Re: [CentOS] selinux allow apache log access
On 17/06/15 17:43, Tim Dunphy wrote: What turns up in myzabbix.te? Same deal. :( #semodule -i myzabbix.te semodule: Failed on myzabbix.te! sigh... but thanks any other clues? Sorry, I didn't put that very clearly. Could you show us the contents of myzabbix.te. -- regards Harold Toms URL: http://iodine.chem.qmul.ac.uk ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] AutoFS mystery ...
Ashley M. Kirchner wrote: I need a second pair of eyes here, please. I have a CentOS 6.6 server (let's call it 'S1) that has a Samba share on it that is currently working. We can mount that drive on our Windows work stations and transfer/delete from it just fine. It's setup as a guest config so no user specific passwords or any other restrictions like that. I'm trying to setup another server (S2), also CentOS 6.6 with autofs to mount that same share when it needs to. For some reason I can't seem to get it to work. I get no error message anywhere, no indication of a failure, nothing. snip Dumb question: is selinux enabled? mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] NUX Skype for Linux
On Wed, Jun 17, 2015 at 09:01:08AM -0400, James B. Byrne wrote: This is a Linux instal not a MS Windows. There are no options listed in the Linux version other than Advanced. Advanced has the choices of: Skype: 'Enable Skype WiFi' (off) and Connection: Use port (0) for incoming connections Drop Down Proxy Settings (Automatic Proxy Detection) Host (blank) Port (blank) User (blank) Password (blank) And that is it. No additional tabs not additional choices. I will not have this software on any of our business computers I don't see any files or configuration in the 'skype' package in the Nux repo that would indicate it is installing a startup service. Also, some trivial testing with the program doesn't make it start up when I log out and back in. I'm curious how you got it to start up automatically? Maybe your desktop environment is starting it up automatically because it was running when you last shut it down? -- Jonathan Billings billi...@negate.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] more newbie questions -- init 5 works, init 3 doesn't for normal users
On 06/11/2015 05:27 PM, m.r...@5-cent.us wrote: Kay Schenk wrote: On 06/11/2015 08:28 AM, m.r...@5-cent.us wrote: Kay Schenk wrote: On 06/10/2015 10:06 PM, Gordon Messmer wrote: On 06/10/2015 05:25 PM, Kay Schenk wrote: I get /home/username not found when it's there and setup with correct permissions -- well here I am using it in run level 5 just fine! SNIP The file startx.trace will have a list of all of the commands run, and all of their output (including errors). /var/log/X* might be interesting as well. OK, this last bit sounds promising although this works as expected for root -- starts up gnome flawlessly. My previous setup imported settings to use a display manager, etc. So, I need to check on this. Right now, one of my main concerns is that my old /home partition/direction is supposedly associated WITH current users I setup and yet...NOT! The system does not recognize this association even though it asked me about setting it up when I created my first real user on installation. I had to go in and reset uids but that's no biggie and this process has worked fine before. I can't help but think this is related to the startx issue. I missed parts of this thread: are any of them mounted NFS? From root, su - user, and then do ls -laF, and check the ownership and group, *including* of ./ (the current directory). I mention NFS because of issues we've been having here, but we're connected to AD, and I need to fix /etc/idmapd.conf to have our domain. Thanks for everyone's help. It seems the not locating /home for users was related to startx problem. The /home partition in question had been an old one, ext3, and requested not to format. All that was well. Partition mounted, etc. Unfortunately, I had inadvertently installed selinux (OK, I saw that but didn't' understand the consequences) and this was what was causing my odd non-root user login behavior (couldn't locate /home) AND the startx problems from init 3 level. After talking to an RH admin colleague, all fine now. On to more fun items as I get up to speed on CentOS! :) Check to see if the setroubleshoot package is installed. If not, do it. It'll generate log entries with sealerts, which will help you figure out how to shut up selinux Run it in permissive mode, in the meantime. mark one of my permanent goals: shutting up selinux ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos You probably want to execute # semanage fcontext -a -e /home /PATHTOYOURHOME # restorecon -R -v /PATHTOYOURHOME This tells SELinux to label content under /PATHTOYOURHOME as if it was under /home, and should fix most of your problems. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] AutoFS mystery ...
On Wed, Jun 17, 2015 at 10:33 AM, Ashley M. Kirchner ash...@pcraft.com wrote: I need a second pair of eyes here, please. I have a CentOS 6.6 server (let's call it 'S1) that has a Samba share on it that is currently working. We can mount that drive on our Windows work stations and transfer/delete from it just fine. It's setup as a guest config so no user specific passwords or any other restrictions like that. I'm trying to setup another server (S2), also CentOS 6.6 with autofs to mount that same share when it needs to. For some reason I can't seem to get it to work. I get no error message anywhere, no indication of a failure, nothing. So on S2 I have: $ cat /etc/auto.master /misc /etc/auto.misc /mnt/trex /etc/auto.trex /net-hosts $ cat /etc/auto.trex trex -fstype=cifs,rw,noperm,credentials=/etc/cifs-credentials-trex ://bigrip/TREX If I've read the files correctly, you might need to use /mnt/trex/trex for autofs to work. Can you try: /mnt/etc/auto.trex and see if that works as you intended? Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] AutoFS mystery ...
Care to explain those two. direct versus indirect mapping? On Wed, Jun 17, 2015 at 12:13 PM, Akemi Yagi amy...@gmail.com wrote: On Wed, Jun 17, 2015 at 11:06 AM, Ashley M. Kirchner ash...@pcraft.com wrote: Nope, that completely takes over '/mnt' and everything else that's in there becomes invisible. However, I do believe you're on to something here. Looking back at the other, working setup, I do realize now that I did the same, where the path was '/mnt/something' and the autofs mounts are within that, so they became '/mnt/something/mount-point' - so thanks for that hint. I'll go fiddle with it. Right, I use something other than /mnt for my autofs. Another thing you may want to consider is use of 'direct map' instead of 'indirect map'. If I remember correctly, it works well with cifs mounts, too. Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] NUX Skype for Linux
I did not find anything in ~ and only this in /etc. Where else should I look? find /etc -type f | xargs grep -in skype /etc/pki/tls/certs/ca-bundle.trust.crt:2260:Subject: C=US/postalCode=38477, ST=Florida, L=English/street=Sea Village 10, O=Google Ltd., OU=Tech Dept., OU=Hosted by GTI Group Corporation, OU=PlatinumSSL, CN=login.skype.com /etc/pki/tls/certs/ca-bundle.trust.crt:2313: DNS:login.skype.com, DNS:www.login.skype.com /etc/pki/tls/certs/ca-bundle.trust.crt:2333:Alias: Bogus Skype Binary file /etc/.git/index matches /etc/dbus-1/system.d/skype.conf:8:allow own=com.Skype.API/ /etc/dbus-1/system.d/skype.conf:10:allow send_destination=com.Skype.API/ /etc/dbus-1/system.d/skype.conf:11:allow receive_sender=com.Skype.API/ /etc/dbus-1/system.d/skype.conf:13:allow send_path=/com/Skype/ /etc/.etckeeper:299:maybe chmod 0644 'dbus-1/system.d/skype.conf' /etc/.etckeeper:1233:maybe chmod 0644 'prelink.conf.d/skype.conf' /etc/selinux/targeted/contexts/files/file_contexts:2829:/usr/bin/skype -- system_u:object_r:execmem_exec_t:s0 /etc/selinux/targeted/modules/active/file_contexts.template:2908:/usr/bin/skype -- system_u:object_r:execmem_exec_t:s0 /etc/selinux/targeted/modules/active/file_contexts:2829:/usr/bin/skype -- system_u:object_r:execmem_exec_t:s0 /etc/prelink.conf.d/skype.conf:1:-b /usr/bin/skype On Wed, June 17, 2015 08:35, Virilha wrote: generic way to find where something is being called, if you known the name of that something: enter as your user in terminal: # su - youruser $ grep -irs skype . | less now just need to parse the output, find where its being called (probably .X?? or .x?? or .gnome??), remove it. --Virilha -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrnemailto:byrn...@harte-lyne.ca Harte Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] AutoFS mystery ...
On Wed, Jun 17, 2015 at 11:16 AM, Ashley M. Kirchner ash...@pcraft.com wrote: Care to explain those two. direct versus indirect mapping? On Wed, Jun 17, 2015 at 12:13 PM, Akemi Yagi amy...@gmail.com wrote: Another thing you may want to consider is use of 'direct map' instead of 'indirect map'. If I remember correctly, it works well with cifs mounts, too. I'm sure you can find nice documentations that explain the two mapping methods. Just briefly, With 'direct map', you can mount virtually at any point because it uses absolute paths. In some situations (like mounting directly under /), 'direct map' is the only option for autofs. In /etc/auto.master, you add a line similar to: /- /etc/auto.direct And in /etc/auto.direct, you may have: /mounthere -fstype=cifs,rw,blah ://machine/share Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] AutoFS mystery ...
Nope, that completely takes over '/mnt' and everything else that's in there becomes invisible. However, I do believe you're on to something here. Looking back at the other, working setup, I do realize now that I did the same, where the path was '/mnt/something' and the autofs mounts are within that, so they became '/mnt/something/mount-point' - so thanks for that hint. I'll go fiddle with it. On Wed, Jun 17, 2015 at 11:54 AM, Akemi Yagi amy...@gmail.com wrote: On Wed, Jun 17, 2015 at 10:33 AM, Ashley M. Kirchner ash...@pcraft.com wrote: I need a second pair of eyes here, please. I have a CentOS 6.6 server (let's call it 'S1) that has a Samba share on it that is currently working. We can mount that drive on our Windows work stations and transfer/delete from it just fine. It's setup as a guest config so no user specific passwords or any other restrictions like that. I'm trying to setup another server (S2), also CentOS 6.6 with autofs to mount that same share when it needs to. For some reason I can't seem to get it to work. I get no error message anywhere, no indication of a failure, nothing. So on S2 I have: $ cat /etc/auto.master /misc /etc/auto.misc /mnt/trex /etc/auto.trex /net-hosts $ cat /etc/auto.trex trex -fstype=cifs,rw,noperm,credentials=/etc/cifs-credentials-trex ://bigrip/TREX If I've read the files correctly, you might need to use /mnt/trex/trex for autofs to work. Can you try: /mnt/etc/auto.trex and see if that works as you intended? Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] AutoFS mystery ...
Ok, I think I discovered an issue. It may be a feature but this is what has bitten me now. After making the above fixes with the proper paths, it still wasn't working. When I do an smbclient query, it gave me all the details indicating the share is there and available. however, autofs was still failing. When I tried a manual mount on the client, I would get: $ mount -t cifs //bigrip/trex /mnt/trex -o user=guest Retrying with upper case share name mount error(6): No such device or address Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) And on the server side I see this: CIFS VFS: cifs_mount failed w/return code = -6 On a hunch, I decided to make a small change on the server side. The samba configuration is set up with a server name and several aliases for the various shares, so the staff here can go to \\server-name\path and \\server-alias\path and have different access control, different files, and all that fun, but it's all on the same physical machine. The path I was trying to mount is on one of those aliases. So I made that change on the server, exporting the share on the real server name and now suddenly it's working. I can mount it with no problems, and autofs is working. When I switched it back to using the server alias, it fails. Interestingly, the Windows clients mounting this share, using the server alias, are working just fine. But for some reason that does not work when I try it from a CentOS machine. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] selinux allow apache log access
Sorry, I didn't put that very clearly. Could you show us the contents of myzabbix.te. No prob! Thanks for all the help! But in searching my system I don't find anything of the sort. [root@monitor2:~] #updatedb [root@monitor2:~] #locate myzabbix.te [root@monitor2:~] #find / -name myzabbix.* I also did search using 'yum provides' to find something similar. But wasn't' able to find anything. yum provides */myzabbix.* ... No matches found Maybe I'll need to install a package? Thanks, Tim On Wed, Jun 17, 2015 at 2:10 PM, Harold Toms h.t...@qmul.ac.uk wrote: On 17/06/15 17:43, Tim Dunphy wrote: What turns up in myzabbix.te? Same deal. :( #semodule -i myzabbix.te semodule: Failed on myzabbix.te! sigh... but thanks any other clues? Sorry, I didn't put that very clearly. Could you show us the contents of myzabbix.te. -- regards Harold Toms URL: http://iodine.chem.qmul.ac.uk ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] AutoFS mystery ...
On Wed, Jun 17, 2015 at 11:06 AM, Ashley M. Kirchner ash...@pcraft.com wrote: Nope, that completely takes over '/mnt' and everything else that's in there becomes invisible. However, I do believe you're on to something here. Looking back at the other, working setup, I do realize now that I did the same, where the path was '/mnt/something' and the autofs mounts are within that, so they became '/mnt/something/mount-point' - so thanks for that hint. I'll go fiddle with it. Right, I use something other than /mnt for my autofs. Another thing you may want to consider is use of 'direct map' instead of 'indirect map'. If I remember correctly, it works well with cifs mounts, too. Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] selinux allow apache log access
On Wed, Jun 17, 2015 at 03:30:51PM -0400, Tim Dunphy wrote: No prob! Thanks for all the help! But in searching my system I don't find anything of the sort. [root@monitor2:~] #updatedb [root@monitor2:~] #locate myzabbix.te [root@monitor2:~] #find / -name myzabbix.* I also did search using 'yum provides' to find something similar. But wasn't' able to find anything. What we're asking for is the contents of the .te file that is created when you run audit2allow. -- Jonathan Billings billi...@negate.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] selinux allow apache log access
On 06/17/2015 04:03 PM, Jonathan Billings wrote: On Wed, Jun 17, 2015 at 03:30:51PM -0400, Tim Dunphy wrote: No prob! Thanks for all the help! But in searching my system I don't find anything of the sort. [root@monitor2:~] #updatedb [root@monitor2:~] #locate myzabbix.te [root@monitor2:~] #find / -name myzabbix.* I also did search using 'yum provides' to find something similar. But wasn't' able to find anything. What we're asking for is the contents of the .te file that is created when you run audit2allow. Go back to the original email and do what you were told # grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix # semodule -i myzabbix.pp You did audit2allow -M zabbix Which created zabbix.te and zabbix.pp, which is bad. It will attempt to replace the system module. If you use myzappix, it will add the allow rules. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] AutoFS mystery ...
On Wed, Jun 17, 2015 at 12:21 PM, m.r...@5-cent.us wrote: Dumb question: is selinux enabled? Yes, so is the other, working, setup. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] selinux allow apache log access
Hey guys, Thanks! That worked. [root@monitor2:~] #grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix IMPORTANT *** To make this policy package active, execute: semodule -i myzabbix.pp [root@monitor2:~] #semodule -i myzabbix.pp [root@monitor2:~] #lsof -i :80 [root@monitor2:~] #systemctl start httpd [root@monitor2:~] #lsof -i :80 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME httpd 18664 root4u IPv6 12477027 0t0 TCP *:http (LISTEN) httpd 18665 apache4u IPv6 12477027 0t0 TCP *:http (LISTEN) httpd 18666 apache4u IPv6 12477027 0t0 TCP *:http (LISTEN) httpd 18667 apache4u IPv6 12477027 0t0 TCP *:http (LISTEN) httpd 18668 apache4u IPv6 12477027 0t0 TCP *:http (LISTEN) httpd 18669 apache4u IPv6 12477027 0t0 TCP *:http (LISTEN) [root@monitor2:~] #getenforce Enforcing Definitely appreciate the help and sorry if there was any confusion on my part. All set at this point! Best, Tim On Wed, Jun 17, 2015 at 4:11 PM, Daniel J Walsh dwa...@redhat.com wrote: On 06/17/2015 04:03 PM, Jonathan Billings wrote: On Wed, Jun 17, 2015 at 03:30:51PM -0400, Tim Dunphy wrote: No prob! Thanks for all the help! But in searching my system I don't find anything of the sort. [root@monitor2:~] #updatedb [root@monitor2:~] #locate myzabbix.te [root@monitor2:~] #find / -name myzabbix.* I also did search using 'yum provides' to find something similar. But wasn't' able to find anything. What we're asking for is the contents of the .te file that is created when you run audit2allow. Go back to the original email and do what you were told # grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix # semodule -i myzabbix.pp You did audit2allow -M zabbix Which created zabbix.te and zabbix.pp, which is bad. It will attempt to replace the system module. If you use myzappix, it will add the allow rules. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] AutoFS mystery ...
Akemi Yagi wrote: On Wed, Jun 17, 2015 at 11:16 AM, Ashley M. Kirchner ash...@pcraft.com wrote: Care to explain those two. direct versus indirect mapping? On Wed, Jun 17, 2015 at 12:13 PM, Akemi Yagi amy...@gmail.com wrote: Another thing you may want to consider is use of 'direct map' instead of 'indirect map'. If I remember correctly, it works well with cifs mounts, too. I'm sure you can find nice documentations that explain the two mapping methods. Just briefly, With 'direct map', you can mount virtually at any point because it uses absolute paths. In some situations (like mounting directly under /), 'direct map' is the only option for autofs. In /etc/auto.master, you add a line similar to: /- /etc/auto.direct And in /etc/auto.direct, you may have: /mounthere -fstype=cifs,rw,blah ://machine/share Is auto.net considered direct mounting, or indirect? One thing to note, Ashley - we have that set up, but you *can't* ll /project, it's not there until you look for it by name, say, ll /project/joesproj, and *then* it's there. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS QA
Thanks for the replies. I understood that a major part of testing being done by Redhat. But after repackaging the sources how doest CentOS make sure the integrity of the product. Is it being done by a dedicated team or by community ? On Fri, Jun 12, 2015 at 8:37 PM, Jonathan Billings billi...@negate.org wrote: On Fri, Jun 12, 2015 at 09:49:42AM +0530, Sudhi wrote: I'm not sure if this is the forum to ask this query. I was wondering how the CentOS making sure that it work with different architectures, machine models etc. Is there any team to do all these testing ? This isn't for CentOS, but for RHEL: https://access.redhat.com/ecosystem/search/#/ecosystem/Red%20Hat%20Enterprise%20Linux ... although I suspect much of it will apply to CentOS too. But if it doesn't, don't blame CentOS. -- Jonathan Billings billi...@negate.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
well. current version of kvm on centos does not allow live backups without downtime to guest. it's only possible with newer version of kvm and related qemu tools.. so sad.. -- Eero 2015-06-17 19:44 GMT+03:00 Gordon Messmer gordon.mess...@gmail.com: On 06/17/2015 03:32 AM, Robert Heller wrote: If host is using LVM for disk partitioning and uses logical volumes for VM disks, it is possible to do LVM 'snapshots' and these snapshots can then be backed up, all without shutting down the VMs. Note that making an LVM snapshot, alone, will not provide a consistent image for a backup. If you want to back up a snapshot of a running system, you should use virsh snapshot-create to capture the complete state of the system. http://searchservervirtualization.techtarget.com/tip/Getting-a-clear-picture-on-KVM-snapshot-basics Backups from within the guest will typically be much smaller. I'm working on a flexible snapshot script that supports multiple storage types. https://bitbucket.org/gordonmessmer/dragonsdawn-snapshot ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
On 06/17/2015 10:24 AM, Mihamina Rakotomandimby wrote: On 06/17/2015 04:52 PM, Lamar Owen wrote: But to address the direct question of the OP, I use KVM for many things, but I have older hardware in quantity on which I'll likely run Xen4CentOS with paravirtualized guests, Is not LXC an alternative for such situation? Simpler, fully integrated to libvirt,... Perhaps for some of our workloads LXC and LXD (for 'live migration' things) would work, but I have a need on a few VM's to have different kernels and even completely different yet paravirtualized OSes (pfSense for one, since FreeBSD has paravirtualization drivers) running, even going as far as having mixed 32 and 64 bit installs. Some of the applications we use are a bit version-locked for various reasons beyond our control. And, yes, I'd like hypervisor-based HA and live migration for my pfSense and OpenBSD VM's. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] How can I get .xsession-errors back?
On Tue, Jun 16, 2015 at 03:53:41PM -0700, Kay Schenk wrote: All my users are starting X with startx and the default .xinitrc. Is this the problem? Yes. It's typically set up in /etc/X11/xinit/Xsession, and startx doesn't use it. -- Jonathan Billings billi...@negate.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] AutoFS mystery ...
I need a second pair of eyes here, please. I have a CentOS 6.6 server (let's call it 'S1) that has a Samba share on it that is currently working. We can mount that drive on our Windows work stations and transfer/delete from it just fine. It's setup as a guest config so no user specific passwords or any other restrictions like that. I'm trying to setup another server (S2), also CentOS 6.6 with autofs to mount that same share when it needs to. For some reason I can't seem to get it to work. I get no error message anywhere, no indication of a failure, nothing. So on S2 I have: $ cat /etc/auto.master /misc /etc/auto.misc /mnt/trex /etc/auto.trex /net-hosts $ cat /etc/auto.trex trex -fstype=cifs,rw,noperm,credentials=/etc/cifs-credentials-trex ://bigrip/TREX The file /etc/cifs-credentials-trex is present with the correct credentials, and the server also has in its /etc/hosts file an entry that tells it what IP that 'bigrip' machine is. Having done all of that and restarting the service (or even the whole machine) does not auto mount that share and I can't figure out why. I've completely disabled iptables on both machines, no luck. When I issue an smbclient command, I get this: $ smbclient -L bigrip -Uguest Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.6.23-14.el6_6] Sharename Type Comment - --- IPC$IPC IPC Service (BRASCO) TREXDisk T-Rex I should point out that I have a nearly identical setup across two other machines that is working just fine. I say nearly identical because in that setup, the first server is actually a Windows Server system while the other is a CentOS6.6. I've tried as much as I can (or remember) and mirrored the same setup and config files. Nothing. So, what am I forgetting here? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] CentOS-announce Digest, Vol 124, Issue 8
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org
You can reach the person managing the list at
centos-announce-ow...@centos.org
When replying, please edit your Subject line so it is more specific
than Re: Contents of CentOS-announce digest...
Today's Topics:
1. CEEA-2015:1096 CentOS 6 hpsa Enhancement Update (Johnny Hughes)
2. CEBA-2015:1119 CentOS 6 dmidecode BugFix Update (Johnny Hughes)
3. CEBA-2015:1116 CentOS 7 ibus FASTTRACK BugFix Update
(Johnny Hughes)
4. CEBA-2015:1118 CentOS 7 yum-langpacks FASTTRACK BugFix Update
(Johnny Hughes)
--
Message: 1
Date: Tue, 16 Jun 2015 12:26:04 +
From: Johnny Hughes joh...@centos.org
To: centos-annou...@centos.org
Subject: [CentOS-announce] CEEA-2015:1096 CentOS 6 hpsa Enhancement
Update
Message-ID: 20150616122604.ga13...@n04.lon1.karan.org
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Enhancement Advisory 2015:1096
Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-1096.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
03437a2173e20eb8ce8778d09c8a07c50b1003bfda56a96faffcfe67cd83ea24
kmod-hpsa-3.4.4_1_RH4-1.el6_5.i686.rpm
x86_64:
c21189a54b69cfc15015b03f19994cca4f8637509d08642714dc3b10aac9cc00
kmod-hpsa-3.4.4_1_RH4-1.el6_5.x86_64.rpm
Source:
7c03f2214cdeee373156433b0df87918bc41faaab692d63a88d45aa972f41098
hpsa-3.4.4_1_RH4-1.el6_5.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net
--
Message: 2
Date: Tue, 16 Jun 2015 15:19:04 +
From: Johnny Hughes joh...@centos.org
To: centos-annou...@centos.org
Subject: [CentOS-announce] CEBA-2015:1119 CentOS 6 dmidecode BugFix
Update
Message-ID: 20150616151904.ga32...@n04.lon1.karan.org
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Bugfix Advisory 2015:1119
Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1119.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
57b7fdb152e4d62f1b59a5b8cc686eb98cbbf6ad60ed6cd381420cecc1f76c6a
dmidecode-2.12-5.el6_6.1.i686.rpm
x86_64:
a26f59a4ffb6bf6a9e981f3446098a60d53e049e0df3884dfa62e9daf4688bb1
dmidecode-2.12-5.el6_6.1.x86_64.rpm
Source:
aff9d3521aaf40f1cd949eebd07e377d3be0d071205acbb25c3172d2970c
dmidecode-2.12-5.el6_6.1.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net
--
Message: 3
Date: Tue, 16 Jun 2015 15:57:12 +
From: Johnny Hughes joh...@centos.org
To: centos-annou...@centos.org
Subject: [CentOS-announce] CEBA-2015:1116 CentOS 7 ibus FASTTRACK
BugFix Update
Message-ID: 20150616155712.ga48...@n04.lon1.karan.org
Content-Type: text/plain; charset=us-ascii
CentOS Errata and Bugfix Advisory 2015:1116
Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1116.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
x86_64:
b7b5662e5ba71c0963385d863ee8a8979c7606a328eec19b67b74ef3f16bb8fc
ibus-1.5.3-12.el7.i686.rpm
ad1bbbe4ea91163630c80108ce52b21e8b5dcc6cfc99d4975c8b590eddfed65c
ibus-1.5.3-12.el7.x86_64.rpm
0fcaae1c4938cb1cc5d85be63a81f4986e2826a62938cb667db8c0d881e6e51a
ibus-devel-1.5.3-12.el7.i686.rpm
cad67fceb4219852e6ef2960fbe9ecee71d314b3e9f9c8d8cb4ee7cb9f6cea2e
ibus-devel-1.5.3-12.el7.x86_64.rpm
8dfae5b39015ba1e9772cf1c88503daee2b45901cab13d677a5ade030b54f17c
ibus-devel-docs-1.5.3-12.el7.noarch.rpm
1e374a1c38bbb4b7f6002190c795f19da14a62eaa75c6a5bff58d5146f70e433
ibus-gtk2-1.5.3-12.el7.i686.rpm
7e7bf101a4dd8728a31719cca5c4e991b23732f41af65bb863a3be140a22acc3
ibus-gtk2-1.5.3-12.el7.x86_64.rpm
4d30cec4efa7c6e828694533e1178e3be43a84dd6d7978af218122b735e5afc3
ibus-gtk3-1.5.3-12.el7.x86_64.rpm
f76901728ff79797e5261eee3c0a1fee7f2ba5df9653e1869304fd08934d6770
ibus-libs-1.5.3-12.el7.i686.rpm
da043651d0f280a162afcf3d2d3411e9617c6673d9fcc508171f5fd5f758dad7
ibus-libs-1.5.3-12.el7.x86_64.rpm
8247fc7350f77cf0c40d808a9e4c25adadacbb9f20004d53e6a061ea38625ca5
ibus-pygtk2-1.5.3-12.el7.noarch.rpm
58976adad0ad20e041ba656595a96a3fa94b36dc80e6d525de73dc5b486b327d
ibus-setup-1.5.3-12.el7.noarch.rpm
Source:
6780a58c7c21e7e3971dcbdb807b202b8fd6ee9fd12aec499400e43404019943
ibus-1.5.3-12.el7.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net
--
Message: 4
Date: Tue, 16 Jun 2015 15:57:24 +
From: Johnny
Re: [CentOS] Virtualization
On 06/17/2015 09:54 AM, Alessandro Baggi wrote: Also ESX(i) is not CentOS related but is included in this post. And what about oVirt? MMmmm, I really thought ESX was in some way a RHEL derivative but when reading http://www.v-front.de/2013/08/a-myth-busted-and-faq-esxi-is-not-based.html it is clearly not... Anyway, I learnt a new thing today ;-) oVirt, in my opinion, is a bit harder to implement: basic usage seems to require at least 2 servers, according to http://www.ovirt.org/Quick_Start_Guide#Prerequisites There is an oVirt mailing list where you can ask specific questions: http://www.ovirt.org/Mailing_lists I would add XenServer to the list, which is currently my favorite, BUT it misses a Linux management interface http://xenserver.org/overview-xenserver-open-source-virtualization/source-code.html (I let you read what is the upstream ;-) ) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
qemu-img works for most image conversion formats including from vmware to kvm. try it? -- Eero 2015-06-17 14:43 GMT+03:00 Mihamina Rakotomandimby mihamina.rakotomandi...@rktmb.org: On 06/17/2015 11:10 AM, John R Pierce wrote: regardless of all that noise, in RHEL and therefore CentOS, KVM is the preferred and best supported hypervisor. I dont catch your point. The OP was wide enough in his question in order to allow that discussion. Anyway, I'll add one point: compatibility. In our example, we were heavily using VMware ESX and its VM format (at export) is not really supported for import by known solution. We ended at keeping old VMWare VMs on ESX and new ones on XenServer. Have you got any tool that could satisfy a vmdk to some more friandly format migration? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] NUX Skype for Linux
generic way to find where something is being called, if you known the name of that something: enter as your user in terminal: # su - youruser $ grep -irs skype . | less now just need to parse the output, find where its being called (probably .X?? or .x?? or .gnome??), remove it. --Virilha - Message from James B. Byrne byrn...@harte-lyne.ca - Date: Tue, 16 Jun 2015 08:54:51 -0400 From: James B. Byrne byrn...@harte-lyne.ca Reply-To: CentOS mailing list centos@centos.org Subject: [CentOS] NUX Skype for Linux To: centos@centos.org I had cause to install the Skype for Linux package from the NUX repo. I discover that this package is configured to automatically start Skype whenever one logs on to the Gnome desktop. This behaviour I do not wish. However, there seems to be no option in Skype to turn that 'feature' off. Is there any way to disable this in Gnome or elsewhere? I will be removing Skype shortly when the present need for it passes but I do not wish this thing automatically starting in the meantime. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrnemailto:byrn...@harte-lyne.ca Harte Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos - End message from James B. Byrne byrn...@harte-lyne.ca - ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
On 06/17/2015 11:10 AM, John R Pierce wrote: regardless of all that noise, in RHEL and therefore CentOS, KVM is the preferred and best supported hypervisor. I dont catch your point. The OP was wide enough in his question in order to allow that discussion. Anyway, I'll add one point: compatibility. In our example, we were heavily using VMware ESX and its VM format (at export) is not really supported for import by known solution. We ended at keeping old VMWare VMs on ESX and new ones on XenServer. Have you got any tool that could satisfy a vmdk to some more friandly format migration? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
regardless of all that noise, in RHEL and therefore CentOS, KVM is the preferred and best supported hypervisor. -- john r pierce, recycling bits in santa cruz ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] NUX Skype for Linux
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of m.r...@5-cent.us Sent: den 16 juni 2015 20:59 To: CentOS mailing list Subject: Re: [CentOS] NUX Skype for Linux I had cause to install the Skype for Linux package from the NUX repo. I discover that this package is configured to automatically start Skype whenever one logs on to the Gnome desktop. This behaviour I do not wish. However, there seems to be no option in Skype to turn that 'feature' off. Is there any way to disable this in Gnome or elsewhere? I will be removing Skype shortly when the present need for it passes but I do not wish this thing automatically starting in the meantime. You can't do this? Go to Tools - Options - General settings. Uncheck the option Start Skype when I start Windows. Save and Quit Skype. Next time you reboot Windows, Skype will not start with Windows You *are* joking, right? No, not really. Aren't the GUI's the same irrespective of the OS? I copy-pasted the setting steps to not have Skype autostart from a Windows-centric page, and I'm assuming the GUI, and should therefore be the same. If it'll make you feel better, please replace all instances of Windows above with CentOS. ;-) -- //Sorin ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
Please don't top-post with fully quoting all previous content. This is a mailinglist. Proxmox VE is based on Debian. What does this have to do with CentOS? As it makes use of KVM you can run CentOS on top of it as a virtualization guest. Alexander ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos . Also ESX(i) is not CentOS related but is included in this post. And what about oVirt? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
It's so sad that centos is using very old versio on kvm and due that fact live backup without downtime is not possible. Anyway, virtsh+virtmanager + kvm is good choice. -- Eero 2015-06-17 11:10 GMT+03:00 John R Pierce pie...@hogranch.com: regardless of all that noise, in RHEL and therefore CentOS, KVM is the preferred and best supported hypervisor. -- john r pierce, recycling bits in santa cruz ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] using rsync to sync desktop /home/user of to laptop /home/user
- g gel...@bellsouth.net escreveu: De: g gel...@bellsouth.net Para: centos@centos.org Enviadas: Terça-feira, 16 de Junho de 2015 18:17:36 (GMT-0300) Auto-Detected Assunto: Re: [CentOS] using rsync to sync desktop /home/user of to laptop /home/user thank you for replying Johanthan. On 06/16/2015 02:52 PM, Jonathan Billings wrote: On Tue, Jun 16, 2015 at 02:44:43PM -0500, g wrote: what directories and files should not be copied so that configs for desktop/laptop do not corrupt configs for laptop/desktop screen? Maybe you need to be clearer. The screen's configuration is not really configured in your home directory, but by X (although these days it's all autoprobed). Are you talking about what icons appear? The configuration for KDE? . also, thank you for kicking my chemo brain in the butt. ;-) yes, i forgot about X being the wise and wondrous now. iirc, there used to be a file under /etc/X11 that had specs for keyboard, mouse, graphics card, monitor, language, etc, that one could make custom changes to if needed. several years back that got changed with auto probe. yes/no? therefore, my only real concern would be for progs like firefox, thunderbird and what else that is not standard with distrib, and have special files in /lib, /lib64, etc. y/n? as for icons and KDE configs, icons should be same as they are under /usr/share and i do want to have same/similar desktop window settings. long story to short, just try it. y/n? Well, First try to hold in the same OS version on both, this will easy things :D IMHO, filter the dirs for firefox, thunderbird, etc... and try to sync only your docs and desktop info! You can try syncing all and see what happens :D Att., Antonio. -- Antonio da Silva Martins Jr. Analista de Suporte NPD - Núcleo de Processamento de Dados UEM - Universidade Estadual de Maringá email: asmart...@uem.br fone: +55 (44) 3011-4015 / 3011-4411 inoc-dba: 263076*100 Real Programmers don’t need comments — the code is obvious. -- Esta mensagem foi verificada pelo sistema de antivirus e acredita-se estar livre de perigo. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
yep, but still lack critical features :) like livebackup. 2015-06-17 12:26 GMT+03:00 Leon Fauster leonfaus...@googlemail.com: Am 17.06.2015 um 11:17 schrieb Eero Volotinen eero.voloti...@iki.fi: It's so sad that centos is using very old versio on kvm and due that fact live backup without downtime is not possible. just some thoughts old != not good new != better s/old/stable/ s/new/not\ mature/ :-) -- LF ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
Am 17.06.2015 um 11:17 schrieb Eero Volotinen eero.voloti...@iki.fi: It's so sad that centos is using very old versio on kvm and due that fact live backup without downtime is not possible. just some thoughts old != not good new != better s/old/stable/ s/new/not\ mature/ :-) -- LF ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] selinux allow apache log access
Try something like: grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix semodule -i zabbix.pp On 16/06/15 15:58, Tim Dunphy wrote: Hey guys,. I have a centos 7 machine I'm using as a zabbix server. And I noticed that apache won't start, with this complaint in the error log: (13)Permission denied: AH00091: httpd: could not open error log file /var/log/zabbix_error_log. AH00015: Unable to open logs I tried having a look at audit2allow and this is the response I get back: [root@monitor2:/etc/httpd] #grep http /var/log/audit/audit.log | audit2allow #= httpd_t == allow httpd_t zabbix_log_t:file open; How can I turn that bit of information into a rule that allows apache access to this zabbix log file? I notice that if I disable selinux using setenfor 0, apache starts up without complaint. But I would rather not leave it disabled. Thanks, Tim -- regards Harold Toms http://iodine.chem.qmul.ac.uk Priestley's works... tended to unsettle every thing, and yet settled nothing. - Samuel Johnson. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
At Wed, 17 Jun 2015 12:31:49 +0300 CentOS mailing list centos@centos.org wrote: yep, but still lack critical features :) like livebackup. If host is using LVM for disk partitioning and uses logical volumes for VM disks, it is possible to do LVM 'snapshots' and these snapshots can then be backed up, all without shutting down the VMs. 2015-06-17 12:26 GMT+03:00 Leon Fauster leonfaus...@googlemail.com: Am 17.06.2015 um 11:17 schrieb Eero Volotinen eero.voloti...@iki.fi: It's so sad that centos is using very old versio on kvm and due that fact live backup without downtime is not possible. just some thoughts old != not good new != better s/old/stable/ s/new/not\ mature/ :-) -- LF ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Robert Heller -- 978-544-6933 Deepwoods Software-- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services hel...@deepsoft.com -- Webhosting Services ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] NUX Skype for Linux
On Tue, June 16, 2015 09:02, Sorin Srbu wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of James B. Byrne Sent: den 16 juni 2015 14:55 To: centos@centos.org Subject: [CentOS] NUX Skype for Linux I had cause to install the Skype for Linux package from the NUX repo. I discover that this package is configured to automatically start Skype whenever one logs on to the Gnome desktop. This behaviour I do not wish. However, there seems to be no option in Skype to turn that 'feature' off. Is there any way to disable this in Gnome or elsewhere? I will be removing Skype shortly when the present need for it passes but I do not wish this thing automatically starting in the meantime. Hi, You can't do this? Go to Tools - Options - General settings. Uncheck the option Start Skype when I start Windows. Save and Quit Skype. Next time you reboot Windows, Skype will not start with Windows -- //Sorin This is a Linux instal not a MS Windows. There are no options listed in the Linux version other than Advanced. Advanced has the choices of: Skype: 'Enable Skype WiFi' (off) and Connection: Use port (0) for incoming connections Drop Down Proxy Settings (Automatic Proxy Detection) Host (blank) Port (blank) User (blank) Password (blank) And that is it. No additional tabs not additional choices. I will not have this software on any of our business computers -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrnemailto:byrn...@harte-lyne.ca Harte Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] NUX Skype for Linux
Hello James, On Wed, 17 Jun 2015 09:01:08 -0400 James B. Byrne byrn...@harte-lyne.ca wrote: On Tue, June 16, 2015 09:02, Sorin Srbu wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of James B. Byrne Sent: den 16 juni 2015 14:55 To: centos@centos.org Subject: [CentOS] NUX Skype for Linux I had cause to install the Skype for Linux package from the NUX repo. I discover that this package is configured to automatically start Skype whenever one logs on to the Gnome desktop. This behaviour I do not wish. However, there seems to be no option in Skype to turn that 'feature' off. Is there any way to disable this in Gnome or elsewhere? I will be removing Skype shortly when the present need for it passes but I do not wish this thing automatically starting in the meantime. Hi, You can't do this? Go to Tools - Options - General settings. Uncheck the option Start Skype when I start Windows. Save and Quit Skype. Next time you reboot Windows, Skype will not start with Windows -- //Sorin This is a Linux instal not a MS Windows. There are no options listed in the Linux version other than Advanced. Advanced has the choices of: Skype: 'Enable Skype WiFi' (off) and Connection: Use port (0) for incoming connections Drop Down Proxy Settings (Automatic Proxy Detection) Host (blank) Port (blank) User (blank) Password (blank) And that is it. No additional tabs not additional choices. I will not have this software on any of our business computers Here in CentOS6: system menu / preferences/ startup applications. Remove the entry that causes Skype to start. Regards, -- wwp pgpUxnmP8ZrE5.pgp Description: OpenPGP digital signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 7 + Dell Latitude E6420 laptop = thermalshutdown
On 06/17/2015 04:49 AM, deoren wrote: I'm still puzzled why the laptop appears to lockup when attempting to login to the desktop environment when using CentOS, but not Ubuntu 15.04. Any thoughts there? I can't remember the whole thread but it seems you have an nvidia GPU and are using nouveau? If so, try installing nvidia-detect and then the correct nvidia driver for your system (from elrepo), and see if that helps. Could be a nouveau problem. http://elrepo.org/tiki/nvidia-detect ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] NUX Skype for Linux
This is a Linux instal not a MS Windows. There are no options listed in the Linux version other than Advanced. Advanced has the choices of: You have logged in, right? There's a dozen categories of options once you log in and go to Skype - Options. skype-4.3.0.37-2.el6.nux. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
On 06/17/2015 03:28 AM, Mihamina Rakotomandimby wrote: MMmmm, I really thought ESX was in some way a RHEL derivative but when reading http://www.v-front.de/2013/08/a-myth-busted-and-faq-esxi-is-not-based.html it is clearly not... Older ESX had an RHEL 3-based service console; ESXi does not. Logged in to one of my ancient ESX 3.5 hosts: [root@esx1 root]# vmware -v VMware ESX Server 3.5.0 build-604481 [root@esx1 root]# cat /etc/redhat-release Red Hat Enterprise Linux ES release 3 (Taroon) [root@esx1 root]# The relationship of the service console to the vmkernel is somewhat similar to the relationship of the DomO to the Xen hypervisor, or DOS and old NetWare 3; the vmkernel itself, along with all of its loadable modules, is not in any way shape or form 'based' on RHEL; RHEL is just used to manage the vmkernel system as a 'service console.' This is much like how that Windows 386 (including 3.x, 95/98/ME) was not based on DOS (read 'Unauthorized Windows 95' by Andrew Schulman to verify) but uses DOS services in a warped fashion (Windows calls a DOS INT which is hooked by an illegal instruction 'thunk' back to the 386 mode VMMkernel which is the actual Windows Operating System kernel..). With ESXi, VMware wrote their own CLI service console, and did away with RHEL as the service console. But to address the direct question of the OP, I use KVM for many things, but I have older hardware in quantity on which I'll likely run Xen4CentOS with paravirtualized guests, since the processors in these blades do not have hardware virtualization extensions (early Opteron, but still very serviceable for what we want to do). Too many LS20 blades (about 200) to upgrade them all right now without either donations or other funding (but if anyone wanted to donate some IBM BladeServer HS21's or newer I would not turn down the donation, and we are a 501(c)(3).. :-) ). ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] gvim current directory
On Tue, June 16, 2015 15:15, Jonathan Billings wrote: On Tue, Jun 16, 2015 at 11:56:58AM -0500, Michael Hennebry wrote: When I gvim a file from gnome, gvim's working directory is always my home directory. [snip] I am looking for a way to give gvim the correct working directory. Is this a gnome thing? No, it's not a GNOME thing. I assume you're opening up gvim from a menu? Then your current working directory is $HOME. That's the way unix/linux works when you start a program and your CWD is $HOME. The graphical interface has a CWD of $HOME, so anything it forks will too. What I do is open a terminal session; cd to the working directory I desire, and then run gvim from the command line. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrnemailto:byrn...@harte-lyne.ca Harte Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS-virt] Beta CentOS 7 Xen packages available
At long last, I'd like to announce beta packages for CentOS 7, available from the community build system. Start by installing the centos-release-xen: rpm -ivh http://cbs.centos.org/repos/virt7-xen-44-testing/x86_64/os/Packages/centos-release-xen-7-3.el7.x86_64.rpm This will set up yum repositories for both the eventual release repositories (enabled by default), and the community build system repositories (disabled by default). At the moment, all packages will be stored in the virt-xen-44-testing repository. You can either enable this by default by editing /etc/yum.repos.d/VirtSIG-Xen.repo, or by adding --enablerepo=virt-xen-44-testing. If you want, you can edit defaults /etc/sysconfig/xen-kernel Next, run 'yum update' to get the new kernel: yum --enablerepo=virt-xen-44-testing update kernel Now install xen: yum --enablerepo=virt-xen-44-testing install xen This should grab both xen and the updated kernel package. It should also automatically: * Add default commandline parameters for Xen and Linux when booting under Xen * Arrange for xen to come up first in the grub * Set the default boot entry to Xen. That's it! Reboot and you should be good to go. Libvirt packages aren't available yet but should be on the way soon (I'll announce them here.) Please report any problems or feedback to this list. -George ___ CentOS-virt mailing list CentOS-virt@centos.org http://lists.centos.org/mailman/listinfo/centos-virt
Re: [CentOS] selinux allow apache log access
Try something like: grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix semodule -i zabbix.pp Thanks for your response! However this is what happens when I try to install the module: [root@monitor2:~] #semodule -i zabbix.pp libsepol.print_missing_requirements: zabbix's global requirements were not met: type/attribute zabbix_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! Any other thoughts? Thanks, Tim On Wed, Jun 17, 2015 at 5:32 AM, Harold Toms h.t...@qmul.ac.uk wrote: Try something like: grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix semodule -i zabbix.pp On 16/06/15 15:58, Tim Dunphy wrote: Hey guys,. I have a centos 7 machine I'm using as a zabbix server. And I noticed that apache won't start, with this complaint in the error log: (13)Permission denied: AH00091: httpd: could not open error log file /var/log/zabbix_error_log. AH00015: Unable to open logs I tried having a look at audit2allow and this is the response I get back: [root@monitor2:/etc/httpd] #grep http /var/log/audit/audit.log | audit2allow #= httpd_t == allow httpd_t zabbix_log_t:file open; How can I turn that bit of information into a rule that allows apache access to this zabbix log file? I notice that if I disable selinux using setenfor 0, apache starts up without complaint. But I would rather not leave it disabled. Thanks, Tim -- regards Harold Toms http://iodine.chem.qmul.ac.uk Priestley's works... tended to unsettle every thing, and yet settled nothing. - Samuel Johnson. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
On 06/17/2015 04:52 PM, Lamar Owen wrote: But to address the direct question of the OP, I use KVM for many things, but I have older hardware in quantity on which I'll likely run Xen4CentOS with paravirtualized guests, Is not LXC an alternative for such situation? Simpler, fully integrated to libvirt,... ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] selinux allow apache log access
On 17/06/15 15:27, Tim Dunphy wrote: Try something like: grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix semodule -i zabbix.pp Thanks for your response! However this is what happens when I try to install the module: [root@monitor2:~] #semodule -i zabbix.pp libsepol.print_missing_requirements: zabbix's global requirements were not met: type/attribute zabbix_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! Any other thoughts? Thanks, Tim That's because there's already a zabbix module loaded (the message isn't very informative!). I forgot that the received wisdom is to insert my in front of ones own modules i.e.: grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix semodule -i myzabbix.pp -- regards Harold Toms http://iodine.chem.qmul.ac.uk Priestley's works... tended to unsettle every thing, and yet settled nothing. - Samuel Johnson. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] selinux allow apache log access
That's because there's already a zabbix module loaded (the message isn't very informative!). I forgot that the received wisdom is to insert my in front of ones own modules i.e.: grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix semodule -i myzabbix.pp Hmm no luck there either: [root@monitor2:~] #semodule -i myzabbix.pp *semodule: Failed on myzabbix.pp!* I also tried: [root@monitor2:~] #semodule -i my_zabbix semodule: Failed on my_zabbix! And [root@monitor2:~] #semodule -i my-zabbix semodule: Failed on my-zabbix! Just in case.. none of that worked. Got any other ideas? :) Tim On Wed, Jun 17, 2015 at 11:24 AM, Harold Toms h.t...@qmul.ac.uk wrote: On 17/06/15 15:27, Tim Dunphy wrote: Try something like: grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix semodule -i zabbix.pp Thanks for your response! However this is what happens when I try to install the module: [root@monitor2:~] #semodule -i zabbix.pp libsepol.print_missing_requirements: zabbix's global requirements were not met: type/attribute zabbix_t (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed! Any other thoughts? Thanks, Tim That's because there's already a zabbix module loaded (the message isn't very informative!). I forgot that the received wisdom is to insert my in front of ones own modules i.e.: grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix semodule -i myzabbix.pp -- regards Harold Toms http://iodine.chem.qmul.ac.uk Priestley's works... tended to unsettle every thing, and yet settled nothing. - Samuel Johnson. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] selinux allow apache log access
What turns up in myzabbix.te? Same deal. :( #semodule -i myzabbix.te semodule: Failed on myzabbix.te! sigh... but thanks any other clues? On Wed, Jun 17, 2015 at 11:42 AM, Harold Toms h.t...@qmul.ac.uk wrote: On 17/06/15 16:29, Tim Dunphy wrote: That's because there's already a zabbix module loaded (the message isn't very informative!). I forgot that the received wisdom is to insert my in front of ones own modules i.e.: grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix semodule -i myzabbix.pp Hmm no luck there either: [root@monitor2:~] #semodule -i myzabbix.pp *semodule: Failed on myzabbix.pp!* I also tried: [root@monitor2:~] #semodule -i my_zabbix semodule: Failed on my_zabbix! And [root@monitor2:~] #semodule -i my-zabbix semodule: Failed on my-zabbix! Just in case.. none of that worked. Got any other ideas? :) Tim What turns up in myzabbix.te? -- regards Harold Toms http://iodine.chem.qmul.ac.uk Priestley's works... tended to unsettle every thing, and yet settled nothing. - Samuel Johnson. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Virtualization
On 06/17/2015 03:32 AM, Robert Heller wrote: If host is using LVM for disk partitioning and uses logical volumes for VM disks, it is possible to do LVM 'snapshots' and these snapshots can then be backed up, all without shutting down the VMs. Note that making an LVM snapshot, alone, will not provide a consistent image for a backup. If you want to back up a snapshot of a running system, you should use virsh snapshot-create to capture the complete state of the system. http://searchservervirtualization.techtarget.com/tip/Getting-a-clear-picture-on-KVM-snapshot-basics Backups from within the guest will typically be much smaller. I'm working on a flexible snapshot script that supports multiple storage types. https://bitbucket.org/gordonmessmer/dragonsdawn-snapshot ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] selinux allow apache log access
On 17/06/15 16:29, Tim Dunphy wrote: That's because there's already a zabbix module loaded (the message isn't very informative!). I forgot that the received wisdom is to insert my in front of ones own modules i.e.: grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix semodule -i myzabbix.pp Hmm no luck there either: [root@monitor2:~] #semodule -i myzabbix.pp *semodule: Failed on myzabbix.pp!* I also tried: [root@monitor2:~] #semodule -i my_zabbix semodule: Failed on my_zabbix! And [root@monitor2:~] #semodule -i my-zabbix semodule: Failed on my-zabbix! Just in case.. none of that worked. Got any other ideas? :) Tim What turns up in myzabbix.te? -- regards Harold Toms http://iodine.chem.qmul.ac.uk Priestley's works... tended to unsettle every thing, and yet settled nothing. - Samuel Johnson. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
