the many tools to copy over the actual data. Use the
file system’s dump/restore, tar, rsync, etc.
There are a small number of cases where “dd” is the right tool. Backups and
data transfer is not one of them.
--
Jonathan Billings
___
CentOS ma
e72239c80
> kernel: command_status=-1
> kernel:
> I persume something is trying to access the system's
> floppy disk drive that does not exist. But I have
> been unable to identify what's triggering all this
> activity.
>
> Any suggestions?
Any chance you ha
On Sat, Nov 13, 2021 at 12:02:24PM -0500, Jonathan Billings wrote:
> You'll want to add to CFLAGS="-Wl,-rpath,/usr/lib64/openssl11", so the
> linker adds the RPATH to the executable.
The alternative is to set $LD_LIBRARY_PATH, of course, but that is
often something
se it will break packaged software.
You'll want to add to CFLAGS="-Wl,-rpath,/usr/lib64/openssl11", so the
linker adds the RPATH to the executable.
Remember not to use this trick when creating RPMs, because that's
generally frowned on and can make rpmbuild complain.
--
Jon
and instead, or
“nmcli” to interact with NetworkMamager.
2.) “ifconfig” can’t show multiple IPs on an interface, one of the reasons why
it is deprecated.
3.) Don’t use “eth0:1” style virtual interfaces, that was a hack for ifconfig
to support multiple IPs.
—
Jonathan Billings
__
/chromium/issues/detail?id=1261617
Good News! It looks like Google has a fix that will restore support for CentOS
7.
https://bugs.chromium.org/p/chromium/issues/detail?id=1261617#c26
TL;DR: the fix will show up in the google-chrome-unstable package v97.0.4677.0.
Eventually a fixed version wil
googling for a solution.
> Hopefully it will not take to long to fix.
Don't hold your breath. If it doesn't make money for Google, they're
not likely to make any effort. And Google is the king of killing
products.
--
Jonathan Billings
ython. They are versioned together, so you can’t
upgrade one without needing the updates for the other.
Since python3-tkinter is in AppStream, maybe you don’t have that enabled? You
need the 8Stream repo, not the one for base 8.
See the spec file to see it is a sub package:
https://git.c
o them?
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
ou booted from the installer as a legacy
boot item, it installs as a legacy bootloader, but if you disable the BIOS
option to use a legacy bootloader, it will boot the installer as a UEFI boot
and choose to install a UEFI grub2 setup.
—
Jonathan
don’t know where you got that kernel efi
file.
—
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
bkspc. In
> system settings, it should only be the ctrl-bkspc.
>
> Has anyone else seen this behavior?
Sounds to me like you’ve enabled sticky keys:
https://help.gnome.org/users/gnome-help/stable/a11y-stickykeys.html.en
--
Jonathan Billings
icons, but no window decorations or
> top/bottom bars ("panels") (for both gnome-classic and gnome3).
When you say you have "central homes", does that mean they're a
network filesystem? What kind of filesystem? If it's NFS, do you
have the use_nfs_hom
og. It won't hold any legal water, most
likely, but it might get someone to at least look closer at the issue.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
On Wed, Aug 04, 2021 at 09:38:11AM -0400, m.r...@5-cent.us wrote:
>
> On 2021-08-03 10:20, Jonathan Billings wrote:
> > On Tue, Aug 03, 2021 at 10:17:09AM -0400, mark wrote:
> > > Just fullyu updated yesterday. The reboot gets past Centos (core)...
> > > and
>
ve you removed 'rhgb quiet' from the kernel parameters to
see what it is doing? Can you boot into the rescue target and poke
around in the journal to see what's going on?
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
htt
replying to an existing thread,
thanks!
For what its worth, I'm not sure what you mean in your subject about
Microsoft involvement/contamination. What does that have to do with
anything?
--
Jonathan Billings
___
CentOS mailing list
Cen
ct-updates/virtuozzo-vzlinux-8-4-now-available/
And it does appear to be downstream from RHEL, another rebuild like
Alma, Rocky, Springdale, etc.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
On Jul 28, 2021, at 08:44, Jonathan Billings wrote:
>
> For what it’s worth, if you use the fail2ban-firewalld package, it uses ipset
> rather than iptables, which is more efficient.
That’s in CentOS 7 though. CentOS 8 firewalld uses nft instead of the older
netfilter (iptables/ip
it uses ipset
rather than iptables, which is more efficient.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
in CentOS Stream, so it would be a painful transition from 8 to
8-stream. But if you aren't using any 3rd-party kernel modules, you
should be fine.
The Kmod SIG plans to try to build GPL'd kmods for CentOS Stream
kernels, but we're just s
the
same thing but with a proprietary LSM.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
le.
https://www.freebsd.org/security/advisories/
I see one less than 45 days ago that requires a reboot because of a
kernel security measure bypass.
Long uptimes are a thing of the past. Build redundancy into your
infrastructure so you can handle reboots.
--
Jonathan Billings
_
tc/dnf/ /etc/yum.repos.d/
#
I'm not sure if I'm understanding your question. Are you missing
them? Do you have dnf excludes defined somewhere?
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
login authentication completely -- it makes it easier to manage access
centrally. (I also took advantage of the fact that local users had a
different GID to put them in a different SELinux confined user group,
so they had different access rights anyway)
We do this
7; git option which is not
available in the git version available on CentOS 7.
so they removed it from epel7.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
ewriting the
license check?
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
_life_cycle
The version in CentOS 7 isn't simply the version from OpenSSH, many
features and securify fixes have been backported in the past, so if
there's something in particular you are looking for, please mention
it.
--
Jonathan Billings
g:
https://github.com/iusrepo/iusrepo.github.io/blob/main/markdown/faq.md#why-doesnt-ius-have-packages-for-rhel-8
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
mctl --runtime. I had tens of thousands of users logging
in via Active Directory, which changed constantly, so I couldn't
hard-code anything.
I suggest using the 'systemd-cgtop' command to look at what unit is
using resources, it is helpful for debugging.
--
Jonathan Billings
___
d with PrivateTmp=yes set,
they no longer could communicate. So it forced us to actually do the
right thing and use more appropriate methods.
It is kinda confusing but I do appreciate that I now have a lot of
ways I can now lock down services beyond si
t; yumex-3.0.15-1.el7.nux.noarch
>>
>> Centos 8.3 is not el7.
>
> Frank,
>
> Well rats. It seems dnfdragora didn't make it into EL or CentOS, I guess
> there's no graphical package manager left.
In addition, it appears you’ve added a
be prepared for
missing support and unexpected breakages. The only use I will consider Stream
for will be as a test for upcoming RHEL releases, not as something I will ever
want actual users to touch. (And maybe that’s ok)
1. http://elrepoproject.blogspot.com/2021/01/elrepo-and-centos-strea
temd
would do if you set it up as an automount).
You need to either fix it so it gets mounted on demand, or use some
other method to start it.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
believe drm/drmP.h was removed from the kernel in the v5.5-ish era,
so I suspect that part of the kernel must have been backported to the
CentOS 8.3 kernels.
You'll need to update your code to use the new drm subsystem.
I believe the nvidia drivers had to do this too.
be seeing an SELinux
> deny due to non-default ccache storage.
Only if sssd-kcm is installed. Otherwise the keyring is default. I normally use
the keyring on my systems. No selinux issues there.
--
Jonathan Billings
___
CentOS mailin
exploitable.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
ou don’t have all the latest package updates. Does “dnf
upgrade” bring down a new kernel package? If not, do you have some local
changes to your dnf config that might prevent kernel updates? Or an
alternative CentOS repository that is out of date?
en it ran, and pipe that into audit2allow.
HOWEVER...
There’s probably a better solution than blindly creating a module. You need to
figure out what the correct SELinux attribute to put on the directory so you
don’t need a module.
—
Jonathan Billings
_
, I think). (Really cool
guy)
Heck, 'systemd' is a really complicated beast, but it doesn't have a
huge number of interconnected dependencies. I think bringing it up
isn't really appropriate for this thread, since it actually does a
pretty good job of keeping t
doing correct ?
Check the man page for 'date'.
%s is "seconds since 1970-01-01 00:00:00 UTC". Regardless of the time
zone, the time in LA will still be the same number of seconds since
Midnight, January 1st, 1970 in UTC as it was in Indianapolis.
--
Jonathan Billings
_
ed to run the
alternative PHP, so how you run it is important.
—
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
ation systems, because an enteprise workstation is
actually a useful thing for people who need long term support (1-2
years at least) of a workstation. Ubuntu manages to do it, but
unfortunately, most of our engineering software isn't supported on
Ubuntu.
--
Jonathan Billings
c 'date > /var/log/test/test.log'
Just don't use sudo.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
if the functionality has been backported, but
the firewalld.richlanguage man page on my c7 system doesn't mention
it. It should work on CentOS 8+.
Another solution is to set a direct rule, which is evaluated first.
Lastly, its my experience that
the infrastructure and
politics around each will vary widely. If you have a question that is codebase
specific, then just ask it without talking about the distro it came from, but
as soon as it becomes clear that it is infrastructure related, keep it on the
appropriate list.
—
Jonathan Billi
t a file and add a line. I suggest giving that
a try.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
sudo-1.8.23-9.el7.x86_64 from @base removed (updateinfo)
> No packages needed for security; 1 packages available
The CentOS repos have never included security metadata. yum-security
is basically useless with the base CentOS repos (although they will
pick up security repo metadata from EP
t OK for everyone. But the
way this was announced, there are a lot of people who have lost trust
in CentOS and Red Hat. Changing the end of life for CentOS 8 has
broken our trust in the project.
I see a lot of promises that Stream will have better engagement with
the community. Why would we trus
31 May 2029
+31 December 2021 https://blog.centos.org/2020/12/future-is-centos-stream/";>*
--
Jonathan Billings
___
C
' command that
looks up a country from an IP.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
es from
an IP address. The bind-utils executables are all linked against
libGeoIP.so.1, so I assume they use some functionality from that
library.
/usr/bin/geoipupdate is a tool to update the data files in the GeoIP
package.
--
Jonathan Billings
__
yum repositories or rpm binaries?
>
> No, 7.4p1-21 is the most recent up to date version in CentOS 7. See
> https://access.redhat.com/security/updates/backporting/ for more info.
Perhaps it would help to explain why you need the 8.4 release? I’d there a
feature you need not in the vers
the
> order in the partition table;
No, but if my linux distro created out of order partition sequences on
initial install I'd throw it in the trash.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
it might make sense
to put the root ext4 at the end of the disk, so it is actually
counterproductive to put swap at the end.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
At least with Stratis, there's an attempt to work within the Linux
world. I'm excited to see Fedora making btrfs as the default root
filesystem, too.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
o F32.
Are you sure it isn't dropping to basic VGA or VESA driver because the
video card isn't supported in Fedora? Can you change the resolution
through the control panel or xrandr?
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
plex iptables
config too. Had you really wanted to test something with iptables, use -I
(insert) which puts it at the front of the rules. Obviously, the best thing to
do is to use firewalld tools with firewalld.
--
Jonathan Billings
___
C
from previous posts, it's better to just
let the BIOS think it's a JBOD and use the linux software RAID tools
directly.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
ovide security metadata.
RHEL supports the security flag to yum update, because they curate their repo
metadata with that data, but it isn’t available to CentOS users.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
On Thu, Nov 12, 2020 at 03:21:02PM -0500, Jonathan Billings wrote:
> yum --setopt='proxy=socks5://localhost:8000' update
It occurs to me that my private networks have working DNS, so if yours
doesn't, you should use:
yum --setopt='proxy=socks5h://localhost:8000&#
On Thu, Nov 12, 2020 at 03:21:02PM -0500, Jonathan Billings wrote:
> What part? For the first part, either define 'DynamicForward 8000' in
> a Host section in ~/.ssh/config, or run 'ssh -D 8000 hostname' to set
> it with command line options. Then just set your SOCKS
On Thu, Nov 12, 2020 at 10:02:57AM -0700, S Bob wrote:
> On 11/12/20 7:50 AM, Jonathan Billings wrote:
> > If this is actually something you want to do with regularity, I
> > suggest using the SSH SOCKS proxy (with the DynamicForward port), and
> > configure Firefox to use th
would cause a command to be run at 4:30 am on the 1st
and 15th of each month, plus every Friday.
So it looks like it is going to run either time.
A systemd timer might be able to be more exclusive, but parsing the
'systemd.time' man page makes my head hurt.
--
Jonathan Billing
vncserver, I suggest using the xvnc@.service
included in the package:
https://git.centos.org/rpms/tigervnc/blob/c8/f/SOURCES/xvnc.service
There are instructions in the comments.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
complicated network magic. Now imagine using Ansible to do this,
which is already setting up SSH sessions...
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
tly, what you are asking for should be to create your own systemd
service to launch on boot. Systemd service units are trivial to write.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
e if you want it to be
something else. dhclient (the DHCP client in CentOS 7) can also send
dynamic dns updates when configured. (Look in the man page for
dhclient.conf, I believe it is do-forward-updates.)
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
On Mon, Oct 26, 2020 at 01:21:10PM +0100, Leon Fauster via CentOS wrote:
>
> Am 26.10.20 um 12:45 schrieb Jonathan Billings:
> > On Oct 23, 2020, at 14:45, Leon Fauster via CentOS
> > wrote:
> > > Mozilla released version 68.12.0, on August 25, 2020 ->
> > >
hat Red Hat has released another Firefox:
https://access.redhat.com/errata/RHSA-2020:4330
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
se.
See for more details:
https://www.freedesktop.org/software/systemd/man/systemd.exec.html#EnvironmentFile=
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
;m glad to see flash die just a little earlier.
It's not really comparable to the terrible EFI/shim issue that
happened, which was terrible for servers and workstations that can't
be reached remotely because they're wedged in the boot, especi
org/pipermail/centos/2020-September/351667.html
>
> Downgrading, and excluding the 78.3.0-1 from yum is my workaround.
Well, the good news is you have over a month to migrate away from
CentOS 6, which goes end of life at the end of November, 2020.
--
Jonathan Billings
___
oken or a
configuration file removed.
You need to take a look at the systemd journal to see what errors pulseaudio is
getting when you log in as the user.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
Theory yet so they didn't
know it was composed of multiple small entities. Also, the word
'Viri' is the plural of the masculine word 'Vir' for 'Male human', so
it is confusing. ('vir' used in the words 'tr
want it
to work with selinux, so XFS or ext4.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
On Thu, Oct 08, 2020 at 12:31:34PM -0400, cent...@foxengines.net wrote:
> find / -maxdepth 1 -xdev -type d | while read; do du -shx $d; done
If you want to use du to find sparse files, add --apparent-size.
--
Jonathan Billings
___
CentOS mailing l
ren't in RHEL.
(Disclaimer: I don't know one way or the other, just checked on my
RHEL8 system to see if I could install it, and I can't)
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
re running CentOS 6 to avoid that,
you're out of luck.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
cle is for creating a fresh, unformatted disk image and
mounting it via the loopback. Since this image is already formatted,
you'd just be deleting data by formatting it.
Anyway, you don't generally need to mount anything if you're using
photorec or similar tools.
--
Jonathan Billing
27;s very important and you are willing to spend money, there are
data recovery services that might be able to extract the data.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
hard to even compare the two.
It is “free” only for noncommercial use. It isn’t open source.
https://www.nomachine.com/faq
If you want to try something else, take a look at xpra (http://xpra.org/).
It’s in EPEL8.
--
Jonathan Billings
___
CentOS mailing
n advice that's listed. mod_perl *and*
mod_php? Each httpd must be huge!
Why are you even posting this to a public list? Use your blog for
this kind of thing. I know you have one, you post it repeatedly to
random lists.
--
Jonathan Billings
etty well:
https://developers.redhat.com/blog/2016/09/20/managing-temporary-files-with-systemd-tmpfiles-on-rhel7/
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
Best advice I can offer is to make $HOME local but have symlinks into
NFS for directories that can be safely unmounted and remounted.
Windows doesn't really have network home directories like UNIX does,
and their SMB client handles IP roaming better.
--
Jonathan Billings
__
ation file or in this case how to specify my own dist tag.
Hello,
It seems that the OpenSUSE mock configs[1] use the same syntax. I wonder if
you need to invoke mock in a specific way to not override the macro?
1.
https://github.com/rpm-software-management/mock/blob/master/mock-core-configs/e
file I am using that works with dnf on a
> centos 8 machine.
>
> Can someone tell me what I am doing wrong?
I assume you added the yum repo after a line that looks like this:
config_opts['dnf.conf'] += """
And before a line that looks like this:
“””
-
latest release. The shim package
with the fix is the latest.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
the “Legacy” CSM by
2020. They might have changed their schedule but I suspect we’ll start seeing
hardware without anything but UEFI.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
it's available in CentOS, it's pending backport for CentOS
> 7)
As I mentioned earlier, the Red Hat errata site is a good place to
look. You can search for CVEs there too. There's also a
RHSA-Announce mailing list if you'd prefer that they end up in your
mailbox:
h
ugs
posted related to snapd and selinux failures similar to that.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
On Jul 1, 2020, at 05:25, Jeffrey Walton wrote:
>
> /opt/rh/httpd24/root/etc/httpd/logs
The rpm is complaining that cpio can’t extract this path. Is it supposed to be
a link but now it’s a directory?
--
Jonathan Billings
___
CentOS mailin
a new project, definitely start with php 7. But if you
have concerns about an existing 5.x codebase, as long as you are keeping your
OS up to date, you have some time to migrate.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
These are CentOS systems, aren’t they? CentOS doesn’t configure networking
with /etc/networks. The files they use are in
/etc/sysconfig/network-scripts/ifcfg-*.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
sh'
> ssh
>
> # iptables -L -n | egrep -o '22|ssh'
>
>
> Any hints?
'iptables' and 'nftables' are competing technologies. In CentOS 8,
firewalld's backend was switched from iptables to nftables. So it
would be exp
er hasn’t branched it for epel8 yet. I suspect if other people
piled on the ticket it might get more attention...
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
fic.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
py, so you won’t get a
consistent flow of data after some time. /dev/zero should always return data,
though. It I agree it makes more sense to use iperf.
--
Jonathan Billings
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
lowing code:
>
> foreach (keys %ENV) { print "$_=$ENV{$_}\n";}
>
>
> but the only line I get back is:
>
> XINETD_LANG=en_US
I don't believe that xinetd tells the underlying processes anything
about IPs, since xinetd handles the network co
eak a lot of software if you try to use it for
anything more complex than 'ls' and 'cp'.
For what it's worth, Samba with SMBv3 and the POSIX extension[1] is a
lot more tolerant of bad connections, and presents itself as a real
filesystem under linux.
1. ht
1 - 100 of 806 matches
Mail list logo
