.EFI /boot/efi/EFI/BOOT/fbaa64.efi /boot/efi/EFI/redhat/BOOTAA64.CSV /boot/efi/EFI/redhat/mmaa64.efi /boot/efi/EFI/redhat/shim.efi /boot/efi/EFI/redhat/shimaa64-redhat.efi /boot/efi/EFI/redhat/shimaa64.efi I have been reading EFI documentation and I understand the concept (or rather I think I do), but not sure how to make it all work with shim RPMs and/or how to properly rebuild them. Would really appreciate any advice... Thank you! Asya

1 0

RHEL 8 Public Beta Released
by Yan Li 27 Nov '18

27 Nov '18

https://www.redhat.com/en/blog/powering-its-future-while-preserving-present… -- Yan Li

7 13

Re: [CentOS] NBDE, clevis and tang for non-root disk
by mark 27 Nov '18

27 Nov '18

Radu Radutiu wrote: > On Tue, Nov 27, 2018 at 3:14 PM mark <m.roth(a)5-cent.us> wrote: > >> What we do is to have the encryption key of the secondary filesystem in >> /etc/crypttab, which is, of course, 600. As it boots, it decrypts from >> that as it mounts the rest of the system. >> > Thanks, this is working as expected and it gave me the hint needed to > find the actual problem. The problem is that the initramfs image generated > by dracut -f does not include the /etc/crypttab from the OS (it only > contains the entry for the root device). Once I have manually added the > other volumes in the /etc/crypttab file from the initramfs image, clevis > is able to decrypt all volumes. Now the question is why the generated > iniramfs image has a different /etc/crypttab. How can I specify > /etc/crypttab for the initramfs so that > furhter kernel updates will not replace it with the wrong file? > Sorry, I think you misunderstood. The key for root is *not* in /etc/crypttab - that's only for the secondary ones. mark

2 1

C7 install, "failed to IDENTIFY"
by mark 27 Nov '18

27 Nov '18

The install from a USB key fails. It's showing ata2:0.0 failed to IDENTIFY. I've been searching online, and the only hint I have is that it might not understand the controller. New Dell Optiplex 7050. Haanyone run into this? mark

2 1

Re: [CentOS] NBDE, clevis and tang for non-root disk
by Radu Radutiu 27 Nov '18

27 Nov '18

On Tue, Nov 27, 2018 at 3:14 PM mark <m.roth(a)5-cent.us> wrote: > What we do is to have the encryption key of the secondary filesystem in > /etc/crypttab, which is, of course, 600. As it boots, it decrypts from > that as > it mounts the rest of the system. > > mark > Thanks, this is working as expected and it gave me the hint needed to find the actual problem. The problem is that the initramfs image generated by dracut -f does not include the /etc/crypttab from the OS (it only contains the entry for the root device). Once I have manually added the other volumes in the /etc/crypttab file from the initramfs image, clevis is able to decrypt all volumes. Now the question is why the generated iniramfs image has a different /etc/crypttab. How can I specify /etc/crypttab for the initramfs so that furhter kernel updates will not replace it with the wrong file? Radu

1 0

CentOS 7 bash perhaps off topic
by Jerry Geis 26 Nov '18

26 Nov '18

hi all, I have a small script that seems to be exiting and hitting the sleep 60... The smwebsocket just connects to the web socket provided and outputs the data. This works manually. the myprogram just opens a database and writes the line... My desire is to run the smwebsocket, connect to the websocket and output the data (line by line) when we get a line that matches Location take that line and output to the database. Seems simple. I desire this to keep the connection alive and just continue to read data and grep on the data etc... if smwebsocket does exit, sleep 60 and reconnect. However it seems to be exiting and running the sleep 60. Am I missing something ? while [ 1 ] do smwebsocket "$URL" | grep Location | while read line do myprogram -data "$line" done sleep 60 Reconnecting... done All the pieces work - just not the actual running. What am I missing? Jerry

3 3

kernel 3.10.0-957.el7.x86_64 + EFI on Dell server - problem
by lejeczek 26 Nov '18

26 Nov '18

hi guys I've one box where I just yesterday upgraded Centos. I wonder if that kernel upgrade process might somewhat troublesome. After that upgrade UEFI boot fails with: Failed to set MokListRT: Invalid Parameter Something has gone seriously wrong: import_mok_state() failed : Invalid Parameter Has anybody seen that? And maybe know to fix it? many thanks, L.

6 9

rpmbuild errors
by Alessandro Baggi 26 Nov '18

26 Nov '18

Hi list, I need a more updated version of bacula because I need to backup a debian workstation. So I decided to build my own bacula package base on bacula 9.2.0. I'm new to rpmbuild and I created my bacula.spec file but when running rpmbuild -ba bacula.spec I got error about check-rpaths like: ERROR 0001: file '/usr/sbin/bregex' contains a standard rpath '/usr/lib64' in [/usr/lib64] Running rpmbuild as suggested, adding QA_RPATHS=$[ 0x0001|0x0010 ] works without problem but I don't understand what is wrong with my spec files. Another issue that I found is when installing this rpm. It reports that my bacula package requires libbaccats-9.2.0.so()(64bit) but this file is inside rpm so to solve this I must add to my spec file: Provides: libbaccats-9.2.0.so()(64bit) That permit to install my new rpm. How I can solve this 2 issues? Thanks in advance.

1 0

NBDE, clevis and tang for non-root disk
by Radu Radutiu 26 Nov '18

26 Nov '18

Hi, Has anybody managed to get network disk bound disk encryption to work with a non-root disk? It works fine for the root device, but the moment I add another volume to /etc/crypttab the system will no longer boot automatically. A tcpdump on the tang server shows no traffic while the system is stuck at the LUKS password prompt. The second encrypted volume is set up in the same way as the root device and I can unlock the volume using clevis-luks-unlock -d /dev/vda3. I've seen in https://rhelblog.redhat.com/2018/04/13/an-easier-way-to-manage-disk-decrypt… that clevis-luks-askpass.path needs to be enabled but it doesn't make a difference. Any ideas on what 's wrong or how to debug this? Best regards, Radu

1 0

digital signature equipment
by Gregory P. Ennis 26 Nov '18

26 Nov '18

Everyone, I apologize if this is off topic for this list!!!!! I have an application that I need to acquire, store and merge to a pdf file a digital signature from a client. What favorite equipment do some of you use to do this. I contacted the topaz systems support team, and they advised me their equipment produced a proprietary file type, and required me to sign a non-disclosure agreement to do what I was asking to do. I indicated I was willing to proceed, but I have not been able to get them to communicate in follow up. .... probably related to the holidays. I will be using Centos 7.5 Desktop units to acquire the images and send the images to a Centos 7.5 server that will do the storage, and merging work. I have been able to use pdftk to merge previously obtained signatures, but I have not been able to find a piece of equipment that I can use to acquire signatures on the fly and merge them easily to a pdf form file. Any suggestions would be appreciated!!!! Greg Ennis

2 6

Panic / EL6 / KVM / kernel-2.6.32-754.2.1.el6.x86_64
by Leon Fauster 23 Nov '18

23 Nov '18

Since the update from kernel-2.6.32-754.2.1.el6.x86_64 to kernel-2.6.32-754.3.5.el6.x86_64 I can not boot my KVM guests anymore!? The workstation panics immediately! I would not have expected this behavior now (last phase of OS). It was very robust until now (Optiplex Workstation). I see some KVM related lines in the changelog.diff. Before swimming upstream: Does some one have problems related to KVM with kernel-2.6.32-754.3.5.el6.x86_64 ?? -- LF

5 15

Video from the CentOS Dojo at CERN now available
by Rich Bowen 23 Nov '18

23 Nov '18

The videos from the recent #CentOSDojo at #CERN are now available on the CentOS YouTube channel. If you have time for only one, be sure to watch the first video, which talks about the challenges that CERN has with the enormous amount of data they produce every day in the LHC. Also recommended, Fabian's discussion of the coming (and already in place!) changes to the CentOS Git infrastructure. https://www.youtube.com/watch?v=fs8knVCqEj4&list=PLuRtbOXpVDjBVqThWSByt… -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

6 5

Re: [CentOS] CentOS 7 + GNOME : all icon themes broken after update from CR
by Lamar Owen 23 Nov '18

23 Nov '18

I did the update from CR, and have some pretty serious issues. Until I blew away (by mv to a different name) the .local and .config directory trees, I couldn't log in to GNOME at all. After doing that, I can log in, but if I do any actual work, GNOME crashes, and abrt-cli from root in vc 2 tells me that gnome-shell got a SIGSEGV. I figure all of the updates aren't in CR yet, so I'm going to pull out my backup machine and work with it until I see if CR gets more updates. Good thing I've got vacation scheduled for next week!I did quite a few other things in trying to troubleshoot, including attempting a yum distro-sync without CR enabled, which had helped me rollback once before, but not this time. Once I get my backup machine set up I can post better details.

4 5

CentOS 7 + GNOME : all icon themes broken after update from CR
by Nicolas Kovacs 22 Nov '18

22 Nov '18

Hi, I just upgraded one of my CentOS 7 + GNOME desktops from the CR repo. After the upgrade, it seems like all of the icon themes are broken. Missing icons everywhere. Any idea what's going on here ? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

8 10

Re: [CentOS] Upping my game on web work
by mark 22 Nov '18

22 Nov '18

Frank Cox wrote: > On Wed, 21 Nov 2018 09:02:38 -0500 > Robert Moskowitz wrote: > >> What 'simple' web support tools do we have here? > > Libreoffice can create a html page from a word processor document. > > I've done that a few times where I do the basic layout with libreoffice > and then hand-edit the html to fine tune it. But my web pages aren't > usually anything exceptionally fancy. > No word processor produces anything but absolute 100% pure crap HTML. Every single line has every possible option, and a few extras. The one HTML editor I ever tried, Quanta, had the lovely habit of, once you hit ?display", when you went back to editing, it has left justified *every* *line*. I hate to suggest it, but something like WordPress might be what you want, if that's not overkill. mark "my web pages proudly built in vi"

7 7

XPS 13 9370 / CentOS compat
by Leon Fauster 22 Nov '18

22 Nov '18

Anyone with some Dell laptop XPS 13 9370 (2018) experience here? Especially with that "Killer 1435 (802.11ac 2x2 und Bluetooth)" device? Supported by the stock kernel (EL7)? -- Thanks, LF

8 10

Upping my game on web work
by Robert Moskowitz 21 Nov '18

21 Nov '18

Until now, I have been satisfied with hand coding my html for simple, but effective web pages (see http://www.htt-consult.com/) But I want to offer one of our small synagogues some web pages and need a few tools for them to use to compose their pages and upload content. What 'simple' web support tools do we have here? Of course I will be doing this on armhfp,,,

3 3

CentOS-announce Digest, Vol 165, Issue 2
by centos-announce-request＠centos.org 21 Nov '18

21 Nov '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:3531 Important CentOS 6 thunderbird Security Update (Johnny Hughes) 2. CESA-2018:3522 Important CentOS 6 spice-server Security Update (Johnny Hughes) 3. CESA-2018:3409 Important CentOS 6 java-1.7.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 20 Nov 2018 14:48:58 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3531 Important CentOS 6 thunderbird Security Update Message-ID: <20181120144858.GA35009(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3531 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:3531 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: e8ca4520a8c9465a5ea45678f9f94541f76cd486996f53381b6f5a40ac49ceff thunderbird-60.3.0-1.el6.centos.i686.rpm x86_64: 7e4d7511d7534b096278bf20515e47acbe1b5e7bc5c647559668da5b28b87c40 thunderbird-60.3.0-1.el6.centos.x86_64.rpm Source: 6c3bea61f9577cd7952f0046bb92024a0d93561b510511c2305bc0336bd5ff25 thunderbird-60.3.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 20 Nov 2018 14:49:17 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3522 Important CentOS 6 spice-server Security Update Message-ID: <20181120144917.GA35087(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3522 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:3522 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 34166c0a9ec75da17ee7676323117a9a4f2b11dc9f61e4979bcd6e8ee49cfcc4 spice-server-0.12.4-16.el6_10.2.x86_64.rpm c7d8c665b36bc89797a4ea82e6b7ce4b957e296bd37fa961eb14683f40fdd92a spice-server-devel-0.12.4-16.el6_10.2.x86_64.rpm Source: 6c4e1aaf0c23f731463ed4582c7661ca30adf28d6490dad69c1b13764727e12c spice-server-0.12.4-16.el6_10.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Tue, 20 Nov 2018 15:18:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:3409 Important CentOS 6 java-1.7.0-openjdk Security Update Message-ID: <20181120151846.GA43991(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:3409 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:3409 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b6246185d793e0f0a42f5d53838c740f906708d992cdaeac4c700de5fa10e3f6 java-1.7.0-openjdk-1.7.0.201-2.6.16.0.el6_10.i686.rpm 413a7c49ed974cc7cf020b2759645d480fb3a14a8da7198c623204fda989ea03 java-1.7.0-openjdk-demo-1.7.0.201-2.6.16.0.el6_10.i686.rpm 6726b3f1146762b596934818220f0ef2e9185a2c42556a07527695fa88d4329a java-1.7.0-openjdk-devel-1.7.0.201-2.6.16.0.el6_10.i686.rpm e719764f71d46826096cea0f744791b6fd296f934d3f1fabdcc3f18eb270c6a7 java-1.7.0-openjdk-javadoc-1.7.0.201-2.6.16.0.el6_10.noarch.rpm c9bdf2fbc9798a8118d8357603531b726ec9bb63283fa92c64747b64b8047e2c java-1.7.0-openjdk-src-1.7.0.201-2.6.16.0.el6_10.i686.rpm x86_64: 00e8a4fb1210afba25b79ca53d85f5e36fe6e7233836fb9f33ba5e2a7ccb115f java-1.7.0-openjdk-1.7.0.201-2.6.16.0.el6_10.x86_64.rpm a20119fb9bfcf2dd2b990067a5614d77b455f6f51841ceda1af074893ebe4133 java-1.7.0-openjdk-demo-1.7.0.201-2.6.16.0.el6_10.x86_64.rpm bd9a6ad13ad1e425c4795ca0fc6ac9bdeec2086f19d696e1fd06e5fe7bcebd1d java-1.7.0-openjdk-devel-1.7.0.201-2.6.16.0.el6_10.x86_64.rpm e719764f71d46826096cea0f744791b6fd296f934d3f1fabdcc3f18eb270c6a7 java-1.7.0-openjdk-javadoc-1.7.0.201-2.6.16.0.el6_10.noarch.rpm 0472f02ed427c4048c22da0e17a5f7b4d4871237943fb48493cabaf22d7cb03e java-1.7.0-openjdk-src-1.7.0.201-2.6.16.0.el6_10.x86_64.rpm Source: 24b4bf32ae4213ac03e5f5952591b62172cd5f1b7c96fbf15af2407bbc8cd62a java-1.7.0-openjdk-1.7.0.201-2.6.16.0.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 165, Issue 2 ***********************************************

1 0

"Details" on Software Updates app not working
by Kay Schenk 20 Nov '18

20 Nov '18

... and causing me great concern at the moment. I've got a notification of 673 Software updates at the moment. I didn't see anything on this list that indicated that kind of update. Unfortunately, the "Details" option which would normally show me what repo is providing the updates, does not seem to provide any information. Anyone else having this problem? Not happy... :( -- ------------------------------------------ MzK "Less is MORE."

2 2

selinux, sendmail, and disable_ipv6
by mark 20 Nov '18

20 Nov '18

Just started seeing this on one server: python: SELinux is preventing sendmail from read access on the file disable_ipv6. It recommends a local policy. Now, searching, I see someone filed a bug for CentOS last year, 0012914, and they wound up creating a policy. Cmts? Note, btw, that the system has two IPv6 addresses - my manager has fallen for slack. Both valid. mark

1 0

Grettings!
by Glenio Cortes Himmen 20 Nov '18

20 Nov '18

Dear colleagues, I signed up for this list to learn more about CentOS and the language. I ask you to understand me and help me to better understand the language and the system. For most phrases I'm using Google Translate but I've been struggling to read and understand without it. Whats is CDE? This word was written in "Red Hat is Planning To Deprecate KDE on RHEL By 2024". -- Glênio Côrtes Himmen glenio.himmen(a)gmail.com https://www.curriculum.com.br/ucn/p205993-734

4 3

NetworkManager and /etc/resolv.conf
by Alice Wonder 19 Nov '18

19 Nov '18

CentOS 7.5 image running on linode. unbound running on localhost. Have to use a cron job once a minute to keep /etc/resolv.conf using the localhost for name resolution - whenever NetworkManager gets restarted (usually only a system boot) it gets over-written. It seems every distro has a different way of preventing NetworkManager from replacing that file. I found instructions for Fedora that said create /etc/NetworkManager/conf.d/no-dns.conf containing [main] dns=none That doesn't seem to have any effect. Poking around, I find a file on boot seems to be created called /var/run/NetworkManager/resolv.conf It has most of the contents of what ends up in /etc/resolv.conf - except w/o the last line, which just reads rotate in generated /etc/resolv.conf. It says it's generated by NetworkManager (both /etc/resolv.conf and the one in /var/run/NetworkManager) but neither are specific enough to indicate what is causing them to be created so I can turn it off. Anyone know how to tell NetworkManager to just not create that file? Using a cron job to overwrite it once a minute works but there must be a proper way. I really wish KISS was a design goal when designing system configuration.

5 7

touchpad problem
by Fred Smith 18 Nov '18

18 Nov '18

Hi all! I have a new-to-me (i.e., used) laptop and am having a problem making the touchpad behave. It is an old HP Elitebook 8530p, and I THINK it has a synaptics touchpad. But I don't remember how to get more specifics than that on Linux, lspci, lsusb and lshw don't tell me anything helpful. lsmod doesn't list anything containing "syn" or "synaptics". Anyway, I've installed C7 on the laptop and pretty much everything works just as I expect it to, but even though I configure the touchpad for two-finger-scrolling, it simply won't do it. It also won't do edge-scrolling, and it has a mark along the right side of the pad that seemingly implies it should do edge-scrolling. If I could figure out which synaptics touchpad it is I might be able to find out if it does or does not support two-finger scrolling (like both my netbooks do). Can any of you remind me how to find out the Synaptics model it is, and/or figure out if it would be expected (or not) to support two- finger scrolling? Any advice will be appreciated, thanks in advance! Fred -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

2 4

sssd ldap_user_search_base filters with '#' characters in names
by James Pearson 16 Nov '18

16 Nov '18

I'm trying to craft an ldap search filter for use with ldap_user_search_base in sssd.conf which is using Actice Directory (AD) as the back end on CentOS 7 clients The filter looks for users that are memberOf a particular group - however, the group name start with a '#' character - i.e. in AD, the group name is listed as something like '#ABC XYZ' But when I set ldap_user_search_base to something like: ldap_user_search_base = OU=Users,DC=Example,DC=com?subtree?(memberOf=CN=#ABC XYZ,OU=Groups,DC=Example,DC=com) then 'getent passwd user' fails to return anything (for 'user' that is in that group) However, when using the above syntax with a group name that doesn't start with a '#' character, then things work as expected When I use ldapsearch, it reports that the user is a memberOf: memberOf: CN=\#ABC XYZ,OU=Groups,DC=Example,DC=com But using the '\' in sssd.conf for the search filter cause sssd to error with 'Invalid search filter' in the logs Escaping the Escape ('\\') also gives 'Invalid search filter' Does anyone know how to 'escape' special characters in search filters in sssd.conf ? Thanks James Pearson

1 1

Continuous Release (CR) Repository has been released for CentOS Linux 7.6.1810 for X86_64, i386, armhfp, aarch64, power9, ppc64le
by Johnny Hughes 16 Nov '18

16 Nov '18

We have pushed the CR repository for CentOS Linux 7.6.1810 for following architectures: x86_64 i386 armhfp aarch64 power9 ppc64le We are currently still working on the ppc64 / ppc architecture as we are having issues with some of the 32bit ppc mulitlib builds. CR is basically the packages that will update your install from CentOS Linux 7.5.1804 to 7.6.1810, minus the centos-release rpm and the anaconda rpms. What we will do now is take these packages and create the new install tree and install media, then test those and finally release them as the official CentOS 7.6.1810 release. This process typically takes about 2 weeks from the CR release .. at which time CentOS Linux 7.6.1810 becomes the default release. If you would like to try this release early, see the CR information on the CentOS wiki: https://wiki.centos.org/AdditionalResources/Repositories/CR We are also working on the Release Notes for CentOS Linux 7.6.1810 on the wiki .. you can see those here: https://wiki.centos.org/Manuals/ReleaseNotes/CentOS7.1810 Thank You, Johnny Hughes

1 0

Where is centos6.x kernel git repo
by wuzhouhui 16 Nov '18

16 Nov '18

Hi, I following the steps described in https://wiki.centos.org/Sources to get centos7.x kernel repo. But I'm wondering how to get centos6.x kernel repo. Because when checkout branch 'c6' and found that there is nothing. Thanks

2 1

where to download kernel-3.10.0-693.17.6.el7 and kernel-devel-3.10.0-693.17.6.el7
by qw 16 Nov '18

16 Nov '18

Hi, I check the following link : http://vault.centos.org/7.4.1708/updates/x86_64/Packages/, and can't find kernel-3.10.0-693.17.6.el7 and kernel-devel-3.10.0-693.17.6.el7 rpm files. Where can I download the kernel from CentOS website? Thanks! Regards Andrew

3 2

CONFIG_RTC_SYSTOHC not set for CentOS kernels
by Anand Buddhdev 15 Nov '18

15 Nov '18

Hi folks, RHEL 7 documentation says that if either ntp or chrony is running on a system, then it will enable the kernel feature to sync system time to the hardware clock every 11 minutes. This needs the CONFIG_RTC_SYSTOHC option to be set. However, it looks like this option is not set for CentOS kernels: # fgrep CONFIG_RTC_SYSTOHC /boot/config-3.10.0-862.14.4.el7.x86_64 # CONFIG_RTC_SYSTOHC is not set This explains why on some of our servers, the hardware clock is out of sync with the system time. Does anyone know why this option is not enabled for CentOS kernels? Regards, Anand

3 3

'date' format differences between CentOS 6 and 7 using the en_GB locale ?
by James Pearson 15 Nov '18

15 Nov '18

Just noticed that the output of 'date' is different between CentOS 6 and 7 when using the 'en_GB' locale - e.g.: CentOS 6: % LANG=en_GB date Thu Nov 15 11:42:46 GMT 2018 % LANG=en_US date Thu Nov 15 11:42:56 GMT 2018 CentOS 7: % LANG=en_GB date Thu 15 Nov 11:43:07 GMT 2018 % LANG=en_US date Thu Nov 15 11:43:11 GMT 2018 i.e. with LANG=en_GB on CentOS 7, the day and month are swapped when compared with CentOS 6 Any one know why the en_GB locale has changed between CentOS 6 and 7 ? Thanks James Pearson

2 2

CentOS Dojo @ FOSDEM
by Rich Bowen 14 Nov '18

14 Nov '18

We're delighted to announce the schedule, and registration, for the upcoming CentOS Dojo in Brussels, on February 1, 2019, the day before FOSDEM starts. Details are here: https://wiki.centos.org/Events/Dojo/Brussels2019 The schedule is still marked "Tentative" since I have not received confirmation from all of the speakers yet, but we're almost there. Registration is FREE, but we do ask that you register anyways, since it helps us with venue planning and catering. See you in Brussels! -- Rich Bowen - rbowen(a)redhat.com http://centos.org/ - @CentOSProject 859 351 9166

4 4

merging signatures to a pdf file
by Gregory P. Ennis 14 Nov '18

14 Nov '18

Everyone, I am working on a module with the use of pdktk that merges *.fdf data files with a *.pdf file for a filled out pdf form. I have the need to add a signature to the pdf form. Do any of you know of a way to make this happen? Thanks much!!! Greg Ennis

2 2

error creating output file /var/lib/logrotate/logrotate.status.tmp: File exists
by Carlos Lopez 13 Nov '18

13 Nov '18

Hi all, I have configured a specific logrotate task to rotate certain logs every hour and everytime this logrotate's task runs, I am receiving an email like this: Auto-Submitted: auto-generated Precedence: bulk X-Cron-Env: <LANG=en_US.UTF-8> X-Cron-Env: <LC_ALL=en_US.UTF-8> X-Cron-Env: <XDG_SESSION_ID=4502> X-Cron-Env: <XDG_RUNTIME_DIR=/run/user/0> X-Cron-Env: <SHELL=/bin/sh> X-Cron-Env: <HOME=/root> X-Cron-Env: <PATH=/usr/bin:/bin> X-Cron-Env: <LOGNAME=root> X-Cron-Env: <USER=root> Date: Tue, 13 Nov 2018 11:00:04 +0000 (UTC) Status: R error: error creating output file /var/lib/logrotate/logrotate.status.tmp: File exists In Redhat's bugzilla I have seen some reported bugs with the same behavior and apparently is solved with an update. But this CentOS 7 host is fully patched and error persists ... Any idea? Regards, C. L. Martinez

1 0

Firefox Video Capability
by Chris Olson 13 Nov '18

13 Nov '18

One of our summer interns has stayed on during the school year to work some weekends on special projects. This past weekend, her assignment was to trouble shoot problems with Firefox when trying to view various on-line training videos. At some web sites, the video associated with the page will not play and we get the messages shown below. The Download statement is actually a link and was used to download this rpm file: adobe-release-x86_64-1.0-1.noarch.rpm. "Cannot Play Video" "The latest version of Adobe Flash is required to play this video." "Download the free Flash player here." The intern did not install this rpm because doing so outside of yum did not seem like a good idea. We also do not really know how the Adobe Flash utility is called up by Firefox and whether or not the installation would solve the problem or possibly cause other problems. This problem is not happening on our Windows 7 machines, but not everyone here has a Microsoft machine to use. On Windows, the Firefox occasionally updates itself when launched so that might explain the difference. The training videos always do play on Windows 7 systems when the web pages are brought up. We also noticed that on Windows 7 there are no Firefox related processes remaining after closing all Firefox browsers. This is not the case on our CentOS 6 systems as indicated in the output below. Is this video viewing issue a common problem, and if it is, can someone provide some direction to correct it. Thanks. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ [user@computer ~]$ ps -elf | grep firefox 0 S user 3872 1 0 80 0 - 68607 poll_s Nov08 ? 00:00:00 /usr/lib64/firefox/bundled/libexec/at-spi-bus-launcher 0 S user 8178 8149 0 80 0 - 25832 pipe_w 19:42 pts/2 00:00:00 grep firefox [user@computer ~]$

2 1

[infra outage] : unexpected DC issue
by Fabian Arrotin 13 Nov '18

13 Nov '18

Due to a DC outage where some nodes are hosted, the following (public) services provided by the CentOS Infra are currently down/unreachable : - https://bugs.centos.org - https://fr.centos.org After contact with the DC, they're trying to restore services as fast as possible, but seems related to power outage. More info when services will be back online, or that we'll have received status update. -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab

1 0

centos 7.5 crashed, kernel BUG at net/core/skbuff.c:3668!
by wuzhouhui 13 Nov '18

13 Nov '18

... [ 176.025679] random: crng init done [ 411.168635] netem: version 1.3 [ 456.059840] ------------[ cut here ]------------ [ 456.059849] WARNING: CPU: 4 PID: 1918 at net/ipv4/tcp_output.c:1048 tcp_set_skb_tso_segs+0xeb/0x100 [ 456.059851] Modules linked in: sch_netem cirrus ttm drm_kms_helper crc32_pclmul syscopyarea ghash_clmulni_intel sysfillrect sysimgblt fb_sys_fops aesni_intel lrw ppdev gf128mul drm glue_helper ablk_helper cryptd parport_pc parport i2c_piix4 virtio_balloon i2c_core joydev pcspkr ip_tables ext4 mbcache jbd2 ata_generic pata_acpi ata_piix virtio_console virtio_net virtio_blk floppy crct10dif_pclmul virtio_pci crct10dif_common libata serio_raw virtio_ring crc32c_intel virtio [ 456.059886] CPU: 4 PID: 1918 Comm: sshd Kdump: loaded Not tainted 3.10.0-862.14.4.el7.x86_64 #1 [ 456.059887] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2007 [ 456.059890] Call Trace: [ 456.059896] [<ffffffffae913754>] dump_stack+0x19/0x1b [ 456.059901] [<ffffffffae2945d8>] __warn+0xd8/0x100 [ 456.059905] [<ffffffffae29471d>] warn_slowpath_null+0x1d/0x20 [ 456.059908] [<ffffffffae8535eb>] tcp_set_skb_tso_segs+0xeb/0x100 [ 456.059911] [<ffffffffae853637>] tcp_init_tso_segs+0x37/0x50 [ 456.059915] [<ffffffffae8552c1>] tcp_write_xmit+0x1f1/0xd00 [ 456.059918] [<ffffffffae85604e>] __tcp_push_pending_frames+0x2e/0xc0 [ 456.059922] [<ffffffffae8442fc>] tcp_push+0xec/0x120 [ 456.059925] [<ffffffffae847ce2>] tcp_sendmsg+0xd2/0xc80 [ 456.059930] [<ffffffffae8739b9>] inet_sendmsg+0x69/0xb0 [ 456.059935] [<ffffffffae7d084d>] sock_aio_write+0x15d/0x180 [ 456.059940] [<ffffffffae434c11>] ? set_fd_set+0x21/0x30 [ 456.059944] [<ffffffffae41e763>] do_sync_write+0x93/0xe0 [ 456.059948] [<ffffffffae41f345>] vfs_write+0x1c5/0x1f0 [ 456.059953] [<ffffffffae2fc0f0>] ? get_monotonic_boottime+0x50/0x100 [ 456.059956] [<ffffffffae42006f>] SyS_write+0x7f/0xf0 [ 456.059961] [<ffffffffae92579b>] system_call_fastpath+0x22/0x27 [ 456.059963] ---[ end trace 77e1915bd237f005 ]--- [ 728.963668] ------------[ cut here ]------------ [ 728.964320] kernel BUG at net/core/skbuff.c:3668! [ 728.964933] invalid opcode: 0000 [#1] SMP [ 728.965501] Modules linked in: sch_netem cirrus ttm drm_kms_helper crc32_pclmul syscopyarea ghash_clmulni_intel sysfillrect sysimgblt fb_sys_fops aesni_intel lrw ppdev gf128mul drm glue_helper ablk_helper cryptd parport_pc parport i2c_piix4 virtio_balloon i2c_core joydev pcspkr ip_tables ext4 mbcache jbd2 ata_generic pata_acpi ata_piix virtio_console virtio_net virtio_blk floppy crct10dif_pclmul virtio_pci crct10dif_common libata serio_raw virtio_ring crc32c_intel virtio [ 728.971540] CPU: 3 PID: 0 Comm: swapper/3 Kdump: loaded Tainted: G W ------------ 3.10.0-862.14.4.el7.x86_64 #1 [ 728.972981] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2007 [ 728.973723] task: ffff94153bb1cf10 ti: ffff94153bb30000 task.ti: ffff94153bb30000 [ 728.974689] RIP: 0010:[<ffffffffae7df554>] [<ffffffffae7df554>] __skb_to_sgvec+0x1e4/0x280 [ 728.975792] RSP: 0018:ffff941655183cf8 EFLAGS: 00010202 [ 728.976494] RAX: ffff94163c68c700 RBX: 00000000000005a8 RCX: ffff941648bd4ac0 [ 728.977407] RDX: 0000000000000001 RSI: 00000000000005a8 RDI: 00000000000002c0 [ 728.978322] RBP: ffff941655183d38 R08: ffff941653416cf8 R09: fffffe544a34ae00 [ 728.979241] R10: ffff941648bd4800 R11: 000000000000000a R12: 00000000000005ea [ 728.980160] R13: 00000000000005ea R14: 0000000000000000 R15: 0000000000000002 [ 728.981076] FS: 0000000000000000(0000) GS:ffff941655180000(0000) knlGS:0000000000000000 [ 728.982109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.982849] CR2: 00007f7ed4008000 CR3: 0000000289e1a000 CR4: 00000000001406e0 [ 728.983778] Call Trace: [ 728.984107] <IRQ> [ 728.984368] [<ffffffffae7df612>] skb_to_sgvec+0x12/0x30 [ 728.985098] [<ffffffffc00fa4bf>] start_xmit+0x19f/0x500 [virtio_net] [ 728.985925] [<ffffffffae7f02e6>] dev_hard_start_xmit+0x246/0x3b0 [ 728.986741] [<ffffffffae81bc0a>] sch_direct_xmit+0x11a/0x250 [ 728.987489] [<ffffffffae81bdce>] __qdisc_run+0x8e/0x360 [ 728.988182] [<ffffffffae7ef3e6>] net_tx_action+0x1d6/0x240 [ 728.988924] [<ffffffffae29dba5>] __do_softirq+0xf5/0x280 [ 728.989634] [<ffffffffae928cec>] call_softirq+0x1c/0x30 [ 728.990322] [<ffffffffae22e625>] do_softirq+0x65/0xa0 [ 728.990994] [<ffffffffae29df25>] irq_exit+0x105/0x110 [ 728.991680] [<ffffffffae92a088>] smp_apic_timer_interrupt+0x48/0x60 [ 728.992504] [<ffffffffae9267b2>] apic_timer_interrupt+0x162/0x170 [ 728.993298] <EOI> [ 728.993566] [<ffffffffae91ad90>] ? __cpuidle_text_start+0x8/0x8 [ 728.994377] [<ffffffffae91af96>] ? native_safe_halt+0x6/0x10 [ 728.995161] [<ffffffffae91adae>] default_idle+0x1e/0xc0 [ 728.995869] [<ffffffffae2366e3>] arch_cpu_idle+0x23/0xb0 [ 728.996568] [<ffffffffae2f5dea>] cpu_startup_entry+0x14a/0x1e0 [ 728.997330] [<ffffffffae2571b7>] start_secondary+0x1f7/0x270 [ 728.998077] [<ffffffffae2000d5>] start_cpu+0x5/0x14 [ 728.998721] Code: 89 45 c8 e8 3f fe ff ff 44 8b 4d d0 41 01 c7 44 29 cb 74 41 44 8b 55 c4 4c 8b 45 c8 45 01 cd 4d 8b 36 4d 85 f6 75 90 85 db 74 2a <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 48 c7 c7 00 00 00 80 48 2b [ 729.003191] RIP [<ffffffffae7df554>] __skb_to_sgvec+0x1e4/0x280 [ 729.005068] RSP <ffff941655183cf8> Any advice?

1 0

Drop/Terminate data to/from source using firewalld rich rules
by Mike 12 Nov '18

12 Nov '18

I need to be able to temporarily cut off the source of network slowdowns. What I used to do: Router with 2 x NICs running slackware 14. Execute iptraf-ng, choose IP Network Monitor and sort by Byte Count. The sorted screen always seemed a bit confusing but I could usually pluck a couple of IP addresses with racing byte counts and cut all traffic to them using an iptables rule. Then if I wanted to identify the computer or device, I’d go into the dhcpd.leases file and look for the ip address and the corresponding device hostname. It was a bit of a pain, but it worked. Now: Router with 2 x NIC’s running CentOS 7. Using systemd and firewalld with 2 zones: external (internet-facing) and internal (LAN-facing). Now when I try the same thing using firewall-cmd rich rules, it won’t work. Example: [root@hello ~]# firewall-cmd --zone=external --list-rich-rules rule family="ipv4" source address="10.10.1.73/24" drop rule family="ipv4" source address="40.97.126.210" drop rule family="ipv4" source address="10.10.1.73/32" drop rule family="ipv4" source address="40.97.126.210/32" drop and [root@hello ~]# firewall-cmd --zone=internal --list-rich-rules rule family="ipv4" source address="10.10.1.73/24" drop rule family="ipv4" source address="40.97.126.210" drop rule family="ipv4" source address="10.10.1.73/32" drop It didn’t work. The traffic continued to burst away for another hour before stopping. The address (40.97.126.210) belongs to Microsoft so I’m not concerned about publishing it. What am I doing wrong with firewalld rich rules and how do I properly drop/terminate traffic to/from a specific source on the LAN? Current command - ADD rich rule to drop any traffic in zone "internal" from source ip address 10.10.1.125: firewall-cmd --permanent --zone=internal --add-rich-rule='rule family=ipv4 source address=10.10.1.125/24 drop' firewall-cmd --reload REMOVE the same rich rule above: firewall-cmd --permanent --zone=internal --remove-rich-rule='rule family=ipv4 source address=10.10.1.125/24 drop' firewall-cmd --reload Thank you for reading.

1 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss