Re: [CentOS] CentOS 8 future

2020-12-18 Thread Pete
At 13 December, 2020 Simon Avery wrote:
> Reply-To: CentOS mailing list 
> 
> On Sat, 12 Dec 2020 at 23:55, edward via CentOS  wrote:
> 
> > appears facebook is running centos stream and also helping developing
> > centos.
> 
>  A small but important point of order on that statement, based on the
> article you link;
> 
> "an operating system they derive from CentOS Stream. "
> 
> So Stream is the starting point which Facebook then does "facebook things"
> to and forms their own in-house distro. They're not running Stream.

A few engineers from the OS team at fb gave a talk in brussels earlier this
year. It explains what's different from vanilla stream and what the facebook
things that go into it are:

https://www.youtube.com/watch?v=cA_Nd3crBuA

Skip to 23:30 where they start talking about stream.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] attack

2009-12-24 Thread Pete
On Thu, 2009-12-24 at 11:31 +, Manu Verhaegen wrote:
> Hi,
> 
> My server is under attack allows the attacker to abuse of a php script of a 
> vhost. How can I find what is the script.
> 
> Regards,
>   maverh

Hi Maverh,

I know this may sound like a silly question but how do you know your
server is under attack ? As others have advised, have you checked your
logs on the server ? What are you running that's being attacked ?

/var/log/httpd

/var/log/messages


Regards,

Pete.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Not SOLVED upgrade or install to Centos 7.4.1708

2017-09-24 Thread pete



On 09/24/17 12:28, Gregory P. Ennis wrote:



On 09/19/17 11:01, Pete Geenhuizen wrote:

I upgraded from 7.3 to 7.4 over the weekend.  Everything went well
except that I can't login because the screen is black with a cursor.

If reboot boot the 7.3 kernel 3.10.0-514.26.2.el7.x86_64 kernel
everything works just fine, so my guess is that there's a kernel
issue
with the hardware, specifically the Skylake processor.

Has anyone else run into this problem and if so can how I resolve
the
problem other than using the previous kernel?

ASUSTeK COMPUTER INC.  Z170M-PLUS
VGA compatible controller: Intel Corporation HD Graphics 530 (rev 06)
Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz Skylake

Any help with this would be greatly appreciated.

Pete


On 09/22/17 15:46, Pete Geenhuizen wrote:

After trying the suggestions offered here and various other
suggestions
that I found through various searches I finally solved the problem by
ditching the on board graphics and installing a graphics card.



Pete and others,

I am still having some 7.4 problems.  I just finished a fresh install
of 7.4 on an ASUS motherboard of which Centos now does not recognize
the video monitor.  I was required to do a 'Basic Graphic' install
instead of a full graphic install with the new 7.4 iso. After a
successful install I tried to change the resolution of the screen
display but Centos was unable to do so because it did not recognize the
monitor.  This was not a problem with 7.3.

The Mother board is :
Manufacturer: ASUSTeK COMPUTER INC.
Product Name: B150M-A/M.2
Version: Rev X.0x

The CPU is :
Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz

It does not appear that Centos is recognizing the capability of the
mother board.  Does anyone have ideas as to a solution for this.  I am
not certain even buying a video card would make a difference.

Pete... what card did you purchase that worked???

Greg


Greg,
Look although you are using a different mobo, you are experiencing the 
same problems that I ran into.  At one point I managed to get a 
graphical display but at the resolution was extremely low 800x640 I 
believe, and no way to change it because it didn't look like the kernel 
recognized the monitor at all.


I just took a stab at a card figuring that no one else seemed to be 
having issues. I don't do anything graphically intensive so I just 
looked for what I thought was a good deal , and this card looked like a 
good deal, with a $10 rebate


https://www.amazon.com/gp/product/B00FW5B3ZO/ref=od_aui_detailpages00?ie=UTF8&psc=1

Pete

--
Unencumbered by the thought process.
 -- Click and Clack the Tappet brothers


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] nvidia on 7.6

2019-03-11 Thread pete

Hi Phil,


On 3/11/19 12:25 PM, Phil Perry wrote:

On 11/03/2019 12:41, Pete Geenhuizen wrote:
Hi Pete,

Apologies, that one is our fault. To fix (or rather work around), 
please could you force remove the above package then the yum update 
should proceed smoothly:


rpm -e --nodeps nvidia-x11-drv-340xx-libs

then:

yum update

and reboot your system to ensure you pick up the changes.

Alternatively, just uninstall the nvidia drivers and reinstall them 
which will pick up the latest versions, thus also working around the 
issue above.


No worries some things just happen, your solution worked just fine.

Thanks

Pete

--
If money can fix it, it's not a problem.
 -- Click and Clack the Tappet brothers


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] /etc/passwd aand /etc/shadow out of sync on 4.6 box

2008-01-07 Thread Pete Geenhuizen



On Sun, January 6, 2008 23:12, Joe Klemmer wrote:
> On Sun,
2008-01-06 at 00:39 -0800, Garrick Staples wrote:
> 
>
Rock-n-roll, man.  That did the trick.  You know, there would probably
> be use for a tool that checked the files and made sure they weren't
out
> of sync.  Isn't pam supposed to have that capability?  I
have avoided
> reading/learning anything about it for years.  And
I mean YEARS.  Maybe
> I'll take a peek and see what's in there. 
And maybe I'll get off my @$$
> and figure out Bind/DNS.
>

>   Right.  And maybe Microsoft will change the licensing for
Windows to
> GPL.
> 
> Anyway, thanks much,
> Joe

man pwck
-- 
Unencumbered by the thought
process.
-- Click and Clack, the Tappet Brothers.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Shearing file systems on the network

2008-01-24 Thread Pete Geenhuizen



Joshua Baker-LePain wrote:

On Thu, 24 Jan 2008 at 11:01am, Peter Blajev wrote

I have 4 systems and each one of them has a partition I'd like to be 
remotely

accessible on the other 3 systems.

In other words System1 has Partition1. Systems 2,3,4 should be able to
remotely mount Partition1 from System1. Also System2 has Partition2. 
Then
systems 1,3,4 should be able to remotely mount Partition2 from 
System2 and so

on.

I tried NFS and it works but only in the ideal world. If one of the 
systems

goes down the whole NFS cross-mounting makes the other systems somewhat
unstable. It's a known issue and I believe you guys are aware of it 
but I

just had to see it myself.

What would you recommend? What is the best practice for doing that?


NFS and automount.


I what I'm using and it works just fine.

--
Unencumbered by the thought process.  
-- Click and Clack the Tappet brothers


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 7 disable the the hot corner

2020-05-12 Thread Pete Biggs
On Tue, 2020-05-12 at 16:52 -0400, Jerry Geis wrote:
> I have loaded the gnome-shell-extension-no-hot-corner-3.28.1-11.el7.noarch
> and also the gnome-tweaks.
> 
> When I run gnome-tweaks no where in there do I find the disable hot corner.
> 
> where is that ?

It should be under "Extensions" in gnome-tweaks.  It may be better to
install extensions from https://extensions.gnome.org/ using the Firefox
or Chrome extensions.

> 
> Its annoying when the mouse goes to the upper left and all the windows
> shrink. I wish to disable it. Thanks.
> 
If you are used to other UIs, then it is strange, possibly annoying. I
now get really frustrated when I use Windows and KDE that nothing
happens with the top left corner. YMMV

(This is NOT a queue for a desktop war.)

P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ether-wake

2020-05-18 Thread Pete Biggs
On Sun, 2020-05-17 at 20:25 -0600, R C wrote:
> Ok,  I get that, found it before;  "typically sent as a UDP datagram to 
> port 0, 7 or 9, or directly over Ethernet as EtherType 0x0842"
> 
> 
> The keyword being 'typically',   but what is it that ether-wake actually 
> uses/does?  (I need to forward a WOL packet to a different
> 
> vlan on some Cisco hardware, between two Centos machines).
> 

WoL packets are not routeable/forwardable. They are Layer 2 broadcast
packets that contain the MAC address of the machine that needs to be
woken up. But since you quoted the Wikipedia article on WoL you would
know that and it specifically says what the magic packet is and does.

The format of the packet is unimportant, all that happens is that the
ethernet *card* receives the packet, sees that it's a magic WoL packet
for that card and turns on the hardware "wakeup" line to the machine. 

The packets need to be sent on the same network as the target computer
- we did it a while ago for a very large complex network and it needed
a box behind every single router that could be commanded to send out
the WoL packet for a specific MAC address. We eventually abandoned it.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ether-wake

2020-05-18 Thread Pete Biggs


> actually using UDP. What I am NOT looking for is some patronizing answer 
> disconnected from the question.
> 
> 
> I really wonder why you feel the need to go out on a branch to start 
> lecturing and quoting answers that are not asked for.
> 
> 
> If you don't know the answer, simply don't reply. No one benefits, by 
> you sending email here that doesn't
> 
> have much of anything to do with the topic.

Oh, well. You try and be helpful, get abuse back. 

That's life I suppose. 

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Recover from an fsck failure

2020-05-28 Thread Pete Biggs


> 
> I ran mke2fs to locate the backup superblocks:
> 
> mke2fs -n /dev/mapper/vg_voinet01-lv_log

That will only tell you what mke2fs would do on that machine. I don't
know if it will be the same on every machine.  You should probably run 

 dumpe2fs /dev/mapper/vg_voinet01-lv_log | grep superblock

If that doesn't work, then I suspect it's not recoverable using fsck. 
If you are sure that it is an ext2/3/4 filesystem on there, then you
can try using something like TestDisk to scan for partitions.  It
should be in epel.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] user names

2020-06-01 Thread Pete Biggs
On Mon, 2020-06-01 at 13:13 -0400, Jerry Geis wrote:
> How can I define a local use with "@" in the name
> 
> useradd "bob@myname"  gives error.
> 
> I "need" to have the @ sign in the name -is that possible.   Silly reason -
> the system I am trying to send emails to the linux server has a bug. I'm
> trying to get around it.
> 
useradd is just a program that manipulates the underlying files - so if
you really want to create a user with that name, then manually edit
/etc/passwd and /etc/shadow.  However, at the risk of telling you
things you already know, the '@' is definitely not a standard character
in Unix usernames and it may, or may not, cause problems elsewhere.
(TBH, the only character which will almost certainly break things is
'/'!)

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] migrating from sendmail to postfix, centos 6 to centos 8

2020-06-04 Thread Pete Biggs


> 
> I am getting new hardware for this machine, and plan to setup centos 8, 
> which uses postfix, not sendmail.

sendmail is also available - postfix is just the default. 

>  I've been trying to provision a vm 
> with the proper configuration, but cannot get any emails delivered to root.
> 
> Is there a pointer to a configuration guide that will help me do what I 
> want? I have googled about 100 setups, none of which are what I'm trying 
> to achieve. They all suggest using an alias for root to a normal user, 
> but them that user gets all of the cron, fail2ban, etc emails, instead 
> of delivering them to root on the local machine.
> 
The fact that they are all saying to use an alias must surely be
telling you something!

The issue is that if root is receiving mail, then you must be reading
it as root and that is a really bad thing to be doing. If you don't
want the mail to go to a user, then setup another account purely to
receive the root mail that doesn't have elevated privs. 

BTW, other than the fact you shouldn't login as root, the reason for
this is that the mailbox that receives the mail is owned by the user
and the delivery process is run as that user - except for root, which
is run as a non-privileged user: the last thing you want is for some
random email to possibly be processed as root, especially as you say
you are using procmail.  There is a note in the main.cf file:

   # IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN
   # ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER.

P.




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] migrating from sendmail to postfix, centos 6 to centos 8

2020-06-04 Thread Pete Biggs


> 
> Fair enough, and I now understand the issues with root receiving and 
> handling emails. The problem with the alias is that ALL emails are being 
> sent out to my ISP, and on to the particular user.

Even for local users that are in /etc/passwd?

> 
> I would like to make this user receive emails locally only, obviously 
> not root (for all the very good reasons you pointed out), but some other 
> non-privileged user. I don't know how to get a user setup only for local 
> only delivery to the machine in question, not sent out of the local network.
> 
So something in the postfix configuration is telling it to send mail
elsewhere. Have you changed the postfix config at all?  Because usually
it is happy to deliver local mail for local users.  The aliases file
should have something like 

  root: chuck

where 'chuck' is the local user; that will put the message in
/var/mail/chuck. There's a postfix config variable called
'local_recipient_maps' that determines what is a local recipient - but
the default uses, amongst other things, the standard unix passwd file.

P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] migrating from sendmail to postfix, centos 6 to centos 8

2020-06-05 Thread Pete Biggs
On Fri, 2020-06-05 at 07:32 -0500, Chuck Campbell wrote:
> On 6/4/2020 8:58 AM, Pete Biggs wrote:
> > > Fair enough, and I now understand the issues with root receiving and
> > > handling emails. The problem with the alias is that ALL emails are being
> > > sent out to my ISP, and on to the particular user.
> > Even for local users that are in /etc/passwd?
> Yes, I only have two local users, and email I send on the box ends up at 
> the outside ISP, then comes back via fetchmail, and procmail. I can read 
> it with IMAP from outside. I guess I'll live with this.

So even if you do something like 

   mail chuck

at the command line (with whatever user has a local account) it still
gets sent to the ISP?


> I'm sure it is the RelayHost or RelayDomains that forwards the email 
> outbound to my ISP.

relay_host is the host that mail is sent to if it can't be delivered
elsewhere.

relay_domains is a list of domains the host will relay mail to.

>  If I set up a local only account, those emails try 
> to go outbound as well, but are rejected as there is no registered user 
> of that name at my ISP.

In /etc/postfix/main.cf what is 'local_recipient_maps' set to? Also,
what about 'mydestination'

If you look in /var/log/maillog what does a message log for a local
user look like when sent using the mail command? 

P.



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Modifying username

2020-06-14 Thread Pete Biggs
On Sun, 2020-06-14 at 17:26 -0400, Jay Hart wrote:
> > On 6/14/20 1:39 PM, Jay Hart wrote:
> > > You may need to modify /etc/shadow for consistency.
> > > 
> > > I don't know what to do here.  Need some guidance please.
> > 
> > Run "vipw -s" and make the same change to that file's record for ABCLast.
> > 
> 
> In /etc/passwd the directory was shown in plain text.  So I just moved over 
> in the line and
> changed /home/ABCLast to /home/ALast. Saved file, and exited.
> 
> I don't see a directory name in /etc/shadow using 'vipw -s'
> 
No, there's no directory in /etc/shadow, but the username (the first
field) will need to be changed to match with the one in /etc/passwd.
Apologies if you know this: /etc/passwd contains account information
and is world readable because lots of programs need the information in
it, the encrypted password use to be in that file (hence the name) but
it too was visible and hence available for cracking; /etc/shadow is not
world readable and holds all the "secret" password info; the only thing
linking the two databases is the username, hence that has to match in
the two files.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] halt versus shutdown

2020-06-14 Thread Pete Biggs
On Mon, 2020-06-15 at 01:32 +0200, Leon Fauster via CentOS wrote:
> Working with different OSs can be quite challenging (mentally :-)).
> 
> I wonder why the command "halt" has not same result between EL6 and EL8.
> 
> To shutdown the vm or workstation in EL8 i must use "shutdown now".
> 
> Who mandates this behavior in terms of configuration file?
> 

It's to do with systemd. EL6 used SysV based init and runlevels, EL7 &
EL8 use systemd targets.

If you look at the halt and shutdown commands they are symlinks to
/usr/bin/systemctl now and they are implemented as shims that replicate
the effect of the old SysV processes.

So the following have the same effect:

  "systemctl isolate halt.target"
  "halt"
  "shutdown -H now"
  "systemctl halt"

there are equivalents for "poweroff" and "reboot" as well.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] halt versus shutdown

2020-06-14 Thread Pete Biggs


> fwiw, i've always used 'init 0' to shut down all sorts of unix/linux
> systems. 

In EL7/EL8, init is now a symlink as well because everything is
controlled by systemd.

>   On old school unix, and I think even early Linux, halt was an
> /immediate/ halt, as in catch fire.   might as well hit the power switch.
> 
Not quite. Shutdown is a timed thing so you can tell it to shutdown or
reboot at a certain time or after a certain delay and it can broadcast
messages to the users - it's useful on multi-user systems to be able to
warn users that the system is about to go down. Halt is an immediate
thing without any broadcast messages or delay but it does do the halt
cleanly.  There is an option to halt to not sync the disks - this is
not a wise thing to do and is an emergency option - certainly the
original man pages for halt said something like "only do this if your
disks are on fire".

P.



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] halt versus shutdown

2020-06-14 Thread Pete Biggs


> I'm quite sure that in original Berkeley Unix, as on the VAX 11/780, halt
> was an immediate halt of the CPU without any process cleanup or file system
> umounting or anything.   Early SunOS (pre-Solaris) was like this, too.
> 
The SunOS 4.1.2 man page for halt says 

   NAME
  halt - stop the processor
   SYNOPSIS
/usr/etc/halt [ -oqy ]
   DESCRIPTION
halt writes out any information pending to the disks and then
stops the processor.
 halt normally logs the system shutdown to the system log 
  daemon, syslogd(8), and places a shutdown record in the 
  login accounting file Ivar/admlwtmp. 
  These actions are inhibited if the -0 or -q options are present. 

The BSD 4.3 (that ran on VAXen) man pages say largely similar things:

https://www.freebsd.org/cgi/man.cgi?query=halt&apropos=0&sektion=0&manpath=4.3BSD+Reno&arch=default&format=html

Everything is somewhere on the net :-)

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Blog article about the state of CentOS

2020-06-17 Thread Pete Biggs


> About Oracle as alternative. Oracle Linux is not an alternative to 
> CentOS but for RHEL and if I will force to pay for enteprise system 
> currently I will pay RHEL, not OL. Over this, OL is not the only 
> enterprise distro that a "user" could choose. If support is needed there 
> are SUSE (SLES) and Ubuntu. For who that don't need support there are 
> Debian, Ubuntu, OpenSUSE (I'm talking about the most used but you know 
> that slackware,FreeBSD are in that list), so many alternatives are in place.

I think it's particularly disappointing *if* this is a "policy" from RH
since the other major RHEL clone, Scientific Linux, has not produced an
EL8 offering in favour of using CentOS.

I think all of us here understand the hugely complex process of
producing a quality OS, even when it's "just" a clone of another one.
The official sanctioning from RH was touted as a two-way process:
community input into RHEL and RH support and help of the cloning and
build process. It would be a bit underhand if it turned out that it was
RH's way of creating a two tier system: buy RHEL+support and get timely
updates; use CentOS for free, get security updates, but wait two months
for each upgrade.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firewall questions

2020-06-21 Thread Pete Biggs
On Sun, 2020-06-21 at 14:33 -0500, Chuck Campbell wrote:
> I'm running Centos 7.8.2003, with firewalld.
> 
> I was getting huge numbers of ssh attempts per day from a few specific 
> ip blocks.
> 
> The offenders are 45.0.0.0/24, 49.0.0.0/24, 51.0.0.0/24, 111.0.0.0/24 
> and 118.0.0.0/24, and they amounted to a multiple thousands of attempts 
> per day.

It seems oddly coincidental that they are all x.0.0.y addresses - the
netblocks they belong to are all much bigger than /24.  I can
understand getting attacks from a range of IPs from an ISP or the like,
but the 51.0.0.0/24 is part of a UK government network and I think they
would be all over it if a range of their network was being used for
naughty purposes.

> 
> I did some more research, and decided to use a few rich rules to block 
> these attempts. I currently have these in place:
> 
> #firewall-cmd --list-all
> public (active)
>target: default
>icmp-block-inversion: no
>interfaces: p3p1
>sources:
>services: dhcpv6-client ftp http https imap imaps pop3 pop3s 
> smtp-submission smtps ssh
>ports: 110/tcp 995/tcp 143/tcp 993/tcp 25/tcp 21/tcp
>protocols:
>masquerade: no
>forward-ports:
>source-ports:
>icmp-blocks:
>rich rules:
>  rule family="ipv4" source address="49.0.0.0/24" reject
>  rule family="ipv4" source address="51.0.0.0/24" reject
>  rule family="ipv4" source address="111.0.0.0/24" reject

Is that the correct interface referred to in the zone?  Can you see the
rich rules implemented properly in the output of 'iptables -L'? (They
should be in the chain IN_public_deny.)

> 
> But I still get hundreds of attempts reported in my fail2ban logs from 
> these ip blocks. How is it that the rich rules don't drop these packets 
> before pam/ssh/fail2ban ever get to see them?

Is fail2ban stopping the individual hosts? Do you have the recidive
rule enabled to permaban them?

Do you get legitimate SSH connections from anywhere?  Can you remove
the ssh service and add rich rules to allow certain hosts or netblocks
to connect via port 22?

Finally, do you have a network firewall that can be used to block the
connections?

> There must be some precedence in the firewalling I don't understand.

Yes, there is a precedence, but it should be working in your favour -
the chain 'IN_public' contains the public inbound chain and it should
contain:

   # iptables -L IN_public
   Chain IN_public (2 references)
   target prot opt source   destination 
   IN_public_log  all  --  anywhere anywhere
   IN_public_deny  all  --  anywhere anywhere
   IN_public_allow  all  --  anywhere anywhere
   ACCEPT icmp --  anywhere anywhere

So it should be denying packets before the allowing them (and
the IN_public_allow chain is what contains your ssh service
definition).

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] firewall questions

2020-06-21 Thread Pete Biggs
On Sun, 2020-06-21 at 16:47 -0400, mailist wrote:
> On 2020-06-21 15:33, Chuck Campbell wrote:
> > I'm running Centos 7.8.2003, with firewalld.
> > 
> > I was getting huge numbers of ssh attempts per day from a few specific
> > ip blocks.
> 
> If you can control the ssh clients, switch your port number to a 
> non-standard
> port.  Pick one in /etc/services that does not seem to be allocated.  
> Then change
> "Port" in ssh_config and sshd_config;  If other clients are being used 
> (like Putty),
> it is easy to change it there.
> 
> We used to get at least 50 probes per day on port 22.  Now we get zero.
> 
I used this technique for a number of years - then it got leaked to the
script kiddies the port that was used. We don't have anything
particularly valuable that they were looking for (I don't think!), but
there are lists of subnets & ports out there that the kiddies use so
once one found it, the flood gates opened.  SSH is now protected behind
a VPN.

It's a valid thing to do and makes things much saner, but don't assume
it is a forever solution and don't use it as an excuse to reduce other
protections you may have.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Wrong version of php

2020-06-22 Thread Pete Biggs


> I have googled without finding the answer but how do I make sure
> /all/ processes use php72 rather than the default 54 in CentOS 7?
> Surely there must be a better way than overwriting /usr/bin/php. What
> have I forgotten to do?
> 
You can't/shouldn't do that.  The point of the Enterprise OS is that
versions are consistent throughout the lifetime of the OS, so packages
don't change the default versions because things may break because
something is expecting PHP 5.4 and not 7.2.

If you have an application that needs PHP 7.2, then change the way it
is invoked so it runs using 'php72' instead of just 'php'.

Now, in all honesty I suspect that changing the default version of PHP
isn't going to break many things at the system level; at least not in
the same way as it would if you changed the default python to python3.
But it is something that may save you problems in the future.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Unable to find the used space

2020-06-29 Thread Pete Biggs


> 
> # du -sh /*

Use 'du -xh --max-depth=1 /' it will clean up your output and show you
only things on the root partition.

And as someone else said, deleted but open files are not removed until
the file handle is closed. This is used by some applications to "hide"
totally temporary files. Do 'lsof | grep delete' to see such files.
(This technique is also used by malware to hide their files.)

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS 7 rsyslog and ELK

2020-07-10 Thread Pete Biggs
I asked a similar question about a year ago and didn't get any answers.
So I thought I'd try again.

What do people do to get their syslog messages on CentOS 7 into a
remote ELK stack.  I've tried lots of things involving rsyslog,
filebeat, redis, logstash and so on in lots of different configurations
but nothing really works.

I can get rsyslog to talk directly to logstash (acting as a syslog
server) but the messages don't have facility or severity codes in them
which makes it considerably more difficult to manage the messages.

P.



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 7 rsyslog and ELK

2020-07-10 Thread Pete Biggs

> > What do people do to get their syslog messages on CentOS 7 into a
> > remote ELK stack.  I've tried lots of things involving rsyslog,
> > filebeat, redis, logstash and so on in lots of different configurations
> > but nothing really works.
> > 
> > I can get rsyslog to talk directly to logstash (acting as a syslog
> > server) but the messages don't have facility or severity codes in them
> > which makes it considerably more difficult to manage the messages.
> > 
> 
> The section "b – Routing from rsyslog to Logstash" of the article
> seems to cover a filter that needs to be added. You may have already
> tried this.. but that is about all i can help with currently.
> 
Thanks.  Yes, I was trying to get rsyslog to send JSON to logstash and
I have tried that template. 

A bit more investigation though and it turns out that the firewall on
the logstash server was only letting through tcp packets and it needs
udp. Now I've fixed that, they appear to be talking to each other, but
it certainly doesn't seem to be logging everything.

Progress of sorts!

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 7 rsyslog and ELK

2020-07-10 Thread Pete Biggs
On Fri, 2020-07-10 at 16:44 -0400, Jason Edgecombe wrote:
> I don't use ELK at the moment, but is this helpful?
> 
> % journalctl -f --output=json
> 
> The above command prints the continuous output of the systemd journal in
> json format.
> 
Thanks. The problem is getting that into logstash.  But it's actually
quite useful anyway as it's another method of monitoring what is
supposed to be logged.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Boot failed on latest CentOS 7 update

2020-08-02 Thread Pete Biggs

> On the side note: it is Microsoft that signs one of Linux packages
> now. We seem to have made one more step away from “our” computers
> being _our computers_. Am I wrong?
> 

Secure booting using UEFI requires that the code is signed - that is
the "secure" bit.  Microsoft are the CA for that signing. There's
nothing sinister about it, they aren't signing the RPM package just one
of the bits of code in the package. I seem to remember that Microsoft
were the most vocal advocates for secure booting to get around boot
sector viruses and in order to facilitate a more universal uptake they
committed to signing any UEFI boot code from other OSes so long as it
came from a bona fide source.

You don't have to use UEFI secure booting - most machines can fall back
to legacy booting using BIOS settings. If you do that, you won't use
any Microsoft signed code.

I haven't looked in detail at the bug this all was supposed to fix, but
I think it had the capability of by-passing the UEFI security checking,
hence why the release of the advisory was delayed until the OSes were
patched and why there was a scramble to get everything out in time.
It's a nasty bug and was difficult to fix from what I've heard.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8.2.2004 Latest yum update renders machine unbootable

2020-08-02 Thread Pete Biggs


> 
> You just need to reinstall the kernel and it should work.
> 
> 
Is it possible to bump the kernel version number to make sure the
kernel gets re-installed on automated installs?  Or would this break
the compatibility with RHEL?

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 8 DNS resolution not working as expected

2020-08-06 Thread Pete Biggs
On Thu, 2020-08-06 at 10:26 +0100, isdtor wrote:
> [root@localhost ~]# lsb_release -d
> Description:  CentOS Linux release 8.2.2004 (Core) 
> [root@localhost ~]# cat /etc/resolv.conf 
> # Generated by NetworkManager
> search subdomain.company.com company.com
> nameserver 1.2.3.4
> nameserver 5.6.7.8
> 
> [root@localhost ~]# host foo
> foo.subdomain.company.com has address 1.2.3.4
> 
> [root@localhost ~]# host foo.subdomain
> Host foo.subdomain not found: 3(NXDOMAIN)
> 
> [root@localhost ~]# host foo.subdomain.company.com
> foo.subdomain.company.com has address 1.2.3.4
> [root@localhost ~]# 
> 
> The expected result is that the lookup for foo.subdomain works, like it does 
> under CentOS < 8.

man host

   -N ndots
   The number of dots that have to be in name for it to be considered 
absolute. The default value is that defined using
   the ndots statement in /etc/resolv.conf, or 1 if no ndots statement 
is present. Names with fewer dots are interpreted
   as relative names and will be searched for in the domains listed in 
the search or domain directive in
   /etc/resolv.conf.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 8 DNS resolution not working as expected

2020-08-06 Thread Pete Biggs


> > man host
> > 
> >-N ndots
> >The number of dots that have to be in name for it to be 
> > considered absolute. The default value is that defined using
> >the ndots statement in /etc/resolv.conf, or 1 if no ndots 
> > statement is present. Names with fewer dots are interpreted
> >as relative names and will be searched for in the domains listed 
> > in the search or domain directive in
> >/etc/resolv.conf.
> 
> As per man resolv.conf, the default setting hasn't changed. It is n=1 on all 
> of CentOS 6/7/8.
> 

Does

   host -N2 foo.subdomain

work on CentOS 8?  Does it work if you put ndots: 2 in resolv.conf?

There may have been a change in behaviour - from the tests I've done it
seems more like it's fixing a bug/inconsistency somewhere because doing
 
   host -N1 foo.subdomain 

should not work, but it does on CentOS 7.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Installing devtoolset-6 on CentOS 8

2020-08-18 Thread Pete Biggs
On Mon, 2020-08-17 at 19:28 -0400, Eric Gervais-Despres wrote:
> Has anybody tried (and succeeded) to get gcc 6.3.1 (or devtoolset-6) to
> work on CentOS 8?

As far as I can see SCL & devtoolset are not available for CentOS 8 -
the toolsets are integrated as part of the main distro, and they are
only for newer versions of GCC and not older ones.

> 
> In the Animation and Visual Effect industry, gcc 6.3.1 is still the current
> recommended compiler (see www.vfxplatform.com), and is required to build
> many plugins. Unfortunately, it is not a "minimum requirement"... It is THE
> requirement.
> 
> So I tried to get it from the vault:
> -- 
> sudo dnf config-manager --add-repo=
> http://vault.centos.org/7.6.1810/sclo/x86_64/rh/
> sudo dnf install devtoolset-6
> --
> but I get these messages:
> --
> Error:
> Problem: package devtoolset-6-6.1-1.el7.x86_64 requires
> devtoolset-6-runtime, but none of the providers can be installed
> 
> conflicting requests
> nothing provides policycoreutils-python needed by
> devtoolset-6-runtime-6.1-1.el7.x86_64
> (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to
> use not only best candidate packages

Yes, you are trying to install a CentOS7 package on CentOS8.  It
probably won't work.

> 
> 
> I hate having to install something not officially supported anymore, but
> still officially required for many current software.
> 

It depends what it is about GCC v6 you need - you can control the
dialect of C that GCC act as using the '-std='.  Ultimately though,
just download that particular version of GCC and compile/install it,
it's not a difficult thing to do and most of it is automated.

Strangely though, GNU doesn't seem to think that 6.3.1 exists, the
nearest on the GCC downloads is 6.3.0.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to Migrate Wordpress Website from 32-bit CentOS Linux 6.3 to 64-bit CentOS Linux 8.2 (2004)

2020-08-31 Thread Pete Biggs


> Why are you even posting this to a public list?  Use your blog for
> this kind of thing.  I know you have one, you post it repeatedly to
> random lists. 
> 
At least posting to a public list like this means that there is some
chance people will read the subsequent posts and realise the quality of
instructions.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Run as root on reboot

2020-10-29 Thread Pete Biggs


> 
> By "initial setup", I meant during the initial install of the 
> operating system, starting from "net-install".  Maybe one user is 
> defined.  The reboot command is issued from a script that was 
> initiated by hand. 
> 
So you want it to run as the final part of the install process??

If that's the case, then you should create a kickstart file with the
post installation script in it:

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/installation_guide/sect-kickstart-syntax#sect-kickstart-postinstall

If you want/need it to run the script after the install has completed
and the first reboot, then you need to look at the FirstBoot scripts

https://access.redhat.com/solutions/2028143

P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Setting up NIS on Centos 8

2020-12-06 Thread Pete Biggs
> 
> I found this:
> 
> https://www.server-world.info/en/note?os=CentOS_8&p=nis&f=1
> 
> I've been told in the past that NIS should not be used because of some 
> supposed security issues.
> 
> Can someone site any authoritative documentation concerning the security 
> issues extant in NIS?

There's a lot of documentation out there. Basically YP/NIS transmits
everything over the network in plain text, including password hashes.
combined with no authentication/authorisation mechanism, out of the box
NIS will give your password hashes to anyone who asks for them. Clearly
once a username/password hash has been discovered, it's only a matter
of time before a password is found.

NIS+ is very different in that it is much more security aware, but
consequently much more complex.

> My plan is to set up NIS and NFS on my home network server where I plan 
> to host all the local home network /home directories.  I'll use 
> automount on all the other nodes to mount up the home directories when a 
> user logs on.
> 
If you have a fully private network, then the security issues are not
so bad. It still has its place in things like clusters, but even then
it is being superseded by LDAP.  If you are setting up a system from
scratch, then you really should be looking at using LDAP, it's not that
difficult and there are plenty of tools around to help you manage it
all. 

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Thanks a lot for 8.3 Update

2020-12-07 Thread Pete Biggs
> 
> Thanks a lot for the 8.3 update.😊
> I would like to point out one thing I faced.
> I downloaded the iso from one mirror.
> After installing, I installed a package (rsync).
> Then some packages, including dnf, got downgraded to 8.2.
> Just a test server, not production.
> 
I suspect that not all mirrors are fully synced yet.  My local mirror
(which I sync from an institutional mirror) still has the default 8
version pointing to 8.2.2004 not 8.3.2011

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] https://blog.centos.org/2020/12/future-is-centos-stream/

2020-12-08 Thread Pete Biggs

Forgive a bit of cynicism ...

On Tue, 2020-12-08 at 09:06 -0500, Rich Bowen wrote:
> The future of the CentOS Project is CentOS Stream, and over the next 
> year we’ll be shifting focus from CentOS Linux, the rebuild of Red Hat 
> Enterprise Linux (RHEL), to CentOS Stream, which tracks just ahead of a 
> current RHEL release. CentOS Linux 8, as a rebuild of RHEL 8, will end 
> at the end of 2021. CentOS Stream continues after that date, serving as 
> the upstream (development) branch of Red Hat Enterprise Linux.

"If you want to keep using RHEL for free, you will have to put up with
making sure that our paying customers get better quality releases"

> 
> Meanwhile, we understand many of you are deeply invested in CentOS Linux 
> 7, and we’ll continue to produce that version through the remainder of 
> the RHEL 7 life cycle. 
> https://access.redhat.com/support/policy/updates/errata/#Life_Cycle_Dates

"If you really want to have a stable release for free, stick to 7"

> 
> CentOS Stream will also be the centerpiece of a major shift in 
> collaboration among the CentOS Special Interest Groups (SIGs). This 
> ensures SIGs are developing and testing against what becomes the next 
> version of RHEL. This also provides SIGs a clear single goal, rather 
> than having to build and test for two releases. It gives the CentOS 
> contributor community a great deal of influence in the future of RHEL. 

"CentOS will become the developer playground"

> And it removes confusion around what “CentOS” means in the Linux 
> distribution ecosystem.

Was there any confusion? If there is, then it's caused by the
introduction of things like "CentOS Stream".  There was never any
confusion when it was a straight rebuild.

> 
> When CentOS Linux 8 (the rebuild of RHEL8) ends, your best option will 
> be to migrate to CentOS Stream 8, which is a small delta from CentOS 
> Linux 8, and has regular updates like traditional CentOS Linux releases. 
> If you are using CentOS Linux 8 in a production environment, and are 
> concerned that CentOS Stream will not meet your needs, we encourage you 
> to contact Red Hat about options.

"If you want a production environment, pay for it"

> 
> We have an FAQ - https://centos.org/distro-faq/ - to help with your 
> information and planning needs, as you figure out how this shift of 
> project focus might affect you.

The FAQ generally says "if you want a RHEL environment, then pay for
it"

> 
> [See also: Red Hat's perspective on this. 
> https://www.redhat.com/en/blog/centos-stream-building-innovative-future-enterprise-linux]
> 
Red Hat's perspective is "CentOS is ours now; IBM have told us to make
sure it's pulling its weight or we aren't allowed to put any resources
into it"

So as far as I can see all the RHEL rebuilds are dead now - WhiteBox,
Scientific Linux, now CentOS. Are there any left?

P.




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] https://blog.centos.org/2020/12/future-is-centos-stream/

2020-12-08 Thread Pete Biggs
> 
> FAQ:"Updates for the CentOS Stream 8 distribution continue through the 
> full RHEL support phase."
> 
> What does this "full" exactly means? Will C8S be "closed" in May 31,
> 2024 [*] but RHEL8 still supported through Maintenance support mode 
> until 2029?

I too would be interested to know what happens to CentOS 8 Stream once
focus of RedHat moves to RHEL 9?  The life cycle document says the last
release of RHEL8 will be 8.10, that's a five year road map (since point
releases seem to be every 6 months), so the point releases will end in
2024, presumably the end of the point releases means the end of Stream
updates?  Have these things been thought out that far ahead?


P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] https://blog.centos.org/2020/12/future-is-centos-stream/

2020-12-08 Thread Pete Biggs
On Tue, 2020-12-08 at 17:54 -0500, Matthew Miller wrote:
> On Tue, Dec 08, 2020 at 03:15:17PM +0000, Pete Biggs wrote:

> > "CentOS will become the developer playground"
> 
> This one is categorically not the case. Even Fedora isn't a developer
> playground. Everything landing in CentOS Stream is actually *planned* (with
> emphasis intentional) to go in a future RHEL release.

It's all the talk of SIGs and developing and testing and that Stream
will be the centerpiece of that. That's what I meant. 

> 
> Previously, all the development around RHEL releases was done in secret, in
> the Red Hat black box. Now it's out of the box and can be watched. There may
> be some launch pains, but I expect the average quality of an update hitting
> CentOS Stream to be very high.

I don't get that from the documents released today.  If Stream is *not*
a test-bed, then surely the code that appears in Stream must be fully
formed in secret behind the scenes first. Yes, it will appear piecemeal
rather than in one big chunk, but it has been categorically denied that
Stream is not a RHEL 8.n+1 beta and is more a RHEL 8.n+1 RC/rolling
release. 


I think what a lot of people are concerned about is the rolling-release
aspect of this. There will be no definitive versioning of CentOS in the
future - all you will be able to say is "fully updated" and it won't be
possible to slot a CentOS system in to exactly match a RHEL version.
Will third party RPMs built against RHEL 8.x be installable on a CentOS
8 Stream system? The answer is surely "it depends", but there are a lot
of hardware vendors that target drivers to RHEL releases, which may
well make CentOS non-viable for hardware that doesn't have drivers
built in to the kernel.

I suspect that for a large proportion of scenarios Streams will be
perfectly OK. But we still get software/instruments that specifically
say "only RHEL 7.4" or something like that (yes, it's a support
nightmare).  

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] https://blog.centos.org/2020/12/future-is-centos-stream/

2020-12-08 Thread Pete Biggs
> 

> It is not the same as Rawhide is all I am saying.
> 
> It is based on the current release and it is being modified for some reason.
> 
> That modification can be a bugfix from a reported bug, it can be an
> enhancement for a given package or it can be a security update.
> 
> Each of these updates will be rolled in one at a time.
> 
> It is what will eventually become the next rhel source code in a few
> months for the next point release.
> 
> Only you will know if this will work for your situation.

The problem is that we won't know if it will work.  When CentOS matched
the RHEL point releases we knew that an RPM/driver targeted for RHEL
8.2 has a good chance of working on CentOS 8.2 - but that versioning
match is lost with Stream. So vendors will either have to produce
another version of their RPM for CentOS 8 Stream (and continuously
check to see if it needs to be updated) or, more likely, just not
bother to support CentOS.  It already happens - HPE won't support
CentOS, but they do support RHEL and those RHEL RPMs work with CentOS.
The only Linux they support is RHEL, so we're stuck with our HPE kit. 

> 
> But I will absolutely say that the things they are rolling into RHEL 8.4
> in a few months are not inherently less stable or less secure or
> whatever else you want to call it .. when compared to other Linux distros.

So instead of keeping everything back for a point release, the packages
are set free once they are ready. Stream is a rolling release. And
that's fine, but it's not what people thought they were getting when
committing to CentOS. It has always been promoted as point release
compatible with RHEL and that was it's main attraction to many people.

A separate question. Will a point release of RHEL 8.x be directly a
snapshot of 8Stream on a specific date? Or will RedHat pick and choose
which versions from 8Stream they put into 8.x? i.e. Would it be
possible to clone the 8Stream tree on the date that, say, 8.6 is
released and call it 8.6.stream - would 8.6 be the same as 8.6.stream?


P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] https://blog.centos.org/2020/12/future-is-centos-stream/

2020-12-09 Thread Pete Biggs
On Tue, 2020-12-08 at 19:52 -0800, Brendan Conoboy wrote:
> On Tue, Dec 8, 2020 at 6:00 PM Pete Biggs  wrote:
> 
> > The problem is that we won't know if it will work.  When CentOS matched
> > the RHEL point releases we knew that an RPM/driver targeted for RHEL
> > 8.2 has a good chance of working on CentOS 8.2 - but that versioning
> > match is lost with Stream. So vendors will either have to produce
> > another version of their RPM for CentOS 8 Stream (and continuously
> > check to see if it needs to be updated) or, more likely, just not
> > bother to support CentOS.  It already happens - HPE won't support
> > CentOS, but they do support RHEL and those RHEL RPMs work with CentOS.
> > The only Linux they support is RHEL, so we're stuck with our HPE kit.
> > 
> 
> Cool, I understand where you're coming from.  If the world remained static
> after this announcement I would be more concerned about this scenario.  As
> it is, we're in a dynamic space, and CentOS Stream will be a place that
> hardware vendors can participate as well.

What will be the incentive for vendors to participate? Sure you can
talk the corporate talk about opportunities and ecosystems, but the
bottom line is that it requires investment (at least in time) when they
could just continue supporting RHEL point releases, or possibly every
other point release.

I understand that the reason HPE, for example, don't support CentOS is
that there is no verification suite to ensure compatibility. Since
CentOS is a different beast to RHEL now, are things like that going to
looked at?

> 
> > But I will absolutely say that the things they are rolling into RHEL 8.4
> > > in a few months are not inherently less stable or less secure or
> > > whatever else you want to call it .. when compared to other Linux
> > distros.
> > 
> > So instead of keeping everything back for a point release, the packages
> > are set free once they are ready. Stream is a rolling release. And
> > that's fine, but it's not what people thought they were getting when
> > committing to CentOS. It has always been promoted as point release
> > compatible with RHEL and that was it's main attraction to many people.
> > 
> 
> It's certainly a change.

Yes, yes it is.  It's a major change in philosophy for the distro. It's
a change that should not have been thrown at the community in such a
way. There are ways of delivering and transitioning; there are such
things as change managers to bring the community along with you.
Working to make this change for CentOS 9 in 2023/4 could have been
delivered without much backlash - I don't think I have seen a single
positive comment about this other than from people directly involved
with RedHat/CentOS. There's politics and corporate managers behind this
somewhere.


P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] https://blog.centos.org/2020/12/future-is-centos-stream/

2020-12-09 Thread Pete Biggs
> 
> I think what a lot of people are concerned about is the rolling-release
> > aspect of this. There will be no definitive versioning of CentOS in the
> > future - all you will be able to say is "fully updated" and it won't be
> > possible to slot a CentOS system in to exactly match a RHEL version.
> > Will third party RPMs built against RHEL 8.x be installable on a CentOS
> > 8 Stream system? The answer is surely "it depends", but there are a lot
> > of hardware vendors that target drivers to RHEL releases, which may
> > well make CentOS non-viable for hardware that doesn't have drivers
> > built in to the kernel.
> > 
> 
> Generally if they follow the ABI guidelines I would expect it to work.
> Those are here: https://access.redhat.com/articles/rhel8-abi-compatibility
> 
> For loadable kernel modules there's a kernel ABI.

Yes, and many things work well. My most recent issue was that kit
supplied by HPE (sorry, it's pain is stuck in my mind) had a RAID
controller that needs a driver disk during install - doing the install
time drivers is not a problem, the problem is that they don't support
CentOS, hence I had to use a RHEL driver and out of the 5 available for
RHEL7/8, only one of them worked with a CentOS release. HPE support
don't want to know because they don't support CentOS.

I know this comes under the heading of "Corporate RedHat Policy", but
is RedHat going to do the right thing by CentOS 8 Stream to the level
of lobbying other behemoth corporations such as HPE or Dell to support
it?

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Moving to CentOS 8 Stream

2020-12-09 Thread Pete Biggs


It's got to be done, so may as well test it ...

The FAQ says to do:

   dnf install centos-release-stream
   dnf distro-sync
   
This I did and everything went fine. I checked before doing the distro-
sync and there was a load of new Stream repos in /etc/yum.repos.d

Rebooted the machine and dnf has gone back to only looking in 8.3, and
the stream repos had disappeared.

Looking in the logs I can see this:

2020-12-09T12:28:42Z DEBUG ---> Package centos-stream-release.noarch 8.4-1.el8 
will be installed
2020-12-09T12:28:42Z DEBUG ---> Package centos-linux-release.noarch 
8.3-1.2011.el8 will be obsoleted
2020-12-09T12:28:42Z DEBUG ---> Package centos-release-stream.x86_64 
8.1-1.1911.0.7.el8 will be obsoleted

and 

Installing:
 centos-stream-release  noarch 8.4-1.el8
 Stream-BaseOS 21 k
 replacing  centos-linux-release.noarch 8.3-1.2011.el8
 replacing  centos-release-stream.x86_64 8.1-1.1911.0.7.el8

The centos-stream-release RPM does not contain any repo information,
that was all in centos-release-stream that has been removed. So stream
has deleted itself.

It's not a good start.

I also can't seem to get back to a sensible system and have now got a
system with a mixture of CentOS 8 and CentOS 8 Stream RPMs with no way
of installing the Stream repos from an RPM.

I see that "subscription-manager" has been installed on this system now
which it never was. Is CentOS also going to be part of that ecosystem
as well?

Fortunately this was a throw-away install. I hope no one has tried the
instructions in the FAQ on an important machine!

P.



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Moving to CentOS 8 Stream

2020-12-09 Thread Pete Biggs
> 
> > 
> > I thought I saw a reply from Johnny that streams wasn't quite ready, maybe
> > he will chime in but that's what I thought I saw in a response.

What, in amongst the hundreds of messages, he said it wasn't ready!!
Why publish a FAQ and a web page telling you how to migrate without a
great big banner across it saying "don't rush, it's not ready yet". Or
better, don't publish anything if the instructions don't work.

Sheesh.

P.



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Moving to CentOS 8 Stream

2020-12-09 Thread Pete Biggs
On Wed, 2020-12-09 at 11:00 -0600, Johnny Hughes wrote:
> 
> Put this line :
> 
> dnf swap centos-{linux,stream}-repos
> 
> after
> 
> dnf install centos-release-stream
> 

Is there away to recover the system I tried it on - if I run that
command now I get 

   No match for argument: centos-stream-repos
   Error: Unable to find a match: centos-stream-repos
   
If I try to install centos-release-stream I get 

   Package centos-stream-release-8.4-1.el8.noarch is already installed.

I can't remove it because it would result in removing a protected
package.

Oh well, a wipe and re-install tomorrow probably.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Moving to CentOS 8 Stream

2020-12-10 Thread Pete Biggs
Johnny -
Thanks for that.  It did mostly work - it wasn't keen on installing the
RPM you pointed to, but once it did the distro swap worked and the
system is now only using 8-stream as its repositories.

Thanks

P.




> sure .. you can manually add the one repo required to manually do the
> swap command ..
> 
> Or maybe just install this package and then remove the other one:
> 
> you want:
> 
> http://mirror.centos.org/centos/8-
stream/BaseOS/x86_64/os/Packages/centos-stream-repos-8-2.el8.noarch.rpm
> 
> installed first
> 
> Then remove centos-repos
> 
> Or you could manually create a CentOS-Stream-BaseOS.repo (you could
even
> name it test.repo and remove it later once switched)  this will work:
> 
> [baseos]
> name=CentOS Stream $releasever - BaseOS
>
mirrorlist=http://mirrorlist.centos.org/?release=$stream&arch=$basearch
&repo=BaseOS&infra=$infra
>
#baseurl=http://mirror.centos.org/$contentdir/$stream/BaseOS/$basearch/
os/
> gpgcheck=1
> enabled=1
> gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
> 
> 
> in /etc/yum.repos.d/.repo
> 
> then once the distro-sync command works, remove 
> 
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Update path question in connection with CentOS Stream?

2020-12-10 Thread Pete Biggs


> when someone has installed a CentOS 7.1 in the past,
> 
> and did 'yum update' regularily, his/she got a CentOS 7.8 now without 
> any reinstallation procedure or other complications;
> 
> when the same wanted to update to CentOS 8 he/she had to do a new install;
> 
> what happens to CentOS Stream?
> 
> when some is now installing CentOS Steam and will do
> 
> 'dnf update' or 'yum update' regularily in the future,
> 
> what does he/she get till the "end"?
> 
> is this a rolling release like Win10 which doesn't need to be 
> reinstalled now and in future?
> (the fact that hardware can break is not the question)

Yes, you just continually get updates in 8-stream. There's no quantised
point releases. A fully updated 8-stream install is the equivalent of
the last point release of RHEL8 plus some other bits and those other
bits will accumulate over the 6 months and eventually form the next
point release.

You will continue to get updates in 8-stream until the last RHEL8 point
release (8.10) in 2024. It is unclear to me what will happen then -
will 8-stream remain dormant and get security fixes only? Will it be
removed completely (either deleted or put in vault)?  Will there be an
"upgrade" mechanism to get to 9-stream?

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] 8-stream dnf overly verbose

2020-12-10 Thread Pete Biggs


In moving a test machine from 8.3 to 8-stream the main thing I've
noticed is that dnf has become very verbose. It's as if someone has
turned on the -v permanently.

I've tried using '-q' (it says nothing then) and I've tried adjusting
the debuglevel, but nothing seems to affect it.  I get things like
this:

Downloading: 
http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=BaseOS&infra=stock
Downloading: 
http://mirror.cov.ukservers.com/centos/8-stream/BaseOS/x86_64/os/repodata/repomd.xml|
   0  B --:-- ETA
Downloading: 
http://mirror.cov.ukservers.com/centos/8-stream/BaseOS/x86_64/os/repodata/c2f9210df3e5c24d45228e360eb1f405367c1286d36ec91bf930abb944e3ac44-primary.xml.gz
Downloading: 
http://mirror.cov.ukservers.com/centos/8-stream/BaseOS/x86_64/os/repodata/b412debc52ee7c094b8de2c57a0d6d8827828154a6cd0e1995d588273028a4fe-filelists.xml.gz
Downloading: 
http://mirror.cov.ukservers.com/centos/8-stream/BaseOS/x86_64/os/repodata/6cd252c469b0dd0c67bc8d8b4ab2df44fb24de52c93decdfe7acc77b97361490-comps-BaseOS.x86_64.xml.xz
CentOS Stream 8 - BaseOS
 13 MB/s | 2.3 M

For every repo when there's nothing cached. It never used to do this.
How can I turn off the "Downloading:" messages?

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 8-stream dnf overly verbose

2020-12-11 Thread Pete Biggs
On Fri, 2020-12-11 at 11:13 -0500, Matthew Miller wrote:
> On Fri, Dec 11, 2020 at 03:53:04PM +, Randal, Phil wrote:
> > Funnily enough mere mortals like me aren't allowed to view that bug report.
> 
> Are you sure? I am able to see it without logging in.
> 
> 
> > I've filed a bug: https://bugzilla.redhat.com/show_bug.cgi?id=1906839
> > on CentOS Stream distribution.
> 
It's been changed. I couldn't see it either when it was first posted.
It's open now.

One might cynically think that not all ducks were correctly lined up
for this brave new world scenario. :-)

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] question centos stream 8 applying updates

2020-12-11 Thread Pete Biggs
On Fri, 2020-12-11 at 22:05 +0100, Gionatan Danti wrote:
> Il 2020-12-11 19:26 Walter H. ha scritto:
> > with CentOS Stream there are only updates till 2024(!) not 2029 as it
> > be expected ...
> 
> Is that officially confirmed? If RHEL 8 is expected to have an 8.10 
> release sometime in the 2028-2029 timeframe, and if any updates should 
> really hit Stream-8 before, the latter should have the same EOL date.
> 
Somewhere in amongst the vast number of posts, someone said that the
release cadence for point releases was 6 months with the final release
being 8.10 in 2024. After that RHEL 8 goes into maintenance mode and
there will be no more content added to 8-stream (because it had reached
the end of it's useful life as a pre point release distro).

I think it's still not clear what exactly will be the fate of 8-stream
after 2024. The implication is that 9-stream will be active by then and
8-stream will just disappear. In some ways it would be nice if it was
frozen but kept, but it won't receive any bug/security fixes, so it may
be deemed too "dangerous" to allow people access to it. I suppose it's
natural home would be vault.centos.org, but we will have to see what RH
think of that.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rare but repeating system crash in C7

2021-01-03 Thread Pete Biggs
> 
> I commented out those entries in /etc/auto.master before modifying the
> fstab entry:
> 
> UUID=259ec5ea-e8a4-465a-9263-1c06217b9aaf   /mnt/backup
> ext4,x-systemd.automount,x-systemd.idle-timeout=15min   noauto  0   2

That's not correct.  See 'man fstab'. It should be 

device  mount-point  filesystem-type  options   dump   fsck

So you should have:

UUID=259ec5ea-e8a4-465a-9263-1c06217b9aaf  /mnt/backup  ext4   
x-systemd.automount,x-systemd.idle-timeout=15min,noauto 0 2


> 
> which is exactly as it was before except for the x-systemd entries as you
> described.

Yeah, you put them in the wrong place.


P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream suitability as a production webserver

2021-01-05 Thread Pete Biggs
> 
> Given we are not developing drivers or applications (other than websites
> and web applications), is the change a non-issue for my use-case? I've seen
> it written that CentOS Stream is the "development version" of RHEL but also
> that we shouldn't have considered RHEL to be the beta for CentOS. Others
> have said to think of CentOS more like RHEL RC-1. I just don't know how the
> stability will compare and we have historically always chosen CentOS for
> its stability (and of course price).

There's been a lot of information and mis-information being bandied
around on websites from people who don't really quite understand what's
going on. I hope I don't contribute to the confusion! It wasn't helped
by the, frankly, heavy-handed way it was handled by RH.

One of the problems is that people are trying to put a label on what 8-
stream is - such as development version, or RC, or beta version or
whatever. To be honest all we can do is to try and understand what RH
want. As far as I understand it, 8-stream accumulates new versions of
packages that will collectively go to make up the next point release of
RHEL8. We have been told, and we can only take it at face value, that
the versions that go into 8-stream will be final, QC'd packages: they
are not test, development or beta versions, nor are they "work in
progress". 8-stream will be a complete and functioning, stable distro.
So rather than waiting to get the new versions of things once every 6
months, 8-stream gets them when they are ready.

The confusion about the "development" label is that RH said that 8-
stream will be the distro used for their development process. So
internally things will be developed and compiled in an 8-stream
environment. They have never said that the development packages will
ever be visible or available in 8-stream itself until they are ready to
be set free.

TBH I would have thought that this exactly how RH operate internally at
the moment - they must have, say, a pre-8.3 environment that they put
packages in so that when new packages are developed that can be
compiled and everything is compatible. I really can't imagine that
packages are developed in isolation until there's a big 8.3 compile
time. All they are doing is making that internal system a public thing.

Now it's certainly possible that from RH point of view, releasing the
packages into the wild is a very good way of finding bugs that might
have slipped through QC - there is after all already a steady stream of
updates between point releases. So the benefit for RH is that paying
customers get potentially fewer updates between releases, but the
implication is that 8-stream will be no less stable than CentOS 8
currently is.

The rhetoric from RH is that the tooling of the 8-stream system is not
fully in place yet, but should be soon.  Again, we can only take them
at their word and watch what happens. And I must stress that I am no RH
apologist: I think it was all handled incredibly badly by them and they
desperately need to get some change management experience!!

If you are considering using 8-stream then you need to understand that
there is no specific point-release configuration that you can base
things on - you cann't say that this is "equivalent to RHEL 8.5" or
whatever; this is important if you need to use 3rd party drivers during
install as they are based on specific configurations (but hey, install
CentOS 8.2 and move to 8-stream from there and upgrade). Also the
lifetime of 8-stream is half what you've been used to - so come 2024,
it will die; but 9-stream will have existed for at least a couple of
years by then, so there is a roadmap. 

As for what you should do, than no one can really tell you. My advice
to others has been to watch, evaluate, test. If you are running bog
standard web servers with nothing exotic, then I have a feeling that 8-
stream will work; if you are running 3rd party apps on a web service
where versions matter, then you need to think carefully and consider
switching to one of the rebuild distros.

> 
> Of course, a lot of this is somewhat dependent on what DigitalOcean will
> decide to provide image wise moving forward.

I suspect that as more and more things become containerised (and boy do
I dislike containers), the actual underlying OS will become
considerably less important. 


P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] LTS

2021-01-12 Thread Pete Biggs
On Tue, 2021-01-12 at 14:47 +0530, Thomas Stephen Lee wrote:
> On Tue, Jan 12, 2021 at 12:39 PM John R. Dennison  wrote:
> > 
> > On Tue, Jan 12, 2021 at 12:00:00PM +0530, Thomas Stephen Lee wrote:
> > > 
> > > CentOS Linux can continue as Fedora LTS or something similar with a
> > > five-year life cycle. After five years, users can opt for paid upgrades.
> > > We can also work with System manufacturers to pre-install the free LTS on
> > > their products, which will increase our user base.
> > 
> > Who is this "we" you speak of?
> 
> Anybody connected to CentOS (Users, Developers, Companies, SIGs ...)
> 

> 
CentOS is a RedHat entity these days. They already have an LTS product
called RHEL which you can pay for, why would they create another one?

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Transition test report going from CentOS8 to Debian 10.

