Re: [CentOS] [CentOS Stream 8] Update of IPA server broken - bind-dyndb-ldap needs to be rebuilt?

2022-02-09 Thread Mathieu Baudier
>
> Fixed:
> https://bugzilla.redhat.com/show_bug.cgi?id=2051108
>
> Caused by a rebase of bind, but the new idm:DL1 module lagged behind a
> little bit.  Was fixed with the push about 9 hours ago.
>

Many thanks for your quick answer!
I confirm that all CentOS Stream 8 IPA servers were then updated without
any issue.

Cheers,

Mathieu
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Any downside to mount -o noatime?

2022-02-09 Thread Kenneth Porter
Also, is there a way to make noatime the default for all mounts? Or will 
I need to add it to everything in /etc/fstab and 
/etc/systemd/system/*.mount?



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Any downside to mount -o noatime?

2022-02-09 Thread Kenneth Porter
I'd like to reduce the wear-and-tear on my SSDs and eliminate the 
unnecessary metadata writes on my backup media that only slow down the 
backup process. So I want to add noatime to all my mounts. Is there any 
downside to this?


At one time I remember atime being useful for tmpwatch, which removes files 
in /tmp that haven't been accessed in a week or two. But I can live without 
that feature.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [CentOS Stream 8] Update of IPA server broken - bind-dyndb-ldap needs to be rebuilt?

2022-02-09 Thread Johnny Hughes

On 2/9/22 11:24, Paul Heinlein wrote:

On Wed, 9 Feb 2022, Johnny Hughes wrote:

Caused by a rebase of bind, but the new idm:DL1 module lagged behind a 
little bit.  Was fixed with the push about 9 hours ago.


Johnny,

I see idm:DL1 (and idm:client) in Stream 9, but not Stream 8. I just 
refreshed the dnf cache in the latter, so I think I'm fully up to date.


Am I missing something?


Yes .. it should be available.  Make sure the mirror is updated.

https://koji.mbox.centos.org/koji/buildinfo?buildID=21079

^^ it is tagged to |  "dist-c8-stream-module-compose"

And was released more than 14 hours ago now

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Email Notification of updates which are available to be? applied on CentOS Linux release 7.9.2009 (Core)

2022-02-09 Thread Robert Heller
I just run this command line as a cronjob (weekly):

 /usr/bin/yum check-update | /bin/mail -s 'check-update' hel...@deepsoft.com
 
I have *newer* versions of the mysql server and php from the IUS repo, so yum 
check-update picks up new versions from the IUS repo, along with the core (and 
epel) repo.

At Wed, 9 Feb 2022 22:26:08 +0530 CentOS mailing list  wrote:

> 
> Hi,
> 
> I am running the below open source components on CentOS Linux release
> 7.9.2009 (Core)
> 
>1. nginx service
>2. mysql service
>3. php framework
>4. pph-fpm service
>5. composer A Dependency Manager for PHP
> 
> Is there a way to notify via email if there are any new security updates
> available for CentOS Linux release 7.9.2009 along with the above open
> source components which are running?
> Currently, I am manually running the *yum -y update* command to update the
> OS along with the above open source components. I have tried
> for yum-updatesd - Update notifier daemon but it is not available for
> CentOS Linux release 7.9.2009 (Core). Thanks in advance. I look forward to
> hearing from you.
> 
> More info:- https://linux.die.net/man/8/yum-updatesd
> 
> Best Regards,
> 
> Kaushal
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
> 
>
> 

-- 
Robert Heller -- Cell: 413-658-7953 GV: 978-633-5364
Deepwoods Software-- Custom Software Services
http://www.deepsoft.com/  -- Linux Administration Services
hel...@deepsoft.com   -- Webhosting Services
 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Email Notification of updates which are available to be applied on CentOS Linux release 7.9.2009 (Core)

2022-02-09 Thread Mike Burger

On 2022-02-09 11:56, Kaushal Shriyan wrote:

Hi,

I am running the below open source components on CentOS Linux release
7.9.2009 (Core)

   1. nginx service
   2. mysql service
   3. php framework
   4. pph-fpm service
   5. composer A Dependency Manager for PHP

Is there a way to notify via email if there are any new security 
updates

available for CentOS Linux release 7.9.2009 along with the above open
source components which are running?
Currently, I am manually running the *yum -y update* command to update 
the

OS along with the above open source components. I have tried
for yum-updatesd - Update notifier daemon but it is not available for
CentOS Linux release 7.9.2009 (Core). Thanks in advance. I look forward 
to

hearing from you.

More info:- https://linux.die.net/man/8/yum-updatesd

Best Regards,

Kaushal


Hello, Kaushal.

If you have not already done so, I suggest signing up for the 
Centos-Announce list at 
https://lists.centos.org/mailman/listinfo/centos-announce.

--
Mike Burger
http://www.bubbanfriends.org

"It's always suicide-mission this, save-the-planet that. No one ever 
just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Email Notification of updates which are available to be applied on CentOS Linux release 7.9.2009 (Core)

2022-02-09 Thread Jon Moore

On 2/9/22 10:56 AM, Kaushal Shriyan wrote:

Hi,

I am running the below open source components on CentOS Linux release
7.9.2009 (Core)

1. nginx service
2. mysql service
3. php framework
4. pph-fpm service
5. composer A Dependency Manager for PHP

Is there a way to notify via email if there are any new security updates
available for CentOS Linux release 7.9.2009 along with the above open
source components which are running?
Currently, I am manually running the *yum -y update* command to update the
OS along with the above open source components. I have tried
for yum-updatesd - Update notifier daemon but it is not available for
CentOS Linux release 7.9.2009 (Core). Thanks in advance. I look forward to
hearing from you.

More info:- https://linux.die.net/man/8/yum-updatesd


You might be interesting in yum-cron

From the manpage:

DESCRIPTION
yum-cron  is an alternate interface to yum that is optimised to be 
convenient to call from cron.  It provides methods to keep repository 
metadata up to date, and to check for, download, and apply updates. 
Rather than accepting many different command line arguments, the 
different functions  of  yum-cron  can  be  accessed through config files.


With CentOS you generally will not have security included with the
package data, so only install security related errata is not a simple
action.  However applying all updates, or sending a notification about
updates be available, etc are options you can enable.

Good luck,
Jon M
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [CentOS Stream 8] Update of IPA server broken - bind-dyndb-ldap needs to be rebuilt?

2022-02-09 Thread Paul Heinlein

On Wed, 9 Feb 2022, Johnny Hughes wrote:

Caused by a rebase of bind, but the new idm:DL1 module lagged behind 
a little bit.  Was fixed with the push about 9 hours ago.


Johnny,

I see idm:DL1 (and idm:client) in Stream 9, but not Stream 8. I just 
refreshed the dnf cache in the latter, so I think I'm fully up to 
date.


Am I missing something?

--
Paul Heinlein
heinl...@madboa.com
45.38° N, 122.59° W
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Email Notification of updates which are available to be applied on CentOS Linux release 7.9.2009 (Core)

2022-02-09 Thread Richard


> Date: Wednesday, February 09, 2022 22:26:08 +0530
> From: Kaushal Shriyan 
> 
> Is there a way to notify via email if there are any new security
> updates available for CentOS Linux release 7.9.2009 along with the
> above open source components which are running?

You can run "yum check-update" from a (daily) cron job and get
notified of updates that are available for your system. 

Personally, I find running *yum -y update*, without knowing what's
going to be touched, to be a little risky.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Email Notification of updates which are available to be applied on CentOS Linux release 7.9.2009 (Core)

2022-02-09 Thread Kaushal Shriyan
Hi,

I am running the below open source components on CentOS Linux release
7.9.2009 (Core)

   1. nginx service
   2. mysql service
   3. php framework
   4. pph-fpm service
   5. composer A Dependency Manager for PHP

Is there a way to notify via email if there are any new security updates
available for CentOS Linux release 7.9.2009 along with the above open
source components which are running?
Currently, I am manually running the *yum -y update* command to update the
OS along with the above open source components. I have tried
for yum-updatesd - Update notifier daemon but it is not available for
CentOS Linux release 7.9.2009 (Core). Thanks in advance. I look forward to
hearing from you.

More info:- https://linux.die.net/man/8/yum-updatesd

Best Regards,

Kaushal
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [CentOS Stream 8] Update of IPA server broken - bind-dyndb-ldap needs to be rebuilt?

2022-02-09 Thread Johnny Hughes

On 2/9/22 01:01, Mathieu Baudier wrote:

Hello,

We are testing an IPA/IDM infrastructure which is a mix of RHEL 8 and
CentOS Stream 8 environments.
The configuration has been completed since last summer, and it is working
fine between updates.

Currently, the CentOS Stream 8 IPA servers cannot upgrade. I put the whole
error message below, but after analyzing a bit, it seems to be that the
problem is between:
bind-dyndb-ldap (for which there is no new update)
and
bind-libs-lite (for which a new update is available)

$ sudo dnf upgrade bind-libs-lite*
Error:
  Problem: problem with installed package
bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64
   - package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64
requires libdns.so.1112()(64bit), but none of the providers can be installed
   - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-6.el8.x86_64
   - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-3.el8.x86_64
   - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-4.el8_4.x86_64
   - cannot install the best update candidate for package
bind-libs-lite-32:9.11.26-6.el8.x86_64

The update bind-libs-lite (32:9.11.36-2) seems to offer:
/usr/lib64/libdns.so.1115
while bind-dyndb-ldap (11.6-2.module_el8.5.0+750+c59b186b) seems to still
require precisely:
/usr/lib64/libdns.so.1112

$ sudo dnf provides */libdns.so*
...
bind-libs-lite-32:9.11.26-6.el8.x86_64 : Libraries for working with the DNS
protocol
Repo: @System
Matched from:
Filename: /usr/lib64/libdns.so.1112
Filename: /usr/lib64/libdns.so.1112.0.2
...
bind-libs-lite-32:9.11.36-2.el8.x86_64 : Libraries for working with the DNS
protocol
Repo: appstream
Matched from:
Filename: /usr/lib64/libdns.so.1115
Filename: /usr/lib64/libdns.so.1115.0.3
...

$ sudo dnf list bind-libs-lite bind-dyndb-ldap
Installed Packages
bind-dyndb-ldap.x86_6411.6-2.module_el8.5.0+750+c59b186b
  @appstream
bind-libs-lite.x86_64 32:9.11.26-6.el8
  @appstream
Available Packages
bind-libs-lite.i686   32:9.11.36-2.el8
  appstream
bind-libs-lite.x86_64 32:9.11.36-2.el8
  appstream

Please note that, of course, the module stream idm:DL1 is enabled:

$ sudo dnf module list idm*
CentOS Stream 8 - AppStream
Name  Stream  Profiles
 Summary

idm   DL1 [e] adtrust, client, common [d], dns
[i], server The Red Hat Enterprise Linux Identity Management
system module
idm   client [d]  common [d]
 RHEL IdM long term support client module

Also, as can be expected, these updates are not yet available on the *RHEL
8* IPA servers:

$ sudo dnf list bind-libs-lite bind-dyndb-ldap
Updating Subscription Management repositories.
Installed Packages
bind-dyndb-ldap.x86_6411.6-2.module+el8.4.0+9328+4ec4e316
@rhel-8-for-x86_64-appstream-rpms
bind-libs-lite.x86_64 32:9.11.26-6.el8
  @rhel-8-for-x86_64-appstream-rpms
Available Packages
bind-libs-lite.i686   32:9.11.26-6.el8
  rhel-8-for-x86_64-appstream-rpms

So, is there any workaround, or should we simply wait for the IPA/IDM
server DL1 module stream to be updated?
(there are updates of the ipa packages which are pending there, juts not
bind-dyndb-ldap)

Also, should I rather send such reports of our CentOS Stream testing to
another mailing-list? (devel?)
Or book them into Red Hat's bugzilla?

Thanks in advance for your comments!

Mathieu

## Full error log when trying to update a CentOS Stream 8 IPA/IDM server

$ sudo ipactl status
Directory Service: RUNNING
krb5kdc Service: RUNNING
kadmin Service: RUNNING
named Service: RUNNING
httpd Service: RUNNING
ipa-custodia Service: RUNNING
ipa-otpd Service: RUNNING
ipa-dnskeysyncd Service: RUNNING
ipa: INFO: The ipactl command was successful

$ sudo dnf upgrade --refresh
CentOS Stream 8 - AppStream
   13 kB/s |
4.4 kB 00:00
CentOS Stream 8 - BaseOS
26 kB/s
| 3.9 kB 00:00
CentOS Stream 8 - Extras
15 kB/s
| 3.0 kB 00:00
Error:
  Problem 1: package
bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64 requires
libdns.so.1112()(64bit), but none of the providers can be installed
   - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-6.el8.x86_64
   - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-3.el8.x86_64
   - cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-4.el8_4.x86_64
   - cannot install the best update candidate for package
bind-libs-lite-32:9.11.26-6.el8.x86_64
   - cannot install the best update candidate for package

[CentOS] CentOS-announce Digest, Vol 202, Issue 3

2022-02-09 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
https://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CESA-2022:0473 Important CentOS 7 aide Security   Update
  (Johnny Hughes)


--

Message: 1
Date: Tue, 8 Feb 2022 23:31:43 +
From: Johnny Hughes 
To: centos-annou...@centos.org
Subject: [CentOS-announce] CESA-2022:0473 Important CentOS 7 aide
SecurityUpdate
Message-ID: <20220208233143.ga28...@bstore1.rdu2.centos.org>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2022:0473 Important

Upstream details at : https://access.redhat.com/errata/RHSA-2022:0473

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

x86_64:
e00e4e27e76a7ce874a947e6df6282be03c80787552e9101d00197dc467c0182  
aide-0.15.1-13.el7_9.1.x86_64.rpm

Source:
9a2c3381dea205aafa6593afa062b62b7659783b72f822cd20909cf80b4a524b  
aide-0.15.1-13.el7_9.1.src.rpm



-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@libera.chat
Twitter: @JohnnyCentOS



--

Subject: Digest Footer

___
CentOS-announce mailing list
centos-annou...@centos.org
https://lists.centos.org/mailman/listinfo/centos-announce


--

End of CentOS-announce Digest, Vol 202, Issue 3
***
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos