Re: [CentOS] Centos 7 specific cure for Spamassassin DNS lookup problem

2017-08-14 Thread Gary Stainburn
On Thursday 10 August 2017 18:45:32 Gordon Messmer wrote:
> On 08/10/2017 01:21 AM, Gary Stainburn wrote:
> > I have the following error message in my /var/log/spamd
> >
> > spf: lookup failed: available_nameservers: No DNS servers available!
>
> Try starting spamassassin later.  Run "systemctl edit
> spamassassin.service" and insert two lines:
>
> [Unit]
> After=network-online.target


I will add the code, although updating RPM contents is one of the things I was 
trying to avoid.  Having said that, I have restarted the service after bootup 
has completed and this does not fix the problem.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 7 specific cure for Spamassassin DNS lookup problem

2017-08-14 Thread Gary Stainburn
On Thursday 10 August 2017 18:25:44 Phil Perry wrote:
> > I run SpamAssassin on CentOS 7; the SPF plugin is loaded via
> > /etc/mail/spamassassin/init.pre. I have no trouble with spf at all.
> >
> > Is it possible the problem is with local DNS resolution?
>
> Same here, no issues with spamassassin and SPF.
>
> In addition to Paul's question which seems like the most obvious initial
> avenue of investigation, I assume you have perl-Mail-SPF and
> perl-Net-DNS installed? They should be as both are deps for the
> spamassassin package.

Both deps are installed, and from what I can tell the SPF code was loading 
fine, but then failing when called.

Local DNS resolution was working fine, with the correct entries in 
resolve.conf, and nslookup, dig, and all other services working fine.

The research I had done into this error messsage stated that because of 
problems with Net::DNS  SA had cheated and looked at the internals of the 
module to obtain the DNS list. These internals then broke which meant that SA 
could no longer detect the DNS servers.  By adding 

dns_server  x.x.x.x

to the local.cf  I got round this problem and the error messages have gone.

However, as I said in my other post I am now getting 

spamd[102425]: Use of uninitialized value $rr_type in string eq 
at /usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/AskDNS.pm line 592.

instead

Gary
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 7 specific cure for Spamassassin DNS lookup problem

2017-08-14 Thread Gordon Messmer

On 08/14/2017 01:38 AM, Gary Stainburn wrote:

I will add the code, although updating RPM contents is one of the things I was
trying to avoid.


"systemctl edit" creates a "drop-in" that overrides a portion of the 
vendor-provided file.  It exists specifically to avoid editing 
rpm-provided files.



   Having said that, I have restarted the service after bootup
has completed and this does not fix the problem.



Well, that error can also be caused by Net::DNS being unable to parse 
/etc/resolv.conf, or the spamassassin force_ipv4 or force_ipv6 setting 
with no DNS servers of that address family.


What does your /etc/resolv.conf look like?

You might also try starting spamd manually, and adding "-D dns" to the 
arguments currently used.  That will log a good deal of additional 
information about the DNS configuration, and you should be able to 
figure out where spamd is getting its DNS servers (configuration or 
Net::DNS).


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Custom kickstart post section on usb thumbdrive

2017-08-14 Thread Jerry Geis
Hi All,

I am attempting to create a custom USB drive for kickstart install.

I found this:
1. get the ISO file of CentOS 7

2. mount -o loop CentOS-7.0*.iso /mnt/

3. mkdir -p
/CentOS-7-ISO-respin/{CentOS-7-unpacked,CentOS-7-iso}

4. rsync -avz /mnt/ /CentOS-7-ISO-respin/RHEL-7-unpacked

5. put your kickstart file into
/CentOS-7-ISO-respin/RHEL-7-unpacked

6. add a new line to
/CentOS-7-ISO-respin/RHEL-7-unpacked/isolinux/isolinux.cfg (this way you
can use the ISO also from a DVD)
label linux_ks
  menu label ^Install CentOS 7 with Kickstart
  kernel vmlinuz
  append initrd=initrd.img inst.stage2=hd:sdb2:/
ks=hd:sdb1:/ks.cfg

7. create the ISO with:
/usr/bin/genisoimage -untranslated-filenames -volid
'CentOS-7.0-KS-x86_64' -J -joliet-long -rational-rock -translation-table
-input-charset utf-8 -x ./lost+found -b isolinux/isolinux.bin -c isolinux/
boot.cat -no-emul-boot -boot-load-size 4 -boot-info-table

8. dd
if=/CentOS-7-ISO-respin/CentOS-7-CSB-iso/CentOS-7.0-KS-x86_64-DVD.iso
of=/dev/XXX (where XXX is the Device Name of your USB drive without the
partition number e.g. /dev/sdb) (Careful, that command destroys all data on
the Stick)


But I would also like to create a custom directory on the ISO and put some
files in there for
a custom POST section.

I was not able to find an example with a custom POST section on the ISO.
Anyone have any examples?

Thanks,

Jerry
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Custom kickstart post section on usb thumbdrive

2017-08-14 Thread Paul Heinlein

On Mon, 14 Aug 2017, Jerry Geis wrote:


Hi All,

I am attempting to create a custom USB drive for kickstart install.
[... much snippage ...]
But I would also like to create a custom directory on the ISO and 
put some files in there for a custom POST section.


I was not able to find an example with a custom POST section on the 
ISO. Anyone have any examples?


The trouble I think you'll encounter is that the %post section of the 
kickstart operation is chroot-ed into the new system. You won't be 
able to see the original ISO, as far as I know.


The %pre section is *not* run in the chroot environment, but it's run 
prior to partitioning the system disk, so I don't know how you'd copy 
files unless you did all your partitioning in %pre, reserving one 
partition for your %post data.


I think what I'd do is create and install a custom rpm with the data 
files you want available during %post. Of course, that means you'll 
have to hack the repo on your USB drive, so it's not really a 
lightweight solution.


--
Paul Heinlein <> heinl...@madboa.com <> https://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Power Fail Protection

2017-08-14 Thread Mark LaPierre
On 08/08/17 19:50, Chris Olson wrote:
> 
> Some of our largest systems run Windows because it supports engineering
> applications that we use regularly.  These applications have unattended
> runs that often take between ten and fifteen hours to complete.  We have
> taken the recommendation of the application supplier and equipped these
> Windows machines with UPS protection for 30 minutes at full load.
> 
> The UPSs are Ethernet connected.  A support application on the Windows
> engineering machine communicates with the UPS to detect and address any
> facility power failure.  The long run engineering application is then
> suspended at a restart point and the system is shut down.  We initiate
> job completion manually from the suspension restart point after the
> system has reliable power and is rebooted.
> 
> If we wanted to protect our CentOS systems from facility power failure
> in a similar way, is there operating system or other standard support
> that we might employ?  Most of the Linux-based applications are not as
> critical as the engineering applications on the Windows machines. There
> is a significant amount of processor idle time on several of the CentOS
> systems during non-work hours when the systems are unattended.  Several
> CentOS systems are supported currently with UPSs, but they run out and
> the system loses power if it is unattended.
> ___

You didn't say what brand/model of UPS you are using so I can't be
specific.  Check with the manufacturer of your UPS to see if they have
an application that can communicate power status with your CPU.  Many
UPS devices are capable of signaling power loss.  The UPS can give you
enough warning to initiate a graceful shutdown.

For example APC brand UPS devices.  Many of them can connect to the CPU
through either Ethernet, USB, or serial cable so they can send the bad
news that the power is going down soon.  Check with your UPS
manufacturer first.

-- 
_
   °v°
  /(_)\
   ^ ^  Mark LaPierre
Registered Linux user No #267004
https://linuxcounter.net/

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Power Fail Protection

2017-08-14 Thread John R Pierce

On 8/14/2017 4:01 PM, Mark LaPierre wrote:

You didn't say what brand/model of UPS you are using so I can't be
specific.  Check with the manufacturer of your UPS to see if they have
an application that can communicate power status with your CPU.  Many
UPS devices are capable of signaling power loss.  The UPS can give you
enough warning to initiate a graceful shutdown.

For example APC brand UPS devices.  Many of them can connect to the CPU
through either Ethernet, USB, or serial cable so they can send the bad
news that the power is going down soon.  Check with your UPS
manufacturer first.



NUT supports virtually *ALL* UPS's without messing with manufacturer 
proprietary software, and its in the EPEL repository, kept up to date.



--
john r pierce, recycling bits in santa cruz

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos