Discuss

discuss@lists.centos.org

5 participants
34752 discussions

RHEL/Centos 8 power off issue
by R C 05 Apr '21

05 Apr '21

Hello, I have a laptop, in a docking station. When running RHEL/Centos 7 I could shut it down and power it off by using 'shutdown -h now' In did a new install of Centos 8 (and also RHEL 8) and when I do a "shutdown -h now" it just reboots (behaves the same as if I'd do a reboot). Is that a known issue? thanks, Ron

3 5

CentOS 8 issues.
by Frank Ramaekers 05 Apr '21

05 Apr '21

Okay, I made a foolish mistake a few months ago and upgraded my perfectly running CentOS 7 to CentOS 8 and have been struggling ever since. Looking to upgade to AlmaLinux or Rocky Linux. I have a number of things I need to clean up on this system before attempting a upgrade. Does anyone have any idea as to how I can clean/straighten this out: grub2-common.noarch 1:2.02-90.el8_3.1 BaseOS grub2-pc-modules.noarch 1:2.02-90.el8_3.1 BaseOS grub2-tools-minimal.x86_64 1:2.02-90.el8_3.1 BaseOS grubby.x86_64 8.40-41.el8 BaseOS kernel-abi-whitelists.noarch 4.18.0-240.15.1.el8_3 BaseOS kernel-debug-devel.x86_64 4.18.0-240.15.1.el8_3 BaseOS kernel-devel.x86_64 4.18.0-240.15.1.el8_3 BaseOS libgdiplus.x86_64 6.0.4-3.el8 epel libgdiplus-devel.x86_64 6.0.5-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libpwquality.x86_64 1.4.0-9.el8 BaseOS lz4.x86_64 1.8.3-2.el8 BaseOS t1lib.x86_64 5.1.2-28.el8 epel Obsoleting Packages centos-linux-release.noarch 8.3-1.2011.el8 BaseOS centos-release.x86_64 8.2-2.2004.0.2.el8 @BaseOS centos-linux-release.noarch 8.3-1.2011.el8 BaseOS centos-repos.x86_64 8.2-2.2004.0.2.el8 @BaseOS libgdiplus0.x86_64 3.12-1 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 4.2-0.xamarin.2.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 5.6-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 5.6-0.xamarin.2.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 5.6.1-0.xamarin.3.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 6.0.2-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 6.0.4-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel libgdiplus0.x86_64 6.0.5-0.xamarin.1.epel7 download.mono-project.com_repo_centos_ libgdiplus.x86_64 6.0.4-2.el8 @epel I'm unable to update grub2/grubby: dnf update grubby Last metadata expiration check: 0:46:20 ago on Fri 02 Apr 2021 08:57:14 AM CDT. Error: Problem: The operation would result in removing the following protected packages: kernel (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) ..also for some reason, my kernel packages are being installed but the system is not booting to them: ls /boot/vmlin* /boot/vmlinuz-0-rescue-3e806a41305047db81c0e9f9b9a4e36c /boot/vmlinuz-4.18.0-240.10.1.el8_3.x86_64 /boot/vmlinuz-4.18.0-240.15.1.el8_3.x86_64 /boot/vmlinuz-3.10.0-1127.8.2.el7.x86_64 /boot/vmlinuz-4.18.0-240.1.1.el8_3.x86_64 .but it always boots to: uname -r 3.10.0-1127.8.2.el7.x86_64 I found on the internet that this "The operations would.." Message was because of a kernel file in a protected.d (either yum or dnf), but I checked and it doesn't exist. H E L P (TIA) -Frank

2 2

KVM vs. incremental remote backups
by Nicolas Kovacs 04 Apr '21

04 Apr '21

Hi, Up until recently I've hosted all my stuff (web & mail) on a handful of bare metal servers. Web applications (WordPress, OwnCloud, Dolibarr, GEPI, Roundcube) as well as mail and a few other things were hosted mostly on one big machine. Backups for this setup were done using Rsnapshot, a nifty utility that combines Rsync over SSH and hard links to make incremental backups. This approach has become problematic, for several reasons. First, web applications have increasingly specific and sometimes mutually exclusive requirements. And second, last month I had a server crash, and even though I had backups for everything, this meant quite some offline time. So I've opted to go for KVM-based solutions, with everything split up over a series of KVM guests. I wrapped my head around KVM, played around with it (a lot) and now I'm more or less ready to go. One detail is nagging me though: backups. Let's say I have one VM that handles only DNS (base installation + BIND) and one other VM that handles mail (base installation + Postfix + Dovecot). Under the hood that's two QCOW2 images stored in /var/lib/libvirt/images. With the old "bare metal" approach I could perform remote backups using Rsync, so only the difference between two backups would get transferred over the network. Now with KVM images it looks like every day I have to transfer the whole image again. As soon as some images have lots of data on them (say, 100 GB for a small OwnCloud server), this quickly becomes unmanageable. I googled around quite some time for "KVM backup best practices" and was a bit puzzled to find many folks asking the same question and no real answer, at least not without having to jump through burning loops. Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

8 11

SELINUX blocks procmail from executing perl script without logging
by Radu Radutiu 03 Apr '21

03 Apr '21

Hi, I'm upgrading our request tracker from Centos 7 to 8 and found some unexpected SELINUX issues with procmail. Even after I create a policy which allows all denied operations, procmail is still not allowed to run a perl script (in my case rt-mailgate). I get the following error in the procmail log: "Can't open perl script "/opt/rt5/bin/rt-mailgate": Permission denied" but I have no denied audit entry in /var/log/audit/audit.log. If I set selinux to permissive, everything works fine. Any idea how to debug this? Best regards, Radu

4 4

Migrating to nvme and expand
by Jerry Geis 02 Apr '21

02 Apr '21

I have older SATA disks (2 of them size 2T) in a software raid config running CentOS 7. /dev/md127 is / and xfs /dev/sda2 is swap /dev/md126 is /home and xfs I desire to get a new (single) NVME 4T disk. What is the correct way to copy the software raid to a single "new" NVME disk ? then expand the /home file system to All the remaining space? Thanks, Jerry

3 3

Debuginfo for CentOS 8 Stream
by Matthew Saltzman 01 Apr '21

01 Apr '21

My CentOS 8 Stream installation is fully current. I did sudo debuginfo-install libgcc libstdc++ but the response I get is Could not find debuginfo package for the following installed packages: libgcc-8.4.1-1.el8.x86_64, libstdc++-8.4.1-1.el8.x86_64 Could not find debugsource package for the following installed packages: libgcc-8.4.1-1.el8.x86_64, libstdc++-8.4.1-1.el8.x86_64 If I do sudo dnf --enablerepo=debuginfo debuginfo-install libgcc libstdc++ I get CentOS Stream 8 - Debuginfo 35 kB/s | 7.6 kB 00:00 Errors during downloading metadata for repository 'debuginfo': - Status code: 404 for http://debuginfo.centos.org/8-stream/x86_64/repodata/repomd.xml (IP: 2620:52:3::12) Error: Failed to download metadata for repo 'debuginfo': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried What do I need to do to get these debuginfo packages? TIA. -- Matthew Saltzman School of Mathematical and Statistical Sciences Clemson University mjs AT clemson DOT edu

2 1

Centos/RHEL 8 gnome drive/usb icons
by R C 01 Apr '21

01 Apr '21

Hello, In Centos 7 (and RHEL 7) when one would connect a drive, or USB stick, an icon wold appear on the (gnome) desktop. Is that just something that was turned off (like anything else)? or is that not around anymore? If it is, how can it be turnd on again, that when logged in, and a drive is connected an icon shows up on the desktop again? thanks, Ron

1 0

Problem with mail server: stop flooding with fail2ban ?
by Nicolas Kovacs 31 Mar '21

31 Mar '21

Hi, My main mail server is running CentOS 7 with Postfix and Dovecot. Last week I was surprised to see that Postfix had some troubles on this machine, according to Icinga. I took a peek at the logs: # journalctl -p err Mar 28 04:37:02 sd-151768 postfix/smtpd[2786]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2788]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2790]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2792]: fatal: no SASL authentication mechanisms Mar 28 04:37:02 sd-151768 postfix/smtpd[2794]: fatal: no SASL authentication mechanisms ... And in /var/log/maillog I found a tsunami of these: Mar 28 03:18:33 sd-151768 postfix/smtpd[29589]: warning: unknown[45.227.253.115]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 28 03:18:33 sd-151768 postfix/smtpd[29589]: lost connection after AUTH from unknown[45.227.253.115] Mar 28 03:18:33 sd-151768 postfix/smtpd[29589]: disconnect from unknown[45.227.253.115] My first reaction was to manually ban the IP addresses / networks which caused the flood, using my firewall: # firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source address='45.227.253.0/24' reject" # firewall-cmd --reload I'm already using fail2ban in conjunction with firewalld to prevent brute force SSH attacks. Q: can I use it in a similar configuration to stop Postfix from getting flooded and brought down to its knees? Thanks & cheers from the sunny South of France, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

3 3

nmcli
by Jerry Geis 31 Mar '21

31 Mar '21

under CentOS 7 - I use "alias" like eth1:0 for an alias network. Remove the file restart network - and back to normal. Now I am trying to us NetworkManager. I can 'add' the network fine. however - when I remove the network nmcli connection delete "Wired connection 2" ipv4.addr 192.168.1.58/22 it remove BOTH address and removes the "Wired connection 2" config file - and it reverts to DHCP not the other static address I had associated with "Wired connection 2". how do I just remove the single ADDRESS I added as an alias ? not the whole thing ? Thanks Jerry

3 3

Cups - weird interaction with the Internet
by Frank Cox 30 Mar '21

30 Mar '21

I have Centos 6 machine that I use for a cups printer server. (Yes, I know, but it's working fine for what it's for at the moment.) My ISP lost its connection to the network that printer server is on. While the outside Internet service was unavailable I sent a print job to the printer on that server and nothing printed even though the print server and the machine I sent the job from are on the same lan and are actually connected to the same router. The job appeared to be sent from the originating machine (but timed out, as shown below), and running lpq and lpq -a on the server showed "no entries" (because it timed out for some reason). I did this a few times and even rebooted the server and always the same thing. Job sent, "no entries" on the server. The my ISP's connection came back and blammo! All of a sudden I got a ton of sheets printed, everything that I had been trying to print for the previous ten minutes. Here is what appears to be a relevant portion of the log on the machine that was sending the job to the print server: Mar 30 13:05:06 mutt cupsd[1443]: Started backend /usr/lib/cups/backend/implicit class (PID 951459) Mar 30 13:05:06 mutt cupsd[1443]: REQUEST localhost - root "POST /admin/ HTTP/1. 1" 200 245 CUPS-Add-Modify-Printer successful-ok Mar 30 13:05:07 mutt cupsd[1443]: Job completed. Mar 30 13:06:02 mutt cupsd[1443]: Job submission timed out. So what happened here? Why would cups care if it has a connection to the outside world when it's just printing a job sent to it from the local lan? The connection between the machine originating the print job and the print server timed out even though all of the relevant traffic was going over the lan. -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss