Discuss

discuss@lists.centos.org

34729 discussions

how to set a directory to system_u?
by hw 04 Oct '21

04 Oct '21

Hi, I'm trying to a lable a directory for ejabberd to store files that were uploaded with the http_upload module. Apparently I should set this to 'system_u:object_r:ejabberd_var_lib_t:s0' since all the files in /var/lib/ejabberd are. So: ls -laZ /srv/data/ unconfined_u:object_r:ejabberd_var_lib_t:s0 320 Jul 29 23:55 ejabberd semanage fcontext -a -t ejabberd_var_lib_t -s system_u '/srv/data/ejabberd(/.*)?' restorecon -R /srv/data/ejabberd/ ls -laZ /srv/data/ unconfined_u:object_r:ejabberd_var_lib_t:s0 320 Jul 29 23:55 ejabberd Why doesn't this work? Why can't they finally write some decent tool to use selinux that allows us to keep it enabled??? How can I set up the directory for ejabberd to store files in?

3 4

Installing openLDAP on Centos 7
by Gary Stainburn 03 Oct '21

03 Oct '21

I am following the howto on https://linuxhostsupport.com/blog/how-to-install-ldap-on-centos-7/ which matches a number of other howto's. I have tried this on two Centos 7 boxes and both fail in the same way when trying to set the certificates. I have tried <insert search engine here> without success. I found that by adding '-d 1' you enable debugging, but the debugging did not help. Anyone got any suggestions? All steps prior to this worked successfully. Gary [root@eddie ldap]# ldapmodify -Y EXTERNAL -H ldapi:/// -f certs.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "cn=config" ldap_modify: Other (e.g., implementation specific) error (80) [root@eddie ldap]# cat certs.ldif dn: cn=config changetype: modify replace: olcTLSCertificateFile olcTLSCertificateFile: /etc/openldap/certs/myldap.ringways.com.cert dn: cn=config changetype: modify replace: olcTLSCertificateKeyFile olcTLSCertificateKeyFile: /etc/openldap/certs/myldap.ringways.com.key [root@eddie ldap]# ll /etc/openldap/certs/ total 72 -rw-r--r--. 1 ldap ldap 65536 Sep 30 11:19 cert8.db -rw-r--r--. 1 ldap ldap 16384 Sep 30 11:19 key3.db -rw-r--r--. 1 ldap ldap 1493 Sep 30 12:16 myldap.ringways.com.cert -rw-r--r--. 1 ldap ldap 1704 Sep 30 12:16 myldap.ringways.com.key -r--r-----. 1 ldap ldap 45 Jul 29 2020 password -rw-r--r--. 1 ldap ldap 16384 Jul 29 2020 secmod.db [root@eddie ldap]#

2 1

kvm/qemu: USB passthrough
by hw 01 Oct '21

01 Oct '21

Hi, I'm trying to pass an USB port (or hub) to a kvm/qemu guest, to no avail. To find out which physical port I can use, I plugged a device into the port, and dmesg on the host says: usb 3-3: new high-speed USB device number 10 using xhci_hcd Which device on the host is that? lspci | grep -i usb 00:14.0 USB controller: Intel Corporation C610/X99 series chipset USB xHCI Host Controller (rev 05) 00:1a.0 USB controller: Intel Corporation C610/X99 series chipset USB Enhanced Host Controller #2 (rev 05) 00:1d.0 USB controller: Intel Corporation C610/X99 series chipset USB Enhanced Host Controller #1 (rev 05) lsusb -t /: Bus 04.Port 1: Dev 1, Class=root_hub, Driver=xhci_hcd/6p, 5000M /: Bus 03.Port 1: Dev 1, Class=root_hub, Driver=xhci_hcd/15p, 480M |__ Port 6: Dev 5, If 0, Class=Human Interface Device, Driver=usbhid, 1.5M |__ Port 13: Dev 3, If 0, Class=Human Interface Device, Driver=usbhid, 12M |__ Port 14: Dev 4, If 0, Class=Human Interface Device, Driver=usbhid, 12M /: Bus 02.Port 1: Dev 1, Class=root_hub, Driver=ehci-pci/3p, 480M |__ Port 1: Dev 2, If 0, Class=Hub, Driver=hub/8p, 480M /: Bus 01.Port 1: Dev 1, Class=root_hub, Driver=ehci-pci/3p, 480M |__ Port 1: Dev 2, If 0, Class=Hub, Driver=hub/6p, 480M I tried to add the USB port to the domain by editing it and adding: <hostdev mode='subsystem' type='usb' managed='yes'> <source> <vendor id='0x1d6b'/> <product id='0x0003'/> </source> </hostdev> The domain (a windows 10) starts with that, but no USB port shows up. The documentation about this totally sucks, and I couldn't find any answer that would work with a search engine, either. When I try to use the bus and port attributes, I'm getting domain verification errors from virsh edit. Is it even possible to pass an usb port or hub through? I just need one USB port in the guest.

1 0

Upgrading CentOS from 7 to 8
by Gestió Servidors 30 Sep '21

30 Sep '21

Hi, I'm doing some tests of upgrading CentOS from 7 to 8 reading this step-by-step guide: https://netshopisp.medium.com/how-to-upgrade-linux-servecentos-7-to-centos-… I'm trying this upgrade in a VM, so I can save "snapshots" and restart in a past saved point. However, all my test ends wrong, exacly in Step 4 when I run "rpm -e `rpm -q kernel`". Then, systems says that some packages are kernel dependencies. After I remove that dependencies, I can't remove kernel... Anybody has tested process upgrade from 7 to 8? Thanks.

8 8

Re: [CentOS] how to display/create DUID?
by hw 30 Sep '21

30 Sep '21

On Thursday, September 30, 2021 2:31:48 AM CEST Kenneth Porter wrote: > --On Wednesday, September 29, 2021 11:59 PM +0200 hw <hw(a)gc-24.de> wrote: > > Is that my lack of understanding or are these DUIDs really a rather > > stupid idea? > > > > And how are we actually supposed to set up static leases with DHCPv6? > > I recommend asking over on the ISC DHCP lists where you're likely to find > much more expertise on the subject in these dark corners of the standards. Hm ok, maybe I'll try that, thanks.

1 0

Re: [CentOS] how to display/create DUID?
by hw 30 Sep '21

30 Sep '21

On Sunday, September 19, 2021 6:53:45 PM CEST Kenneth Porter wrote: > --On Sunday, September 19, 2021 3:02 PM +0200 hw <hw(a)gc-24.de> wrote: > > None of this is working because the server isn't running a DHCPv6 server, > > and there seems to be no file in /var/lib/NetworkManager that would seem > > to be helpful. > > > > Isn't there a tool that creates the DUID and prints it? This can't be > > too difficult ... > > I found this thread that suggests that NetworkManager computes it every > time unless it's manually overridden: > > <https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/135> That might mean that I would need to extract the functions from the soruces of dhclient to make a program that prints DUID(s) for the machine you run it on. ... But that isn't so easy. Maybe I can find out how to create a DUID and write something in perl; it doesn't seem to be too complicated in the source. The comment is interesting: /* * The "best" default DUID, since we cannot predict any information * about the system (such as whether or not the hardware addresses are * integrated into the motherboard or similar), is the "LLT", link local * plus time, DUID. For real stateless "LL" is better. * * Once generated, this duid is stored into the state database, and * retained across restarts. * * For the time being, there is probably a different state database for * every daemon, so this winds up being a per-interface identifier...which * is not how it is intended. Upcoming rearchitecting the client should * address this "one daemon model." */ I don't understand what the point of a DUID is which is /not/ a per-interface identifier. When I assign addresses via DHCP, I don't want them to end up being assigned anywhere else than to the interface they need to be assigned to. What is intended with these DUIDs? > Based on that, nmtui-connect might do what you want. That seems to only allow to bring up or down a connection but doesn't display DUIDs?

2 2

Re: [CentOS] Upgrading CentOS from 7 to 8
by Young, Gregory 29 Sep '21

29 Sep '21

The way we did in place upgrades from CentOS 6 to 7 for our network appliance VMs: 1. Take a backup of our appliance (database, settings, uploads, etc.). Store the backup on a separate partition/volume. 2. Copy the CentOS 7 Minimal .iso, with our added packages, to the backup partition/volume (disk.iso in the below code). 3. Copy the initrd and vmlinuz images to the boot partition (cp loop/isolinux/vmlinuz loop/isolinux/initrd.img /boot/). 4. Backup the current GRUB config (cp /boot/grub/grub.conf /boot/grub/grub.conf.bakupgrade). 5. Copy our custom kickstart file to the boot partition/volume. 6. Drop the upgrade GRUB menu config on the boot partition/volume. ``` default=0 timeout=0 serial --unit=0 --speed=9600 terminal --dumb --timeout=5 serial console title upgrade root (hd0,0) kernel vmlinuz rd.lvm=1 rd.md=1 inst.ks=hd:/dev/${disk_device}1://ks.cfg inst.repo=hd:/dev/mapper/VolGroup-lv_backup://disk.iso inst.sshd inst.cmdline inst.noninteractive inst.noshell inst.headless net.ifnames=0 selinux=0 ip=dhcp ksdevice=eth0 vga=792 modprobe.blacklist=floppy consoleblank=0 biosdevname=0 console=tty0 console=ttyS0,115200n8 initrd initrd.img ``` ${disk_device} can be found using: ``` disk_device=$(lsblk | grep disk | grep -e '^[h,s,v]da' -e 'xvda' -e 'nvme0n1' | awk '{print $1}' | head -1) ``` I can't guarantee the LVM route will work with CentOS 8, we had to use CentOS 7.3's LiveOS image to do this, as after that version the ability to access the .iso on a LVM disappeared (I think it was an unintended feature of 7.3 and older). Gregory Young | Senior Developer/Systems Engineer | N-able On 2021-09-29, 09:25, "CentOS on behalf of Gestió Servidors" <centos-bounces(a)centos.org on behalf of sysadmin.caos(a)uab.cat> wrote: [EXTERNAL] This email originated from outside of the organization. Hi, I'm doing some tests of upgrading CentOS from 7 to 8 reading this step-by-step guide: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnetshopis… I'm trying this upgrade in a VM, so I can save "snapshots" and restart in a past saved point. However, all my test ends wrong, exacly in Step 4 when I run "rpm -e `rpm -q kernel`". Then, systems says that some packages are kernel dependencies. After I remove that dependencies, I can't remove kernel... Anybody has tested process upgrade from 7 to 8? Thanks. _______________________________________________ CentOS mailing list CentOS(a)centos.org https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.cen…

1 0

snmpd[11277]: Duplicate IPv4 address detected, some interfaces may not be visible in IP-MIB
by Thomas 29 Sep '21

29 Sep '21

Hello. I have installed a new Centos 8 VM and trying to install net-snmp as I did already a 100 times. But this install is stressing me :-) I get the error in the subject when starting the snmpd daemon. I am 100% shure that there is no duplicate address on this machine. It has two IPv6 addresses in it's /64 range but the error speaks about IPv4. And it has just one IPv4 on the public interface and an internal IPv4 (private range) on its internal interface. Tried to create a new snmpd.conf file with "snmpconf -g basic_setup" but it gives always the same error. Anybody had this problem already? Thanks for any suggestions how to resolve this.

1 0

CentOS-announce Digest, Vol 198, Issue 4
by centos-announce-request＠centos.org 28 Sep '21

28 Sep '21

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2021:3438 Moderate CentOS 7 kernel Security Update (Johnny Hughes) 2. CEBA-2021:3335 CentOS 7 sos BugFix Update (Johnny Hughes) 3. CEBA-2021:3334 CentOS 7 openldap BugFix Update (Johnny Hughes) 4. CEBA-2021:3333 CentOS 7 device-mapper-multipath BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 27 Sep 2021 14:14:52 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2021:3438 Moderate CentOS 7 kernel Security Update Message-ID: <20210927141452.GA432(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2021:3438 Moderate Upstream details at : https://access.redhat.com/errata/RHSA-2021:3438 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 19575eb2feb5e29ed339c078e462e2a4ac7a44f0888328185fc248a30681b82e bpftool-3.10.0-1160.42.2.el7.x86_64.rpm 93f5058bbfe57b3134debfc599214a91d401380ef38ec57336a0d995704d9c26 kernel-3.10.0-1160.42.2.el7.x86_64.rpm 2c64dd985521f02ada8ac0415b1d852ab79d87ebdf2950e421d8258a4d86d153 kernel-abi-whitelists-3.10.0-1160.42.2.el7.noarch.rpm 39ce1d8d6ffa3efde898b475b2be150a92edca9d2aadf7ed8d5d69e6865175f9 kernel-debug-3.10.0-1160.42.2.el7.x86_64.rpm f066c4d77c32004d1843615beab2f59dce9664e5e79aaf6f5453d44d0d9e02fe kernel-debug-devel-3.10.0-1160.42.2.el7.x86_64.rpm 07505d8e7877d8a5114d6db605a9dc9c2132c0d32d978e2df599fa2e69887780 kernel-devel-3.10.0-1160.42.2.el7.x86_64.rpm d79bdff199cc5f9127f01f99ca4906b965b3c5fb198906c1ed16e725d5bbe25f kernel-doc-3.10.0-1160.42.2.el7.noarch.rpm 2617375bbb0a52fe637164f0f40bbbc00ea29b150dd35ba0e0f79447454ad604 kernel-headers-3.10.0-1160.42.2.el7.x86_64.rpm 6ec6b4d2ab3c7cf65dceaadd6a13d91e6ca7e48b3d6bf5712f0c0bf3639015b0 kernel-tools-3.10.0-1160.42.2.el7.x86_64.rpm d196c69e20dcc6a970af086c699d1d015396019ac8638386994deb8017fcc72b kernel-tools-libs-3.10.0-1160.42.2.el7.x86_64.rpm 02cbd7332b3ce796fb31c211ff00e807700217dbe4cbf3860f61c4a3bb69beb8 kernel-tools-libs-devel-3.10.0-1160.42.2.el7.x86_64.rpm 290f6f5895e4d30a12a9560261497d6ad631dbba6dd34aa352f5df74c5b51a5f perf-3.10.0-1160.42.2.el7.x86_64.rpm 1a19777f00999ca9d5a879d29fb67c078a61e7584353514d1ff9875c172b83be python-perf-3.10.0-1160.42.2.el7.x86_64.rpm Source: 35c09fa9e23fc090f029ae192d7d10869105e07083999152bb2ff03963986a23 kernel-3.10.0-1160.42.2.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 27 Sep 2021 14:21:56 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:3335 CentOS 7 sos BugFix Update Message-ID: <20210927142156.GA735(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:3335 Upstream details at : https://access.redhat.com/errata/RHBA-2021:3335 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f53f33bb25947de42ac961faa1b3edbf1207b3e8028e8c283c139b943b66ed73 sos-3.9-5.el7.centos.7.noarch.rpm Source: 1e338b36f1f5d43008636224aaad6391d56783821441918f4882f170c0a74f0c sos-3.9-5.el7.centos.7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 27 Sep 2021 14:23:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:3334 CentOS 7 openldap BugFix Update Message-ID: <20210927142338.GA963(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:3334 Upstream details at : https://access.redhat.com/errata/RHBA-2021:3334 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 912bd6993c1df63e3c9381201d80fe8178c75ff27aeb3b45999e28983222ff86 openldap-2.4.44-24.el7_9.i686.rpm 4d12827b417a44adfb6029689a3750767d051d27bb01400addcf87233d9c73aa openldap-2.4.44-24.el7_9.x86_64.rpm cc0d2cbf6bd6a4619b82b4666f297b6d0d894f6e665d587919aeb24e013118a5 openldap-clients-2.4.44-24.el7_9.x86_64.rpm ae3c48f21e37c807df89c63a1fa1216f44279908239b46e4dc5f7fc63160d0dd openldap-devel-2.4.44-24.el7_9.i686.rpm 9711433d3deaee69fd66f5b86d352d4250222cc0624b6a64b1cab5215d69348b openldap-devel-2.4.44-24.el7_9.x86_64.rpm 8f4f01e9c17c3579c8a8e8757582b5911c301c9f5219d0fa56b868db7964640f openldap-servers-2.4.44-24.el7_9.x86_64.rpm 2a6f1dc296b8103e565b9c2b18d2f04ed098a133f239f299f974b5430b5cda97 openldap-servers-sql-2.4.44-24.el7_9.x86_64.rpm Source: d9e03e7eb56351d1e58f69e6dc23937dfbf1403273e7985e7fa30d78cd2b65d4 openldap-2.4.44-24.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Mon, 27 Sep 2021 14:31:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2021:3333 CentOS 7 device-mapper-multipath BugFix Update Message-ID: <20210927143113.GA1830(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2021:3333 Upstream details at : https://access.redhat.com/errata/RHBA-2021:3333 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0cfe90113fcfe21d6f21f6022481283b9b35ca916c02484fc39e89b88fcffa8a device-mapper-multipath-0.4.9-135.el7_9.x86_64.rpm 973cf0ccc163c9374db09502b1e69f3323abc0960eca2ad66bfae874ac23d131 device-mapper-multipath-devel-0.4.9-135.el7_9.i686.rpm 49c502046e8fd1833a810286c8db37a87f18dc47667827f45a56267aefdac60f device-mapper-multipath-devel-0.4.9-135.el7_9.x86_64.rpm ec4cb2d5a569d854ac525bd458045223e598500765770d860e5bf0b84a41767b device-mapper-multipath-libs-0.4.9-135.el7_9.i686.rpm 61772a9e48d677eb7feb9225da4fdbfa417f99764a26adf0ba4e311baad2696c device-mapper-multipath-libs-0.4.9-135.el7_9.x86_64.rpm 3d901cc9a4697e9c08105de93d1a190650a8439e1dabe11a97d17c67cd1d951c device-mapper-multipath-sysvinit-0.4.9-135.el7_9.x86_64.rpm f901d903838a840af4b07b7405171f08944a919391efff75f782b9d2c5a6a8a7 kpartx-0.4.9-135.el7_9.x86_64.rpm 4c0432991858f896026445ef401636f12a857102f3329b8a5d034aa2e99e2bd4 libdmmp-0.4.9-135.el7_9.i686.rpm 828fe4eb26915648840d50ea3daa571c3735822ed66eced81dd20b12dff3e10e libdmmp-0.4.9-135.el7_9.x86_64.rpm a8bf325bc65d56d5cd74d8b007f3b2f09f0d1f6deccd0c0d0f56f515423fe6eb libdmmp-devel-0.4.9-135.el7_9.i686.rpm ab2e63b3fe04a633b718c47d41143f7ffa9fb32076d41cfdb01feaef74cd6158 libdmmp-devel-0.4.9-135.el7_9.x86_64.rpm Source: a936d8b085df37c56fb79f41886f88a37227712e99e97605c91e56f997f292b7 device-mapper-multipath-0.4.9-135.el7_9.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 198, Issue 4 ***********************************************

1 0

CentOS-announce Digest, Vol 198, Issue 3
by centos-announce-request＠centos.org 24 Sep '21

24 Sep '21

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss