Re: [CentOS] question centos stream 8 applying updates
El mar, 22 dic 2020 a las 19:46, Sergio Belkin () escribió: > > > El mar, 22 dic 2020 a las 18:54, Matthew Miller () > escribió: > >> On Tue, Dec 22, 2020 at 05:39:57PM -0300, Sergio Belkin wrote: >> > Edward, thanks for the reply, the tone has changed "if you don't like >> > CentOS Stream well, you know pay Red Hat". >> > "If you are using CentOS Linux 8 in a production environment, and are >> > concerned that CentOS Stream will not meet your needs, we encourage you >> to >> > contact Red Hat about options." >> > >> > source: https://blog.centos.org/2020/12/future-is-centos-stream/ >> >> >> Again, please see >> https://www.redhat.com/en/blog/faq-centos-stream-updates#Q10 >> >> The other options being addressed are not all "pay Red Hat". >> >> -- >> Matthew Miller >> >> Fedora Project Leader >> ___ >> CentOS mailing list >> CentOS@centos.org >> https://lists.centos.org/mailman/listinfo/centos >> > > > Let's see the CentOS Description: > «A *community project* for ecosystem developers who want to see what is > coming in the next version of RHEL and need to introduce changes that > enable their hardware or software. It also provides a place to develop > technologies and tools so they‘re ready for the next version of RHEL» > > Definitely, is not a CentOS replacement. Again, everything points to Red > Hat. I see that the focus is developer. I see no place for sysadmins... > > *Sorry I meant "CentOS Stream Description" -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] question centos stream 8 applying updates
El mar, 22 dic 2020 a las 18:54, Matthew Miller () escribió: > On Tue, Dec 22, 2020 at 05:39:57PM -0300, Sergio Belkin wrote: > > Edward, thanks for the reply, the tone has changed "if you don't like > > CentOS Stream well, you know pay Red Hat". > > "If you are using CentOS Linux 8 in a production environment, and are > > concerned that CentOS Stream will not meet your needs, we encourage you > to > > contact Red Hat about options." > > > > source: https://blog.centos.org/2020/12/future-is-centos-stream/ > > > Again, please see > https://www.redhat.com/en/blog/faq-centos-stream-updates#Q10 > > The other options being addressed are not all "pay Red Hat". > > -- > Matthew Miller > > Fedora Project Leader > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > Let's see the CentOS Description: «A *community project* for ecosystem developers who want to see what is coming in the next version of RHEL and need to introduce changes that enable their hardware or software. It also provides a place to develop technologies and tools so they‘re ready for the next version of RHEL» Definitely, is not a CentOS replacement. Again, everything points to Red Hat. I see that the focus is developer. I see no place for sysadmins... -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] question centos stream 8 applying updates
El dom, 20 dic 2020 a las 16:13, Matthew Miller () escribió: > On Sun, Dec 20, 2020 at 10:43:25AM -0300, Sergio Belkin wrote: > > I feel up to now the predominant tone of communications both fron CentOS > > and RH is as if CentOS **professional** users were stealing something to > > RH... > > Can you point me to where you are seeing this tone in Red Hat and CentOS > communications? Because what I see is basically the opposite: Red Hat and > CentOS saying that's not the motivation at all. > > -- > Matthew Miller > > Fedora Project Leader > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > Edward, thanks for the reply, the tone has changed "if you don't like CentOS Stream well, you know pay Red Hat". "If you are using CentOS Linux 8 in a production environment, and are concerned that CentOS Stream will not meet your needs, we encourage you to contact Red Hat about options." source: https://blog.centos.org/2020/12/future-is-centos-stream/ Is the PR what introduced the doubt about the CentOS Stream reliability... I think that Red Hat is in its right to do with CentOS whatever it likes. However there was a CentOS EOL that Red Hat from one day to the next decided that it was not convenient to comply, wasn't it? I think that if Centos Stream is just good enough to use in production there is no need for Red Hat advertisements in CentOS announcements. The CentOS Community already knew that if it wanted guaranteed support and beyoind it could pay and get Red Hat subscriptions. At least there was a communication error. If I'm wrong, let me know. -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] question centos stream 8 applying updates
El sáb, 19 dic 2020 a las 23:12, edward via CentOS () escribió: > > On 2020-12-19 14:33, Sergio Belkin wrote: > > In what moment "user" and "community" were replaced by "customers" in > > CentOS? > > > probably they want more of a overall professional ecosystem for both > rhel and centos > > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > So was it a commercial decision wrapped in techie buzz...? "Professional" does not necessarily mean people that are able or willing to pay for support. I feel up to now the predominant tone of communications both fron CentOS and RH is as if CentOS **professional** users were stealing something to RH... -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] question centos stream 8 applying updates
El vie, 11 dic 2020 a las 15:28, Matthew Miller () escribió: > > > > https://blog.centos.org/2020/12/centos-stream-is-continuous-delivery/ > > https://blog.centos.org/2020/12/how-rhel-is-made/ > > -- > Matthew Miller > > Fedora Project Leader > ___ > > In what moment "user" and "community" were replaced by "customers" in CentOS? -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS-es] CentOS rip?
El sáb, 12 dic 2020 a las 11:47, David González Romero () escribió: > > > > Genbeta: CentOS será historia tal y como lo conocemos: Red Hat dice > adiós a > > CentOS Linux para centrarse en CentOS > > > > > https://www.genbeta.com/linux/centos-sera-historia-tal-como-conocemos-red-hat-dice-adios-a-centos-linux-para-centrarse-centos-stream > > > > > Leyendo esta noticia, ahora recuerdo que mi punto de inflección con CentOS > fue cuando Red Hat Inc empezó a meter sus narices en CentOS y que miembros > del team CentOS pasaron a Red Hat y viceversa... para mi fue claro que > CentOS correría la misma suerte más tarde o temprano. > > De cualquier forma yo les hago ver que Debian en su versión SID ya viene > haciendo rolling release, SID no ha cambiado de ser SID y es claro que > muchas cosas no funcionan ahí y otras pues costará más que se actualicen; > sin embargo es el modelo. > > Pero la diferencia es que nadie en su sano juicio pone Debian SID en servidores... > Rocky podría ser una variante, si realmente la comunidad apoya. > > Saludos, > David > ___ > CentOS-es mailing list > CentOS-es@centos.org > https://lists.centos.org/mailman/listinfo/centos-es > -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS-es mailing list CentOS-es@centos.org https://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] CentOS rip?
El vie., 11 dic. 2020 14:35, José Roberto Alas escribió: > El vie, 11 de dic. de 2020 a la(s) 11:09, Victor Pereira ( > victor.pere...@unix.cl) escribió: > > > On Fri, Dec 11, 2020 at 2:06 PM José Roberto Alas < > jrobertoa...@gmail.com> > > wrote: > > > > > This website is purely satirical and is not representative of CentOS > nor > > > RedHat. > > > > > > > Eso el dia 1 no lo tenia... xD debe ser de alguno de la lista porque > varios > > de RH preguntaron de que se trataba... > > > > > La verdad que era de esperarse, asi se van muriendo grandes proyectos. La > gente va viendo de donde saca $ > Así murió Mandrake, Sun Microsystems, Solaris > > Al final algun dia quizas tendremos que quedarnos con Debian > > -- > Saludos, > cheperobert > ___ > > Me parece que un caso así es inédito en la historia del FOSS. Los casos que mencionas no llegan a la gravedad de lo que sucedió aquí. Sin embargo, sí es cierto que tal vez tenemos que poner de vuelta en valor a las distros comunitarias. Saludos! ___ CentOS-es mailing list CentOS-es@centos.org https://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS] I'm looking forward to the future of CentOS Stream
El vie, 11 dic 2020 a las 12:33, Matthew Miller () escribió: > On Fri, Dec 11, 2020 at 12:23:59AM -0800, Gordon Messmer wrote: > > >This is not a production operating system." > > Does he say that CentOS is a production operating system? > > > > As far as I know, Red Hat has never endorsed running CentOS in > > production, so I don't understand why it's significant that they > > also don't endorse running CentOS Stream in production. > > Yeah, I too think this is important context. I don't think you'll ever find > anyone from the business side ever even suggesting that they think CentOS > Linux, the rebuild, was *ever* something Red Hat recommended to run in > production. > > > -- > Matthew Miller > > Fedora Project Leader > With all due respect. Please don't mix topics. Everyone is grateful about the effort of CentOS developers in the last 16 years. The problem is not only the announce and decision of RH, but also the unfortunate PR of CentOS, how could you ask trust and confidence with something like that: > If you are using CentOS Linux 8 in a production environment, and are concerned that CentOS Stream will not meet your needs, we encourage you to contact Red Hat about options. Please don't blame the rest of the world for things that you wrote. Regards -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Moving to CentOS 8 Stream
El jue, 10 dic 2020 a las 15:48, Kienker, Fred () escribió: > "It takes years to build a reputation and seconds to destroy it." > > -- Business 101 class > > Fear not in DEVops world you can rebuild your reputation in one seconds using containers. :-P -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] https://blog.centos.org/2020/12/future-is-centos-stream/
El mar, 8 dic 2020 a las 13:44, Nicolas Kovacs () escribió: > Le 08/12/2020 à 16:12, Johnny Hughes a écrit : > > Another very good thing > > > > There is no longer a huge delay of a drop of 750 packages at once and a > > delay of more than a month to get a new release. > > > > There will be on delay in stream .. it will be a constantly rolling > > distribution .. updates will happen all the time with no 'big drop' at > > point release time. > > When I read the first messages of this thread, I was quite concerned. But > having read through your detailed explanations, let me state that I'm > reassured. > > As a sysadmin, what I like about CentOS is that it's probably the most > *boring* > Linux distribution out there. Boring is good. No drama, no surprises. I > know I > can have yum-cron run once a day without Icinga suddenly sending me a > tsunami > of failure alerts and without clients calling me and yelling on the phone. > > Cheers, > > Niki > > -- > Microlinux - Solutions informatiques durables > 7, place de l'église - 30730 Montpezat > Site : https://www.microlinux.fr > Blog : https://blog.microlinux.fr > Mail : i...@microlinux.fr > Tél. : 04 66 63 10 32 > Mob. : 06 51 80 12 12 > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > +1 But for some It centennials progress is about destroying the present. Smoke as a Service. -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 8 Stream: The Good, The Bad, The Ugly
El jue, 10 dic 2020 a las 9:39, Steve Thompson () escribió: > On Wed, 9 Dec 2020, Joshua Kramer wrote: > > > It can, however, be mitigated if RedHat backtracks, admits their > > mistake, and affirmatively commits to support future CentOS point > > releases. I'll be interested to see how this turns out. > > It may already be too late. Even if RedHat says "my bad" and goes back on > this decision, not many will trust them in the future. > > Steve > -- > > > Steve Thompson E-mail: smt AT vgersoft DOT com > Voyager Software LLC Web: http://www DOT vgersoft DOT > com > 3901 N Charles St VSW Support: support AT vgersoft DOT com > Baltimore MD 21218 >"186,282 miles per second: it's not just a good idea, it's the law" > > > > The funniest thing is Change Advocates that say: "Don't spread the FUD, CentOS Stream will be quite stable!" and at same time state: "If you are using CentOS Linux 8 in a production environment, and are concerned that CentOS Stream will not meet your needs, we encourage you to contact Red Hat about options." https://blog.centos.org/2020/12/future-is-centos-stream/?utm_source=rss_medium=rss_campaign=future-is-centos-stream -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Centos Developers Opinion
I would like to know the opinion of the CentOS developers on the decision to end CentOS. Because people already made his voice heard... What do you think? Is it a great decision and master play of business? Because you know 'devops-container-facebook-intel-thing' and "hey is the inevitable train of history? "Adapt or die?" Really? How could you explain what hundred of people around the world that already implemented CentOS 8 and helped reporting bugs, many of them cannot afford RH subscription? How could somebody trust on a company that one day happily says "if you don't like CentOS Stream, pay us?" and sents to trash a project of 16 years? Did nobody know what Red Hat was working on this? How strange is... I read you, we, the CentOS community read you, what do you think? Thanks in advance -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Error from unix_chkpwd
Hi, On CentOS 7.7.1908 I've got the following error message: unix_chkpwd[1026]: could not obtain user info (root) I dont' know why... There are no SELinux errors, and the permissions of relevant files are: ls -Z /etc/shadow /etc/passwd /usr/sbin/unix_chkpwd -rw-r--r--. root root system_u:object_r:passwd_file_t:s0 /etc/passwd --. root root system_u:object_r:shadow_t:s0/etc/shadow -rwsr-xr-x. root root system_u:object_r:chkpwd_exec_t:s0 /usr/sbin/unix_chkpwd Any idea? Thanks in advance! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] dbus issue on centos 7 as a lxc container
