- Discuss - lists.centos.org

Ubiquiti Model UAP-AC-PRO
by Paul Schoonderwoerd 23 Feb '18

23 Feb '18

>Everyone, > >Have any of you installed ubiguiti wireless routers on your network? > >It looks like the setup requires the use of software; they have some >packages that are ready made for Ubuntu and Debian, but not RedHat > >https://www.ubnt.com/download/unifi/unifi-ap-ac-pro[1] _>_ >Have any of you tried or succeeded in installation this on Centos 7.4? > >Greg Ennis To install just the one access point, just download their app on your phone and configure it. Very easy. For a full Ubiquity network you can install the software on a Linux machine or buy the Cloud key, same software running on a small RaspberryPi like box (needs POE connection). Makes managing the components much much easier. Paul Schoonderwoerd Pollux IT -------- [1] https://www.ubnt.com/download/unifi/unifi-ap-ac-pro

1 0

Cisco AnyConnect Mobility Client for 32- bit CentOS 6
by H 22 Feb '18

22 Feb '18

I have the above installed on a couple of 64-bit systems, both CentOS 6 and CentOS 7, where the client works fine. Now, however, I have installed the 32-bit version of CentOS 6 on a netbook but I cannot get the Cisco website installer to recognize the computer/operating system, not even displaying any error message. Does anyone have the client running on a 32-bit system? I have been told it should run on a 32-bit system and did have it running on the same netbook while it was still running Vista Home edition, another 32-bit operating system.

3 4

CentOS 7 1708 won't boot after grub2 update
by Sorin Srbu 22 Feb '18

22 Feb '18

Hi all, This is the third fresh install of CentOS 7 1708 the last two months that won't boot after a regular "yum update" just after the fresh install has finished. I've never had this problem before, it has just worked. The installs are on OEM's that have previously run CentOS 6.9 x64. Am I missing something here? -- BW, Sorin ----------------------------------------------------------- # Sorin Srbu, Sysadmin # Uppsala University # Dept of Medicinal Chemistry # Div of Org Pharm Chem # Box 574 # SE-75123 Uppsala # Sweden # # Phone: +46 (0)18-4714482 # Visit: BMC, Husargatan 3, B5:404b # Web: http://www.orgfarm.uu.se ----------------------------------------------------------- # O< ASCII ribbon campaign - Against html E-mail # http://tinyurl.com/ascii-ribbon-campaign # # This message was not sent from an iProduct! # # Please consider the environment before printing this email. # Join the campaign at http://thinkBeforePrinting.org # # MotD follows: Do not disturb -- I'm disturbed enough already.

5 12

Problem with ssh disconnecting
by H 22 Feb '18

22 Feb '18

Running CentOS 7 on workstation and having a problem with ssh disconnects. My ssh_config contains: Host * TCPKeepAlive yes ServerAliveInterval 30 ServerAliveCountMax 300 and sshd_config on the server contains: TCPKeepAlive yes ClientAliveInterval 60 ClientAliveCountMax 300 Have I missed any setting needed to prevent these random disconnects? I don't think there is anything wrong with the network card, the driver, or the cable, since if I am on a VPN connection via another server, the VPN and any ssh connection stay up indefinitely. Thanks.

6 11

A question about smb.conf between C6 and c7
by m.roth＠5-cent.us 21 Feb '18

21 Feb '18

Are there any? Will a C 6 conf work under C 7? A pointer to a README would be appreciated on configuration differences, if any. Thanks in advance. mark

1 0

Adding new automount entries to a map served via sssd from AD
by James Pearson 21 Feb '18

21 Feb '18

I've been experimenting with setting up a CentOS 7 client using automount maps from Active Directory via sssd I've followed the instructions given at: https://ovalousek.wordpress.com/2015/08/03/autofs/ and all works fine However, I can't seem to make the client 'see' new map entries added to the map on the AD server - I've tries reducing various timeout settings in /etc/sssd/sssd.conf to see if that helps - e.g. entry_cache_timeout = 60 entry_cache_autofs_timeout = 15 but map entries don't appear at all - unless I run 'sss_cache -A' to invalidate the sssd autofs map caches Does anyone know how to make new map entries appear automagically ? Thanks James Pearson

1 1

is the centos wiki "Additional Resources/Repositories" page reasonably up to date?
by Robert P. J. Day 21 Feb '18

21 Feb '18

(apologies for what will be some upcoming trivial questions, but i'm jumping back into centos after years and years of living with fedora, so i'm feeling fairly comfortable, just the occasional centos-specific question.) is the wiki repos page fairly up to date? https://wiki.centos.org/AdditionalResources/Repositories i ask since i note that its last edit was 2017-06-25, and things might have changed in the last several months. rday

1 0

are there reference lists/cheat sheets for categorized commands?
by Robert P. J. Day 21 Feb '18

21 Feb '18

prepping to teach a 5-day CompTIA linux+ course next week with CompTIA-supplied courseware and, given that it was my choice, i chose to set up the classroom with centos 7.4 on all the student systems since i assume most students are there to learn sysadmin and that's the most likely platform they'll have when they get back to work. also, most students are taking this course to prep for the subsequent LPI exams to get their certification, which plays into my question. while the C/W is not bad, it's awfully verbose, and it would be handy if there were concise cheat sheets of commands/files related to the standard sysadmin they'll be expected to answer questions on. as an example, regarding user/group management, i'm collecting all of the relevant commands that they need to know about, in the sense of, "if you understand these commands, you should be fine." regarding user/group admin, my tentative list of commands would be: * user{add,mod,del} * group(add,mod,del} * passwd, gpasswd * chage, chsh, chfn * pwck, grpck * pwconv, pwunconv not sure what i'm missing here, i just typed those off the top of my head. rather than scatter all of that over an entire chapter, are there any official centos/rhel reference sheets like that? if not, i can just write my own and post them at my wiki. thanks for any pointers. rday -- ======================================================================== Robert P. J. Day Ottawa, Ontario, CANADA http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

2 1

OpenShift Origin Install
by Antonio da Silva Martins Junior 20 Feb '18

20 Feb '18

Hi, I'm trying to install OpenShift Origin on a CentOS 7 host (just for initial testing), and I'm trying to follow the instructions from here: https://wiki.centos.org/SpecialInterestGroup/PaaS/OpenShift-Quickstart On that page we need to run: "atomic-openshift-installer install" to configure OpenShift... after run the script it throws this errors: Failure summary: 1. Hosts: c7-oc-master Play: OpenShift Health Checks Task: Run health checks (install) - EL Message: One or more checks failed Details: check "docker_image_availability": One or more required container images are not available: openshift3/ose-deployer:v3.7.0, openshift3/ose-docker-registry:v3.7.0, openshift3/ose-haproxy-router:v3.7.0, openshift3/ose-pod:v3.7.0, openshift3/registry-console:v3.7 Checked with: skopeo inspect [--tls-verify=false] [--creds=<user>:<pass>] docker://<registry>/<image> Default registries searched: registry.access.redhat.com check "package_availability": Cannot install all of the necessary packages. Unavailable: atomic-openshift atomic-openshift-clients atomic-openshift-master atomic-openshift-node atomic-openshift-sdn-ovs You may need to enable one or more yum repositories to make this content available. My problem is with the "atomic-openshift" packages it can't find... they are necessary? I can't find it anywhere! Thanks, Antonio. -- *Antonio da Silva Martins Jr. * *Analista de Suporte* NPD - Núcleo de Processamento de Dados UEM - Universidade Estadual de Maringá email: *asmartins(a)uem.br* <asmartins(a)uem.br> / asmartins.uem(a)gmail.com fone: +55 (44) 3011-4015 / 3011-4411 inoc-dba: 263076*100 "Real Programmers don’t need comments — the code is obvious."

2 2

CentOS-announce Digest, Vol 156, Issue 2
by centos-announce-request＠centos.org 20 Feb '18

20 Feb '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. [Infra] - planned outage : bugs.centos.org (Bug Tracker) (Fabian Arrotin) ---------------------------------------------------------------------- Message: 1 Date: Mon, 19 Feb 2018 14:30:21 +0100 From: Fabian Arrotin <arrfab(a)centos.org> To: "The CentOS developers mailing list." <centos-devel(a)centos.org>, centos-announce(a)centos.org Subject: [CentOS-announce] [Infra] - planned outage : bugs.centos.org (Bug Tracker) Message-ID: <efbf1d79-d56f-dc27-0f69-b97fac07c989(a)centos.org> Content-Type: text/plain; charset="utf-8" This notification to let you know that we'll migrate our https://bugs.centos.org bug tracker service to a different node, and also updated to a new version of MantisBT (version 2.x) This migration will give us more possibilities, including soon trying to get SSO working even on our bug tracker (that part still need to be done though) Migration is scheduled for """"Tuesday February 20th, 8:00 am UTC time"""". You can convert to local time with $(date -d '2018-2-20 8:00 UTC') The expected "downtime" is estimated to ~10 minutes , time needed to update/propagate updated dns A/AAAA records + last mysql dump/restore on the new node. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab

1 0

Pulse Secure/Juniper Networks Network Connect (CentOS 7)
by Toralf Lund 19 Feb '18

19 Feb '18

Hi, Is anyone here using the "Network Connect" VPN software from Pulse Secure (which was previously known as Juniper Networks Network Connect)? I've used this successfully in the past to connect to the machines at work from home. That was with CentOS 6, though, on CentOS 7 I can't seem to get it to work. The software actually starts, and it also successfully sets up a "tun" type network device with an IP address, but I can't reach anything across the connection. In fact, even resources outside VPN/the company network become unreachable. Does anyone have any idea what may be wrong? Output from /sbin/ifconfig as well as /sbin/route from a typical session are included below. Thanks. - Toralf -- enp0s31f6: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500 ether c8:5b:76:f7:d1:9c txqueuelen 1000 (Ethernet) RX packets 6523788 bytes 5286956088 (4.9 GiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1417201 bytes 209955717 (200.2 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 16 memory 0xf1200000-f1220000 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 1 (Local Loopback) RX packets 487991 bytes 165475903 (157.8 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 487991 bytes 165475903 (157.8 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1400 inet 10.30.250.90 netmask 255.255.255.255 destination 10.30.250.90 inet6 fe80::1ddf:c174:c72c:81e prefixlen 64 scopeid 0x20<link> unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 500 (UNSPEC) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1 bytes 48 (48.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.130.123 netmask 255.255.255.0 broadcast 192.168.130.255 inet6 fe80::ed8f:66bd:4f45:f3e4 prefixlen 64 scopeid 0x20<link> ether 14:ab:c5:06:57:c0 txqueuelen 1000 (Ethernet) RX packets 34172 bytes 33693984 (32.1 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 24197 bytes 5277607 (5.0 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default osl-97214 0.0.0.0 UG 1 0 0 tun0 default Zhone.Home 0.0.0.0 UG 600 0 0 wlan0 192.168.130.0 0.0.0.0 255.255.255.0 U 600 0 0 wlan0 Zhone.Home 0.0.0.0 255.255.255.255 UH 1 0 0 wlan0 remote.pgs.com Zhone.Home 255.255.255.255 UGH 1 0 0 wlan0

1 0

Is CentOS Linux protected against the Meltdown and Spectre security flaws?
by Turritopsis Dohrnii Teo En Ming 19 Feb '18

19 Feb '18

What are the patches that I can download and install to be protected against the Meltdown and Spectre security vulnerabilities? ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ [2] http://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming ===END SIGNATURE===

3 2

Install CentOS 7 on MBR hard disk
by Yves Bellefeuille 17 Feb '18

17 Feb '18

I have a UEFI system, but I want to install CentOS on a MBR (not GPT) hard disk. The installation program keeps telling me that I must create an "EFI system partition on a GPT disk mounted at /boot/efi". I can't find a way to work around this. Is there a solution? -- Yves Bellefeuille <yan(a)storm.ca>

6 17

iptables routing question when using multiple IP addresses
by Ken Gramm 16 Feb '18

16 Feb '18

I've been searching around for a couple of days, and I just can't seem to find the answer I'm looking for. I have a 6.x box that I use as my gateway firewall. It has three NICs; 1 external, 1 internal, 1 for a guest network. I have various inbound traffic routed to separate internal machines based on the application (ie. http, smtp, ftp, etc....). All works well, but I'd like to add a second IP address to the external NIC and then route a second https stream to a different internal machine. So https traffic on one IP address goes to one internal machine and https traffic on a second IP address goes to a different internal machine. Seems like it should be an everyday configuration, but I can't find any clear examples on how to do it. Could someone please point me in the right direction? Thanks, Ken Gramm

2 1

Percentage of CentOS coded in each language
by Blake Hudson 16 Feb '18

16 Feb '18

Had a curious question about how much of Linux (as a usable distribution, not just the kernel) is coded in each language. I can find some older or vague references without citation that Linux is largely coded in C and C++, with a fraction of a percent coded in other languages. While the source is available, I'm not sure how would one go about determining the percentage of CentOS coded in each language (either by lines of source code or by RPM package). Anyone have any suggestions for determining this info? Someone already have the answer? Thanks, --B

3 2

CentOs7 and devtoolset-7 and libgcc_s.so.1 library question
by ToD In 16 Feb '18

16 Feb '18

I'm looking for the library from subject. It is present in system gcc (4.8.5) but I cannot see it in devtoolset-7. Could You please tell me why is it so?

1 0

CentOS7 1801-01 cloud images
by Pierre Riteau 15 Feb '18

15 Feb '18

Hello, There is a new cloud image versioned as 1801-01 available at https://cloud.centos.org/centos/7/images/ However, it is missing from the image-index file. I noticed the Azure version is also absent. Was there a problem with the image build process? Should this image be used? Thanks, Pierre Riteau Chameleon Lead DevOps Engineer https://www.chameleoncloud.org

2 1

FOSDEM Dojo update, videos
by Rich Bowen 14 Feb '18

14 Feb '18

A big thank you to everyone who attended the CentOS Dojo in Brussels a week ago. We had about 75 people in attendance (101 registered) and we had two tracks of great presentations. If you did not make it to the event, you can still catch all of the presentations on our YouTube channel, at https://www.youtube.com/user/TheCentOSProject/playlists Unfortunately, you miss out on the great hallway track, but there's always next year! Meanwhile, keep a lookout for upcoming events - http://wiki.centos.org/Events - and try to attend a dojo near you in the coming months. And if you'd like to host or help organize a dojo, please get in touch with me, or with the centos-promo mailing list - centos-promo(a)centos.org - with your suggestions, and we'll try to make it happen. --Rich -- Rich Bowen - rbowen(a)redhat.com @RDOcommunity // @CentOSProject // @rbowen

2 2

kmod c74 broken: howto report it
by Stijn De Weirdt 14 Feb '18

14 Feb '18

hi all, latest kmod update 20-15.el7_4.6 is broken on our systems, while previous 20-15.el7_4.4 was working fine (and downgrading fixes the issue). the issue is with modules from mellanox kmod rpms that are symlinked in the weak-updates dir. the config files in /etc/depmod.d look ok (and do work with previous version): dist.conf has weak-updates after built-in, and mellanox kmod rpms ship a config that overrides it for all modules. anyhow, before i try to get this upstream, how do i report this with centos team (to make sure the centos kmod rpm was correctly build). (i have already asked here before how to properly report it, but can't find my previous mail ;) stijn

3 4

Re: [CentOS] CentOS 6: Yum downloadonly changes local source repositories (and CentOS 7)
by Danny Smit 14 Feb '18

14 Feb '18

For what its worth, I managed to get around the problem with a small patch on yum itself: --- ORIG/usr/lib/python2.6/site-packages/yum/yumRepo.py 2017-03-22 05:32:26.000000000 +0000 +++ NEW/usr/lib/python2.6/site-packages/yum/yumRepo.py 2018-02-14 09:14:04.879902463 +0000 @@ -863,6 +863,7 @@ class YumRepository(Repository, config.R text=text, cache=cache, size=package.size, + copy_local=1, ) def getHeader(self, package, checkfunc = None, reget = 'simple', Although newer versions of yum do not rename the local package anymore, it still does not copy/download the package into the desired "downloaddir". I will try to report that upstream. Regards, Danny On Tue, Feb 13, 2018 at 6:05 PM, Danny Smit <danny.smit.0(a)gmail.com> wrote: > Hi All, > > I'm trying to use yum with the downloadonly option to collect a set of > packages including dependencies. I noticed that even on CentOS 6 the > downloadonly option is currently a default feature of the core of yum > itself, which is nice. > > However something strange occurs when one of the repositories to > download from is a local repository, like: > > [custom-repo] > name=My custom repo > baseurl=file:///repositories/mycustomrepo/ > > I added such a repo to my yum configuration and then executed: > > yum install -y --downloadonly --downloaddir=downloads custom_package > > When executing the above the package in question is suddenly renamed from: > > /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6.x86_64.rpm > > to > > /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6 > > Note that the architecture part and file extension are removed with > the file in the local repo, where I wouldn't expect yum to even try to > change something there. > Also nothing is downloaded into the downloads dir as specified. > > Strangely when it concerns a package that comes from a repository that > is configured as an http URL, the download option works flawlessly. > > Has anyone else seen this behavior? Is it a bug? Or is there a way around this? > Actually I would even prefer not having to run yum as root for this, > unfortunately yum to require write access to lock files in /var/. > > Platform: CentOS 6.9 (also not working with CentOS 7, then it keeps > the file intact, but doesn't download either) > Yum: 3.2.29-81.el6.centos > > Kind regards, > Danny

1 0

selinux policy with rsyslog and tls/certs
by John Ratliff 13 Feb '18

13 Feb '18

I've setup my rsyslog server to forward traffic to another rsyslog server on my network. It's using gTLS to encrypt the messages in transit. selinux is not allowing rsyslogd to read the certificates. They are world readable, so I don't think that is the problem. When I turn selinux mode to permissive, it works fine. What context should the ssl certificates be in for rsyslog to be able to read them? thanks.

1 1

Two MACs for one IP
by m.roth＠5-cent.us 13 Feb '18

13 Feb '18

The reason I want to assign one IP to two MAC addresses is that I have one (and only one) user for whom I have to spoof the MAC address (it's a case of stupid software licensing). But... his system is encrypted. Now, we're using clevis to allow reboots without someone being at the keyboard to type in the password. Those of you who've looked at clevis see where this is going: clevis uses the *real* firmware MAC address to get the key from the latchset server... while currently, the dhcpd *only* knows the spoofed MAC address. After the system's unlocked, it boots, and comes up with the spoofed MAC address. It *appears* I can do this, but I thought I'd ask here if there were any issues that dhcpd itself would have if I do. mark

1 0

CentOS 6: Yum downloadonly changes local source repositories
by Danny Smit 13 Feb '18

13 Feb '18

Hi All, I'm trying to use yum with the downloadonly option to collect a set of packages including dependencies. I noticed that even on CentOS 6 the downloadonly option is currently a default feature of the core of yum itself, which is nice. However something strange occurs when one of the repositories to download from is a local repository, like: [custom-repo] name=My custom repo baseurl=file:///repositories/mycustomrepo/ I added such a repo to my yum configuration and then executed: yum install -y --downloadonly --downloaddir=downloads custom_package When executing the above the package in question is suddenly renamed from: /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6.x86_64.rpm to /repositories/mycustomrepo/x86_64/custom_package-1.1-2.el6 Note that the architecture part and file extension are removed with the file in the local repo, where I wouldn't expect yum to even try to change something there. Also nothing is downloaded into the downloads dir as specified. Strangely when it concerns a package that comes from a repository that is configured as an http URL, the download option works flawlessly. Has anyone else seen this behavior? Is it a bug? Or is there a way around this? Actually I would even prefer not having to run yum as root for this, unfortunately yum to require write access to lock files in /var/. Platform: CentOS 6.9 (also not working with CentOS 7, then it keeps the file intact, but doesn't download either) Yum: 3.2.29-81.el6.centos Kind regards, Danny

1 0

Unbound question: forward-zone and stub-zone
by C. L. Martinez 13 Feb '18

13 Feb '18

Hi all, I have a strange case with unbound ... I have defined a stub-zone to query to a secondary DNS server: stub-zone: name: "mydomain.org" stub-addr: 172.22.54.4 stub-zone: name: "54.22.172.in-addr.arpa." stub-addr: 172.22.54.4 ... but it doesn't works: any hostname or IP address is resolved. But if I use "forward": forward-zone: name: "mydomain.org" forward-addr: 172.22.54.4 forward-zone: name: "54.22.172.in-addr.arpa." forward-addr: 172.22.54.4 all works ok. Then, which is the real difference between stub and forward zones? According to unbound's man page, stub-zone is used for authority servers, which is my case. But forward zones are valid for not authority servers. On the other side: "unbound performs the recursive processing itself for stub zones." ¿¿¿??? How?? Why?? If I use a stub-zone, it is because I have an authority server with recursion for its SOA domain ... I don't understand ... What is the correct configuration? -- Greetings, C. L. Martinez

1 0

Not able to sync mirror of Centos7 due to CRC checksum errors
by Soham Chakraborty 13 Feb '18

13 Feb '18

Hi, yesterday I was trying to create local mirror of CentOS7 using katello/pulp. I was receiving CRC checksum errors while attempting to sync the mirror. The particular error in question was: Feb 12 07:46:34 bazinga pulp: pulp_rpm.plugins.importers.yum.sync:INFO: [e2cd9930] Generating metadata databases. Feb 12 07:47:06 bazinga pulp: pulp_rpm.plugins.importers.yum.sync:ERROR: [e2cd9930] (23897-68256) CRC check failed 0x0 != 0xd61ac297L The full logs are available here: https://paste.fedoraproject.org/paste/lPnjaCFD6c~e22FtTedEKA I was under the impression that maybe somethinig is broken with katello/pulp and didn't pursue it further. Today, I attempted to sync it again with standalone pulp server (without katello/foreman/candlepin bits) and it failed again with same error. I tried a different mirror location as well, but received the same CRC check error: https://paste.fedoraproject.org/paste/O1ocILrTMEWkKDohOmXcaQ Then to test whether this is a problem with pulp or the upstream mirror, I decided to try to sync the CentOS6 repository from the same mirror and so far it is working. Can someone please tell me whether there could be any repodata corruption on the upstream repositories (as unlikely as it sounds)? Or anything which could prevent me from syncing the mirrors for internal consumption? Pulp installation is default as per https://docs.pulpproject.org/en/2.14/user-guide/installation/f23-.html Any thoughts? I am testing this on the 'generic/centos7' vagrant box. Thanks, -- Soham Chakraborty, Systems Administrator - EIS Pythian - Love your data chakraborty(a)pythian.com -- --

1 0

A question about NBD kernel module...
by Raghuram Devarakonda 12 Feb '18

12 Feb '18

Hi, I would like to mount a device using NBD protocol on CentOS 7 but it looks like the module is not available by default in the kernel. Is there a way I can install it (like from a rpm somewhere)? I found instructions to build such a module but want to make sure that it is not already available in some repo before I go ahead with building. Any help is greatly appreciated. Thanks, Raghu

2 1

libsmbclient conflict problem
by me＠tdiehl.org 12 Feb '18

12 Feb '18

Hi, I have a c-6 machine that I noticed the following on: (bugs pts10) # package-cleanup --problems Loaded plugins: fastestmirror, priorities, refresh-packagekit Package system-config-printer-libs-1.1.16-26.el6.x86_64 requires libsmbclient.so.0()(64bit) Package kdebase-runtime-libs-4.3.4-9.el6.x86_64 requires libsmbclient.so.0()(64bit) So then I ran: (bugs pts10) # yum install libsmbclient Loaded plugins: changelog, fastestmirror, priorities, refresh-packagekit Setting up Install Process Loading mirror speeds from cached hostfile * base: yumrepo * extras: yumrepo * fasttrack: yumrepo * remi: mirror.team-cymru.org * remi-php56: mirror.team-cymru.org * updates: yumrepo 138 packages excluded due to repository priority protections Resolving Dependencies --> Running transaction check ---> Package libsmbclient.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Dependency: samba-winbind-clients = 3.6.23-46el6_9 for package: libsmbclient-3.6.23-46el6_9.x86_64 --> Processing Dependency: libwbclient.so.0()(64bit) for package: libsmbclient-3.6.23-46el6_9.x86_64 --> Running transaction check ---> Package samba-winbind-clients.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Dependency: samba-winbind = 3.6.23-46el6_9 for package: samba-winbind-clients-3.6.23-46el6_9.x86_64 --> Running transaction check ---> Package samba-winbind.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Dependency: samba-common = 3.6.23-46el6_9 for package: samba-winbind-3.6.23-46el6_9.x86_64 --> Running transaction check ---> Package samba-common.x86_64 0:3.6.23-46el6_9 will be installed --> Processing Conflict: samba4-common-4.2.10-12.el6_9.x86_64 conflicts samba-common < 3.9.9 --> Processing Conflict: samba4-winbind-4.2.10-12.el6_9.x86_64 conflicts samba-winbind < 3.9.9 --> Processing Conflict: samba4-winbind-clients-4.2.10-12.el6_9.x86_64 conflicts samba-winbind-clients < 3.9.9 --> Finished Dependency Resolution --> Finding unneeded leftover dependencies Found and removing 0 unneeded dependencies Error: samba4-winbind conflicts with samba-winbind-3.6.23-46el6_9.x86_64 Error: samba4-winbind-clients conflicts with samba-winbind-clients-3.6.23-46el6_9.x86_64 Error: samba4-common conflicts with samba-common-3.6.23-46el6_9.x86_64 You could try using --skip-broken to work around the problem ** Found 2 pre-existing rpmdb problem(s), 'yum check' output follows: kdebase-runtime-libs-4.3.4-9.el6.x86_64 has missing requires of libsmbclient.so.0()(64bit) system-config-printer-libs-1.1.16-26.el6.x86_64 has missing requires of libsmbclient.so.0()(64bit) (bugs pts10) # I have the following samba packages installed: (bugs pts10) # rpm -qa samba4\* samba4-winbind-clients-4.2.10-12.el6_9.x86_64 samba4-4.2.10-12.el6_9.x86_64 samba4-client-4.2.10-12.el6_9.x86_64 samba4-common-4.2.10-12.el6_9.x86_64 samba4-winbind-4.2.10-12.el6_9.x86_64 samba4-libs-4.2.10-12.el6_9.x86_64 (bugs pts10) Can someone tell me what what I need to do to resolve the above conflicts? There does not seem to be a later version of libsmbclient available. Regards, -- Tom me(a)tdiehl.org

3 5

Meltdown and Spectre
by isdtor 12 Feb '18

12 Feb '18

Does anyone know if Red Hat are working on backporting improved mitigation techniques and features from newer, 4.14.14+ kernels? $ grep . /sys/devices/system/cpu/vulnerabilities/* /sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI /sys/devices/system/cpu/vulnerabilities/spectre_v1:Vulnerable /sys/devices/system/cpu/vulnerabilities/spectre_v2:Vulnerable: Minimal generic ASM retpoline $

2 1

CentOS 7 Cloud 16.0.4 Nova Security Update
by Henry Spanka 10 Feb '18

10 Feb '18

Hello, A security issue has been found in Nova 16.0.3 and a fix has been released in December, however I haven’t seen Nova 16.0.4 in the Cloud repositories yet. Is someone working on updating the nova packages? The issue allows users to consume all resources on a host which leads to a denial of service. See: https://docs.openstack.org/releasenotes/nova/pike.html <https://docs.openstack.org/releasenotes/nova/pike.html> Vulnerability ID: OSSA-2017-006 ----------------------------------------------------------------------------------------- Mit freundlichen Grüßen / With best regards Henry Spanka — myVirtualserver — Development Team GPG: 8BA3 14FE 3973 9E17 1D9E ADAE CEAB DAB5 5B47 0BC8

1 0

Issues with NVidia video driver and CentOS
by Felipe Westfields 09 Feb '18

09 Feb '18

I'm having issues with a quad video card on CentOS. We have several systems on CentOS 6.8 and CentOS 6.9. The installed hardware is: Video card - Nvidia NVS quadro 440 PC - Dell OptiPlex 9020 Whenever you update the kernel, it kills the graphical interface. The system appears to lock up and freeze during a reboot, but you can still get into it with SSH, or, if you're at the console, control-alt-F2 gets you to a command prompt. If you exclude the kernel update when applying yum update, it is usually fine. If the kernel update is applied, and you roll back the update, that sometimes gets you back into the graphical console, but more likely than not, it won't. Not sure where to go with this. Any suggestions? FW

6 12

Adjust type of rw in submit_bio from int to unsigned long
by wuzhouhui 09 Feb '18

09 Feb '18

Hi, I am a developer who worked on CentOS. Recently I am working on porting one of my block drivers from CentOS 6.x to CentOS 7.x. In newest kernel (kernel-3.10.0-693.17.1.el7) I found there is an issue in submit_bio()'s first argument: void submit_bio(int rw, struct bio *bio) The type of bi_rw of struct bio is unsigned long, and the number of enum rq_flags_bits also exceeds 32, so we should better using unsigned long for rw in submit_bio(), like: void submit_bio(unsigned long rw, struct bio *bio)

1 1

OT: configuring xming to know putty's not in a std. location
by m.roth＠5-cent.us 08 Feb '18

08 Feb '18

Is there some way to do this? I've got the current putty (actually, putty-cac), pageant, and plink in my user's Downlods directory - neither he nor I have admin authority on his laptop, and Desktop support's teleworking today - but I can't seem to find a way to configure xming to look there for putty. Or is it start putty, *then* start xming? mark

5 5

OT - pushing database updates to web browser
by Gary Stainburn 07 Feb '18

07 Feb '18

This is O/T apart from the fact that the server is Centos running Apache / Postgresql. I want to develop a real time (ish) dashboard type web page showring extracts of the contents of a table. I would like any changes that occur to be pushed to the web clients rather than have the clients poll the database. Based on the fact that I have not managed to come up with a successful Google search phrase I think this may not be possible, but just in case I thought I'd ask here. If it's not possible, can anyone suggest the most efficient / responsive polling techniques?

3 3

/dev/md1 => 93% Used. Warning. Disk Filling up. - what would be safe to delete in /boot ?
by Alexander Farber 07 Feb '18

07 Feb '18

Hello CentOS users, in the recent time I keep getting the logwatch warnings from my 2 dedicated servers running CentOS 7.4.1708. I guess because of the numerous kernel updates (because of Spectre+Meltdown) in the near past? Could someone please suggest me, which files in my /boot partition would be safe to delete? I would like to avoid the situation of having to boot the rescue partiton etc. remotely... and at the same time I am not proficient with grub or whatever my provider has configured my dedicated hosts to use... # ls -al /boot total 427877 dr-xr-xr-x. 6 root root 6144 28. Jan 10:33 . dr-xr-xr-x 18 root root 4096 7. Feb 03:34 .. -rw-r--r-- 1 root root 140899 5. Dez 01:04 config-3.10.0-693.11.1.el7.x86_64 -rw-r--r-- 1 root root 140915 4. Jan 02:19 config-3.10.0-693.11.6.el7.x86_64 -rw-r--r-- 1 root root 140915 25. Jan 21:26 config-3.10.0-693.17.1.el7.x86_64 -rw-r--r-- 1 root root 140898 13. Sep 00:38 config-3.10.0-693.2.2.el7.x86_64 -rw-r--r-- 1 root root 140898 20. Okt 22:56 config-3.10.0-693.5.2.el7.x86_64 drwxr-xr-x 3 root root 1024 15. Sep 09:43 efi drwxr-xr-x. 2 root root 1024 11. Apr 2016 grub drwx------. 5 root root 1024 28. Jan 10:31 grub2 -rw-r--r--. 1 root root 40142116 15. Dez 2015 initramfs-0-rescue-34946d7b5edb0946bfb52c0f6cae67af.img -rw------- 1 root root 50402914 6. Dez 09:23 initramfs-3.10.0-693.11.1.el7.x86_64.img -rw------- 1 root root 18149718 6. Dez 09:24 initramfs-3.10.0-693.11.1.el7.x86_64kdump.img -rw------- 1 root root 50405879 5. Jan 09:02 initramfs-3.10.0-693.11.6.el7.x86_64.img -rw------- 1 root root 18150336 5. Jan 09:04 initramfs-3.10.0-693.11.6.el7.x86_64kdump.img -rw------- 1 root root 50402830 28. Jan 10:31 initramfs-3.10.0-693.17.1.el7.x86_64.img -rw------- 1 root root 18147918 28. Jan 10:33 initramfs-3.10.0-693.17.1.el7.x86_64kdump.img -rw------- 1 root root 50341850 15. Sep 09:45 initramfs-3.10.0-693.2.2.el7.x86_64.img -rw------- 1 root root 18147818 22. Okt 10:07 initramfs-3.10.0-693.2.2.el7.x86_64kdump.img -rw------- 1 root root 50393743 24. Okt 09:39 initramfs-3.10.0-693.5.2.el7.x86_64.img -rw------- 1 root root 18146720 24. Okt 09:40 initramfs-3.10.0-693.5.2.el7.x86_64kdump.img -rw-r--r--. 1 root root 611928 15. Sep 09:45 initrd-plymouth.img drwx------ 2 root root 12288 25. Mai 2016 lost+found -rw-r--r-- 1 root root 293093 5. Dez 01:07 symvers-3.10.0-693.11.1.el7.x86_64.gz -rw-r--r-- 1 root root 293110 4. Jan 02:21 symvers-3.10.0-693.11.6.el7.x86_64.gz -rw-r--r-- 1 root root 293109 25. Jan 21:28 symvers-3.10.0-693.17.1.el7.x86_64.gz -rw-r--r-- 1 root root 293064 13. Sep 00:40 symvers-3.10.0-693.2.2.el7.x86_64.gz -rw-r--r-- 1 root root 293084 20. Okt 22:59 symvers-3.10.0-693.5.2.el7.x86_64.gz -rw------- 1 root root 3228852 5. Dez 01:04 System.map-3.10.0-693.11.1.el7.x86_64 -rw------- 1 root root 3232490 4. Jan 02:19 System.map-3.10.0-693.11.6.el7.x86_64 -rw------- 1 root root 3232454 25. Jan 21:26 System.map-3.10.0-693.17.1.el7.x86_64 -rw------- 1 root root 3228852 13. Sep 00:38 System.map-3.10.0-693.2.2.el7.x86_64 -rw------- 1 root root 3228852 20. Okt 22:56 System.map-3.10.0-693.5.2.el7.x86_64 -rwxr-xr-x. 1 root root 5156528 15. Dez 2015 vmlinuz-0-rescue-34946d7b5edb0946bfb52c0f6cae67af -rwxr-xr-x 1 root root 5877504 5. Dez 01:05 vmlinuz-3.10.0-693.11.1.el7.x86_64 -rw-r--r-- 1 root root 171 5. Dez 01:05 .vmlinuz-3.10.0-693.11.1.el7.x86_64.hmac -rwxr-xr-x 1 root root 5889728 4. Jan 02:19 vmlinuz-3.10.0-693.11.6.el7.x86_64 -rw-r--r-- 1 root root 171 4. Jan 02:19 .vmlinuz-3.10.0-693.11.6.el7.x86_64.hmac -rwxr-xr-x 1 root root 5890720 25. Jan 21:26 vmlinuz-3.10.0-693.17.1.el7.x86_64 -rw-r--r-- 1 root root 171 25. Jan 21:26 .vmlinuz-3.10.0-693.17.1.el7.x86_64.hmac -rwxr-xr-x 1 root root 5878848 13. Sep 00:38 vmlinuz-3.10.0-693.2.2.el7.x86_64 -rw-r--r-- 1 root root 170 13. Sep 00:38 .vmlinuz-3.10.0-693.2.2.el7.x86_64.hmac -rwxr-xr-x 1 root root 5878368 20. Okt 22:56 vmlinuz-3.10.0-693.5.2.el7.x86_64 -rw-r--r-- 1 root root 170 20. Okt 22:56 .vmlinuz-3.10.0-693.5.2.el7.x86_64.hmac # cat /etc/grub2.cfg # # DO NOT EDIT THIS FILE # # It is automatically generated by grub2-mkconfig using templates # from /etc/grub.d and settings from /etc/default/grub # ### BEGIN /etc/grub.d/00_header ### set pager=1 if [ -s $prefix/grubenv ]; then load_env fi if [ "${next_entry}" ] ; then set default="${next_entry}" set next_entry= save_env next_entry set boot_once=true else set default="${saved_entry}" fi if [ x"${feature_menuentry_id}" = xy ]; then menuentry_id_option="--id" else menuentry_id_option="" fi export menuentry_id_option if [ "${prev_saved_entry}" ]; then set saved_entry="${prev_saved_entry}" save_env saved_entry set prev_saved_entry= save_env prev_saved_entry set boot_once=true fi function savedefault { if [ -z "${boot_once}" ]; then saved_entry="${chosen}" save_env saved_entry fi } function load_video { if [ x$feature_all_video_module = xy ]; then insmod all_video else insmod efi_gop insmod efi_uga insmod ieee1275_fb insmod vbe insmod vga insmod video_bochs insmod video_cirrus fi } terminal_output console if [ x$feature_timeout_style = xy ] ; then set timeout_style=menu set timeout=5 # Fallback normal timeout code in case the timeout_style feature is # unavailable. else set timeout=5 fi ### END /etc/grub.d/00_header ### ### BEGIN /etc/grub.d/00_tuned ### set tuned_params="" ### END /etc/grub.d/00_tuned ### ### BEGIN /etc/grub.d/01_users ### if [ -f ${prefix}/user.cfg ]; then source ${prefix}/user.cfg if [ -n "${GRUB2_PASSWORD}" ]; then set superusers="root" export superusers password_pbkdf2 root ${GRUB2_PASSWORD} fi fi ### END /etc/grub.d/01_users ### ### BEGIN /etc/grub.d/10_linux ### menuentry 'CentOS Linux (3.10.0-693.17.1.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.17.1.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.17.1.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.11.6.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.11.6.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.11.6.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.11.1.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.11.1.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.11.1.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.5.2.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.5.2.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.5.2.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.2.2.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.2.2.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.2.2.el7.x86_64.img } menuentry 'CentOS Linux (0-rescue-34946d7b5edb0946bfb52c0f6cae67af) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-0-rescue-34946d7b5edb0946bfb52c0f6cae67af-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-0-rescue-34946d7b5edb0946bfb52c0f6cae67af root=UUID=2a4bc862-eb7a-46b1-8979-d19c873dca3b ro nomodeset rd.auto=1 crashkernel=auto initrd16 /initramfs-0-rescue-34946d7b5edb0946bfb52c0f6cae67af.img } if [ "x$default" = 'CentOS Linux (3.10.0-327.13.1.el7.x86_64) 7 (Core)' ]; then default='Advanced options for CentOS Linux>CentOS Linux (3.10.0-327.13.1.el7.x86_64) 7 (Core)'; fi; ### END /etc/grub.d/10_linux ### ### BEGIN /etc/grub.d/20_linux_xen ### ### END /etc/grub.d/20_linux_xen ### ### BEGIN /etc/grub.d/20_ppc_terminfo ### ### END /etc/grub.d/20_ppc_terminfo ### ### BEGIN /etc/grub.d/30_os-prober ### ### END /etc/grub.d/30_os-prober ### ### BEGIN /etc/grub.d/40_custom ### # This file provides an easy way to add custom menu entries. Simply type the # menu entries you want to add after this comment. Be careful not to change # the 'exec tail' line above. ### END /etc/grub.d/40_custom ### ### BEGIN /etc/grub.d/41_custom ### if [ -f ${config_directory}/custom.cfg ]; then source ${config_directory}/custom.cfg elif [ -z "${config_directory}" -a -f $prefix/custom.cfg ]; then source $prefix/custom.cfg; fi ### END /etc/grub.d/41_custom ### Thank you for any hints Alex

2 2

Allowing non-root users to reboot a workstation
by Felipe Westfields 06 Feb '18

06 Feb '18

I would like to be able to allow regular users that don't have admin privileges to be able to reboot their workstation. (they're software developers so rebooting their workstation doesn't affect anybody else) I tried changing the ownership of /sbin/reboot and /sbin/shutdown to root:users and permissions to 550, but that didn't work - it's still asking for root privileges. Possibly the problem might be that there's centralized LDAP authentication, not local, so the changes I made only apply to local accounts? Any suggestions? FW

7 7

Slightly OT : newsletters, mail formatting and netiquette
by Nicolas Kovacs 06 Feb '18

06 Feb '18

Hi, This question is not exactly CentOS-related strictly speaking, but here goes. I'm running a few newsletter servers for myself and a handful of clients on public CentOS servers with PHPList. For the last twenty years or so I've followed the basic rule that mails should have no formatting whatsoever, only simple text. And now I wonder if that basic rule of netiquette also applies to newsletters. I'm a subscriber to a series of tech-related newsletters, and I couldn't help but notice that they all seem to be HTML-formatted, even those from respectable hardcore geek groups. So my somewhat naive question: is HTML formatting acceptable in newsletters? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

6 6

Re: [CentOS] CentOS Digest, Vol 157, Issue 4
by Stephen Davies 06 Feb '18

06 Feb '18

On 04/02/18 22:30, centos-request(a)centos.org wrote: ---------------- > > Message: 1 > Date: Sat, 3 Feb 2018 16:57:19 -0800 > From: Akemi Yagi <amyagi(a)gmail.com> > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] Update to 3.10.0-693.17.1 breaks ath5k > Message-ID: > <CABA31DoCu6Yf7_nkN6s0Zz=THvrpqAcFfj2=2oTmscTpEPD3XA(a)mail.gmail.com> > Content-Type: text/plain; charset="UTF-8" > > On Fri, Feb 2, 2018 at 10:57 PM, Stephen Davies <sdavies(a)sdc.com.au> wrote: >> Where can I find a suitable module or even source code to build here? >> >> (Centos 7) > > ELRepo used to provide the kmod-ath5k package. However, the module > does not compile under EL7.4 due to the change in the wireless stack. > If your device needs ath5k, give ELRepo's kernel-lt a try. The module > is enabled in this kernel. > > Akemi > > I have worked around this issue by changing the default boot image to the previous release. I realise that this leaves the Intel issue but I can live with that and without future kernel updates. Hopefully somebody will fix the module before I die. Cheers, Stephen

1 0

Re: [CentOS] CentOS Digest, Vol 157, Issue 4
by Stephen Davies 06 Feb '18

06 Feb '18

On 04/02/18 22:30, centos-request(a)centos.org wrote: ---------------- > > Message: 1 > Date: Sat, 3 Feb 2018 16:57:19 -0800 > From: Akemi Yagi <amyagi(a)gmail.com> > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] Update to 3.10.0-693.17.1 breaks ath5k > Message-ID: > <CABA31DoCu6Yf7_nkN6s0Zz=THvrpqAcFfj2=2oTmscTpEPD3XA(a)mail.gmail.com> > Content-Type: text/plain; charset="UTF-8" > > On Fri, Feb 2, 2018 at 10:57 PM, Stephen Davies <sdavies(a)sdc.com.au> wrote: >> Where can I find a suitable module or even source code to build here? >> >> (Centos 7) > > ELRepo used to provide the kmod-ath5k package. However, the module > does not compile under EL7.4 due to the change in the wireless stack. > If your device needs ath5k, give ELRepo's kernel-lt a try. The module > is enabled in this kernel. > > Akemi > > I have worked around this issue by changing the default boot image to the previous release. I realise that this leaves the Intel issue but I can live with that and without future kernel updates. Hopefully somebody will fix the module before I die. Cheers, Stephen

1 0

mod_auth_kerb realm not stripped
by ewae rpok 05 Feb '18

05 Feb '18

Hello all. We have a CentOS 7 system integrated with Active Directory. Achieved using realmd, SSSD and krb5-workstation together with a ktpass-generated keytab. Apache's mod_auth_kerb allows users to authenticate via their AD accounts, and authorise with "require user" directive. But so far we fail to authorise via AD group membership. i.e. adding AuthLDAPUrl and "require ldap-group" directives to httpd.conf results in access being denied. Using ldapsearch with GSSAPI (or password entry) works as expected. After looking at debug logs and tcpdump output, I (possibly incorrectly) put the issue down to being unsure how to get krb5_aname_to_localname to function appropriately with the KrbLocalUserMapping directive of apache's mod_auth_kerb. It does do some transformation, converting to lowercase. However the realm part is not stripped off. Example output from apache error_log: [Thu Jan 25 11:53:33.969841 2018] [auth_kerb:debug] [pid 2176] src/mod_auth_kerb.c(1855): [client 192.168.254.170:65016] kerb_authenticate_a_name_to_local_name Test12 at X.Y.Z -> test12 at x.y.z (All other examples I found have output of format: ... Test12 at X.Y.Z -> Test12 ) I have tried experimenting with auth_to_local tags in the [realms] sections of /etc/krb5.conf, but could see no evidence of the rules being invoked. i.e. Same output in the apache error log regardless. This then appears to get passed on for use in subsequent ldap authorisations (apache mod_authnz_ldap). This does not work for us as we need to authorise against stripped user names (Active Directory sAMAccount or similar; our userPrincipalName is a different format: Test12 at Q.Y.Z, so can't workaround using that). I previously posted a similar messages to kerberos(a)mit.edu but got no feedback. Hopefully this list might be more appropriate. Grateful for any advice, Ewae.

1 0

shutdown or poweroff?
by Walter H. 04 Feb '18

04 Feb '18

Hello, just a simple question, my router has CentOS 6 with the apcupsd running, in the log of apcupsd I see this: 2018-02-01 19:05:54 +0100 apcupsd 3.14.12 (29 March 2014) redhat startup succeeded 2018-02-04 15:52:43 +0100 Power failure. 2018-02-04 15:52:49 +0100 Running on UPS batteries. 2018-02-04 15:53:00 +0100 Reached remaining time percentage limit on batteries. 2018-02-04 15:53:00 +0100 Initiating system shutdown! 2018-02-04 15:53:00 +0100 User logins prohibited 2018-02-04 15:53:37 +0100 apcupsd exiting, signal 15 2018-02-04 15:53:37 +0100 apcupsd shutdown succeeded does this mean the shutdown was successfull? is there other log where I can verify this: because shutting down squid takes almost a minute or so ... Thanks, Walter

2 1

Update to 3.10.0-693.17.1 breaks ath5k
by Stephen Davies 04 Feb '18

04 Feb '18

Where can I find a suitable module or even source code to build here? (Centos 7) Cheers and thanks, Stephen

2 1

OT: RepoForge/RPMForge State Survey
by David Hrbáč 03 Feb '18

03 Feb '18

Hello, RepoForge used to be one of the important repositories for CentOS/RHEL. I know that RepoForge is considered to be clinically dead nowadays. On the other hand RepoForge is still physically alive. We would like to harness community opinion on RepoForge status and future. In case that you use or used to use the RepoForge I kindly ask you to fill up this form to help us with the decision. The form is here: https://goo.gl/forms/4SLFnD16K4yJeitt2 Thanks a lot, David Hrbáč

1 0

Error installing Nvidia driver on a 7.5 beta kernel
by James Pearson 03 Feb '18

03 Feb '18

OK, I know CentOS has nothing to do with RHEL beta releases, but I wanted to test if el7.5 has added support for a particular peripheral (Wacom Pro 2 tablet) ... but was unable to install the propriety Nvidia display driver (v390.25) on a test workstation - and was wondering if anyone could explain on what is going on. All I've done is upgrade an existing CentOS 7.4 install with the RHEL 7.5 beta kernel RPMS However, when installing the Nvidia driver, it fails with: FATAL: modpost: GPL-incompatible module nvidia.ko uses GPL-only symbol '__cachemode2pte_tbl' A bit of Googling seems to suggest that this issue has been 'fixed' in later upstream kernels by changing the export of this symbol from 'EXPORT_SYMBOL_GPL' to 'EXPORT_SYMBOL' However, 7.4 and earlier el7 kernels also export this symbol as EXPORT_SYMBOL_GPL - but the Nvidia driver builds/installs fine on 7.4 kernels ... So, I'm not really sure what the issue is - i.e. is it an Nvidia or Redhat issue ? For now, I've managed to hack around this by patching the stub Nvidia driver src to change MODULE_LICENSE from "NVIDIA" to "GPL" - and the Nvidia driver now installs and loads OK If anyone knows any more about this, then please let me know Thanks James Pearson

2 3

Software does not boot in Secure Boot
by Mikhail Utin 02 Feb '18

02 Feb '18

The matter of EUFI’s Secure Boot vs Legacy Boot has been briefly discussed a couple of days ago. I would ask the List opinion concerning our case. A bit of the history. We’ve been in the research of malicious hypervisor threat since 2013. We finally developed publicly available HyperCatcher freeware. It runs on specially built Ubuntu 14.4. We tried CentOS 6/7 as well. The OS was compiled to minimize the number of services and OS features to only essential to the application. The software is ISO bootable image. The problem. As of today, we recommend to switch to Legacy option before booting. Our attempts to find out how to boot in Secure were unsuccessful. I believe that it is not possible if Secure Boot functions correctly. Does anybody know (excepting hacking the UEFI firmware and utilizing nice 0-day) if boot-up is still possible in Secure Boot? We tried so far a few Dell models. What could we add in bootable image so Secure Boot considered it as OK? There is yet another small issue of Ubuntu output messages while booting, which you could see is you try to use and boot our software. Such “leftovers” are not really important but a bit disturbing people who use our software. Is there anything like compilation option etc. we can use to block Ubuntu boot-up screen output? One technical note on our research. We experimented with VMware hypervisor (CentOS 6/7 and Ubuntu 14 OS as operating environment as well). The conclusion is that well-designed hypervisor adds less than one percent (0.7% in most cases) of current CPU utilization. For instance, 100% utilization means 99.3% user software and 0.7% the hypervisor. You can use your system for years but will never notice that a hypervisor runs below your OS. It can come from anywhere and even from your motherboard firmware. Mikhail Utin, CISSP Rubos, Inc. mutin(a)rubos.com mikhailutin(a)!hotmail.com

1 0

CentOS-announce Digest, Vol 156, Issue 1
by centos-announce-request＠centos.org 02 Feb '18

02 Feb '18

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2018:0260 Moderate CentOS 7 systemd Security Update (Johnny Hughes) 2. CESA-2018:0262 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 3. CESA-2018:0262 Important CentOS 6 thunderbird Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 1 Feb 2018 23:43:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:0260 Moderate CentOS 7 systemd Security Update Message-ID: <20180201234331.GA46540(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:0260 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2018:0260 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a7ff6697cba768a37cfbf5b08cd4fea42887544e64fa81d652726fac42328c22 libgudev1-219-42.el7_4.7.i686.rpm ae8a35516e4db15022c7bdf3dc7fb17d565c3566bfe0598e9e83fd79f7bcb78e libgudev1-219-42.el7_4.7.x86_64.rpm 387700a80d251f5fd2c4ed4f4d6be0c0dd31cd13218034b7bee995602965c794 libgudev1-devel-219-42.el7_4.7.i686.rpm b1e7c83f256176b876f5f9df330e2c97011efd1e301c8e2b8bd6951479f9fced libgudev1-devel-219-42.el7_4.7.x86_64.rpm b048c461c24df985cf5d3daa80c79fddfd435b01c81ece0543b8f6e44902b3c2 systemd-219-42.el7_4.7.x86_64.rpm 5b8a7713fe41db817ca9e7d734f9fc7e3e9bb2c751317adec9129529b1a3a711 systemd-devel-219-42.el7_4.7.i686.rpm df475636c40dff17bb76c95952b1a84df70234ce6164ec5d8d6e0622c18a26de systemd-devel-219-42.el7_4.7.x86_64.rpm 8b0f6580d8ac768bb2bdd2d3fea37471c12f69622070c028c6654a67d9ed62ba systemd-journal-gateway-219-42.el7_4.7.x86_64.rpm 39996be3a24fea93dd74b3858e849bd13d42b3618933646c014999301f74c989 systemd-libs-219-42.el7_4.7.i686.rpm d7ba060ecee893b2e60d18394899768fe93a9199a3eba7eb0e2b2942a4d5b03f systemd-libs-219-42.el7_4.7.x86_64.rpm efe57fcbf99513a07140cb9ab10780cc416bbc0a3fa51775fb628331ee99910a systemd-networkd-219-42.el7_4.7.x86_64.rpm ccff4b016165af8c211c4ff5c0dd2668498487130c7a18da188281f0b8c2fcac systemd-python-219-42.el7_4.7.x86_64.rpm 6179b555b0aea983902a99e83a2e2687ef6cdba897e8fe804c9c860f36fa1642 systemd-resolved-219-42.el7_4.7.i686.rpm 73889e7ca81e3d4f6c918e5c7928ab47927f227a833a20821a2f9f994e393d80 systemd-resolved-219-42.el7_4.7.x86_64.rpm 4669da503e9376fc14044bd230db80452c595c09c439dc769d92b6844b4a5488 systemd-sysv-219-42.el7_4.7.x86_64.rpm Source: 6857f944bb775fce5c2ec5942d5b9bbff74b3ac0d7466b4b0d2c10ed5c6e898a systemd-219-42.el7_4.7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 1 Feb 2018 23:44:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:0262 Important CentOS 7 thunderbird Security Update Message-ID: <20180201234438.GA46591(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:0262 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:0262 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: c5a42870fd0dbb44e82f8030a889a0bdf8cb2f8b1becb9d49763070d47820ff0 thunderbird-52.6.0-1.el7.centos.x86_64.rpm Source: 92c034d0d0f6895453c4e371841d78a5bfdedb11df63cf21a1d1c341c5216f35 thunderbird-52.6.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 1 Feb 2018 23:45:44 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2018:0262 Important CentOS 6 thunderbird Security Update Message-ID: <20180201234544.GA46715(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2018:0262 Important Upstream details at : https://access.redhat.com/errata/RHSA-2018:0262 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4c5faa32a2ce2a7945e7e58a31c90a29f5c8bbc1522299ca8074ff0b179fe244 thunderbird-52.6.0-1.el6.centos.i686.rpm x86_64: 4f97f078cdf9f020ebc5cad99100a54f18bb74b23673f8226fb77763320cebc8 thunderbird-52.6.0-1.el6.centos.x86_64.rpm Source: 27aefaa5049fbe2eae663bca4d17c93281223bdae48cf918b774ee2ad6d7fec3 thunderbird-52.6.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 156, Issue 1 ***********************************************

1 0

In reply to: What is best way of managing isolated network environment?
by Leroy Tennison 01 Feb '18

01 Feb '18

(Couldn't find the original request in my email but definitely have an idea). Set up an OpenVPN server on your network and create a client on the isolated network (set up to connect on boot), configure routing appropriately. You get to decide what subnet the VPN IP address is on, in this situation I recommend a static IP address for the client. From your network you connect to the OpenVPN IP address and connect to the rest of the isolated network from it (or set up multiple clients on the isolated network).

1 0

What is best way of managing isolated network environment?
by Xinhuan Zheng 01 Feb '18

01 Feb '18

Hello, We need to manage isolated network environment so that even though host name and ip address could be same, but they are located in isolated network environment so that’s not a problem. However, that would be very challenging to build a server in such an isolated environment. For example, we could do kickstart to build a server in non-isolated network environment, but for isolated one, we don’t have such a kickstart server. If we had such one, that would mean we consume more resources for building server. What is best way of managing such isolated environment in terms of easily building servers? Thank you, - xinhuan

2 1

Xen hypervisor on CentOS 7.4 with modern UEFI server not booting from grub
by John Naggets 01 Feb '18

01 Feb '18

Hi, I installed CentOS 7.4 on a modern Lenovo ThinkSystem SR630 server which uses UEFI. So far so good CentOS 7.4 works fine so then I went on to install the Xen hypervisor by following the instructions from the wiki (https://wiki.centos.org/HowTos/Xen/Xen4QuickStart) Unfortunately when I reboot after having installed the xen package the system does not boot into "CentOS Linux, with Xen hypervisor" from the grub menu prompt. I get the following error: Loading Xen 4.6.6-8.el7 ... error: can't find command `multiboot'. Loading Linux 4.9.75-29.el7.x86_64 ... error: can't find command `module'. Loading initial ramdisk ... error: can't find command `module'. Press any key to continue... The problem which I encounter here is exactly the same issue as described for Fedora in the RedHat bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1286317 with the exception that for me it's CentOS 7.4 and that the workarounds as described in that bug do not work. Does anyone know how I can make my CentOS boot with the Xen hypervisor using UEFI? Thank you very much for your help. Best regards, John

5 6

best centos server setup for graphics intensive kvm vms?
by Morgan Read 31 Jan '18

31 Jan '18

Hallo list I've been running fedora for donks as my production laptop os, but now I want to set up one of those old laptops to run as a home server running a number of home type vm appliances. I don't want to risk having to tear down and rebuild the setup every 6 months to a year - so, figure centos is my best canditate to run as a stable server. The sort of home type vms I envisage running include: LibreELEC https://libreelec.tv/ Vortexbox https://wiki.vortexbox.org/available_images ownCloud https://owncloud.org/download/#owncloud-server-appliance freeSwitch https://freeswitch.org/pages/vm.html Etc... Without wanting to start a very competative discussion - what would be a suggested minimal centos 7 install to provide such a server? My main area of confusion is whether I need a gui on the server for kodi? Many thanks for any answers to this wildly open ended question! M -- Morgan Read E mstuff(a)read.org.nz

2 6

How is initrd.img packed and compressed?
by Mircea Husz 31 Jan '18

31 Jan '18

Hi, In order to work around a known upstream bug I needed to add a udev rule to pxeboot initrd.img on CentOS 7. The process is straightforward: 1 - extract the pxeboot initrd.img to a new directory 2 - add the udev rule needed to fix the bug 3 - pack and compress it back in initrd.img format The resulting updated image works, it fixes the upstream bug and life is good. But although it works, it's not the same format as the original initrd.img that ships with the distro. I would like to know the proper incantation used to package initrd.img Now for the specifics. The original image: http://mirror.steadfast.net/ centos/7.4.1708/os/x86_64/isolinux/initrd.img is extracted: /usr/lib/dracut/skipcpio initrd.img | xzcat | cpio -i -d and after adding the needed udev rule, it gets packed and compressed as follows: find . 2>/dev/null | cpio --quiet -c -o | xz -9 --format=lzma >"~/patched-initrd.img" Now for the difference. FIrst the original distro image: # file initrd.img initrd.img: xz compressed data # file patched-initrd.img patched-initrd.img: LZMA compressed data, streamed Without the --format=lzma flag it fails to boot. Does anyone know how this is done properly ? Thanks, -Mike

3 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss