Re: [CentOS] Firewalld and iptables

2018-12-14 Thread Jon LaBadie
On Fri, Dec 14, 2018 at 04:55:33PM -0800, Kenneth Porter wrote: > --On Friday, December 14, 2018 5:57 PM -0500 Jon LaBadie > wrote: > > > Well, there are about 20 of them and several screen widths > > long. However they all end with one of two reasons: > > > > : No chain/target/match by that

Re: [CentOS] Firewalld and iptables

2018-12-14 Thread Gordon Messmer
On 12/14/18 2:57 PM, Jon LaBadie wrote: Well, there are about 20 of them and several screen widths long. However they all end with one of two reasons: : No chain/target/match by that name. : Bad rule (does a matching rule exist in that chain?). If you don't include the errors, all we c

Re: [CentOS] Firewalld and iptables

2018-12-14 Thread Kenneth Porter
--On Friday, December 14, 2018 5:57 PM -0500 Jon LaBadie wrote: Well, there are about 20 of them and several screen widths long. However they all end with one of two reasons: : No chain/target/match by that name. : Bad rule (does a matching rule exist in that chain?). Put them on a pas

Re: [CentOS] Firewalld and iptables

2018-12-14 Thread Warren Young
On Dec 14, 2018, at 3:57 PM, Jon LaBadie wrote: > > : Bad rule (does a matching rule exist in that chain?). That makes sense: the old iptables service installed several default chains, and firewalld does as well, but they’re not named the same, and I doubt there’s a 1:1 mapping between them.

Re: [CentOS] Firewalld and iptables

2018-12-14 Thread Jon LaBadie
On Fri, Dec 14, 2018 at 03:14:12PM -0700, Warren Young wrote: > On Dec 14, 2018, at 2:30 PM, Jon LaBadie wrote: > > > > After a recent large update, firewalld's status contains > > many lines of the form: > > > > WARNING: COMMAND_FAILED: '/usr/sbin/iptables… > > What’s the rest of the command?

Re: [CentOS] Firewalld and iptables

2018-12-14 Thread Warren Young
On Dec 14, 2018, at 3:14 PM, Warren Young wrote: > >alias fcp="sudo firewall-cmd —permanent" These commands are top-of-mind for me at the moment because I just configured a Raspberry Pi based network appliance at home, and installed firewalld on it for the purpose because I like it so much

Re: [CentOS] Firewalld and iptables

2018-12-14 Thread Warren Young
On Dec 14, 2018, at 2:30 PM, Jon LaBadie wrote: > > After a recent large update, firewalld's status contains > many lines of the form: > > WARNING: COMMAND_FAILED: '/usr/sbin/iptables… What’s the rest of the command? > Checking iptables.service status shows it to be masked. That’s probably f

[CentOS] Firewalld and iptables

2018-12-14 Thread Jon LaBadie
After a recent large update, firewalld's status contains many lines of the form: WARNING: COMMAND_FAILED: '/usr/sbin/iptables... Checking iptables.service status shows it to be masked. I realize that firewalld uses iptables, but should it be enabled and started as a service? Jon -- Jon H. La

Re: [CentOS] CentOS7 kickstart question

2018-12-14 Thread isdtor
Phelps, Matthew writes: > On Fri, Dec 14, 2018 at 10:04 AM isdtor wrote: > > > > > > > So the syntax looks to be > > > > > > > > repo --name=epel --baseurl=nfs://server:/path > > > > > > > > that colon after server is not a spelling error. > > > > https://pykickstart.readthedocs.io/en/latest/kick

Re: [CentOS] CentOS7 kickstart question

2018-12-14 Thread isdtor
Phelps, Matthew writes: > On Fri, Dec 14, 2018 at 10:04 AM isdtor wrote: > > > > > > > So the syntax looks to be > > > > > > > > repo --name=epel --baseurl=nfs://server:/path > > > > > > > > that colon after server is not a spelling error. > > > > https://pykickstart.readthedocs.io/en/latest/kick

Re: [CentOS] CentOS7 kickstart question

2018-12-14 Thread Phelps, Matthew
On Fri, Dec 14, 2018 at 10:04 AM isdtor wrote: > > > > So the syntax looks to be > > > > > > repo --name=epel --baseurl=nfs://server:/path > > > > > > that colon after server is not a spelling error. > > > https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#id48 > > > > That seems to

[CentOS] Atomic ISO unavailable

2018-12-14 Thread Eric Lehmann
Hello The http://cloud.centos.org/centos/7/atomic/images/CentOS-Atomic-Host-7-Installer.iso provided in https://wiki.centos.org/SpecialInterestGroup/Atomic/Download is down. Does anybody know if there is a reason for that? Regards ___ CentOS mailing l

Re: [CentOS] CentOS7 kickstart question

2018-12-14 Thread isdtor
> > So the syntax looks to be > > > > repo --name=epel --baseurl=nfs://server:/path > > > > that colon after server is not a spelling error. > > https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html#id48 > > That seems to work now. Some error messages made it look like nfs: wasn't

Re: [CentOS] CentOS7 kickstart question

2018-12-14 Thread isdtor
Stephen John Smoogen writes: > On Fri, 14 Dec 2018 at 05:02, isdtor wrote: > > > > Is it not possible to use an nfs based repo for kickstart under CentOS 7.5? > > > > E.g. > > > > repo --name=epel --baseurl=file://server/path/to/local/copy/of/epel > > > > So the syntax looks to be > > repo --nam

Re: [CentOS] CentOS7 kickstart question

2018-12-14 Thread Stephen John Smoogen
On Fri, 14 Dec 2018 at 05:02, isdtor wrote: > > Is it not possible to use an nfs based repo for kickstart under CentOS 7.5? > > E.g. > > repo --name=epel --baseurl=file://server/path/to/local/copy/of/epel > So the syntax looks to be repo --name=epel --baseurl=nfs://server:/path that colon after

[CentOS] CentOS7 kickstart question

2018-12-14 Thread isdtor
Is it not possible to use an nfs based repo for kickstart under CentOS 7.5? E.g. repo --name=epel --baseurl=file://server/path/to/local/copy/of/epel With trial and error I figured out that this is the correct syntax to use for an nfs-based repo. But packages from this repo in the %packages sect