Hi, dbus on centos 7 lxc won't work. So I'm unable to start or query status units with systemd, for example: systemctl status Failed to get D-Bus connection: No such file or directory I have no issues with centos 8 container (debian 10 ones work fine too) This is the output of ps aux on centos 7: USER PID %CPU %MEMVSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 42712 3860 ?Ss 20:11 0:00 /lib/systemd/systemd systemd.unified_cgroup_hierarchy=1 root 2 0.0 0.0 11840 3052 ?Ss 20:12 0:00 /bin/bash root 28 0.0 0.0 51772 3548 ?R+ 20:19 0:00 ps aux On Centos 8 instead: USER PID %CPU %MEMVSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 241980 5320 ?Ss Oct06 0:01 /lib/systemd/systemd systemd.unified_cgroup_hierarchy=1 root 17 0.0 0.0 93944 5552 ?Ss Oct06 0:00 /usr/lib/systemd/systemd-journald root 22 0.0 0.0 97164 2892 ?Ss Oct06 0:00 /usr/lib/systemd/systemd-udevd root 34 0.0 0.0 85920 5252 ?Ss Oct06 0:00 /usr/lib/systemd/systemd-logind dbus 35 0.0 0.0 54108 2312 ?Ss Oct06 0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activat ion --syslog-only root 37 0.0 0.0 368376 7076 ?Ssl Oct06 0:03 /usr/sbin/NetworkManager --no-daemon root 42 0.0 0.0 78536 4124 ?Ss Oct06 0:00 /usr/sbin/sshd -D -oCiphers=aes256-...@openssh.com,chacha20-poly1...@openssh.com,aes256 -ctr,aes256-cbc,aes128-...@openssh.com,aes128-ctr,aes128-cbc -oMACs=hmac-sha2-256-...@openssh.com,hmac-sha1-...@openssh.com,umac-128-...@openssh.com,hmac- sha2-512-...@openssh.com,hmac-sha2-256,hmac-sha1,umac-...@openssh.com,hmac-sha2-512 -oGSSAPIKexAlgorithms=gss-gex-sha1-,gss-group14-sha1- -oKexAlgorithms= curve25519-sha256,curve25519-sha...@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellma n-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 -oHostKeyAlgor ithms=rsa-sha2-256,rsa-sha2-256-cert-...@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-...@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384- cert-...@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-...@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-...@openssh.com,ssh-ed25519,ssh-ed25519-c ert-...@openssh.com,ssh-rsa,ssh-rsa-cert-...@openssh.com -oPubkeyAcceptedKeyTypes=rsa-sha2-256,rsa-sha2-256-cert-...@openssh.com,ecdsa-sha2-nistp256,ecdsa -sha2-nistp256-cert-...@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-...@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-...@openssh.com,ecdsa-sha2 -nistp521,ecdsa-sha2-nistp521-cert-...@openssh.com,ssh-ed25519,ssh-ed25519-cert-...@openssh.com,ssh-rsa,ssh-rsa-cert-...@openssh.com -oCASignatureAlgorith ms=rsa-sha2-256,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,rsa-sha2-512,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa root 45 0.0 0.0 6520 660 pts/3Ss+ Oct06 0:00 /sbin/agetty -o -p -- \u --noclear --keep-baud pts/3 115200,38400,9600 vt220 root 46 0.0 0.0 6520 724 pts/2Ss+ Oct06 0:00 /sbin/agetty -o -p -- \u --noclear --keep-baud pts/2 115200,38400,9600 vt220 root 47 0.0 0.0 22868 1848 ?Ss Oct06 0:00 /usr/sbin/crond -n root 48 0.0 0.0 6520 664 console Ss+ Oct06 0:00 /sbin/agetty -o -p -- \u --noclear --keep-baud console 115200,38400,9600 linux root 50 0.0 0.0 6520 728 pts/1Ss+ Oct06 0:00 /sbin/agetty -o -p -- \u --noclear --keep-baud pts/1 115200,38400,9600 vt220 root 61 0.0 0.0 283500 2176 ?Ssl Oct06 0:07 /usr/sbin/rsyslogd -n root 442 0.0 0.0 6520 1640 pts/0Ss+ 19:47 0:00 /sbin/agetty -o -p -- \u --noclear --keep-baud pts/0 115200,38400,9600 vt220 root 461 0.0 0.0 12020 3340 ?Ss 20:12 0:00 /bin/bash root 480 0.0 0.0 44600 3368 ?R+ 20:22 0:00 ps auxwww Is there a Centos Bug? Or I missing something? The host is Fedora 32, if you need more information, ask me for. Thanks in advance! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Relabel /usr directory
nevermind, I think is fixed: ls -Z /usr unconfined_u:object_r:bin_t:s0 bin unconfined_u:object_r:usr_t:s0 local unconfined_u:object_r:usr_t:s0 gamesunconfined_u:object_r:bin_t:s0 sbin unconfined_u:object_r:usr_t:s0 include unconfined_u:object_r:usr_t:s0 share unconfined_u:object_r:lib_t:s0 lib unconfined_u:object_r:usr_t:s0 src unconfined_u:object_r:lib_t:s0 lib64unconfined_u:object_r:usr_t:s0 tmp unconfined_u:object_r:bin_t:s0 libexec isn't it? I simply re-enabled selinux in /etc/selinux/config and rebooted... HTH El mar., 4 feb. 2020 a las 14:59, Sergio Belkin () escribió: > Hi, > I've done the following: > - Copy usr content with rsync to another partition: > > rsync -av --partial --progress /usr/ /mnt > > Then, unmounted, added to fstab a line for /usr, then deleted /usr/* (not > the directory itself). But I've found that is bad labeled: > > ls -Z /usr > unconfined_u:object_r:unlabeled_t:s0 bin > unconfined_u:object_r:unlabeled_t:s0 local > unconfined_u:object_r:unlabeled_t:s0 games > unconfined_u:object_r:unlabeled_t:s0 sbin > unconfined_u:object_r:unlabeled_t:s0 include > unconfined_u:object_r:unlabeled_t:s0 share > unconfined_u:object_r:unlabeled_t:s0 lib > unconfined_u:object_r:unlabeled_t:s0 src > unconfined_u:object_r:unlabeled_t:s0 lib64 > unconfined_u:object_r:unlabeled_t:s0 tmp > > How can I restore the default contexts? > > I've tried with restorecon and with fixfiles, but no luck, for example: > > matchpathcon -V /usr > /usr error: No data available > > How can I fix this? > > Thanks in advance. > -- > -- > Sergio Belkin > LPIC-2 Certified - http://www.lpi.org > -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Relabel /usr directory
Hi, I've done the following: - Copy usr content with rsync to another partition: rsync -av --partial --progress /usr/ /mnt Then, unmounted, added to fstab a line for /usr, then deleted /usr/* (not the directory itself). But I've found that is bad labeled: ls -Z /usr unconfined_u:object_r:unlabeled_t:s0 bin unconfined_u:object_r:unlabeled_t:s0 local unconfined_u:object_r:unlabeled_t:s0 games unconfined_u:object_r:unlabeled_t:s0 sbin unconfined_u:object_r:unlabeled_t:s0 include unconfined_u:object_r:unlabeled_t:s0 share unconfined_u:object_r:unlabeled_t:s0 lib unconfined_u:object_r:unlabeled_t:s0 src unconfined_u:object_r:unlabeled_t:s0 lib64 unconfined_u:object_r:unlabeled_t:s0 tmp How can I restore the default contexts? I've tried with restorecon and with fixfiles, but no luck, for example: matchpathcon -V /usr /usr error: No data available How can I fix this? Thanks in advance. -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] yum4 and dnf on CentOS 8
Thanks, In fact I've found this: # ls -l /usr/bin/yum lrwxrwxrwx. 1 root root 5 may 13 2019 /usr/bin/yum -> dnf-3 El lun., 25 nov. 2019 a las 13:34, Paul Heinlein () escribió: > On Sat, 23 Nov 2019, Stephen John Smoogen wrote: > > > On Sat, 23 Nov 2019 at 15:39, Sergio Belkin wrote: > >> > >> Hi, > >> > >> I was using yum for years on CentOS servers, and since a few years ago > dnf > >> on Fedora desktops. My question is: > >> Is the same yum4 on CentOS 8 that dnf? What should I use? > >> Thanks in advance > >> > > > > yum4 is a thin wrapper on dnf mainly because Enterprise Linux users > > and scripts are used to the yum commands. You can use either dnf or > > yum4 on the command line and get the same results. > > You mentioned you're familiar with Fedora, so you're probably aware of > Application Streams -- but for those reading this thread unfamiliar > with AppStreams, I'll add the caveat that dnf behaves differently than > yum in this regard. > > Here's some background: > > > https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/installing_managing_and_removing_user_space_components/using-appstream_using-appstream > > Right now, the only EL8 AppStream with multiple versions is > postgresql, but it looks like several applications are setup for > future multiple streams. To see the AppStream packages, run > > dnf module list > > If you squint carefully, you'll see that you can install either > PostgreSQL 10 (the default) or 9.6. > > -- > Paul Heinlein > heinl...@madboa.com > 45°38' N, 122°6' W > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] yum4 and dnf on CentOS 8
Hi, I was using yum for years on CentOS servers, and since a few years ago dnf on Fedora desktops. My question is: Is the same yum4 on CentOS 8 that dnf? What should I use? Thanks in advance -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Difference between "CentOS Linux 8" and "RHEL8"
Hi, I've read about all recent changes about workflow: Fedora>CentOS Stream. I understood that in the end CentOS Linux (8) keeps on being "built from publicly available open source source code provided by Red Hat, Inc for Red Hat Enterprise Linux"[1] Is that correct? I mean the only that changed are CentOS upstream (Fedora and Centos Stream) didn't it? Thanks in advance [1]: https://wiki.centos.org/FAQ/General#head-4b2dd1ea6dcc1243d6e3886dc3e5d1ebb252c194 -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problem with Firefox and SSH/browser
2016-06-01 19:36 GMT-03:00 <cpol...@surewest.net>: > On 2016-06-01 09:53, Sergio Belkin wrote: > > Hi folks, > > > > I have a problem, shame on me I feel as newbie, I cannot open Firefox > > though ssh. > > > > ssh server is 7.2 and ssh client (running Xorg) is Fedora 23. Firefox > does > > not open. I've tried a lot of methods, even adding xauth cookie, and for > > example: > > > > firefox --no-remote --no-xshm > > > Hi Sergio, > > Can you post the exact command used, for example: >ssh -Y remotehostname /usr/lib64/firefox/firefox > > Thanks, > -- > Charles Polisher > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > Hi Charles, I've tried: ssh -vvv -Y -X user@sshserver Thanks in adavance -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Problem with Firefox and SSH/browser
Hi folks, I have a problem, shame on me I feel as newbie, I cannot open Firefox though ssh. ssh server is 7.2 and ssh client (running Xorg) is Fedora 23. Firefox does not open. I've tried a lot of methods, even adding xauth cookie, and for example: firefox --no-remote --no-xshm debug3: receive packet: type 90 debug1: client_input_channel_open: ctype x11 rchan 2 win 65536 max 16384 debug1: client_request_x11: request from 127.0.0.1 59181 debug2: fd 7 setting O_NONBLOCK debug3: fd 7 is O_NONBLOCK debug1: channel 1: new [x11] debug1: confirm x11 debug3: send packet: type 91 debug3: receive packet: type 90 debug1: client_input_channel_open: ctype x11 rchan 3 win 65536 max 16384 debug1: client_request_x11: request from 127.0.0.1 59183 debug2: fd 8 setting O_NONBLOCK debug3: fd 8 is O_NONBLOCK debug1: channel 2: new [x11] debug1: confirm x11 debug3: send packet: type 91 debug2: channel 2: rcvd adjust 39228 I need to open a browser, ok, I could install konqueror, but it pulls a bunch of apps that really I don't need. I'd want to install a browser from official repo... Could you help me? -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] About mysql upgrade
Thanks folks, Really convincing answers! 2016-04-28 13:53 GMT-03:00 Dennis Jacobfeuerborn <denni...@conversis.de>: > On 28.04.2016 17:58, Lamar Owen wrote: > > On 04/28/2016 08:45 AM, Sergio Belkin wrote: > >> I've found some issues upgrading mysql, some people recommends run > >> mysql_upgrade. I wonder why such a script is not run from scriptlet of > >> mysql-server rpm. > > Back in the Dark Ages of the PostgreSQL RPMset (PostgreSQL 6.5), early > > in my time as RPM maintainer for the community PostgreSQL.org RPMset, I > > asked a very similar question of some folks, and I got a canonical > > answer from Mr. RPM himself, Jeff Johnson. > > > > The answer is not very complex, but it was spread across a several > > message private e-mail thread. The gist of it is that the RPM > > scriptlets are very very limited in what they can do. Trying to do > > something clever inside an RPM scriptlet is almost never wise. The key > > thing to remember is that the scriptlet has to be able to be run during > > the OS install phase (back when upgrades were actually supported by the > > OS installer that is now known as anaconda). Quoting this introductory > > section: > > > > On August 18, 1999, Jeff Johnson wrote: > >> The Red Hat install environment is a chroot. That means no daemons, > >> no network, no devices, nothing. Even sniffing /proc can be problematic > >> in certain cases. > > > > Now, I realize that that is OLD information; however, anaconda is still > > doing the same basic chrooted install, just with a prettier face. You > > cannot start a daemon in the chroot, since many things are simply not > > available to the scriptlets when installed/upgraded by anaconda. > > Scriptlets have to work in an environment other than 'yum update.' And > > also note that this is a very different situation than Debian packages > > live in; RPM scriptlets are essentially forbidden from interactivity > > with the user; Debian's equivalent are not so hindered. At least that > > was the rule as long as I was an active packager. > > > > Further reference a WayBack Machine archive of a page I wrote long ago: > > > https://web.archive.org/web/20010122090200/http://www.ramifordistat.net/postgres/rpm_upgrade.html > > > > > > And leaving you with this thought, again from Jeff Johnson: > > > > On August 18, 1999, Jeff Johnson wrote: > >> Good. Now you're starting to think like a packager Avoiding MUD is > >> *much* more important than attempting magic. > > > > > >> The bottom line is you shouldn't attempt a database conversion as > >> part of the package install. The package, however, should contain > > programs > >> and procedures necessary to do the job. > > The real reason something like mysql_upgrade isn't run automatically > hasn't really much to do with the technicalities of RPM but the fact > that mysql_upgrade might kill your server if you don't know what you are > doing. > If for example you have a big table that takes up 70% of your storage > and mysql_upgrade needs to convert it to a new format then it will > create a copy of that table in the new format first and then delete the > old one...except of course that this would require 140% of disk space to > work. > > So independent of the packaging technology used major changes like these > should never be done automatically and instead always be handled by an > admin who knows what he is doing. > > Regards, > Dennis > > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] About mysql upgrade
Hi, I've found some issues upgrading mysql, some people recommends run mysql_upgrade. I wonder why such a script is not run from scriptlet of mysql-server rpm. Thanks in advance -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Poor perfmance of bridged interfaces
2015-11-14 16:43 GMT-03:00 Gordon Messmer <gordon.mess...@gmail.com>: > On 11/14/2015 09:20 AM, Sergio Belkin wrote: > >> I'd want to connect a VM to another VM (or eventually to the host) via the >> "Linux bridge" so that I can demonstrate that capability in a classroom >> with only one laptop. >> > > You don't actually need to attach *any* ethernet interfaces to do that. > If you create a bridge with no Ethernet slaves, and then create two VMs, > those VMs will get virtual network interfaces that will then be slaved to > the bridge. So, you'll see the bridge with two network devices as slaves, > and those network devices will be attached to the two VMs. > > If you create a bridge device with one Ethernet interface attached, then > you'll end up with a bridge that spans two VMs and the Ethernet interface. > That way the VMs will be connected to each other and to the Ethernet > network. > > ___ > Are you talking bearing in mind VirtualBox? I've created a bridge on the host machine, and 2 VM's but br0 has no slaves: [sergio@hope share]$ sudo brctl show br0 bridge name bridge id STP enabled interfaces br0 8000. no Greets -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Poor perfmance of bridged interfaces
Perhaps I don't explain myself enough. I don't want to "bridge" physical machine with virtual machine, my idea was create a transparent bridge in a VM for example to demonstrate a proxy with no need of topology change. Greets 2015-11-16 5:58 GMT-03:00 Paul Knox-Kennedy <pknoxkenn...@gmail.com>: > On 11/14/2015 09:20 AM, Sergio Belkin wrote: > > > > I'd want to connect a VM to another VM (or eventually to the host) via > the > > "Linux bridge" so that I can demonstrate that capability in a classroom > > with only one laptop. > > The libvirt wiki covers this here [0]. These instructions create a > bridge (br0), connect > the physical ethernet interface to that bridge, then you can attach > virtual machines to > the same bridge. > > [0] http://wiki.libvirt.org/page/Networking#Fedora.2FRHEL_Bridging > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Poor perfmance of bridged interfaces
2015-11-13 16:43 GMT-03:00 Gordon Messmer <gordon.mess...@gmail.com>: > On 11/13/2015 09:15 AM, Sergio Belkin wrote: > >> But AFAIK, routers divide broadcast domains, and switches (and >> therefore bridges) divide collision domains. >> > > Oh good, Cisco terminology. :) > Oh yeah, > > I'll be more specific than I was earlier, then. > > It's possible to unify two collision domains into a single broadcast > domain with a router, but it's also possible to use a bridge to link > collision domains to create a larger broadcast domain. Don't get hung up > on that. > > The comparison of a Linux bridge to a switch is apt. You could, > conceptually, connect two PCs to each other using a Linux bridge. You > wouldn't, however, connect two ports on one switch (here, the Linux bridge) > to two ports on another switch. Doing that creates a loop in your network. > > Linux Ethernet bridges have several uses, so it's not clear what you're > really trying to do. That is, you've said that you're trying to create a > virtualized Linux bridge, but a bridge is a tool, not a goal in itself. > What do you expect the bridge to do when you've set it up? > > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > I'd want to connect a VM to another VM (or eventually to the host) via the "Linux bridge" so that I can demonstrate that capability in a classroom with only one laptop. -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Poor perfmance of bridged interfaces
2015-11-12 18:07 GMT-03:00 James A. Peltier <jpelt...@sfu.ca>: > - Original Message - > | Hi, > | > | I've created a bridge using 2 interfaces and have a lot of messages as > | follows: > | > | nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own > | address as source address > | nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own > | address as source address > | > | And the operating systems is extremely slow > | > | Interfaces files : > | > | [root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-* > | DEVICE=br0 > | TYPE=Bridge > | BOOTPROTO=dhcp > | ONBOOT=yes > | #STP=on > | #DELAY=0 > | NM_CONTROLLED=no > | DEVICE=enp0s3 > | #HWADDR=08:00:27:AB:1D:E6 > | BOOTPROTO=none > | ONBOOT=yes > | NM_CONTROLLED=no > | BRIDGE=br0 > | > | DEVICE=enp0s8 > | HWADDR=08:00:27:A3:98:E6 > | BOOTPROTO=none > | ONBOOT=yes > | NM_CONTROLLED=no > | BRIDGE=br0 > | DEVICE=lo > | TYPE=loopback > | IPADDR=127.0.0.1 > | NETMASK=255.0.0.0 > | NETWORK=127.0.0.0 > | # If you're having problems with gated making 127.0.0.0/8 a martian, > | # you can change this to something else (255.255.255.255, for example) > | BROADCAST=127.255.255.255 > | ONBOOT=yes > | NAME=loopback > | > | I've disabled NetworkManager, but problem persists. > | > | System is: > | > | [root@localhost ~]# uname -a > | Linux localhost 3.10.0-123.el7.x86_64 #1 SMP Mon Jun 30 12:09:22 UTC 2014 > | x86_64 x86_64 x86_64 GNU/Linux > | > | And is virtualized on VirtualBox > | > | Please could you help me to fix it? > | > | Thanks in advance! > | > | -- > | -- > | Sergio Belkin > | LPIC-2 Certified - http://www.lpi.org > > You have a bridge with two interfaces on the same lan? You're likely > creating the topology loop with this configuration. What is it that you're > attempting to do here? > > > -- > James A. Peltier > IT Services - Research Computing Group > Simon Fraser University - Burnaby Campus > Phone : 604-365-6432 > Fax : 778-782-3045 > E-Mail : jpelt...@sfu.ca > Website : http://www.sfu.ca/itservices > Twitter : @sfu_rcg > Powering Engagement Through Technology > ___ > I'm trying to create virtualized linux bridge, I've enabled STP and even with a forward delay with 300 but no luck... -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Poor perfmance of bridged interfaces
2015-11-13 8:22 GMT-03:00 Sergio Belkin <seb...@gmail.com>: > > > 2015-11-12 18:07 GMT-03:00 James A. Peltier <jpelt...@sfu.ca>: > >> - Original Message - >> | Hi, >> | >> | I've created a bridge using 2 interfaces and have a lot of messages as >> | follows: >> | >> | nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with >> own >> | address as source address >> | nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with >> own >> | address as source address >> | >> | And the operating systems is extremely slow >> | >> | Interfaces files : >> | >> | [root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-* >> | DEVICE=br0 >> | TYPE=Bridge >> | BOOTPROTO=dhcp >> | ONBOOT=yes >> | #STP=on >> | #DELAY=0 >> | NM_CONTROLLED=no >> | DEVICE=enp0s3 >> | #HWADDR=08:00:27:AB:1D:E6 >> | BOOTPROTO=none >> | ONBOOT=yes >> | NM_CONTROLLED=no >> | BRIDGE=br0 >> | >> | DEVICE=enp0s8 >> | HWADDR=08:00:27:A3:98:E6 >> | BOOTPROTO=none >> | ONBOOT=yes >> | NM_CONTROLLED=no >> | BRIDGE=br0 >> | DEVICE=lo >> | TYPE=loopback >> | IPADDR=127.0.0.1 >> | NETMASK=255.0.0.0 >> | NETWORK=127.0.0.0 >> | # If you're having problems with gated making 127.0.0.0/8 a martian, >> | # you can change this to something else (255.255.255.255, for example) >> | BROADCAST=127.255.255.255 >> | ONBOOT=yes >> | NAME=loopback >> | >> | I've disabled NetworkManager, but problem persists. >> | >> | System is: >> | >> | [root@localhost ~]# uname -a >> | Linux localhost 3.10.0-123.el7.x86_64 #1 SMP Mon Jun 30 12:09:22 UTC >> 2014 >> | x86_64 x86_64 x86_64 GNU/Linux >> | >> | And is virtualized on VirtualBox >> | >> | Please could you help me to fix it? >> | >> | Thanks in advance! >> | >> | -- >> | -- >> | Sergio Belkin >> | LPIC-2 Certified - http://www.lpi.org >> >> You have a bridge with two interfaces on the same lan? You're likely >> creating the topology loop with this configuration. What is it that you're >> attempting to do here? >> >> >> -- >> James A. Peltier >> IT Services - Research Computing Group >> Simon Fraser University - Burnaby Campus >> Phone : 604-365-6432 >> Fax : 778-782-3045 >> E-Mail : jpelt...@sfu.ca >> Website : http://www.sfu.ca/itservices >> Twitter : @sfu_rcg >> Powering Engagement Through Technology >> ___ >> > > > I'm trying to create virtualized linux bridge, I've enabled STP and even > with a forward delay with 300 but no luck... > > > -- > -- > Sergio Belkin > LPIC-2 Certified - http://www.lpi.org > I get an IP via dhcp but cannot ping only at host machine -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Poor perfmance of bridged interfaces
2015-11-12 15:56 GMT-03:00 Ulf Volmer <u.vol...@u-v.de>: > On 11/12/2015 07:42 PM, Sergio Belkin wrote: > > I've created a bridge using 2 interfaces and have a lot of messages as >> follows: >> >> nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own >> address as source address >> nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own >> address as source address >> > > sounds like a loop. > > What says 'brctl show'? > When I enable stp: [root@localhost ~]# brctl show br0 bridge name bridge id STP enabled interfaces br0 8000.080027a398e6 yes enp0s3 enp0s8 > > best regards > Ulf > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Poor perfmance of bridged interfaces
2015-11-13 12:32 GMT-03:00 Ulf Volmer <u.vol...@u-v.de>: > On 11/13/2015 12:57 PM, Sergio Belkin wrote: > > When I enable stp: >> >> [root@localhost ~]# brctl show br0 >> bridge name bridge id STP enabled interfaces >> br0 8000.080027a398e6 yes enp0s3 >> enp0s8 >> > > As Gordon said, i recommend to remove one of the physical interfaces from > the bridge. > > > best regards > Ulf > ___ > I've found that setting virtual interfaces as NAT instead bridge, it works, any ideas? (Remember that it's a guest OS) Thanks in advance! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Poor perfmance of bridged interfaces
2015-11-13 13:52 GMT-03:00 Gordon Messmer <gordon.mess...@gmail.com>: > On 11/13/2015 03:22 AM, Sergio Belkin wrote: > >> I'm trying to create virtualized linux bridge >> > > Well, you can't do that by putting two interfaces on the same LAN. A > bridge should be used to connect two separate LANs. > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > But AFAIK, routers divide broadcast domains, and switches (and therefore bridges) divide collision domains. For example: "A bridge is a piece of software used to unite two or more network segments. A bridge behaves like a virtual network switch, working transparently (the other machines do not need to know or care about its existence). Any real devices (e.g. eth0) and virtual devices (e.g. tap0) can be connected to it." https://wiki.archlinux.org/index.php/Network_bridge If I'm wrong please correct me. -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Poor perfmance of bridged interfaces
2015-11-12 18:17 GMT-03:00 John R Pierce <pie...@hogranch.com>: > On 11/12/2015 10:42 AM, Sergio Belkin wrote: > >> DEVICE=enp0s8 >> HWADDR=08:00:27:A3:98:E6 >> BOOTPROTO=none >> ONBOOT=yes >> NM_CONTROLLED=no >> BRIDGE=br0 >> DEVICE=lo >> TYPE=loopback >> IPADDR=127.0.0.1 >> NETMASK=255.0.0.0 >> NETWORK=127.0.0.0 >> ... >> > > I hope thats two seperate files, ifcfg-enp0s8 and ifcfg-lo ... otherwise, > why is a bridged physical interface configured to be loopback?!? > Yes they are separate ones > > mine looks like... > > > # cat ifcfg-br0 > DEVICE=br0 > TYPE=Bridge > ONBOOT=yes > NM_CONTROLLED=no > BOOTPROTO=none > NETWORK= > NETMASK=255.255.255.240 > IPADDR=. (its a static IP) > GATEWAY= > > # cat ifcfg-eth0 > DEVICE=eth0 > HWADDR=D8:D3:85:B5:8C:6A > TYPE=Ethernet > ONBOOT=yes > NM_CONTROLLED=no > BRIDGE=br0 > > # cat ifcfg-lo > DEVICE=lo > IPADDR=127.0.0.1 > NETMASK=255.0.0.0 > NETWORK=127.0.0.0 > # If you're having problems with gated making 127.0.0.0/8 a martian, > # you can change this to something else (255.255.255.255, for example) > BROADCAST=127.255.255.255 > ONBOOT=yes > NAME=loopback > > -- > john r pierce, recycling bits in santa cruz > > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Poor perfmance of bridged interfaces
2015-11-12 16:51 GMT-03:00 Gordon Messmer <gordon.mess...@gmail.com>: > On 11/12/2015 10:42 AM, Sergio Belkin wrote: > >> DEVICE=enp0s3 >> #HWADDR=08:00:27:AB:1D:E6 >> BOOTPROTO=none >> ONBOOT=yes >> NM_CONTROLLED=no >> BRIDGE=br0 >> > > DEVICE=enp0s8 >> HWADDR=08:00:27:A3:98:E6 >> BOOTPROTO=none >> ONBOOT=yes >> NM_CONTROLLED=no >> BRIDGE=br0 >> > > Do you have those two devices connected to the same LAN? > Yes I have. > > I've disabled NetworkManager, but problem persists. >> > > Why would that matter, when all of your interfaces are NM_CONTROLLED=no? Only as a last desesperate resource after hours of trying and not working :( > > > _______ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Poor perfmance of bridged interfaces
Hi, I've created a bridge using 2 interfaces and have a lot of messages as follows: nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own address as source address nov 12 15:30:22 localhost kernel: br0: received packet on enp0s3 with own address as source address And the operating systems is extremely slow Interfaces files : [root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-* DEVICE=br0 TYPE=Bridge BOOTPROTO=dhcp ONBOOT=yes #STP=on #DELAY=0 NM_CONTROLLED=no DEVICE=enp0s3 #HWADDR=08:00:27:AB:1D:E6 BOOTPROTO=none ONBOOT=yes NM_CONTROLLED=no BRIDGE=br0 DEVICE=enp0s8 HWADDR=08:00:27:A3:98:E6 BOOTPROTO=none ONBOOT=yes NM_CONTROLLED=no BRIDGE=br0 DEVICE=lo TYPE=loopback IPADDR=127.0.0.1 NETMASK=255.0.0.0 NETWORK=127.0.0.0 # If you're having problems with gated making 127.0.0.0/8 a martian, # you can change this to something else (255.255.255.255, for example) BROADCAST=127.255.255.255 ONBOOT=yes NAME=loopback I've disabled NetworkManager, but problem persists. System is: [root@localhost ~]# uname -a Linux localhost 3.10.0-123.el7.x86_64 #1 SMP Mon Jun 30 12:09:22 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux And is virtualized on VirtualBox Please could you help me to fix it? Thanks in advance! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] NetworkManager and network service
Hi, folks, I 've created interfaces files with the NM_CONTROLLED=no statement and I've found that even after restarting network services changes are not commited. Only it worked after running nmcli connection reload restart of the network service worked. I wonder if it's either a feature or a bug... Could you help me? Thanks in advance! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] About ecryptfs-utils
Thanks everybody! 2015-11-01 19:09 GMT-03:00 Itamar <ita...@ispbrasil.com.br>: > On 10/31/2015 08:24 PM, Sergio Belkin wrote: > > Hi folks, > > > > I've found ecryptfs module into kernel-plus, but ecryptfs-utils is > missing: > > > > [root@centos7 ecryptfs-utils-108]# uname -r > > 3.10.0-229.14.1.el7.centos.plus.x86_64 > > [root@centos7 ecryptfs-utils-108]# lsmod | grep ecryptfs > > ecryptfs 85424 0 > > > > [root@centos7 ecryptfs-utils-108]# yum -q repolist > > id del repositorio nombre del > > repositorio estado > > Webmin Webmin Distribution > > Neutral 229 > > base/7/x86_64 CentOS-7 - > > Base 8.652 > > centosplus/7/x86_64 CentOS-7 - > > Plus63 > > epel/x86_64 Extra Packages for Enterprise > > Linux 7 - x86_64 8.654 > > extras/7/x86_64 CentOS-7 - > > Extras 236 > > updates/7/x86_64CentOS-7 - > > Updates 1.540 > > zfs/x86_64 ZFS on Linux for > > EL7 145 > > [root@centos7 ecryptfs-utils-108]# LANG=C yum -q search ecryptfs-utils > > Warning: No matches found for: ecryptfs-utils > > > > > > > > Just I wonder why these package is not included in any CentOS repo (I > guess > > because is not included in upstream), do you know why? > > > > Thanks in advance! > > > I got the sources from fedora 21 and compiled it in koji. > > http://koji.fedoraproject.org/koji/taskinfo?taskID=11667432 > > the package seems to be retired, you probably should not use it. > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] About ecryptfs-utils
Hi folks, I've found ecryptfs module into kernel-plus, but ecryptfs-utils is missing: [root@centos7 ecryptfs-utils-108]# uname -r 3.10.0-229.14.1.el7.centos.plus.x86_64 [root@centos7 ecryptfs-utils-108]# lsmod | grep ecryptfs ecryptfs 85424 0 [root@centos7 ecryptfs-utils-108]# yum -q repolist id del repositorio nombre del repositorio estado Webmin Webmin Distribution Neutral 229 base/7/x86_64 CentOS-7 - Base 8.652 centosplus/7/x86_64 CentOS-7 - Plus63 epel/x86_64 Extra Packages for Enterprise Linux 7 - x86_64 8.654 extras/7/x86_64 CentOS-7 - Extras 236 updates/7/x86_64CentOS-7 - Updates 1.540 zfs/x86_64 ZFS on Linux for EL7 145 [root@centos7 ecryptfs-utils-108]# LANG=C yum -q search ecryptfs-utils Warning: No matches found for: ecryptfs-utils Just I wonder why these package is not included in any CentOS repo (I guess because is not included in upstream), do you know why? Thanks in advance! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Bug 3831: basic_ncsa_auth Blowfish and SHA support, really fixed?
Hi, I'm using squid-3.3.8-12.el7_0.x86_64 on CentOS 7 I've configured squid for basic authentication, md5 password *works*, but if fails when I try to use either blowfish or sha password. Below is the cache.log when it fails: 2015/03/18 17:21:02.637 kid1| Checklist.cc(275) matchNode: 0x7f217e8baca8 matched=0 async=0 finished=0 2015/03/18 17:21:02.637 kid1| Checklist.cc(299) matchNode: 0x7f217e8baca8 simple mismatch 2015/03/18 17:21:02.637 kid1| Checklist.cc(160) checkAccessList: 0x7f217e8baca8 checking 'http_access allow squid_access' 2015/03/18 17:21:02.637 kid1| Acl.cc(336) matches: ACLList::matches: checking squid_access 2015/03/18 17:21:02.637 kid1| Acl.cc(319) checklistMatches: ACL::checklistMatches: checking 'squid_access' 2015/03/18 17:21:02.637 kid1| Acl.cc(281) aclCacheMatchFlush: aclCacheMatchFlush called for cache 0x7f217e9b8cc8 2015/03/18 17:21:02.637 kid1| Acl.cc(61) AuthenticateAcl: returning 2 sending credentials to helper. 2015/03/18 17:21:02.637 kid1| Acl.cc(321) checklistMatches: ACL::ChecklistMatches: result for 'squid_access' is -1 2015/03/18 17:21:02.637 kid1| Acl.cc(346) matches: squid_access needs async lookup 2015/03/18 17:21:02.637 kid1| Acl.cc(354) matches: squid_access result is false 2015/03/18 17:21:02.637 kid1| Checklist.cc(275) matchNode: 0x7f217e8baca8 matched=0 async=1 finished=0 2015/03/18 17:21:02.637 kid1| Checklist.cc(312) matchNode: 0x7f217e8baca8 going async 2015/03/18 17:21:02.637 kid1| Checklist.cc(131) asyncInProgress: ACLChecklist::asyncInProgress: 0x7f217e8baca8 async set to 1 2015/03/18 17:21:02.637 kid1| AclProxyAuth.cc(144) checkForAsync: checking password via authenticator 2015/03/18 17:21:02.637 kid1| Checklist.cc(256) matchNodes: 0x7f217e8baca8 awaiting async operation 2015/03/18 17:21:02.638 kid1| Checklist.cc(131) asyncInProgress: ACLChecklist::asyncInProgress: 0x7f217e8baca8 async set to 0 2015/03/18 17:21:02.638 kid1| Checklist.cc(160) checkAccessList: 0x7f217e8baca8 checking 'http_access allow squid_access' 2015/03/18 17:21:02.638 kid1| Acl.cc(336) matches: ACLList::matches: checking squid_access 2015/03/18 17:21:02.638 kid1| Acl.cc(319) checklistMatches: ACL::checklistMatches: checking 'squid_access' 2015/03/18 17:21:02.638 kid1| Acl.cc(66) AuthenticateAcl: returning 3 sending authentication challenge. 2015/03/18 17:21:02.638 kid1| Checklist.cc(146) markFinished: 0x7f217e8baca8 answer AUTH_REQUIRED for AuthenticateAcl exception 2015/03/18 17:21:02.638 kid1| Acl.cc(321) checklistMatches: ACL::ChecklistMatches: result for 'squid_access' is -1 2015/03/18 17:21:02.638 kid1| Acl.cc(343) matches: squid_access failed. 2015/03/18 17:21:02.638 kid1| Acl.cc(354) matches: squid_access result is false 2015/03/18 17:21:02.638 kid1| Checklist.cc(275) matchNode: 0x7f217e8baca8 matched=0 async=0 finished=1 2015/03/18 17:21:02.638 kid1| Checklist.cc(294) matchNode: 0x7f217e8baca8 exception: AUTH_REQUIRED 2015/03/18 17:21:02.638 kid1| Checklist.cc(88) matchNonBlocking: ACLChecklist::check: 0x7f217e8baca8 match found, calling back with AUTH_REQUIRED 2015/03/18 17:21:02.638 kid1| Checklist.cc(182) checkCallback: ACLChecklist::checkCallback: 0x7f217e8baca8 answer=AUTH_REQUIRED 2015/03/18 17:21:02.638 kid1| Gadgets.cc(58) aclGetDenyInfoPage: got called for squid_access 2015/03/18 17:21:02.638 kid1| Gadgets.cc(77) aclGetDenyInfoPage: aclGetDenyInfoPage: no match 2015/03/18 17:21:02.638 kid1| FilledChecklist.cc(77) ~ACLFilledChecklist: ACLFilledChecklist destroyed 0x7fffee83caa0 2015/03/18 17:21:02.638 kid1| Checklist.cc(334) ~ACLChecklist: ACLChecklist::~ACLChecklist: destroyed 0x7fffee83caa0 2015/03/18 17:21:02.638 kid1| FilledChecklist.cc(77) ~ACLFilledChecklist: ACLFilledChecklist destroyed 0x7fffee83caa0 2015/03/18 17:21:02.638 kid1| Checklist.cc(334) ~ACLChecklist: ACLChecklist::~ACLChecklist: destroyed 0x7fffee83caa0 2015/03/18 17:21:02.638 kid1| FilledChecklist.cc(77) ~ACLFilledChecklist: ACLFilledChecklist destroyed 0x7f217e8baca8 2015/03/18 17:21:02.638 kid1| Checklist.cc(334) ~ACLChecklist: ACLChecklist::~ACLChecklist: destroyed 0x7f217e8baca8 2015/03/18 17:21:02.639 kid1| FilledChecklist.cc(77) ~ACLFilledChecklist: ACLFilledChecklist destroyed 0x7f217e8baca8 2015/03/18 17:21:02.639 kid1| Checklist.cc(334) ~ACLChecklist: ACLChecklist::~ACLChecklist: destroyed 0x7f217e8baca8 Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] rndc permission denied
Hi, h when I have the following problem with rndc: [root@centos7 ~]# rndc recursing and rndc: 'recursing' failed: permission denied SELinux is disables: named.conf config file is: // // named.conf // // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS // server as a caching only nameserver (as a localhost DNS resolver only). // // See /usr/share/doc/bind*/sample/ for example named configuration files. // options { //listen-on port 53 { 127.0.0.1; }; listen-on port 53 { 192.168.0.107; }; //listen-on-v6 port 53 { ::1; }; directory /var/named; dump-file /var/named/data/cache_dump.db; statistics-file /var/named/data/named_stats.txt; memstatistics-file /var/named/data/named_mem_stats.txt; allow-query { localhost; 192.168.0.0/24; }; /* - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST enable access control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface */ recursion yes; dnssec-enable yes; dnssec-validation yes; dnssec-lookaside auto; bindkeys-file /etc/named.iscdlv.key; managed-keys-directory /var/named/dynamic; }; logging { channel default_debug { file data/named.run; severity dynamic; }; }; zone . IN { type hint; file named.ca; }; zone example.com. IN { type master; file example.com.fz; allow-update { none; }; }; zone 0.168.192.in-addr.arpa IN { type master; file example.com.rz; allow-update { none; }; }; include /etc/named.rfc1912.zones; include /etc/named.root.key; any ideas TIA -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] rndc permission denied
Well, I've found that it was a permission issue: touch /var/named/named.recursing ; chown named. /var/named/named.recursing and now it doesn't complain... However, file created has only the following: ; ; Recursing Queries ; ; Dump complete I don't understand what's the use of recursing subcommand... please help me! 2014-09-21 19:39 GMT-03:00 Sergio Belkin seb...@gmail.com: Hi, h when I have the following problem with rndc: [root@centos7 ~]# rndc recursing and rndc: 'recursing' failed: permission denied SELinux is disables: named.conf config file is: // // named.conf // // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS // server as a caching only nameserver (as a localhost DNS resolver only). // // See /usr/share/doc/bind*/sample/ for example named configuration files. // options { //listen-on port 53 { 127.0.0.1; }; listen-on port 53 { 192.168.0.107; }; //listen-on-v6 port 53 { ::1; }; directory /var/named; dump-file /var/named/data/cache_dump.db; statistics-file /var/named/data/named_stats.txt; memstatistics-file /var/named/data/named_mem_stats.txt; allow-query { localhost; 192.168.0.0/24; }; /* - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST enable access control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface */ recursion yes; dnssec-enable yes; dnssec-validation yes; dnssec-lookaside auto; bindkeys-file /etc/named.iscdlv.key; managed-keys-directory /var/named/dynamic; }; logging { channel default_debug { file data/named.run; severity dynamic; }; }; zone . IN { type hint; file named.ca; }; zone example.com. IN { type master; file example.com.fz; allow-update { none; }; }; zone 0.168.192.in-addr.arpa IN { type master; file example.com.rz; allow-update { none; }; }; include /etc/named.rfc1912.zones; include /etc/named.root.key; any ideas TIA -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Extraneous option in sshd_config?
Hi, I've found the option in CentOS 7 in sshd_config file #Host *.local # CheckHostIP no I think that option is for ssh_config, not for sshd_config. Please correct me if I'm wrong. Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] SAMBA as AD DC
Hi folks, Is able SAMBA on CentOS 7 to work as Active Directory Domain Controller? If it's not, what is the recommended way of doing? Compiling from sources? Install packages from SerNet? Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SAMBA as AD DC
H perhaps I don't explain myself enough. I already know that Samba capable of working as a AD domain controller and more. I'm asking about the official packages of CentOS, I mean from official repo's. Thanks in advance 2014-09-06 18:01 GMT-03:00 Aly Khimji aly.khi...@gmail.com: Yes Samba4 is capable of working as a AD domain controller and more. See link. https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO Aly On Sep 6, 2014 4:16 PM, Sergio Belkin seb...@gmail.com wrote: Hi folks, Is able SAMBA on CentOS 7 to work as Active Directory Domain Controller? If it's not, what is the recommended way of doing? Compiling from sources? Install packages from SerNet? Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] default MPM
Hi folks What is the default MPM in apache on CentOS 7? Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Cannot Static Routes
2014-08-28 3:02 GMT-03:00 Mihamina Rakotomandimby mihamina.rakotomandi...@rktmb.org: On 08/27/2014 09:42 PM, Sergio Belkin wrote: I'd want to configure persistent static routes, ie in config files, but I can't configure static routes, I tested: [root@centos7 ~]# cat /etc/sysconfig/network-scripts/routes-enp0s3 ADDRESS0=10.10.10.0 NETMASK0=255.255.255.0 GATEWAY0=192.168.1.1 logs says nothing: [...] I've also tried using /etc/sysconfig/static-routes file as is in http://www.ehowstuff.com/how-to-setup-persistent-static-routes-on-linux-centos-6-4/ Hi Sergio, The log parts you posted are related to networkManager. What happens if you explicitely say in the configuration file that the interface is not managed by NetworkMAnager? Regards. ___ Hi Mihamina, it's all about wrong filename as I earlier said, however, I've later disabled NetworkManager, I think that it's not a mature software for production, but I may be wrong... -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Cannot Static Routes
Hi, I'd want to configure persistent static routes, ie in config files, but I can't configure static routes, I tested: [root@centos7 ~]# cat /etc/sysconfig/network-scripts/routes-enp0s3 ADDRESS0=10.10.10.0 NETMASK0=255.255.255.0 GATEWAY0=192.168.1.1 logs says nothing: ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]: info Activation (enp0s3) Stage 5 of 5 (IPv4 Commit) complete. ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]: info (enp0s3): device state change: ip-check - seconda...0 0] ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]: info (enp0s3): device state change: secondaries - acti...0 0] ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]: info NetworkManager state is now CONNECTED_LOCAL ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]: info Policy set 'enp0s3' (enp0s3) as default for IPv4 r...DNS. ago 27 15:38:29 centos7.vhgroup.corp NetworkManager[2299]: info Activation (enp0s3) successful, device activated. ago 27 15:38:29 centos7.vhgroup.corp network[4172]: Activando interfaz enp0s3: Connection successfully activated (...on/5) ago 27 15:38:29 centos7.vhgroup.corp network[4172]: [ OK ] ago 27 15:38:29 centos7.vhgroup.corp systemd[1]: Started LSB: Bring up/down networking. -- Subject: Unit network.service has finished start-up I've also tried using /etc/sysconfig/static-routes file as is in http://www.ehowstuff.com/how-to-setup-persistent-static-routes-on-linux-centos-6-4/ It just doesn't work :( How is the proper way to do it? Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Cannot Static Routes
2014-08-27 15:42 GMT-03:00 Sergio Belkin seb...@gmail.com: /etc/sysconfig/network-scripts/routes-enp0s3 Shame on me, it was /etc/sysconfig/network- scripts/route-enp0s3 instead /etc/sysconfig/network- scripts/routes-enp0s3 Sorry -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Missing system-config-lvm?
Hi, I didn't find system-config-lvm package on centos 7 official repo's, why? :) Greetings -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Missing system-config-lvm?
I don't rely on such a tool to manage lvms but I'm making a doc about LVM's and it was interesting to have a graphical approach... 2014-08-22 14:55 GMT-03:00 Reindl Harald h.rei...@thelounge.net: Am 22.08.2014 um 19:10 schrieb Sergio Belkin: I didn't find system-config-lvm package on centos 7 official repo's, why? :) because it is dropped long ago upstream for good reasons https://ask.fedoraproject.org/en/question/38068/lvm-on-fedora20/ recent LVM implementations support a ton of features unknown to system-config-lvm - would really like to risk act a unmaintained tool on a recent setup probably using thin-provision? -- -- Sergio Belkin http://www.sergiobelkin.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Target TRACE in CentOS
HI, I'm trying to use TRACE target of raw table but It doesn't work It's a CentOS 6.2 with kernel 2.6.32-220.7.1.el6.x86_64. lsmod | egrep -i raw|trace|log iptable_raw 2264 1 ip_tables 17831 4 iptable_raw,iptable_filter,iptable_mangle,iptable_nat xt_TRACE1060 1 ipt_LOG 5845 5 ipt_ULOG 10765 11 dm_log 10122 2 dm_mirror,dm_region_hash dm_mod 81596 14 dm_mirror,dm_log The problem is TRACE target maches but it isn't logging anything Chain PREROUTING (policy ACCEPT 380796 packets, 194521672 bytes) pkts bytes target prot opt in out source destination 6 360 TRACE tcp -- * * 0.0.0.0/0 A.B.C.D tcp dpt:443 if I use the LOG target it WORKS, but TRACE it's better for debugging, am I doing something wrong or this CentOS release has no full support for this target? Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Openswan or Ipsec-tools?
Hi, I wonder what is better on CentOS 6 if openswan or ipsec-tools, what do you recommend me? (I can't use openvpn) Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Openswan or Ipsec-tools?
2012/5/14 Shaun cen...@stinkfish.or I didn't think ipsec-tools were in CentOS 6? Just openswan. Is there any reason for ipsec-tools is not in CentOS? Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Openswan or Ipsec-tools?
2012/5/14 Steve Clark scl...@netwolves.com: On 05/14/2012 12:22 PM, Lorenzo Martínez Rodríguez wrote: I have this problem with my IPSec implementation, whatever I change :O [root@Carmen ~]# /etc/init.d/ipsec start failed to start openswan IKE daemon - the following error occured: addconn: /builddir/build/BUILD/openswan-2.6.32/lib/libipsecconf/confread.c:255: load_setup: Assertion `kw-keyword.keydef-validity kv_config' failed. El 14/05/12 18:14, Sergio Belkin escribió: 2012/5/14 Shauncen...@stinkfish.or I didn't think ipsec-tools were in CentOS 6? Just openswan. Is there any reason for ipsec-tools is not in CentOS? Thanks in advance! We use ipsec-tools. On Centos 6? -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com LPIC-2 Certified - http://www.lpi.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS-es] Cual es la Distribución en que se ba sa el Examen LPI?
El día 28 de octubre de 2010 16:50, Luis J Feo geoquim...@hotmail.es escribió: mejor repasate debian. Generalmente lo usan para dicho examen. Mm no es tan así, se usa en parte, lo digo por experiencia propia ;) -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS-es] Cual es la Distribución en que se ba sa el Examen LPI?
El día 22 de octubre de 2010 09:04, Mauro Sánchez maur...@gmail.com escribió: El día 20 de octubre de 2010 11:32, Luis Alberto Roman Aguirre luisroma...@hotmail.com escribió: Buenas Lista: El motivo de este mail es para que me puedan dar una recomendación o bien me saquen de la duda, resulta que estoy interesado en dar el EXAMEN LPI, pero la cuestion es que por ejemplo yo que solo uso CentOS me serviria para dar ese examen??... lo digo porque algunos compañeros me comentan que se basa en distribuciones de Debian y demas . La verdad ya no se que creer..ahora si es que alguien conoce alguna pagina donde pueda dar el examen SIMULADO agradecere.Bueno espero me puedan sacar de esa duda. Les escribo desde la Ciudad de Arequipa-Perú. Hola. Se basa en Debian y en Red Hat. Saludos. Cabe aclarar que LPI trata de ser lo más neutral posible. The most critical difference between LPI and the rest of these programs is that LPI is completely vendor independent and distribution neutral. Es decir es ante todo un examen de Linux, obviamente, no conviene estudiar con una distro muy exótica. Las recomendables son CentOS, Red Hat, Fedora y de la rama debianista, Debian y Ubuntu. Importante no meterse con particularidades de una distro Saludos -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
[CentOS] undefined reference when linking against libresolv
Hi, I have a project that is a library that links against libresolv, It works fine on recent distros: Ubuntu 10.x Fedora 13, Mandriva 2010.1 but on Centos 5.x I get the following errors glibc installed is: glibc-2.5-18.el5_1.1 g++ -DHAVE_CONFIG_H -I. -I./include -I/usr/include/postgresql -O3 -ansi -Wall -Wno-deprecated -D_FORTIFY_SOURCE=0 -MT testUpLog.o -MD -MP -MF .deps/testUpLog.Tpo -c -o testUpLog.o testUpLog.cc mv -f .deps/testUpLog.Tpo .deps/testUpLog.Po /bin/sh ./libtool --tag=CXX --mode=link g++ -O3 -ansi -Wall -Wno-deprecated -D_FORTIFY_SOURCE=0 -L/usr/lib64 -L/lib64 -L/usr/lib64/mysql -o testUpLog testUpLog.o libUpTools.la -lpq -lmysqlclient -lssl -lpthread libtool: link: g++ -O3 -ansi -Wall -Wno-deprecated -D_FORTIFY_SOURCE=0 -o .libs/testUpLog testUpLog.o -L/usr/lib64 -L/lib64 -L/usr/lib64/mysql ./.libs/libUpTools.so -lpq -lmysqlclient -lssl -lpthread ./.libs/libUpTools.so: undefined reference to `__ns_name_uncompress' ./.libs/libUpTools.so: undefined reference to `__ns_initparse' ./.libs/libUpTools.so: undefined reference to `__ns_parserr' collect2: ld returned 1 exit status make[1]: *** [testUpLog] Error 1 make[1]: Leaving directory `/tmp/UpTools-8.5.3' make: *** [check-am] Error 2 library.la file contains: dlname='libUpTools.so.0' library_names='libUpTools.so.0.0.0 libUpTools.so.0 libUpTools.so' old_library='libUpTools.a' inherited_linker_flags='' dependency_libs=' -L/usr/lib64 -L/lib64 -L/usr/lib64/mysql -lpq -lmysqlclient -lssl -lpthread' weak_library_names='' current=0 age=0 revision=0 installed=no shouldnotlink=no dlopen='' dlpreopen='' libdir='/usr/lib' You can read my files on pastebin.com *configure.ac http://pastebin.com/hs5q21Rq *Makefile.am; http://pastebin.com/KW1sGZve Thanks in advance -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blowfish issues with somewhat big files
2010/7/29 R P Herrold herr...@centos.org: On largish files, on a CentOS 5, 64 bit arch, openssl seems to work fine here [herr...@centos-5 SRPMS]$ time openssl bf -in \ freeswitch-0.0.20100729.git-1.src.rpm -out \ freeswitch-0.0.20100729.git-1.src.rpm.bf enter bf-cbc encryption password: Verifying - enter bf-cbc encryption password: real 0m38.587s user 0m3.700s sys 0m0.568s [herr...@centos-5 SRPMS]$ time openssl bf -d -in \ freeswitch-0.0.20100729.git-1.src.rpm.bf -out \ new_freeswitch-0.0.20100729.git-1.src.rpm enter bf-cbc decryption password: real 0m39.543s user 0m3.652s sys 0m0.792s [herr...@centos-5 SRPMS]$ md5sum freeswitch-0.0.20100729.git-1.src.rpm \ new_freeswitch-0.0.20100729.git-1.src.rpm b33eed78ec8fbccb7ef632c0c4bfe8ac freeswitch-0.0.20100729.git-1.src.rpm b33eed78ec8fbccb7ef632c0c4bfe8ac new_freeswitch-0.0.20100729.git-1.src.rpm [herr...@centos-5 SRPMS]$ ls -alh freeswitch-0.0.20100729.git-1.src.rpm \ new_freeswitch-0.0.20100729.git-1.src.rpm -rw-r--r-- 1 herrold herrold 320M Jul 29 11:00 freeswitch-0.0.20100729.git-1.src.rpm -rw-rw-r-- 1 herrold herrold 320M Jul 29 12:33 new_freeswitch-0.0.20100729.git-1.src.rpm [herr...@centos-5 SRPMS]$ As such perhaps you are overrunning a pipe, or have a problem elsewhere in the process -- Russ herrold ___ Thanks Russ, Sadly I've tried the same process by hand on both ways and on different physical servers running Centos: openssl bf -d -in $1 -out $ARCH -k $KEY and cat $1 | openssl bf -debug -d -out $ARCH -k $KEY $1.unc and either failed :( I am taken aback... -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blowfish issues with somewhat big files
2010/7/28 Sergio Belkin seb...@gmail.com: 2010/7/28 Stephen Harris li...@spuddy.org: DFILE_OFFSET_BITS=64 I have installed both 32 and 64 bit versions of openssl, can that be the cause of this problem? Thanks in advance -- -- My fault, indeed, somewhat large files is a relative term, for example it can't decrypt files You can read full ouput on: http://pastebin.com/7yZeGEa4 I've tried using both openssl bf -d -in $1 -out $FILE -k $KEY and cat $1 | openssl bf -debug -d -out $FILE -k $KEY $1.unc and failed either. For encrypting I use: # esta funcion reemplaza a guardapgsql, guardaldap, y guardamysql guardadump() { logstr guardando $1-dump con blowfish ARCH=$1.dump.all.$DATE.gz.bf case $1 in mysql) CMD='mysqldump -Q -l -F --add-locks --add-drop-table -A';; ldap) CMD='slapcat -c ';; pgsql) CMD='sudo -u postgres pg_dumpall -v -c';; esac $CMD | compress | openssl bf -out $ARCH -k $key 2 $LOGFILE return $? } (Of course it's only a part of a file) I started to think that size is not the problem, for example I have files: -rw-r--r-- 1 root root 10264 Jul 29 00:24 usr.local.etc.Thu-29-Jul-2010.tgz.bf -rw-r--r-- 1 root root 4402600 Jul 29 00:23 dir.Thu-29-Jul-2010.gz -rw-r--r-- 1 root root 4853784 Jul 29 00:24 usr.lib.perl5.5.8.8.UP.Thu-29-Jul-2010.tgz.bf -rw-r--r-- 1 root root 12554264 Jul 29 00:24 etc.Thu-29-Jul-2010.tgz.bf -rw-r--r-- 1 root root 17302224 Jul 29 00:23 ldap.dump.all.Thu-29-Jul-2010.gz.bf -rw-r--r-- 1 root root 92241944 Jul 29 00:24 scripts.Thu-29-Jul-2010.tgz.bf -rw-r--r-- 1 root root 209591864 Jul 29 00:23 pgsql.dump.all.Thu-29-Jul-2010.gz.bf And scripts.Thu-29-Jul-2010.tgz.bf can be decrypted. May compress the culprit? I tried with a small database (544 K compressed with ncompress) and have no problem anyway, so I am rather puzzled :( Any idea? TIA -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blowfish issues with somewhat big files
2010/7/29 Sergio Belkin seb...@gmail.com: 2010/7/28 Sergio Belkin seb...@gmail.com: 2010/7/28 Stephen Harris li...@spuddy.org: DFILE_OFFSET_BITS=64 I have installed both 32 and 64 bit versions of openssl, can that be the cause of this problem? Thanks in advance -- -- My fault, indeed, somewhat large files is a relative term, for example it can't decrypt files You can read full ouput on: http://pastebin.com/7yZeGEa4 I've tried using both openssl bf -d -in $1 -out $FILE -k $KEY and cat $1 | openssl bf -debug -d -out $FILE -k $KEY $1.unc and failed either. For encrypting I use: # esta funcion reemplaza a guardapgsql, guardaldap, y guardamysql guardadump() { logstr guardando $1-dump con blowfish ARCH=$1.dump.all.$DATE.gz.bf case $1 in mysql) CMD='mysqldump -Q -l -F --add-locks --add-drop-table -A';; ldap) CMD='slapcat -c ';; pgsql) CMD='sudo -u postgres pg_dumpall -v -c';; esac $CMD | compress | openssl bf -out $ARCH -k $key 2 $LOGFILE return $? } (Of course it's only a part of a file) I started to think that size is not the problem, for example I have files: -rw-r--r-- 1 root root 10264 Jul 29 00:24 usr.local.etc.Thu-29-Jul-2010.tgz.bf -rw-r--r-- 1 root root 4402600 Jul 29 00:23 dir.Thu-29-Jul-2010.gz -rw-r--r-- 1 root root 4853784 Jul 29 00:24 usr.lib.perl5.5.8.8.UP.Thu-29-Jul-2010.tgz.bf -rw-r--r-- 1 root root 12554264 Jul 29 00:24 etc.Thu-29-Jul-2010.tgz.bf -rw-r--r-- 1 root root 17302224 Jul 29 00:23 ldap.dump.all.Thu-29-Jul-2010.gz.bf -rw-r--r-- 1 root root 92241944 Jul 29 00:24 scripts.Thu-29-Jul-2010.tgz.bf -rw-r--r-- 1 root root 209591864 Jul 29 00:23 pgsql.dump.all.Thu-29-Jul-2010.gz.bf And scripts.Thu-29-Jul-2010.tgz.bf can be decrypted. May compress the culprit? I tried with a small database (544 K compressed with ncompress) and have no problem anyway, so I am rather puzzled :( Any idea? TIA I forgot to say that scripts.Thu-29-Jul-2010.tgz.bf it is generated in a different way of dump files: guardassl() { if [ $2 != ];then EXCLUDE=--exclude \$2\ fi logstr guardando $1 con blowfish $EXCLUDE ARCH=`echo $1 | sed 's/^\///'|sed 's/\//./g'`.$DATE.tgz.bf tar --create --preserve --gzip $EXCLUDE $1 | openssl bf -out $ARCH -k $KEY 2 $LOGFILE return $? } -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Blowfish issues with somewhat big files
Hi, I've encrypted some database dumps with openssl bf -d -in dumpfile.bf -out dumpfile -k mykey bad decrypt 14142:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:325: The weird thing is if I do the same with smaller files it can decrypt with no problem. I use openssl-0.9.8e-12.el5 on Centos 5.4. Please could you tell me what I am doing wrong? Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blowfish issues with somewhat big files
2010/7/28 Gary Greene ggre...@minervanetworks.com: On 7/28/10 12:10 PM, Stephen Harris li...@spuddy.org wrote: On Wed, Jul 28, 2010 at 04:04:26PM -0300, Sergio Belkin wrote: I've encrypted some database dumps with openssl bf -d -in dumpfile.bf -out dumpfile -k mykey bad decrypt 14142:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:325: The weird thing is if I do the same with smaller files it can decrypt with no problem. I use openssl-0.9.8e-12.el5 on Centos 5.4. Is the file over 2Gb in size? A number of programs have 2Gb filesize limits (eg unzip). You could, perhaps, use it as a pipe: cat dumpfile.bf | openssl bf -d -k mykey dumpfile This only is caused by applications that either a) impose a 2GB limit directly (zip being one) or b) have not been built with large file support (-DLARGEFILE_SOURCE -DFILE_OFFSET_BITS=64). ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Hi, Do you mean that I should to recompile openssl? I've tried Stephen solution's with no success :( Debug ouput is: BIO[00875EF0]:ctrl(106) - FILE pointer BIO[00875EF0]:ctrl return 1 BIO[00875F70]:ctrl(108) - FILE pointer BIO[00875F70]:ctrl return 1 BIO[00875F70]:write(0,8) - FILE pointer BIO[00875F70]:write return 8 BIO[00875F70]:write(0,8) - FILE pointer BIO[00875F70]:write return 8 BIO[00876230]:ctrl(6) - cipher BIO[00875F70]:ctrl(6) - FILE pointer BIO[00875F70]:ctrl return 0 BIO[00876230]:ctrl return 0 BIO[00875EF0]:read(0,8192) - FILE pointer BIO[00875EF0]:read return 8192 BIO[00876230]:write(0,8192) - cipher BIO[00875F70]:write(0,4096) - FILE pointer BIO[00875F70]:write return 4096 BIO[00875F70]:write(0,4096) - FILE pointer BIO[00875F70]:write return 4096 BIO[00876230]:write return 8192 BIO[00875EF0]:read(0,8192) - FILE pointer BIO[00875EF0]:read return 8192 BIO[00876230]:write(0,8192) - cipher BIO[00875F70]:write(0,4096) - FILE pointer BIO[00875F70]:write return 4096 BIO[00875F70]:write(0,4096) - FILE pointer BIO[00875F70]:write return 4096 BIO[00876230]:write return 8192 BIO[00875EF0]:read(0,8192) - FILE pointer BIO[00875EF0]:read return 8192 BIO[00876230]:write(0,8192) - cipher [...] BIO[00876230]:ctrl(11) - cipher BIO[00875F70]:write(0,8) - FILE pointer BIO[00875F70]:write return 8 BIO[00875F70]:ctrl(11) - FILE pointer BIO[00875F70]:ctrl return 1 BIO[00876230]:ctrl return 1 BIO[00875EF0]:Free - FILE pointer BIO[00875F70]:Free - FILE pointer BIO[00876230]:Free - cipher Thanks in advance!! -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blowfish issues with somewhat big files
2010/7/28 Stephen Harris li...@spuddy.org: DFILE_OFFSET_BITS=64 I have installed both 32 and 64 bit versions of openssl, can that be the cause of this problem? Thanks in advance -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Full Virtualized DomU won't boot
2010/1/28 Pasi Kärkkäinen pa...@iki.fi: On Wed, Jan 27, 2010 at 07:21:54PM -0300, Sergio Belkin wrote: Hi, I use Centos 5.4 x86_64 kernel used is 2.6.18-164.11.1.el5xen I have a physical machine running Debian Etch (32 bit) and Debian Lenny and I virtualized the first one as follows: *Created a HVM DomU with Virt-Manager with a virtual disk file of 4 M *Boot from LiveCD, and created a swap and a ext3 partitions (Yes, very simple layout). *Rsync'd files from root partition of physical machine to partition mounted on LiveCD on DomU. *Chrooted and edited files /boot/grub/menu.lst, /etc/fstab, etc/mtab, /boot/grub/device.map. *Then I rebooted from hard disk and stay freezed with the message booting from hard disk . But it doesn't boot at all from hard disk. I can boot using grub-rescue-cdrom, but if I try to install grub with grub-install it outputs: The file /boot/grub/stage1 not read correctly (I've tried --recheck option, and depmod and update-grub commands with no success) Well.. stage1 is definitely needed by grub. So grub didn't get installed. Your domU can't boot then. - Do you have the stage1 file there? - Was the partition layout the same for the old server? - Is the grub.conf root (hd0,X) correct for the new disk? You can install grub from grub-shell like this, after chrooting to the filesystem: # grub device (hd0) /dev/sda root (hd0,0) setup (hd0) replace hd0,0 with the correct partition index. I've tried that, If that was the problem, I hadn't asked help to the list :) I've found that it was a misunderstanding between Grub and the filesystem. Target filesystem has inodes of 256 bytes while debian etch version can read inodes of 128 bytes. -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Full Virtualized DomU won't boot
Hi, I use Centos 5.4 x86_64 kernel used is 2.6.18-164.11.1.el5xen I have a physical machine running Debian Etch (32 bit) and Debian Lenny and I virtualized the first one as follows: *Created a HVM DomU with Virt-Manager with a virtual disk file of 4 M *Boot from LiveCD, and created a swap and a ext3 partitions (Yes, very simple layout). *Rsync'd files from root partition of physical machine to partition mounted on LiveCD on DomU. *Chrooted and edited files /boot/grub/menu.lst, /etc/fstab, etc/mtab, /boot/grub/device.map. *Then I rebooted from hard disk and stay freezed with the message booting from hard disk . But it doesn't boot at all from hard disk. I can boot using grub-rescue-cdrom, but if I try to install grub with grub-install it outputs: The file /boot/grub/stage1 not read correctly (I've tried --recheck option, and depmod and update-grub commands with no success) Output of file command on virtual disk file is: /virtuales/videodisk.img: x86 boot sector; partition 1: ID=0x82, starthead 1, startsector 63, 4273227 sectors; partition 2: ID=0x83, active, starthead 0, startsector 4273290, 77626080 sectors The DomU file is: DomU (file): name = video uuid = 54d25d78-b9d0-0159-542c-bb601cc936bb maxmem = 1024 memory = 512 vcpus = 1 builder = hvm kernel = /usr/lib/xen/boot/hvmloader boot = d pae = 1 acpi = 1 apic = 1 localtime = 0 on_poweroff = destroy on_reboot = restart on_crash = restart device_model = /usr/lib64/xen/bin/qemu-dm sdl = 0 vnc = 1 vncunused = 1 keymap = es disk = [ file:/virtuales/videodisk.img,hda,w, file:/virtuales/isos/grub-rescue-cdrom.iso,hdc:cdrom,r ] vif = [ mac=00:16:36:0b:24:2d,bridge=xenbr0,script=vif-bridge ] parallel = none serial = pty EOF With grub-rescue cd DomU can boot but as I've said can't install grub and loads also loopback interface. Please could you tell me what I am doing wrong? Thanks in advance!! -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] 32 bit Full Virtualized DomU on 64 Dom0
2010/1/23 Rudi Ahlers rudiahl...@gmail.com: On Sun, Jan 24, 2010 at 1:41 AM, Sergio Belkin seb...@gmail.com wrote: Hi, I need to virtualize a physical machine (Debian Etch 32 bit) to run on Centos 5.4 64 bit. Can I do that? I mean can a full virtualized DomU 32 bit run on a 64 bit Dom0. Thanks in advance!! -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ Sure it can, why not? -- Kind Regards Rudi Ahlers SoftDux Website: http://www.SoftDux.com Technical Blog: http://Blog.SoftDux.com Office: 087 805 9573 Cell: 082 554 7532 Thanks! it was only a techie superstition :) ! -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Just installed DomU won't boot
2010/1/22 Lucian @ lastdot.org luc...@lastdot.org: On Fri, Jan 22, 2010 at 5:50 PM, Sergio Belkin seb...@gmail.com wrote: Hi, I am using Centos 5.4 x86_64 with kernel 2.6.18-164.11.1.el5xen. I've installed a Centos 5.4 (64 bit too) DomU (paravirtualized), process was apparently with no problems, but DomU refuses to start, this the error: Traceback (most recent call last): File /usr/share/virt-manager/virtManager/engine.py, line 498, in run_domain vm.startup() File /usr/share/virt-manager/virtManager/domain.py, line 573, in startup self.vm.create() File /usr/lib64/python2.4/site-packages/libvirt.py, line 287, in create if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self) libvirtError: La operación POST falló: xend_post: error del demonio de xen: (xend.err Error creating domain: Boot loader didn't return any data!) End of Error Message. Config file is as follows: name = fido uuid = af13748d-6084-2357-73b7-0c7ff9ed9553 maxmem = 1500 memory = 1500 vcpus = 16 bootloader = /usr/bin/pygrub on_poweroff = destroy on_reboot = restart on_crash = restart vfb = [ type=vnc,vncunused=1,keymap=es ] disk = [ phy:/dev/VolGroup00/LogVol02,xvda,w ] vif = [ mac=00:16:36:19:a7:66,bridge=xenbr0,script=vif-bridge ] Please could you tell me what'w wrong with it? Thanks in advance!! -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos What happens if you run: pygrub /dev/VolGroup00/LogVol02 I suspect you don't have the required stuff (kernel, initrd and menu.lst/grub.conf) in your domU's /boot dir. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Thanks now I have not the server at hand, I'll try to keep in touch. -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] 32 bit Full Virtualized DomU on 64 Dom0
Hi, I need to virtualize a physical machine (Debian Etch 32 bit) to run on Centos 5.4 64 bit. Can I do that? I mean can a full virtualized DomU 32 bit run on a 64 bit Dom0. Thanks in advance!! -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Just installed DomU won't boot
Hi, I am using Centos 5.4 x86_64 with kernel 2.6.18-164.11.1.el5xen. I've installed a Centos 5.4 (64 bit too) DomU (paravirtualized), process was apparently with no problems, but DomU refuses to start, this the error: Traceback (most recent call last): File /usr/share/virt-manager/virtManager/engine.py, line 498, in run_domain vm.startup() File /usr/share/virt-manager/virtManager/domain.py, line 573, in startup self.vm.create() File /usr/lib64/python2.4/site-packages/libvirt.py, line 287, in create if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self) libvirtError: La operación POST falló: xend_post: error del demonio de xen: (xend.err Error creating domain: Boot loader didn't return any data!) End of Error Message. Config file is as follows: name = fido uuid = af13748d-6084-2357-73b7-0c7ff9ed9553 maxmem = 1500 memory = 1500 vcpus = 16 bootloader = /usr/bin/pygrub on_poweroff = destroy on_reboot = restart on_crash = restart vfb = [ type=vnc,vncunused=1,keymap=es ] disk = [ phy:/dev/VolGroup00/LogVol02,xvda,w ] vif = [ mac=00:16:36:19:a7:66,bridge=xenbr0,script=vif-bridge ] Please could you tell me what'w wrong with it? Thanks in advance!! -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] ldapsearch -f file doesn't work
Hi, Firstly, system info: Linux mysystem 2.6.18-53.1.4.el5 #1 SMP Fri Nov 30 00:45:55 EST 2007 x86_64 x86_64 x86_64 GNU/Linux I am running ldap on Centos with packages openldap-2.3.27-8.el5_2.4 y openldap-2.3.27-8.el5_2.4 I'd want to perform a query that return one attribute. So I did something as follows: ldapsearch -W -f qbis.ldif -D cn=Manager,dc=palermo,dc=edu -b ou=people,dc=mydomain,dc=edu -x legajo (Where legajo is the filter) There is no problem with filter but wih the file qbis.ldif which contains: dn: uid=jdoe,ou=people,dc=mydomain,dc=edu Of course I could perform that query with no need of one file, but I need to get legajo from around 800 users so it would be nice to be able to use -f file. I cannot do something like a loop for because it would ask me every time the Manager password. Am I doing something wrong or is a ldap bug? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ldapsearch -f file doesn't work
2009/12/2 Sergio Belkin seb...@gmail.com: Hi, Firstly, system info: Linux mysystem 2.6.18-53.1.4.el5 #1 SMP Fri Nov 30 00:45:55 EST 2007 x86_64 x86_64 x86_64 GNU/Linux I am running ldap on Centos with packages openldap-2.3.27-8.el5_2.4 y openldap-2.3.27-8.el5_2.4 I'd want to perform a query that return one attribute. So I did something as follows: ldapsearch -W -f qbis.ldif -D cn=Manager,dc=palermo,dc=edu -b ou=people,dc=mydomain,dc=edu -x legajo (Where legajo is the filter) There is no problem with filter but wih the file qbis.ldif which contains: dn: uid=jdoe,ou=people,dc=mydomain,dc=edu Of course I could perform that query with no need of one file, but I need to get legajo from around 800 users so it would be nice to be able to use -f file. I cannot do something like a loop for because it would ask me every time the Manager password. Am I doing something wrong or is a ldap bug? Thanks in advance! -- Ouch, I forget to comment what is the problem, well the problem is that query returns all database entries (onlt it works the filter) but doesn't honor -f file at all. So that was my question, what's wrong with that option? Thanks in advance again :) -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ldapsearch -f file doesn't work
2009/12/2 Craig White craigwh...@azapple.com: On Wed, 2009-12-02 at 06:06 -0700, Craig White wrote: Well at last, it was easier I thought Thanks God, google and this Novell page :D http://www.novell.com/coolsolutions/tip/17144.html I hope be useful... -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] IO statistic Centos 5.4
Hi, Has kernel-2.6.18-128.1.1 support for IO statistic for example when using pidstat -d? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] IO statistic Centos 5.4
2009/10/23 Scott McClanahan smcclana...@sigovs.com: On Fri, 2009-10-23 at 09:35 -0300, Sergio Belkin wrote: Hi, Has kernel-2.6.18-128.1.1 support for IO statistic for example when using pidstat -d? Thanks in advance! Is pidstat available in the 5.4 sysstat package or are you deviating from the stock sysstat package? Really I don't know, still I don't test release 5.4 it would be nice that has it. -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] IO statistic Centos 5.4
2009/10/23 Benjamin Franz jfr...@freerun.com: Sergio Belkin wrote: 2009/10/23 Scott McClanahan smcclana...@sigovs.com: On Fri, 2009-10-23 at 09:35 -0300, Sergio Belkin wrote: Hi, Has kernel-2.6.18-128.1.1 support for IO statistic for example when using pidstat -d? Thanks in advance! Is pidstat available in the 5.4 sysstat package or are you deviating from the stock sysstat package? Really I don't know, still I don't test release 5.4 it would be nice that has it According to the man page for pidstat, 'pidstat -d' only works with 2.6.20 kernels and later. Since pidstat is not installed by the sysstat package for 5.3 (which is what 2.6.18-128.* kernel is from) it is probably a safe assumption that it won't work. -- Benjamin Franz I've found kernel 2.6.18-128 on http://www.gtlib.gatech.edu/pub/centos/5.3/updates/x86_64/RPMS/ I skipped kernel-2.6.18-164.el5, so I ask again: does kernel-2.6.18-164.el5 support IO statistic, I already know what man page says :) but I wonder if that kernel has that customization Thanks in advance!! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Thermal information
2009/9/18 Ned Slider n...@unixmail.co.uk: Sergio Belkin wrote: 2009/9/18 Ned Slider n...@unixmail.co.uk: Sergio Belkin wrote: Hi, I'd want know get thermal information on Centos 5.3 but get nohting. If I run acpitool -e, it outputs: acpitool -e Kernel version : 2.6.18-92.1.18.20060707 - ACPI version : 20060707 Why are you asumming so quickly that is not a Centos kernel? Because this is what the output from 'acpitool -e' looks like for me: $ acpitool -e Kernel version : 2.6.18-164.el5 - ACPI version : 20060707 and your output shows 2.6.18-92.1.18.20060707 which is not a CentOS kernel format (to my knowledge?). I might be wrong, and am happy to be corrected if I am :) Yes you're wrong :) acpitool output it's not the same that uname -r. I mean it doesn't show rpm package name. rpm -qi kernel Name : kernel Relocations: (not relocatable) Version : 2.6.18 Vendor: CentOS Release : 92.el5 Build Date: Tue 10 Jun Which is not the kernel you've shown running above?? Well, I explained it above. Sorry for my terrible sin, It is not Centos 5.3 but 5.2. Links Kernel used is below: http://vault.centos.org/5.2/os/x86_64/CentOS/kernel-2.6.18-92.el5.x86_64.rpm What's wrong with you? Nothing, I was trying to help. Have a nice weekend. Sorry for I was rude Ned, but I am somewhat sick of answers of people that don't want to help about anything and only know to give moral advices and ask are you really using a system of every package Centos that has been blessed?. Hey, of course I ask here because I use CentOS at work, and because supposedly there are people that has experience using ir on daily basis. Have a nice day -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Thermal information
Hi, I'd want know get thermal information on Centos 5.3 but get nohting. If I run acpitool -e, it outputs: acpitool -e Kernel version : 2.6.18-92.1.18.20060707 -ACPI version : 20060707 --- Battery status : error reading info Function Do_AC_Info_Sys: could not read directory /sys/class/power_supply/ Make sure your kernel has ACPI AC adapter support enabled. Fan: not available CPU type : Intel(R) Xeon(R) CPU5110 @ 1.60GHz CPU speed : 1595.980 MHz Cache size : 4096 KB Bogomips : 3193.92 Bogomips : 3191.86 # of CPU's found : 2 Processor ID : 0 Bus mastering control : no Power management : no Throttling control : yes Limit interface: yes Active C-state : C1 C-states (incl. C0): 1 T-state count : 8 Active T-state : T0 Processor ID : 1 Bus mastering control : no Power management : no Throttling control : yes Limit interface: yes Active C-state : C1 C-states (incl. C0): 1 T-state count : 8 Active T-state : T0 Thermal info : not available Device Sleep state Status --- 1. PCI0 5disabled And: grep THERMAL /boot/config-2.6.18-92.el5 CONFIG_X86_MCE_P4THERMAL=y CONFIG_ACPI_THERMAL=y Am I doing something wrong? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Thermal information
2009/9/18 Ned Slider n...@unixmail.co.uk: Sergio Belkin wrote: Hi, I'd want know get thermal information on Centos 5.3 but get nohting. If I run acpitool -e, it outputs: acpitool -e Kernel version : 2.6.18-92.1.18.20060707 - ACPI version : 20060707 Why are you asumming so quickly that is not a Centos kernel? rpm -qi kernel Name: kernel Relocations: (not relocatable) Version : 2.6.18Vendor: CentOS Release : 92.el5Build Date: Tue 10 Jun 2008 10:09:15 PM ART Install Date: Thu 27 Nov 2008 04:51:05 PM ARST Build Host: builder16.centos.org Group : System Environment/Kernel Source RPM: kernel-2.6.18-92.el5.src.rpm Size: 39056061 License: GPLv2 Signature : DSA/SHA1, Sat 14 Jun 2008 08:35:41 PM ART, Key ID a8a447dce8562897 URL : http://www.kernel.org/ Summary : The Linux kernel (the core of the Linux operating system) Description : The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. What's wrong with you? -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] SELinux messages after compiling new kernel
Hi, I compiled a kernel from sources (2.6.30.5) and when system is booting shows these errors: SELinux: 61 classes, 69080 rules SELinux: class peer not defined in policy SELinux: class capability2 not defined in policy SELinux: class kernel_service not defined in policy SELinux: permission open in class dir not defined in policy SELinux: permission open in class file not defined in policy SELinux: permission open in class chr_file not defined in policy SELinux: permission open in class blk_file not defined in policy SELinux: permission open in class sock_file not defined in policy SELinux: permission open in class fifo_file not defined in policy SELinux: permission recvfrom in class node not defined in policy SELinux: permission sendto in class node not defined in policy SELinux: permission ingress in class netif not defined in policy SELinux: permission egress in class netif not defined in policy SELinux: permission setfcap in class capability not defined in policy SELinux: permission nlmsg_tty_audit in class netlink_audit_socket not defined in policy SELinux: permission forward_in in class packet not defined in policy SELinux: permission forward_out in class packet not defined in policy SELinux: the above unknown classes and permissions will be denied How can I fix these errors? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SELinux messages after compiling new kernel
2009/8/27 Jim Perrin jper...@gmail.com: On Thu, Aug 27, 2009 at 9:01 AM, Sergio Belkinseb...@gmail.com wrote: How can I fix these errors? Easy. Use the kernel provided in the distribution. Jim, thanks for the suggestion, but Firstly: I need a newer kernel in order to get IO statistics from tools like atop, pidstat, etc. And secondly and most important: my boss wants that :) So I'd be glad to hear other kind of solution :) -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SELinux messages after compiling new kernel
2009/8/27 Filipe Brandenburger filbran...@gmail.com: Hi, On Thu, Aug 27, 2009 at 12:46, Sergio Belkinseb...@gmail.com wrote: Jim, thanks for the suggestion, but Firstly: I need a newer kernel in order to get IO statistics from tools like atop, pidstat, etc. And secondly and most important: my boss wants that :) Then CentOS is not what you want. There is a reason why RHEL/CentOS does not ship with the latest kernel (and other components) and backports fixes instead. It's not trivial to make different versions of these components work together. If you try to replace the kernel (or other core components) you will see how painful it is. In fact, you started to see it already. You may try to continue to go that way, but I doubt anyone in this list will be able to help you there... you're pretty much on your own. So I'd be glad to hear other kind of solution :) Look at the latest Fedora or Ubuntu or another one of the cutting edge distributions that ship with more recent versions of components. Or ask yourself (or your boss) *WHY* you think you really need a later version of a certain component. What is your real problem? Is it support to a certain hardware? Is it network related? Is it (unfounded) fear that the kernel in CentOS might be vulnerable? It might be possible to solve your problem using CentOS in another way, if you come back to the list with the real problem we might be able to help you better. HTH, Felipe I've just explained the reason why I've compiled. -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SELinux messages after compiling new kernel
2009/8/27 Johnny Hughes joh...@centos.org: Sergio Belkin wrote: 2009/8/27 Filipe Brandenburger filbran...@gmail.com: Hi, On Thu, Aug 27, 2009 at 12:46, Sergio Belkinseb...@gmail.com wrote: Jim, thanks for the suggestion, but Firstly: I need a newer kernel in order to get IO statistics from tools like atop, pidstat, etc. And secondly and most important: my boss wants that :) Then CentOS is not what you want. There is a reason why RHEL/CentOS does not ship with the latest kernel (and other components) and backports fixes instead. It's not trivial to make different versions of these components work together. If you try to replace the kernel (or other core components) you will see how painful it is. In fact, you started to see it already. You may try to continue to go that way, but I doubt anyone in this list will be able to help you there... you're pretty much on your own. So I'd be glad to hear other kind of solution :) Look at the latest Fedora or Ubuntu or another one of the cutting edge distributions that ship with more recent versions of components. Or ask yourself (or your boss) *WHY* you think you really need a later version of a certain component. What is your real problem? Is it support to a certain hardware? Is it network related? Is it (unfounded) fear that the kernel in CentOS might be vulnerable? It might be possible to solve your problem using CentOS in another way, if you come back to the list with the real problem we might be able to help you better. HTH, Felipe I've just explained the reason why I've compiled. Let me try it a different way. The current kernel used by Red Hat in RHEL 4 is a 2.6.9-x kernel and it has 1973 patches. The one currently in use in RHEL 5 is a 2.6.18-x kernel with 2882 patches. Many packages are compiled against kernel-headers and depend on the proc structure that is there. SELinux is just one of many issues you will have if you try to use a main line kernel on CentOS. You will need to have several of the Red Hat patches (modified to work with the new kernel tree) incorporated in order to use a newer kernel on CentOS. If you absolutely have to have a newer kernel (you should not do this ... but hey, it IS your machine) ... then instead of trying to use a main line kernel, instead try to use the latest one from here: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/RHEMRG/SRPMS/ This kernel has been tested for use with RHEL-5 and is 2.6.24-x. You still might have issues, but they should be far fewer than running a main line kernel on CentOS. Would you, if you boss told you he wanted you to, try to make the Windows Vista system files run on Windows 95? Thanks, Johnny Hughes Thanks for provide the more smart and constructive answer so far. On ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/RHEMRG/SRPMS/ I've only found kernel-rt, are they real time kernels? -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] SELinux messages after compiling new kernel
2009/8/27 Johnny Hughes joh...@centos.org: Sergio Belkin wrote: 2009/8/27 Filipe Brandenburger filbran...@gmail.com: Hi, On Thu, Aug 27, 2009 at 12:46, Sergio Belkinseb...@gmail.com wrote: Jim, thanks for the suggestion, but Firstly: I need a newer kernel in order to get IO statistics from tools like atop, pidstat, etc. And secondly and most important: my boss wants that :) Then CentOS is not what you want. There is a reason why RHEL/CentOS does not ship with the latest kernel (and other components) and backports fixes instead. It's not trivial to make different versions of these components work together. If you try to replace the kernel (or other core components) you will see how painful it is. In fact, you started to see it already. You may try to continue to go that way, but I doubt anyone in this list will be able to help you there... you're pretty much on your own. So I'd be glad to hear other kind of solution :) Look at the latest Fedora or Ubuntu or another one of the cutting edge distributions that ship with more recent versions of components. Or ask yourself (or your boss) *WHY* you think you really need a later version of a certain component. What is your real problem? Is it support to a certain hardware? Is it network related? Is it (unfounded) fear that the kernel in CentOS might be vulnerable? It might be possible to solve your problem using CentOS in another way, if you come back to the list with the real problem we might be able to help you better. HTH, Felipe I've just explained the reason why I've compiled. Let me try it a different way. The current kernel used by Red Hat in RHEL 4 is a 2.6.9-x kernel and it has 1973 patches. The one currently in use in RHEL 5 is a 2.6.18-x kernel with 2882 patches. Many packages are compiled against kernel-headers and depend on the proc structure that is there. SELinux is just one of many issues you will have if you try to use a main line kernel on CentOS. You will need to have several of the Red Hat patches (modified to work with the new kernel tree) incorporated in order to use a newer kernel on CentOS. If you absolutely have to have a newer kernel (you should not do this ... but hey, it IS your machine) ... then instead of trying to use a main line kernel, instead try to use the latest one from here: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/RHEMRG/SRPMS/ This kernel has been tested for use with RHEL-5 and is 2.6.24-x. You still might have issues, but they should be far fewer than running a main line kernel on CentOS. Would you, if you boss told you he wanted you to, try to make the Windows Vista system files run on Windows 95? Of course I wouldn't it. I think that the comparison has little to do. Windows it's very different from Linux. MS it's product developed by an only company and closed souce. I think that the difference from using some distro with different kernel is far smaller that running Vista apps on Windows 95. Of course I don't expect support in the sense that someone solve my problems, I'm only was asking suggestions... -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Somewhat OT: OpenOffice.org Headless issues as non-root user
Hi, I've installed recently OpenOffice.org 3.1 on Centos 5.3. I use OOo in headless mode. I have no problem when running as root, but I'd prefer run it as non-root user (oooserver user). When I run the script in debug mode this is the output: sh -x/tmp/ooo-headless-nonroot start + . /etc/rc.d/init.d/functions ++ TEXTDOMAIN=initscripts ++ umask 022 ++ PATH=/sbin:/usr/sbin:/bin:/usr/bin ++ export PATH ++ '[' -z '' ']' ++ COLUMNS=80 ++ '[' -z '' ']' +++ /sbin/consoletype ++ CONSOLETYPE=pty ++ '[' -f /etc/sysconfig/i18n -a -z '' ']' ++ . /etc/profile.d/lang.sh +++ sourced=0 +++ for langfile in /etc/sysconfig/i18n '$HOME/.i18n' +++ '[' -f /etc/sysconfig/i18n ']' +++ . /etc/sysconfig/i18n LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 +++ sourced=1 +++ for langfile in /etc/sysconfig/i18n '$HOME/.i18n' +++ '[' -f /root/.i18n ']' +++ '[' -n '' ']' +++ '[' 1 = 1 ']' +++ '[' -n en_US.UTF-8 ']' +++ export LANG +++ '[' -n '' ']' +++ unset LC_ADDRESS +++ '[' -n '' ']' +++ unset LC_CTYPE +++ '[' -n '' ']' +++ unset LC_COLLATE +++ '[' -n '' ']' +++ unset LC_IDENTIFICATION +++ '[' -n '' ']' +++ unset LC_MEASUREMENT +++ '[' -n '' ']' +++ unset LC_MESSAGES +++ '[' -n '' ']' +++ unset LC_MONETARY +++ '[' -n '' ']' +++ unset LC_NAME +++ '[' -n '' ']' +++ unset LC_NUMERIC +++ '[' -n '' ']' +++ unset LC_PAPER +++ '[' -n '' ']' +++ unset LC_TELEPHONE +++ '[' -n '' ']' +++ unset LC_TIME +++ '[' -n '' ']' +++ unset LC_ALL +++ '[' -n '' ']' +++ unset LANGUAGE +++ '[' -n '' ']' +++ unset LINGUAS +++ '[' -n '' ']' +++ unset _XKB_CHARSET /sbin/consoletype +++ consoletype=pty +++ '[' -n '' ']' +++ '[' -n '' ']' +++ '[' -n en_US.UTF-8 ']' +++ case $LANG in +++ '[' xterm = linux ']' +++ unset SYSFONTACM SYSFONT +++ unset sourced +++ unset langfile ++ '[' -z '' ']' ++ '[' -f /etc/sysconfig/init ']' ++ . /etc/sysconfig/init +++ BOOTUP=color +++ GRAPHICAL=yes +++ RES_COL=60 +++ MOVE_TO_COL='echo -en \033[60G' +++ SETCOLOR_SUCCESS='echo -en \033[0;32m' +++ SETCOLOR_FAILURE='echo -en \033[0;31m' +++ SETCOLOR_WARNING='echo -en \033[0;33m' +++ SETCOLOR_NORMAL='echo -en \033[0;39m' +++ LOGLEVEL=3 +++ PROMPT=yes +++ AUTOSWAP=no ++ '[' pty = serial ']' ++ '[' color '!=' verbose ']' ++ INITLOG_ARGS=-q ++ __sed_discard_ignored_files='/\(~\|\.bak\|\.orig\|\.rpmnew\|\.rpmorig\|\.rpmsave\)$/d' + ooffice=/opt/openoffice.org3/program/soffice.bin + prog='OpenOffice.org Headless' + pidfile=/var/run/ooo-headless/ooo-headless.pid + lockfile=/var/lock/subsys/ooo-headless + OPTIONS='-headless -nofirststartwizard -nologo -norestore -invisible -accept=socket,host=localhost,port=2002;urp;StarOffice.Service' + RETVAL=0 + case $1 in + start + echo -n 'Starting OpenOffice.org Headless: ' Starting OpenOffice.org Headless: + su oooserver '-c /opt/openoffice.org3/program/soffice.bin -headless -nofirststartwizard -nologo -norestore -invisible -accept=socket,host=localhost,port=2002;urp;StarOffice.Service /dev/null 21 ' End oif Output You can see the ps output too: root 19432 0.0 0.2 4908 1228 pts/0S+ 10:46 0:00 | \_ su oooserver -c /opt/openoffice.org3/program/soffice.bin -headless -nofirststartwizard -nologo -norestore -invisible -accept=socket,host=localhost,port=2002;urp;StarOffice.Service /dev/null 21 500 19433 0.0 0.2 4484 1040 ?Ss 10:46 0:00 | \_ bash -c /opt/openoffice.org3/program/soffice.bin -headless -nofirststartwizard -nologo -norestore -invisible -accept=socket,host=localhost,port=2002;urp;StarOffice.Service /dev/null 21 500 19434 6.4 5.0 100492 22520 ?Sl 10:46 0:00 | \_ /opt/openoffice.org3/program/soffice.bin -headless -nofirststartwizard -nologo -norestore -invisible -accept=socket,host=localhost,port=2002 Problem is that it fails at listening on port 2002 and it never creates pid file: ls -ld /var/run/ooo-headless/ drwxr-xr-x 2 oooserver oooserver 4096 Jul 30 15:07 /var/run/ooo-headless/ Please could you help me to root as non-root user? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS-es] Guia instalacion Bacula
El día 31 de mayo de 2009 19:29, Alejandro cdgr...@gmail.com escribió: Gente, Estoy tratando de montar un sistema de Backup con Bacula. Tengo 30 servidores que necesito tomar backups. (Fisicos / Virtuales) Alguien tienen alguna Guia de Configuracion (Ya lo tengo instalado) porque las que encontre en google, son un poco confusas, capas alguien encontro alguna buena que pudo probar y la tiene agendada. PD: Que interfaz de administracion sugieren, no tengo ganas de comprarme otro problema administrando todo por consola, y ademas una vez puesto a punto quiero delegar la administracion a otra persona. Desde ya muchas gracias por su tiempo. Saludos, Alejandro www.linuxiso.com.ar ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es La verdad hasta ahora siempre he usado la consola para bacula. Es recomendable que leas lapropia guía de bácula. Lo más importante es que tengas una idea de como funciona, por eso pegale una leída a http://www.bacula.org/en/?page=documentation alguno de los documentos que explica eso dependiendo de la versión que estés usando. Es importante que comprendas los conceptos de director, file and storage daemon. La recomendación es que comiences por una configuración bien sencilla y le vayas luego agregando cosas. http://wiki.bacula.org/doku.php Te dejo además este link que si bien no es para CentOS te puede servir: http://www.vafe.com.ar/2008/09/18/bacula-y-los-1000-y-un-servidores/ -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
[CentOS] Problem with Tomcat
:260) at java.net.URLClassLoader.access$000(URLClassLoader.java:56) at java.net.URLClassLoader$1.run(URLClassLoader.java:195) at java.security.AccessController.doPrivileged(Native Method) at java.net.URLClassLoader.findClass(URLClassLoader.java:188) at java.lang.ClassLoader.loadClass(ClassLoader.java:306) at java.lang.ClassLoader.loadClass(ClassLoader.java:251) at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319) at java.lang.Class.getDeclaredMethods0(Native Method) at java.lang.Class.privateGetDeclaredMethods(Class.java:2427) at java.lang.Class.privateGetPublicMethods(Class.java:2547) at java.lang.Class.getMethods(Class.java:1410) at org.apache.tomcat.util.IntrospectionUtils.findMethods(IntrospectionUtils.java:812) at org.apache.tomcat.util.IntrospectionUtils.setProperty(IntrospectionUtils.java:268) at org.apache.catalina.startup.SetAllPropertiesRule.begin(SetAllPropertiesRule.java:59) at org.apache.tomcat.util.digester.Digester.startElement(Digester.java:1276) at org.apache.xerces.parsers.AbstractSAXParser.startElement(Unknown Source) at org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source) at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source) at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source) at org.apache.xerces.parsers.XMLParser.parse(Unknown Source) at org.apache.xerces.parsers.AbstractSAXParser.parse(Unknown Source) at org.apache.xerces.jaxp.SAXParserImpl$JAXPSAXParser.parse(Unknown Source) at org.apache.tomcat.util.digester.Digester.parse(Digester.java:1562) at org.apache.catalina.startup.Catalina.load(Catalina.java:490) at org.apache.catalina.startup.Catalina.load(Catalina.java:524) ... 6 more Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServletRequest at java.net.URLClassLoader$1.run(URLClassLoader.java:200) at java.security.AccessController.doPrivileged(Native Method) at java.net.URLClassLoader.findClass(URLClassLoader.java:188) at java.lang.ClassLoader.loadClass(ClassLoader.java:306) at java.lang.ClassLoader.loadClass(ClassLoader.java:251) at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319) ... 38 more -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] IBM Type 8795-1ux LTO-3
I have an LTO-3 as described in the subject. I've installed lin_tape and lin_taped RPMs for RHEL 5 but still it doesn't work. /var/log/lin_tape.trace has: /dev/IBMtape opened. lin_taped Tue Dec 16 15:53:18 2008 Failed to detect any tape drives. lin_taped Tue Dec 16 15:53:18 2008 Failed to detect any changer devices. IBMtapeDevDriver Tue Dec 16 15:53:18 2008 lin_tape_add_class_device() entry lin_tape_add_class_device() entry lin_tape_add_class_device() entry lin_tape_add_class_device() entry How can I solve it? Thanks in advance -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Force to install 64 bit packages only
How to configure yum for install only 64 bit packages? thanks in advance -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Force to install 64 bit packages only
2008/12/16 Marco Benton ma...@xssnet.com: Sergio Belkin wrote: How to configure yum for install only 64 bit packages? thanks in advance Just thought I throw in that an official Sun Java 64bit browser plugin is now available. Thanks for all answers -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: is parted reliable?
2008/10/15 Karanbir Singh [EMAIL PROTECTED]: David Mackintosh wrote: How off-topic is it to ask precisely what is on-topic for this list if questions and discussions of the included components belong on the support mechanisms for those individual parts, and the rest (ie anaconda and friends) probably belongs in the upstream vendor's forums? A bit of common sense comes in handy. Talking about something that the developers of a component need to weight in on is definitely best suited to the upstream lists for the component. If you hit specific issues with the implementation on CentOS, thats different. Random drive by surveys, and request for comments on a blog posts etc are definitely a waste of time for *this* list. -- Karanbir, OK, you're right, although I'd be more flexible, the subject was prefixed with an OT:. I didn't ask what do you prefer to be president of USA if Obama or McCain, neither I was offering a way of improving sexual power :) But again, if you put the rules in that way, ok you're right. Sorry for annoyances. -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] OT: is parted reliable?
Hi, I've read on LPI Linux Certification (Ed O'Reilly) in a nutshell the following thing: parted, unfortunately, has been known to corrupt partition tables and ruin filesystem. What do you think about it? Greets! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS-es] Adelanto horario Argentina
El día 6 de octubre de 2008 12:17, Claudio Castro [EMAIL PROTECTED] escribió: Christian Araquistain escribió: Claudio, como estas ? espero que muy bien la verdad es que aca también impacto y como tengo un ntp server se cambiaron todos nuestros servidores de pronto ... :( Una consulta el lugar de donde decis de bajarlo, es decir según la nota no baja el file vos pudiste bajarlo ? Muchas gracias por la mano !!! Saludos ... (¯`·._.·[TÜ(R)ÇO]·._.·´¯ ) 2008/10/6 Claudio Castro [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Hola gente, Alguien de Argentina noto el problema de adelanto de hora en los servidores? El problema se debe a no contar con el último tzdata en los repositorios de CentOS y al cambio horario que sufrimos en nuestro país el año pasado, les dejo la noticia, para Ubuntu pero igual es válido: http://ubunlog.blogspot.com/2008/10/arreglar-error-time-zone-argentina.html Saludos, -- ___ CentOS-es mailing list CentOS-es@centos.org mailto:CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es Hasta ahora la solución más rápida que encontré fue instalar el tzdata versión 2008F de un repositorio de Fedora 9. En CentOS 5.2 funcionó OK. Para la gente de Debian ya está el paquete actualizado y para CentOS todavía no, ya que RHEL todavía no ha publicado nada. Para bajarlo de la nota esa..reemplaza la F por una G y baja. Saludos -- ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es Yo lo que hice fue bajarme de http://www.marga.com.ar/~marga/debian/tzdata/ el .deb y convertirlo con alien... y funcionó ;-) -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es
Re: [CentOS] Half-OT: Modify several ldap entries
2008/10/2 Ralph Angenendt [EMAIL PROTECTED]: Sergio Belkin wrote: Hi, I want to fix several entries of mail attribute mail that have an error something like this: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] and so on. I want to to change them to: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] How can I perform it in one (or at least few) steps? Write a correct ldif file and use ldapmodify to make modifcations. See the ldapmodify manual page for examples on how to use that. Cheers, Ralph ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Thanks, I know about ldapmodify, but I wonder if someone knows other way yo do that, -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Half-OT: Modify several ldap entries
Hi, I want to fix several entries of mail attribute mail that have an error something like this: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] and so on. I want to to change them to: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] (Delete asterisks) How can I perform it in one (or at least few) steps? thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] shutdown and boot on Xen
Hi, I am using xen-3.0.3-41.el5 on Centos 5 with 2.6.18-53.1.21.el5xen kernel. I'd like to: 1) When Dom0 shutdown, DomU's do the same. 2) When Dom0 boots. DomU's do the same. Is that possible? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Proxy with no cache
Hi, I'd want to install a proxy server but I no need cache, what software do you recommend me? thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Cyrus + Ldap...
Hi, I have a server running with Centos 5.1 and: Cyrus: Lan POP and IMAP server both with SSL and plain and login mechanisms LDAP with SSL + SASL User passwords in LDAP are encrypted. Everything works fine. But I'd want to reduce overhead due SSL and change to Cyrus with md5 mechanism (or another nonplain mechanism) Can I do that? Please bear in mind, that I don't want to use non-encrypyted passwords on LDAP. Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Boot from iso file (xen)
Hi, I don't remember how to boot from iso file. My current config file is: name = devel uuid = 4223e2e8-a3a7-91a7-aabf-e7b9f6f8a4a8 maxmem = 256 memory = 256 vcpus = 1 boot= d on_poweroff = destroy on_reboot = restart on_crash = restart vfb = [ type=vnc,vncunused=1,keymap=en-us ] disk = [ phy:/dev/xen/devel,xvda,w, 'file:/tmp/mindi.iso,hdc:cdrom,r' ] vif = [ mac=00:16:3e:19:63:7f,bridge=xenbr0 ] cdrom = /tmp/mindi.iso EOF Please, could you help me about it? I use Centos 5 + xen-3.0.3-41.el5_1.6. Thanks in advance!! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Problem with mod_proxy_ajp.so
2008/7/15 Johnny Hughes [EMAIL PROTECTED]: Sergio Belkin wrote: Hi, After updating httpd package it outputs an error when restarting apache. Problem was workarounded commenting out line 2 of /etc/httpd/modules/mod_proxy_ajp.so Starting httpd: httpd: Syntax error on line 210 of /etc/httpd/conf/httpd.conf: Syntax error on line 3 of /etc/httpd/conf.d/proxy_ajp.conf: Cannot load /etc/httpd/modules/mod_proxy_ajp.so into server: /etc/httpd/modules/mod_proxy_ajp.so: undefined symbol: proxy_module. Have you built any Non-RPM apache modules. Is this an i386 or x86_64 version of CentOS-5 ... and if it is x86_64, do you have both versions of apache installed? It's a x86_64 version of httpd (I have i386 packages too, but all of apache are x86_64 packages) Also: file /usr/sbin/httpd /usr/sbin/httpd: ELF 64-bit LSB shared object, AMD x86-64, version 1 (SYSV), for GNU/Linux 2.6.9, stripped file /usr/lib64/httpd/modules/mod_proxy_ajp.so /usr/lib64/httpd/modules/mod_proxy_ajp.so: ELF 64-bit LSB shared object, AMD x86-64, version 1 (SYSV), stripped I have checked both the i386 and x86_64 versions and they start by default with no undefined symbols. When I issue /etc/httpd/conf.d/proxy_ajp.conf, it outputs: httpd-2.2.3-11.el5_1.centos.3 I am using Centos 5 and and httpd-2.2.3-11.el5_1.centos.3 Could you help me to find a better solution? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Problem with mod_proxy_ajp.so
Hi, After updating httpd package it outputs an error when restarting apache. Problem was workarounded commenting out line 2 of /etc/httpd/modules/mod_proxy_ajp.so Starting httpd: httpd: Syntax error on line 210 of /etc/httpd/conf/httpd.conf: Syntax error on line 3 of /etc/httpd/conf.d/proxy_ajp.conf: Cannot load /etc/httpd/modules/mod_proxy_ajp.so into server: /etc/httpd/modules/mod_proxy_ajp.so: undefined symbol: proxy_module. When I issue /etc/httpd/conf.d/proxy_ajp.conf, it outputs: httpd-2.2.3-11.el5_1.centos.3 I am using Centos 5 and and httpd-2.2.3-11.el5_1.centos.3 Could you help me to find a better solution? Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Test - you don't need to read it
-- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos