Re: [CentOS] Custom ISO based on kickstart

2015-04-14 Thread Kahlil Hodgson
The fedora spins SIG
https://fedoraproject.org/wiki/Spins_SIG?rd=SIGs/Spins
created/assembled a whole bunch of tools for doing just that. I used
such machinery to do pretty much the same as what you are a number of
years ago. I think there was even graphical tool called 'revisor'.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Custom ISO based on kickstart

2015-04-14 Thread Artifex Maximus
On Tue, Apr 14, 2015 at 8:14 AM, Kahlil Hodgson
kahlil.hodg...@dealmax.com.au wrote:
 The fedora spins SIG
 https://fedoraproject.org/wiki/Spins_SIG?rd=SIGs/Spins
 created/assembled a whole bunch of tools for doing just that. I used
 such machinery to do pretty much the same as what you are a number of
 years ago. I think there was even graphical tool called 'revisor'.

Thank you very much. I will give it a try.

Already tried revisor and unfortunately failed.

Bye,
a
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS-virt] Where does virt-manager store config in CentOS 7.1?

2015-04-14 Thread C. L. Martinez
Hi all,

 Anyone knows where virt-manager stores user config files in CentOS
7.1?? I am not seeing anything in user's home directory 

Thanks.
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Where does virt-manager store config in CentOS 7.1?

2015-04-14 Thread Sven Kieske


On 14/04/15 11:16, C. L. Martinez wrote:
 Hi all,
 
  Anyone knows where virt-manager stores user config files in CentOS
 7.1?? I am not seeing anything in user's home directory 

Hi,

well on my standard machine virt-manager just starts with root
privileges, so the config is where I expect it to be:
/etc/libvirt/qemu/$NAME.xml

HTH

-- 
Mit freundlichen Grüßen / Regards

Sven Kieske

Systemadministrator
Mittwald CM Service GmbH  Co. KG
Königsberger Straße 6
32339 Espelkamp
T: +49-5772-293-100
F: +49-5772-293-333
https://www.mittwald.de
Geschäftsführer: Robert Meyer
St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen
Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS-virt] CentOS 7 AMI Building

2015-04-14 Thread Jason Antman
Hello,

I'm new to this list, but I noticed a post from March 30th inquiring about
the build scripts for the official CentOS7 AMIs. I'm also interested in
this; I'm tasked with (unfortunately) spinning up some VMs in our corporate
VMWare environment that are as close as possible to the official CentOS7
AMIs. I could attempt to reverse-engineer them and figure out all of the
packages and settings, but it would be much easier if we could get access
to the build scripts. I've searched as much as I know how to, and while
I've found some related tooling for Docker and other services (i.e. on the
CentOS GitHub account), I can't seem to find anything related to the AMIs.
I know I looked into this a while ago for CentOS6, and was told that the 7
stuff would be made public. Does anyone have a pointer to it, or could
someone at least post the kickstart and/or other relevant information?

Thanks,
Jason Antman
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS] CentOS-announce Digest, Vol 122, Issue 7

2015-04-14 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than Re: Contents of CentOS-announce digest...


Today's Topics:

   1. CESA-2015:0797 Moderate CentOS 6 xorg-x11-server  Security
  Update (Johnny Hughes)
   2. CEBA-2015:0798 CentOS 6 lsscsi FASTTRACK BugFix   Update
  (Johnny Hughes)
   3. CEBA-2015:0799 CentOS 6 fence-agents BugFix Update (Johnny Hughes)
   4. CEBA-2015:0801 CentOS 7 fence-agents BugFix Update (Johnny Hughes)
   5. CESA-2015:0800 Moderate CentOS 5 openssl Security Update
  (Johnny Hughes)


--

Message: 1
Date: Fri, 10 Apr 2015 12:11:58 +
From: Johnny Hughes joh...@centos.org
To: centos-annou...@centos.org
Subject: [CentOS-announce] CESA-2015:0797 Moderate CentOS 6
xorg-x11-server Security Update
Message-ID: 20150410121158.ga8...@n04.lon1.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2015:0797 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0797.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
c2fd4679818c94231b37771a2ee0f4934ed070b89d5e4cccaf061627ac712f52  
xorg-x11-server-common-1.15.0-26.el6.centos.i686.rpm
b47ae8c0ed614fbe01cf2d7d3b5ccc54eee465e34f6316a8d0b0142f701e9501  
xorg-x11-server-devel-1.15.0-26.el6.centos.i686.rpm
c3591b182de865ec66facea69145311d38083e81c2a9f701ea4ed1284214413e  
xorg-x11-server-source-1.15.0-26.el6.centos.noarch.rpm
2e8321a404f3397662ba2dcd1b5aef5de45e302c7f60da2af3e62385d86bd142  
xorg-x11-server-Xdmx-1.15.0-26.el6.centos.i686.rpm
eb6964cba356c52b81e01b5a633c292266e700fb1fcd2b146863110acabb3344  
xorg-x11-server-Xephyr-1.15.0-26.el6.centos.i686.rpm
d244b7185569dc8078efe621188dd9922b21de0e343e11b2c41bb9b953a0a589  
xorg-x11-server-Xnest-1.15.0-26.el6.centos.i686.rpm
79a99f949e1848d2afab9ee797368397b93a908c38dd23eeaf73babd62365c65  
xorg-x11-server-Xorg-1.15.0-26.el6.centos.i686.rpm
30dc530053ebfafd464a1d9d9a5c4322a34c4377adeffdd0086dae950a8ce814  
xorg-x11-server-Xvfb-1.15.0-26.el6.centos.i686.rpm

x86_64:
1236a25955331cd9762244a2dfac96ef0658e00beb85c2c7532b72b92a5e81e4  
xorg-x11-server-common-1.15.0-26.el6.centos.x86_64.rpm
b47ae8c0ed614fbe01cf2d7d3b5ccc54eee465e34f6316a8d0b0142f701e9501  
xorg-x11-server-devel-1.15.0-26.el6.centos.i686.rpm
02fc07149157759d17203e9f203eaf929905a0e8a810486500ed22540e6a62bc  
xorg-x11-server-devel-1.15.0-26.el6.centos.x86_64.rpm
c3591b182de865ec66facea69145311d38083e81c2a9f701ea4ed1284214413e  
xorg-x11-server-source-1.15.0-26.el6.centos.noarch.rpm
b7ca5c833135233e8df38af88f2b212fad3e3002088b48789d1891e01a340c48  
xorg-x11-server-Xdmx-1.15.0-26.el6.centos.x86_64.rpm
5cd56c84ada8cb3f58f837edc6615ea2545fc60e109ca6f57cefe6c27c614556  
xorg-x11-server-Xephyr-1.15.0-26.el6.centos.x86_64.rpm
1ae60c28a1476b170e7a0a0d9a2ad12640f343b17d75914e52b17225d81f9daa  
xorg-x11-server-Xnest-1.15.0-26.el6.centos.x86_64.rpm
7adb23f22866f0963ad5953052027003ffc7eacee5e4eb1a824c6f6f3ce76ab8  
xorg-x11-server-Xorg-1.15.0-26.el6.centos.x86_64.rpm
3efe9af13098a103f6d7f92348c212ff34719bcba7da3d95d8c8a8abc64d685e  
xorg-x11-server-Xvfb-1.15.0-26.el6.centos.x86_64.rpm

Source:
c60a3823b27528024933d542a395743fd1b45e293eaa463bb4e41bb3b62914a3  
xorg-x11-server-1.15.0-26.el6.centos.src.rpm



-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 2
Date: Mon, 13 Apr 2015 13:25:45 +
From: Johnny Hughes joh...@centos.org
To: centos-annou...@centos.org
Subject: [CentOS-announce] CEBA-2015:0798 CentOS 6 lsscsi FASTTRACK
BugFix  Update
Message-ID: 20150413132545.ga27...@n04.lon1.karan.org
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Bugfix Advisory 2015:0798 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-0798.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
9c297d1b59abc93283cc7f367928de5988470404b1e51702462f82eb3306afc3  
lsscsi-0.23-3.el6.i686.rpm

x86_64:
38decc7ff25258f367cb6d52e88634d5ccdfb5ca2be631567f113ca75cbe5f04  
lsscsi-0.23-3.el6.x86_64.rpm

Source:
feb5f0a3d59d90997fcce6be8d5f5e05b09ad7d986b13a24fa455de0625a59c0  
lsscsi-0.23-3.el6.src.rpm



-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net



--

Message: 3
Date: Mon, 13 Apr 2015 13:26:22 +
From: Johnny Hughes joh...@centos.org
To: centos-annou...@centos.org

Re: [CentOS-virt] Where does virt-manager store config in CentOS 7.1?

2015-04-14 Thread C. L. Martinez
On Tue, Apr 14, 2015 at 9:39 AM, Sven Kieske s.kie...@mittwald.de wrote:


 On 14/04/15 11:16, C. L. Martinez wrote:
 Hi all,

  Anyone knows where virt-manager stores user config files in CentOS
 7.1?? I am not seeing anything in user's home directory 

 Hi,

 well on my standard machine virt-manager just starts with root
 privileges, so the config is where I expect it to be:
 /etc/libvirt/qemu/$NAME.xml

 HTH

 --
 Mit freundlichen Grüßen / Regards

 Sven Kieske


Thanks Sven, but I am not referring to guests xml config files. I need
to know where user's config resides. Example: connections to KVM
hosts, preferences, etc...
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS] Access Problem after update to CentOS 7.1

2015-04-14 Thread Johnny Hughes
On 04/13/2015 11:17 PM, Rob Kampen wrote:
 On 04/14/2015 01:07 AM, Johnny Hughes wrote:
 On 04/13/2015 06:49 AM, Johnny Hughes wrote:
 On 04/12/2015 10:29 PM, Rob Kampen wrote:
 On 04/13/2015 11:42 AM, Gregory P. Ennis wrote:
 On Fri, 2015-04-10 at 18:25 -0700, Greg Lindahl wrote:
 On Fri, Apr 10, 2015 at 06:33:27AM -0500, Johnny Hughes wrote:

 What may be happening is that you may need to be on the console and
 accept the license on the first reboot after the update.

 We tried to turn this off for CLI only installs, but in some
 combinations of software, you may still get the acceptance screen
 and
 have to complete it.
 So just to be clear, some of us who installed 7.0 servers in the GUI
 and then carted them to a remotely colo might be screwed if the
 machine reboots after updating to 7.1?  Are there some files I can
 touch (or whatever) to prevent this from happening? Or is the best
 solution to go to the colo and reboot?

 I have consoles for all of my professional servers, but not my hobby
 server! Fun fun! And I feel for you guys, given that upstream was the
 main cause.

 -- greg

 ---

 Greg,

 After my 7.1 upgrade the login gui is no longer usable because it will
 not scroll.  However, if you are using a remote connection all you
 need
 to do is to run 'initial-setup' and accept the license agreement.
 However, be careful.  The first time I activated 'inital-setup' I
 elected not to answer the question yes and the machine went in to a
 shutdown and then reboot.  At this point, I wish I had not upgraded to
 7.1

 Greg

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
 Having been a CentOS user since about 5.2 and a list follower also,
 please bear with me while I make a couple of observations.
 1. The 'nature' of CentOS appears to be changing.
 CentOS Linux is CentOS Linux .. it is a rebuild of the RHEL source code.
   The source code for RHEL 7.1 was rebuilt and released just like the
 source code for RHEL 6.6 or RHEL 5.11 was.  There is no difference in
 CentOS Linux between how RHEL 6.6 code was rebuilt and how RHEL 7.1 was
 rebuilt.  CentOS Linux, the core distro, is NOT changing.  It is now and
 will always be a rebuild of RHEL source code.

 I, and many others on this list, came to use and love CentOS because it
 was a server oriented distro and had the lineage of RedHat running
 through its veins - i.e. corporate type applications available and
 support of LONG TERM stability WITH back-porting of patch updates to
 fix
 security issues.

 This version is also a direct rebuild of the RHEL source code.  Red Hat
 seems to be moving more quickly and making more rapid changes.  CentOS,
 rebuilding RHEL sources, will obviously move at the same pace.

 2. Major version updates, make significant changes to how things work,
 minor version updates are simply 'point in time' snapshots to make life
 easier for new installations and gaining updates. This no longer
 appears
 to be the case!

 Having worked with servers and desktop workstations with both 5.x and
 6.x there were very few issues caused by a yum update. Thus one could
 confidently do remote installations, yum updates etc. I know this from
 experience, operating servers in different continents with no physical
 access. The only problems ever encountered that needed physical access
 being when hardware problems arose.
 Red Hat changed the mechanism for how they do license acceptance .. in
 previous CentOS versions this was done in first boot for GUI installs
 only, NOW they have changed it to also happen on CLI installs.  We don't
 desire this behavior .. but the process is identical to the RHEL
 install.  You must accept the license in CentOS-6 as well .. it is just
 on the first reboot after install.

 We hope to be able to work around this in the future.

 3. CentOS install, like most linux variants uses the GPL for most
 packages, the acceptance of these licenses never required specific
 mouse
 clicks or check boxes.

 Copies of license terms were included with packages but their
 acceptance
 implied by usage. It seems the apple, microsoft, oracle, and google
 android in your face must click acceptance to install an app or
 package have finally arrived to linux distros.

 Having only spun up CentOS 7.0 from a live DVD I can make no comments
 about it yet, other than it seems from the comments on the list that
 both items 1  2 above are no longer true.

 I understand the idea of CentOS being bug for bug compatible with the
 redhat lineage, however it appears that the CentOS single version
 release is in fact a derivative of the multiple variants actually
 produced and sold by redhat - thus some of the recent arguments about
 naming of versions and DVDs lack authenticity.
 This has always been the case .. in CentOS-5 Linux, the CentOS tree and
 install DVDs are a combination of the RHEL 

Re: [CentOS-virt] Where does virt-manager store config in CentOS 7.1?

2015-04-14 Thread Nux!
Hi,

Check dconf (dconf-editor) / org.virt-manager.virt-manager

HTH
Lucian

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

- Original Message -
 From: C. L. Martinez carlopm...@gmail.com
 To: Discussion about the virtualization on CentOS centos-virt@centos.org
 Sent: Tuesday, 14 April, 2015 10:51:30
 Subject: Re: [CentOS-virt] Where does virt-manager store config in CentOS 
 7.1?

 On Tue, Apr 14, 2015 at 9:39 AM, Sven Kieske s.kie...@mittwald.de wrote:


 On 14/04/15 11:16, C. L. Martinez wrote:
 Hi all,

  Anyone knows where virt-manager stores user config files in CentOS
 7.1?? I am not seeing anything in user's home directory 

 Hi,

 well on my standard machine virt-manager just starts with root
 privileges, so the config is where I expect it to be:
 /etc/libvirt/qemu/$NAME.xml

 HTH

 --
 Mit freundlichen Grüßen / Regards

 Sven Kieske

 
 Thanks Sven, but I am not referring to guests xml config files. I need
 to know where user's config resides. Example: connections to KVM
 hosts, preferences, etc...
 ___
 CentOS-virt mailing list
 CentOS-virt@centos.org
 http://lists.centos.org/mailman/listinfo/centos-virt
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS-announce] CESA-2015:0800 Moderate CentOS 5 openssl Security Update

2015-04-14 Thread Johnny Hughes

CentOS Errata and Security Advisory 2015:0800 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0800.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
a61179097606afba2ad098b71374834cf6cf26e29f7dff4891cf188c1bd06308  
openssl-0.9.8e-33.el5_11.i386.rpm
a59f2136d48228bca0b7d7d37111879abb7f7a5f3d125ce40c4e2dc690050c73  
openssl-0.9.8e-33.el5_11.i686.rpm
706c1a668c0cb691fe8654ae6d4d6a759b9d46cb4b2ea4a04a37fa3b02e2ccb8  
openssl-devel-0.9.8e-33.el5_11.i386.rpm
af34032cf124ca12a926d0036a30749810e0b13269b6d11927ed2bb2656b4486  
openssl-perl-0.9.8e-33.el5_11.i386.rpm

x86_64:
a59f2136d48228bca0b7d7d37111879abb7f7a5f3d125ce40c4e2dc690050c73  
openssl-0.9.8e-33.el5_11.i686.rpm
50ed7b3efaf50aa810e40bd22c08cf9568a0f74b8bb77d16b9e69022062c7cd2  
openssl-0.9.8e-33.el5_11.x86_64.rpm
706c1a668c0cb691fe8654ae6d4d6a759b9d46cb4b2ea4a04a37fa3b02e2ccb8  
openssl-devel-0.9.8e-33.el5_11.i386.rpm
36f412550bbeef32833341ea477816b239a8d1ac3587d04952a3b77a28786975  
openssl-devel-0.9.8e-33.el5_11.x86_64.rpm
18e740d2dfb4a228e7b0f7aaff40171c1411f7d2e2d3e092a4c36c7816e37ab1  
openssl-perl-0.9.8e-33.el5_11.x86_64.rpm

Source:
103e8c1e0b13d86ecaa846f4395fde0ae00cdca5c395dcb9da3f361f701a818a  
openssl-0.9.8e-33.el5_11.src.rpm



-- 
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #cen...@irc.freenode.net

___
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce


Re: [CentOS] Access Problem after update to CentOS 7.1

2015-04-14 Thread Don Vogt
I should have mentioned that the bug I found was #0007177 in the centos bug 
tracker
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] state of IPSec VPN on CentOS 7: Openswan, strongSwan, RPM packages

2015-04-14 Thread Gordon Messmer

On 04/14/2015 11:07 AM, Florin Andrei wrote:

I looked in the yum repositories for CentOS 7 and I noticed that there
are no packages for any of the major open source IPSec VPN apps -
Openswan, strongSwan, etc. I'm pretty sure CentOS 6 had Openswan packages.


libreswan replaced openswan, and is available in the CentOS 7 repo.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] state of IPSec VPN on CentOS 7: Openswan, strongSwan, RPM packages

2015-04-14 Thread Eero Volotinen
2015-04-14 21:07 GMT+03:00 Florin Andrei flo...@andrei.myip.org:

 I looked in the yum repositories for CentOS 7 and I noticed that there are
 no packages for any of the major open source IPSec VPN apps - Openswan,
 strongSwan, etc. I'm pretty sure CentOS 6 had Openswan packages.

 What is the current consensus w.r.t. building an IPSec VPN server
 (concentrator, whatever) on CentOS 7, that will do site-to-site connections
 with Cisco hardware at the other end? Is any of the *swan apps still
 considered the best option for that?


I think  epel-7 repo provides strongwan ipsec package that is required to
connect to cisco asa.

--
Eero
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS-virt] Kubernetes 0.15.0 in virt7-testing repo

2015-04-14 Thread Navid Shaikh

Hi,

kubernetes-0.15.0-0.1.gitd02139d.el7 build is in virt7-testing repo [1] now.

Please test and feedback.

[1] http://cbs.centos.org/repos/virt7-testing/x86_64/os/

--
Navid
IRC: nshaikh
___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS] ksoftirqd / centos7

2015-04-14 Thread Johan Kooijman
Hi,

Today I migrated a server form C6 to C7. The machine is dedicated for a
couple of redis daemons. given the traffic etc, we see cpu0 being 100% in
use immediately. No problem, had the same thing on the C6 server.

So I pinned certain processes/irq's to other CPU's and made irqbalance was
monitoring things. That did solve the issue in C6, but not this time.

The links below contain the output of /proc/interrupts. As you can see CPU0
doesn't seem that busy
http://pastebin.centos.org/23361/
http://pastebin.centos.org/23366/
The 2nd paste was about 60 seconds after the first one.

Am I missing something here? This is a brand new C7 installation:

[root@redis1 ~]# uname -a
Linux redis1.gamebasics.lan 3.10.0-229.1.2.el7.x86_64 #1 SMP Fri Mar 27
03:04:26 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

Hardware is a brand new supermicro X9DRW board with onboard igb NIC's in
use.

Hope someone can help me!

-- 
KR,
Johan Kooijman
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] C7 hide bottom panel

2015-04-14 Thread Jerry Geis
After much searching I found how to hide the panel.

dbus-send --print-reply --session --type=method_call --dest=org.gnome.Shell
/org/gnome/Shell org.gnome.Shell.Eval string:'Main.panel.actor.hide();'

Works great...

However - I also wish to hide the bottom panel or workspace.

Anyone know what that is???

I tried Main.Workspace.actor.hide() and that did not work.


Thanks,

jerry
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Signed repomd.xml.asc files for CentOS-6 and CentOS-7 (testing)

2015-04-14 Thread m . roth
Morning, Johnny,

Johnny Hughes wrote:
 For those of you not currently on the centos-devel mailing list, we are
 looking to test signed repomd.xml files (repomd.xml.asc) for CentOS-6
 and CentOS-7.  If you are interested in signed metadata repos, please
 look at this post:

 http://lists.centos.org/pipermail/centos-devel/2015-April/013210.html

 Also, if you are willing to test / help with the solution for signed
 metadata, please join the centos-devel mailing list and correspond there:

 http://lists.centos.org/mailman/listinfo/centos-devel

Thank you *very* much for this post. It's much appreciated (and I
forwarded it to my manager, as we have a local mirror here).

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] state of IPSec VPN on CentOS 7: Openswan, strongSwan, RPM packages

2015-04-14 Thread Eero Volotinen
2015-04-14 21:40 GMT+03:00 Florin Andrei flo...@andrei.myip.org:

 On 2015-04-14 11:25, Gordon Messmer wrote:

 On 04/14/2015 11:07 AM, Florin Andrei wrote:

 I looked in the yum repositories for CentOS 7 and I noticed that there
 are no packages for any of the major open source IPSec VPN apps -
 Openswan, strongSwan, etc. I'm pretty sure CentOS 6 had Openswan
 packages.


 libreswan replaced openswan, and is available in the CentOS 7 repo.


 I just noticed that strongSwan is in EPEL.

 I'm also looking at this comment on ServerFault:

 http://serverfault.com/a/655752/24406

 If that is accurate, the documentation, and the clustering / load
 balancing might tilt the balance in the direction of strongSwan.


Well, both packages can do ipsec to cisco asa without any problems.

--
Eero
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] state of IPSec VPN on CentOS 7: Openswan, strongSwan, RPM packages

2015-04-14 Thread Florin Andrei

On 2015-04-14 11:44, Eero Volotinen wrote:

2015-04-14 21:40 GMT+03:00 Florin Andrei flo...@andrei.myip.org:


http://serverfault.com/a/655752/24406

If that is accurate, the documentation, and the clustering / load
balancing might tilt the balance in the direction of strongSwan.



Well, both packages can do ipsec to cisco asa without any problems.


I have this one case where the other end of the connection wants to use 
some specific encryption parameters (specific versions of AES and SHA). 
I need to make sure that whatever software I use, is capable of 
providing that. Better documentation will certainly help.


And of course, a more actively supported project, with a good security 
track record, is very important.


All these are factors in choosing between Openswan / Libreswan / 
strongSwan.


--
Florin Andrei
http://florin.myip.org/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Independent dual monitors on CentOS 7

2015-04-14 Thread Devin Reade
Does anyone have the magic incantation required to getting 
*independent* multi-monitors going under CentOS 7?   Ideally
under xfce or trinity, but I'm interested about GNOME/KDE
observations as well.

I'm trying to move my main workstation from CentOS5 to CentOS7
and while the spanned desktop works, not having independent 
monitors really cuts into my productivity.  i.e.:  I couldn't
care less about dragging things from one screen to another, but
not having a 3x3 virtual desktop grid on each monitor independently 
really sucks.

Devin

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] state of IPSec VPN on CentOS 7: Openswan, strongSwan, RPM packages

2015-04-14 Thread Eero Volotinen
2015-04-14 22:05 GMT+03:00 Florin Andrei flo...@andrei.myip.org:

 On 2015-04-14 11:44, Eero Volotinen wrote:

 2015-04-14 21:40 GMT+03:00 Florin Andrei flo...@andrei.myip.org:


 http://serverfault.com/a/655752/24406

 If that is accurate, the documentation, and the clustering / load
 balancing might tilt the balance in the direction of strongSwan.


  Well, both packages can do ipsec to cisco asa without any problems.


 I have this one case where the other end of the connection wants to use
 some specific encryption parameters (specific versions of AES and SHA). I
 need to make sure that whatever software I use, is capable of providing
 that. Better documentation will certainly help.

 And of course, a more actively supported project, with a good security
 track record, is very important.

 All these are factors in choosing between Openswan / Libreswan /
 strongSwan.


Well, you can use any of these software for such basic tasks. I also think
that they are almost compatible with
configuration files, so you can later change package, if any problems
occurs.

I think best choice is software that comes with Centos.

I currently use openswan (epel?) Centos and Amazon Linux to connect with
checkpoint and cisco asa ipsec hardware devices.

--
Eero
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EBtables Problem

2015-04-14 Thread Mehmet Allar
Hello ,

No I do not use bridging . It is a fresh install , with no alterations . I
only removed NetworkManager and manually configured the network script for
static IP . After  yum install fail2ban (which brought ebtables with it)
and reboot , I cannot connect .

Kind regards.

2015-04-12 6:12 GMT+03:00 Marcelo Ricardo Leitner marcelo.leit...@gmail.com
:

 Hi,


 On 11-04-2015 06:00, Mehmet Allar wrote:

 Hello ,

 I have recently downloaded and setup Centos 7 1503 on a device and
 encountered a remote connection problem which I was only able to solve via
 removing ebtables package .

 After setup , I wanted go forward with IPtables instead of Firewalld , so
 remove firewalld and install iptables. After configuration and tests , I
 installed Fail2Ban ,(which brought ebtables with it ) and after reboot I
 was not able to connect to the device.

 After every reboot, I had to logon to the device locally , restarted
 iptables service and then I was able to connect remotely. I traced my
 steps
 backwards and figured ebtables was the problem. After removing it , I
 could
 connect remotely after reboots. IPtables service is running just fine.

 I want to use fail2ban , but I need to solve ebtables problem first. So,
 where sould I start? I couldn't locate ebtables logs .

 Thanks in advance.


 That's weird. Do you happen to use any bridge in this system? Does
 ebtables-save give you anything? Otherwise, it shouldn't be taking a role
 in there.

   Marcelo

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EBtables Problem

2015-04-14 Thread John R Pierce

On 4/11/2015 2:00 AM, Mehmet Allar wrote:

After setup , I wanted go forward with IPtables instead of Firewalld , so
remove firewalld and install iptables. After configuration and tests , I
installed Fail2Ban ,(which brought ebtables with it ) and after reboot I
was not able to connect to the device.


where did you install fail2ban from?  I don't believe its in the C7 base 
repository




--
john r pierce, recycling bits in santa cruz

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Independent dual monitors on CentOS 7

2015-04-14 Thread Fred Smith
On Tue, Apr 14, 2015 at 01:08:56PM -0600, Devin Reade wrote:
 Does anyone have the magic incantation required to getting 
 *independent* multi-monitors going under CentOS 7?   Ideally
 under xfce or trinity, but I'm interested about GNOME/KDE
 observations as well.
 
 I'm trying to move my main workstation from CentOS5 to CentOS7
 and while the spanned desktop works, not having independent 
 monitors really cuts into my productivity.  i.e.:  I couldn't
 care less about dragging things from one screen to another, but
 not having a 3x3 virtual desktop grid on each monitor independently 
 really sucks.
 
 Devin

Devin:

i've done it on Fedora 20, don't know if that's similar enough to C7
or not, to work the same way, Uinsg Nvidia proprietary driver.

A couple of caveatrs:
1. I don't remember the details, but if you're interested, I can dig
for whatever info I used when figurinig it out;
2. I got two independent monitors, but that means you can't drag things
across monitors. but there also are no menus in the panels of the second
monitor, and no desktop icons, by default, so it's hard to start programs
on the 2nd monitor. I recall finding an XML file (somewhere???) that
contains what appears to be the setup info for the main monitor, so it
may be possible to either hack that file, or create some other file
with similar info in it, that will cause the second monitor to be a
full-fledged workstation in its own right.

YMMV!

Let me know if you need me to dig around for info.

Fred
-- 
 Fred Smith -- fre...@fcshome.stoneham.ma.us 
Do you not know? Have you not heard? 
The LORD is the everlasting God, the Creator of the ends of the earth. 
  He will not grow tired or weary, and his understanding no one can fathom.
- Isaiah 40:28 (niv) -
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Access Problem after update to CentOS 7.1

2015-04-14 Thread Gregory P. Ennis
  
  Thanks as always for what you and the rest of the CentOS team do, just
  appreciation and admiration for all you guys (and gals?) do for the
  community.
  Rob
 
 To be perfectly honest, I am not thrilled with the movement either from
 the enterprise stability point of view .. BUT .. with respect to desktop
 and software development it is better.  I personally though the other
 way was better (no major version movement) .. but, that is above my
 paygrade :)
 

Johnny and Rob,

I would like to give a BIG thanks to not only the CentOS team, but also
to the members of this list.  There is no way I would have been able to
learn how to do what I have done without everyone giving me some help
from time to time!

Big Thanks!!!

Greg

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Mouse wheel desktop switching

2015-04-14 Thread Jay Warren
Awhile back the mouse wheel stopped working when trying to switch workspaces in 
the overview, sometime after the 7.1 udpate.  Now it only works if the mouse is 
over a thumbnail of an application and not when its on a blank workspace if 
that makes any sense.  I'm wondering if anyone else has seen this?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] what updates /etc/localtime?

2015-04-14 Thread James Pearson

James Pearson wrote:

On 13 Apr 2015, at 20:13, Les Mikesell lesmikes...@gmail.com wrote:

I see in CentOS 7 that /etc/localtime is a symlink (which seems
sensible...) but in earlier versions it is a copy of some file from
under /usr/share/zoneinfo.
rpm -q --scripts tzdata
does not show any postinstall script, so in the non-symlink versions,
how does the copied /etc/localtime file get updated with new zone
data?



I believe it is by glibc-common on CentOS 6 - it may be the same on CentOS 7


That is, on CentOS 6, glibc-common has a triggerin script that runs 
/usr/sbin/tzdata-update when tzdata is installed/updated


James Pearson
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Signed repomd.xml.asc files for CentOS-6 and CentOS-7 (testing)

2015-04-14 Thread Johnny Hughes
For those of you not currently on the centos-devel mailing list, we are
looking to test signed repomd.xml files (repomd.xml.asc) for CentOS-6
and CentOS-7.  If you are interested in signed metadata repos, please
look at this post:

http://lists.centos.org/pipermail/centos-devel/2015-April/013210.html

Also, if you are willing to test / help with the solution for signed
metadata, please join the centos-devel mailing list and correspond there:

http://lists.centos.org/mailman/listinfo/centos-devel

Thanks,
Johnny Hughes



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS-es] Problema de KVM

2015-04-14 Thread David González Romero
Hola:

A pesar que sigo sin poder encontrar el problema de los CD en mis
maquinas virtuales, ahora me encuentro con otro problema. Al crear una
nueva MV entre los sistemas Operativos que se listan no aparecer
Windows Server 2012... Uso CentOS 7 y sus software standart.

Alguna sugerencia?

Saludos,
David
___
CentOS-es mailing list
CentOS-es@centos.org
http://lists.centos.org/mailman/listinfo/centos-es


Re: [CentOS] Independent dual monitors on CentOS 7

2015-04-14 Thread Kahlil Hodgson
With GNOME3, the secondary monitors do not have workspaces.  That is
useful for some workflows, but if you don't like it you can use
gnome-tweak-tool to give workspaces to all monitors.  Hope this helps.

Kal
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] state of IPSec VPN on CentOS 7: Openswan, strongSwan, RPM packages

2015-04-14 Thread Florin Andrei
I looked in the yum repositories for CentOS 7 and I noticed that there 
are no packages for any of the major open source IPSec VPN apps - 
Openswan, strongSwan, etc. I'm pretty sure CentOS 6 had Openswan 
packages.


What is the current consensus w.r.t. building an IPSec VPN server 
(concentrator, whatever) on CentOS 7, that will do site-to-site 
connections with Cisco hardware at the other end? Is any of the *swan 
apps still considered the best option for that?


Any guidelines w.r.t. IPSec VPN in general on this platform?

Thanks.

--
Florin Andrei
http://florin.myip.org/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] state of IPSec VPN on CentOS 7: Openswan, strongSwan, RPM packages

2015-04-14 Thread Florin Andrei

On 2015-04-14 11:25, Gordon Messmer wrote:

On 04/14/2015 11:07 AM, Florin Andrei wrote:

I looked in the yum repositories for CentOS 7 and I noticed that there
are no packages for any of the major open source IPSec VPN apps -
Openswan, strongSwan, etc. I'm pretty sure CentOS 6 had Openswan 
packages.


libreswan replaced openswan, and is available in the CentOS 7 repo.


I just noticed that strongSwan is in EPEL.

I'm also looking at this comment on ServerFault:

http://serverfault.com/a/655752/24406

If that is accurate, the documentation, and the clustering / load 
balancing might tilt the balance in the direction of strongSwan.


--
Florin Andrei
http://florin.myip.org/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos