Re: [CentOS] [EXT] Re: Kmods SIG in RHEL
Thanks a lot, Fabian and Peter --- Lee On Wed, Sep 21, 2022 at 3:57 PM Peter Georg wrote: > > > > On 21/09/2022 12.02, Fabian Arrotin wrote: > > On 21/09/2022 11:51, Fabian Arrotin wrote: > >> On 21/09/2022 08:32, Thomas Stephen Lee wrote: > >>> Hi, > >>> > >>> Is > >>> https://sigs.centos.org/kmods/ > >>> a part of RHEL 9? > >>> If yes, what is the repository name? > >>> If not, when can we expect it to be included? > >>> > >>> Thanks > >>> > >>> --- > >>> Lee > >> > >> No, it's not part of RHEL9 , and it's built and maintained by the > >> Kmods SIG (see https://sigs.centos.org/kmods/) as a community project. > >> > >> They were building it first for Stream 9 and later asked to also build > >> for/against RHEL9 kernel when it was available (see > >> https://pagure.io/centos-infra/issue/786) > >> > >> Kind Regards, > >> > > > > Oups, realizing that I replied with same URL you gave and (I'll blame > > lack of coffee effect :-) ) my brain translated initially to > > artifacts/rpms that can be found on > > http://mirror.stream.centos.org/SIGs/9/kmods/ ... > > But answer is still correct but now more complete as you see where > > built/signed pkgs are landing too (even if that was in the infra tracker > > ticket) > > > > In addition to what Fabian already mentioned: > > The Kmods SIG does by now provide all packages it provides for Stream 9 > also for RHEL9. However, there is no easy way for you to enable the > Kmods SIG's repositories on RHEL9 (yet) as SIGs can not (yet) provide > centos-release-* packages for RHEL9 (and its clones) [1]. > > In case you want to use any package provided by the Kmods SIG for RHEL9 > you have to manually add its repositories for now, e.g. by copying [2] > to /etc/yum.repos.d/centos-kmods.repo > Note that you also need to copy the Kmods SIG's GPG key [3] to > /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Kmods > > We hope to be able to provide a centos-release-kmods package soon which > should then allow you to consume the Kmods SIG's content after a simple > dnf install https://mirror.stream.centos.org/... command similar to how > you can easily enable EPEL. > > > [1]: https://pagure.io/centos-infra/issue/643 > [2]: > https://gitlab.com/CentOS/kmods/rpms/centos-release-kmods/-/raw/c9/centos-kmods.repo > [3]: https://www.centos.org/keys/RPM-GPG-KEY-CentOS-SIG-Kmods > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Kmods SIG in RHEL
Hi, Is https://sigs.centos.org/kmods/ a part of RHEL 9? If yes, what is the repository name? If not, when can we expect it to be included? Thanks --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] PHP 7.4 from the Appstream repo
dnf module reset php dnf module enable php:7.4 dnf upgrade On Thu, Jul 7, 2022 at 8:58 PM Valere Binet wrote: > > Hi, > > Tenable is complaining that our CentOS Stream release 8 system is > vulnerable because it has php 7.2.24-1.module_el8.2... and it should have > php 7.4.19-1.module_el8.5 > > On the mirror, I can see the PHP 7.4.19-1 and 7.4.19-2 in > /centos/8-stream/Appstream/x86_64/os/packages > However, dnf list is stuck at 7.2.24-1 > dnf clean all didn't help. > > How do I get my systems to "see" the 7.4 packages? The remi repo is not a > good option for my company, we'd rather use the Appstream package since it > is there. > Are there reasons not to upgrade? If yes, does RedHat plan to apply the > security updates to 7.2? > > Thank you in advance for any feedback > > Valère Binet > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS Linux Notifications for any changes in files or folders
On Thu, Mar 24, 2022 at 10:40 PM Kaushal Shriyan wrote: > > On Thu, Mar 24, 2022 at 2:34 PM Roberto Ragusa > wrote: > > > On 3/22/22 6:13 AM, Frank Cox wrote: > > > On Tue, 22 Mar 2022 10:12:30 +0530 > > > Kaushal Shriyan wrote: > > > > > >> Please guide and suggest. Thanks in advance. > > > > > > man inotify > > > > and > > > > man incron > > > > > > -- > > Roberto Ragusamail at robertoragusa.it > > ___ > > CentOS mailing list > > CentOS@centos.org > > https://lists.centos.org/mailman/listinfo/centos > > > Thanks Roberto and Frank for the response !!! Is there a way to notify it > via email? Any examples? Thanks in advance. > > Best Regards, > > Kaushal https://www.unixmen.com/how-to-monitor-filesystem-events-with-incron/ --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Is shellcheck safe?
On Sun, Jan 23, 2022 at 2:05 AM Vidar Holen wrote: > > The ShellCheck binaries are built on Ubuntu based Docker images via GitHub > Actions, which also uses Ubuntu. > > PS: Bkav reports that the issue has been fixed, and re-visiting the original > VirusTotal.com URL no longer shows any detected issues. The same is true when > uploading new Haskell binaries. > > On Fri, Jan 21, 2022 at 10:31 PM Thomas Stephen Lee > wrote: >> >> On Thu, Jan 20, 2022 at 10:09 AM Vidar Holen wrote: >> > >> > This is purely a Bkav Pro issue. I don't know what it's looking for, but >> > it's clearly not accurate enough. All the search hits I get about >> > VEX.Webshell are questions about why this single and rather unknown >> > scanner is identifying it in a wide variety of files. >> > >> > On Wed, Jan 19, 2022 at 6:31 PM Thomas Stephen Lee >> > wrote: >> >> >> >> Thanks a lot for the clarification. >> >> By the way, is this a Haskell bug? >> >> >> >> Thanks >> >> >> >> --- >> >> Lee >> >> >> >> On Thu, Jan 20, 2022 at 5:07 AM Vidar Holen via CentOS >> >> wrote: >> >> > >> >> > Hi, ShellCheck author here. >> >> > >> >> > Regarding the scanner "Bkav Pro" detecting "VEX.Webshell" according to >> >> > VirusTotal.com, this is a false positive that seems to trigger on every >> >> > Haskell binary including a simple "Hello World". It further appears to >> >> > trigger on a number of unrelated repositories. See internal issue >> >> > https://github.com/koalaman/shellcheck/issues/2432 >> >> > >> >> > The Bkav Corporation does not appear to have a false positive submission >> >> > process that I could find using Google Translate on bkav.com.vn, but I >> >> > emailed a general product contact address about it. Hopefully they'll >> >> > make >> >> > the check more accurate in the future. >> >> > >> >> > Regards, >> >> > Vidar Holen >> >> > >> >> > (Sorry about the bad reply-to, I wasn't on the list when the discussion >> >> > started) >> >> Hi Vidar, >> >> What OS do you use to build the binary? >> >> Thanks >> >> --- >> Lee Hi Vidar, Thanks a lot for the prompt action and reply. I tested Haskell hello world in a few vagrant images (Fedora, Ubuntu, Debian, etc.), which gave clean results on virustotal. Great to see the issue is fixed now. --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Is shellcheck safe?
On Thu, Jan 20, 2022 at 10:09 AM Vidar Holen wrote: > > This is purely a Bkav Pro issue. I don't know what it's looking for, but it's > clearly not accurate enough. All the search hits I get about VEX.Webshell are > questions about why this single and rather unknown scanner is identifying it > in a wide variety of files. > > On Wed, Jan 19, 2022 at 6:31 PM Thomas Stephen Lee wrote: >> >> Thanks a lot for the clarification. >> By the way, is this a Haskell bug? >> >> Thanks >> >> --- >> Lee >> >> On Thu, Jan 20, 2022 at 5:07 AM Vidar Holen via CentOS >> wrote: >> > >> > Hi, ShellCheck author here. >> > >> > Regarding the scanner "Bkav Pro" detecting "VEX.Webshell" according to >> > VirusTotal.com, this is a false positive that seems to trigger on every >> > Haskell binary including a simple "Hello World". It further appears to >> > trigger on a number of unrelated repositories. See internal issue >> > https://github.com/koalaman/shellcheck/issues/2432 >> > >> > The Bkav Corporation does not appear to have a false positive submission >> > process that I could find using Google Translate on bkav.com.vn, but I >> > emailed a general product contact address about it. Hopefully they'll make >> > the check more accurate in the future. >> > >> > Regards, >> > Vidar Holen >> > >> > (Sorry about the bad reply-to, I wasn't on the list when the discussion >> > started) Hi Vidar, What OS do you use to build the binary? Thanks --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Is shellcheck safe?
Thanks a lot for the clarification. By the way, is this a Haskell bug? Thanks --- Lee On Thu, Jan 20, 2022 at 5:07 AM Vidar Holen via CentOS wrote: > > Hi, ShellCheck author here. > > Regarding the scanner "Bkav Pro" detecting "VEX.Webshell" according to > VirusTotal.com, this is a false positive that seems to trigger on every > Haskell binary including a simple "Hello World". It further appears to > trigger on a number of unrelated repositories. See internal issue > https://github.com/koalaman/shellcheck/issues/2432 > > The Bkav Corporation does not appear to have a false positive submission > process that I could find using Google Translate on bkav.com.vn, but I > emailed a general product contact address about it. Hopefully they'll make > the check more accurate in the future. > > Regards, > Vidar Holen > > (Sorry about the bad reply-to, I wasn't on the list when the discussion > started) > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Is shellcheck safe?
Hi, I downloaded, extracted, and ran 0.8.0 https://github.com/koalaman/shellcheck/releases After running, I submitted the file to virustotal with the below result. https://www.virustotal.com/gui/file/f4bce23c11c3919c1b20bcb0f206f6b44c44e26f2bc95f8aa708716095fa0651 Should I be concerned that I ran the program once? Thanks --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] sshd gives false "Too many authentication failures"
On Sat, Nov 20, 2021 at 2:32 PM Andreas Fournier wrote: > > I just came across something strange with my fully updated Centos7 > server. When I try to ssh into it the same way I've always done I get > "Too many authentication failures". This just came out of the blue. I'm > using the root account and a password. But in my sshd_config it still > reads > #MaxAuthTries 6 > Which I think is the default. > > From the console I can log in fine and when I look in the logs for sshd > I can just see the the attempts I just made, that are less than six and > no previous denied attemps. > > Any clues what's going on? > I got the same error once. In my case the problem was ssh tried to log in with ssh keys before giving a password prompt. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Trying out CentOS Stream 9
Hi, How do I go about installing CentOS Stream 9 daily build in a VirtualBox VM? --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] RHEL/Centos 8 power off issue
On Sun, Apr 4, 2021 at 5:18 AM R C wrote: > > So I tried a few things, I have a few docking stations, and they all > seem to show that problem. > > > Can't shut it down, remotely, while in a docking station. Also, when in > a docking station and using the laptops keyboard and LCD screen, and > power down the laptop in RHEL/Centos, just results into a reboot. It > does that with RHEL/Centos 7 and 8. > > > When I boot it with Centos 6, the behaviour is as expected, it just > shuts down. So I guess this issue was "introduced" after Centos 6 > somewhere? > > > thanks, > > > Ron > > On 3/28/21 9:17 PM, R C wrote: > > Hello, > > > > > > I have a laptop, in a docking station. When running RHEL/Centos 7 I > > could shut it down and power it off by using 'shutdown -h now' In did > > a new install of Centos 8 (and also RHEL 8) and when I do a "shutdown > > -h now" it just reboots (behaves the same as if I'd do a reboot). > > > > > > Is that a known issue? > > > > > > thanks, > > > > > > Ron > > We faced the same problem on one machine. We had to disable wake up on lan in bios settings. After that, the machine stayed shut down with the "poweroff" command. --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] How to find out what's eating the bandwidth
On Sun, Mar 28, 2021 at 11:06 PM Frank Cox wrote: > > On Sun, 28 Mar 2021 13:14:16 -0400 > Matthew Miller wrote: > > > Is this a home network or a business one? > > It's a really basic setup "routers from Staples" (dlink and tplink brands I > think) plugged into the ISP's modems. > > > You're right that you generally can't see everything from just any computer > > on a network, at least if it's switched. You need to watch from your > > gateway. > > Then I'm outta luck for doing this sort of thing since the gateways are the > tplink and dlink routers. I thought that might be the case. > > Thanks for the answers, guys! It isn't what I wanted to hear, but now I > know more about this than I did before. > > -- > MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com One more tool. nethogs in epel repository dnf install nethogs yum install nethogs --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Dual WAN on EL8 desktop.
On Wed, Feb 17, 2021 at 2:04 AM Kenneth Porter wrote: > > --On Tuesday, February 16, 2021 12:00 PM +0530 Thomas Stephen Lee > wrote: > > > The solution should be a software one without acquiring new hardware. > > What is ideal is the bandwidth of two connections and half bandwidth > > when one link is down. > > The search term you're looking for is "NIC bonding". Here's the first hit I > get from Google: > > <https://www.enterprisenetworkingplanet.com/linux_unix/article.php/3850636/Understanding-NIC-Bonding-with-Linux.htm> > Hi, I tried https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/configuring-network-bonding_configuring-and-managing-networking#configuring-a-network-bond-using-nm-connection-editor_configuring-network-bonding without success I have a feeling that bonding is for interfaces on the same network, not two internet routers. Please correct me if I'm wrong. --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Disk read io very high, but no process perform io read
On Sat, Mar 6, 2021 at 6:37 AM yf chu wrote: > > no, not vm > > > > > | | > yf chu > | > | > 邮箱：cyf...@163.com > | > > 签名由 网易邮箱大师 定制 > > On 03/05/2021 23:37, Matthew Miller wrote: > On Fri, Mar 05, 2021 at 03:54:14PM +0800, yf chu wrote: > > We have experienced a very weird problem. The load of the server machine is > > very high. We use "pidstat" and find that the disk read io is very high. > > Is this system a VM? > > -- > Matthew Miller > > Fedora Project Leader Hi, Is this due to swapping? what is the output of free -m --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Dual WAN on EL8 desktop.
On Mon, Feb 15, 2021 at 10:42 PM Richard wrote: > > > > > Date: Monday, February 15, 2021 11:57:17 + > > From: Phil Perry > > > > On 15/02/2021 11:30, Thomas Stephen Lee wrote: > >> Hi, > >> > >> I have two internet connections from two ISPs. > >> I also have a desktop with two Ethernet ports. > >> > >> My question: > >> What is the best way to get the maximum out of two internet > >> connections in EL 8 for my desktop? > > > > Define maximum. > > > > Are you looking for redundancy / fail-over in the event one > > connection fails or are you looking to combine throughput for > > maximum bandwidth? > > > > Unless that desktop is the only device you have that you want to be > able to get the advantages of having connectivity from two ISPs, I'd > get a dual-wan router and go from there. There are a range of options > that support 2 or more wan connections and provide load-balancing, > fall-over, etc. You'll want to read the specs to find one that best > meets your needs. Hi, Thanks all for the suggestions. Some clarifications. The solution should be a software one without acquiring new hardware. What is ideal is the bandwidth of two connections and half bandwidth when one link is down. Some suggestions in other forums say use pfSense in a Virtual Machine, but no pointers on how to get a Network card inside the Virtual Machine to work as one on the host. --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Dual WAN on EL8 desktop.
Hi, I have two internet connections from two ISPs. I also have a desktop with two Ethernet ports. My question: What is the best way to get the maximum out of two internet connections in EL 8 for my desktop? Thanks --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LTS
On Tue, Jan 12, 2021 at 12:39 PM John R. Dennison wrote: > > On Tue, Jan 12, 2021 at 12:00:00PM +0530, Thomas Stephen Lee wrote: > > > > CentOS Linux can continue as Fedora LTS or something similar with a > > five-year life cycle. After five years, users can opt for paid upgrades. > > We can also work with System manufacturers to pre-install the free LTS on > > their products, which will increase our user base. > > Who is this "we" you speak of? Anybody connected to CentOS (Users, Developers, Companies, SIGs ...) > > > > John > -- > Children's talent to endure stems from their ignorance of alternatives. > > -- Maya Angelou (1928-2014), American author, poet, and civil rights activist, >I Know Why the Caged Bird Sings (1969) > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] LTS
Hi, CentOS Linux can continue as Fedora LTS or something similar with a five-year life cycle. After five years, users can opt for paid upgrades. We can also work with System manufacturers to pre-install the free LTS on their products, which will increase our user base. --- Lee, Community User. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Thanks a lot for 8.3 Update
Hi, Thanks a lot for the 8.3 update. I would like to point out one thing I faced. I downloaded the iso from one mirror. After installing, I installed a package (rsync). Then some packages, including dnf, got downgraded to 8.2. Just a test server, not production. Thanks. --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ntpdate past CentOS 7
On Thu, Dec 3, 2020 at 12:47 AM Jerry Geis wrote: > So ntpdate is no longer present past CentOS 7. > > Many times people want "internal" NTP servers - not opening firewalls to > allow external pool.ntp.org kind of stuff. > > ntpdate was "nice" in that I could just run once a day as "ntpdate name" > and all good. Is there a similar client for CentOS 8 ? I saw chrony - but > does not seem to be a command line command and I would also have to edit a > file - Both are not desirable. > > Just looking for a simple - flexible command like I have been using > "ntpdate name" for CentOS 8. > > Thanks, > > Jerry > ___ Hi, I rebuilt ntpdate for EL8 from Fedora 33 srpm. No patching needed. --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] X defaults
On Mon, Nov 23, 2020 at 8:40 AM Michael Hennebry < henne...@web.cs.ndsu.nodak.edu> wrote: > On Tue, 27 Oct 2020, Stephen John Smoogen wrote: > > > On Tue, 27 Oct 2020 at 15:51, Michael Hennebry < > > henne...@web.cs.ndsu.nodak.edu> wrote: > > > >> On Tue, 27 Oct 2020, Stephen John Smoogen wrote: > >> > >>> On Tue, 27 Oct 2020 at 13:20, Michael Hennebry < > >>> henne...@web.cs.ndsu.nodak.edu> wrote: > >>> > I've been trying to move from Centos 7 to fedora. > My monitor is 1440x900, but fedora only believes it's 640x480. > >> > >>> 1. What kind of video card is this? > >>> 2.How is the video connected to the monitor? (DVI/HDMI/DisplayPort/VGA) > >>> 3. What kind of monitor is it? > >>> 4. What version of Fedora and is Fedora trying to do X or Wayland? > >> > >> 00:02.0 VGA compatible controller: Intel Corporation 82Q33 Express > >> Integrated Graphics Controller (rev 02) > >> > >> > > OK most of the references I see to this card are before 2014, so I am not > > sure if this gets any testing in Fedora anymore. The resolution on the > > monitor is 'odd' compared to what the various drivers are listed to > support > > (640x480, 1024x768, 1920x1080) so again I am not much help here. > > > > > >> Acer V193w > >> > >> Fedora 32, X > >> > >>> Sometimes if Fedora can only go to generic 640x480 the video card is no > >>> longer 'supported' by the various X11 drivers.. or the data that the > >>> monitor is returning to say what it can support is coming back as > >> 640x480. > >>> Finally this may do better on a fedora mailing list (but they will ask > >> the > >>> same questions). For a CentOS viewpoint I would ask if it happens if > you > >>> run CentOS-8 (try via a live cd) on the box. If it does happen, then it > >> is > >>> a problem between Fedora-18 and Fedora-28. If it doesn't happen then it > >> is > >>> a problem between Fedora 28 and the version of Fedora you are trying. > >> > >> IIRC Centos 8 does not have a live version. > >> > > > > Fudge, I should know that. Sorry for a wild goose chase. I would see if > the > > CentOS8 installer goes into X with a larger than 640x480 > > I just managed to install to an SD card. > Default Centos 8 gives me 1440 x 900. > Installing to a removable drive would seem > a useful substitute for a live CD. > > At one point Centos 8 or Gnome gave me a screen with a big date and time > on it. > Could not figure out what to do with it. > Had to reboot. > > -- > Michael henne...@web.cs.ndsu.nodak.edu > "Sorry but your password must contain an uppercase letter, a number, > a haiku, a gang sign, a heiroglyph, and the blood of a virgin." > -- > someeecards > ___ > > "At one point Centos 8 or Gnome gave me a screen with a big date and time on it." This, for me, is usually the screensaver. I pull the screen up with the mouse or press the space bar. Thanks --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] 8.2.2004 Latest yum update renders machine unbootable
On Sat, Aug 1, 2020 at 8:58 PM Lamar Owen wrote: > On 8/1/20 11:02 AM, Lamar Owen wrote: > > ... > > [lowen@localhost ~]$ rpm -qa | grep ^kernel|grep 147 > > kernel-devel-4.18.0-147.8.1.el8_1.x86_64 > > kernel-4.18.0-147.8.1.el8_1.x86_64 > > kernel-modules-4.18.0-147.8.1.el8_1.x86_64 > > kernel-core-4.18.0-147.8.1.el8_1.x86_64 > > [lowen@localhost ~]$ > > Well, I sure fat-fingered that command let's try it again: > > [lowen@localhost ~]$ rpm -qa | grep ^kernel|grep 193.14 > kernel-headers-4.18.0-193.14.2.el8_2.x86_64 > kernel-devel-4.18.0-193.14.2.el8_2.x86_64 > kernel-modules-4.18.0-193.14.2.el8_2.x86_64 > kernel-tools-4.18.0-193.14.2.el8_2.x86_64 > kernel-core-4.18.0-193.14.2.el8_2.x86_64 > kernel-tools-libs-4.18.0-193.14.2.el8_2.x86_64 > kernel-4.18.0-193.14.2.el8_2.x86_64 > [lowen@localhost ~]$ uname -a > Linux localhost.localdomain 4.18.0-193.14.2.el8_2.x86_64 #1 SMP Sun Jul > 26 03:54:29 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux > [lowen@localhost ~]$ > > > > RedHat fixes. https://access.redhat.com/errata/RHBA-2020:3265 https://access.redhat.com/errata/RHBA-2020:3262 -- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] For those interested in GCP (might be advertisement)
https://www.udemy.com/course/google-certified-associate-cloud-engineer-2019-prep-course/?couponCode=3F77D261A390D06DE18C -- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blog article about the state of CentOS
On Mon, Jun 22, 2020 at 6:43 AM Peter wrote: > On 22/06/20 10:13 am, Stephen John Smoogen wrote: > > There are 2 sets of work. > > 1. There is the work on the tools which were slapped together as an > > emergency from parts before 8.0. Those mbboxx tools are getting a > > rewrite and upgrade currently by the CPE team to make them more useful > > in the future. Stream only helps in that it is the excuse for that > > work to be done versus it molding and falling apart right after every > > 8.x release comes out. > > I didn't know that a rewrite is still needed on the current tool set and > granted Stream can help with this, but I hardly think that it's > necessary and the tool set can always be tested against the current > release (8.2) from git. > > > 2. There is the work that happens because various things are rebased > > and you need to figure out the HTF you get from build A to build A+1 > > by rebuilding N packages. That is work that Stream should help on > > because this is then knowledge is being done in stream before hand. If > > you know that package A went to A+1 then to A+2 and then back to A+1 > > but you learned how to do the second A+1 from a flag you used with > > A+2, then the amount of time reinventing the wheel is shortened. > > This I do realize and it's the one exception I considered where Stream > might come in handy, but not handy enough to justify its existence, imo. > Usually in a new point release there might be a small handful of > packages that need re-basing, out of those the number of packages that > would need to have the spec file tweaked to build them would be minimal > (at a complete guess three or less) and out of those the number that > would require a change to the tool set would likely average out to be > less than one per point release. In a worst-case scenario it might save > a day or two on a particularly nasty point release, and this would > easily be recouped in the amount of time it would save if the CentOS > team did not have to maintain Stream at all. > > Now these are just semi-educated guesses and I don't have the experience > to justify this so I'm happy to consider real numbers that prove me wrong. > > > > Hi, Now I have RHEL 8 installed for my test machine and some test Virtual Machines. I then subscribed to the RHSA-announce mailing list. Now I wonder why a particular package has not been released for CentOS 8 while it has been some time on RHEL OS and mailing list. With CentOS 7, I had no RHEL developer access, so I never wondered why a particular update has not been released CentOS 7 I just used CentOS 7 and was happy. Is this a valid reason for my impatience? - Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS runs on six cores.
On Sun, Jun 14, 2020 at 8:12 PM Alessandro Baggi wrote: > > > Il 12/06/20 18:59, Gordon Messmer ha scritto: > > On 6/12/20 2:16 AM, Thomas Stephen Lee wrote: > >> Do we need an upgrade ? > > > > > > Can you restate your question so that it's clear what version you are > > running, what hardware you are running it on, what you expect to happen, > > and what is happening instead? > Hi, > I think that Stephen is referring about the number of developer of the > core team that is of 6 members (from this "Do we need an upgrade?"). > > My first question for Stephen is: why do you think that the core team > needs more dev? > > > Hi, No upgrades needed. Working fine - Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] CentOS runs on six cores.
https://wiki.centos.org/Team Do we need an upgrade ? - Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] docker-firewalld
On Mon, May 18, 2020 at 8:14 PM Jonathan Billings wrote: > On Mon, May 18, 2020 at 10:38:24AM -0400, Jonathan Billings wrote: > > On Mon, May 18, 2020 at 07:52:41PM +0530, Thomas Stephen Lee wrote: > > > https://fedoraproject.org/wiki/Changes/firewalld_default_to_nftables > > > > > > mentions a > > > > > > docker-firewalld > > > > > > where can I find that package or source code? > > > > That was just one of the proposed solutions. It looks like the > > moby-engine packager went with Proposed fix 1, since it includes a: > > /usr/lib/firewalld/zones/docker.xml > > > > It looks like this: > > > https://src.fedoraproject.org/rpms/moby-engine/blob/master/f/docker-zone.xml > > Also, this is for Fedora, not CentOS, so it might not apply to > CentOS. moby-engine isn't built for CentOS through EPEL, and I have > no way to look at how the Docker.com people package things for > CentOS. > > -- > Jonathan Billings > ___ > Sorry,my mistake. I will ask in the Fedora forum. I am subscribed to both lists. thanks for the explanation and links. thanks --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] docker-firewalld
Hi, https://fedoraproject.org/wiki/Changes/firewalld_default_to_nftables mentions a docker-firewalld where can I find that package or source code? thanks --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS-virt] Centos 8 on AWS
Hi, Please release CentOS 8 on AWS. reference https://bugs.centos.org/view.php?id=16614#c36929 Also, a query: Is there any cost (money) for releasing on AWS by organizations? thanks --- Lee ___ CentOS-virt mailing list CentOS-virt@centos.org https://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS] How to get CentOS 8 on AWS
On Tue, May 12, 2020 at 8:02 PM Paul Heinlein wrote: > On Tue, 12 May 2020, Thomas Stephen Lee wrote: > > > Hi, > > > > I am user of CentOS 8. > > When can we expect an image on AWS? > > I am just learning AWS and would like to use CentOS 8 for that. > > I can't speak to AWS per se, but Digital Ocean has a CentOS 8 image, > so it would surprise me if Amazon did not. > > -- > Paul Heinlein > heinl...@madboa.com > 45°38' N, 122°6' W > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos Hi, There are images, but they are all third party supplied. I was looking for something like this. https://aws.amazon.com/marketplace/pp/Centosorg-CentOS-7-x8664-with-Updates-HVM/B00O7WM7QW supplied by Centos.org I found this bug while searching https://bugs.centos.org/view.php?id=16614 thanks --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] How to get CentOS 8 on AWS
Hi, I am user of CentOS 8. When can we expect an image on AWS? I am just learning AWS and would like to use CentOS 8 for that. thanks --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] RHEL 8.2
Got RHEL 8.2 today. https://www.redhat.com/en/about/press-releases/red-hat-delivers-force-multiplier-enterprise-it-enhanced-intelligent-monitoring-unveils-latest-version-red-hat-enterprise-linux-8 . thanks -- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] C8.1 Grub problem
On Wed, Apr 8, 2020 at 1:31 PM Alessandro Baggi wrote: > Il 08/04/20 01:46, Jonathan Billings ha scritto: > > On Apr 7, 2020, at 04:14, Alessandro Baggi > wrote: > >> thank you for your explanation. So in el8 grubby should be used to > update kernel opts and grub2-mkconfig is used to generate an initial config. > >> > >> If I'm not wrong, grubby updates every single (sperated) entries on > /boot/loader/entries and then generate the /boot/efi/EFI/centos/grub.cfg? > >> > >> Suppose that I want use only grub2-mkconfig to generate the grub.cfg > what other operation are needed to make it working? > > grubby only alters the existing configuration. It never regenerates the > grub.cfg in EFI. > > > > You can’t use “grub2-mkconfig” to create individual boot spec entries. > > > > -- > > Jonathan Billings > Please explain how the process work, it is not so clear for me. I'm > confused. > > In C7 when I need to modify grub menu kernel option I modify > /etc/default/grub and run grub2-mkconfig and thats all. It always worked > for me. > > On C8 this does not work anymore, grub2-mkconfig is not enough, it > generates only the grub.cfg but it does not update the menu entries and > need to modify each entry using grubby. At this point what grub.cfg is > used for if directives are not loaded by it and need grubby to modify > entries? > > I'm missing something > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > To get the old way. set GRUB_ENABLE_BLSCFG=false in /etc/default/grub Warning: some OS updates resets this value to "true" on update. -- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] RHEL 7.8 is out
On Wed, Apr 8, 2020 at 2:01 AM Kenneth Porter wrote: > Some useful info for the list. Release notes! ;) > > < > https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index > > > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > Is this https://wiki.centos.org/About/Building_7 the place to look ? thanks. -- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Versions in RHEL and CentOS
On Thu, Apr 2, 2020 at 3:35 PM Peter Kjellström wrote: > On Thu, 2 Apr 2020 14:40:31 +0530 > Thomas Stephen Lee wrote: > > > On Thu, Apr 2, 2020 at 2:07 PM Peter Kjellström > > > wrote: > > > > > I had no idea people still used that package. Especially on a > > > server. > > > > Is it due to some security issue ? > > Not security but safety (and also, it's not needed when there are > supported ways to get that data and better). > > By safety I refer the half-blind scanning of smbus etc. that > sensors-detect does. > > To me it feels like a relic from desktops 15 years ago :-) > > /Peter K > Hi Peter, Ok. I will look for alternatives. Thanks for the information. thanks. --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Versions in RHEL and CentOS
On Thu, Apr 2, 2020 at 2:07 PM Peter Kjellström wrote: > On Thu, 2 Apr 2020 11:10:23 +0530 > Thomas Stephen Lee wrote: > ... > > /usr/bin/sensors > > > > from the lm_sensors package > > > > I had run > > > > sensors-detect --auto > > I had no idea people still used that package. Especially on a server. > > Per core temperatures in linux for Zen2 is done using (a very up to > date kernel with its k10temp module). Alternatively one can look at: > > https://github.com/ocerman/zenpower.git > > I don't know if it works with the c8 kernel (but it does not work with > the c7 one). > > But in the end. Why care about per core temperatures? Setup basic > monitoring of the server using ipmi or whatever the vendor supports. > > /Peter K > Hi Peter, > On Thu, Apr 2, 2020 at 2:07 PM Peter Kjellström wrote: > I had no idea people still used that package. Especially on a server. Is it due to some security issue ? We install on all our machines (servers/desktops). thanks. --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Versions in RHEL and CentOS
On Thu, Apr 2, 2020 at 11:16 AM R C wrote: > why not use dmidecode ipmi, things like that? > > On 4/1/20 11:40 PM, Thomas Stephen Lee wrote: > > On Wed, Apr 1, 2020 at 12:33 PM Peter Kjellström wrote: > > > >> On Wed, 1 Apr 2020 10:01:04 +0530 > >> Thomas Stephen Lee wrote: > >> ... > >>> Thanks for the information . > >>> Rented a new EPYC Rome Server from Hetzner, but sensors does not show > >>> status of all cores in list, which is why I asked. > >> Curious what "sensors" you are referring to.. > >> > >> Like this: > >> > >> $ cat /sys/devices/system/cpu/online > >> 0-63 > >> > >> or this: > >> > >> $ lscpu | grep CPU\(s\) > >> CPU(s):64 > >> On-line CPU(s) list: 0-63 > >> NUMA node0 CPU(s): 0-15,32-47 > >> NUMA node1 CPU(s): 16-31,48-63 > >> > >> or what? > >> > >> /Peter K > >> > > Hi Peter, > > > > /usr/bin/sensors > > > > from the lm_sensors package > > > > I had run > > > > sensors-detect --auto > > > > before running sensors > > > > thanks. > > > > --- > > Lee > > ___ > > CentOS mailing list > > CentOS@centos.org > > https://lists.centos.org/mailman/listinfo/centos > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > sensors gives the temperature of each core if the CPU is supported. ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Versions in RHEL and CentOS
On Wed, Apr 1, 2020 at 12:33 PM Peter Kjellström wrote: > On Wed, 1 Apr 2020 10:01:04 +0530 > Thomas Stephen Lee wrote: > ... > > Thanks for the information . > > Rented a new EPYC Rome Server from Hetzner, but sensors does not show > > status of all cores in list, which is why I asked. > > Curious what "sensors" you are referring to.. > > Like this: > > $ cat /sys/devices/system/cpu/online > 0-63 > > or this: > > $ lscpu | grep CPU\(s\) > CPU(s):64 > On-line CPU(s) list: 0-63 > NUMA node0 CPU(s): 0-15,32-47 > NUMA node1 CPU(s): 16-31,48-63 > > or what? > > /Peter K > Hi Peter, /usr/bin/sensors from the lm_sensors package I had run sensors-detect --auto before running sensors thanks. --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Versions in RHEL and CentOS
On Tue, Mar 31, 2020 at 11:44 AM Johnny Hughes wrote: > On 3/30/20 11:20 PM, Thomas Stephen Lee wrote: > > Hi, > > > > I had a doubt regarding RHEL/CentOS Versions. > > > > https://access.redhat.com/support/policy/amd > > > > in the he Notes > > > > No (8) > > > > says > > > > "Update 2 of Red Hat Enterprise Linux 8" > > > > does it mean it will appear in CentOS 8.2, or is already there from 8.0 ? > > > > thanks > > > > -- > > Lee > > No, that is 8.0.2 .. which is older than 8.1. > > RHEL has several updates within the point release cycle that are just > normal updates .. we push those as well, but we don't use the 3rd digit. > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > Hi, Thanks for the information . Rented a new EPYC Rome Server from Hetzner, but sensors does not show status of all cores in list, which is why I asked. thanks. --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Versions in RHEL and CentOS
Hi, I had a doubt regarding RHEL/CentOS Versions. https://access.redhat.com/support/policy/amd in the he Notes No (8) says "Update 2 of Red Hat Enterprise Linux 8" does it mean it will appear in CentOS 8.2, or is already there from 8.0 ? thanks -- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Switching from lokkit (iptables) to firewalld
On Tue, Feb 4, 2020 at 5:34 AM Jerry Geis wrote: > Hi All, > > Over the last 20 some years I have a file with about 200K worth of address > that have "wrongly" tried to connect to my boxes running centos. So the > file has one line per address or group of addresses like: > 2.244.112.0/24 > > So using the OLD iptables I would run through my file build the > iptables.txt file and start that with DROP for the IP address. iptables ran > through the big list in no time. > > I was trying to run a script to go through each line and run: > firewall-cmd --zone=drop --add-source="$ipblock" --permanent > but this takes a long time. > > What is a "better" way or more efficient way to keep my long list of bad > addresses and apply them? Thanks, > > Jerry > Hi, If you are using CentOS 7, you can use ipset. You can add all your IPs and IP ranges to an ipset and do operations on it. https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-setting_and_controlling_ip_sets_using_firewalld The same should have worked for CentOS 8 except for this, https://bugzilla.redhat.com/show_bug.cgi?id=1774742 --- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Blocking attacks from a range of IP addresses
On Thu, Jan 9, 2020 at 6:07 AM H wrote: > I am being attacked by an entire subnet where the first two parts of the > IP address remain identical but the last two parts vary sufficiently that > it is not caught by fail2ban since the attempts do not meet the cut-off of > a certain number of attempts within the given time. > > Has anyone created a fail2ban filter for this type of attack? As of right > now, I have manually banned a range of IP addresses but would like to > automate it for the future. > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos Hi, I am not an expert but, you can try creating an ipset with the the range you need and do a drop in iptables or firewalld. We have used ipsets with bare iptables in CentOS 6, and firewalld in CentOS 7. fail2ban also uses ipsets in CentOS 7. thanks -- Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] State of CentOS 8
On Tue, Dec 24, 2019 at 10:19 AM Nicolas Kovacs wrote: > Le 23/12/2019 à 23:01, Jonathan Billings a écrit : > > No. 8-stream is where packages will (eventually) be available to test > software that’ll be part of the next point release of RHEL. So, for > example, before RHEL 8.1 was released, 8-stream had kernel packages with a > version-release close to what was eventually released in RHEL 8.1, and > eventually into CentOS 8.1.. > > In short and to sum it up, CentOS 8 in its current state has some > unpatched vulnerabilities. They have been adressed in RHEL since > October, but not in CentOS. > > It's fair to say this raises a few eyebrows among concerned CentOS users. > > Cheers, > > Niki > > -- > Microlinux - Solutions informatiques durables > 7, place de l'église - 30730 Montpezat > Site : https://www.microlinux.fr > Mail : i...@microlinux.fr > Tél. : 04 66 63 10 32 > Mob. : 06 51 80 12 12 > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > I don't know whether the below steps are permitted. but, you can install RHEL 8.1 Developer Edition on a VM. Download the SRPM for your package. Then rebuild on the CentOS machine and install the RPM. This is just for the important fixes like security. thanks --- Thomas Stephen Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos8 :: firewalld active but tables empty
On Wed, Dec 11, 2019 at 3:38 PM joernboe via CentOS wrote: > ..okay i assume there are better alternatives on the road.. > > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos Hi, https://www.redhat.com/en/blog/using-nftables-red-hat-enterprise-linux-8 thanks --- Thomas Stephen Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 8 install of squirrelmail
Hi, You can rebuild the RPM on a CentOS 8 box from https://dl.fedoraproject.org/pub/epel/7/SRPMS/Packages/s/squirrelmail-1.4.23-1.el7.20190710.src.rpm or https://dl.fedoraproject.org/pub/fedora/linux/releases/31/Everything/source/tree/Packages/s/squirrelmail-1.4.23-2.fc31.20190710.src.rpm and install the resulting RPM. For the source https://sourceforge.net/p/squirrelmail/code/HEAD/tree/ the last commit was 6 days ago. you can use https://sourceforge.net/p/squirrelmail/code/HEAD/tree/branches/SM-1_4-STABLE/squirrelmail/contrib/RPM/squirrelmail.spec if you are interested in hacking, as the default configuration is different from CentOS. thanks --- Thomas Stephen Lee Note: this for internal use only. Not for accessing from the www. On Tue, Dec 3, 2019 at 1:26 AM Valeri Galtsev wrote: > > > On 2019-12-02 13:46, Earl Terwilliger via CentOS wrote: > >> > >> > >> On 2019-12-02 13:15, Earl Terwilliger via CentOS wrote: > >>> Hi, > >>> > >>> I am trying to install Squirrelmail on Centos 8 but it seems that > >>> package > >>> is missing in the EPEL repo for Centos 8? Anyone know if this was on > >>> purpose or how to tell which packages won't be created? > >> > >> As far as I know, squirrelmail is noT actively maintained for quite some > >> time: > >> > >> https://www.squirrelmail.org/ > >> > >> For this reason, variety of distributions phase it out, or may do it > >> soon. Latest version coming as port on FreeBSD is dated Apr 4, 2018 (it > >> runs under PHP-7.2 so I'm happy so far). I maintain two webmail front > >> ends: squirrelmail and round cube. I plan to replace squirrelmail with > >> Horde webmail soon. > >> > >> I hope, this helps. > >> > >> Valeri > >> > >>> > >>> Thanks, > >>> Earl > >>> ___ > >>> CentOS mailing list > >>> CentOS@centos.org > >>> https://lists.centos.org/mailman/listinfo/centos > >>> > >> > >> -- > >> > >> Valeri Galtsev > >> Sr System Administrator > >> Department of Astronomy and Astrophysics > >> Kavli Institute for Cosmological Physics > >> University of Chicago > >> Phone: 773-702-4247 > >> > >> ___ > >> CentOS mailing list > >> CentOS@centos.org > >> https://lists.centos.org/mailman/listinfo/centos > >> > > > > Thanks.. Squirrelmail is still available on Fedora 31 so I was thinking > it > > still should be around for centos 8 (and it does work on the latest > > versions of php) > > > > I will have to look around for something to replace it but the big > problem > > is getting the users to like something new... > > Horde webmail seems to be closest in appearance and interaction with > user. Round cube is way different. I must confess though, I didn't have > time to try horde webmail yet. > > Yes, and Fedora fully escaped my mind... so Fedora source package > rebuilt on your system may be the smoothest solution. > > Valeri > > > > > Earl > > ___ > > CentOS mailing list > > CentOS@centos.org > > https://lists.centos.org/mailman/listinfo/centos > > > > -- > > Valeri Galtsev > Sr System Administrator > Department of Astronomy and Astrophysics > Kavli Institute for Cosmological Physics > University of Chicago > Phone: 773-702-4247 > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] RHEL 8.1
RHEL 8.1 released to cdn. did $ dnf upgrade and got 8.1 No official announcement yet. thanks --- Thomas Stephen Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] PHP FPM issue
RedHat has updated rh-php71-php and rh-php72-php. https://access.redhat.com/errata/RHSA-2019:3300 https://access.redhat.com/errata/RHSA-2019:3299 thanks --- Thomas Stephen Lee On Sat, Nov 2, 2019 at 12:45 AM Kenneth Porter wrote: > --On Friday, November 01, 2019 12:40 PM +0530 Thomas Stephen Lee > wrote: > > > yes, those who use software collections will have to wait longer for > > permanent fix i guess. > > Or it may arrive sooner, depending on the repo maintainer for each > package. > I use a COPR package of BackupPC 4 and the packager typically has a new > package rolled a day after an upstream release. > > > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] PHP FPM issue
On Fri, Nov 1, 2019 at 5:08 AM Marius ROMAN wrote:
> On 10/31/19 6:55 PM, Thomas Stephen Lee wrote:
>
> Hi Marius,
>
> Will make the changes and see how it goes.
>
> On the other hand
> https://cbs.centos.org/koji/buildinfo?buildID=27138
>
> if the above was released we could just install and migrate to
> rh-php73-php, which is not affected as per
> https://access.redhat.com/security/cve/cve-2019-11043
>
> thanks
>
> ---
> Thomas Stephen Lee
>
> On Thu, Oct 31, 2019 at 8:40 PM Marius ROMAN
> wrote:
>
>
> On 10/31/19 10:49 AM, Thomas Stephen Lee wrote:
>
> Hi,
>
> what is the workaround for this?
> https://www.nginx.com/blog/php-fpm-cve-2019-11043-vulnerability-nginx/
>
> in either CentOS 7 or 8 ?
>
> thanks
>
> ---
> Thomas Stephen Lee
> ___
> CentOS mailing
> listCentOS@centos.orghttps://lists.centos.org/mailman/listinfo/centos
>
> The simplest is to conditionally set PATH_INFO if it's not empty:
>
> fastcgi_param PATH_INFO $fastcgi_path_info if_not_empty;
>
> Another option is to explicitly test whether the fastcgi script path
> exists :
>
> if (!-f $document_root$fastcgi_script_name) {
> return 404;
> }
>
> --
> Marius
>
> ___
> CentOS mailing
> listCentOS@centos.orghttps://lists.centos.org/mailman/listinfo/centos
>
> ___
> CentOS mailing
> listCentOS@centos.orghttps://lists.centos.org/mailman/listinfo/centos
>
> Interesting the RedHat page says "7.3.x below 7.3.11", now looking at
> https://cbs.centos.org/koji/buildinfo?buildID=27138 it has
> php-7.3.7-2.el7 which means it is affected.
>
> --
> Marius
>
>
yes, those who use software collections will have to wait longer for
permanent fix i guess.
thanks
---
Thomas Stephen Lee
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] PHP FPM issue
https://access.redhat.com/errata/RHSA-2019:3286
Looks like RedHat is updating PHP 5 packages.
thanks
---
Thomas Stephen Lee
On Fri, Nov 1, 2019 at 5:08 AM Marius ROMAN wrote:
> On 10/31/19 6:55 PM, Thomas Stephen Lee wrote:
>
> Hi Marius,
>
> Will make the changes and see how it goes.
>
> On the other hand
> https://cbs.centos.org/koji/buildinfo?buildID=27138
>
> if the above was released we could just install and migrate to
> rh-php73-php, which is not affected as per
> https://access.redhat.com/security/cve/cve-2019-11043
>
> thanks
>
> ---
> Thomas Stephen Lee
>
> On Thu, Oct 31, 2019 at 8:40 PM Marius ROMAN
> wrote:
>
>
> On 10/31/19 10:49 AM, Thomas Stephen Lee wrote:
>
> Hi,
>
> what is the workaround for this?
> https://www.nginx.com/blog/php-fpm-cve-2019-11043-vulnerability-nginx/
>
> in either CentOS 7 or 8 ?
>
> thanks
>
> ---
> Thomas Stephen Lee
> ___
> CentOS mailing
> listCentOS@centos.orghttps://lists.centos.org/mailman/listinfo/centos
>
> The simplest is to conditionally set PATH_INFO if it's not empty:
>
> fastcgi_param PATH_INFO $fastcgi_path_info if_not_empty;
>
> Another option is to explicitly test whether the fastcgi script path
> exists :
>
> if (!-f $document_root$fastcgi_script_name) {
> return 404;
> }
>
> --
> Marius
>
> ___
> CentOS mailing
> listCentOS@centos.orghttps://lists.centos.org/mailman/listinfo/centos
>
> ___
> CentOS mailing
> listCentOS@centos.orghttps://lists.centos.org/mailman/listinfo/centos
>
> Interesting the RedHat page says "7.3.x below 7.3.11", now looking at
> https://cbs.centos.org/koji/buildinfo?buildID=27138 it has
> php-7.3.7-2.el7 which means it is affected.
>
> --
> Marius
>
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] PHP FPM issue
Hi Marius,
Will make the changes and see how it goes.
On the other hand
https://cbs.centos.org/koji/buildinfo?buildID=27138
if the above was released we could just install and migrate to
rh-php73-php, which is not affected as per
https://access.redhat.com/security/cve/cve-2019-11043
thanks
---
Thomas Stephen Lee
On Thu, Oct 31, 2019 at 8:40 PM Marius ROMAN wrote:
> On 10/31/19 10:49 AM, Thomas Stephen Lee wrote:
> > Hi,
> >
> > what is the workaround for this?
> >
> > https://www.nginx.com/blog/php-fpm-cve-2019-11043-vulnerability-nginx/
> >
> > in either CentOS 7 or 8 ?
> >
> > thanks
> >
> > ---
> > Thomas Stephen Lee
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > https://lists.centos.org/mailman/listinfo/centos
>
> The simplest is to conditionally set PATH_INFO if it's not empty:
>
> fastcgi_param PATH_INFO $fastcgi_path_info if_not_empty;
>
> Another option is to explicitly test whether the fastcgi script path
> exists :
>
> if (!-f $document_root$fastcgi_script_name) {
> return 404;
> }
>
> --
> Marius
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] PHP FPM issue
Hi Jonathan and CentOS Team, Thanks for the link. https://cbs.centos.org/koji/buildinfo?buildID=27138 rh-php73-php seems to be ready and is not vulnerable according to the CVE. When will rh-php73-php be released to the repos? thanks --- Thomas Stephen Lee On Thu, Oct 31, 2019 at 8:40 PM Jonathan Billings wrote: > On Thu, Oct 31, 2019 at 02:19:05PM +0530, Thomas Stephen Lee wrote: > > > > Hi, > > > > what is the workaround for this? > > > > https://www.nginx.com/blog/php-fpm-cve-2019-11043-vulnerability-nginx/ > > > > in either CentOS 7 or 8 ? > > https://access.redhat.com/security/cve/cve-2019-11043 > > > -- > Jonathan Billings > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] PHP FPM issue
Hi, what is the workaround for this? https://www.nginx.com/blog/php-fpm-cve-2019-11043-vulnerability-nginx/ in either CentOS 7 or 8 ? thanks --- Thomas Stephen Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] fresh C7.7 install
Hi, gpt <https://en.wikipedia.org/wiki/GUID_Partition_Table> is newer partition table format. fdisk started supporting gpt recently, while parted has better support for gpt. thanks --- Thomas Stephen Lee On Fri, Oct 25, 2019 at 5:22 PM Jerry Geis wrote: > Results for parted: > > parted /dev/sda print > Model: ATA KINGSTON SUV5001 (scsi) > Disk /dev/sda: 120GB > Sector size (logical/physical): 512B/4096B > Partition Table: gpt > Disk Flags: > > Number Start End SizeFile system Name Flags > 1 1049kB 1050MB 1049MB fat32 EFI System Partition boot > 2 1050MB 53.5GB 52.4GB ext4 > 3 53.5GB 57.7GB 4194MB linux-swap(v1) > 4 57.7GB 120GB 62.4GB ext4 > > > > So this shows what I'm expecting. What is the issue with fdisk ??? > > Jerry > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] fresh C7.7 install
Hi, try parted /dev/sda print thanks --- Thomas Stephen Lee On Thu, Oct 24, 2019 at 5:41 PM Jerry Geis wrote: > HI all, > > I just did a fresh C7 install using kickstart. > > fdisk -l /dev/sda shows: > # Start EndSize TypeName > 1 2048 2050047 1000M EFI System EFI System Partition > 2 2050048104450047 48.8G Microsoft basic > 31044500481126420473.9G Linux swap > 4112642048234440703 58.1G Microsoft basic > > What extra do I need to specify in my kickstart so that the "type" above is > not Microsoft basic? > > For example, currently a line in my kickstart would be: > part /home --ondisk=/dev/sda --fstype ext4 --size=58G --asprimary > > > What is missing so the type is set correctly to linux root or linux home? > > Thanks, > > Jerry > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Crashed a CentOS 8 installation.
Hi, The mistake was EFI. The source CentOS 7.7 machine was EFI boot. and the destination CentOS 8 VM was non EFI. Made a VM snapshot and wrote a script to install the packages one by one and reboot each time. The VM crashed at grub2-efi-x64.x86_64 thanks. -- Thomas Stephen Lee On Wed, Oct 16, 2019 at 8:05 PM Ljubomir Ljubojevic wrote: > On 10/16/19 4:05 PM, Jonathan Billings wrote: > > On Wed, Oct 16, 2019 at 04:00:20PM +0530, Thomas Stephen Lee wrote: > >> Failed to switch root: Specified switch root path /sysroot does not > seem to > >> be an OS tree. os-release file is missing. > >> > >> What am I doing wrong? > > > > Tested, and yes, this happens after a reboot, grub2 isn't giving the > > initrd a root disk to switch to. > > > > I had to edit the grub.cfg and add a single line, > > set default_kernelopts="..." > > > > (using what was GRUB_CMDLINE_LINUX= was set in /etc/default/grub) > > > > I'm not exactly sure which package that was installed that caused > > this. > > > > Create a snapshot of clean VM and divide that list in 10 pieces and > install them one at the time and reboot afterwards. If VM boots, create > another snapshot. When it fails, reverse to previous snaphot and divide > that segment into 5-10 smaller pieces, rinse and repeat. > > -- > Ljubomir Ljubojevic > (Love is in the Air) > PL Computers > Serbia, Europe > > StarOS, Mikrotik and CentOS/RHEL/Linux consultant > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Crashed a CentOS 8 installation.
Hi, http://bit.ly/packages-list missing attachment thanks --- Thomas Stephen Lee On Wed, Oct 16, 2019 at 4:00 PM Thomas Stephen Lee wrote: > Hi, > > Note: Please do this on a test VM. > > My issue: > > I took the output of the following command > > $ yum list installed | xargs -n3 | column -t | tail -n +3 |cut -d' ' -f1 > > packages.list > > from a CentOS 7.7 Installation. > > and did > > $ dnf install $(cat packages.list) --setopt=strict=0 > > on Freshly installed Minimal CentOS 8 VM. > > When I reboot I get > > Failed to switch root: Specified switch root path /sysroot does not seem > to be an OS tree. os-release file is missing. > > What am I doing wrong? > > packages.list attached > > thanks > > --- > Thomas Stephen Lee > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Crashed a CentOS 8 installation.
Hi, Note: Please do this on a test VM. My issue: I took the output of the following command $ yum list installed | xargs -n3 | column -t | tail -n +3 |cut -d' ' -f1 > packages.list from a CentOS 7.7 Installation. and did $ dnf install $(cat packages.list) --setopt=strict=0 on Freshly installed Minimal CentOS 8 VM. When I reboot I get Failed to switch root: Specified switch root path /sysroot does not seem to be an OS tree. os-release file is missing. What am I doing wrong? packages.list attached thanks --- Thomas Stephen Lee ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] RAID controller recommendations that are supported by RHEL/CentOS 8?
Hi Dennis, I contacted Broadcom support. They said " The MegaRAID SAS 9361-8i. I would recommend the MegaRAID SAS 9460-8i. The latest controller also allows you to attach NVMe drives. Please see the following link for details. https://www.broadcom.com/products/storage/raid-controllers/tab-12Gb-nvme " thanks -- Thomas Stephen Lee On Thu, Oct 10, 2019 at 3:16 PM Dennis Jacobfeuerborn wrote: > Hi, > I'm currently looking for a RAID controller with BBU/CacheVault and > while LSI MegaRaid controllers worked well in the past apparently they > are no longer supported in RHEL 8: > https://access.redhat.com/discussions/3722151 > > Does anybody have recommendations for for hardware controllers with > cache that should work in both CentOS 7 and 8 out of the box? > > Regards, > Dennis > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 8 will be released soon?
Sorry for the confusion. On Wed, Sep 4, 2019 at 11:50 PM Akemi Yagi wrote: > On Wed, Sep 4, 2019 at 11:07 AM Jonathan Billings > wrote: > > > > On Wed, Sep 04, 2019 at 12:11:09PM -0500, John R. Dennison wrote: > > > > > > On Wed, Sep 04, 2019 at 10:04:04AM +0530, Thomas Stephen Lee wrote: > > > > I doubt that releasing CentOS 7.7 is a higher priority as many > people are > > > > using CentOS 7, > > > > > > ... > > > > > > I'm not quite sure how to parse that... > > > > I believe it is supposed to be: > > > > "I doubt that! Releasing CentOS 7.7 is a higher priority, as many > > people are using CentOS 7." > > > > Punctuation is important. > > I have yet another theory. He probably meant to say: > > "I suspect that releasing..." > > As someone who is not a native English speaker, I know how this > happens. "doubt" and "suspect" can be translated into the same word > (certainly in Japanese). As a result, these two words are often used > incorrectly. > > Akemi > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 8 will be released soon?
I doubt that releasing CentOS 7.7 is a higher priority as many people are using CentOS 7, On Sat, Aug 24, 2019 at 10:39 AM Turritopsis Dohrnii Teo En Ming < c...@teo-en-ming-corp.com> wrote: > Good afternoon from Singapore, > > According to the CentOS 8 build timeline, everything has been completed > except release work. Does this mean CentOS 8 will be released soon? > > https://wiki.centos.org/About/Building_8 > > > > > > -BEGIN EMAIL SIGNATURE- > > The Gospel for all Targeted Individuals (TIs): > > [The New York Times] Microwave Weapons Are Prime Suspect in Ills of > U.S. Embassy Workers > > Link: > https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html > > > > > Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic > Qualifications as at 14 Feb 2019 > > [1] https://tdtemcerts.wordpress.com/ > > [2] https://tdtemcerts.blogspot.sg/ > > [3] https://www.scribd.com/user/270125049/Teo-En-Ming > > -END EMAIL SIGNATURE- > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