2021-02-05 Thread Pete Biggs


> 
> I did the move and also looked at several source RPMs. One thing to note
> is that by default, you'll end up with packages replaced by updated
> packages from UEK repository. I've removed the UEK repo and replaced all
> packages with the corresponding base packages. That brings you very close
> to what you have with RHEL/CentOS. Additionally what I found in the source
> RPMs is that Oracle decided to add some patches/changes fixings issues
> tracked in Oracle tracking system.
> 
> I don't think these changes are a problem because they mostly fix things
> which maybe RedHat voted not to fix. At least that's my impression.
> 

If you mean that Oracle has patched the base packages, then surely it
is then no longer a RHEL clone. The whole point of CentOS was that it
was a RHEL clone, warts and all.  In that context it doesn't matter how
close you get to RHEL, it still isn't the same.

P.




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] R730xd & SD card identfication

2021-03-07 Thread Pete Biggs
On Sun, 2021-03-07 at 11:17 -0600, Gregory P. Ennis wrote:
> Everyone,
> 
> We have migrated a platform to a Centos 8 host using kvm guest machines
> 
> Recently I tried to copy one of the guests to the external SD card on
> the back of the Dell R730xd, but I have not been able to get the Centos
> 8 host to recognize the SD card.
> 
> I can use DRAC interface of the R730xd to see that the SD card is being
> recognized and the status of the external SD slot is turned from
> inactive to active when the card is inserted.
> 

I have a nagging feeling at the back of my mind that that slot is
associated with the iDrac system and not the main board.  

In any case doesn't that need a vFlash card not a standard SD/SDHC
card? From Wikipedia:

  https://en.wikipedia.org/wiki/Dell_DRAC

   To take advantage of storage greater than 256 MB on the iDRAC6
   enterprise, Dell requires that a vFlash SD card be procured through
   Dell channels. As of December 2011, Dell vFlash SD cards differ from
   consumer SD cards by being over-provisioned by 100% for increased
   write endurance and performance.[21]
   
   While there are no other known functional differences between a
   Dell-branded vFlash SD card and a class 2 or greater SDHC card, the
   use of non-Dell media prevents the use of extended capacities and
   functions.
   
P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] R730xd & SD card identfication

2021-03-08 Thread Pete Biggs


> 
> I am beginning to be persuaded you are right.  However, I have seen
> some posts about putting vmware either on the SD card or internal usb
> stick that made me think the SD card could be addressable.  If Dell has
> this limited to Dell flash cards instead of a regular SD card that
> might explain some of what I am seeing.
> 

You can get an Internal Dual SD Module (IDSDM) addon for those machines
- they are different to the iDrac based vFlash card. And yes, you can
boot a hypervisor from the internal SD card.

Also, apparently, neither the vFlash slot nor the IDSDM are hot-
pluggable.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-04-27 Thread Pete Biggs
On Tue, 2021-04-27 at 09:36 -0400, Carlos Oliva wrote:
> Thank you for your response Rich. I have heard that Stream is beta 
> releases of RH -- rather distressing. Is this a proper characterization?
> 
You heard wrong.

Stream is effectively a rolling early release of the next point release
of RHEL. The packages in stream are fully tested and have gone through
QA.  They are not beta releases.

The disadvantage of Stream is that it doesn't have the full 10 year
support of RHEL and doesn't have the full binary compatibility to RHEL.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-04-27 Thread Pete Biggs

> > 
> 
> My comment was just to balance Pete's as the truth between Pete's 
> statement and Carlos feelings is where I'm sure my comment pointed... 
> 

Out of interest, do you think my statement is factually incorrect? If
so, in what way?

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-04-29 Thread Pete Biggs
> 
> Quite agree. For me, not too knowledgeable in these things person, this 
> looks exactly what Fedoraa while ago  was: huge opening of RedHat to 
> wide open source community. Maybe Fedora didn't live up to the 
> expectation, then good luck to CentOS to live up to this expectation.

I don't think that is the case, quite the opposite. Fedora is way more
bleeding edge than RHEL/Stream, Fedora leads to a version that will
form the basis of the next major version of RHEL. My feeling (without
any real knowledge) is that the community involvement with Fedora was
seen as a benefit and now they are doing the same thing with RHEL -
that community input into RHEL is via Stream.

It has been said a few times that Stream is, in effect, the distro that
RH develops on: it used to be internal to RH, now it's not. It was RH's
own internal rebuild of RHEL. Opening up this to the outside world
allows other people (SIGs, spins etc.) to produce code on a level
playing field with RH developers.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] where to get reliable/open source license manager

2021-05-29 Thread Pete Biggs


> 
> I know flexlm but I never heard of an open source project with the same
> functionality. Open source is usually free to use so there is no need to
> control the number of licenses used :-)
> 
There is an OpenLM that, ISTR, is a replacement for FlexLM. I've used
the tools associated with it to analyse FlexLM logs.  However looking
at it, it now seems to be a commercial enterprise.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] where to get reliable/open source license manager

2021-05-29 Thread Pete Biggs
> 
> If your code is written in Python, what’s to stop users from just
> rewriting the license check?

In my youth I realised that a licensed package was calling a separate
executable to check the license - the return code determined if the
product was licensed. I replaced the license code with a shell script
that returned '1' and it all worked.  Simple, naive days.


P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Security Updates not properly flagged

2021-06-21 Thread Pete Biggs
> 
> There are probably more security updates which should be installed by
> yum --security but those are the packages I am most interested in.
> 
> Please change as necessary to allow yum --security to work.
> 
CentOS does not provide the metadata to allow the --security flag to
work.

It doesn't provide it because that information from Redhat is
proprietary and not open source.

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Warning: No matches found for: clamav on CentOS Linux release 7.9.2009 (Core)

2021-07-19 Thread Pete Geenhuizen
The latest version in in epel-testing, yum  --enablerepo=epel-testing 
update clam* will do the trick


On 7/19/21 5:04 AM, Kaushal Shriyan wrote:

Hi,

I am running CentOS Linux release 7.9.2009 (Core) and installed epel
repository.

# rpm -qa | grep epel
epel-release-7-13.noarch
# cat /etc/redhat-release
CentOS Linux release 7.9.2009 (Core)
#yum search clamav
Loaded plugins: fastestmirror
Determining fastest mirrors
  * base: mirrors.piconets.webwerks.in
  * extras: mirrors.piconets.webwerks.in
  * updates: mirrors.piconets.webwerks.in
base

 | 3.6 kB  00:00:00
docker-ce-stable

 | 3.5 kB  00:00:00
elastic-7.x

| 1.3 kB  00:00:00
extras

 | 2.9 kB  00:00:00
ius

| 1.3 kB  00:00:00
mariadb

| 2.9 kB  00:00:00
nginx

| 2.9 kB  00:00:00
updates

| 2.9 kB  00:00:00
(1/10): base/7/x86_64/group_gz

 | 153 kB  00:00:00
(2/10): extras/7/x86_64/primary_db

 | 242 kB  00:00:00
(3/10): elastic-7.x/primary

| 288 kB  00:00:00
(4/10): docker-ce-stable/7/x86_64/primary_db

 |  62 kB  00:00:00
(5/10): docker-ce-stable/7/x86_64/updateinfo

 |   55 B  00:00:00
(6/10): ius/x86_64/primary

 | 100 kB  00:00:01
(7/10): updates/7/x86_64/primary_db

| 8.8 MB  00:00:04
(8/10): base/7/x86_64/primary_db

 | 6.1 MB  00:00:05
(9/10): nginx/7/x86_64/primary_db

|  67 kB  00:00:04
(10/10): mariadb/primary_db

|  36 kB  00:00:05
elastic-7.x

   880/880
ius

   467/467
Warning: No matches found for: clamav
No matches found

Am I missing anything? Please suggest further. Thanks in Advance.

Best Regards,

Kaushal
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos



--
Unencumbered by the thought process.
 -- Click and Clack the Tappet brothers

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] hosts.deny, fail2ban etc.

2021-07-27 Thread Pete Biggs
On Tue, 2021-07-27 at 16:43 -0400, H wrote:
> > Running CentOS 7. I was under the impression - seemingly mistaken -
> > that by adding a rule to /etc/hosts.deny such as ALL: aaa.bbb.ccc.*
> > would ban all attempts from that network segment to connect to the
> > server, ie before fail2ban would (eventually) ban connection
> > attempts.
> 
> This, however, does not seem correct and I could use a pointer to
> correct my misunderstanding. How is hosts.deny used and what have I
> missed?

hosts.deny is only used by specific programs that use TCP wrappers. It
is not a general "deny this host access".

Also note that fail2ban operates on individual hosts, not subnets.

> 
> Is it necessary to run:
> 
>  iptables -I INPUT -s aaa.bbb.ccc.0/24 -j DROP
> 
> to drop incoming connection attempts from that subnet?
> 
If you use iptables yes, probably.  Firewalld has a specific drop zone
that you can use:

  firewall-cmd --zone=drop --add-source=aaa.bbb.ccc.0/24

(with suitable --permanent flag if you want it permanent).

P.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Gnome unlocks all desktop sessions

2021-11-09 Thread Pete Huckelba

All,

I am trying to figure out the logic of why Gnome is unlocking all of my 
desktop sessions.  In my office I am logged into a CentOS 7 Gnome 
desktop, X :0.  I then lock the screen and go home.  Once home, I log 
into my work computer and start a new vncserver on :1.  If I lock and 
then unlock :1, ALL desktop sessions are unlocked, including :0.


This can be observed with a laptop and watching :0 unlock when unlocking 
VNC session :1, or by launching multiple VNC servers.  In one test I 
created vnc sessions on :1, :2, :3, :4, I connected to each and locked 
each desktop.  I then unlocked one session and noticed all sessions 
unlocked at the same time.  While the unlocking of VNC :1-:4 is quirky, 
at least it is still protected by the authentication provided by VNC; 
the unlocking of :0 is the trouble.


Can anyone provide clarity or a work around to this?

-Pete

tigervnc-server.x86_64 1.8.0-22.el7
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 7 on Dell after update and reboot running at HZ not Mhz

2021-12-23 Thread Pete Biggs
On Wed, 2021-12-22 at 22:02 -0500, Jerry Geis wrote:
> I have a Dell R320
> 
> 
> What on earth is making this machine run sooo slow ???
> 
> Its OFF by a factor of 10 - it should be 1800 mhz
> 
I have lots of R440 and one of them went like this. I tried lots of
things to get it back up to full speed, in the end the only thing that
worked was to completely remove power - not just reboot or power off or
IPMI power control, completely remove power for 10 mins.  When it came
back it was full speed again.

I suspect it had got confused in the BIOS or something.

P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] printing on C8S

2022-01-07 Thread Pete Biggs
On Fri, 2022-01-07 at 10:21 -0500, Fred wrote:
> John, it is a Brother DCP7065DN, on the hardwired network and visible to
> all the computers here.
> 
> Actually, I just installed Mate (can't stand that Gnome-thing) but neither
> it nor Gnome shows any printer config utilities.
> 
> Barry, I'll check into lpadmin. Still, I'd think there would be something
> actually visible in one of the menus, and as far as I can see there isn't.

In Gnome it's in Settings - i.e. top bar, right menu -> settings.  It
changes position sometimes it might be at the top level of settings or
under devices.

The "official" way of dealing with CUPS printers is to use the web
interface - i.e. http://localhost:631 - that should work on all systems
and all environments so long as you have cuspd running.

P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 dnf fails

2022-02-14 Thread Pete Biggs
On Mon, 2022-02-14 at 05:55 -0600, Bill Gee wrote:
> Every time I run dnf, I get this:
> 
> =
> [root@vmhost2 ~]# dnf upgrade 
> CentOS Linux 8 - AppStream
>70  B/s |  38  B 00:00 
> Error: Failed to download metadata for repo 'appstream': Cannot prepare 
> internal mirrorlist: No URLs in mirrorlist
> =
> 
> I tried disabling the repository, but that only gives me exactly the
> same error for the baseos repository.  I doubt it is a problem in the
> .repo files.  Something else is going on.
> 
> Ping to mirrorlist.centos.org works on both ipv4 and ipv6, so I know
> that both name resolution and network connectivity are working.
> 
That's because you are still on CentOS 8 not 8-stream.  The C8
repositories are now empty. (The equivalent repo for 8-stream is
labelled "CentOS Stream 8 - AppStream".)

To move to 8 Stream, see https://centos.org/download/

You will also probably soon get some recommendations to not move to 8
stream and to use one of the other clone distros ...

P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 dnf fails

2022-02-14 Thread Pete Biggs
On Mon, 2022-02-14 at 06:36 -0600, Bill Gee wrote:
> H.  I thought I was already on stream, but apparently not. 
> /etc/redhat-release says it is not stream.
> 
> I looked for a method to upgrade.  Found some notes at techrepublic.
> The first step is to install centos-release-stream, which fails.  So
> what is the method for doing an upgrade?

I gave you the link for the official way of doing it:

  https://centos.org/download/


Click on the "CentOS Stream" purple bit at the top, then on the '8'
purple bit. Then scroll down to "Converting from CentOS Linux 8 to
CentOS Stream 8". If your machine hasn't been updated for a while, you
might need to add '--allowerasing' to the comand line to swap the
distros.

If it doesn't work, then please let the list know any error messages so
someone can help you.

P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Compatible SATA controller needed

2022-03-27 Thread Pete Geenhuizen
I'm trying to install Centos 8 on an older PC but it fails because the 
SATA controller isn't supported.
Anyone have a source for a PCI/ePCI controller card that is compatible 
with Centos 8?

Thanks
Pete

--
Unencumbered by the thought process.
 -- Click and Clack the Tappet brothers
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Compatible SATA controller needed

2022-03-27 Thread Pete Geenhuizen
I've already checked ELRepo for a possible driver and have tried some 
that looked promising but no success.

Thanks

On 3/27/22 15:23, Akemi Yagi wrote:

On Sun, Mar 27, 2022 at 11:55 AM Pete Geenhuizen
wrote:


I'm trying to install Centos 8 on an older PC but it fails because the
SATA controller isn't supported.
Anyone have a source for a PCI/ePCI controller card that is compatible
with Centos 8?
Thanks
Pete


Your controller might be supported by one of the ELRepo's kmod packages.
This can be checked if you provide the device ID pairing [:] as
reported by 'lspci -nn'.

Akemi
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos



--
Unencumbered by the thought process.
 -- Click and Clack the Tappet brothers
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Compatible SATA controller needed

2022-03-27 Thread Pete Geenhuizen
I've gone through the BIOS and tried all the combinations that were 
available but still no joy.  I used ELRepo's method of determining the 
card type, and the result was none yielded a positive result.


After trying all combinations  my only course of action is to fins a 
card that is compatible and ignore the controllers that I currently have.


Thanks

On 3/27/22 16:08, Robert Heller wrote:

At Sun, 27 Mar 2022 12:23:21 -0700 CentOS mailing list  
wrote:


On Sun, Mar 27, 2022 at 11:55 AM Pete Geenhuizen
wrote:


I'm trying to install Centos 8 on an older PC but it fails because the
SATA controller isn't supported.
Anyone have a source for a PCI/ePCI controller card that is compatible
with Centos 8?
Thanks
Pete


Your controller might be supported by one of the ELRepo's kmod packages.
This can be checked if you provide the device ID pairing [:] as
reported by 'lspci -nn'.

Also: what BIOS mode is the SATA controller operating in? The SATA firmware in
some PCs implement various "weird" modes, including "RAID" (no, not really
hardware RAID, just some kind of half BIOS half MS-Windows driver software
RAID hack), Make sure the SATA controller is in AHCI mode and not in some
other mode. If it is in AHCI mode, it might just work out-of-the-box.


Akemi
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos





--
Unencumbered by the thought process.
 -- Click and Clack the Tappet brothers
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Package of GCC 12 on CentOS 7

2022-06-20 Thread Pete Biggs
On Mon, 2022-06-20 at 09:31 +0100, david allan finch wrote:
> Is there an rpm of GCC 12 (or at least higher than 9) available to 
> download and install, or is it a case of downloading and build from the 
> source yourself?
> 
That's what Software Collections is for.

  https://www.softwarecollections.org/

Specifically you need one of the devtoolset collections - it goes up to
11 which, unsurprisingly, provides gcc-11 on CentOS 7. So:

# yum install centos-release-scl
# yum install devtoolset-11
# scl enable devtoolset-11 bash

and gives:

# gcc -v
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/opt/rh/devtoolset-11/root/usr/libexec/gcc/x86_64-redhat-linux/11/lto-wrapper
Target: x86_64-redhat-linux
Configured with: ../configure --enable-bootstrap 
--enable-languages=c,c++,fortran,lto --prefix=/opt/rh/devtoolset-11/root/usr 
--mandir=/opt/rh/devtoolset-11/root/usr/share/man 
--infodir=/opt/rh/devtoolset-11/root/usr/share/info 
--with-bugurl=http://bugzilla.redhat.com/bugzilla --enable-shared 
--enable-threads=posix --enable-checking=release --enable-multilib 
--with-system-zlib --enable-__cxa_atexit --disable-libunwind-exceptions 
--enable-gnu-unique-object --enable-linker-build-id 
--with-gcc-major-version-only --with-linker-hash-style=gnu 
--with-default-libstdcxx-abi=gcc4-compatible --enable-plugin 
--enable-initfini-array 
--with-isl=/builddir/build/BUILD/gcc-11.2.1-20210728/obj-x86_64-redhat-linux/isl-install
 --enable-gnu-indirect-function --with-tune=generic --with-arch_32=x86-64 
--build=x86_64-redhat-linux
Thread model: posix
Supported LTO compression algorithms: zlib
gcc version 11.2.1 20210728 (Red Hat 11.2.1-1) (GCC) 

P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Package of GCC 12 on CentOS 7

2022-06-20 Thread Pete Biggs
On Mon, 2022-06-20 at 09:20 -0400, Mike Burger wrote:
> On 2022-06-20 05:03, Pete Biggs wrote:
> > On Mon, 2022-06-20 at 09:31 +0100, david allan finch wrote:
> > > Is there an rpm of GCC 12 (or at least higher than 9) available to
> > > download and install, or is it a case of downloading and build from 
> > > the
> > > source yourself?
> > > 
> > That's what Software Collections is for.
> > 
> >   https://www.softwarecollections.org/
> > 
> > Specifically you need one of the devtoolset collections - it goes up to
> > 11 which, unsurprisingly, provides gcc-11 on CentOS 7. So:
> > 
> > # yum install centos-release-scl
> > # yum install devtoolset-11
> > # scl enable devtoolset-11 bash
> > 
> 
> Pete,
> 
> As David was asking about obtaining and installing GCC 12, wouldn't 
> installing GCC 11, as noted above,  leave him downlevel?
> 

He said "or at least higher than 9".  

P.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] LibreOffice on CentOS 7

2022-11-03 Thread Pete Geenhuizen
Why not simply download the latest and greatest version LibreOffice from 
their we site I've been doing that for several years on both Centos 7 
and now Rocky 8 and it has worked without fail.


On 11/3/22 10:46, H wrote:

On 11/02/2022 03:53 PM,jefflp...@twc.com  wrote:

3.10.0-1160.76.1.el7.x86_64. I check for updates every day.

Jeff

-From: "H"
To: "CentOS mailing list"
Cc:
Sent: Wednesday November 2 2022 6:28:52AM
Subject: Re: [CentOS] LibreOffice on CentOS 7

  On November 1, 2022 5:13:49 PM EDT, Josh Boyer  wrote:
  >On Tue, Nov 1, 2022, 5:05 PM H  wrote:
  >
  >> I am running the default version of LibreOffice 5.3.6.1 on CentOS
7.
  >This
  >> is quite an old version and has a serious bug in Calc, possibly an
  >errant
  >> pointer, that frequently locks up spreadsheets.
  >>
  >> Has anyone installed a later version of LO on CentOS 7? I would
  >prefer a
  >> version that is not flatpak, snap or appimage etc...
  >>
  >
  >Could you elaborate why you would like to avoid those packaging
  >formats?
  >
  >josh
  >___
  >CentOS mailing list
  >CentOS@centos.org
  >https://lists.centos.org/mailman/listinfo/centos
  />
  A general dislike of anything that gets between the operating system
and an application potentially introducing its own complications.

  Does anyone happen to know what the latest native version for CentOS
7 is?
  ___
  CentOS mailing list
  CentOS@centos.org
  https://lists.centos.org/mailman/listinfo/centos
  />
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

That seems to be version 3.10.0, or? As I wrote, I am running 5.3.6.1...

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos



--
Unencumbered by the thought process.
 -- Click and Clack the Tappet brothers
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] C7, removing zoom problem

2023-02-08 Thread Pete Geenhuizen
I've made to move to Rocky 8 after it was released and there is support 
for MATE and if you prefer lightdm as a window manager.  It has some 
minor quirks, but all in all it works just fine.
I've not tried it yet but there is also a Rocky 9 MATE live image 
available https://docs.rockylinux.org/en/guides/desktop/mate_installation/


Pete

On 2/7/23 23:53, Fred wrote:

ah, that's OK for now, as long as it works.

I'm trying to build up the courage to do a full system upgrade to
Rocky.latest. I hate doing upgrades, it's such a pain in the rear to get
everything working again, and get all my tweaks back into place. I despise
Gnome 3+, and prefer Mate. Someone (EPEL ??)  built Mate for C7, but the
existing binaries for C8 don't work very well, there are none that I know
of for  C9, and AFAIK Rocky is the only Centos clone that supports Mate.
there IS Ubuntu Mate, but I am more comfy with RH-derived systems.

One thing I won't have to do anymore is set up email (used to have my own
domain for email, but moved and can't get a static IP anymore, decided it
was too much bother to do the ddns thing) along with POP3 for my wife to
use. We now just use gmail.

But I see that the time for said upgrade is drawing nearer and nearer.

Fred

On Tue, Feb 7, 2023 at 9:22 PM Ian Mortimer  wrote:


On Mon, 2023-02-06 at 21:13 -0500, Fred wrote:


well, as one of the earlier posters showed how, I did remove the
existing
one then installed the new one (the one that Zoom offers for Centos-
7, not
the one for Centos-8, which has the problem you describe) and voila,
works
like a charm!

Yes but that's the old version - 5.13.4.711 not the latest 5.13.7.683.
"Check for Updates" will tell you there's a new version but you'll be
stuck with that old version until you upgrade from CentOS 7 to
something newer.


--
Ian
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos



--
Unencumbered by the thought process.
 -- Click and Clack the Tappet brothers
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] megaraid/PERC

2011-11-29 Thread Pete Travis
On Nov 29, 2011 1:36 PM,  wrote:
>
> I've got two drives from a now-dead server, they were RAIDed, a mirror,
> I'd assume. I need to see if there's anything on them I need to transfer
> to the replacement, so I just shoved them into another Dell server, with a
> PERC 5 controller - I think that's what the dead one had. I fired up
> MegaRAID storage manager... but can't see any way to tell it to recreate
> that RAID. Anyone done this?
>
>mark
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

Correct me if I'm wrong, but isn't MSM for LSI/3ware cards?

If the drives didn't come off a PERC, you probably can't recreate the array
on a PERC - I'm sure you know this, but it's worth verification.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] megaraid/PERC

2011-11-29 Thread Pete Travis
On Nov 29, 2011 1:50 PM,  wrote:
>
> Pete Travis wrote:
> > On Nov 29, 2011 1:36 PM,  wrote:
> >>
> >> I've got two drives from a now-dead server, they were RAIDed, a mirror,
> >> I'd assume. I need to see if there's anything on them I need to
transfer
> >> to the replacement, so I just shoved them into another Dell server,
with
> >> a PERC 5 controller - I think that's what the dead one had. I fired up
> >> MegaRAID storage manager... but can't see any way to tell it to
recreate
> >> that RAID. Anyone done this?
> >
> > Correct me if I'm wrong, but isn't MSM for LSI/3ware cards?
>
> Right, and Dell's PERC is an OEM-rebranded LSI controller. MSM understands
> them fine.
>
> Of course, I don't seem to have the command line tool, and when I click on
> Go To, and try controller, everything is greyed out.
> 
>
> mark
>
>
I thought I might be pointing out the obvious   I'll be on front of a
box with MSM later, will take a look.

___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] an actual hacked machine, in a preserved state

2012-01-03 Thread Pete Travis
On Jan 3, 2012 12:36 PM, "Ljubomir Ljubojevic"  wrote:
>
> On 01/03/2012 04:47 PM, m.r...@5-cent.us wrote:
> > Having been on vacation, I'm coming in very late in this
> >
> > Les Mikesell wrote:
> >> On Tue, Jan 3, 2012 at 4:28 AM, Bennett Haselton
> >> wrote:
> > 
> >>> OK but those are *users* who have their own passwords that they have
> >>> chosen, presumably.  User-chosen passwords cannot be assumed to be
> >>> secure against a brute-force attack.  What I'm saying is that if
you're
> >>> the only user, by my reasoning you don't need fail2ban if you just
use a
> >>> 12-character truly random password.
> >>
> >> But you aren't exactly an authority when you are still guessing about
> >> the cause of your problem, are you?  (And haven't mentioned what your
> >> logs said about failed attempts leading up to the break in...).
> >
> > Further, that's a ridiculous assumption. Without fail2ban, or something
> > like it, they'll keep trying. You, instead, Bennett, are presumably
> > generating that "truly random" password[1] and assigning it to all your
> > users[2], and not allowing them to change their passwords, and you will
be
> > changing it occasionally and informing them of the change.[3]
> >
> > Right?
> >
> >  mark
> >
> > 1. How will you generate "truly random"? Clicks on a Geiger counter?
There
> > is no such thing as a random number generator.
> > 2. Which, being "truly random", they will write down somewhere, or store
> > it on a key, labelling the file "mypassword" or some such.
> > 3. How will you notify them of their new password - in plain text?
>
> Bennet was/is the only one using those systems, and only as root. No
> additional users existed prior to breach. And he is very persisting in
> placing his own opinion/belief above those he asks for help. That is why
> we have such a long long long thread. It came to the point where I am
> starting to believe him being a troll. Not sure yet, but it is getting
> there.
>
> I am writing this for your sake, not his. I decided to just watch from
> no on. This thread WAS very informative, I did lear A LOT, but enough is
> enough, and I spent far to much time reading this thread.
>
>
> --
>
> Ljubomir Ljubojevic
> (Love is in the Air)
> PL Computers
> Serbia, Europe
>
> Google is the Mother, Google is the Father, and traceroute is your
> trusty Spiderman...
> StarOS, Mikrotik and CentOS/RHEL/Linux consultant
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

I'm subscribed to this list just because of threads like this.  I want to
thank you all for exposing me to knowledge and discussion that reveals far
more than manpages or readmes - it helps a lot to know where to start
reading, and about what.

I am not a statistician,  but I feel an observation should be made on the
idea of an 'unguessable password.'  A 12 character string may have 12^42
possible permutations, but you are assuming that the correct guess will be
the last possible guess.  Simplistic probability puts the odds of success
at 50% - either the attacker gets it right, or they don't.   An intelligent
brute forcing tool could be making some assumptions about the minimum
length and complexity of your password, and ruling out the dictionary words
and strings based on them happens quickly.  The next guess has the same
rough odds of being correct as the 100563674th guess.

Of course, no amount of guessing will succeed on a system that doesn't
accept passwords.   System security, in terms of probability, seems to be
an 'every little bit helps' sort of endeavour.

Thanks again for the insights,

Pete
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] an actual hacked machine, in a preserved state

2012-01-03 Thread Pete Travis
Here's the qualifying statement I made, in an attempt to preempt pedantic
squabbles over my choice of arbitrary figures and oversimplified math:
> > I am not a statistician,  but

Here is a statement intended to startle you into re-examining your position:
> > Simplistic probability puts the odds of success
> > at 50% - either the attacker gets it right, or they don't.

Here's the intended take home message:
> >The next guess has the same
> > rough odds of being correct as the 100563674th guess.
>

Yes, you have to worry about a brute force attack succeeding, every hour of
every day that you give it a window to knock on.

Here is you nitpicking over figures; acknowledging the opportunity for an
improvement of several orders of magnitude and disregarding it, stuck in
your misconceptions; and wholly missing the point.
> Actually, each time you make a guess and it's wrong, the probability of
> success goes up slightly for your next guess.  Imagine having 10 cups
> with a ball under one of them.  The probability of turning over the
> right cup on the first try is 1/10.  If you're wrong, though, then the
> probability of getting it right on the next cup goes up to 1/9, and so on.
>
> But it's all a moot point if there are 10^24 possible passwords and the
> odds of finding the right one in any conceivable length of time are
> essentially zero.
>
> > Of course, no amount of guessing will succeed on a system that doesn't
> > accept passwords.   System security, in terms of probability, seems to
be
> > an 'every little bit helps' sort of endeavour.
>
> Well it depends on how literally you mean "every little bit" :)  If the
> chance of a break-in occurring in the next year from a given attack is 1
> in 10^10, you can reduce it to 1 in 10^20, but it's already less likely
> than your data center being hit by a meteorite.  The real problem is
> that it takes away from time that can be used for things that have a
> greater likelihood of reducing the chance of a break-in.  If I had taken
> the advice about ssh keys at the beginning of the thread, I never would
> have gotten to the suggestion about SELinux.
>
> Bennett
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

I'm moving on from this - much better men than I have tried and failed here.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A simplistic parental-control setup

2012-01-05 Thread Pete Travis
It won't help more than /etc/hosts entries, but I've found using OpenDNS
with a free account and a script / client to keep the IP in sync to be very
effective. DNS redirects can be applied categorically or with a per domain
blacklist.  The metrics and charts are interesting too, on a nicely basis
or to check on what's slipping through the filters.

--Pete
On Jan 5, 2012 7:47 AM, "Marko Vojinovic"  wrote:

> On Thursday 05 January 2012 01:39:49 Ljubomir Ljubojevic wrote:
> > On 01/05/2012 12:58 AM, Marko Vojinovic wrote:
> > > I am looking at the simplest (implementation-wise) solution to the
> > > following problem (on CentOS 6.2):
> > >
> > > I have a list of web addresses (like http://www.example.com,
> > > https://1.2.3.4/, etc.) that should be "forbidden" to access from a
> > > particular host. On access attempt, the browser should be redirected to
> > > a local web page (file on the hard disk) with the explanation that
> > > those addresses are forbidden. The possible ways of disallowed access
> > > include:
> > >
> > > * typing www.example.com or http://1.2.3.4/ in the browser
> > > * typing www.example.com/anyfolder/somefile.html in the browser
> > > * clicking on www.example.com when listed as a link on some other web
> > > site (say, Google search results)
> > > * nothing else.
> > >
> > > The last point above assumes that the users will never try any other
> > > method of accessing the site. These user's knowledge about computers in
> > > general is known to be elementary, so I don't need protection against
> > > geniouses who can figure out some obscure way to circumvent the
> > > lockdown (and please don't tell me that this is an irrational
> > > assumption, I know it is...).
> > >
> > > If possible, all this should be on a "per user" basis, but if
> > > implementing it system-wide would be much simpler, I could live with
> > > it. :-)
> > >
> > > The point is that I need a simple, easy-to-implement, easy-to-configure
> > > and easy-to-maintain solution for this particular usecase. What I don't
> > > need is some over-engineered solution that covers my usecase along with
> > > a whole bunch of stuff I will never need, and takes two months to
> > > configure properly. It should also be F/OSS, preferably included in
> > > CentOS repos or elsewhere.
> > >
> > > Or alternatively I could go along with manually setting up a bogus
> > > httpd/dns/iptables configuration which would do all this, but I have a
> > > feeling that it would not be the easiest thing to maintain...
> > >
> > > I'd appreciate any suggestions. :-)
> >
> > There is squidguard in RepoForge repository. It's a plugin for squid.
> > There is also dansguardian.
>
> I'll take a look at both of these, thanks! :-)
>
> > If you use separate firewall box, you can use ClearOS, it has
> > dansguardian set up.
>
> No, the machine is already installed with CentOS. Furthermore, I am
> supposed
> to set up all this remotely (via ssh), since I don't have physical access
> to
> the box itself...
>
> Best, :-)
> Marko
>
>
>
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Problem with running Centos 5.2 on Dell Optiplex 330

2008-09-07 Thread Pete Kay
Hi,

I am havind deep trouble with a bunch of our newly arrived Optiplex
330 as it can't run Centos 5.2 property.

The installation works fine, but when it boots up, it can't be
connected to the network.  I am getting error saying " link is not
ready" when doing system-config-network.  I check lspci and it can
detect the network controller no problem.  The light next to the cable
is also on as well.

Does anyone know how I can fix this problem?

We should have bought just one and see if it works before buying more,
and now we are stuck.

Could someone please kindly give any suggestion?  Any help will be
greatly appreciated.

Best Regards,
Pete
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Problem with install Boardcom driver

2008-09-07 Thread Pete Kay
Hi,

I have to install Broadcom driver because the  Dell Optiplex 330
running Centos 5.2 is not able to connect to the network.


I am trying to install a Broadcom driver, but I get the followng error:

[EMAIL PROTECTED] tg3-3.85l]#
[EMAIL PROTECTED] tg3-3.85l]# make
make -C /lib/modules/2.6.18-92.el5/build
SUBDIRS=/usr/src/Server/Linux/Driver/tg3-3.85l modules
make[1]: Entering directory `/usr/src/kernels/2.6.18-92.el5-x86_64'
  CC [M]  /usr/src/Server/Linux/Driver/tg3-3.85l/tg3.o
In file included from /usr/src/Server/Linux/Driver/tg3-3.85l/tg3.c:85:
/usr/src/Server/Linux/Driver/tg3-3.85l/tg3.h:234: error: redefinition
of 'skb_transport_offset'
include/linux/skbuff.h:1006: error: previous definition of
'skb_transport_offset' was here
/usr/src/Server/Linux/Driver/tg3-3.85l/tg3.h:239: error: redefinition
of 'ip_hdr'
include/linux/ip.h:109: error: previous definition of 'ip_hdr' was here
/usr/src/Server/Linux/Driver/tg3-3.85l/tg3.h:244: error: redefinition
of 'ip_hdrlen'
include/net/ip.h:48: error: previous definition of 'ip_hdrlen' was here
/usr/src/Server/Linux/Driver/tg3-3.85l/tg3.h:249: error: redefinition
of 'tcp_hdr'
include/linux/tcp.h:169: error: previous definition of 'tcp_hdr' was here
/usr/src/Server/Linux/Driver/tg3-3.85l/tg3.h:254: error: redefinition
of 'tcp_optlen'
include/linux/tcp.h:179: error: previous definition of 'tcp_optlen' was here
make[2]: *** [/usr/src/Server/Linux/Driver/tg3-3.85l/tg3.o] Error 1
make[1]: *** [_module_/usr/src/Server/Linux/Driver/tg3-3.85l] Error 2
make[1]: Leaving directory `/usr/src/kernels/2.6.18-92.el5-x86_64'
make: *** [default] Error 2
[EMAIL PROTECTED] tg3-3.85l]#

Does anyone know how to resolve this problem?

Many thanks in advance for all your help.

Regards,
Pete
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Problem with running Centos 5.2 on Dell Optiplex 330

2008-09-08 Thread Pete Kay
Hi,

It looks like TG3, the broadcom driver, is already installed on Centos
5.2.  Does anyone know why the network is still not working?  I am
very stuck in trying to get the Dell Optiplex to work.


Any help will be greatly appreciated.

Thanks,
Pete

On Mon, Sep 8, 2008 at 2:36 AM, NiftyClusters Mitch
<[EMAIL PROTECTED]> wrote:
> On Sun, Sep 7, 2008 at 7:29 AM, nate <[EMAIL PROTECTED]> wrote:
>> Pete Kay wrote:
>>> Hi,
>>>
>>> I am havind deep trouble with a bunch of our newly arrived Optiplex
>>> 330 as it can't run Centos 5.2 property.
>>>
> ..
>>>
>>> Does anyone know how I can fix this problem?
>>
>> It's quite possible the network driver isn't compatible with
>> the system. Looking at the support site for Dell that system
>> isn't supported with Linux, and it looks like it has a pretty
>> new broadcom chip on it.
>>
>> I'd bet that updating the driver will allow the NIC to work,
>> the latest drivers for that system are available.
>
> The quick and handy way to do this is to pick up an inexpensive USB
> ethernet link or other ether net card.   After a yum update to a new
> kernel you may well have a driver that works.
>
> If a yum update does not update the driver, you have enough
> connectivity to download then install vendor bits and tools.
>
> This is the trick I have used for a number of early access Intel
> 'engineering' boxes.
> It lets me kickstart to a lab configuration and connect long enough to
> add the updated driver.  I can save all the fun new bits and script up
> the driver update into a single dir to copy from one to the next.
> Then burn that dir of bits to a CDROM...
>
> If you are shopping, the older the USB ethernet device the more likely
> it is to work.
>
> --
>  NiftyCluster
>  T o m M i t c h e l l
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Problem with running Centos 5.2 on Dell Optiplex 330

2008-09-08 Thread Pete Kay
Hi,
 Thank you in advance for your help.  Here is the lspci output.  Any help on
getting the networking to work on Dell Optiplex will be greatly appreciated.


 [EMAIL PROTECTED] etc]# /sbin/lspci
00:00.0 Host bridge: Intel Corporation 82G33/G31/P35/P31 Express DRAM
Controller (rev 0a)
00:01.0 PCI bridge: Intel Corporation 82G33/G31/P35/P31 Express PCI Express
Root Port (rev 0a)
00:02.0 VGA compatible controller: Intel Corporation 82G33/G31 Express
Integrated Graphics Controller (rev 0a)
00:02.1 Display controller: Intel Corporation 82G33/G31 Express Integrated
Graphics Controller (rev 0a)
00:1b.0 Audio device: Intel Corporation 82801G (ICH7 Family) High Definition
Audio Controller (rev 01)
00:1c.0 PCI bridge: Intel Corporation 82801G (ICH7 Family) PCI Express Port
1 (rev 01)
00:1d.0 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI
Controller #1 (rev 01)
00:1d.1 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI
Controller #2 (rev 01)
00:1d.2 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI
Controller #3 (rev 01)
00:1d.3 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI
Controller #4 (rev 01)
00:1d.7 USB Controller: Intel Corporation 82801G (ICH7 Family) USB2 EHCI
Controller (rev 01)
00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev e1)
00:1f.0 ISA bridge: Intel Corporation 82801GB/GR (ICH7 Family) LPC Interface
Bridge (rev 01)
00:1f.1 IDE interface: Intel Corporation 82801G (ICH7 Family) IDE Controller
(rev 01)
00:1f.2 SATA controller: Intel Corporation 82801GR/GH (ICH7 Family) SATA
AHCI Controller (rev 01)
00:1f.3 SMBus: Intel Corporation 82801G (ICH7 Family) SMBus Controller (rev
01)
02:00.0 Ethernet controller: Broadcom Corporation NetLink BCM5787 Gigabit
Ethernet PCI Express (rev 02)
[EMAIL PROTECTED] etc]#
 [EMAIL PROTECTED] etc]#
[EMAIL PROTECTED] etc]# cat /var/log/messages |grep tg3
Sep  8 20:54:58 localhost kernel: tg3.c:v3.86 (November 9, 2007)
Sep  8 20:57:08 localhost kernel: tg3.c:v3.86 (November 9, 2007)
Sep  8 23:37:21 localhost kernel: tg3.c:v3.86 (November 9, 2007)
[EMAIL PROTECTED] etc]#
  On Mon, Sep 8, 2008 at 3:46 PM, Mogens Kjaer <[EMAIL PROTECTED]> wrote:
> Pete Kay wrote:
>> Hi,
>>
>> It looks like TG3, the broadcom driver, is already installed on Centos
>> 5.2.  Does anyone know why the network is still not working?  I am
>> very stuck in trying to get the Dell Optiplex to work.
>
> You need to provide more information.
>
> What is the output of the command lspci?
>
> What gets logged in /var/log/messages when the tg3 driver is loaded?
>
> Mogens
> --
> Mogens Kjaer, Carlsberg A/S, Computer Department
> Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
> Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
> Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] calendar

2011-05-27 Thread Pete Biggs

> > 
> >My manager's asked me about something that can run on our CentOS boxes
> > that can connect to an (bleah!) Exchange server's calendar. It doesn't
> > look like Lightening can, and from some googling, it appears that
> > Evolution claims to, but It's got to be able to set dates, etc.
> > 
> >Can Evolution? Any other suggestions?
> 
>  Evolution will not work with Exchange newer than 2003. There is a plugin
>  under development that can, but I'm not precisely sure about its status,
>  and in any case, CentOS5 is too old for it; it as a bunch dependencies
>  that are newer than what's provided.
> 

Yes the version of Evolution in CentOS is too old for most things.  The
evolution-connector package provides Exchange connectivity in CentOS5,
however it only works for Exchange 2003 and older.

Newer versions of Evolution also have an evolution-exchange package
which can connect with newer versions of Exchange.  This is apparently
reasonably stable for most setups - it doesn't, however, work well in
more complex arrangements involving proxies and so on.

There is another package at alpha/beta level called evolution-ews which
looks very promising.  Unfortunately it needs Evolution 2.32 or later.

P.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] How to open several tabs in a gnome-terminal window and run a command in each tab?

2011-08-02 Thread Pete O'Connell
"gnome-terminal --tab-with-profile=AAA --tab-with-profile=BBB"

Hi I am trying to open several tabs in a gnome-terminal window like above. I
want to run a command for each tab within the body of the above command. AAA and
BBB are both profiles I have created and also predefined environment variable on
my system (each representing a path to a folder). The code I was hoping would
work was something like:

"gnome-terminal --tab-with-profile=AAA -e='ls AAA' --tab-with-profile=BBB -e='ls
BBB'"

in order to list the folder contents within each tab, but no dice.

Anyone know how to do this in a single command?

Thanks
Pete



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Interactive PXE install

2011-08-04 Thread Pete Travis
I found the info on the Centos wiki helpful when I had these questions:

http://wiki.centos.org/HowTos/PXE/PXE_Setup

Note the last line links to the oxen menu guide.  I skipped the trouble of
dhcp option entries.
On Aug 4, 2011 6:43 PM, "Paul Heinlein"  wrote:
> On Thu, 4 Aug 2011, Kenneth Porter wrote:
>
>> The guides for a LAN install I've found all want to do an automated
>> kickstart install. Are there any guides that explain how to use eg.
>> CentOS-6.0-i386-netinstall.iso for an interactive PXE installation?
>>
>> I think I understand the DHCP config and I've got tftpd installed on
>> my CentOS 5 server and see the empty /tftpboot directory. I'm
>> guessing I need to unpack some of the files in the iso image into
>> /tftpboot in some special layout and add some files from
>> /usr/lib/syslinux. What's not clear is what files in the image go
>> where in the tftpboot system, and what the menu stanza should look
>> like in the menu file.
>
> LABEL centos-6-text.x86_64
> MENU LABEL CentOS 6 x86_64 text installer
> KERNEL images/centos/6/x86_64/vmlinuz
> APPEND initrd=images/centos/6/x86_64/initrd.img ramdisk_size=10 text
>
> The images/ directory lives in /tftpboot on our tftp server.
>
> The vmlinuz and initrd.img both come from the images/pxeboot directory
> in the install tree, e.g.,
>
> http://mirrors.cat.pdx.edu/centos/6/os/x86_64/images/pxeboot/
>
> Of course, you might not want a text installation, given that it's
> braindead compared to its graphical counterpart...
>
> --
> Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to open several tabs in a gnome-terminal window and run a command in each tab?

2011-08-05 Thread Pete O'Connell

hi, bash is unavailable to me on my machine unfortunately
 (it is a work machine) the command 
must be sent in a tsch shell. any way to do this in tsch?

Pete

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Desperately need help with multi-core NIC performance

2010-02-24 Thread Pete Kay
Hi,

I am running a VOIP application on Centos 5.3.  It is a 16 core box
with 12 G of mem and all what it does is passing packets.

What happens is that at around 2K channels running g711 ( 64k) codec,
all eth0 is used up and no more traffic can go through.

I have checked google and it talked about interrupt scheduler.

does anyone know how to configure the kernel to allow it to use all
CPSs for socket transmission of UDP packets?

Any pointer will be greatly appreciated.

pete
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Desperately need help with multi-core NIC performance

2010-02-24 Thread Pete Kay
Hi

So is that the limit?  I have heard people being able to run like 10K
call channels before max out CPU cap.

Is this only possible if multiple nics are being used?

Please help.

pete

On Wed, Feb 24, 2010 at 2:53 PM, John R Pierce  wrote:
> Bobby wrote:
>> On Wednesday 24 February 2010 14:55:22 John R Pierce wrote:
>>
>>> Pete Kay wrote:
>>>
>>>> What happens is that at around 2K channels running g711 ( 64k) codec,
>>>> all eth0 is used up and no more traffic can go through.
>>>>
>>> 2000 * 64kbit/sec is 128Mbit/sec, not counting any additional protocol
>>>
>>
>> Actually if you are running g.711 over VoIP, the overhead brings it up to
>> something like 87Kbps per direction.
>>
>
> k, that puts it up around 175Mbit/sec.   (and thats just one way...if
> these are full duplex conversations, then there's that amount of data
> being recieved AND transmitted from each end.    now we're up to
> 700Mbit/sec if we're looking at transmit and recieve in and out...
>
>
>
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] multi-core performance

2010-03-01 Thread Pete Kay
Hi,

Does anyone know how to turn on TOE ( TCP offload engine )  and RSS (
Receive-Side Scaling)?

Thanks,
pete
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Documentation link on new Firefox CentOS 7 splash screen

2015-01-18 Thread Pete Travis

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/18/2015 12:29 PM, Digimer wrote:
> On 18/01/15 03:45 AM, Karanbir Singh wrote:
>> On 01/18/2015 02:14 AM, Mark LaPierre wrote:
>>> On 01/15/15 22:55, Darr247 wrote:
>>>> On 16 January 2015 @00:34 zulu, Digimer wrote:
>>>>> So either the link should be changed or the linked page should be
>>>>> updated.
>>>>>
>>>>
>>>> Well, until someone rewrites the redhat docs so they don't violate
>>>> copyright laws, and links to them on that centos.org/docs page, I'll
>>>> continue perusing and referring to the RHEL 6 and 7 documentation.
>>>> ___
>>>
>>> Alright then.  May I suggest a solution that might satisfy both
opinions.
>>>
>>> On the documentation page where the links to CentOS [345] are found
>>> place a statement to this effect:
>>>
>>> "CentOS is functionally equivalent to Red Hat Enterprise Linux (RHEL)
>>
>> but its not.
>>
>>> and is based on the same code, as released by Red Hat, and rebuilt by
>>> the CentOS community."  At this point briefly explain the moral
>>
>> that does not make it functionally equivalent.
>>
>>> conundrum that prevents you from linking directly to the RHEL
>>> documentation.  Then provide the appropriate link to the appropriate
>>> RHEL documentation with the explanation that, "this is a link to the
>>> documentation for RHEL upon which CentOS is based."  There you have a
>>> disclaimer as well as an attribution.
>>>
>>> What say yea to this proposal?
>>
>> why not just say 'CentOS Linux is derived from Red Hat Enterprise Linux
>> sources as released via git.centos.org and therefore documentation
>> applicable to Red Hat Enterprise Linux should largely apply to CentOS
>> Linux of the same version, architecture and release.'
>>
>> And leave it at that ( note: no linking, therefore no assertions of
>> compatibility or equivallencce ).
>>
>>> An undocumented computer program differs only slightly from a video
>>> game.  Both are filled with mysteries, puzzles, and unanswered
questions.
>>
>> Therefore, lets do the right thing - get the means together in community
>> to adapt those docs, brand them accordingly and publish them under
>> centos.org
>
> Is it legal to copy the documentation and replace trademarks? IANAL... :)
>
> Alternatively, if we can't copy RHEL docs, can we copy Fedora 12~13,
18~19 docs and adapt as needed? Or would be have to write everything
from scratch?
>

Yes, you can absolutely use the sources for Fedora Docs, providing the
already stated measures to deal with the trademark issues are
performed.  Everything is at https://git.fedorahosted.org/cgit/docs/ .

I would encourage anyone interested to delve in a bit more than copy +
regex though.  There are entities to interpolate, for example; we'd take
patches to replace "Fedora" with "&PRODUCT;" to make things easier for
the CentOS folks, for example - and in many places, you'll see things
like that already, because RHEL docs are downstream too.  A CentOS
publican brand would give the derivative books a distinct identity
without diverging the sources.  Or, some CentOS writers might want to
Storage Administration Guide, which hasn't been updated for a Fedora in
quite a while, and most updates for el7 would be great for the current
Fedora users too.

I'm sure there are many areas where active collaboration would be a win
for both distributions.  At this point, maybe the centos-docs and/or
d...@lists.fp.o lists would be a better venue?

- -- 
- -- Pete Travis
 - Fedora Docs Project Leader
 - 'randomuser' on freenode
 - immanet...@fedoraproject.org
-BEGIN PGP SIGNATURE-
Version: GnuPG v1

iQEcBAEBAgAGBQJUvKSfAAoJEL1wZM0+jj2Z86IH/2aAgYYix4d3iJ0O9SEzXh6m
DEeD2PvNTigdWjrOIJ9+k32SEXWrdYOhUN4cN/72eHhKkU1XNOqFv90GLlCC85xH
4mDqYpudZfGQ2SbSNYEXtqo63C7/edAWdZ9WiaQRlehHLS0G8H6Cy8aSEsQu9OCU
ofg59TDbWmqy7YogPLZWTfoy/NEe+g9taRK0w0Zkv51Qy6sprH1Wl0cKF1FLqVUD
7Q2AOGGKWqmlze4VFpuZMPHhz3ieoge+yTYtUdt0bxFn8ZrXqBq9ldYOG/vSDPJY
5m0MqOdXKXhMy+XNQmrBnfX+C6+kNqFkbNe+7wH9FtOjhdqLJtpdtIKRqw/jQdE=
=pYSJ
-END PGP SIGNATURE-


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Nvidia Mod Update

2015-02-08 Thread Pete Geenhuizen


On 02/08/15 06:12, Ned Slider wrote:


On 08/02/15 05:09, S.Tindall wrote:
Yes, just to reiterate:

yum erase kmod-nvidia
yum install kmod-nvidia-340xx
reboot

You will then be on the correct driver branch and will get the
appropriate driver updates going forwards, no changes to yum necessary.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

I went through all this, and now that I have kmod-nvidia-340xx 
installed, but have you executed yum update or yum list updates?
If you do then yum  will want up upgrade you to the latest and greatest 
kmod-nvidia-346xx.
So other than modifying yum to exclude the nvidia driver how do you 
prevent the update in the future?


rpm -qa | grep nvidia
nvidia-detect-346.35-1.el6.elrepo.x86_64
kmod-nvidia-340.65-1.el6.elrepo.x86_64
nvidia-x11-drv-340.65-1.el6.elrepo.x86_64

Output from yum list updates
Updated Packages
kmod-nvidia.x86_64346.35-1.el6.elrepo elrepo
nvidia-x11-drv.x86_64 346.35-1.el6.elrepo elrepo


--
Unencumbered by the thought process.
 -- Click and Clack the Tappet brothers

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Nvidia Mod Update

2015-02-08 Thread Pete Geenhuizen


On 02/08/15 07:45, Ned Slider wrote:


On 08/02/15 12:33, Pete Geenhuizen wrote:
No, you don't have the package kmod-nvidia-340xx installed. You have
kmod-nvidia VERSION 340.65. In the first example, the package NAME is
kmod-nvidia-340xx (the -340xx is part of the package name, NOT the version).

Please do as I advised:

yum erase kmod-nvidia
yum install kmod-nvidia-340xx
reboot

Because you now no longer have package kmod-nvidia installed, yum will
not try to update you to the latest version. You will stay forever on
the 340.xx branch which is the last version to support your hardware.

Hope that helps
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Oops, yup right you are, kinda missed that small but important detail.

Thx.
Pete

--
Unencumbered by the thought process.
 -- Click and Clack the Tappet brothers

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Nvidia Mod Update

2015-02-08 Thread Pete Geenhuizen


On 02/08/2015 10:33 AM, Ned Slider wrote:


On 08/02/15 14:24, Pete Geenhuizen wrote:
No problem Pete.

Now you are on the correct branch you will continue to get updates to
that 340.xx driver as and when nvidia release them. IIRC, nvidia said
they would continue to support the 340.xx legacy branch until the end of
2019, so for the best part of another 5 years :-)

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Thanks Ned, perhaps by 2019 I'll have scummed to Centos 7 and all it's 
idiosyncrasies and I might even have newer hardware by then.


--
Unencumbered by the thought process.
 -- Click and Clack the Tappet brothers

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Another Fedora decision

2015-02-09 Thread Pete Travis
On 02/09/2015 04:25 PM, PatrickD Garvey wrote:
> On Mon, Feb 9, 2015 at 3:23 PM, Kahlil Hodgson
>  wrote:
>> On 10 February 2015 at 10:15, PatrickD Garvey
 wrote:
>>> Please allow me to make sure I am perceiving this correctly,
>>> reports of errors found in RedHat documentation are to be reported
>>> against the Fedora Documentation product type in the RedHat bugzilla?
>>> and
>>> reports of errors found in Fedora documentation are, also, to be
>>> reported against the Fedora Documentation product type in the RedHat
>>> bugzilla?
>>
>> I don't know officially, but I'm making a guess that, since the two
>> documents are clearly related and have the same authors, if you see
>> the same error in the Fedora document and you report it, it will
>> probably get fixed in both.  The Fedora document explicitly solicits
>> bug reports, but I don't see the same in the RedHat one.  Worth a shot
>> don't you think?  Maybe submit a small bug report and see what the
>> response is like?
>
>
> That's a testable starting point. Thanks.
> ___
Officially, no, the "Fedora Documentation" bz product isn't there for
Red Hat guides.  If you want to file a bug against a RHEL guide, choose
your version of RHEL then look for the guide's component - these days,
they all start with "doc-", which should make the search easy.

Unofficially, there's a nonzero chance that your bug will find a writer
that plays in both spaces, or that we'll be able reassign the bug to the
correct component for you.  But please, don't make work for Fedora
volunteers when there are people standing by getting paid to handle your
bugs :)

-- 
-- Pete

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Another Fedora decision

2015-02-09 Thread Pete Travis
On 02/09/2015 11:11 PM, Kahlil Hodgson wrote:
> On 10 February 2015 at 16:39, Pete Travis  wrote:
>> Officially, no, the "Fedora Documentation" bz product isn't there for
>> Red Hat guides.  If you want to file a bug against a RHEL guide, choose
>> your version of RHEL then look for the guide's component - these days,
>> they all start with "doc-", which should make the search easy.
>
> Thanks for the heads up. Was not aware of the 'doc-' prefix.
>
>> Unofficially, there's a nonzero chance that your bug will find a writer
>> that plays in both spaces, or that we'll be able reassign the bug to the
>> correct component for you.  But please, don't make work for Fedora
>> volunteers when there are people standing by getting paid to handle your
>> bugs :)
>
> As previously noted, the authors of both documents are the same, and
> appear to be RedHat employees.
> ___
>

Right, that's the non-zero thing I mentioned. Some Red Hat writers also
contribute to Fedora Docs, often on their own time.

-- 
-- Pete

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Another Fedora decision

2015-02-09 Thread Pete Travis
On 02/09/2015 11:11 PM, Kahlil Hodgson wrote:
> On 10 February 2015 at 16:39, Pete Travis  wrote:
>> Officially, no, the "Fedora Documentation" bz product isn't there for
>> Red Hat guides.  If you want to file a bug against a RHEL guide, choose
>> your version of RHEL then look for the guide's component - these days,
>> they all start with "doc-", which should make the search easy.
>
> Thanks for the heads up. Was not aware of the 'doc-' prefix.
>
>> Unofficially, there's a nonzero chance that your bug will find a writer
>> that plays in both spaces, or that we'll be able reassign the bug to the
>> correct component for you.  But please, don't make work for Fedora
>> volunteers when there are people standing by getting paid to handle your
>> bugs :)
>
> As previously noted, the authors of both documents are the same, and
> appear to be RedHat employees.
> ___
>

Right, that's the non-zero thing I mentioned. Some Red Hat writers also
contribute to Fedora Docs, often on their own time.

-- 
-- Pete

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] systemctl (again)

2015-04-04 Thread Pete Travis
On Apr 4, 2015 7:55 AM, "J Martin Rushton" 
wrote:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Thanks Andrew.
>
> One more problem solved, as I discovered last thing yesterday there
> was a missing "[Install]".  Using your copy of the httpd service I
> cut-and-pasted it onto the end of the service file you'd given me
> earlier and at last was able to load the service.  It wouldn't run,
> but at least it was some progress.
>
> I ran systemctl daemon-reload and rebooted.
>
> It is still failing though:
>
> # systemctl status timidity
> timidity.service - timidity daemon
>Loaded: loaded (/etc/systemd/system/timidity.service; enabled)
>Active: failed (Result: exit-code) since Sat ...
>   Process: 955 ExecStop=/bin/kill -s TERM $MAINPID (code=exited,
> status=1/FAILURE)
>   Process: 790 ExecStart=/usr/bin/timidity -iAD (code=exited,
> status=0/SUCCESS)
>  Main PID: 790 (code=exited, status=0/SUCCESS)
>



The process exited, so systemd thinks the service has exited.  You have a
'-D' option, which probably means daemonize, but you haven't set an
appropriate Type declaration in the service file.

If the service offers it, the best way to do simple services with systemd
is with *foreground* options in ExecStart.  Then set Type=simple.
STDOUT/STDERR all goes to the journal, making it easier to see what happens
if the service legitimately fails.

Take a look at packaged files in /usr/lib/systemd/system - plenty of
examples to work from.

--Pete
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Real sh? Or other efficient shell for non-interactive scripts

2015-04-24 Thread Pete Geenhuizen


On 04/24/15 06:07, E.B. wrote:

I'm sure most people here know about Dash in Debian. Have there
been discussions about providing a more efficient shell in Centos
for use with heavily invoked non-interactive scripts?

With sh being a link to bash in Centos I don't know if it would
explode if the link was changed to something else, but at least
the scripts we made on our own that run certain services could
be changed and tested manually to another shell.

Are there other people who have experience in this and can
provide interesting guidance?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Why go to that extreme if you tell a script on line 1 which shell to run 
it will do so.

#!/bin/dash
or what ever shell you want it to run in.  I always do that to make sure 
that the script runs as expected, if you leave it out the script will 
run in whatever environment it currently is in.


Pete

--
If money can fix it, it's not a problem.
 -- Click and Clack the Tappet brothers

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


  1   2   3   4   5   >