Re: [CentOS] systemd-sysctl not running on boot

[Gordon Messmer]

On 12/23/2015 11:12 PM, Ofer Hasson wrote:

[root@web-devel-local-1 ~]# /usr/lib/systemd/systemd-sysctl
[root@web-devel-local-1 ~]# cat /proc/sys/vm/swappiness
10


So... you know that it works when you run it from a root shell, but not 
during boot.  Is the file labeled properly?  Anything in audit.log?


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] systemd-sysctl not running on boot

[Ofer Hasson]

I don't see anything related in the audit log (I'm using audit2why).

As for labeling:
[root@web-devel-local-1 ~]# ll -Z /etc/ | grep sysctl
drwxr-xr-x. root   root   system_u:object_r:etc_t:s0   sysctl.d

[root@web-devel-local-1 ~]# ll -Z /etc/sysctl.d/
-rw-r--r--. root root unconfined_u:object_r:system_conf_t:s0 sysctl.conf

On Thu, Dec 24, 2015 at 10:51 AM, Gordon Messmer 
wrote:

> On 12/23/2015 11:12 PM, Ofer Hasson wrote:
>
>> [root@web-devel-local-1 ~]# /usr/lib/systemd/systemd-sysctl
>> [root@web-devel-local-1 ~]# cat /proc/sys/vm/swappiness
>> 10
>>
>
> So... you know that it works when you run it from a root shell, but not
> during boot.  Is the file labeled properly?  Anything in audit.log?
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS-announce Digest, Vol 130, Issue 12

[centos-announce-request]

Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
https://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. Announcing release for Developer Toolset 3 on CentOS Linux 6
  x86_64 SCL (Honza Horak)
   2. Announcing release for Developer Toolset 3 on CentOS Linux 7
  x86_64 SCL (Honza Horak)
   3. Announcing release for Git 1.9 on CentOS Linux 6  x86_64 SCL
  (Honza Horak)
   4. Announcing release for Git 1.9 on CentOS Linux 7  x86_64 SCL
  (Honza Horak)
   5. Announcing release for Thermostat 1.2 on CentOS   Linux 6
  x86_64 SCL (Honza Horak)
   6. Announcing release for Thermostat 1.2 on CentOS   Linux 7
  x86_64 SCL (Honza Horak)


--

Message: 1
Date: Wed, 23 Dec 2015 12:17:41 +0100
From: Honza Horak 
To: centos-annou...@centos.org
Subject: [CentOS-announce] Announcing release for Developer Toolset 3
on CentOS Linux 6 x86_64 SCL
Message-ID: <567a82d5.10...@redhat.com>
Content-Type: text/plain; charset=utf-8; format=flowed

I am pleased to announce the immediate availability of Developer Toolset 
3 on CentOS Linux 6 x86_64, delivered via a Software Collection (SCL) 
built by the SCLo Special Interest Group 
(https://wiki.centos.org/SpecialInterestGroup/SCLo).

QuickStart
--
You can get started in three easy steps:
$ sudo yum install centos-release-scl
$ sudo yum install devtoolset-3-toolchain
$ scl enable devtoolset-3 bash

At this point you should be able to use gcc and other tools just as a 
normal application. Examples of commands run might be:
$ gcc hello.c
$ sudo yum install devtoolset-3-valgrind
$ valgrind ./a.out
$ gdb ./a.out

In order to view the individual components included in this collection, 
including additional development tools, you can run:
$ sudo yum list devtoolset-3\*

About Software Collections
--
Software Collections give you the power to build, install, and use 
multiple versions of software on the same system, without affecting 
system-wide installed packages. Each collection is delivered as a group 
of RPMs, with the grouping being done using the name of the collection 
as a prefix of all packages that are part of the software collection.

The collection devtoolset-3 delivers version 4.9.0 of the GNU Compiler 
Collection, GNU Debugger, and other development, debugging, and 
performance monitoring tools as RPMs.

However, in comparison to Developer Toolset 3 collection as available 
for CentOS 7, this collection does not include Eclipse development 
platform, because SCLo SIG does not have enough resources for rebuilding 
many depended packages.

The SCLo SIG in CentOS
--
The Software Collections SIG group is an open community group 
co-ordinating the development of the SCL technology, and helping curate 
a reference set of collections. In addition to the Developer Toolset 
collection being released here, we also build and deliver databases, web 
servers, and language stacks including multiple versions of PostgreSQL, 
MariaDB, Apache HTTP Server, NodeJS, Ruby, Python and others.

Software Collections SIG release was announced at 
https://lists.centos.org/pipermail/centos-announce/2015-October/021446.html

You can learn more about Software Collections concepts at: 
http://softwarecollections.org
You can find information on the SIG at 
https://wiki.centos.org/SpecialInterestGroup/SCLo ; this includes howto 
get involved and help with the effort.

We meet every second Wednesday at 16:00 UTC in #centos-devel (ref: 
https://www.centos.org/community/calendar), for an informal open forum 
open to anyone who might have comments, concerns or wants to get started 
with SCL's in CentOS.

Enjoy!

Honza
SCLo SIG member


--

Message: 2
Date: Wed, 23 Dec 2015 12:17:46 +0100
From: Honza Horak 
To: centos-annou...@centos.org
Subject: [CentOS-announce] Announcing release for Developer Toolset 3
on CentOS Linux 7 x86_64 SCL
Message-ID: <567a82da.8010...@redhat.com>
Content-Type: text/plain; charset=utf-8; format=flowed

I am pleased to announce the immediate availability of Developer Toolset 
3 on CentOS Linux 7 x86_64, delivered via a Software Collection (SCL) 
built by the SCLo Special Interest Group 
(https://wiki.centos.org/SpecialInterestGroup/SCLo).

QuickStart
--
You can get started in three easy steps:
   $ sudo yum install centos-release-scl
   $ sudo yum install devtoolset-3-toolchain
   $ scl enable devtoolset-3 bash

At this point you should be able to use gcc and oth

Re: [CentOS] Extending a CentOS disk without reboot

[Sander Kuusemets]

I did not do pvresize because neither "pvs" or "pvdisplay" reported to 
have free space.


After reboot they did, after which doing pvresize worked successfully.

Sander Kuusemets
University of Tartu, High Performance Computing, IT Specialist
Skype: sander.kuusemets1
+372 737 5694

On 24/12/15 09:17, Gordon Messmer wrote:

On 12/21/2015 11:15 AM, Sander Kuusemets wrote:
So what happened, is that after another administrator had extended 
the disk from VMWare, I tried to extend it from the OS side.

...
Now's when the problems happened. After writing the partition table I 
got the usual "Busy" error. But I needed to do this without downtime. 
So, what did I try to get the kernel acknowledge the partition size 
change:

...

* partprobe -s


Well, partprobe is the standard advice for this situation, but I don't 
think it actively does anything with the -s flag.  That could have 
been the problem, but I'm not certain.


And while dmesg reported that it recognized the partition change, LVM 
did still not see it.


You didn't include "pvresize" in that list, so I presume you didn't do 
it.  That's the command that will inform LVM of the change.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7.2 installer missing virt-what

[Johnny Hughes]

On 12/23/2015 02:55 PM, Chris Adams wrote:
> In previous CentOS releases, virt-what was included in the install
> image.  This made it easy for me to spin a custom ISO with my package
> set and a kickstart that would add open-vm-tools or ovirt-guest-agent as
> appropriate (when installing the respective guest environments).
> 
> I updated my ISO to 7.2, and virt-what is nowhere to be found.  I assume
> this is copied from RHEL; anybody know any explanation?
> 
> For now, I'm falling back to matching strings in
> /sys/class/dmi/id/product_name.  Is there some better way to determine
> what (if any) virtual environment the installer is running under?
> 

Which ISO .. virt-what is on the Everything ISO and in the os/
directory.. you can use that.

Our DVD package list gets remastered to stay less than 4.3 GB, and we
want 'repo closure' and < 4.3 GB, and anything that can be selected from
the 'GUI Installer' for a normal install.

If you need things that fall outside those conditions, then an
Everything ISO on something bigger than 4.3 GB DVD(a thumbdrive, etc.)
is the way to go. There is only so much space on a DVD.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Calibre installation fails on C7

[Wes James]

> On Dec 23, 2015, at 7:16 PM, Fred Smith  wrote:
> 
> On Wed, Dec 23, 2015 at 03:34:56PM -0700, Wes James wrote:
>> 
>>> On Dec 22, 2015, at 9:13 PM, Fred Smith  
>>> wrote:
>>> 
>>> On Tue, Dec 22, 2015 at 09:03:28PM -0700, Wes James wrote:
 
> On Dec 22, 2015, at 8:06 PM, Fred Smith  
> wrote:
> 
> Attempting to install latest Calibre on Centos-7, getting:
> 
 
 typed in "calibre ssl install error” to google
 
 first hit:
 
 http://stackoverflow.com/questions/26615914/calibre-fails-to-install 
 
 
 not sure if it helps (the no check cert option??)
>>> 
>>> Nope. makes no difference.
>> 
>> 
>> I just went through the build it yourself process.  Give this a try:
> 
> Wes, thanks for following up.
> 
> But I wonder if Calibre is worth that much work?
> 
> The specific problem I had can be worked around just by following the
> instructions on the Calibre downloadpge for "manual install". I did
> that and it appears to work properly.


Good!  I don’t know how Johnny keeps the centos distro rolling.  Getting all 
the pieces to make it work is quite interesting.

Happy holidays!  

-wes
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7.2 installer missing virt-what

[Chris Adams]

Once upon a time, Johnny Hughes  said:
> On 12/23/2015 02:55 PM, Chris Adams wrote:
> > In previous CentOS releases, virt-what was included in the install
> > image.  This made it easy for me to spin a custom ISO with my package
> > set and a kickstart that would add open-vm-tools or ovirt-guest-agent as
> > appropriate (when installing the respective guest environments).
> > 
> > I updated my ISO to 7.2, and virt-what is nowhere to be found.  I assume
> > this is copied from RHEL; anybody know any explanation?
> > 
> > For now, I'm falling back to matching strings in
> > /sys/class/dmi/id/product_name.  Is there some better way to determine
> > what (if any) virtual environment the installer is running under?
> 
> Which ISO .. virt-what is on the Everything ISO and in the os/
> directory.. you can use that.

Again, I'm talking about the install image itself, not the package set.
Previously, I could run virt-what from %pre in a kickstart because the
executable was included in the installer runtime (LiveOS/squashfs.img),
but now it is not.

-- 
Chris Adams 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Calibre installation fails on C7

[Fred Smith]

On Thu, Dec 24, 2015 at 08:54:54AM -0700, Wes James wrote:
> 
> > On Dec 23, 2015, at 7:16 PM, Fred Smith  
> > wrote:
> > 
> > On Wed, Dec 23, 2015 at 03:34:56PM -0700, Wes James wrote:
> >> 
> >>> On Dec 22, 2015, at 9:13 PM, Fred Smith  
> >>> wrote:
> >>> 
> >>> On Tue, Dec 22, 2015 at 09:03:28PM -0700, Wes James wrote:
>  
> > On Dec 22, 2015, at 8:06 PM, Fred Smith  
> > wrote:
> > 
> > Attempting to install latest Calibre on Centos-7, getting:
> > 
>  
>  typed in "calibre ssl install error” to google
>  
>  first hit:
>  
>  http://stackoverflow.com/questions/26615914/calibre-fails-to-install 
>  
>  
>  not sure if it helps (the no check cert option??)
> >>> 
> >>> Nope. makes no difference.
> >> 
> >> 
> >> I just went through the build it yourself process.  Give this a try:
> > 
> > Wes, thanks for following up.
> > 
> > But I wonder if Calibre is worth that much work?
> > 
> > The specific problem I had can be worked around just by following the
> > instructions on the Calibre downloadpge for "manual install". I did
> > that and it appears to work properly.
> 
> 
> Good!  I don’t know how Johnny keeps the centos distro rolling.  Getting all 
> the pieces to make it work is quite interesting.

dedication, hard work, and good helpers!

> 
> Happy holidays!  

Same right back atcha! :)

> 
> -wes

-- 
---
Under no circumstances will I ever purchase anything offered to me as
the result of an unsolicited e-mail message. Nor will I forward chain
letters, petitions, mass mailings, or virus warnings to large numbers
of others. This is my contribution to the survival of the online
community.
 --Roger Ebert, December, 1996
- The Boulder Pledge -
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Centos7 poblems with dnssec-keygen

[Robert Moskowitz]

I am reading:

https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-bind-rndc.html

I have bind installed and default config running.  I have not applied my 
customizations yet.  The first step I am taking is getting rndc.key 
created.  So reading the guide I am trying to run (while logged in as 
root, and in /etc):


dnssec-keygen -a hmac-md5 -b 256 -n HOST rndc.key

The system is just sitting there and doing nothing.  I have sshed as 
another session and do not see any processing being done by dnssec-keygen.


Has anyone else done this?  Am I doing things in the right order? If it 
works for others, then there is something wrong with my setup...



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos7 poblems with dnssec-keygen

[Alice Wonder]

On 12/24/2015 12:40 PM, Robert Moskowitz wrote:

I am reading:

https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-bind-rndc.html

I have bind installed and default config running.  I have not applied my
customizations yet.  The first step I am taking is getting rndc.key
created.  So reading the guide I am trying to run (while logged in as
root, and in /etc):

dnssec-keygen -a hmac-md5 -b 256 -n HOST rndc.key

The system is just sitting there and doing nothing.  I have sshed as
another session and do not see any processing being done by dnssec-keygen.

Has anyone else done this?  Am I doing things in the right order? If it
works for others, then there is something wrong with my setup...


It's working fine for me.

I'm using the command ldns-keygen to generate keys though - e.g.

ZSK=`/usr/bin/ldns-keygen -a RSASHA1-NSEC3-SHA1 -b 1024 ${zone}`

and

KSK=`/usr/bin/ldns-keygen -k -a RSASHA1-NSEC3-SHA1 -b 2048 ${zone}`

ldns-keygen is from the ldns package.

Mine is currently all scripted and automated, has been for months - I 
started with an Ubuntu tutorial though, not CentOS documentation, and 
adapted it.


I'll have to look at the scripts I wrote more carefully when I get home 
(wonder if I should be using different than SHA1 now too? I'll have to 
research that)


--
-=-
Sent my from my laptop, may not be able to respond timely
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos7 poblems with dnssec-keygen

[Robert Moskowitz]

On 12/24/2015 03:50 PM, Alice Wonder wrote:



On 12/24/2015 12:40 PM, Robert Moskowitz wrote:

I am reading:

https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-bind-rndc.html 



I have bind installed and default config running.  I have not applied my
customizations yet.  The first step I am taking is getting rndc.key
created.  So reading the guide I am trying to run (while logged in as
root, and in /etc):

dnssec-keygen -a hmac-md5 -b 256 -n HOST rndc.key

The system is just sitting there and doing nothing.  I have sshed as
another session and do not see any processing being done by 
dnssec-keygen.


Has anyone else done this?  Am I doing things in the right order? If it
works for others, then there is something wrong with my setup...


It's working fine for me.

I'm using the command ldns-keygen to generate keys though - e.g.

ZSK=`/usr/bin/ldns-keygen -a RSASHA1-NSEC3-SHA1 -b 1024 ${zone}`

and

KSK=`/usr/bin/ldns-keygen -k -a RSASHA1-NSEC3-SHA1 -b 2048 ${zone}`

ldns-keygen is from the ldns package.

Mine is currently all scripted and automated, has been for months - I 
started with an Ubuntu tutorial though, not CentOS documentation, and 
adapted it.


I'll have to look at the scripts I wrote more carefully when I get 
home (wonder if I should be using different than SHA1 now too? I'll 
have to research that)


Right now all I want working is rndc.  dnssec will be worked on come spring.

With all I do in security, it bothers me that the Centos documentation 
specifies MD5.  Should be at least SHA1, if not SHA256.



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos7 poblems with dnssec-keygen

[Alice Wonder]

On 12/24/2015 12:54 PM, Robert Moskowitz wrote:



Right now all I want working is rndc.  dnssec will be worked on come
spring.

With all I do in security, it bothers me that the Centos documentation
specifies MD5.  Should be at least SHA1, if not SHA256.




Oh okay I apoligize, I mis-read your post as asking about generating 
DNSSEC keys, due to the command name you were using.


I have no clue about bind / rndc, I use NSD for authoritative.

Sorry about the noise.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos7 poblems with dnssec-keygen

[Robert Moskowitz]

On 12/24/2015 04:30 PM, Alice Wonder wrote:



On 12/24/2015 12:54 PM, Robert Moskowitz wrote:



Right now all I want working is rndc.  dnssec will be worked on come
spring.

With all I do in security, it bothers me that the Centos documentation
specifies MD5.  Should be at least SHA1, if not SHA256.




Oh okay I apoligize, I mis-read your post as asking about generating 
DNSSEC keys, due to the command name you were using.


I have no clue about bind / rndc, I use NSD for authoritative.

Sorry about the noise.


Not a problem.

Turns out, this is on an armv7 with the new C7-arm port and there are 
no  (or too few) processes running for there to be anything in 
/dev/random.  I was told to open up an ssh session and run


dd if=/dev/mmcblk0p3 of=/dev/null

Once that finished, the keygen finished in my console session.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos