Discuss

discuss@lists.centos.org

34729 discussions

EL8: rebased firefox dumped core
by Leon Fauster 02 Sep '20

02 Sep '20

EL8: Since the new update of firefox (rebased), I get a lot of coredumps while playing videos. Anyone experiencing the same? Aug 30 16:44:05 work.localdomain systemd-coredump[27017]: Process 21016 (firefox) of user 1006 dumped core. Stack trace of thread 21016: #0 0x00007f9f09137c6f raise (libpthread.so.0) #1 0x00007f9ef7dd7578 _ZN13nsProfileLock18FatalSignalHandlerEiP9siginfo_tPv (libxul.so) #2 0x00007f9ef85a50f2 _ZL15WasmTrapHandleriP9siginfo_tPv (libxul.so) #3 0x00007f9f09137dd0 __restore_rt (libpthread.so.0) #4 0x00007f9f05ab94c1 gdk_event_free (libgdk-3.so.0) #5 0x00007f9f061358f9 gtk_drag_drop_finished (libgtk-3.so.0) #6 0x00007f9f06135add gtk_drag_abort_timeout (libgtk-3.so.0) #7 0x00007f9f05aad8bc gdk_threads_dispatch (libgdk-3.so.0) #8 0x00007f9f02eb6141 g_timeout_dispatch (libglib-2.0.so.0) #9 0x00007f9f02eb567d g_main_context_dispatch (libglib-2.0.so.0) #10 0x00007f9f02eb5a48 g_main_context_iterate.isra.21 (libglib-2.0.so.0) #11 0x00007f9f02eb5ae0 g_main_context_iteration (libglib-2.0.so.0) #12 0x00007f9ef6f46eb0 _ZN10nsAppShell22ProcessNextNativeEventEb (libxul.so) #13 0x00007f9ef6f02406 _ZN14nsBaseAppShell24DoProcessNextNativeEventEb (libxul.so) #14 0x00007f9ef6f0259e _ZN14nsBaseAppShell18OnProcessNextEventEP17nsIThreadInternalb (libxul.so) #15 0x00007f9ef4a457ff _ZN8nsThread16ProcessNextEventEbPb (libxul.so) #16 0x00007f9ef4a4445c _Z19NS_ProcessNextEventP9nsIThreadb (libxul.so) #17 0x00007f9ef4f6abe0 _ZN7mozilla3ipc11MessagePump3RunEPN4base11MessagePump8DelegateE (libxul.so) #18 0x00007f9ef4f33099 _ZN11MessageLoop3RunEv (libxul.so) #19 0x00007f9ef6efeaac _ZN14nsBaseAppShell3RunEv (libxul.so) #20 0x00007f9ef7d38a03 _ZN12nsAppStartup3RunEv (libxul.so) #21 0x00007f9ef7de851a _ZN7XREMain11XRE_mainRunEv (libxul.so) #22 0x00007f9ef7de91ba _ZN7XREMain8XRE_mainEiPPcRKN7mozilla15BootstrapConfigE (libxul.so) #23 0x00007f9ef7de93ca _Z8XRE_mainiPPcRKN7mozilla15BootstrapConfigE (libxul.so) #24 0x0000560fc01b33e1 _ZL7do_mainiPPcS0_ (firefox) #25 0x0000560fc01b279a main (firefox) #26 0x00007f9f082536a3 __libc_start_main (libc.so.6) #27 0x0000560fc01b2bce _start (firefox)

2 2

How to Migrate Wordpress Website from 32-bit CentOS Linux 6.3 to 64-bit CentOS Linux 8.2 (2004)
by Turritopsis Dohrnii Teo En Ming 02 Sep '20

02 Sep '20

Subject: How to Migrate Wordpress Website from 32-bit CentOS Linux 6.3 to 64-bit CentOS Linux 8.2 (2004) Author of this Guide: Mr. Turritopsis Dohrnii Teo En Ming (TARGETED INDIVIDUAL) Country: Singapore Date: 31 August 2020 Monday Singapore Time Type of Publication: Plain Text Document Version: 20200831.01 SECTION 1 Information Gathering Stage ===================================== Host operating system is Windows Server 2008 R2 Standard Host Processor: Intel Xeon CPU E5620 @ 2.40 GHz Host Memory: 24 GB RAM Old Oracle VirtualBox version is 4.1.18 Upgrade to Virtualbox version 6.1.12 (COMPLETED SUCCESSFULLY AFTER RESTARTING WINDOWS SERVER) Old CentOS Linux VM is version 6.3 (32-bit only) Old Apache web server version 2.2.15 Old MySQL database server version 5.1.61 Old PHP version 5.6.40 Interface eth0: AAA.BBB.CCC.3/24 (ifconfig) Gateway: AAA.BBB.CCC.2 (ip route) (Gateway is the next hop router which is also the Fortigate firewall) /etc/resolv.conf (for DNS Client): nameserver AAA.BBB.CCC.1 (This is the Windows Server with DNS Server role installed) How to login to OLD MySQL database server: mysql -u root -p Old hostname: centos63.teo-en-ming-corp.com Old Virtual Machine Settings ============================ 4 GB RAM, 2 processors, 20 GB storage, network adapter: bridged to broadcom bcm5709c NEW Virtual Machine Settings ============================ 4 GB RAM, 4 processors, 100 GB storage, network adapter: bridged to broadcom bcm5709c After using Advanced IP scanner and checking DHCP scope in Microsoft DHCP server in Windows Server, Unused IP address: AAA.BBB.CCC.4 (Use this IP address for new CentOS 8.2 Linux VM) SECTION 2 Installation of NEW CentOS 8.2 Linux Virtual Machine ============================================================== New Hostname: centos82.teo-en-ming-corp.com NEW IP: AAA.BBB.CCC.4 Subnet mask: 255.255.255.0 (Class C) Gateway: AAA.BBB.CCC.2 DNS1: 8.8.8.8 Problem ======= CentOS 8.2 Linux 64-bit will not start and run because VirtualBox is too old (version 4.1.18). Intel Virtualization and VT-d already enabled in server BIOS previously. So running 64-bit virtual machines is not an issue. Solution ======== After upgrading to VirtualBox 6.1.12, CentOS 8.2 Linux 64-bit is able to start and run. SECTION 3 Generate a Backup of ALL Databases in the Old VM =========================================================== Reference Guide: How to backup and restore MySQL databases using the mysqldump command Link: https://www.sqlshack.com/how-to-backup-and-restore-mysql-databases-using-th… Reference Guide: How to Show Users in MySQL using Linux Link: https://www.hostinger.com/tutorials/mysql-show-users/ # cd /root # mysqldump -u root -p --all-databases > all-databases-20200829.sql # du -h all-databases-20200829.sql 70M all-databases-20200829.sql SECTION 4 Disable SELinux (Security Enhanced Linux) =================================================== You MUST disable SELinux, otherwise Apache web server will not work. If you DO NOT want to disable SELinux, you must be an expert in SELinux to configure SELinux. # nano /etc/selinux/config SELINUX=disabled # reboot SECTION 5 Disable firewalld Software Firewall ============================================= Because already protected by Fortigate firewall at the perimeter. # systemctl disable firewalld # reboot SECTION 6 LAMP (Linux, Apache, MySQL and PHP) Installation ========================================================== I will be installing Apache web server 2.4.37-21, MariaDB server 3:10.3.17-1, PHP 7.2.24-1 and OpenSSL 1:1.1.1c-15 in 64-bit CentOS Linux 8.2 (2004). Sub-Section on Installing Apache Web Server =========================================== # dnf install php php-fpm php-gd You *MUST* install php-gd, otherwise Apache Web Server cannot execute PHP scripts. # dnf install httpd # systemctl enable httpd # systemctl start httpd [root@centos82 ~]# ps -ef | grep httpd root 33214 1 0 22:03 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND apache 33351 33214 0 22:03 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND apache 33352 33214 1 22:03 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND apache 33355 33214 1 22:03 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND apache 33357 33214 0 22:03 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND root 36374 7368 0 22:03 pts/0 00:00:00 grep --color=auto httpd On the OLD CentOS 6.3 server: # cd /etc/httpd # tar cfvz apacheconf.tar.gz conf conf.d # mv apacheconf.tar.gz /root On the NEW CentOS 8.2 server: # cd /etc/httpd # cp -r conf conf.original # cp -r conf.d conf.d.original # scp root@AAA.BBB.CCC.3:/root/apacheconf.tar.gz . # tar xfvz apacheconf.tar.gz On the OLD CentOS 6.3 server: # cd /var/www/html # tar cfvz websites.tar.gz * (1.4 GB) On the NEW CentOS 8.2 server: # cd /var/www/html # scp root@AAA.BBB.CCC.3:/root/websites.tar.gz . # tar xfvz websites.tar.gz Continuing on the NEW CentOS 8.2 server ======================================= How to troubleshoot Apache web server ===================================== The following are TWO very important Linux troubleshooting commands. # systemctl status httpd (check the error Apache web server gives out) # httpd -t (for checking Apache web server configuration syntax) Make the following changes to /etc/httpd/conf/httpd.conf, as follows: Rationale for unloading modules here: The modules were already loaded in config files in another location /etc/httpd/conf.modules.d, so we disable in httpd.conf to avoid duplication. If there are duplication for loading modules, Apache web server cannot start. # # Dynamic Shared Object (DSO) Support # # To be able to use the functionality of a module which was built as a DSO you # have to place corresponding `LoadModule' lines at this location so the # directives contained in it are actually available _before_ they are used. # Statically compiled modules (those listed by `httpd -l') do not need # to be loaded here. # # Example: # LoadModule foo_module modules/mod_foo.so # #LoadModule auth_basic_module modules/mod_auth_basic.so #LoadModule auth_digest_module modules/mod_auth_digest.so #LoadModule authn_file_module modules/mod_authn_file.so #LoadModule authn_alias_module modules/mod_authn_alias.so #LoadModule authn_anon_module modules/mod_authn_anon.so #LoadModule authn_dbm_module modules/mod_authn_dbm.so #LoadModule authn_default_module modules/mod_authn_default.so #LoadModule authz_host_module modules/mod_authz_host.so #LoadModule authz_user_module modules/mod_authz_user.so #LoadModule authz_owner_module modules/mod_authz_owner.so #LoadModule authz_groupfile_module modules/mod_authz_groupfile.so #LoadModule authz_dbm_module modules/mod_authz_dbm.so #LoadModule authz_default_module modules/mod_authz_default.so #LoadModule ldap_module modules/mod_ldap.so #LoadModule authnz_ldap_module modules/mod_authnz_ldap.so #LoadModule include_module modules/mod_include.so #LoadModule log_config_module modules/mod_log_config.so #LoadModule logio_module modules/mod_logio.so #LoadModule env_module modules/mod_env.so #LoadModule ext_filter_module modules/mod_ext_filter.so #LoadModule mime_magic_module modules/mod_mime_magic.so #LoadModule expires_module modules/mod_expires.so #LoadModule deflate_module modules/mod_deflate.so #LoadModule headers_module modules/mod_headers.so LoadModule usertrack_module modules/mod_usertrack.so #LoadModule setenvif_module modules/mod_setenvif.so #LoadModule mime_module modules/mod_mime.so #LoadModule dav_module modules/mod_dav.so #LoadModule status_module modules/mod_status.so #LoadModule autoindex_module modules/mod_autoindex.so #LoadModule info_module modules/mod_info.so #LoadModule dav_fs_module modules/mod_dav_fs.so #LoadModule vhost_alias_module modules/mod_vhost_alias.so #LoadModule negotiation_module modules/mod_negotiation.so #LoadModule dir_module modules/mod_dir.so #LoadModule actions_module modules/mod_actions.so LoadModule speling_module modules/mod_speling.so #LoadModule userdir_module modules/mod_userdir.so #LoadModule alias_module modules/mod_alias.so #LoadModule substitute_module modules/mod_substitute.so #LoadModule rewrite_module modules/mod_rewrite.so #LoadModule proxy_module modules/mod_proxy.so #LoadModule proxy_balancer_module modules/mod_proxy_balancer.so #LoadModule proxy_ftp_module modules/mod_proxy_ftp.so #LoadModule proxy_http_module modules/mod_proxy_http.so #LoadModule proxy_ajp_module modules/mod_proxy_ajp.so #LoadModule proxy_connect_module modules/mod_proxy_connect.so #LoadModule cache_module modules/mod_cache.so #LoadModule suexec_module modules/mod_suexec.so #LoadModule disk_cache_module modules/mod_disk_cache.so LoadModule cgi_module modules/mod_cgi.so #LoadModule version_module modules/mod_version.so IncludeOptional conf.d/*.conf (Notice the use of OPTIONAL) Include conf.modules.d/*.conf (DEFAULT CONFIG FILES INSTALLED BY APACHE WEB SERVER 2.4.37) Install the Secure Sockets Layer (SSL) module for Apache web server # dnf install mod_ssl Make the following changes to /etc/httpd/conf.d/ssl.conf, as follows: #SSLMutex default (MUST be disabled) Transferring Public Key from OLD server to NEW server: # cd /etc/pki/tls/certs # scp root@AAA.BBB.CCC.3:/root/teo-en-ming-corp.crt . Transferring Private Key from OLD server to NEW server: # cd /etc/pki/tls/private/ # scp root@AAA.BBB.CCC.3:/root/teo-en-ming-corp.key . Install Python3 module for Apache web server: # dnf install python3-mod_wsgi Make the following changes to /etc/httpd/conf.d/wsgi.conf, as follows: LoadModule wsgi_module modules/mod_wsgi_python3.so Install the Perl module: # dnf install epel-release # dnf install mod_perl Make the following changes to /etc/httpd/conf.d/perl.conf, as follows: #LoadModule perl_module modules/mod_perl.so Because Perl module is already loaded in /etc/httpd/conf.modules.d/ Disable SSL virtual hosts for now (Our server will support only http and no https at the moment) # cd /etc/httpd/conf.modules.d/ # mv 00-ssl.conf 00-ssl.conf.original # cd /etc/httpd/conf.d # mv ssl.conf ssl.conf.1 Sub-Section on Installing MariaDB (MySQL) Database Server ========================================================= # dnf install mariadb-server # systemctl enable mariadb # systemctl start mariadb Reference Guide: How to Use SCP Command to Securely Transfer Files Link: https://linuxize.com/post/how-to-use-scp-command-to-securely-transfer-files/ Transfer backup of ALL databases from OLD server to NEW server: # scp root@AAA.BBB.CCC.3:/root/all-databases-20200829.sql . Restore ALL databases on NEW server: # mysql < all-databases-20200829.sql Login to MySQL (MariaDB): # mysql Check all MySQL users are imported: MariaDB [(none)]> select user from mysql.user; +------------------+ | user | +------------------+ | root | | | | root | | | | root | | aaa | | bbb | | ccc | +------------------+ 8 rows in set (0.001 sec) Sub-Section on Installing PHP 7.2 ================================= We WON'T be using PHP configuration from OLD CentOS 6.3 server: # /etc/httpd/conf.d # mv php.conf php.conf.63 Use the PHP configuration on NEW CentOS 8.2 server: # cp php.conf.rpmnew php.conf ERROR ENCOUNTERED ================= ERROR: Your PHP installation appears to be missing the MySQL extension which is required by WordPress Solution is found at: https://www.howtoforge.com/tutorial/centos-lamp-server-apache-mysql-php/ SOLUTION ======== MUST install php-mysqlnd # dnf install php-mysqlnd SECTION 7 Apache Web Server Virtual Hosts ========================================= /etc/httpd/conf/httpd.conf ### Section 3: Virtual Hosts # # VirtualHost: If you want to maintain multiple domains/hostnames on your # machine you can setup VirtualHost containers for them. Most configurations # use only name-based virtual hosts so the server doesn't need to worry about # IP addresses. This is indicated by the asterisks in the directives below. # # Please see the documentation at # <URL:http://httpd.apache.org/docs/2.2/vhosts/> # for further details before you try to setup virtual hosts. # # You may use the command line option '-S' to verify your virtual host # configuration. # # Use name-based virtual hosting. # #NameVirtualHost *:80 # # NOTE: NameVirtualHost cannot be used without a port specifier # (e.g. :80) if mod_ssl is being used, due to the nature of the # SSL protocol. # # # VirtualHost example: # Almost any Apache directive may go into a VirtualHost container. # The first VirtualHost section is used for requests without a known # server name. # #<VirtualHost *:80> # ServerAdmin webmaster(a)dummy-host.example.com # DocumentRoot /www/docs/dummy-host.example.com # ServerName dummy-host.example.com # ErrorLog logs/dummy-host.example.com-error_log # CustomLog logs/dummy-host.example.com-access_log common #</VirtualHost> #NameVirtualHost *:80 <VirtualHost *:80> ServerAdmin ceo(a)teo-en-ming-corp.com DocumentRoot /var/www/html/Teo-En-Ming-Corp ServerName teo-en-ming-corp.com redirect permanent / http://www.teo-en-ming-corp.com </VirtualHost> <VirtualHost *:80> ServerAdmin ceo(a)teo-en-ming-corp.com DocumentRoot /var/www/html/Teo-En-Ming-Corp ServerName www.teo-en-ming-corp.com RewriteEngine off <Directory /var/www/html/Teo-En-Ming-Corp/> AllowOverride All </Directory> <Location /> RewriteEngine on RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule !\.(js|ico|gif|jpg|png|css)$ /index.php </Location> </VirtualHost> <VirtualHost *:80> ServerAdmin ceo(a)teo-en-ming-corp.com DocumentRoot /var/www/html/DonaldTrump ServerName donaldtrump.com.sg redirect permanent / http://www.donaldtrump.com.sg </VirtualHost> <VirtualHost *:80> ServerAdmin ceo(a)teo-en-ming-corp.com DocumentRoot /var/www/html/DonaldTrump ServerName www.donaldtrump.com.sg RewriteEngine off <Location /> RewriteEngine on RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule !\.(js|ico|gif|jpg|png|css)$ /index.php </Location> </VirtualHost> #<VirtualHost *:80> # ServerAdmin ceo(a)teo-en-ming-corp.com # DocumentRoot /var/webmiln # ServerName centos.teo-en-ming-corp.com # redirect permanent / https://centos.teo-en-ming-corp.com:10000 #</VirtualHost> <VirtualHost *:80> ServerAdmin ceo(a)teo-en-ming-corp.com DocumentRoot /var/www/html/Teo-En-Ming-Corp_old ServerName old.teo-en-ming-corp.com RewriteEngine off <Location /> RewriteEngine on RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule !\.(js|ico|gif|jpg|png|css)$ /index.php </Location> </VirtualHost> SECTION 8 .htaccess =================== /var/www/html/Teo-En-Ming-Corp/wp-admin/.htaccess: order deny,allow deny from all allow from AAA.BBB.CCC.DDD allow from AAA.BBB.CCC.DDD allow from AAA.BBB.CCC.DDD allow from AAA.BBB.CCC.DDD allow from AAA.BBB.CCC.DDD SECTION 9 FORTIGATE FIREWALL (STATIC NAT/PORT FORWARDING CONFIGURATION) ======================================================================= Create Virtual IPs for Static NAT/port forwarding. Edit Virtual IP =============== Name: Wordpress-Website Interface: Internet (wan1) Type: Static NAT External IP Address/Range: AAA.BBB.CCC.DDD - AAA.BBB.CCC.DDD Mapped IP Address/Range: AAA.BBB.CCC.4 - AAA.BBB.CCC.4 Optional Filters: No Port Forwarding: No Click OK. Then create IPv4 firewall polic(ies) from WAN1 to Internal using the created Virtual IP, allowing http, https, icmp, ssh, and/or other networking protocols as you wish. You may also use Security Profiles in Fortigate firewall as you wish: Antivirus Web Filter DNS Filter Application Control FortiClient Compliance SSL/SSH Inspection Web Rating Overrides Custom Signatures -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ******************************************************************************************** Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----

9 8

OPENVPN setup in CentOS-6 NetworkManager
by Janos G. Komaromi 02 Sep '20

02 Sep '20

Hi, I need some help. I have CentOS-6 installed on an older 32bit desktop. The command su -c "openvpn --config foo.ovpn" works well, but would like to do it from NetworkManager. (1) If I try to import foo.ovpn then the certificate file references are not populated. If I try to select files extracted from foo.ovpn then the Private key file cannot be selected and therefore setup is aborted. (2) If I create a .conf file with appropriate entries then NetworkManager imports it fully, including the .pem key file. However, connection is timed out, connection fails. I researched Internet, RFM, permissions, SElinux, messages, etc. to no avail, so I request support. Do I miss a component? Where can I examine the NetworkManager log? Why the .pem key file is not selectable? I try this mailing list first - and thank you. Janos -- Janos G. Komaromi sent it NOT from iPhone nor Google facebook, instagram, viber, snapchat, twitter, #@*~| etc. - neither of those https://jgklinux.jankom.net/

1 0

CentOS-announce Digest, Vol 187, Issue 1
by centos-announce-request＠centos.org 02 Sep '20

02 Sep '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:3556 Important CentOS 7 firefox Security Update (Johnny Hughes) 2. CESA-2020:3558 Important CentOS 6 firefox Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 1 Sep 2020 15:15:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:3556 Important CentOS 7 firefox Security Update Message-ID: <20200901151514.GA12032(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:3556 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:3556 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 6d8bf16512d109e75893de1fd5c3fff8aa8557a12556eccd6e6c8fbfd7f184ad firefox-68.12.0-1.el7.centos.i686.rpm 843fb795c9bf323f16859c41219123409abcc114812537da012befe15091fbc3 firefox-68.12.0-1.el7.centos.x86_64.rpm Source: 729023af84d866521eaf2029c1b4cc75e623be9b70f6bfbdf518d431757f4315 firefox-68.12.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Tue, 1 Sep 2020 15:16:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:3558 Important CentOS 6 firefox Security Update Message-ID: <20200901151627.GA12204(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:3558 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:3558 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 7aaf26cdf6b6fe4bbc989ca9afc2b9a52bbde92a1fc3718cd7ed90d5a5d0875b firefox-68.12.0-1.el6.centos.i686.rpm x86_64: 7aaf26cdf6b6fe4bbc989ca9afc2b9a52bbde92a1fc3718cd7ed90d5a5d0875b firefox-68.12.0-1.el6.centos.i686.rpm 49b77ef47320110d89f10574d0cc64337dd3e1d704e360de6c09081e8727841b firefox-68.12.0-1.el6.centos.x86_64.rpm Source: 2be4234b61c9ddbbee04f99bafb4118674334a1dd03cfd8fe2993eadbb594f49 firefox-68.12.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 187, Issue 1 ***********************************************

1 0

EL8: SElinux / dac_override / tmpwatch
by Leon Fauster 29 Aug '20

29 Aug '20

Hi, I'm moving some old stuff from EL6 to EL8 and one setup has a cron job which uses "tmpwatch -umc $dir" to clean some directories (/etc/cron.daily/tmpwatch). It seems that this triggers this AVC (SElinux mode is enforcing): type=AVC msg=audit(1598576896.772:4267): avc: denied { dac_override } for pid=11013 comm="tmpwatch" capability=1 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tclass=capability permissive=0 The tmpwatch exec line had "--force" before and I was hopping that this "capability" was the cause and deleted it but this night the AVC are still appearing. Is cron running in EL8 with stripped CAPs of? Does some one have an idea to address this? -- Thanks, Leon

2 2

CentOS-announce Digest, Vol 186, Issue 2
by centos-announce-request＠centos.org 29 Aug '20

29 Aug '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2020:3528 CentOS 7 kernel BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 28 Aug 2020 18:29:30 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2020:3528 CentOS 7 kernel BugFix Update Message-ID: <20200828182930.GA16388(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2020:3528 Upstream details at : https://access.redhat.com/errata/RHBA-2020:3528 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a9df0328e0bccfa54df5bd2378ec14db5a5f5c6179dd7194a0777df82cec5c5d bpftool-3.10.0-1127.19.1.el7.x86_64.rpm 511aa35c715eac1f1c3152072e562a2ab6ce630816840ecd8eb4efd02f618648 kernel-3.10.0-1127.19.1.el7.x86_64.rpm 52fe5fca38e10fbaf349fc934d0fdb7ddeca5b649d0610f0551d56d04f9e9b3b kernel-abi-whitelists-3.10.0-1127.19.1.el7.noarch.rpm 9c9f201bbd75daa59c88c9f6f4ee9953f4fad91b66b18e43c3c62c0ab4143c0e kernel-debug-3.10.0-1127.19.1.el7.x86_64.rpm 1617c5143d4fe2fb00a19fb2f649ef34f9294443b98761ae8d6086aa7ff7be4d kernel-debug-devel-3.10.0-1127.19.1.el7.x86_64.rpm ef2c185f0cd5d4f53e30c46033286021a6bc5f27fe3cf420da5d57432b5f1adb kernel-devel-3.10.0-1127.19.1.el7.x86_64.rpm 82ad527fc60baf62100718890dcce4f02775451f22fd883f5b8fc0c82cb222aa kernel-doc-3.10.0-1127.19.1.el7.noarch.rpm ce0962a39a89c77ace07097b9e439beb31cafc3ba8f3883ca14c9fd2fa50d837 kernel-headers-3.10.0-1127.19.1.el7.x86_64.rpm 8ee101162cbfd9c739fd3dab2fd164c62055331f14bde7d25d10f83f473f79b0 kernel-tools-3.10.0-1127.19.1.el7.x86_64.rpm 21986cd05e36bbb5495f99872596d55a89eaf18877ba761f1c2803cdcb1fc4f5 kernel-tools-libs-3.10.0-1127.19.1.el7.x86_64.rpm e60d0c1bb2119ac3b307b0b39d8ec7475242f1e821e10dfb620286b9592549b0 kernel-tools-libs-devel-3.10.0-1127.19.1.el7.x86_64.rpm 7096d68ec387f2e747a452a01c24075948e2d311383010973220b58b7394ca60 perf-3.10.0-1127.19.1.el7.x86_64.rpm 56ea2d57efb28b0d190a57d4b3367d08f38b01726ed403e5ac26e0804f4e191e python-perf-3.10.0-1127.19.1.el7.x86_64.rpm Source: 3545971a9c31e1fae5938fc7c44bafb44c94304088b89ee3bdbe776c82715db6 kernel-3.10.0-1127.19.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 186, Issue 2 ***********************************************

1 0

CentOS 8 installer bug
by isdtor 28 Aug '20

28 Aug '20

Has anyone managed to create an encrypted disk partition with CentOS 8 kickstart? 1 reqpart --add-boot 2 part /boot --fstype ext3 --size=1024 --ondrive=sda 3 part pv.1 --size=1 --grow --ondrive=sda --encrypted --pashphrase="bla" 4 volgroup vol0 pv.100000 5 logvol / --vgname=vg_00 --name=lv_root --size=102400 --fstype=ext4 ... No matter what I specify in line 3, the installer bombs out. The only way to successful kickstart is to not encrypt the lvm pv. The contents of the passphrase are not to blame, installer still dies after accepting a passphrase from the console. 15:57:45,280 DBG kickstart: Looking for platform-specific boot requirements. 15:57:45,281 DBG kickstart: Applying requirements: PartSpec instance (0x7fbd40f44320) -- mountpoint = /boot/efi lv = False thin = False btrfs = False ... PartSpec instance (0x7fbd4048b4e0) -- mountpoint = /boot lv = False thin = False btrfs = False ... 15:57:45,283 DBG bootloader: stage1 device cannot be of type disk 15:57:45,334 DBG exception: running handleException 15:57:45,334 CRT exception: Traceback (most recent call last):

2 2

CentOS7 and NFS
by Patrick Bégou 28 Aug '20

28 Aug '20

Hi, I need some help with NFSv4 setup/tuning. I have a dedicated nfs server (2 x E5-2620 8cores/16 threads each, 64GB RAM, 1x10Gb ethernet and 16x 8TB HDD) used by two servers and a small cluster (400 cores). All the servers are running CentOS 7, the cluster is running CentOS6. Time to time on the server I get: kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with incorrect client ID And the client xxx.xxx.xxx.xxx freeze whith: kernel: nfs: server xxxxx.legi.grenoble-inp.fr not responding, still trying kernel: nfs: server xxxxx.legi.grenoble-inp.fr OK kernel: nfs: server xxxxx.legi.grenoble-inp.fr not responding, still trying kernel: nfs: server xxxxx.legi.grenoble-inp.fr OK There is a discussion on RedHat7 support about this but only open to subscribers. Other searches with google do not provide useful information. Do you have an idea how to solve these freeze states ? More generally I would be really interested with some advice/tutorials to improve NFS performances in this dedicated context. There are so many [different] things about tuning NFS available on the web that I'm a little bit lost (the opposite of the previous question). So if some one has "the tutorial"...;-) Thanks Patrick

7 14

Testing
by Chris Weisiger 28 Aug '20

28 Aug '20

Testing Sent from my iPhone

1 0

Cannot update grup2-common
by Frank M. Ramaekers Jr. 27 Aug '20

27 Aug '20

when I try: # dnf update grub2-common Last metadata expiration check: 0:50:01 ago on Thu 27 Aug 2020 02:27:52 PM CDT. Error: Problem: The operation would result in removing the following protected packages: kernel (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) ...so how should I proceed? TIA, Frank

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss