Discuss

discuss@lists.centos.org

34750 discussions

IP routing basics?
by lejeczek 12 Jun '23

12 Jun '23

Hi guys. I've always try to leave as mush as possible to the kernel but here I had to resort to source/rule based routing and I wonder why. Any expert cared to share some light on what is (not)happening here HOME -- tunnel --> public iface SHED gw A iface; B iface <-- to respectively --> SOME box A iface; B iface HOME can get to both A & B ifaces, (which are different subnets) all the way up to the SOME box Now, a DIFFERENT box runs/is behind/on that SOME box, which connects to A iface & B iface respectively (which SOME's A & B ifaces are linux bridges) need - so it appears - manual rules in order to have HOME get to DIFFERENT's iface B with IPs: 10.3.9.0/24 -> tunnel -> SHED's 10.1.1.254 & 10.3.1.254 -> SOME's 10.1.1.99 & 10.3.1.99 - all good! ---||--- -> DIFFERENT's 10.1.1.50 - works ---||--- -> DIFFERENT's 10.3.1.50 - for this one I need to set rules (on DIFFERENT only) so HOME can get to it All boxes have METRICs set the same way: iface on 10.1.1.0/24 runs with 111 & on 10.3.1.0/24 runs with 113 metrics. So I must(?) use these, so HOME can get to DIFFERENT's both ifaces: -> $ ip ro ls table 113 default via 10.3.1.254 dev enp0s3 -> $ ip ro ls table 114 default via 10.1.1.254 dev enp0s10 & rules: 32764: from 10.3.1.0/24 to 10.3.9.0/24 lookup 113 32765: from 10.1.1.0/24 to 10.3.9.0/24 lookup 114 I'd prefer to not to use human-set rules but if not possible, I'll be happy with an explanation. many tanks, L.

1 0

JOB | Sysadmin/Lead Platform Engineer (Singapore or London)
by James Tobin 10 Jun '23

10 Jun '23

Hello, I'm working with an employer that is looking to hire someone to be responsible for the modernisation of their on prem environment. There will be lots of VMware and traditional sysadmin work; moving into more of a Kubernetes/ Python/infra-as-code heavy role only once the migration project is completed (say 12 months). Consequently I had hoped that some members of this group may like to discuss. I can be reached using "JamesBTobin (at) Gmail (dot) Com". Kind regards, James

2 1

macsec - place inside the stack of ifaces ?
by lejeczek 05 Jun '23

05 Jun '23

Hi guys. Looking at macsec I've only started - so go easy on me with possibly trivial questions - and write here in hope, that some of you have expertise to tell... Having a bond device which is a slave to a bridge -> where must MACSEC go in order to - if feasible in NM at all that is - secure all the traffic going via the physical device(s)? Just to make it clear - though probably obvious - all traffic, say kernel VMs which use such bare-metal host's bridge iface for communication out/in of the host. Or even most basic of what I ponder over - macsec with 'bond' as parent? All & any thoughts shared are much appreciated. many thanks, L.

1 0

IUS not pulling latest PHP packages
by Kaushal Shriyan 26 May '23

26 May '23

Hi, I am running CentOS Linux release 7.9.2009 (Core) and have enabled both epel and ius repository - ius-release-2-1.el7.ius.noarch - epel-release-7-14.noarch IUS not pulling the latest PHP packages. I have ran yum clean metadata and yum clean all commands but no luck. The latest version is *7.4.33* # php -v PHP 7.4.30 (cli) (built: Jun 10 2022 16:22:42) ( NTS ) Copyright (c) The PHP Group Zend Engine v3.4.0, Copyright (c) Zend Technologies with Zend OPcache v7.4.30, Copyright (c), by Zend Technologies EPEL repository #########################cat /etc/yum.repos.d/epel.repo################################################################ [epel] name=Extra Packages for Enterprise Linux 7 - $basearch # It is much more secure to use the metalink, but if you wish to use a local mirror # place its address here. #baseurl=http://download.example/pub/epel/7/$basearch metalink= https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch&infra… failovermethod=priority enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 [epel-debuginfo] name=Extra Packages for Enterprise Linux 7 - $basearch - Debug # It is much more secure to use the metalink, but if you wish to use a local mirror # place its address here. #baseurl=http://download.example/pub/epel/7/$basearch/debug metalink= https://mirrors.fedoraproject.org/metalink?repo=epel-debug-7&arch=$basearch… failovermethod=priority enabled=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 gpgcheck=1 [epel-source] name=Extra Packages for Enterprise Linux 7 - $basearch - Source # It is much more secure to use the metalink, but if you wish to use a local mirror # place it's address here. #baseurl=http://download.example/pub/epel/7/source/tree/ metalink= https://mirrors.fedoraproject.org/metalink?repo=epel-source-7&arch=$basearc… failovermethod=priority enabled=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 gpgcheck=1 #################################################################################################################### IUS repository #########################cat /etc/yum.repos.d/ius.repo######################################### [ius] name = IUS for Enterprise Linux 7 - $basearch baseurl = https://repo.ius.io/7/$basearch/ enabled = 1 repo_gpgcheck = 0 gpgcheck = 1 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-IUS-7 [ius-debuginfo] name = IUS for Enterprise Linux 7 - $basearch - Debug baseurl = https://repo.ius.io/7/$basearch/debug/ enabled = 0 repo_gpgcheck = 0 gpgcheck = 1 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-IUS-7 [ius-source] name = IUS for Enterprise Linux 7 - Source baseurl = https://repo.ius.io/7/src/ enabled = 0 repo_gpgcheck = 0 gpgcheck = 1 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-IUS-7 ####################################################### Please guide me. Thanks in advance. Best Regards, Kaushal

3 3

Apache mpm itk
by Gionatan Danti 17 May '23

17 May '23

Hi all, the EPEL repository for CentOS7 contains httpd-itk, an apache module for running different vhosts under specific user/group ID. For RHEL8 I can find it only in 3rd party repos, while I misses it entirely for RHEL9. Is the module deprecated? Can it be re-included into EPEL? Regards. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

2 3

for code beakers/hackers/researchers - parallel
by lejeczek 17 May '23

17 May '23

Hi guys. With the latest version of 'parallel' from EPEL - absolutely one of the coolest binaries ever - I wonder if you noticed this: I'm doing this as 'root', with no particular reason: -> $ > ~/1 -> $ parallel --tag --nonall -S boxA,boxB uptime -> $ cp /etc/shadow ~/1 -> $ parallel --tag --nonall -S boxA,boxB uptime one of the boXes has that 1 file. (previous parallel version do not do that) and if you happened to be a code-wizz, then you wondered & can tell what the source is doing & why. (is it bash/shell?) many thanks, L.

1 0

mock fails on gpg with epel - ?
by lejeczek 04 May '23

04 May '23

Hi guys, Does your 'mock' work when used with 'centos-stream+epel-9-x86_64' config? It fails for me with every rpm packages I tried: -> $ mock -r centos-stream+epel-9-x86_64 --rootdir=~/mock --localrepo=/devs/var/www/dnf.repo --chain --continue rpmbuild/rpm.src/pass-1.7.4-6.el9.src.rpm ... CentOS Stream 9 - BaseOS 1.6 MB/s | 1.6 kB 00:00 The GPG keys listed for the "CentOS Stream 9 - BaseOS" repository are already installed but they are not correct for this package. Check that the correct key URLs are configured for this repository.. Failing package is: alternatives-1.20-2.el9.x86_64 GPG Keys are configured as: file:///usr/share/distribution-gpg-keys/centos/RPM-GPG-KEY-CentOS-Official Public key for audit-libs-3.0.7-103.el9.x86_64.rpm is not installed. Failing package is: audit-libs-3.0.7-103.el9.x86_64 ... many thanks, L.

2 2

mediainfo crashes after latest update (CentOS 7)
by wwp 02 May '23

02 May '23

Hello, after mediainfo packages have been updated from 22.12-3.el7.x86_64 to 23.03-1.el7.x86_64, I observe reproducible crashes here, mostly by using it with mkv files. I couldn't find a mirror of the EPEL repository where 22.12 is still available (only found an old 20.08-1). Does anybody reproduces issues w/ mediainfo? Any hint how to find the 22.12-3 rpms? Regards, -- wwp

2 2

CentOS-announce Digest, Vol 213, Issue 1
by centos-announce-request＠centos.org 25 Apr '23

25 Apr '23

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2023:1875 Important CentOS 7 java-11-openjdk Security Update (Johnny Hughes) 2. CESA-2023:1806 Important CentOS 7 thunderbird Security Update (Johnny Hughes) 3. CESA-2023:1791 Important CentOS 7 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 24 Apr 2023 14:47:41 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2023:1875 Important CentOS 7 java-11-openjdk Security Update Message-ID: <20230424144741.GA25029(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2023:1875 Important Upstream details at : https://access.redhat.com/errata/RHSA-2023:1875 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: e813e31fc27015fa715af1d13ab9191ba9af31d93085ac2e76e58359305bc66a java-11-openjdk-11.0.19.0.7-1.el7_9.i686.rpm 385d88da6f3dbafec168b9405c82b40252b4f9d9df0ef1b7328108f1b7de4898 java-11-openjdk-11.0.19.0.7-1.el7_9.x86_64.rpm f97f8b49e1c67b65e3bc3821a5542f91cff1d9241f858a36d041fae368a1f2fc java-11-openjdk-demo-11.0.19.0.7-1.el7_9.i686.rpm 5732a4798be4c87badb456e95d85a69fdcc47d79f536cdf10bf8bfe8ac5353ab java-11-openjdk-demo-11.0.19.0.7-1.el7_9.x86_64.rpm acb345f09856db7783a06a30026e252117dbee4274e86ea5b3c2959410f22b01 java-11-openjdk-devel-11.0.19.0.7-1.el7_9.i686.rpm bce793675eea8330ee5714f685ee6bf75de56dd9f106dbbe3149d9fa9d144416 java-11-openjdk-devel-11.0.19.0.7-1.el7_9.x86_64.rpm 764c4140bd73b1c0bdc434edd88f8c15595f4b1c04c426277e3e1b098ebe7d16 java-11-openjdk-headless-11.0.19.0.7-1.el7_9.i686.rpm dff37a0add22b38eab5365de428508592ec00dc762e1cb45853495efb7c80c04 java-11-openjdk-headless-11.0.19.0.7-1.el7_9.x86_64.rpm 0688bc15522e5a3eee9f6ec2d771f77743a5979f6ac5afa0ec5059daa5926e35 java-11-openjdk-javadoc-11.0.19.0.7-1.el7_9.i686.rpm 28a98571198ec6a28a437669678c624aad4fa1d5a6a2dd1bfb4884dddc584a5c java-11-openjdk-javadoc-11.0.19.0.7-1.el7_9.x86_64.rpm b9cbd1c4954833f2a8f3d68b1cc92407f3df064e044f0f7f335563bf1983963b java-11-openjdk-javadoc-zip-11.0.19.0.7-1.el7_9.i686.rpm 04ec871279754a00e7006a2f023b95ed305dc36a9ff23d65ed20cbf987b07ffd java-11-openjdk-javadoc-zip-11.0.19.0.7-1.el7_9.x86_64.rpm dc7ff660e8cb322dcf0a071b2f556dfa57cc7a3c0a543524ae2c9b6a807d8262 java-11-openjdk-jmods-11.0.19.0.7-1.el7_9.i686.rpm 0a8fa0a8748dd4667a74653e840521e8d0602e1f9210bb2b27d75c59318081c0 java-11-openjdk-jmods-11.0.19.0.7-1.el7_9.x86_64.rpm ce32d3269966c385c52153f1c95ee8578b768a8b69a1d2937f50ab40dc45e380 java-11-openjdk-src-11.0.19.0.7-1.el7_9.i686.rpm 8477e56cf835d806a8f5345ebff218dfbceb351c7bca81b9aa806a2fa8930f02 java-11-openjdk-src-11.0.19.0.7-1.el7_9.x86_64.rpm b322d84f1b35af3ca899bf943ee67782b8ae449a4769e0b3d0b7f455085b669c java-11-openjdk-static-libs-11.0.19.0.7-1.el7_9.i686.rpm 8c2b3aa763d6d464e67be783b62d083cadc0aa9caf7fd24997ebcb514c44a4b2 java-11-openjdk-static-libs-11.0.19.0.7-1.el7_9.x86_64.rpm Source: c982928e997746e90c99c719fdee03f0d29b653645c7ebe43efb472402215b35 java-11-openjdk-11.0.19.0.7-1.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 24 Apr 2023 14:49:28 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2023:1806 Important CentOS 7 thunderbird Security Update Message-ID: <20230424144928.GA25820(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2023:1806 Important Upstream details at : https://access.redhat.com/errata/RHSA-2023:1806 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 18d655d9234417eb4a995a66801cb9c7ac35362aadaa734d8674f8e744986b8f thunderbird-102.10.0-2.el7.centos.x86_64.rpm Source: 70d971745070e8ad2dcd09c8569fa54715616898dd3013c7833cb9ce229383ad thunderbird-102.10.0-2.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 24 Apr 2023 17:46:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2023:1791 Important CentOS 7 firefox Security Update Message-ID: <20230424174600.GA32175(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2023:1791 Important Upstream details at : https://access.redhat.com/errata/RHSA-2023:1791 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 58a5f6025a63f07b9dc9793ec13c58029a3502315d1bb29d4c7015091c9e8dbe firefox-102.10.0-1.el7.centos.i686.rpm a4124d55ffe94d6e2682cb82eb1191d84b8b271f2950a8cbf86be4ade606a768 firefox-102.10.0-1.el7.centos.x86_64.rpm Source: 32ac8fa502bc25dafbb8360c60b031c2b82c92dcaf1dfd1b0cb5a40ae775b6d4 firefox-102.10.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)libera.chat Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 213, Issue 1 ***********************************************

1 0

bash test ?
by lejeczek 20 Apr '23

20 Apr '23

Hi guys. I cannot wrap my hear around this: -> $ unset _Val; test -z ${_Val}; echo $? 0 -> $ unset _Val; test -n ${_Val}; echo $? 0 -> $ _Val=some; test -n ${_Val}; echo $? 0 What is this!? How should two different, opposite tests give the same result Is there some bash option which affects that and if so, then what would be the purpose of such nonsense? many thanks, L.

5 8

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss