- Discuss - lists.centos.org

httpd/sites-available directory
by Robert Moskowitz 14 Mar '17

14 Mar '17

I just received some advice from a colleague of a colleague over at openssl.org. But they use debian. Please look at this and help me out on how Centos7 handles this: Note the comment of the location of virtualhost config files. Centos7 does not have a "man a2ensite". thanks Rewriterules and https. Actually, looking at what you have doesn't really tell me why it gets applied to everything and not just the webmail. However, I'd say that your roundcubemail.conf is much overworked. We use something like that on openssl.org, but it generally looks like this: <VirtualHost *:80> ServerAdmin webmaster@localhost ServerName ${HOSTNAME} ServerAlias ${HOSTALIASES} Redirect permanent /https://${HOSTNAME}/ </VirtualHost> Since you already know that the host is correct and that's the port 80 virtualhost, there's no point testing that with those RewriteCond you have. Also, Redirect is faster and preferable to RewriteRule for this kind of stuff, seehttps://httpd.apache.org/docs/2.4/rewrite/avoid.html Also, specifically for virtualhost config files, they should be located in sites-available/ rather than conf.d/, see 'man a2ensite'. conf.d/ is older style configuration of general stuff... or well, that's at least true for Debian, I'm not sure this is specific for Debian distributions and their derivates or if it's a native Apache thing. You'll have to check the manuals to confirm.

2 4

Processing Conflict: speexdsp-1.2-0.9.rc3.el6.x86_64
by James B. Byrne 14 Mar '17

14 Mar '17

Processing Conflict: speexdsp-1.2-0.9.rc3.el6.x86_64 conflicts speex <= 1.2-0.21.rc1 I am loath to replace things on my primary workstation as I have far too much to do as it is without dealing with self-inflicted injuries. However, I do use Jitsi as a softphone and the latest version has a dependency on a package in EPEL which replaces something from the base distro. Can someone inform me of what issues, if any, would replacing speex with speexdsp likely cause? I have a lot of packages that depend upon speex. Installing speexdsp by itself seems to indicate that it is not considered an upgrade or replacement for speex. One just conflicts with the other. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

Missing something else - pidgin-sipe
by m.roth＠5-cent.us 14 Mar '17

14 Mar '17

I installed pidgin-sipe, since my googling seemed to suggest it would give me connectivity with Lync. I now see the SIMPLE protocol... but not Office Communicator. What am I missing here? CentOS 7, updated. mark

2 1

systemd, oh my
by m.roth＠5-cent.us 14 Mar '17

14 Mar '17

Ok, folks, I don't get this one at all. I've got a server that I just rebuilt last week, from C5 to C7. It used to export filesystems. Those were moved to another server, and NFS wasn't turned up when I built it. I just turned it down again. And yet, I see Mar 14 10:26:33 <servername> systemd: Job dev-disk-by\x2dlabel-export1.device/start timed out. Mar 14 10:26:33 <servername> systemd: Timed out waiting for device dev-disk-by\x2dlabel-export1.device. Mar 14 10:26:33 <servername> systemd: Dependency failed for File System Check on /dev/disk/by-label/export1. Mar 14 10:26:33 <servername> systemd: Dependency failed for /export/1. Why is this running? The systems' been up for 10 days, and I didn't set up such a job. mark

2 2

i686 packages for httpd and php
by Rajmohan Banavi 14 Mar '17

14 Mar '17

I do not see any i686 packages (32 bit) for httpd and php on the repositories for CentOS 7. Are they available somewhere? If not, is there a reasonably simple/quick way to build them myself? Thanks.

2 1

Hotel ethernet via nmcli
by Robert Moskowitz 14 Mar '17

14 Mar '17

Here I sit in my hotel room with my Cubie armv7 server with Centos7. They have an ethernet cable here, so most likely I will not need to resort to putting a WiFi USB dongle and trying to master nmcli. But I have to web authenticate to their portal with my personal information. Is that possible with a text web browser? I seem to recall that Centos has one. What to install? Of course, catch-22 here. How to install it to have the tool to authenticate! Going to have to go down to the conference ethernet cafe. Oh well. Have a fun night, all.

3 2

Problem getting ssh agent forwarding to work
by rainer＠ultra-secure.de 14 Mar '17

14 Mar '17

Hi, I need to get agent-forwarding working. I have: - a local OpenSUSE 42.1 box, where my key(s) reside (ssh agent running and working) - a remote FreeBSD 10.3 box, where I can login with my key (works) - from the FreeBSD box, I need to get to a CentOS 7 box (without entering a password - does not work) On the FreeBSD box, I can see my keys, when I type ssh-add -l I've enabled ssh agent forwarding locally and on the FreeBSD server (in sshd and ssh config). I've enabled ssh agent forwarding on the CentOS server [root@centos7-server ~]# grep Agent /etc/ssh/sshd_config AllowAgentForwarding yes My public key resides in the authorized_key file on the CentOS server. Still, I get a password-prompt. (I've disabled SELinux). I admit I never use agent-forwarding (I just don't need it). I set a password on the account and when I enter that password, I can login. So, it shouldn't a problem with the account per-se.

2 2

Strange behaviour of yum within %post in kickstart
by Ralph Angenendt 14 Mar '17

14 Mar '17

Hi, (This is happening on CentOS 6) during a machine's kickstart I install several yum repositories which are contained in an RPM. During the %post phase I install an RPM which has a dependency to nodejs. That package with all of its dependencies can be found in EPEL. On the other hand I have the Softwarecollections repository, which also contains nodejs with the same version. Now nodejs has a dependency on libuv: | root@devcma01 ~ # yum deplist nodejs -q --disableexcludes=all | […] | dependency: libuv.so.0.10()(64bit) | provider: nodejs010-libuv.x86_64 1:0.10.30-1.el6 | provider: libuv.x86_64 1:0.10.34-1.el6 | provider: libuv.x86_64 1:0.10.34-1.el6 As you can see, there are two packages satisfying the dependency. First strange behaviour: | root@devcma01 ~ # yum --disableexcludes=all -v -d9 install nodejs | […] | nodejs-0.10.48-3.el6.x86_64 requires: libuv.so.0.10()(64bit) | --> Processing Dependency: libuv.so.0.10()(64bit) for package: nodejs-0.10.48-3.el6.x86_64 | Searching pkgSack for dep: libuv.so.0.10()(64bit) | Building updates object | up:simple updates time: 0.010 | up:obs time: 0.014 | up:condense time: 0.000 | updates time: 1.059 | TSINFO: Marking 1:nodejs010-libuv-0.10.30-1.el6.x86_64 as install for nodejs-0.10.48-3.el6.x86_64 | […] Why is nodejs010-libuv winning over libuv? It has the longer name *and* an inferior version number. Does the amount of "requires" play a role here? | root@devcma01 ~ # repoquery --requires libuv | wc -l | 32 | root@devcma01 ~ # repoquery --requires nodejs010-libuv | wc -l | 15 The solution seems easy: Exclude nodejs010 from softwarecollections: | root@devcma01 /etc/yum.repos.d # grep exclude= * | python27.repo:exclude=nodejs010* Now comes the other strange behaviour. As said: I install that repository during kickstart and then a package gets installed (within %post) that needs nodejs. The installed repo file has the "exclude" line in it. But: | --> Processing Dependency: nodejs for package: is24-statsd-genuine-v0.7.2-677.noarch | ---> Package nodejs.x86_64 0:0.10.48-3.el6 will be installed | --> Processing Dependency: libuv.so.0.10()(64bit) for package: nodejs-0.10.48-3.el6.x86_64 | ---> Package nodejs010-libuv.x86_64 1:0.10.30-1.el6 will be installed It is as if the exclude line isn't even honoured within the %post section of kickstart. Any idea on why that is? Cheers, Ralph

1 0

How rc-local.service works?
by Yuri Kanivetsky 12 Mar '17

12 Mar '17

Hi, Let me cite the service file here: [Unit] Description=/etc/rc.d/rc.local Compatibility ConditionFileIsExecutable=/etc/rc.d/rc.local After=network.target [Service] Type=forking ExecStart=/etc/rc.d/rc.local start TimeoutSec=0 RemainAfterExit=yes I basically don't understand two things here: 1. What makes it run? Sure, when I make /etc/rc.d/rc.local executable, it runs. But for all I know, for it to run some other service must pull in it as a dependency. Am I wrong? 2. Why Type=forking? Thanks in advance. Regards, Yuri

2 2

kernel memory accounting
by Wensheng Deng 11 Mar '17

11 Mar '17

Hi CentOS experts, I am using CentOS 7. Trying to disable kernel memory accounting: according to https://www.kernel.org/doc/Documentation/cgroup-v1/memory.txt, passing cgroup.memory=nokmem to the kernel at boot time, should be able to archive that. However it is not the case in my exercise. These are what I have now $ grep CONFIG_MEMCG_KMEM /boot/config-3.10.0-327.36.3.el7.x86_64 CONFIG_MEMCG_KMEM=y $ cat /proc/cmdline BOOT_IMAGE=/vmlinuz-3.10.0-327.36.3.el7.x86_64 root=UUID=56568066-5719-46d9-981d-278c7559689b ro quiet cgroup.memory=nokmem systemd.log_level=debug But kernel memory is still accounted in user's applications. Any suggestion on how to chase the issue is greatly appreciated! Thank you! Best Regards, Wensheng

3 5

Re: [CentOS] CentOS-6.8 fsck report Maximal Count
by James B. Byrne 11 Mar '17

11 Mar '17

On Thu, March 9, 2017 09:46, John Hodrien wrote: > On Thu, 9 Mar 2017, James B. Byrne wrote: > >> This indicated that a bad sector on the underlying disk system might >> be the source of the problem. The guests were all shutdown, a >> /forcefsck file was created on the host system, and the host system >> remotely restarted. > > fsck's not good at finding disk errors, it finds filesystem errors. If not fsck then what? > > If it was a real disk issue, you'd expect matching errors in the host > logs. Yes, there are: Mar 9 09:14:13 vhost03 kernel: end_request: I/O error, dev sda, sector 1236929063 Mar 9 09:14:30 vhost03 kernel: end_request: I/O error, dev sda, sector 1236929063 Mar 9 09:14:48 vhost03 kernel: end_request: I/O error, dev sda, sector 1236929063 I am running an extended SMART test on the drive at the moment. I suspect that the drive is probably at its EOL for practical purposes. So likely we will be looking at an equipment upgrade given the age of the rest of the equipment. In the meantime what steps, if any, should I take to remediate this problem? > >> /var/log/messages:Mar 9 08:34:48 vhost03 kernel: EXT4-fs (dm-6): >> warning: maximal mount count reached, running e2fsck is recommended > > Unmount it and run fsck on it, and that message would go away. But > I'd not > worry about that one. > > jh > > -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 6

OT: hardware suggestions for video capture card for a server
by m.roth＠5-cent.us 10 Mar '17

10 Mar '17

We've got several secure rooms, with video surveillance 24x7. A few years ago, we got a couple of cards based on BT878 chips, which we use with the motion package. I've posted here about hardware issues... After a fair bit of testing, the cards just don't seem to be compatible with Dell rackmount server firmware. They work fine... on older Penguins, which are Supermicro. It's clearly not an o/s issue, it's hardware - having tried two Dells, and swapped cards between the old Penguin and the newer Dell, it's the Dell m/b. Does anyone have any suggestions, possibly for video capture cards, perhaps on newer chips? The two requirements are a) accept BNC connectors from the cameras, and b) must have *four* actual channels, not one multiplexed. Thanks in advance, folks. mark

1 0

CentOS-announce Digest, Vol 145, Issue 5
by centos-announce-request＠centos.org 10 Mar '17

10 Mar '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Announcing the release for Gluster 3.10 on CentOS Linux 6 x86_64 (Niels de Vos) 2. Announcing the release for Gluster 3.10 on CentOS Linux 7 x86_64 (Niels de Vos) ---------------------------------------------------------------------- Message: 1 Date: Wed, 8 Mar 2017 22:44:15 +0100 From: Niels de Vos <ndevos(a)redhat.com> To: centos-announce(a)centos.org Subject: [CentOS-announce] Announcing the release for Gluster 3.10 on CentOS Linux 6 x86_64 Message-ID: <20170308214415.GA1546(a)chromebook.lan.nixpanic.net> Content-Type: text/plain; charset="us-ascii" I am happy to announce the General Availability of Gluster 3.10 for CentOS 6 on x86_64. These packages are following the upstream Gluster Community releases, and will receive monthly bugfix updates. Gluster 3.10 is a Long-Term-Maintenance release, and will receive updates for approximately 18 months. The difference between Long-Term-Maintenance and Short-Term-Maintenance releases is explained on the Gluster release schedule page: https://www.gluster.org/community/release-schedule/ Users of CentOS 6 can now simply install Gluster 3.10 with only these two commands: # yum install centos-release-gluster # yum install glusterfs-server The centos-release-gluster package is delivered via CentOS Extras repos. This contains all the metadata and dependency information, needed to install Gluster 3.10. The actual package that will get installed is centos-release-gluster310. Users of the now End-Of-Life Short-Term-Maintenance Gluster 3.9 will automatically get the update to Gluster 3.10, whereas users of Gluster 3.8 can stay on that Long-Term-Maintenance release for an other six months. We have a quickstart guide specifically built around the packages are available, it makes for a good introduction to Gluster and will help get you started in just a few simple steps, this quick start is available at https://wiki.centos.org/SpecialInterestGroup/Storage/gluster-Quickstart More details about the packages that the Gluster project provides in the Storage SIG is available in the documentation: https://wiki.centos.org/SpecialInterestGroup/Storage/Gluster The centos-release-gluster* repositories offer additional packages that enhance the usability of Gluster itself. Utilities and tools that were working with previous versions of Gluster are expected to stay working fine. If there are any problems, or requests for additional tools and applications to be provided, just send us an email with your suggestions. The current list of packages that is (planned to become) available can be found here: https://wiki.centos.org/SpecialInterestGroup/Storage/Gluster/Ecosystem-pkgs We welcome all feedback, comments and contributions. You can get in touch with the CentOS Storage SIG on the centos-devel mailing list ( [15]https://lists.centos.org ) and with the Gluster developer and user communities at [16]https://www.gluster.org/mailman/listinfo , we are also available on irc at #gluster on irc.freenode.net, and on twitter at @gluster . Cheers, Niels de Vos Storage SIG member & Gluster maintainer

1 0

CentOS-5 End of Life
by Johnny Hughes 09 Mar '17

09 Mar '17

Just a message to remind everyone that CentOS-5 has an End of Life date of March 31, 2017. This means that there will be no new security updates released by Red Hat for RHEL-5 after that date. Sometime in early April, the current 5.11 tree will be moved onto vault.centos.org (like CentOS-3 and CentOS-4 have been since their EOL). Thanks, Johnny Hughes

10 19

CentOS-6.8 fsck report Maximal Count
by James B. Byrne 09 Mar '17

09 Mar '17

We have a remote warm standby system running CentOS-6.8 as a KVM system with multiple guests. One of the guests began reporting an error when running aide. Caught SIGBUS/SEGV while mmapping. File was truncated while aide was running? Caught SIGBUS/SEGV. Exiting The /var/log/messages file contained this: Mar 9 09:14:13 inet12 kernel: end_request: I/O error, dev vda, sector 14539264 Mar 9 09:14:31 inet12 kernel: end_request: I/O error, dev vda, sector 14539296 Mar 9 09:14:48 inet12 kernel: end_request: I/O error, dev vda, sector 14539296 df Filesystem 1K-blocks Used Available Use% Mounted on /dev/mapper/vg_inet02-lv_root 7932336 2262672 5260064 31% / tmpfs 961044 0 961044 0% /dev/shm /dev/vda1 487652 139473 322579 31% /boot . . . This indicated that a bad sector on the underlying disk system might be the source of the problem. The guests were all shutdown, a /forcefsck file was created on the host system, and the host system remotely restarted. However, this action did not remove the error. The host system log files had this to say about fsck: /var/log/messages:Mar 9 08:34:48 vhost03 kernel: EXT4-fs (dm-6): warning: maximal mount count reached, running e2fsck is recommended in /dev I see this: brw-rw----. 1 root disk 253, 6 Mar 9 08:34 dm-6 But, this device has nothing whatsoever to do with the kvm guests: ll /dev/vg_vhost03/ | grep dm-6 lrwxrwxrwx. 1 root root 7 Mar 9 08:34 lv_centos_repos -> ../dm-6 Rather this is an lv devoted to holding CentOS ISOs: /dev/mapper/vg_vhost03-lv_centos_repos 101016992 77160124 18718848 81% /var/data/centos So, my questions are: 1. How do I fix the problem with the guest system that Aide is stumbling over? 2. How do I get the fsck issue with dm-6 resolved? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

another SMTP auth question
by Fred Smith 09 Mar '17

09 Mar '17

My ISP has just informed me that we will soon be required to authenticate when connecting to their smtp server, so I've been looking around on the web for how to do that with sendmail (just using auth when connecting outward-bound, nothing else). I've found a page here: http://www.sendmail.org/~ca/email/auth.html that explains it simply (for simple minds, like mine) but it appears to be old-ish. So, I'm wondering if the recommendation of using: define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl is still appropriate, since MD5 is known to be breakable. Are there other hash mechanisms that can be used in SMTP for this purpose? Also, if someone can help me understand the syntax, I'd appreciate it: does EXTERNAL mean some external tool not specified here? if so, how is it specified? what such tools would be appropriate? is there something more robust, e.g., sha256 or similar that should be used here instead? is GSSAPI internal, or does the external mean EXTERNAL GSSAPI? Thanks in advance for any tips. Fred -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

2 1

CentOS-announce Digest, Vol 145, Issue 4
by centos-announce-request＠centos.org 09 Mar '17

09 Mar '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0454 Important CentOS 5 kvm Security Update (Johnny Hughes) 2. CESA-2017:0459 Critical CentOS 5 firefox Security Update (Johnny Hughes) 3. CESA-2017:0459 Critical CentOS 6 firefox Security Update (Johnny Hughes) 4. CEBA-2017:0472 CentOS 5 tzdata BugFix Update (Johnny Hughes) 5. CEBA-2017:0472 CentOS 6 tzdata BugFix Update (Johnny Hughes) 6. CEEA-2017:0458 CentOS 7 kmod-redhat-mpt3sas Enhancement Update (Johnny Hughes) 7. CEEA-2017:0460 CentOS 7 nspr Enhancement Update (Johnny Hughes) 8. CEEA-2017:0460 CentOS 7 nss-util Enhancement Update (Johnny Hughes) 9. CEEA-2017:0460 CentOS 7 nss Enhancement Update (Johnny Hughes) 10. CESA-2017:0461 Critical CentOS 7 firefox Security Update (Johnny Hughes) 11. CEBA-2017:0472 CentOS 7 tzdata BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 8 Mar 2017 18:33:47 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0454 Important CentOS 5 kvm Security Update Message-ID: <20170308183347.GA13291(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0454 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0454.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0e34501fb214585a504064e6aa4e92d8c6324981104fd7a29edc6f918e5cb238 kmod-kvm-83-277.el5.centos.x86_64.rpm 9ed56a631d250bbda7b31e4a1df28387709f816b5974aa87ab522774273e480c kmod-kvm-debug-83-277.el5.centos.x86_64.rpm 38ddb0118eabc062c89dd5353b3da9f4574d4d03c3bb5dba677200cb5522fcb7 kvm-83-277.el5.centos.x86_64.rpm c96ade4c2185dd18a78fcf51c74fe7a7a916de7e45e339975ba14ec5d394928b kvm-qemu-img-83-277.el5.centos.x86_64.rpm 02aed4ba713b572ba9745a568289cb5c48b30b3f94f512a69b77c51bfc532a00 kvm-tools-83-277.el5.centos.x86_64.rpm Source: 125954ae9f9608b901902f81b2d144fbef70efff0e11a761787324457034832d kvm-83-277.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 2 Date: Wed, 8 Mar 2017 18:38:57 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0459 Critical CentOS 5 firefox Security Update Message-ID: <20170308183857.GA13438(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0459 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0459.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: a34545c9cf03031487401a126491ebd9b070d5ae4939388b5257c0247934edbb firefox-45.8.0-2.el5.centos.i386.rpm x86_64: a34545c9cf03031487401a126491ebd9b070d5ae4939388b5257c0247934edbb firefox-45.8.0-2.el5.centos.i386.rpm 68ced987cc2f967a4d8034f1bce8cd63a8ef8a3213cd20d65b66a18a1ca00977 firefox-45.8.0-2.el5.centos.x86_64.rpm Source: 05f28d258f433afa408773c4cac5d3a96058a6e9e25b4991c2e90764335f89e1 firefox-45.8.0-2.el5.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 3 Date: Wed, 8 Mar 2017 18:42:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0459 Critical CentOS 6 firefox Security Update Message-ID: <20170308184241.GA61855(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0459 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0459.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4bec161eb52a589439c71ed05b1cec02090238945f06c5842c46131c1afdb1aa firefox-45.8.0-2.el6.centos.i686.rpm x86_64: 4bec161eb52a589439c71ed05b1cec02090238945f06c5842c46131c1afdb1aa firefox-45.8.0-2.el6.centos.i686.rpm 5419e8f6cd70aaf324f787f935578562ecb86ffc853fd770a850f87050b7e928 firefox-45.8.0-2.el6.centos.x86_64.rpm Source: d9df8316ea7d9e8656a6a2b5b08270d79726ab2be1959a4fd8cf787bb4a3f4a8 firefox-45.8.0-2.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Wed, 8 Mar 2017 21:47:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0472 CentOS 5 tzdata BugFix Update Message-ID: <20170308214705.GA15064(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0472 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0472.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2629f95ec5b436abfe84d0bd0fd0131bc631ae4fdab18b53466fdbbd1a15a11b tzdata-2017a-1.el5.i386.rpm 712ae99e3d37dad1fe54858e8863c71e8be6786f6633cb60a060225e66ba24de tzdata-java-2017a-1.el5.i386.rpm x86_64: 58d0bdf94b0cfb4abea13780d909a74e9d68ed945689f63f1561bdea0c6ed5ee tzdata-2017a-1.el5.x86_64.rpm a767c8d7f0f782394bf6e0dfe5abd4c0999c9176bc139a32a696d1cf4c388478 tzdata-java-2017a-1.el5.x86_64.rpm Source: 02e88e760fe9a2338c9c506c9d4204868da96a3e37f5ac5a8a7436b3c4129a51 tzdata-2017a-1.el5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: JohnnyCentOS ------------------------------ Message: 5 Date: Wed, 8 Mar 2017 21:57:28 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0472 CentOS 6 tzdata BugFix Update Message-ID: <20170308215728.GA14002(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0472 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0472.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 466107e89457fc5fb5e4877d28c7526830645f5ac959a51d0b3fc885bc98b876 tzdata-2017a-1.el6.noarch.rpm 4439dfe15e245981524c2fbc8c0928864b4e3da67a761fc0f1b613099c712ac5 tzdata-java-2017a-1.el6.noarch.rpm x86_64: 466107e89457fc5fb5e4877d28c7526830645f5ac959a51d0b3fc885bc98b876 tzdata-2017a-1.el6.noarch.rpm 4439dfe15e245981524c2fbc8c0928864b4e3da67a761fc0f1b613099c712ac5 tzdata-java-2017a-1.el6.noarch.rpm Source: 7d1c14c90c5fdf3cf78f906bf353f7b42bdde64352110fbd98514af1c2ba3c0e tzdata-2017a-1.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 6 Date: Wed, 8 Mar 2017 22:23:59 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2017:0458 CentOS 7 kmod-redhat-mpt3sas Enhancement Update Message-ID: <20170308222359.GA28923(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2017:0458 Upstream details at : https://rhn.redhat.com/errata/RHEA-2017-0458.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5d5fd5d8ca7d36045da7cf51014ef923cf0e7ff482f99fa745d5b81babd54d86 kmod-redhat-mpt3sas-14.101.00.00-1.el7_3.x86_64.rpm Source: 13c5b33f5504eb2c4c708fe21111e655ba77e6aff6fc7846cbc30f082a0f2f18 kmod-redhat-mpt3sas-14.101.00.00-1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 7 Date: Wed, 8 Mar 2017 22:24:12 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2017:0460 CentOS 7 nspr Enhancement Update Message-ID: <20170308222412.GA28994(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2017:0460 Upstream details at : https://rhn.redhat.com/errata/RHEA-2017-0460.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 09b3e71758a143e0aff8ec7669fe75ca87981b1c6a45cb1efe38cf53a54c04b9 nspr-4.13.1-1.0.el7_3.i686.rpm 3a6c20e7132e12ba31fbb56ae97cf0397dc5b512b175454df3f0be34e1acbe72 nspr-4.13.1-1.0.el7_3.x86_64.rpm 4681806392b6fa97ccee438f8452b0c5de023aea3c386bb570b6ad42a31c3329 nspr-devel-4.13.1-1.0.el7_3.i686.rpm 29cef81f1891be05670c3a5f69363b30a8f4e16705edbb75739fa5c4653c706b nspr-devel-4.13.1-1.0.el7_3.x86_64.rpm Source: 7449a93d80a5bb372f618feb8d965cd10806b78d07104eacd716ff6b8692efc7 nspr-4.13.1-1.0.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 8 Date: Wed, 8 Mar 2017 22:24:30 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2017:0460 CentOS 7 nss-util Enhancement Update Message-ID: <20170308222430.GA29063(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2017:0460 Upstream details at : https://rhn.redhat.com/errata/RHEA-2017-0460.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4fa594de013548c41deed341d101062104ba382b33a64434e0fd71019db3b106 nss-util-3.28.2-1.1.el7_3.i686.rpm 4ddbdb0cc496c5d6bbe4bbe7edfb1c8a1ebb7d3ae7a3eb90dda8890280048427 nss-util-3.28.2-1.1.el7_3.x86_64.rpm 4ce32703476e615bc9c362c22ee596c23d4c143a63960c8e0919b9faf689be8a nss-util-devel-3.28.2-1.1.el7_3.i686.rpm baad28c5e87dd2126a1bef1e8308f37d30520397f9ba95c5f49adc50f6953628 nss-util-devel-3.28.2-1.1.el7_3.x86_64.rpm Source: bcee8b9c13e01f912a50965455bf4a26f9ecfe98683dee488ccccbc2cb028de8 nss-util-3.28.2-1.1.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 9 Date: Wed, 8 Mar 2017 22:24:46 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2017:0460 CentOS 7 nss Enhancement Update Message-ID: <20170308222446.GA29148(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2017:0460 Upstream details at : https://rhn.redhat.com/errata/RHEA-2017-0460.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f903ae7228a486794fc475c6f1e5c95b441144e69697ba5915a125b5d0c47eac nss-3.28.2-1.6.el7_3.i686.rpm 997bf50bedd8b277f58b892c5fce32693ce41a1daa0f80cce14c4f348f697d95 nss-3.28.2-1.6.el7_3.x86_64.rpm 9a3bf58c2fdef2f3b099be23603d209dbcbd5f00ef0a4c4777ce3a03f7e0ae2e nss-devel-3.28.2-1.6.el7_3.i686.rpm c10d9e308bccc51e59b3d1d3ab70a1075db1d29eb4afc94df54e10b75d19b4fd nss-devel-3.28.2-1.6.el7_3.x86_64.rpm cb0aedace30812ebd3ddd75dee3f6c1db288c0c46cc7137a939f5c9084bbe3ab nss-pkcs11-devel-3.28.2-1.6.el7_3.i686.rpm e3f1102d8afc25abbd440358269ed353adef67b83a64c75182f116dc88efa5eb nss-pkcs11-devel-3.28.2-1.6.el7_3.x86_64.rpm 11856ae59608ce6385bdef2ad417612a5dd8e5602a645627ae9afcfbe5841253 nss-sysinit-3.28.2-1.6.el7_3.x86_64.rpm 433e4525339e22c5edaf0dbecf47b7d0a95ad3563788074fbc160ee03e1197f8 nss-tools-3.28.2-1.6.el7_3.x86_64.rpm Source: bdc27cc85a0f92d93385bb711f4bc69fbf617dd649d70384be53666e01324d36 nss-3.28.2-1.6.el7_3.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 10 Date: Wed, 8 Mar 2017 22:25:09 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0461 Critical CentOS 7 firefox Security Update Message-ID: <20170308222509.GA29233(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0461 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0461.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 1d0b658fdec4ca46114566017609d05174e57d3a4fe8f2dad5cc4bef31b79565 firefox-52.0-4.el7.centos.i686.rpm 84e4a856f98b3fc61b4185bd1b7e77914ada452c9438379e84f7ea6ee5f63daf firefox-52.0-4.el7.centos.x86_64.rpm Source: e962f4e9d1ca12f273caa044beb279a741c0229cb909c88d2c0a8507b4a6b582 firefox-52.0-4.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 11 Date: Wed, 8 Mar 2017 22:25:23 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2017:0472 CentOS 7 tzdata BugFix Update Message-ID: <20170308222523.GA29302(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2017:0472 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0472.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 5466bcb17ce08e9000a2c49c4d794df5b14cb134bd8626c0dd1ee1d8ad5f2487 tzdata-2017a-1.el7.noarch.rpm 96548dc39c746c9d7fd1b31f7c792c8f1b4244f25faac417bfc535905108eac3 tzdata-java-2017a-1.el7.noarch.rpm Source: 1c46024fee2400b239ff093d385e7757d0d63f976a49d9997101b8466b2851ff tzdata-2017a-1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 145, Issue 4 ***********************************************

1 0

CentOS 6, mini-SAS and eSATA
by m.roth＠5-cent.us 07 Mar '17

07 Mar '17

We've got this Dell server. In it, we've got two LSI HBAs. Mini-SAS to one RAID box. The other, cheapo RAID box, has eSATA. We got a mini-SAS-to-eSATA cable - actually, it's one mini-SAS to three eSATA. The systems sees not those disks. Will this just not work, with the HBA, or is there a driver that will let the what, mpt2SAS driver see the eSATA drives? mark

1 0

CentOS-announce Digest, Vol 145, Issue 3
by centos-announce-request＠centos.org 07 Mar '17

07 Mar '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Re: CESA-2017:0294 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CESA-2017:0386 Important CentOS 7 kernel Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Mar 2017 09:03:51 -0600 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: Re: [CentOS-announce] CESA-2017:0294 Important CentOS 7 kernel Security Update Message-ID: <94be00e4-0b9c-4137-1ba0-e3aacb0c17e6(a)centos.org> Content-Type: text/plain; charset="windows-1252" On older index number (2017:0294) was accidentally attached to these new kernel packages. The actual announcement index number should be: 2017:0386 The link is: https://rhn.redhat.com/errata/RHSA-2017-0386.html Please disregard the previous announcement and I will do the correct one in a few minutes. Thanks, Johnny Hughes On 03/03/2017 07:31 AM, Johnny Hughes wrote: > > CentOS Errata and Security Advisory 2017:0294 Important > > Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0294.html > > The following updated files have been uploaded and are currently > syncing to the mirrors: ( sha256sum Filename ) > > x86_64: > 212a275e48ec514d4861c2a3875dc9db349113c85c7a0ef2bc117433ed672c6a kernel-3.10.0-514.10.2.el7.x86_64.rpm > 69a054916b0971013c950394269393f7bca325c4a54864d651ee0dfcd70f0987 kernel-abi-whitelists-3.10.0-514.10.2.el7.noarch.rpm > abaacb8f44ebc8450cb741bc9e5e4a9619f8e72741f072a53129774d63afeb15 kernel-debug-3.10.0-514.10.2.el7.x86_64.rpm > 591ccd7652ec7f515920e056326ad8057fb88b5e8ef1d0b968a719ea7c82090a kernel-debug-devel-3.10.0-514.10.2.el7.x86_64.rpm > 0cf810a3e592ac9c6fa3d20135ad40c1fb81eae26f167e57b1a18d69f7f72ce4 kernel-devel-3.10.0-514.10.2.el7.x86_64.rpm > 1f6a8ce592f859a78fc03f5d6eafae0a8f7574f0336c9a111ebbc11ea57d8291 kernel-doc-3.10.0-514.10.2.el7.noarch.rpm > 3ea79ae6d6b7efabd4676e5e537bf43a069ce7b84fd604273c5a454ddba26331 kernel-headers-3.10.0-514.10.2.el7.x86_64.rpm > 89a7eafa0a4ae0a1f7d01df12cc640250557dbffe831062c1cdc718fa3f49527 kernel-tools-3.10.0-514.10.2.el7.x86_64.rpm > 7c412e18af66b6b4250a803e8c81c6c9b88e71b8a5e039108f21033223abf882 kernel-tools-libs-3.10.0-514.10.2.el7.x86_64.rpm > cf48a20efabb6be1adb03d14fe948e360b1930d194458b4dc30ea4f043730c5d kernel-tools-libs-devel-3.10.0-514.10.2.el7.x86_64.rpm > bef65f9243e0e1f0a56592f2a906d3d88fad0d39fd8848240fd2729b801df676 perf-3.10.0-514.10.2.el7.x86_64.rpm > 78004dd93fd62f990c3962e9a9c6cfc46ce4efe974bc425ee1791df9c226fec8 python-perf-3.10.0-514.10.2.el7.x86_64.rpm > > Source: > d9bb044abf6a37556f7935801606f03964941e5fd805085bf012cc29ba6b7dac kernel-3.10.0-514.10.2.el7.centos.plus.src.rpm > 67495a911d87f9f2feaa736f9de2b93575199794338d30e01ec600c14b77d893 kernel-3.10.0-514.10.2.el7.src.rpm > > >

1 0

CentOS 7, firefox, and flash
by m.roth＠5-cent.us 07 Mar '17

07 Mar '17

I posted Friday about this oddity. Now I've got more data, and what's happening is this: if I tell noscript to enable youtube and googlevideo in one tab, not only does it affect *all* tabs, but also affects another browser window opened from the first browser window. Anyone have any clues for a workaround fix? mark

3 2

base64 response for websockets
by Jerry Geis 06 Mar '17

06 Mar '17

I'm trying to generate the correct response to a websocket connect. The websocket connect is: GET /chat HTTP/1.1 Host: example.com:8000 Upgrade: websocket Connection: Upgrade Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ== Sec-WebSocket-Version: 13 So I take the Sec-WebSocket-Key above and add the extra part and put that in /tmp/sha1 dGhlIHNhbXBsZSBub25jZQ==258EAFA5-E914-47DA-95CA-C5AB0DC85B11 I then run sha1sum /tmp/sha1 and it gives: 05082898ab78f6da9c1ad2587b8012cd0cf52172 I put that in a file /tmp/base64 and run base64 /tmp/base64 The result of that is: MDUwODI4OThhYjc4ZjZkYTljMWFkMjU4N2I4MDEyY2QwY2Y1MjE3Mgo= Which is not correct. Its supposed to be s3pPLMBiTxaQ9kYGzzhZRbK+xOo= What am I not doing correct? Thanks, Jerry

2 2

dracut-initqueue errors while using virt-install + kickstart file
by Germano Massullo 06 Mar '17

06 Mar '17

I am trying to install a CentOS qemu/kvm virtual machine using a virt-install script[1]. Since Anaconda text user interface does not permit to users to edit filesystem type and mount points[2], I decided to use a kickstart file to customize such settings. To create a kickstart file, I used a trick: I installed a CentOS machine using Anaconda graphical user interface, and I made all customizations I need, then when the installation has been completed, I got the kickstart file (generated by Anaconda) in /root. [3] Then I added --grow flags to enlarge "/" as much as possible. After that, I started the virt-install script passing as input an ISO and the kickstart file, but the installation failed with logs [4]. Where did I make mistakes? Thank you for your time [1]: https://paste.fedoraproject.org/paste/OrbunqjpK7pxGlkUJdnV015M1UNdIGYhyRLiv… [2]: https://bugzilla.redhat.com/show_bug.cgi?id=1426126 [3]: https://paste.fedoraproject.org/paste/4zKZ3RopjwX5OmpuVAhwG15M1UNdIGYhyRLiv… [4]: https://paste.fedoraproject.org/paste/QYijE3MFeyoGpGdgSHPp715M1UNdIGYhyRLiv…

1 2

How to automatically confirm importing repo key?
by Yuri Kanivetsky 05 Mar '17

05 Mar '17

Hi, I'm trying to set up provisioning LXC container running CentOS. And among other things, I need to install nginx + passenger from a non-official repo (the docs: https://www.phusionpassenger.com/library/install/nginx/install/oss/el7/) With this playbook: - hosts: all tasks: # https://docs.ansible.com/ansible/yum_repository_module.html - name: Add repository yum_repository: # from https://oss-binaries.phusionpassenger.com/yum/definitions/el-passenger.repo name: passenger description: Passenger repository baseurl: https://oss-binaries.phusionpassenger.com/yum/passenger/el/$releasever/$bas… repo_gpgcheck: 1 gpgcheck: 0 enabled: 1 gpgkey: https://packagecloud.io/gpg.key sslverify: 1 sslcacert: /etc/pki/tls/certs/ca-bundle.crt # http://docs.ansible.com/ansible/command_module.html - name: (1) Add repository key (shell command) command: rpm --import https://packagecloud.io/gpg.key # # http://docs.ansible.com/ansible/rpm_key_module.html # - name: (2) Add repository key (python code) # rpm_key: # key: https://packagecloud.io/gpg.key # http://docs.ansible.com/ansible/yum_module.html - name: Install nginx yum: name={{ item }} with_items: nginx ansible fails performing the last task with: Failure talking to yum: failure: repodata/repomd.xml from passenger: [Errno 256] No more mirrors to try. https://oss-binaries.phusionpassenger.com/yum/passenger/el/7/x86_64/repodat…: [Errno -1] repomd.xml signature could not be verified for passenger no matter which way of importing key I choose (1 or 2). If I then ssh to container and run `yum install nginx` manually, it says: Retrieving key from https://packagecloud.io/gpg.key Importing GPG key 0xD59097AB: Userid : "packagecloud ops (production key) <ops(a)packagecloud.io>" Fingerprint: 418a 7f2f b0e1 e6e7 eabf 6fe8 c2e7 3424 d590 97ab From : https://packagecloud.io/gpg.key Is this ok [y/N]: And I suppose this extra confirmation request is what makes ansible fail. Can it be confirmed automatically? I tried to make it clear for those who don't use ansible, but feel free to ask questions. Thanks in advance. Related Stack Overflow question (just in case): http://stackoverflow.com/questions/38327406/how-to-install-yum-repository-k… Regards, Yuri

1 1

How to rebuilt the pxe initramfs
by Andreas Benzler 05 Mar '17

05 Mar '17

Hello Guys, i read the official red hat documentation of "How built pxe initramfs", but it does not work" the inluded version of initramfs is about 42MB, mine 13MB. This is again one of more failure of redhat documentation. That's why i ask here. In my despair tried a very hard version: dracut -v -f -m "nfs network base" --add-drivers "nfsv4 (find /lib/modules/3.10.0-514.el7.x86_64/kernel/drivers/net ) $(find /lib/modules/3.10.0-514.el7.x86_64/kernel/drivers/virtio/) "; chmod 644 /boot/initramfs-3.10.0-514.el7.x86_64.img In the past i did it on ubuntu and it works flawless - means in principal I know what I do. Thanks for help Sincerely Andy PS: given kernel & initramfs from iso boots..

1 1

Python search path
by Alice Wonder 05 Mar '17

05 Mar '17

Hello, Working on a project to create clean spec files for libbitcoin for CentOS 7 (and eventually I want them to work in Fedora 25+ too) These spec files must work with the user defines an alternate %{_prefix} before building them. This means that python components would be installed in /opt/libbitcoin (or whatever) instead of in /usr so %{python2_sitelib} and %{python2_sitearch} no longer would apply. sys.path.append looks like the way to tell python about a new path to look for stuff, but I'm guessing there are guidelines somewhere for how that is suppose to properly done from within spec files. Unfortunately I can't find them, and search engines are getting harder and harder to use to find technical related information, always changing my query and showing me completely unrelated results. Anyway I didn't see anything in the Fedora packaging guidelines for python, that seems to be targeting a prefix of /usr Thanks for any links or suggestions.

2 3

CentOS 7 iso file SHA-256 hashes
by Darr247 04 Mar '17

04 Mar '17

I downloaded CentOS-7-x86_64-Everything.iso (8,233,418,752 bytes) by clicking on the 'Everything' link in the 'Rolling' line on https://wiki.centos.org/Download (supposedly the 1611 build). But when I look in the sha256sum.txt file from https://buildlogs.centos.org/rolling/7/isos/x86_64/ (where Chrome says that iso came from), there is no SHA hash for a file of that name. The reason I wanted to check it is because it's a different size than another one I found on my hard drive while looking through the Downloads history in Chrome. The other file I found was CentOS-7-x86_64-Everything-1611.iso (8,280,604,672 bytes), which returns a hash of af4969ebbdc479d330de97c5bfbb37eedc64c369f009cb15a97f9553ba441c88 and that matches the value given in the sha256sum.txt file for the file of that name. So, my question is tri-fold. what's the SHA-256 hash supposed to be for the file given when clicking the 'Everything' link on centos.org. then, why is the 'official' download link sending a file that's not listed in the hash results. and finally, why is the file sent thusly, different from another 'everything' iso allegedly from the same build? Thanks.

2 2

New C7 kernel ABI and kmods
by Lamar Owen 04 Mar '17

04 Mar '17

All, This is just a heads-up that the new C7 update kernel breaks ABI compatibility, at least as far as using the ELrepo nVidia drivers is concerned. I have posted more details to the ELrepo list; but since many folks use the Elrepo kmods I thought a heads-up would be appropriate. If you use the ELrepo nvidia kmod you will either need to hold off on the kernel update or uninstall the nvidia kmod.

4 4

last update yum and kernel Problem
by Günther J. Niederwimmer 04 Mar '17

04 Mar '17

Hello, the last update brings much Problems ? On my System the most KVM client have a crashed yum after reboot the new kernel is broken and have a panic screen I have to reboot to a older kernel ? The first I have to run yum-complete-transaction afterward i have to reinstall the kernel ?? this helps to restart the KVM Client ! is it possible the deltarpm is broken ? Also RPM or "yum check" have a problem with the new update for ipa-* I mean the problem is the naming 4.4.0-14.el7.centos.6 -- mit freundlichen Grüssen / best regards Günther J. Niederwimmer

2 1

imaging a drive with dd
by Robert Moskowitz 04 Mar '17

04 Mar '17

I am building a mailserver and with all the steps, I want to image the drive at various 'checkpoints' so I can go back and redo from a particular point. The image is currently only 4GB on a 120GB drive. Fdisk reports: Disk /dev/sdb: 111.8 GiB, 120034124288 bytes, 234441649 sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: dos Disk identifier: 0x0000c89d Device Boot Start End Sectors Size Id Type /dev/sdb1 2048 1026047 1024000 500M 83 Linux /dev/sdb2 1026048 2074623 1048576 512M 82 Linux swap / Solaris /dev/sdb3 2074624 6268927 4194304 2G 83 Linux and parted: Model: Kingston SNA-DC/U (scsi) Disk /dev/sdb: 120GB Sector size (logical/physical): 512B/512B Partition Table: msdos Disk Flags: Number Start End Size Type File system Flags 1 1049kB 525MB 524MB primary ext3 2 525MB 1062MB 537MB primary linux-swap(v1) 3 1062MB 3210MB 2147MB primary ext4 what dd params work? dd if=/dev/sdb of=os.img bs=1M count=3210 ? thanks

7 19

C 7.3 sshd will not reload
by me＠tdiehl.org 04 Mar '17

04 Mar '17

Hi, Since upgrading to 7.3 I am having a problem getting sshd to reload after configuration changes. When I issue the command "systemctl reload sshd.service" I get the following error: "Unit sshd.service cannot be reloaded because it is inactive." It is obviously still running because I am connected over ssh to the machine and netstat shows it is listening. (vnewman pts3) # netstat -tulpn | grep ssh tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 29249/sshd tcp 0 0 127.0.0.1:6010 0.0.0.0:* LISTEN 3012/sshd: root@pts (vnewman pts3) # If I reboot the machine, then everything is OK. Has anyone seen this behavior or more importantly know how to fix it? Regards, -- Tom me(a)tdiehl.org Spamtrap address me123(a)tdiehl.org

3 7

A firefox/CentOS 7 oddity
by m.roth＠5-cent.us 03 Mar '17

03 Mar '17

I just switched to a new workstation, running C 7, the other day. I was looking at a blog, and in the thread of cmts, I wanted to play this one youtube video. I listened, then closed the tab. The video that had been *above* it in the thread started playing, and hasn't stopped. Every other time until now that I've done this, closing the tab shuts down the video.... mark

1 0

what's the max thread number per process in centos
by qw 03 Mar '17

03 Mar '17

Hi, I have one question: what's the max thread number per process in centos? Thanks! Regards Andrew

3 3

Laptop turns off after lid closed Centos6
by david 03 Mar '17

03 Mar '17

Folks I have a laptop which i am using temporarily as a test server. It is permanently plugged in. It is running Centos 6, command line only. In the past, I could close the lid, thereby turning off the display, but not turning off the machine. It remained running indefinitely. A recent update (this past week) changed that behavior. Now, when I close the lid, the laptop turns itself off within an hour. A google search talks about tools like "upower" and apcitool, but a "yum search" does not locate them. Is there a way to revert back to the previous behavior? Thanks David

4 4

MRTG and eth0
by Matt 03 Mar '17

03 Mar '17

Is there an easy way to graph ethernet eth0 on Centos 7 with MRTG without using SNMP? I thought I found a way to do this in past by using a shell script to poll the interface but cannot find it back.

2 1

Lenovo M900 with CentOS 7 strangeness
by SZ, Zsolt 03 Mar '17

03 Mar '17

Hello, I would like to install CentOS 7.3 on my new Lenovo M900 machine. I am using the official 1 DVD installer. The installation process was fine without any error but after reboot the USB keyboard and the USB mouse did not work. Therefore I was not able to type anything or pass the first boot screen. Only the power button is working. Any idea why? I believe the installation media is using the same kernel components as the installed machine. So why the installer is working and the installed system is not? BR, Zsolt

2 2

Using Apache 2.2 config files on Apache 2.4
by Mark Weaver 02 Mar '17

02 Mar '17

Hello List, I'm in the process of migrating LAMP servers. I've got a C5 LAMP server in my rack that has been running faithfully without complaint for the past 9 years. In some ways I really hate to move out of it, but there are things to get done, things to consider and reasons that make the migration necessary. I've got a C7 server loaded and the basic configuration partially completed. All the packages I need to replace the old server are in place. But I've reached a point where something has come up and I don't know the answer to: Can I use the configuration files and methods I'm accustomed to from apache 2,2 from my C5 server with Apache 2.4 on the new C7 server? I've been looking at the way thing are done with Apache 2.4 on C7 and in regards to SSL configuration I really don't care for it. It seems convoluted and a bit unnecessarily complicated. /I'm sure there's a good reason for it... I'm either not seeing it, or I'm sub-consciously not interested in why it's this way./ Thanks in advance, Mark

2 4

CentOS-announce Digest, Vol 145, Issue 1
by centos-announce-request＠centos.org 02 Mar '17

02 Mar '17

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2017:0352 Important CentOS 6 qemu-kvm Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 1 Mar 2017 12:08:31 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2017:0352 Important CentOS 6 qemu-kvm Security Update Message-ID: <20170301120831.GA3705(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2017:0352 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2017-0352.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d98ea83c921266bec1265d80c2ecd23393fbb1d38ac26e4afc346f505b339d71 qemu-guest-agent-0.12.1.2-2.491.el6_8.7.i686.rpm x86_64: 30f8f516f9f9c8724a45ec5f027504306ff55f50fa6b582c4807499e476bc838 qemu-guest-agent-0.12.1.2-2.491.el6_8.7.x86_64.rpm 9e92c88f855f17f79d0a351b149d13a42e6e6191627811a905a90579430d3d16 qemu-img-0.12.1.2-2.491.el6_8.7.x86_64.rpm 6a0fe555a926f37c12c6d08db27cb42ed0ddc411a4ec26da5e91f70786fd28c0 qemu-kvm-0.12.1.2-2.491.el6_8.7.x86_64.rpm 47316c5ecd2765d102ee51b2d7cfa8a532dd761a7972d7e307ed727c72004ca7 qemu-kvm-tools-0.12.1.2-2.491.el6_8.7.x86_64.rpm Source: 111fd18646f7aac66fd719a05b74761f348404309672c7fb93f3efefdd631233 qemu-kvm-0.12.1.2-2.491.el6_8.7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 145, Issue 1 ***********************************************

1 0

system encryption question
by FHDATA 02 Mar '17

02 Mar '17

Hello, Centos 7.x Let say a clean-install of Centos 7.x is being performed on a box simply with two partitions / and /boot ... and that there is no extra complexity like lvm , raid ,etc,etc ... Centos 7.x process allows / to be encrypted with pass phrase... How can a key, residing on a usb flash drive, to be added to the encryption of / ? So the system needs both manual input of pass phrase as well as presence of usb flash drive to come up after getting rebooted. Thank you, F-

2 1

Finding lshw and flash-plugin or alternates
by david 02 Mar '17

02 Mar '17

Dear CentOS Gurus I have been using "repoforge.org" primarily to obtain two RPMs, "lshw" and "flash-plugin". I recently realized that "repoforge.org" should not be used, as it has had no updates for a long long time. But, when I search for the RPMs within the repos: base centosplus contrib epel extras updates the lshw program is nowhere to be found. I value its ability to inventory the hardware, and construct an attractive HTML page. So, for each of these two programs, - is there a repo I can add that would cover what I need - is there an alternate program in the case of lshw This applies no only to Centos 6 (32 & 64), but also Centos 7. David

4 3

Re: [CentOS] [1/2 resolved] Finding lshw and flash-plugin or alternates
by david 01 Mar '17

01 Mar '17

At 01:44 PM 3/1/2017, you wrote: >david wrote: > > Dear CentOS Gurus > > > > I have been using "repoforge.org" primarily to obtain two RPMs, > > "lshw" and "flash-plugin". I recently realized that "repoforge.org" > > should not be used, as it has had no updates for a long long > > time. But, when I search for the RPMs within the repos: ><snip> >CentOS 7, just updated: > yum list lshw >Available Packages >lshw.x86_64 B.02.17-12.el7 base > >Have you tried just yum install lshw? > > mark > >__ What can I say. Sometimes the fingers on the keyboard outpace the brain. "DUH" :-) David

1 0

Re: [CentOS] Finding flash-plugin or alternates
by david 01 Mar '17

01 Mar '17

Folks An earlier post concerning 'lshw' has been resolved. It exists in 'base' for el6(32), el6(64), el7(64) and armv5tel (rpi2). So, I will repeat the original request with lshw concerns removed. I have been using "repoforge.org" primarily to obtain RPMS for "flash-plugin". I recently realized that "repoforge.org" should not be used, as it has had no updates for a long long time. But, when I search for the RPMs within the repos: base centosplus contrib epel extras updates So, is there a repo I can add that would cover what I need This applies not only to Centos 6 (32 & 64), but also Centos 7 and maybe armv5tel (rpi2/3). David

1 0

NetworkManager and Half DHCP not work correct - second time.
by Andreas Benzler 01 Mar '17

01 Mar '17

Hello Guys, today i strungle in my office and at home. 1. The networkadapter works before on "full" dhcp. 2. change to half (means searchname and searchserver manual) 3. order was correct inside the config, but in seperated network configs: PEERDNS=yes ????? 5. DNS Server where in wrong direction in the consol. 4. I changed the PEERDNS entry at home manually. Reboot. Everything works as expected, nameserver in right order (NEW, OLD, OLD2). At my office i deleted every adapter and rearrange it. Strange, but true. Sincerely Andy PS: Don't tell me disable NetworkManager. I know both work out. :-)

1 0

Re: [CentOS] Nvidia related kernel panic on boot, *unless* the keyboard is tapped
by Denniston, Todd A CIV NAVSURFWARCENDIV Crane, JXVS 01 Mar '17

01 Mar '17

> -----Original Message----- > From: Duncan Brown [mailto:centos2@duncb.co.uk] > Sent: Wednesday, March 01, 2017 5:49 AM > To: CentOS(a)centos.org > Subject: [CentOS] Nvidia related kernel panic on boot, *unless* the keyboard is tapped > > So here is an odd one > > Ever since the upgrade to 7.3, when using the el-repo kmod-nvidia, boot > hangs around the 'mounted /boot' point. If left it then kernel panics > > However at that point, tapping the keyboard gets it going again. As I'm > using a wireless keyboard, even the act of switching the keyboard on > gets it going again > > This doesn't happen without the kmod, and I'm in the process of > capturing the panic to file the bug report with el-repo, but for the > sake of conversation has anyone seen anything like this before, or have > any idea why that could happen? > > cheers > > Dunc > I have not checked to see if elrepo has kicked out all the new drivers to fix it since then, but apparently RH changed some kernel 'pointers' in 7.3 which kind of messes up some of the kmods: https://elrepo.org/bugs/view.php?id=715 https://elrepo.org/bugs/view.php?id=710 I am betting that you installed the kmod-nvidia before the upgrade to 7.3 and thus did not get the kind of warning that those folks did. Perhaps even related to this issue: https://elrepo.org/bugs/view.php?id=693 which kmod-nvidia do you have? At the bottom of 693, pperry indicates: "kmod-nvidia-367.57-2.el7.elrepo.x86_64 is for EL7.3". Even when this disclaimer is not here: I am not a contracting officer. I do not have authority to make or modify the terms of any contract.

2 1

Xen-4.4 branch End of Life
by Johnny Hughes 01 Mar '17

01 Mar '17

The CentOS VIrtualization Special Interest Group wants to remind everyone that the End of Life for the Xen-4.4 branch (currently 4.4.4-19) will be March 31st, 2017. This is because the Xen Project will no longer support Xen-4.4 after that date, based on this link: https://wiki.xenproject.org/wiki/Xen_Project_Release_Features Xen-4.6 is still available and will be maintained until October 2018 (on both CentOS-6 and CentOS-7) and Xen-4.8 will be available soon. Thanks, Johnny Hughes

1 0

Nvidia related kernel panic on boot, *unless* the keyboard is tapped
by Duncan Brown 01 Mar '17

01 Mar '17

So here is an odd one Ever since the upgrade to 7.3, when using the el-repo kmod-nvidia, boot hangs around the 'mounted /boot' point. If left it then kernel panics However at that point, tapping the keyboard gets it going again. As I'm using a wireless keyboard, even the act of switching the keyboard on gets it going again This doesn't happen without the kmod, and I'm in the process of capturing the panic to file the bug report with el-repo, but for the sake of conversation has anyone seen anything like this before, or have any idea why that could happen? cheers Dunc

1 0

Systemd debug logging turned on in CentOS 7
by Thomas Eriksson 28 Feb '17

28 Feb '17

Hi, I noticed that some, but not all, of my CentOS 7 machines have these kernel parameters for turning on systemd debug level logging added to the grub.cfg file. systemd.log_level=debug systemd.log_target=kmsg The parameters are *not* in the /etc/default/grub file, so if I rebuild grub.cfg with grub2-mkconfig, they disappear. I am a bit puzzled over how they got introduced. Has anyone else seen this? thanks, Thomas

5 8

sshd Match Group directive problem
by Bernard Fay 28 Feb '17

28 Feb '17

I try to set up two "Match Group" directives in sshd_config. I have an LDAP server. All users including admins are part of the LDAP group users. The admins users are also part of the LDAP group wheel. For example: [~]groups admin1 admin1 : users wheel [~]groups users user1 : users On a client server to LDAP, I try to configure two "Match Group" directives in sshd_config as follows: Match Group wheel some keywords... Match Group users some keywords... The problem is that even if a user is a member of LDAP group wheel, the "Match Group wheel" directive is skipped in favor of the "Match Group users" directive. Is it possible to have two "Match Group" directives as I like to do it? If yes, what is wrong in my configuration? Thanks,

2 2

Checksums for git repo content?
by Leonard den Ottolander 27 Feb '17

27 Feb '17

Hi all, Since the vault for 7.3.1611 has been cleared out last sunday (20170207) - why is that? - I'm using git to download a "SRPM", or more accurately, its contents. However, using git has one major drawback: It is missing checksums for the files. Are there any plans to provide checksums for the files in git so I can be sure that what I download is actually not tampered with? SRPMS are signed so we can be sure there content is what you provided. Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

8 20

kernel update/reboot best practice question
by Valeri Galtsev 27 Feb '17

27 Feb '17

Dear All, Quite some time ago I have noticed that kernel updated quite often "come in pairs". That is, if there was no kernel update for quite some time, and, say, today kernel update for some system level (say, CentOS 6) was released, then it is quite likely that there will be yet one more kernel update for the same system level 3-5 days later. As if the kernel is first patched quick and dirty, then more careful and comprehensive work is done. Not that I would disagree with this practice, to the contrary, from some prospective it makes a lot of sense to me. I wonder what best practices everybody follows: do you tolerate two reboots separated by few days, or you wait till final kernel update comes, and reboot only once then? Thanks a lot for your insights! Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++

2 2

All Samba shares suddenly becoming read only
by Gary Stainburn 27 Feb '17

27 Feb '17

I have a Centos 7 server – ZEPPO - which I use for file sharing. The clients are all Win7 PC's and I use Samba to serve the files. It has been working fine ever since I put it live late last year. Now, all of a sudden, all files are read-only. I recently added a USB WiFi dongle to give the server a presence on the WiFi VLAN. Using this I am able to provide an Air Print service for our mobile devices. For some reason this made the server unavailable to some clients, including a Fedora box (GROUCHO) that does host health checks using ping. What I found was that if the WiFi was up on Zeppo (10.6.103.1/24) then Groucho (10.6.1.1/24) could not ping Zeppo's LAN address 10.6.1.101/24. Groucho only has the LAN and has no WiFi. However, Zeppo could still ping groucho. If the WiFi was down on Zeppo then Groucho could ping Zeppo. Also, the clients could access the file shares. Although I didn't get to the bottom of it, I did make it go away by * removing an obsolete alias on the LAN interface 10.6.1.3/24 * changed the WiFi from DHCP to manual, although still with the same settings. Once I'd done this, I was happy until the users started telling me that they could only open documents as read-only. On testing this I found that all of the Samba shares are now read only. I can't even create a new empty file in an existing folder. I have not changed any file permissions on the server, nor have I changed and Samba config. I've had a look in /var/log/samba and can't see anything. The log.smbd and log.nmbd don't show anyting relating to this. The log.10.6.5.2 file is empty I've tried disabling selinux as a test but that made no difference. The samba user = the linux user and if I ssh in as that user I can create files and folders. Can anyone suggest what I need to do next to stop these shares being read only. Ta -- https://fundraise.cancerresearchuk.org/page/garys-march-march

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss