[CentOS] SELinux upgrade

2017-01-19 Thread Marcin Trendota
Hello All After recent system upgrade (this night) i lost access to two servers through SSH, because of change in SELinux policy - i have ssh there on different port and now it's gone. Thanks to puppet i was able to change SSH port back to default and log in, but is this expected behavior? I thou

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Fabian Arrotin
On 19/01/17 09:43, Marcin Trendota wrote: > Hello All > > After recent system upgrade (this night) i lost access to two servers > through SSH, because of change in SELinux policy - i have ssh there on > different port and now it's gone. > > Thanks to puppet i was able to change SSH port back to d

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Hal Wigoda
I have experienced this myself. It is very upsetting. (Sent from iPhone, so please accept my apologies in advance for any spelling or grammatical errors.) > On Jan 19, 2017, at 2:57 AM, Fabian Arrotin wrote: > > log ___ CentOS mailing list CentOS

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Marcin Trendota
W dniu 19.01.2017 o 10:17, Hal Wigoda pisze: > I have experienced this myself. It is very upsetting. It happened on servers with docker installed. I got error message there: # semanage port -a -t ssh_port_t -p tcp Re-declaration of type docker_t Failed to create node Bad type declaration at

[CentOS] [OT] VOIP

2017-01-19 Thread TE Dukes
Hello, I changed ISPs a few weeks ago and now I'm on cable. In doing so, I lost the ability to use the DSL as a FAX line. So, I bought an OOMA. Turns out it uses a number of ports, three of which are reserved, 53 TCP/UDP, 110 TCP and 443 TCP. These ports have already been port forwarded from my

Re: [CentOS] [OT] VOIP

2017-01-19 Thread Albert McCann
> -Original Message- > From: CentOS [mailto:centos-boun...@centos.org] On Behalf Of TE Dukes > Sent: Thursday, January 19, 2017 7:41 AM > To: 'CentOS mailing list' > Subject: [CentOS] [OT] VOIP > > So, I bought an OOMA. Turns out it uses a number of ports, three of which > are reserved,

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Johnny Hughes
On 01/19/2017 04:47 AM, Marcin Trendota wrote: > W dniu 19.01.2017 o 10:17, Hal Wigoda pisze: >> I have experienced this myself. It is very upsetting. > > > It happened on servers with docker installed. I got error message there: > # semanage port -a -t ssh_port_t -p tcp > Re-declaration of

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Marcin Trendota
W dniu 19.01.2017 o 14:54, Johnny Hughes pisze: >> So, it looks like something with docker-selinux and container-selinux... > Right, I wanted to mention that docker-selinux was replaced with > container-selinux in the lasest version. Shouldn't be docker-selinux automatically removed then? -- Ov

Re: [CentOS] Increase CPU usage on HV after upgrade (7.2 -> 7.3)

2017-01-19 Thread Subscriber
Hello Gordon, Wednesday, January 18, 2017, 11:52:35 PM, you wrote: > On 01/18/2017 05:34 AM, Subscriber wrote: >> Someone noticed something similar? > How is your storage arranged, It is software RAID1 + LVM > and what kind of IO patterns do those VMs > have? Do not quite understand. What do

Re: [CentOS] Reliable way of having both LAN and WIFI on headless box

2017-01-19 Thread Gary Stainburn
On Wednesday 18 January 2017 15:09:49 Valeri Galtsev wrote: > On Wed, January 18, 2017 4:24 am, Eliezer Croitoru wrote: > > You could say the same thing about computers in general: > > I hate them, they automated many tasks in life and took many jobs out of > > the > > market!. > > And they suck.

Re: [CentOS] Increase CPU usage on HV after upgrade (7.2 -> 7.3)

2017-01-19 Thread Subscriber
Hello Gianluca, Wednesday, January 18, 2017, 3:54:15 PM, you wrote: > In the mean time, if you have not disabled it, you should find some > collected statistics from sysstat/sar. > Look at the sarXX files under /var/log/sa. They should be kept for 30 day > by default in CentOS 7. Unfortunately,

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Gordon Messmer
On 01/19/2017 12:43 AM, Marcin Trendota wrote: After recent system upgrade (this night) i lost access to two servers through SSH, because of change in SELinux policy - i have ssh there on different port and now it's gone. Which release? I also run ssh on an alternate port on one host, and tha

Re: [CentOS] Increase CPU usage on HV after upgrade (7.2 -> 7.3)

2017-01-19 Thread Gordon Messmer
On 01/19/2017 06:29 AM, Subscriber wrote: and what kind of IO patterns do those VMs have? Do not quite understand. What do you mean? What at the VMs doing? Are they entirely idle? Are they doing light work, mostly reading from disks? If they're not generating disk IO, then that's not rel

Re: [CentOS] Increase CPU usage on HV after upgrade (7.2 -> 7.3)

2017-01-19 Thread Subscriber
Hello Subscriber, Thursday, January 19, 2017, 4:44:04 PM, you wrote: > Hello Gianluca, > Wednesday, January 18, 2017, 3:54:15 PM, you wrote: >> In the mean time, if you have not disabled it, you should find some >> collected statistics from sysstat/sar. >> Look at the sarXX files under /var/log

Re: [CentOS] Increase CPU usage on HV after upgrade (7.2 -> 7.3)

2017-01-19 Thread Gordon Messmer
On 01/19/2017 06:54 AM, Subscriber wrote: But I collect such statistics in Zabbix. And the numbers and graphs indicate an increase in the load on the CPU (ie System time). "load" has another meaning in the context of POSIX system performance counters. I'm pretty sure you're talking about

Re: [CentOS] Increase CPU usage on HV after upgrade (7.2 -> 7.3)

2017-01-19 Thread Subscriber
Hello Gordon, Thursday, January 19, 2017, 5:09:29 PM, you wrote: > On 01/19/2017 06:54 AM, Subscriber wrote: >> But I collect such statistics in Zabbix. And the numbers and graphs >> indicate an increase in the load on the CPU (ie System time). > "load" has another meaning in the context of

Re: [CentOS] Increase CPU usage on HV after upgrade (7.2 -> 7.3)

2017-01-19 Thread m . roth
Subscriber wrote: > Hello Gianluca, > > Wednesday, January 18, 2017, 3:54:15 PM, you wrote: > >> In the mean time, if you have not disabled it, you should find some >> collected statistics from sysstat/sar. >> Look at the sarXX files under /var/log/sa. They should be kept for 30 >> day >> by defaul

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Daniel J Walsh
On 01/19/2017 08:57 AM, Marcin Trendota wrote: > W dniu 19.01.2017 o 14:54, Johnny Hughes pisze: > >>> So, it looks like something with docker-selinux and container-selinux... >> Right, I wanted to mention that docker-selinux was replaced with >> container-selinux in the lasest version. > Shouldn

Re: [CentOS] Increase CPU usage on HV after upgrade (7.2 -> 7.3)

2017-01-19 Thread Subscriber
Hello Gordon, Thursday, January 19, 2017, 4:57:48 PM, you wrote: > On 01/19/2017 06:29 AM, Subscriber wrote: >>> and what kind of IO patterns do those VMs >>> have? >> Do not quite understand. What do you mean? >> > What at the VMs doing? Its gateway from local network to Internet > Are they e

Re: [CentOS] Increase CPU usage on HV after upgrade (7.2 -> 7.3)

2017-01-19 Thread Subscriber
Hello m, Thursday, January 19, 2017, 5:17:48 PM, you wrote: >>> In the mean time, if you have not disabled it, you should find some >>> collected statistics from sysstat/sar. >>> Look at the sarXX files under /var/log/sa. They should be kept for 30 >>> day >>> by default in CentOS 7. >> >> Unfort

Re: [CentOS] [OT] VOIP

2017-01-19 Thread John R Pierce
On 1/19/2017 4:41 AM, TE Dukes wrote: I lost the ability to use the DSL as a FAX line. Analog traditional FAX may not work very well over VOIP.Just sayin'. So, I bought an OOMA. Turns out it uses a number of ports, three of which are reserved, 53 TCP/UDP, 110 TCP and 443 TCP. These ports

Re: [CentOS] [OT] VOIP

2017-01-19 Thread TE Dukes
-Original Message- From: CentOS [mailto:centos-boun...@centos.org] On Behalf Of John R Pierce Sent: Thursday, January 19, 2017 1:01 PM To: centos@centos.org Subject: Re: [CentOS] [OT] VOIP On 1/19/2017 4:41 AM, TE Dukes wrote: > I lost > the ability to use the DSL as a FAX line. Analog

[CentOS] Restricting mirrors off a repo

2017-01-19 Thread Mauricio Tavares
What is the best way to specify which mirrors off a repository you want to use? Have a host with rather restricted egress rules and want to allow it to reach a couple of mirrors for each repo it needs. And, yes, I am not ready to mirror them locally. ___

Re: [CentOS] Restricting mirrors off a repo

2017-01-19 Thread John R Pierce
On 1/19/2017 1:57 PM, Mauricio Tavares wrote: What is the best way to specify which mirrors off a repository you want to use? Have a host with rather restricted egress rules and want to allow it to reach a couple of mirrors for each repo it needs. And, yes, I am not ready to mirror them locally.

[CentOS] SELinux upgrade

2017-01-19 Thread Scott Robbins
Well, got hit by this too. Ironically, I don't use docker, I think I had it installed being pulled in for something else. So, tried the yum remove docker* but no go. When I do semanage port -a -t ssh_port_t -p tcp I get an error Bad type declaration at /etc/selinux/targeted/tmp/modules/100/doc

[CentOS] amanda and selinux

2017-01-19 Thread Jon LaBadie
Anyone familiar with the selinux policy for the amanda backup software package? I'm getting lots of data not being backed up. For example, under /home there are 2 directory trees owned by root. Those get backed up, user home dirs do not. No AVC denials nor messages in /var/log/messages or journa

Re: [CentOS] [OT] VOIP

2017-01-19 Thread TE Dukes
> -Original Message- > From: CentOS [mailto:centos-boun...@centos.org] On Behalf Of TE Dukes > Sent: Thursday, January 19, 2017 2:03 PM > To: 'CentOS mailing list' > Subject: Re: [CentOS] [OT] VOIP > > > > -Original Message- > From: CentOS [mailto:centos-boun...@centos.org] On