- Discuss - lists.centos.org

rpcbind fails to start after creating virbr0 bridge
by Nicolas Kovacs 09 May '17

09 May '17

Hi, In my office I have an HP Proliant server running CentOS 7. It's a minimal install without GUI. The machine has two network interface cards, and for now it's acting as gateway/firewall, and it's running ntpd, Dnsmasq and Rsnapshot. I'd like this machine to also be a KVM virtualization host, so I installed qemu-kvm and libvirt. The interface facing the LAN is enp3s0, so I created a virbr0 bridge like this. # /etc/sysconfig/network-scripts/ifcfg-enp3s0 DEVICE=enp3s0 TYPE=Ethernet ONBOOT=yes BRIDGE=virbr0 And then: # /etc/sysconfig/network-scripts/ifcfg-virbr0 DEVICE=virbr0 TYPE=Bridge ONBOOT=yes BOOTPROTO=static IPADDR=192.168.2.1 NETMASK=255.255.255.0 I replaced enp3s0 in my firewall script and in dnsmasq.conf and rebooted, and everything seems OK now... or almost. Here's an unexpected error I get. # systemctl --failed UNIT LOAD ACTIVE SUB DESCRIPTION ● rpcbind.socket loaded failed failed RPCbind Server Activation Socket This error appeared since I created my virbr0 interface, so I presume it has something to do with it. Unfortunately, I'm clueless. Any suggestions? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

2 1

High load average of processes on CentOS 7.3.1611
by Lakshay Mudgal 09 May '17

09 May '17

Hi, I am working on an application which I previously tested on Centos6.6 and now after compiling same application on centos7.3.1611 and running I am observing a high load average. load avg with centos 6.6 remained to be 1.5 in same test where it remains >4.5 in centos 7.3.1611. The application uses high network resource to communicate over UDP and SCTP. there is zero process disk IO with application(zero logging in runtime). Though CPU usage of application is same but load average is consistently high and I am not able to debug the reason. Any insights. *Warm Regards* *Lakshay Mudgal*

1 0

Re: [CentOS] Latest AMD CPUs and AM4 Motherboards
by Eugene Poole 09 May '17

09 May '17

Thanks! Gonna hold off until 7.4 is more than 3-weeks old. TIA Gene On 5/8/2017 1:27 AM, Laurent Wandrebeck wrote: > Yes, tested on C7 (r7 1700, some Asus prime B350). Unstability to come > unless you use 4.10+ from say, EPEL repo. Forget about C6, imho. > I hope 7.4 will properly support Ryzen and derivatives will official > rh kernel. > > HTH, > Laurent. > > Le 8 mai 2017 06:23:37 GMT+02:00, Eugene Poole <etpoole60(a)comcast.net> > a écrit : > > Has anyone used the new AMD CPUs and AM4 motherboards with CentOS 6 / 7? > > Any reservations or warnings? > > > -- > Envoyé de mon appareil Android avec K-9 Mail. Veuillez excuser ma > brièveté. -- Eugene Poole Woodstock, Georgia

1 0

Latest AMD CPUs and AM4 Motherboards
by Eugene Poole 08 May '17

08 May '17

Has anyone used the new AMD CPUs and AM4 motherboards with CentOS 6 / 7? Any reservations or warnings? -- Eugene Poole Woodstock, Georgia

3 3

Supersize io operations (IO block size more than 4KiB) is split in to number of 4KiB blocks
by Son Son 08 May '17

08 May '17

Concern: Supersize io operations (IO block size more than 4KiB) is split in to number of 4KiB blocks Supersize io operations (IO block size more than 4KiB) is split in to number of 4KiB blocks OS: CentOS 7.3 kernel Version: 3.10.0-514.el7.x86_64 Any IO (write) block size more than 4KiB is split in to number of 4KiB blocks on Centos 7.3 ( where I don't see similar issue on 7.2). I have a setup that involves TWO CentOS 7.3 servers. I tried to run 4MB IO on FC LUN(s) on these servers discovered through Emulex LPe 16000 HBAs. Changed ‘options lpfc lpfc_sg_seg_cn =>1024’ and ‘max_secors_kb =>4MB’ params towards attaining supersize IO ( 4MB block size) , however there are no improvements in getting more than 4K block size IO. There was no impact from these changes. Looking for a help to tune the system to attain supersize IO operation (4MB writes) Regards, Sk

1 0

users still member of LDAP group after being removed from group 5 days ago
by Bernard Fay 08 May '17

08 May '17

Hi, Last Thursday I removed users from an LDAP group and today the Linux command groups still shows those users as member of this group. I double checked in the LDAP to make sure the users are really removed and also not part of the local Linux group users on both the server hosting the LDAP service and the Linux clients. Could this be related to a cache somewhere? If not cache related what could be the problem? Thanks in advance for your help, Bernard

1 1

Centos 7 Samba - all shares read only
by Gary Stainburn 08 May '17

08 May '17

I few weeks back my server started having a problem where all shares are now readonly. AFAIK nothing has changed except a 'yum update' which was probably around the same time. Everyone still has the shares on their Win7 PC's and can see the contents. However, if they try to open a file it opens read only. If the try to create a new file (e.g. right click -> New -> Text Document) it says that they don't have permission. I am not seeing anything meaningful in the log files. Can anyone give me a clue how to fix this, or at least how to collect getting debug info? SELinux has been disabled to eliminate that. Gary Global parameters [global] netbios name = ZEPPO2 server string = Ringways Doncaster Showroom Server workgroup = MOTORPARK os level = 33 preferred master = Yes log file = /var/log/samba/log.%m max log size = 50 guest account = gary security = USER username map = /etc/samba/smbusers wins proxy = Yes wins server = 10.1.1.101 idmap config * : backend = tdb cups options = raw hosts allow = 127. 10. [printers] comment = All Printers path = /var/spool/samba browseable = No printable = Yes guest ok = Yes [tmp] comment = Temporary work area path = /user/remote/tmp guest ok = Yes read only = No [goodwill] comment = Good will documents path = /user/remote/goodwill force user = gary guest ok = Yes read only = No valid users = gary [service] comment = Temporary work area path = /user/remote/service force user = gary read only = No valid users = gary write list = gary [sales_doc] comment = Sales D.O.C. spreadsheets path = /user/remote/sales_doc force user = gary guest ok = Yes read only = No valid users = gary [root@zeppo ~]# smbstatus Samba version 4.4.4 PID Username Group Machine Protocol Version Encryption Signing ---------------------------------------------------------------------------------------------------------------------------------------- 2552 gary gary 10.6.103.236 (ipv4:10.6.103.236:50445) SMB2_10 - - Service pid Machine Connected at Encryption Signing --------------------------------------------------------------------------------------------- tmp 2552 10.6.103.236 Thu May 4 14:05:23 2017 BST - - Locked files: Pid Uid DenyMode Access R/W Oplock SharePath Name Time -------------------------------------------------------------------------------------------------- 2552 1000 DENY_ALL 0x100080 RDONLY NONE /user/remote/tmp . Thu May 4 14:05:23 2017 2552 1000 DENY_NONE 0x100081 RDONLY NONE /user/remote/tmp . Thu May 4 14:05:39 2017 [root@zeppo ~]# ls -ld / /user /user/remote/ /user/remote/tmp/ /user/remote/service/ dr-xr-xr-x. 18 root root 4096 May 4 13:59 / drwxr-xr-x. 4 root root 34 Nov 7 2013 /user drwxr-xr-x. 22 gary gary 4096 Jun 2 2016 /user/remote/ drwxr-xr-x. 6 gary gary 4096 Apr 19 08:32 /user/remote/service/ drwxr-xr-x. 8 gary gary 4096 Feb 23 17:26 /user/remote/tmp/ [root@zeppo ~]#

4 7

where to find stable thread pool?
by qw 08 May '17

08 May '17

Hi, I have one question. Where to find source code of statble thread pool for CentOS? Thanks! Regards Andrew

1 0

Squirrelmail/PHP issue
by Jay Hart 08 May '17

08 May '17

Been using Centos and Squirrelmail since early in Centos 6 cycle. IIRC, I used to be able to attach more than 4 pictures to an email. Now I can't, four seems to be the limit. Picture file size doesn't seem to matter, they can be 50k or 5 meg each. I upped the limits in php.ini for the following parameters to see if this would have any bearing on the issue: post_max_size = 20M upload_max_filesize = 15M The way I see this is that I should be able to attach [more than] four pics of say, size 100K, to an email. I can't. Within Squirrelmail I go to 'Compose', put in a recipient, subject title, and in the body of text lets just say I add "test case" (as an example). Then I go to 'browse', select a [pic] file, click 'add' (which attaches the pic to the email), and repeat this for a total of four files. When I try to attach the fifth pic, the 'email' frame goes blank, nothing shown. To recover the text I can select 'Compose' again and squirrelamil will state I have an email in 'draft' and do I want to open it. If I click 'ok' I get my email back minus all attached pics. Cycle repeats itself if I try to attach pic #5. I've googled the web looking to see if others have had this issue, and a buddy helped me a bit, but nothing definite shown to resolve. I've got to figure its a PHP issue. I'm currently patched to Centos 6.9. Any help appreciated as to what to look for... J

1 0

systemd missing something?
by ken 07 May '17

07 May '17

"Note that traditional init scripts continue to function on a systemd system. An init script /etc/rc.d/init.d/foobar is implicitly mapped into a service unit foobar.service during system initialization." That's what it says in /etc/init.d/README. However, what it implies doesn't seem to work out. In the same directory as that README is a file called "network" which is symlinked into the various /etc/rc.d/rc?.d/ directories, i.e.: # ls -l $(find /etc/rc.d/ -name S*network) lrwxrwxrwx. 1 root root 17 Jan 26 15:23 /etc/rc.d/rc2.d/S56network -> ../init.d/network lrwxrwxrwx. 1 root root 17 Jan 26 15:23 /etc/rc.d/rc3.d/S56network -> ../init.d/network lrwxrwxrwx. 1 root root 17 Jan 26 15:23 /etc/rc.d/rc4.d/S56network -> ../init.d/network lrwxrwxrwx. 1 root root 17 Jan 26 15:22 /etc/rc.d/rc5.d/S56network -> ../init.d/network But "network" isn't executed on boot. However, it does work when I run this: # /etc/init.d/network restart So is this a bug, or is there something else that needs to be done?

4 3

CentOS 7 cloned VM cannot boot
by Nikolaos Milas 06 May '17

06 May '17

Hello, I'm struggling to make a cloned CentOS 7 VM (under KVM) to work. The VM was cloned using mondorestore. Restore appears successful but the VM won't boot; see: http://iweb.noa.gr/files/centos7/supergrub2-scratchvm-20170503-04.png I booted with CentOS 7 disk in troubleshooting mode (where the virtual disk was automatically mounted without issues) and I tried to repair: http://iweb.noa.gr/files/centos7/el7-rescue-scratchvm-20170502-01.png Also: # grub2-mkconfig -o /boot/grub2/grub.cfg ... /usr/sbin/grub2-probe: error: unknown filesystem. I then tried to repair using: https://sourceforge.net/p/boot-repair-cd/home/Home/ but it didn't manage to solve the problem. (It reported success but the VM still won't boot.) More interesting was the effort with the supergrub2 disk: http://www.supergrubdisk.org/super-grub2-disk/ This managed to identify the available "boot methods" and allowed me to boot correctly. See screenshots: http://iweb.noa.gr/files/centos7/supergrub2-scratchvm-20170503-00.png http://iweb.noa.gr/files/centos7/supergrub2-scratchvm-20170503-01.png http://iweb.noa.gr/files/centos7/supergrub2-scratchvm-20170503-02.png Once I logged in, I checked /etc/fstab and /boot/grub2/grub.cfg but I didn't see any obvious problem. The are here as well: http://iweb.noa.gr/files/centos7/fstab http://iweb.noa.gr/files/centos7/grub.cfg However, I also followed these directions: https://www.techbrown.com/reinstall-grub2-boot-loader-centos-7-rhel-7.shtml to rebuild grub2.conf. The commands were completed successfully. Unfortunately, the OS still won't boot: same issue, see: http://iweb.noa.gr/files/centos7/supergrub2-scratchvm-20170503-04.png I again tried to boot using the supergrub2 disk; this time the boot method detection produced the (slightly different) list you see in image: http://iweb.noa.gr/files/centos7/supergrub2-scratchvm-20170503-05.png Using the supergrub2 disk I can boot and login successfully. Otherwise (i.e. directly) the box won't boot. As I know little about grub2 (and low-level linux) to troubleshoot the issue, can you please help identify and correct the problem? Why the VM always refuses to boot? Which is the reported device (on image -04) that remains unrecognized? I looked into /boot/grub/grub2.cfg but I didn't see any such UUID there. Where may it be referenced to be used during the boot process? Note: I never have such issues when restoring (using mondorestore) CentOS 5 or CentOS 6 mondoarchive backups (even on dissimilar virtual hardware). Can you please help me identify the problem, based on the above info, and make the VM normally bootable? Many thanks, Nick

6 29

tabs ignored in here document
by Robert Moskowitz 05 May '17

05 May '17

I thought this worked. Many web pages tell you it works. But bash is ignoring tabs in my here docs. Worst, where there are two tabs, it is functioning as a command expand in bash, where all files in the current directory are listed to complete the command. The following is the here doc I am using. Most likely the tabs will be converted to spaces in this email. But the bottom line is, that while processing all the double tables, all the files in the current directory get listed, and the resultant file is all flush left, as if I had used the +EOF option: Thing is, I thought I tested this previously, so it is possible that there is now something wrong in my environment causing the problem? cat <<EOF>00-init.conf || exit 1 ServerAdmin $admin_email ServerName $your_host_tld <VirtualHost *:80> <Directory "/var/www/html"> Options Indexes FollowSymLinks AllowOverride None Require all granted </Directory> </VirtualHost> <VirtualHost *:443> SSLEngine On SSLCertificateFile /etc/pki/tls/certs/$your_host_tld.crt SSLCertificateKeyFile /etc/pki/tls/private/$your_host_tld.key <Directory "/var/www/html"> Options Indexes FollowSymLinks AllowOverride None Require all granted </Directory> </VirtualHost> EOF thanks

5 10

Re: [CentOS] CentOS 7 cloned VM cannot boot
by Gianluca Cecchi 05 May '17

05 May '17

Il 05 Mag 2017 19:30, "Nikolaos Milas" <nmilas(a)noa.gr> ha scritto: On 5/5/2017 3:45 μμ, Gianluca Cecchi wrote: BTW: see also this paragraph in the provided RH EL link: > 24.7.3. Resetting and Reinstalling GRUB 2 > > But i think is not your problem.... > Yes, I have done that, without change in behavior. Also, after changing partitions flag does your fdisk command reflect the > change? > Yes. Is the error during boot the same as the one provided in your first e-mail? > Yes. One final thing. When I had to change boot settings, I made different steps > in choot environment in respect of the indication inside the image you > sent. > > Specifically > > Verify if your boot partition is already mounted under /mnt/sysimage/boot > in your current environment > Yes, it is: sh-4.2# df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/live-rw 2.0G 1.1G 930M 54% / devtmpfs 979M 0 979M 0% /dev tmpfs 1001M 4.0K 1001M 1% /dev/shm tmpfs 1001M 8.3M 993M 1% /run tmpfs 1001M 0 1001M 0% /sys/fs/cgroup /dev/sr0 680M 680M 0 100% /run/install/repo tmpfs 1001M 300K 1001M 1% /tmp /dev/mapper/centos-root 18G 1.5G 16G 9% /mnt/sysimage /dev/vdal 497M 192M 306M 39% /mnt/sysimage/boot /tmpfs 1001M 0 1001M 0% /mnt/sysimage/dev/shm If it is mounted on another mount point in your live env go and umount it > and run > mount /dev/vda1 /mnt/sysimage/boot > Didn't need to. then > chroot /mnt/sysimage > OK, I did so: sh-4.2# chroot /mnt/sysimage bash-4.2# when you are in chrooted environment, probably you don't have special files > for vda and vda1 because they are dinamically created; > verify with > > ls -l /dev/vda* > It seems I do have such files: bash-4.2# ls -la /dev/vda* brw-rw----. 1 root disk 252, 0 May 5 16:49 vda brw-rw----. 1 root disk 252, 1 May 5 16:49 vdal brw-rw----. 1 root disk 252, 2 May 5 16:49 vda2 If this is the case, go and create them > > mknod -m 660 /dev/vda b 253 0 > mknod -m 660 /dev/vda1 b 253 1 > Didn't need to. at this point > > grub2-install /dev/vda > and let see the output of the command and its exit code > As usual: bash-4.2# grub2-install /dev/vda Installing for i386-pc platform. grub2-install: error: unknown filesystem. at this point exit chrooted environment (exit) > umount /mnt/sysimage/boot > > reboot and see if anything changes > Didn't do it, because grub2-install above failed, so nothing changed. I am very puzzled with "unknown filesystem". Thanks for your time and help! I am looking forward to reaching a solution! All the best, Nick _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos Your /mnt/sysimage/boot is under tmpfs not real disk... Try to unmount it and mount the vda1 device instead and then follow the other steps...

2 2

CentOS-announce Digest, Vol 147, Issue 1
by centos-announce-request＠centos.org 05 May '17

05 May '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2017:1194 CentOS 7 kmod-redhat-ixgbevf Enhancement Update (Johnny Hughes) 2. CEEA-2017:1194 CentOS 7 kmod-redhat-ixgbe Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 4 May 2017 15:23:48 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2017:1194 CentOS 7 kmod-redhat-ixgbevf Enhancement Update Message-ID: <20170504152348.GA43540(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2017:1194 Upstream details at : https://rhn.redhat.com/errata/RHEA-2017-1194.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: ead8dfcb3828518aed74380b77d990bb193ee63417354c20c4b91b2ef95a720f kmod-redhat-ixgbevf-3.2.2_k_rh7.4_z-1.el7_3.x86_64.rpm Source: dccc0b49f0cdf5751526307d6572aec90d0b28cad6c0137898affeb6ed6cdf2b kmod-redhat-ixgbevf-3.2.2_k_rh7.4_z-1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 4 May 2017 15:24:10 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2017:1194 CentOS 7 kmod-redhat-ixgbe Enhancement Update Message-ID: <20170504152410.GA43598(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2017:1194 Upstream details at : https://rhn.redhat.com/errata/RHEA-2017-1194.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: cd47bdab22ce9c387beaf066c0e36d63633b07bfcbcad4bda1dac53c74a095e2 kmod-redhat-ixgbe-4.4.0_k_rh7.4_z-2.el7_3.x86_64.rpm Source: 6566b60dd49a2156360e3c60e819acf37c652c931d5d52f995c8dd7d225486e4 kmod-redhat-ixgbe-4.4.0_k_rh7.4_z-2.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 147, Issue 1 ***********************************************

1 0

running tomcat as non-root user.. (/var/run pidfile issue)
by Jason Welsh 04 May '17

04 May '17

hey folks, we are migrating our tomcat setup over to centos 7. Im converting init-scripts over to systemd services and whatnot.. One thing that Ive noticed is that my systemd startup script cant seem to write to /var/run as a non-root user to drop a pidfile.. If I create a directory in /var/run owned by my user, it gets wiped out on reboot. Ive searched and found this https://blog.hqcodeshop.fi/archives/93-Handling-varrun-with-systemd.html which says to use ExecStartPre to fudge creating directories in /var/run so what non-root users can write there.. Is that the suggested way to do this? It seems awful kludgey. Jason

3 3

External drive, BackupPC service, and booting
by Kenneth Porter 03 May '17

03 May '17

I'm using an external drive with BackupPC on CentOS 7. I currently have a mount entry like this in fstab: /dev/disk/by-label/backuppc4 /var/lib/BackupPC ext4 noauto,rw 0 0 This means I must manually mount the drive and then start the backuppc service. Is there a way to set up hotplugging so that the drive is mounted if present at boot time but doesn't stop the boot if it's not present or otherwise fails? I see the fstab nofail option. Will that do what I want? Is there a way to set up the backuppc service (through systemd) so that it starts if and only if the drive is present, or starts if the drive is plugged in later? --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

package internet-browser?
by Kay Schenk 03 May '17

03 May '17

What can anyone tell me about package internet-browser? Through the gnome package app, there seems to be NO meta info???? -- ------------------------------------------ MzK "Since each of us is blessed with only one life, why not live it with a cat?" -- Robert Stearns

4 6

Firefox for CentOS
by Johnny Hughes 03 May '17

03 May '17

I am currently building the latest Firefox updates and I have noticed that they have upgraded the CentOS-7 Firefox from the ESR tree (45.8) to the mainline tree (Currently firefox-52.0). They have left EL5 and EL6 at the ESR level (45.8.0-2). EL7: https://rhn.redhat.com/errata/RHSA-2017-0461.html EL5 and EL6: https://rhn.redhat.com/errata/RHSA-2017-0459.html As stated above, I am currently building and testing these, so they are not yet released .. just preparing people for the changes. Thanks, Johnny Hughes

7 19

logrotate failed ... (CentOS 6.9)
by Walter H. 03 May '17

03 May '17

I get regularily such a mail <mail> Anacron job 'cron.daily' on .... /etc/cron.daily/logrotate: error: error running non-shared postrotate script for /var/log/clamd.clamsmtp/clamsmtpd.log of '/var/log/clamd.clamsmtp/clamsmtpd.log ' </mail> content of /etc/logrotate.d/clamsmtp /var/log/clamd.clamsmtp/clamsmtpd.log { monthly notifempty missingok postrotate pkill -SIGHUP -f clamd.clamsmtp >/dev/null 2>&1 || : endscript } when looking at ls: <ls -al /var/log/clamd.clamsmtp/> total 572 drwxr-xr-x. 2 clamsmtp mail 4096 May 1 03:15 . drwxr-xr-x. 6 root root 4096 May 1 03:15 .. -rw-r-----. 1 clamsmtp mail 953 May 1 08:43 clamsmtpd.log -rw-r-----. 1 clamsmtp mail 109806 Jan 1 10:28 clamsmtpd.log-20170101 -rw-r-----. 1 clamsmtp mail 114825 Feb 1 03:42 clamsmtpd.log-20170201 -rw-r-----. 1 clamsmtp mail 101356 Mar 1 03:50 clamsmtpd.log-20170301 -rw-r-----. 1 clamsmtp mail 112365 Apr 1 19:51 clamsmtpd.log-20170401 -rw-r-----. 1 clamsmtp mail 104204 May 1 03:15 clamsmtpd.log-20170501 </ls> this shows normal where does this error mail come from? Thanks Walter

2 3

OT: Firefox lockdown policies for CentOS7 desktops
by C. L. Martinez 02 May '17

02 May '17

Hi all, I am doing some tests with my CentOS7 desktop. I have configured a policy to lockdown Chrome/Chromium browsers and it works perfectly. And I am trying to the same for Firefox browsers but Firefox's docs are really "hard" to understand. I have the following stopper points: a/ what is the "real" system wide's config file: firefox.js, sysprefs.js or local-settings.js/mozilla.cfg ? b/ And what is the real directory: "/etc/firefox", "/usr/lib/firefox/defaults/pref" or which?? c/ Is it possible to download and install addons using system wide's policy? For example with Chrome/Chromium you can use "ExtensionInstallForcelist" option. d/ Where can I found all the options :)? Many thanks -- Greetings, C. L. Martinez

2 1

Samba active domain controller guide for Centos 7
by Robert Moskowitz 02 May '17

02 May '17

Is there a good guide for setting up a Samba active domain controller? I am currently running ClearOS, but it does more than what I want, even that I had to modify to suit my needs. Only a few systems. Currently still XP, but I will migrate to Win7 with this move. Of course I will be doing the install on a Cubietruck armv7. thanks for any pointers.

2 1

GCC Installation/Repositories
by Sajjad Hussain 02 May '17

02 May '17

Dear All, We need CentOS 5 for a software, and installed CentOS 5.4. But when we try to install Developments Tools like gcc it gives error that repositories are not found. Can you please help us in install gcc on CentOS 5.4? -bash-3.2$ cat /etc/redhat-release CentOS release 5.4 (Final) -bash-3.2$ uname -a Linux i80pc57 2.6.18-164.el5PAE #1 SMP Thu Sep 3 04:10:44 EDT 2009 i686 i686 i386 GNU/Linux Thanks and Best Regards -- Sajjad Hussain

2 1

selinux problem policies
by Günther J. Niederwimmer 01 May '17

01 May '17

Hello, My problem is to add selinux policies can any help to say what is wrong with my policies I write this! semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html(/.*)?/ typo3conf(/.*)?" I have more instances from typo3 I found this construct in the selinux policies "/var/www/html(/.*)?/uploads(/.*)?" but my is not working ? and I have only errors? neverallow check failed at /etc/selinux/targeted/tmp/modules/100/selinuxutil/ cil:244 (neverallow selinuxutil_typeattr_1 semanage_store_t (file (relabelto))) <root> allow at /etc/selinux/targeted/tmp/modules/100/selinuxutil/cil:675 (allow restorecond_t non_auth_file_type (file (getattr relabelfrom relabelto))) <root> allow at /etc/selinux/targeted/tmp/modules/100/systemd/cil:1108 (allow systemd_tmpfiles_t non_auth_file_type (file (getattr relabelfrom relabelto))) neverallow check failed at /etc/selinux/targeted/tmp/modules/100/base/cil: 13121 (neverallow base_typeattr_18 scsi_generic_device_t (blk_file (read))) <root> allow at /etc/selinux/targeted/tmp/modules/100/munin/cil:581 (allow disk_munin_plugin_t device_node (blk_file (ioctl read getattr lock open))) ......... or is a other way to include policies better ? -- mit freundlichen Grüssen / best regards Günther J. Niederwimmer

3 5

SELinux policy to allow Dovecot to connect to Mysql
by Robert Moskowitz 30 Apr '17

30 Apr '17

I have been getting the following on my new mailserver: Apr 7 10:17:27 z9m9z dovecot: dict: Error: mysql(localhost): Connect failed to database (postfix): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13) - waiting for 25 seconds before retry They go away when I setenforce 0. So I googled dovecot mysql selinux and the only worthwhile hit was: http://zszsit.blogspot.com/2012/12/dovecot-mysql-selinux-issue-on-centos6.h… that provides a /etc/selinux/dovecot2mysql.te Is there a simpler way like a setsbool option? With all the howtos on dovecot with mysql, it is interesting that none of them seem to have this problem. Maybe because they connect to mysql through TCP port 3306 which has ITS set of problems (like MariaDB defaults to not listening on TCP). thanks!

6 34

Apache + SSL: default configuration rated "C" by Qualys Labs
by Nicolas Kovacs 29 Apr '17

29 Apr '17

Hi, I'm currently experimenting with a public server running CentOS 7. I have half a dozen production servers all running Slackware Linux, and I intend to progressively migrate them to CentOS, for a host of reasons (support cycle, package availability, SELinux, etc.) But before doing that, I have to figure out a few things that work differently under CentOS. Apache and SSL behave quite differently under these two distributions. So far, Apache is running fine with HTTP and hosts a series of virtual hosts. I have installed Certbot and created a Let's Encrypt certificate for the server. I have a "dummy" website under /var/www/html/default/html. I installed mod_ssl and only edited the following directives in /etc/httpd/conf.d/ssl.conf. I kept the default options for everything else. --8<------------------------------------------------ ... DocumentRoot "/var/www/html/default/html" ServerName sd-41893.dedibox.fr:443 ... SSLCertificateFile /etc/letsencrypt/live/sd-41893.dedibox.fr/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/sd-41893.dedibox.fr/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/sd-41893.dedibox.fr/fullchain.pem --8<------------------------------------------------ After restarting Apache, the website shows up correctly. https://sd-41893.dedibox.fr/ But when I test it using Qualys SSL Labs Server Test, the results are a disappointment. https://www.ssllabs.com/ssltest/ The site is rated "C", with the following remarks: * This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate. Grade capped to C." "This server accepts RC4 cipher, but only with older protocols. Grade capped to B." "The server does not support Forward Secrecy with the reference browsers." "This site works only in browsers with SNI support." I googled a bit, and to my surprise I only found articles about Apache and SSL on CentOS that seem - more or less - to use the default ssl.conf configuration. On a side note, my Slackware servers have a default usable /etc/httpd/extra/httpd-ssl.conf file that gets an "A" on Qualys Labs, and even an "A+" when you add a two-liner. Any suggestions on improving that? Cheers, Niki Kovacs -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

7 7

CentOS as Guest OS on Red Hat Virtualisation 4.x
by Ling Yew Kim 29 Apr '17

29 Apr '17

Hi all, I have a banking customer asking if CentOS is compatible on RHV4.0 as a guest VM. Based on Red Hat’s knowledge base (see link below), CentOS not supported guest OS. However, VMware say on their official document, CentOS is a compatible guest OS (see link below). So, in my customer's mind, CentOS cannot be used as a guest OS in RHV cause it is not compatible, which I find it hard to believe considering the relationship between CentOs and RHEL. RHV supported guest OS https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.0/ht… VMware compatible guest OS https://partnerweb.vmware.com/comp_guide2/pdf/VMware_GOS_Compatibility_Guid… So, my question is, technically, can CentOS run as a guest OS on RHV4? Is there anyone that has done extensive test with CentOS on RHV? Is there any documentation or links that can show CentOS will run fine on RHV4? Just need to show customer that indeed CentOS is technically compatible on RHV but just not supported by Red Hat. Many thanks. p/s: If you’re wondering why I’m not getting the customer to migrate CentOS to RHEL just so that it’s a supported configuration? well, for some reason he just wants to continue using CentOS, which I’m guessing could be caused by $$$ as they have heaps of CentOS in their environment. LING YEW KIM PLATFORMS SOLUTIONS ARCHITECT Red Hat Malaysia (ASEAN) <https://www.redhat.com/> lkim(a)redhat.com <mailto:lkim@redhat.com> M: +6012-343-8765 <tel:+6012-343-8765> <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted> @redhatnews <https://twitter.com/redhatnews> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc>

3 2

SAN certificates for multiple domains and multiple services
by Nicolas Kovacs 28 Apr '17

28 Apr '17

Hi, I'm currently installing and configuring CentOS 7 on a public server. The machine will host a few small-to-midsize projects that are currently running on a handful of Slackware servers: public library databases, our public school's agenda, a small webradio, OwnCloud for myself and a local non-profit, etc. Until recently I've mostly used self-signed SSL certificates for stuff needing a secure connection. Then, some time ago, I discovered LetsEncrypt and Certbot, which works very well, so I moved secure web hosting to using a free LetsEncrypt certificate. Now I want to take this to the next level and use these free certificates for multiple services. Not only web hosting, but also Postfix/Dovecot for mail and Prosody for XMPP. I had to fiddle a bit for permissions, so everything can access the certificate and key files right. I created a certs group and gave everything under /etc/letsencrypt/live to root:certs. Then, when a system user has to access this stuff, I simply add him to the certs group. Then came a moment when I hit a wall, because Postfix can't handle multiple certificates, only one. Let's say I have these domains on my server: * example1.com * example2.com * example1.net * example2.net When setting up Postfix, I can do one of these things: 1. continue to use a self-signed SSL certificate 2. choose one "preferred" domain on my server 3. setup multi-domain (SAN) certificates I tried the SAN certificates (after experimenting a lot and getting it right), and this stuff seems to work. I have one big bundle of certificates stored under /etc/letsencrypt/live/sd-41XXX.dedibox.fr (sd-41XXX.dedibox.fr being my server's FQDN), and I have all the certificates for all domains and subdomains of example1.com, example2.com, example1.net and example2.net. So before I go any further with this, I'm asking the more technically proficient admins here. Are there any drawbacks to using this solution? Is it problematic to bundle all my certificates into one big fat SAN certificate? This being said, the machine will host a maximum of two dozen domains, each with a handful of subdomains like mail.example1.com, xmpp.example1.com, etc.) Cheers, Niki Kovacs -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 2

sha256sum a dvd
by James B. Byrne 27 Apr '17

27 Apr '17

CentOS-6.9 I am trying to verify a locally created dvd. I am using sha256sum in this fashion: sha256sum /dev/sr0 Which gave this result: sha256sum: /dev/sr0: Input/output error So I tried this: sha256sum /dev/cdrom Which, after some time, also produces: sha256sum: /dev/cdrom: Input/output error What does this mean and how do I fix it? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 4

CentOS version
by Larry Martell 27 Apr '17

27 Apr '17

I am trying to find out what version of CentOS is running at a customer site, but I do not have remote access and there is no one there to run anything for me. But I do have a dmesg output and I see this: Linux version 3.10.0-327.22.2.el7.x86_64 (builder(a)kbuilder.dev.centos.org) (gcc version 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) ) #1 SMP Thu Jun 23 17:05:11 UTC 2016 >From that can someone tell me what the CentOS version is?

3 3

Re: [CentOS] can't create printers after upgrading cups
by Vanhorn, Mike 26 Apr '17

26 Apr '17

It looks like this may just be a bug upstream: https://access.redhat.com/solutions/3001891 Still trying the work-arounds. --- Mike VanHorn Senior Computer Systems Administrator College of Engineering and Computer Science Wright State University 265 Russ Engineering Center 937-775-5157 michael.vanhorn(a)wright.edu On 4/26/17, 9:51 AM, "CentOS on behalf of Vanhorn, Mike" <centos-bounces(a)centos.org on behalf of michael.vanhorn(a)wright.edu> wrote: After upgrading cups on my CentOS 6 systems from version 1.4.2-72.el6 to 1.4.2-77.el6, I am no longer able to create working printers, either with lpadmin from the command line or with system-config-printer. When I try to run lpadmin, I get this simple error: [root@vlsi66 ~]# lpadmin -p newprinter -v lpd://printserver/serverqueue-E -P /path/to/ppd/thing.ppd lpadmin: Unknown [root@vlsi66 ~]# Sometimes, the printer does get created (i.e. it shows up in the output of ‘lpstat –a’ and printers.conf gets updated), but sometimes it doesn’t. If the printer does get created, then there is no new ppd in /etc/cups/ppd. If I try to create the printer using system-config-printer, I get an error of CUPS server error (adding printer newprinter) There was an error during the CUPS operation: ‘server-error-service-unavailable’. I’ve looked at file and directory permissions, and checked that cupsd is, in fact, running. There is nothing obvious in the logs, except for this, which happens at exactly the time the printer should get created: localhost - - [26/Apr/2017:09:34:01 -0400] "POST /admin/ HTTP/1.1" 401 0 - - This also occurs if I access localhost:631 from a web browser; and everything works fine up to the point of “Add Printer”, and then the web page shows and Error: box with “Unknown” (from the lpadmin command), and the 401 error shows up in the log. I can’t figure out why it would be a 401 (unauthorized), since everything else worked. Has anyone else run into this problem, where you can’t create a new printer? Thanks! --- Mike VanHorn Senior Computer Systems Administrator College of Engineering and Computer Science Wright State University 265 Russ Engineering Center 937-775-5157 michael.vanhorn(a)wright.edu _______________________________________________ CentOS mailing list CentOS(a)centos.org https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.centos.org_mailm…

1 0

can't create printers after upgrading cups
by Vanhorn, Mike 26 Apr '17

26 Apr '17

After upgrading cups on my CentOS 6 systems from version 1.4.2-72.el6 to 1.4.2-77.el6, I am no longer able to create working printers, either with lpadmin from the command line or with system-config-printer. When I try to run lpadmin, I get this simple error: [root@vlsi66 ~]# lpadmin -p newprinter -v lpd://printserver/serverqueue-E -P /path/to/ppd/thing.ppd lpadmin: Unknown [root@vlsi66 ~]# Sometimes, the printer does get created (i.e. it shows up in the output of ‘lpstat –a’ and printers.conf gets updated), but sometimes it doesn’t. If the printer does get created, then there is no new ppd in /etc/cups/ppd. If I try to create the printer using system-config-printer, I get an error of CUPS server error (adding printer newprinter) There was an error during the CUPS operation: ‘server-error-service-unavailable’. I’ve looked at file and directory permissions, and checked that cupsd is, in fact, running. There is nothing obvious in the logs, except for this, which happens at exactly the time the printer should get created: localhost - - [26/Apr/2017:09:34:01 -0400] "POST /admin/ HTTP/1.1" 401 0 - - This also occurs if I access localhost:631 from a web browser; and everything works fine up to the point of “Add Printer”, and then the web page shows and Error: box with “Unknown” (from the lpadmin command), and the 401 error shows up in the log. I can’t figure out why it would be a 401 (unauthorized), since everything else worked. Has anyone else run into this problem, where you can’t create a new printer? Thanks! --- Mike VanHorn Senior Computer Systems Administrator College of Engineering and Computer Science Wright State University 265 Russ Engineering Center 937-775-5157 michael.vanhorn(a)wright.edu

1 0

rsyslog and zipping up "rotated" files
by Ian Diddams 26 Apr '17

26 Apr '17

I have a rsyslog config that suffixes the date to the filename and holds the log files in a non stabdard log directory based on its srver name (long story). Example - config includes: ... $template mailLog,"/var/log/external/%fromhost%/maillog-%$YEAR%%$MONTH%%$DAY%.log"... # Log all the mail messages in one place.mail.* -?mailLog... so that I get over time .. /var/log/external/server/maillog-20170424.log /var/log/external/server/maillog-20170425.log /var/log/external/server/maillog-20170426.log etc. Over time of course these build up, so i have a cronjob to trim any such logs okder than 30 days. To also save on space I copmpress all the files except todays via a cronjobbed script. so in fact I get ... /var/log/external/server/maillog-20170424.log.gz /var/log/external/server/maillog-20170425.log.gz /var/log/external/server/maillog-20170426.log My questions are therefore... - is there a way for rsyslog to compress these logs once a new log is created at midnight - is theer a way for rsyslog to remove any logs older than 30 days? I am of course aware that logrotate does this also, but for the purposes of m,y enquiry I am only interested in using rsyslog if at all possible. I expect the removing of older, zipped logs via rsyslog isn;t available. But the pssibility of zipping files would be of great interest. cheers Ian

1 0

saslauth logging
by Jobst Schmalenbach 26 Apr '17

26 Apr '17

Hi Not sure whether this is the correct list to ask ... if it's not please direct me to the correct one. Is it possible on to log a bit more detail when auth failure occurs when using saslauthd? saslauthd[2119]: do_auth : auth failure: [user=DELETED] [service=smtp] [realm=DELETED] [mech=pam] [reason=PAM auth error] What I want is the IP address and if possible the incorrect password (just to see how far they are off). Is this possible? thanks Jobst -- If a pig loses its voice, is it disgruntled? | |0| | Jobst Schmalenbach | | |0| jobst(a)barrett.com.au |0|0|0| General Manager

4 6

kde panels not retaining launcher icon
by geo.inbox.ignored 26 Apr '17

26 Apr '17

greetings one and all. new install of centos 6.8. 3 kde panels @ left, top, right sides. left and top panel are for program selection. right panel for active running programs. added 'launcher' icons to left and top panels, but panels are not retaining launcher icons. when i close kde to save ~/.kde file and reopen kde, 1, 2, or all 3 panels will be missing launcher. has anyone else seen such or know of cure? much help appreciated. tia. -- The important thing is not to stop questioning. - Albert Einstein CentOS GNU/Linux 6.8 -- KDE 4.3.4 Firefox 45.7.0 -- Thunderbird 45.6.0 GNUCash 2.4.15 -- zoneminder 1.30.0 peace out. tc,hago. g . =+= Tired of having your microsoft os hacked? Change to Linux os, used by microsoft hackers. =+= in a world with out fences, who needs gates. =+=

1 0

Odd disk automount issue on C7.3.1611
by Lamar Owen 25 Apr '17

25 Apr '17

I'm posting here before going through all the fun to do up a real bug report to see if anyone else has seen this behavior. I have two identical Dynex external USB3 drive enclosures with identical 3TB drives in each enclosure. The dmesg output shows: $ dmesg |grep TOSHIBA [ 59.942546] scsi 7:0:0:0: Direct-Access TOSHIBA DT01ACA300 PQ: 0 ANSI: 6 [ 86.301123] scsi 8:0:0:0: Direct-Access TOSHIBA DT01ACA300 PQ: 0 ANSI: 6 $ HOWEVER, the 'Disks' utility program only sees the first one plugged-in, and not the second one. It doesn't matter which one I plug in first; the second one won't get seen by Disks nor will it get automounted. It doesn't even do the 'USB device inserted' sound, for that matter. As another oddity, one of the drives has a LUKS-encrypted ext4 filesystem; the other has an XFS filesystem; if I plug in the XFS-formatted drive first, the LUKS-encrypted on will no longer automount even if the XFS-formatted drive is unmounted and unplugged first, but the the converse does work (mount LUKS+ext4; unmount and unplug; plug in XFS, it gets automounted). If I plug in the LUKS+ext4 disk first, enter the passphrase, and let it mount, then plug in the XFS drive, I can then manually (from the command line) mount it just fine and both drives work just fine. Both drives work fine when used singly, but not when both are plugged-in. So, has anyone else seen this? I don't mind filing a bug report, but I am at a bit of a loss as to what component to file it under. I haven't dug into too many logs or other files as yet, but I can if I need to do so. I ran into this making an encrypted copy of the contents of the XFS disk, which will be wiped and reformated LUKS+ext4, and I'd like to make these two drives back each other up. If I plug in a different USB3 drive, such as my 4TB Seagate, everything works as expected; it seems to only be the identical drives that confuse whatever process is detecting this. -- Lamar Owen Chief Information Officer Pisgah Astronomical Research Institute 1 PARI Drive Rosman, NC 28772 828-862-5554 www.pari.edu

1 0

Bonding mode balance-alb (6): How to control the assigned MAC address?
by Frank Thommen 25 Apr '17

25 Apr '17

Hi, we are trying to switch our bonding modes from 1 (active-backup) to 6 (balance-alb). However it seems, that these bond devices are not always getting the MAC address from the same slave. Sometimes the device gets the MAC address of the first and sometimes of the second slave. Since only the MAC address of the first slave device is (can be) registered in DHCP, this breaks connectivity (about) every second time we boot the computer. Is there a way to control which MAC address is assigned to the bonding device w/o configuring it explicitely in the ifcfg file? Cheers frank

2 1

systemd override.conf question
by Robert Moskowitz 24 Apr '17

24 Apr '17

Does the override.conf file need the section headers? For example: # cat /etc/systemd/system/postfix.service.d/override.conf [Unit] After=syslog.target network.target time-sync.target Will it work with just the After line, or is the [Unit] line needed to control the merge function. thanks

2 2

Re: [CentOS] OT: systemd Poll - So Long, and Thanks for All the fish.
by James B. Byrne 24 Apr '17

24 Apr '17

On Wed, April 19, 2017 16:22, Chris Murphy wrote: > > Apple has had massively disruptive changes on OS X and iOS. Windows > has had a fairly disruptive set of changes in Windows 10. About the > only things that don't change are industrial OS's. > I have no idea how this reference applies to my earlier post. We do not use Apple or Windows servers and the desktop environment is stabilised at Win7pro. There will be be no Windows 10 here ever. OSX / iOS employment is limited to personal devices, none of which are permitted on premise in any case. > When it comes to breaking user space, there's explicit rules against > that in Linux kernel development. And internally consistent API/ABI > stability is something you're getting in CentOS/RHEL kernels, it's one > of the points the distributions exist. But the idea that Windows and > OS X have better overall API stability I think is untrue, having > spoken to a very wide assortment of developers who build primarily > user space apps. This may be true. It is likely important to software developers. It is also totally irrelevant to a business. Businesses, other than software development houses and consultants, are software users. When a vendor massively rearranges things in their software, deprecates scripting syntax that has existed for years if not decades, and fundamentally changes the way the administration of an operating system is presented it really matter not a wit to a business that the internal kernel level api remains unchanged. It is the accumulated administrative experience that is lost in consequence that concerns a business given that replacing that loss will cost either directly in retraining or indirectly in error and resultant disruption; or both. > > What does happen, in kernel ABI changes can break your driver, as > there's no upstream promise for ABI compatibility within the kernel > itself. The effect of this is very real on say, Android, and might be > one of the reasons for Google's Fuscia project which puts most of the > drivers, including video drivers, into user space. And Microsoft also > rarely changes things in their kernel, so again drivers tend to not > break. > > And this illustrates the point that I attempting to make. A business owner assumes that whatever OS is used it will deal with the various devices that make up its hardware environment. For if it does not then they seek an OS that does. However, vanishingly few firms in my experience (i.e.NONE) have ever had operational programming staff write or even modify a device driver. A business is in existence to make money for its owners not dick around with esoteric computer theory and practice. Red Hat, again in my sole opinion, increasingly appears to me to be emulating another company notorious for shuffling the user interface to little evident purpose other than profit. That is good business for them. It is not good for us. Bear in mind that we have been RedHat/Whitebox/CA-OS/CentOS users since 1998 so it is not like we are moving away from Linux with anything like enthusiasm. But this upgrade treadmill that has developed within RH is simply too costly for us to bear any longer. The idea that one has to rebuild from scratch entire host systems and then laboriously port over data and customised portions to a new host simply to upgrade the underlying OS is absolutely ludicrous. Consider the tremendous labour costs regularly incurred in accomplishing what amounts to maintaining the status quo. We just upgraded a FreeBSD host from 10.3 to 11.0 in situ without problem; and with very little downtime (three reboots in the space of 30 minutes). This was no standalone device either. It was the OS running the metal for multiple BHyve virtual machines, themselves running various operating systems (but mainly FreeBSD-11). One of said vms being our Samba-4 AD-DC. And, had it all gone south then, given we use ZFS in FreeBSD, and that we snapshot regularly, getting back to 10.3 would have been, and still could be, nearly instantaneous. Think about what that would take in terms of man hours to accomplish moving from EL6 to 7. And moving from 5 to 6 was not much better. This is just too expensive to repeat every three years. And allow me to forestall any claims that the chimera that is 'cloud computing' is the answer. All that does is make creating the requisite new platforms marginally less tedious. And that small advantage is purchased at the cost of handling over control of all your data to entities who are thoroughly discredited with respect to security and privacy. I am not anti or pro systemd, upstart, or etc/rc (or any other software although I admit to holding a generally dim view of things from Redmond). I do not really care what is used so long as it works and that introducing it does not greatly diminish the value of existing user skills and knowledge. However, I am past the point of patience with gratuitous changes that offer no appreciable benefit to the parties tasked with dealing them. Systemd is not the problem. It is a symptom of a deeper malaise, indifference. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

6 7

How to PXE kickstart hosts with little memory (Error: "Warning: /dev/root does not exist")?
by Frank Thommen 24 Apr '17

24 Apr '17

Hi, while kickstarting our virtual machines with PXE we often run into kickstart/anaconda failing with [...] [...] dracut-mount[xxx]: Warning: Can't mount root filesystem [...] dracut-mount[xxx]: Warning: /dev/root does not exist [...] dracut-mount[xxx]:/lib/dracut-lib.sh: line 1030: echo write error: No space left on device Starting Dracut Emergency Shell... Warning: /dev/root does not exist Generating "/run/initramfs/rsdosreport.txt" [...] It seems, that this is not related to local disk space - as I initally thought - but to too small memory. It only happens with VMs with little RAM (1024 MB). As soon as we raise the available memory to 2048 MB, kickstarting works fine. The RHEL 7 installation guide states, that the minimal memory requirement is 1 GB, so the network installation /should/ work. Is there a way to install such hosts w/o having to temporarily raise the available memory? Cheers frank

2 2

Need a bit of 'archeocomputing' help on CentOS 7.
by Lamar Owen 24 Apr '17

24 Apr '17

I have an application with is binary-only, does its job well, and is only available for either libc5 (!) or early early glibc2.0 (!!). It has been running on a Red Hat Linux 5.2 (NOT RHEL; RHL) server for a really long time, and it honestly does its job and it's not easily replaced by an open-source solution at the moment. So, I need to do one of the following things: 1.) Run Red Hat Linux 5.2 (or similar vintage) on KVM on CentOS 7; 2.) Build libc5 (!) for CentOS 7 and run it on C7 (if that's even possible). The latest version of libc5 I know of that was shipped by Red Hat is in RHL 6.2, libc-5.3.12. (There is a 5.4, but not sure of stability or compatibility). So, I have RHL 5.2 (Apollo) running on KVM on C7, but I'm not getting any networking working. The only two non-virtio NICs are e1000 and rtl8139. As I recall kernel 2.0.36 and rtl8139 were pretty iffy together, and e1000 drivers are not likely available (I couldn't find any). The host's bridge sees the MAC of the guest, but the guest isn't seeing any traffic. So, has anyone tried doing anything this old with modern kvm (I'm using the qemu-ev packages, incidentally)? I've successfully set up the bridging; a CentOS 7 VM on the same host has full connectivity. So it's something about the rtl8139 and the 2.0.36 kernel. What is the oldest distribution you've done on KVM on C7?

3 4

CentOS 7 + HPLIP = blank page
by Nicolas Kovacs 22 Apr '17

22 Apr '17

Hi, I just installed CentOS 7 + KDE on a new workstation in my office. I tried to setup my printer, but the test page is blank. Here's some details. The printer is an HP OfficeJet 8600 Pro. It works perfectly with all other desktop clients running Slackware Linux and HPLIP. I installed hplip and hplip-gui, launched HP Toolbox and then setup the printer - a network printer - which is mainly a matter of confirming OK, OK, OK. The printer shows up OK in HP Toolbox, but when I try to print a test page, the printer ejects a blank page, that's it. Which leaves me clueless. Cheers, Niki Kovacs -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 9

Grub Prompt
by Allan E. Registos 22 Apr '17

22 Apr '17

Hi list, Good day to you all, Please correct me if this is the right list for posting this problem I am having with CentOS, but here is the details of the problem: I have a VMware guest running under Centos 6.5/64-bit. I rarely rebooted this OS, and was using it as my backend for some of my applications, like the A.R.T.(BI tool) and a PostgreSQL server. "But I was not unable to start the server because it now default to the grub prompt, here is what it look like: GNU GRUB version 0.97 (638K lower / 3143616K upper memory) [ Minimal BASH-like line editing is supported. For the first word, TAB lists possible command completions. Anywhere else TAB lists the possible completions of a device/filename.] grub> _ " I search google but the solutions provided does not solve this issue. Thank you, Allan

1 1

nameserver issue
by Fred Smith 22 Apr '17

22 Apr '17

Hi all! This question is, at best, somewhat peripheral to Centos, but I'm hoping to be forgiven, and that someone here can give me a clue. I've just brought up a nameserver on my household LAN, bind9 on a Raspberry Pi. The connection with Centos is this: my main desktop is C7, and its hardwired network is also manual, not dhcp. I've edited the ipv4 config (in NM) and changed the DNS settings from 192.168.2.1 (the router) to 192.168.2.2 (the RPi). I've also manually tweaked /etc/resolv.conf to contain 192.168.2.2 instead of 192.168.2.1. works fine. until I fire up a vpn. having done that, looking in /etc/resolv.conf (while the vpn is connected) it has reverted to 192.168.2.1. after shutting down the vpn, 192.168.2.1 remains in resolv.conf what am I overlooking here? now the not-so-Centos-related question: I've changed the dhcp settings in my router so it should deliver 192.168.2.2 to the dhcp clients instead of 192.168.2.1. And it does, sorta. all the systems that use DHCP, now are configured with two DNS server addresses, 192.168.2.2, and 192.168.2.1. And I have no clue why 192.168.2.1 is still showing. Both windows and Linux systems are showing this behavior. Clues appreciated! and thanks in advance. -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- But God demonstrates his own love for us in this: While we were still sinners, Christ died for us. ------------------------------- Romans 5:8 (niv) ------------------------------

2 4

anaconda/kickstart: bonding device not created as expected
by Frank Thommen 21 Apr '17

21 Apr '17

Hi, I am currently struggling with the right way to configure a bonding device via kickstart (via PXE). I am installing servers which have "eno" network interfaces. Instead of the expected bonding device with two active slaves (bonding mode is balance-alb), I get a bonding device with only one active slave and an independent, non-bonded network device. Also the bonding device gets its MAC address from the second instead of from the first device. I appreciate any hint (or rtfm with the name of the correct fm ;-) on how to achieve the desired setup through kickstart. Please find the used PXE and kickstart settings and resulting network configuration below. I did this with CentOS 7.2.1511. We cannot go further due to Infiniband and lustre drivers which are currently only supported for this CentOS 7.x version Cheers frank -------------------------------------------------- The used PXE configuration is LABEL CentOS-7 kernel centos-7/vmlinuz append initrd=centos-7/initrd.img ip=dhcp nameserver=xx.xx.xx.xx ksdevice=eno1 inst.repo=http://our.mirror.server/7/os/x86_64 inst.ks.sendmac inst.ks=http://our.kickstart.server/ks.cgi and the network settings in the kickstart file are network --device bond0 --bondslaves=eno1,eno2 --bondopts=mode=balance-alb --bootproto=dhcp --hostname=myhost --activate I would have expected to get a bonding device with eno1 and eno2 as slave devices, the bonding device inheriting the MAC address from eno1 (otherwise DHCP won't work). Instead the result is a bonding device with eno2 as - sole - slave device and eno1 as a single active device with the main IP address of the host: bond0: flags=5187<UP,BROADCAST,RUNNING,MASTER,MULTICAST> mtu 1500 inet6 fe80::42f2:e9ff:fec7:b5f1 prefixlen 64 scopeid 0x20<link> ether 40:f2:e9:c7:b5:f1 txqueuelen 0 (Ethernet) RX packets 29 bytes 5274 (5.1 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 39 bytes 3486 (3.4 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 eno1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet xx.xx.xx.xx netmask 255.255.255.0 broadcast xx.xx.xx.xx inet6 fe80::42f2:e9ff:fec7:b5f0 prefixlen 64 scopeid 0x20<link> ether 40:f2:e9:c7:b5:f0 txqueuelen 1000 (Ethernet) RX packets 4303 bytes 798163 (779.4 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1686 bytes 481585 (470.2 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 16 eno2: flags=6211<UP,BROADCAST,RUNNING,SLAVE,MULTICAST> mtu 1500 ether 40:f2:e9:c7:b5:f1 txqueuelen 1000 (Ethernet) RX packets 29 bytes 5274 (5.1 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 39 bytes 3486 (3.4 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 17 The ifcfg-files look basically ok, but there are two for the eno1 device. ifcfg of the bonding device: $ cat ifcfg-bond0 # Generated by parse-kickstart IPV6INIT="yes" DHCP_HOSTNAME="myhost" NAME="Bond connection bond0" BONDING_MASTER="yes" BOOTPROTO="dhcp" BONDING_OPTS="mode=balance-alb" DEVICE="bond0" TYPE="Bond" ONBOOT="yes" UUID="35910614-4a7c-43c9-8e44-dcf44b783358" $ ifcfg of the two slave devices $ cat ifcfg-bond0_slave_1 # Generated by parse-kickstart NAME="bond0 slave 1" MASTER="35910614-4a7c-43c9-8e44-dcf44b783358" HWADDR="40:f2:e9:c7:b5:f0" TYPE="Ethernet" ONBOOT="yes" UUID="f3a0a007-861c-42b6-8264-6efba62232ce" $ $ cat ifcfg-bond0_slave_2 # Generated by parse-kickstart NAME="bond0 slave 2" MASTER="35910614-4a7c-43c9-8e44-dcf44b783358" HWADDR="40:f2:e9:c7:b5:f1" TYPE="Ethernet" ONBOOT="yes" UUID="ee3f7c84-d4cb-412e-887d-6b1c753eb913" $ ifcfg of eno1 (which physically has the MAC address 40:f2:e9:c7:b5:f0, which is the same as ifcfg-bond0_slave_1 $ cat ifcfg-eno1 # Generated by dracut initrd NAME="eno1" DEVICE="eno1" ONBOOT=yes NETBOOT=yes UUID="d20645a0-8093-45f3-9630-d0249f76726b" IPV6INIT=yes BOOTPROTO=dhcp TYPE=Ethernet DNS1="192.55.188.177" $

2 2

Problems With Booting CentOS on Dell T7910
by Paul E. Virgo 21 Apr '17

21 Apr '17

Hello! Does anyone have any experience with installing CentOS 6 (specfically, 6.8), on a Dell T7910? I've tried at least a dozen installs, everything gets configured, and when I have the system reboot, I get 'No boot device found press any key to reboot the machine'. In BIOS, I've enabled AHCI, Legacy boot and modes, and enabled the SAS controller. The disks are seen and written to. It uses a MPT SAS3 RAID controller, and I've even specified a 'diskdrive' statement pointing to the known drivers for the controller, and still nothing. This system is listed as compatible, but I don't know. Any suggestions or help appreciated.. -- Paul E Virgo Sr. System Administrator Code 610.2 SESDA III - DAAC/DISC Goddard Space Flight Ctr/NASA Greenbelt, MD Greenbelt, MD 20771 (301) 614-5751

2 2

What besides Postfix should not start until system time set?
by Robert Moskowitz 21 Apr '17

21 Apr '17

So I have learned that Postfix should delay until Chronyd has moved the system time from 0 to current. What other services need to be delayed? Apache? Bind? Of course if this is a nameserver, Chronyd will probably not be able to resolve the NTP server addresses until Bind is running! thanks

5 10

softwarecollections.org
by William Warren 21 Apr '17

21 Apr '17

Who do I contact about softwarecollections being offline? I am having to bypass that repo for right now and the packets disappear in the ether on their way..:) William Warren

3 2

CentOS-announce Digest, Vol 146, Issue 5
by centos-announce-request＠centos.org 21 Apr '17

21 Apr '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:1100 Critical CentOS 6 nss-util Security Update (Johnny Hughes) 2. CESA-2017:1100 Critical CentOS 6 nss Security Update (Johnny Hughes) 3. CESA-2017:1105 Important CentOS 6 bind Security Update (Johnny Hughes) 4. CESA-2017:1104 Critical CentOS 6 firefox Security Update (Johnny Hughes) 5. CESA-2017:1109 Moderate CentOS 6 java-1.8.0-openjdk Security Update (Johnny Hughes) 6. CESA-2017:1100 Critical CentOS 7 nss-util Security Update (Johnny Hughes) 7. CESA-2017:1100 Critical CentOS 7 nss Security Update (Johnny Hughes) 8. CESA-2017:1106 Critical CentOS 7 firefox Security Update (Johnny Hughes) 9. CESA-2017:1108 Moderate CentOS 7 java-1.8.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 20 Apr 2017 22:43:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1100 Critical CentOS 6 nss-util Security Update Message-ID: <20170420224359.GA40943(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1100 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1100.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 09d5ded637588ded6406eafe69a19b13d981a8bf945ada12894da1a0d21d376f nss-util-3.28.4-1.el6_9.i686.rpm fcc501f2c221dab92c66ba05ee5ad80ad5894984a5423d7db58020165cc0b45b nss-util-devel-3.28.4-1.el6_9.i686.rpm x86_64: 09d5ded637588ded6406eafe69a19b13d981a8bf945ada12894da1a0d21d376f nss-util-3.28.4-1.el6_9.i686.rpm 62d946e014cfbfb7cc657a58295a8f27b11043f2136edf91126b3ff467400c85 nss-util-3.28.4-1.el6_9.x86_64.rpm fcc501f2c221dab92c66ba05ee5ad80ad5894984a5423d7db58020165cc0b45b nss-util-devel-3.28.4-1.el6_9.i686.rpm 515fd89043687a0cf6f40271d36ebfb34d27bd8304d8027e70b168d110fb81d5 nss-util-devel-3.28.4-1.el6_9.x86_64.rpm Source: 0667ca1376b6eca9ae5b4b0c5745d5ae9801227458afe5c43fab9422908f8763 nss-util-3.28.4-1.el6_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 20 Apr 2017 22:44:03 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1100 Critical CentOS 6 nss Security Update Message-ID: <20170420224403.GA41058(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1100 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1100.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 5821f235b991ffcd273006c24ca9d3e1daf4b6e3228ce7dcb97c24de5b21de41 nss-3.28.4-1.el6_9.i686.rpm 9688f7b58816ab0192210a2ef4c138139083abcdb842ee4f5f8e89847649d610 nss-devel-3.28.4-1.el6_9.i686.rpm 67bbf48d70115e4596bba46853e35e41510e04f76916e676821e953f4abe41b3 nss-pkcs11-devel-3.28.4-1.el6_9.i686.rpm c6e3ea1c22bfc39fd3d8872bf890acfd444b8e27342243c9310477a39e5a1b6b nss-sysinit-3.28.4-1.el6_9.i686.rpm 8e9dc735e1af62d3e6dac0c5997735e19c2e864d78d4a0050d55cf263edfe928 nss-tools-3.28.4-1.el6_9.i686.rpm x86_64: 5821f235b991ffcd273006c24ca9d3e1daf4b6e3228ce7dcb97c24de5b21de41 nss-3.28.4-1.el6_9.i686.rpm a82f4e54a89d9b8923fe457130bf4e7aefc0b9d506716eb1ead0db9fa2b8714a nss-3.28.4-1.el6_9.x86_64.rpm 9688f7b58816ab0192210a2ef4c138139083abcdb842ee4f5f8e89847649d610 nss-devel-3.28.4-1.el6_9.i686.rpm 9d9721cdbb202bd30503872b8a2e80f94cd63a38aba666449fe27dda4cc616dd nss-devel-3.28.4-1.el6_9.x86_64.rpm 67bbf48d70115e4596bba46853e35e41510e04f76916e676821e953f4abe41b3 nss-pkcs11-devel-3.28.4-1.el6_9.i686.rpm f8a915c0d9066123ac1371f559dee7acd48f506ff69e976af11952b623b35201 nss-pkcs11-devel-3.28.4-1.el6_9.x86_64.rpm d3d0d749646b8a0d1a198ac9dc15cfe39b0c9103055fe2d10f5db4971a6bb866 nss-sysinit-3.28.4-1.el6_9.x86_64.rpm 6e7a942c903ded2beadf2744a0f6ddacfd1b92e482396209358b2c4b2d691af9 nss-tools-3.28.4-1.el6_9.x86_64.rpm Source: f3d57fbec19b0a79e88bedf659868d173f34a651a42313ddc600b0ce420aef47 nss-3.28.4-1.el6_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 20 Apr 2017 22:44:08 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1105 Important CentOS 6 bind Security Update Message-ID: <20170420224408.GA41177(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1105 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1105.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 266ff64660c075b7bfb17bbf4d4c356ff3ccdd119f35a129ae133cc44a69ea6c bind-9.8.2-0.62.rc1.el6_9.1.i686.rpm 888eb9b8a3cb22ebc9b0a3f4b6506921b87ee43a15e6fda781341330151dc3cb bind-chroot-9.8.2-0.62.rc1.el6_9.1.i686.rpm d8858c4a806579f9054d7a037fb073089f67e4785878fc56970ce7380e9bb898 bind-devel-9.8.2-0.62.rc1.el6_9.1.i686.rpm b38c21b53129c69466455a59c955ffafcf8bbae05ffb32b96f9a7ff0e11ff666 bind-libs-9.8.2-0.62.rc1.el6_9.1.i686.rpm 14fef0f86fa4b1dc16744c455212f0898ce499469ff78ad3be09fed7d83e6b9b bind-sdb-9.8.2-0.62.rc1.el6_9.1.i686.rpm fc6060564bf23ed602d04029964e92e6c9eaec7bdfc3699fb8fb70f83e3301bf bind-utils-9.8.2-0.62.rc1.el6_9.1.i686.rpm x86_64: 71e75001dd78f3d3289a8fa1dee4b0732b91367f016ff7a4ed18d7ffe57d76ee bind-9.8.2-0.62.rc1.el6_9.1.x86_64.rpm 4e91a4f03ed4e735bac48da9baddc23b1d02c4c090cf450f7eb4a6f807d38d13 bind-chroot-9.8.2-0.62.rc1.el6_9.1.x86_64.rpm d8858c4a806579f9054d7a037fb073089f67e4785878fc56970ce7380e9bb898 bind-devel-9.8.2-0.62.rc1.el6_9.1.i686.rpm bb151b30485f3ada32fce9f174aa9062109ad18e548f8c3d2dc56ae3cc87183c bind-devel-9.8.2-0.62.rc1.el6_9.1.x86_64.rpm b38c21b53129c69466455a59c955ffafcf8bbae05ffb32b96f9a7ff0e11ff666 bind-libs-9.8.2-0.62.rc1.el6_9.1.i686.rpm d83ffedf34e95f4cf8b5bf1c663e1a5b558f0216ac72f961caaf68464eacd66b bind-libs-9.8.2-0.62.rc1.el6_9.1.x86_64.rpm 9427eeecce239e8fa449d6a10a1859e53d283c9322751db9aa63aad04578f234 bind-sdb-9.8.2-0.62.rc1.el6_9.1.x86_64.rpm 72d554da0c64568336b159232f3e408a45716c32aa41c4c7c8b4fed0a26fe40e bind-utils-9.8.2-0.62.rc1.el6_9.1.x86_64.rpm Source: 111d7cd4e4965321ccee94526fe79629709da816ca6ee47832c44807320883b9 bind-9.8.2-0.62.rc1.el6_9.1.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Thu, 20 Apr 2017 22:44:21 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1104 Critical CentOS 6 firefox Security Update Message-ID: <20170420224421.GA41269(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1104 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1104.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: da7e0a3b2f6cc4703c95b34c6cc75b2815e4ae5035bef6ef56d052c625cc3eaa firefox-52.1.0-2.el6.centos.i686.rpm x86_64: da7e0a3b2f6cc4703c95b34c6cc75b2815e4ae5035bef6ef56d052c625cc3eaa firefox-52.1.0-2.el6.centos.i686.rpm c5d308fb577cb57882c9478a0b7d1c85bbd63ca411399ee4cb3d8bc0af960973 firefox-52.1.0-2.el6.centos.x86_64.rpm Source: 583ca21ee5e6610c077d0671fba0bd4bb0f1117e1115faf4468b8fb44c7f5049 firefox-52.1.0-2.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Thu, 20 Apr 2017 22:44:32 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1109 Moderate CentOS 6 java-1.8.0-openjdk Security Update Message-ID: <20170420224432.GA41439(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1109 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1109.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9224c888761f388ca9a3664dc0b1fb0dcc3904e7462fba3a482d1ecc6ee77285 java-1.8.0-openjdk-1.8.0.131-0.b11.el6_9.i686.rpm 5d0ca0b600d8fe739ac51de1f09882abbc66493cf8e3aff50f0fc8e6717efd78 java-1.8.0-openjdk-debug-1.8.0.131-0.b11.el6_9.i686.rpm e2fe48b3835fb57826354c3266a3ab70236edbbb9b352e0abed5bc4732414f32 java-1.8.0-openjdk-demo-1.8.0.131-0.b11.el6_9.i686.rpm 26f7cb4cd650f0caae18cfcf6945d1aa8fc3bbb35031158f6b0e69d4b233db50 java-1.8.0-openjdk-demo-debug-1.8.0.131-0.b11.el6_9.i686.rpm a21257bb46833259d5368a8824d052732889359195a298cebd46302991e8f5b9 java-1.8.0-openjdk-devel-1.8.0.131-0.b11.el6_9.i686.rpm 548d135b874f032c96707ee87c9625f572c88768f8c76b4f7eb09830da802cb2 java-1.8.0-openjdk-devel-debug-1.8.0.131-0.b11.el6_9.i686.rpm fd096a0b691c2a5404eb1cffd7948d9a67c4eb22d5cf5524bc74ecc35251f63b java-1.8.0-openjdk-headless-1.8.0.131-0.b11.el6_9.i686.rpm 4a75f1a3ce60d1a5a8005e89718dbdf77237bcea549bea9c54c0b72b8ed9ef61 java-1.8.0-openjdk-headless-debug-1.8.0.131-0.b11.el6_9.i686.rpm 4cd56647098db901ef2159069b5aabb8abc78e03e76ade03d2aaaf8f1b3026ae java-1.8.0-openjdk-javadoc-1.8.0.131-0.b11.el6_9.noarch.rpm e27d648018256c24242169e0daf40570c51f2ff159d459e9b5faebfd4f31067f java-1.8.0-openjdk-javadoc-debug-1.8.0.131-0.b11.el6_9.noarch.rpm eb4c6af473dc4144f158ca93b573581922dbdc78f11d5fb7ad91d13bb332653a java-1.8.0-openjdk-src-1.8.0.131-0.b11.el6_9.i686.rpm e31cf76f7bb1463ff56dc41b50da9d8507269c060241b267a4b72a30dd0f1b28 java-1.8.0-openjdk-src-debug-1.8.0.131-0.b11.el6_9.i686.rpm x86_64: 60467c3d0eb329d8015666908ff1f69bb3fe4cf7b366ffd05fd746cadb91d95d java-1.8.0-openjdk-1.8.0.131-0.b11.el6_9.x86_64.rpm 407ad1c6c24fe83a6cf64b9db8913c75aaf4d09ca22c9c24e328a941f085b883 java-1.8.0-openjdk-debug-1.8.0.131-0.b11.el6_9.x86_64.rpm 8369296dfd96ce334763ba5c8ffd509e7643f5d2605b769ff36f09a5a21ab1a0 java-1.8.0-openjdk-demo-1.8.0.131-0.b11.el6_9.x86_64.rpm 610ad62174d70e2eb79b7b70696ea4f53c093215769c78999dbccb15f774b6db java-1.8.0-openjdk-demo-debug-1.8.0.131-0.b11.el6_9.x86_64.rpm 7f296719610ee8b1abd3fcc7dc9f5f62420a2ed721c816ce853322670ba37bde java-1.8.0-openjdk-devel-1.8.0.131-0.b11.el6_9.x86_64.rpm 1b213bfaee59e5313dbbd12045eb6a06c4ea7bc2ec85080c67964635e8f59b83 java-1.8.0-openjdk-devel-debug-1.8.0.131-0.b11.el6_9.x86_64.rpm 4ce2d2b8112ed815ecbfd996c3bf50feb811f1d7ce0ff7037f64755fd6d3ff31 java-1.8.0-openjdk-headless-1.8.0.131-0.b11.el6_9.x86_64.rpm 71e150cb4271c56d20bbed3f889dca93e47352a5d7c9ce88188ea1b45ba93daf java-1.8.0-openjdk-headless-debug-1.8.0.131-0.b11.el6_9.x86_64.rpm 4cd56647098db901ef2159069b5aabb8abc78e03e76ade03d2aaaf8f1b3026ae java-1.8.0-openjdk-javadoc-1.8.0.131-0.b11.el6_9.noarch.rpm e27d648018256c24242169e0daf40570c51f2ff159d459e9b5faebfd4f31067f java-1.8.0-openjdk-javadoc-debug-1.8.0.131-0.b11.el6_9.noarch.rpm 738543c7d856135299d617c17085a8c53a31302ed6e49ca788549fd2aeb15c18 java-1.8.0-openjdk-src-1.8.0.131-0.b11.el6_9.x86_64.rpm 2285a49c613009229265ee4e566a23fb6426c21b17390baa5a30adcf15e2068e java-1.8.0-openjdk-src-debug-1.8.0.131-0.b11.el6_9.x86_64.rpm Source: 6c902637907443fe1ac219a230978d42296894dafa8b4fd8cc3b5df6324e00bd java-1.8.0-openjdk-1.8.0.131-0.b11.el6_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Thu, 20 Apr 2017 23:21:08 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1100 Critical CentOS 7 nss-util Security Update Message-ID: <20170420232108.GA45742(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1100 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1100.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 847b8da43f05a5f24b81b01efbc991e70c5d2c9c659f6bd9feb420bbfe59ba5e nss-util-3.28.4-1.0.el7_3.i686.rpm f23201ad7af7e0d5105bbde62ea32c2a10b62cfd1cdce92fe904306bdfb4ae43 nss-util-3.28.4-1.0.el7_3.x86_64.rpm 78199e2871b2b385458ff852b1609f7c46f71a2a7133ee885f153a3ffc5fc715 nss-util-devel-3.28.4-1.0.el7_3.i686.rpm c26d927e1604c5fc1ab7b5499e96e83d356eee25e3d560e96d60c612891bffa1 nss-util-devel-3.28.4-1.0.el7_3.x86_64.rpm Source: df5fc54dc4fa11167312e53541dc2334c45398132b61f879f1dc2a27cd55f436 nss-util-3.28.4-1.0.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Thu, 20 Apr 2017 23:21:13 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1100 Critical CentOS 7 nss Security Update Message-ID: <20170420232113.GA45832(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1100 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1100.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 7c0e9cbeacb07e7d2868f2f364527ff71816cdfef0dc18474e05db16e57e25e7 nss-3.28.4-1.0.el7_3.i686.rpm 86968563fe276b36b88f07fa11f06c3366a9a96b20c4b2691338748f649f3d4d nss-3.28.4-1.0.el7_3.x86_64.rpm f065aa53f66548495a2130e280fc14dc8b8f8a076bd7bade3425adac88f77d36 nss-devel-3.28.4-1.0.el7_3.i686.rpm caea2c9dc2ca247bb9042124d7d6a60ce4f02d71af28a5e069d60525f80b6740 nss-devel-3.28.4-1.0.el7_3.x86_64.rpm 385f200523e2720d9f250fd3149a471f1f02f5cc55dfae5ac50090a89eab499b nss-pkcs11-devel-3.28.4-1.0.el7_3.i686.rpm ed301c352dabeb127f12decacc3d6639372357dc7673de463ea590773bae3ff6 nss-pkcs11-devel-3.28.4-1.0.el7_3.x86_64.rpm 7c82dbe83f51d6505d368d68535fd34da2da0efc52c3115612011ef791c5bbc6 nss-sysinit-3.28.4-1.0.el7_3.x86_64.rpm fe1d1425aaebb108851540d27337613f169db30ddbdccb336b79d4dc0197eea0 nss-tools-3.28.4-1.0.el7_3.x86_64.rpm Source: 8031fd77de059ce3786fb98712737a9e9e83a8e4e29e8071050ce90ae4a1cb53 nss-3.28.4-1.0.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 8 Date: Thu, 20 Apr 2017 23:21:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1106 Critical CentOS 7 firefox Security Update Message-ID: <20170420232125.GA45911(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1106 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1106.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: db9f358d231c95b7443d58e8a92b90d5bf9f24cd5f2641c3262271cb13aa4ecb firefox-52.1.0-2.el7.centos.i686.rpm 6f191762164e4cf5b54b7a0b4026d78c69e0073abf331840572accd09341a78c firefox-52.1.0-2.el7.centos.x86_64.rpm Source: 90270668303aceb8ffec03143491fee0c4e5fb5245655a37f11188560878b434 firefox-52.1.0-2.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 9 Date: Thu, 20 Apr 2017 23:21:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:1108 Moderate CentOS 7 java-1.8.0-openjdk Security Update Message-ID: <20170420232135.GA46061(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:1108 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-1108.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 80f97a5168f5932d27c58307e818fff0d988324cc1ec96256023901efc29e57c java-1.8.0-openjdk-1.8.0.131-2.b11.el7_3.i686.rpm 7da72b8c1e26b0ce5d6e1005f1548f0edb8fa8d8c7b1f3c14e4aef6666b37085 java-1.8.0-openjdk-1.8.0.131-2.b11.el7_3.x86_64.rpm ce71df28e9ddc9e2ef20d3b650a6fcb5f7fd85f78b6f1dbd165b124b53a47468 java-1.8.0-openjdk-accessibility-1.8.0.131-2.b11.el7_3.x86_64.rpm 4d0182588cf632344b640212c7d6af7cd6eec7e9054e4abe29413985319077c8 java-1.8.0-openjdk-accessibility-debug-1.8.0.131-2.b11.el7_3.x86_64.rpm 468258b25230325f4fefc65cf2cc0ce9981afdc0813353f4ac708fb3a0f6f993 java-1.8.0-openjdk-debug-1.8.0.131-2.b11.el7_3.i686.rpm 100f04812cfacc3074751a4abe5e3fb7116447c00ed5ac627b274fc07dc22862 java-1.8.0-openjdk-debug-1.8.0.131-2.b11.el7_3.x86_64.rpm b15f42135eea22c01a5108a51651785db9c2a6027e15b30df7336ce8195ae52d java-1.8.0-openjdk-demo-1.8.0.131-2.b11.el7_3.x86_64.rpm 730b3081be2ab04afd4ffffd749b201ca99baa77f41c06c09afbeb23351bb4d6 java-1.8.0-openjdk-demo-debug-1.8.0.131-2.b11.el7_3.x86_64.rpm cc8d180344fa874cbea51e5cd79d80220c5b9ba2a34ebc5807000298e18ecbd3 java-1.8.0-openjdk-devel-1.8.0.131-2.b11.el7_3.i686.rpm b7ae364e5b7634782da6695433ff505b9d8c7fcbfa971591d3bbaca464ff39a9 java-1.8.0-openjdk-devel-1.8.0.131-2.b11.el7_3.x86_64.rpm 63f3e239c453cf668521dacbc94bbc67001b10864c57a0bd83305630299dd3c5 java-1.8.0-openjdk-devel-debug-1.8.0.131-2.b11.el7_3.i686.rpm b4a5f6a1c91c695beecc2096e8c212a5e5fb8ed2698b64eae5ec7793525c1f0c java-1.8.0-openjdk-devel-debug-1.8.0.131-2.b11.el7_3.x86_64.rpm 1dfb5b727a67525c934304ebbee7a08745693734d523f8d71e95b3d99c2a748d java-1.8.0-openjdk-headless-1.8.0.131-2.b11.el7_3.i686.rpm a7e0b5f42dc24e0e240a543c692b9a402cd3e187c246371435f5e67ea58fe5ae java-1.8.0-openjdk-headless-1.8.0.131-2.b11.el7_3.x86_64.rpm e7b5333038c1c9c0fe6d095f7b90f53f45960b73717eb083043962e5bf7a306a java-1.8.0-openjdk-headless-debug-1.8.0.131-2.b11.el7_3.i686.rpm 723f5060b6d63f64ebd1b0161dae4b1cd834ae7b7b4c4837b9565e3753ca189f java-1.8.0-openjdk-headless-debug-1.8.0.131-2.b11.el7_3.x86_64.rpm 0804c823721fedc0b9852b6d9603ae233d3a678174a4d897a490b7a2e2ceaf83 java-1.8.0-openjdk-javadoc-1.8.0.131-2.b11.el7_3.noarch.rpm 4b6d9e2df4cd9bfc39d2d0fd27bf7ed722c111e9d031c0f29ab8019fd7610ccc java-1.8.0-openjdk-javadoc-debug-1.8.0.131-2.b11.el7_3.noarch.rpm 65fbfe6c7733aeec5c5b8edce9121f081a14a33ac65af9660e5ce9cfe49be84d java-1.8.0-openjdk-javadoc-zip-1.8.0.131-2.b11.el7_3.noarch.rpm 3bf4903901e52a6303dc72e1bcfc8e33b50c8a1c66ac2769228aec0784132388 java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.131-2.b11.el7_3.noarch.rpm 5d1f88e3b95d9f4a2403f9544045baf92cff53e2123e0d92bf4dd2141e157537 java-1.8.0-openjdk-src-1.8.0.131-2.b11.el7_3.x86_64.rpm 141f62c2952d839b2b0e24f7789c73d4bdfa7b9bbd23634d9054baf1e8c10fbb java-1.8.0-openjdk-src-debug-1.8.0.131-2.b11.el7_3.x86_64.rpm Source: eaac4898178a36c4003be40b7c98c38a7572baa31b52aab5f5e90845202039b4 java-1.8.0-openjdk-1.8.0.131-2.b11.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 146, Issue 5 ***********************************************

3 3

Chrome version 28 for CentOS 6 or last official version that worked on C6
by Jerry Geis 20 Apr '17

20 Apr '17

Anyone know where I can download version 28 of chrome for C6? I know there are "other" ways to get the latest... and install on C6... I know version 28 is old and unsupported and all that... But that is what I need. I think it was the last official build that worked on C6 "as is". Thanks for your help. jerry

2 1

Re: [CentOS] OT: systemd Poll - So Long, and Thanks for All the fish.
by James B. Byrne 20 Apr '17

20 Apr '17

On Mon, April 17, 2017 17:13, Warren Young wrote: > > Also, Iâll remind the list that one of the *prior* times the systemd > topic came up, I was the one reminding people that most of our jobs > summarize as âCope with change.â > At some point 'coping with change' is discovered to consume a disproportionate amount of resources for the benefits obtained. In my sole opinion the Linux community appears to have a change-for-change-sake fetish. This is entirely appropriate for an experimental project. The mistake that I made many years ago was inferring that Linux was nonetheless suitable for business. To experimenters a ten year product cycle may seem an eternity. To many organisations ten years is barely time to work out all the kinks and adapt internal processes to automated equivalents. And the smaller the business the more applicable that statement becomes. I do not have any strong opinion about systemd as I have virtually no experience with it. But the regular infliction of massively disruptive changes to fundamental software has convinced us that Linux does not meet our business needs. Systemd and Upstart are not the cause of that. They are symptoms of a fundamental difference of focus between what our firm needs and what the Linux community wants. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss