Re: [CentOS] Systemd's [ OK ] in green beginning of line
On Mar 4, 2019, at 10:15 PM, Jobst Schmalenbach wrote: > > I have to (re-)write many bootup scripts to move a bunch of servers from > CentOS6 to CentOS7 > > In sysvinit the "echo_success" and "echo_failure" used to do this. > > What is the equivalent for systemd? First off, processes started by systemd unit files don’t necessarily echo anything at all, and when they do, that output is captured by journald, not sent straight to the system console. Systemd infers success or failure of the started service in one of several ways: - process exit code - contents of a PID file - existence of a FIFO - etc. Your code in the unit file tells systemd which method to use. Systemd prints out the green “OK” when the rules you’ve set up in the unit file match actual conditions on the server. This is also how systemd can provide automatic service restarts: you’ve told it what it looks like when a service is “up”, so it can implicitly detect “down” and restart the dead service for you. In the old scheme, that’s something you had to hand-code, and it was outside of the scope of SysVInit besides, so most services didn’t have that ability. With systemd, you can set this up with a line or three in the unit file, and systemd then handles it for you. You should start reading here: https://www.freedesktop.org/software/systemd/man/systemd.service.html#Options The Type value you select affects which “up” detection methods are sensible. For example, if you say your service is a “forking” type, it doesn’t make sense for systemd to be told to look for a nonzero exit status. Read the rest of that page as well. There’s a lot of power to take advantage of in systemd. Resist the temptation to just launch your old shell script via systemd. It’s better to rewrite its imperative logic in declarative form within the unit file, so you get full benefit of systemd’s power. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Systemd's [ OK ] in green beginning of line
Hi I have to (re-)write many bootup scripts to move a bunch of servers from CentOS6 to CentOS7 In sysvinit the "echo_success" and "echo_failure" used to do this. What is the equivalent for systemd? thanks Jobst ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] C 7 anacron issue
Has anyone else seen a problem recently (like, the last few weeks) with anacron? We've got a couple of recently-built systems and we're seeing Mar 4 17:20:01 crond[25767]: (root) PAM ERROR (Failure setting user credentials) Mar 4 17:20:01 crond[25767]: (root) FAILED to authorize user with PAM (Failure setting user credentials) mark ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] CentOs 7 i386 & PAE Kernel
Hi Gurus, I've been playing with CentOS 7's AltArch i386 builds with some good results on one machine, but can't get it to boot properly on another with a newer Bay Trail CPU. Previously CentOS 6 i386 worked on both, and that set a legacy I'd like to recreate... I *think* the problem is that the 7 kernel is non-PAE, and that has some peculiar knock on effect that prevents some PCI devices being seen, notably the device with the rootfs. CentOS 6 worked on both machines with the PAE kernel. Looking around, I found the following repo: https://mirrors.dotsrc.org/centos-altarch/7/kernel/i386/ This carries 4.14 (long term support) based -PAE kernels (as well as non-PAE) which look to fix my problem. However, I can't find any description of this repo or policy on how it is updated or the intended use. Or why PAE kernels aren't provided as an option in the 'normal' i386 CentOS 7 builds. If anyone could help explain this repo and the view on PAE for the AltArch i386 builds of CentOS 7, I would be really grateful as I can't find the info anywhere else! Kind Regards, Mike -- wavemobile Warning: The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender immediately and delete the material from any computer. wavemobile Ltd is registered in England and Wales, Registration Number: 04780898. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS-virt] CentOS virt-sig Linux kernel 4.9.155 build
On Mon, Mar 4, 2019 at 6:13 AM Anthony PERARD wrote: > On Wed, Feb 27, 2019 at 03:12:40PM -0500, Karl Johnson wrote: > > I built 4.9.161, works for me on el6: > > > > [root@node-tmp1 ~]# cat /proc/version > > Linux version 4.9.161-34.el6.x86_64 (mockbu...@build.aerisnetwork.net) > (gcc > > version 7.3.1 20180303 (Red Hat 7.3.1-5) (GCC) ) #1 SMP Wed Feb 27 > 09:48:40 > > EST 2019 > > > > Only one strange thing, I had to run grub-install because Grub couldn't > > find root device after reboot, not sure this has something to do with the > > kernel upgrade. > > Kernel 4.9.161 doesn't have the patch for CVE-2019-8912 yet so we might > > wait until it get released. > > > > I updated my PR: https://github.com/CentOS-virt7/xen-kernel/pull/18 > > Hi Karl, I've build and tested your PR, but without the GCC7 patch, and > when I've tested it on el6, none of the guests had network access. > I had to revert the bridge changes to have them working > (CONFIG_BRIDGE_NETFILTER=m and CONFIG_BRIDGE=m). > > Why did you want the BRIDGE built-in instead of a module? > > Maybe you have something to setup the bridge (probably filter) properly, > or maybe something is different in the xen package between el6 and el7. > Any idea? > > I still have to investigate the Xen pkg, and have a closer look at those > tests I'm running. > > > Hum strange. I switched from module to built-in because I always had a deprecated warning about bridge when booting CentOS 6 (and I guess everyone needs bridge?). I don't remember what was the exact warning because it's been a long time since I switched it. I don't mind to put it back as a module, both works for me but the warning is gone when built-in. Karl ___ CentOS-virt mailing list CentOS-virt@centos.org https://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS] nvidia on 7.6
On 04/03/2019 19:56, Jerry Geis wrote: What driver does 'nvidia-detect' say you need for that 520M? Hi Phil, my "notes" say the 520M used to use the kmod-nvidia-384... THe nvidia web site does say 390.87 Jerry OK, so the latest driver to support that card will be the 390.xx series (currently 390.116). So you should do: yum install kmod-nvidia-390xx and yum will take care of the rest for you. Yum will install the latest 390 series driver and then offer you updates to the 390 series as they become available (supported by nvidia until the end of 2022). ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] somewhat OT -- are .appimage files safe?
Hello all. I'm in the midst of trying to transfer a G+ community to something else. I came across this site-- https://blog.friendsplus.me/export-google-plus-feeds-45926c925891 that actually has an advanced "exporter" app but it is an ".appimage" app. I am not familiar with this at all and was wondering if someone on this list is. Thanks for any help. -- "Less is more." MzK ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] nvidia on 7.6
> What driver does 'nvidia-detect' say you need for that 520M? Hi Phil, my "notes" say the 520M used to use the kmod-nvidia-384... THe nvidia web site does say 390.87 Jerry > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] nvidia on 7.6
On 04/03/2019 18:26, Jerry Geis wrote: Hi Phil, I installed based on your instructions... yum --enablerepo=elrepo-testing install kmod-nvidia-340xx nvidia-x11-drv-340xx nvidia-x11-drv-340xx-libs I rebooted and things "seem" to be working. rpm -qa | grep nvidia shows the driver installed, /var/log/Xorg.0.log shows NVIDIA up and running, a remote screen shots shows what I expect. Not sure about the low level changes you mentioned. I also need the 520M driver if possible. Thanks, Jerry Hi Jerry, Thanks for the feedback - I'll get that driver moved from the testing repo to the main repo. What driver does 'nvidia-detect' say you need for that 520M? I'm guessing it's the 390.xx legacy driver, but nvidia-detect will give you the definitive answer. Phil ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] nvidia on 7.6
Hi Phil, I installed based on your instructions... yum --enablerepo=elrepo-testing install kmod-nvidia-340xx nvidia-x11-drv-340xx nvidia-x11-drv-340xx-libs I rebooted and things "seem" to be working. rpm -qa | grep nvidia shows the driver installed, /var/log/Xorg.0.log shows NVIDIA up and running, a remote screen shots shows what I expect. Not sure about the low level changes you mentioned. I also need the 520M driver if possible. Thanks, Jerry ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Mail Server Guides
On 3/4/19 5:40 AM, Robert Moskowitz wrote: On 3/1/19 12:53 PM, Ben Archuleta wrote: Hello All, I need to set up a new mail server to replace an aging CentOS 6.3 mail server. I was wondering what were some of the best guides on the web for Postfix (Maildir), Spamassassin, ClamAV, Dovecot? I am close to upgrading my mailserver. My current instructions are at: http://www.htt-consult.com/Centos7-mailserver.html I need to finish: SHA256 or SHA512 instead of MD5 for the password (Just need to finish up the roundcube password change script) dovecotadm backup for the mail and something to backup the mysql Otherwise my testing has been good. Of course adding stuff like DKIM, DANE, etc. would be nice. Note with DKIM - OpenDKIM defaults to 1024-bit RSA but that is no longer recommended and some services no longer consider it valid. 2048-bit RSA is the current recommended. The problem is that since DKIM keys do not expire, sysadmins got lazy and never bothered to periodically generate new ones, making 1024-bit RSA unsuitable. Ed25519 is also now available but support for it is not wide-spread yet. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Mail Server Guides
On 3/1/19 12:53 PM, Ben Archuleta wrote: Hello All, I need to set up a new mail server to replace an aging CentOS 6.3 mail server. I was wondering what were some of the best guides on the web for Postfix (Maildir), Spamassassin, ClamAV, Dovecot? I am close to upgrading my mailserver. My current instructions are at: http://www.htt-consult.com/Centos7-mailserver.html I need to finish: SHA256 or SHA512 instead of MD5 for the password (Just need to finish up the roundcube password change script) dovecotadm backup for the mail and something to backup the mysql Otherwise my testing has been good. Of course adding stuff like DKIM, DANE, etc. would be nice. I am running my mailserver on an Odroid HC1. Nice little system ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS-virt] CentOS virt-sig Linux kernel 4.9.155 build
On Wed, Feb 27, 2019 at 03:12:40PM -0500, Karl Johnson wrote: > I built 4.9.161, works for me on el6: > > [root@node-tmp1 ~]# cat /proc/version > Linux version 4.9.161-34.el6.x86_64 (mockbu...@build.aerisnetwork.net) (gcc > version 7.3.1 20180303 (Red Hat 7.3.1-5) (GCC) ) #1 SMP Wed Feb 27 09:48:40 > EST 2019 > > Only one strange thing, I had to run grub-install because Grub couldn't > find root device after reboot, not sure this has something to do with the > kernel upgrade. > Kernel 4.9.161 doesn't have the patch for CVE-2019-8912 yet so we might > wait until it get released. > > I updated my PR: https://github.com/CentOS-virt7/xen-kernel/pull/18 Hi Karl, I've build and tested your PR, but without the GCC7 patch, and when I've tested it on el6, none of the guests had network access. I had to revert the bridge changes to have them working (CONFIG_BRIDGE_NETFILTER=m and CONFIG_BRIDGE=m). Why did you want the BRIDGE built-in instead of a module? Maybe you have something to setup the bridge (probably filter) properly, or maybe something is different in the xen package between el6 and el7. Any idea? I still have to investigate the Xen pkg, and have a closer look at those tests I'm running. Thanks, -- Anthony PERARD ___ CentOS-virt mailing list CentOS-virt@centos.org https://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS] perl-Net-SCP on Centos 7
On Monday 04 March 2019 10:31:17 Gianluca Cecchi wrote: > Pressed return too earlier... > But in the same repo there is: > http://dries.eu/rpms/perl-Net-SCP/perl-Net-SCP > > that seems the same version I have in my Fedora 29 > Gianluca HI Gianluca Thanks for this. I had already looked at the site you gave and found the RPM. Much appreciated. Gary ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] perl-Net-SCP on Centos 7
On Mon, Mar 4, 2019 at 11:29 AM Gianluca Cecchi wrote: > > > On Mon, Mar 4, 2019 at 11:28 AM Gianluca Cecchi > wrote: > >> An older thread on CentOS pointed to this resource: >> http://dries.eu/rpms/perl-Net-SCP-Expect/perl-Net-SCP-Expect >> >> HIH, >> Gianluca >> >>> >>> > Sorry I missed the "Expect" in the rpm name > > Pressed return too earlier... But in the same repo there is: http://dries.eu/rpms/perl-Net-SCP/perl-Net-SCP that seems the same version I have in my Fedora 29 Gianluca ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] perl-Net-SCP on Centos 7
On Mon, Mar 4, 2019 at 11:28 AM Gianluca Cecchi wrote: > An older thread on CentOS pointed to this resource: > http://dries.eu/rpms/perl-Net-SCP-Expect/perl-Net-SCP-Expect > > HIH, > Gianluca > >> >> Sorry I missed the "Expect" in the rpm name ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] perl-Net-SCP on Centos 7
An older thread on CentOS pointed to this resource: http://dries.eu/rpms/perl-Net-SCP-Expect/perl-Net-SCP-Expect HIH, Gianluca On Mon, Mar 4, 2019 at 11:03 AM Gary Stainburn < gary.stainb...@ringways.co.uk> wrote: > Hi All, > > My new server is now built and I'm rebuilding the various services. > Falling > at the first hurdle, my xinetd.conf service requrires perl-Net-SCP which > doesn't appear to be available on C7. > > I could install CPAN and install it that way, but obviously I'd rather try > to > keep to RPM's if I can. I've tried Google, but not really come up with a > solution I'm happy with. > > Does anyone have any suggestions? I've found a Fedora 29 RPM on RPMfind. > Would that be close enough? > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] perl-Net-SCP on Centos 7
Hi All, My new server is now built and I'm rebuilding the various services. Falling at the first hurdle, my xinetd.conf service requrires perl-Net-SCP which doesn't appear to be available on C7. I could install CPAN and install it that way, but obviously I'd rather try to keep to RPM's if I can. I've tried Google, but not really come up with a solution I'm happy with. Does anyone have any suggestions? I've found a Fedora 29 RPM on RPMfind. Would that be close enough? ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
