Re: [CentOS] CentOS-7 Security Updates

[Alice Wonder]

On 12/18/2015 01:34 AM, Дмитрий Тесёлкин wrote:

Hi all,

I'm trying to clarify the security updates policy for older CentOS-7
releases.

There is a number of servers I'm supporting that are running CentOS-7 1503.
When 1511 was released several days ago I've tried to upgrade several of
those, but failed. I've got some strange errors with e1000 virtual NIC
being restarted frequently with 'tx unit hang' errors. Anyway, it's not the
thing I'd like to discuss here.

What I'd like to know is the answer to the question "will there be any
security updates for CentOS-7 1503, and how long"? I was searching on a
wiki, but couldn't find anything clear enough. What I've found is the
phrase in 1511 announcement letter

   This release supersedes all previously released content for CentOS
   Linux 7, and therefore we highly encourage all users to upgrade their
   machines. Information on different upgrade strategies and how to
   handle stale content is included in the Release Notes.

This makes me think that there will be no security updates for 1503 and the
only way to get them is to upgrade to 1511, but I'd like to find any proof.
Unfortunately, there is nothing about this in Release Notes :(



To the best of my knowledge CentOS never has released patches specific 
to a minor version.


Finding and resolving the issue you are experiencing with the current 
release is the only course of action.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS-7 Security Updates

[James Hogarth]

On 18 December 2015 at 09:34, Дмитрий Тесёлкин  wrote:

> Hi all,
>
> I'm trying to clarify the security updates policy for older CentOS-7
> releases.
>
> There is a number of servers I'm supporting that are running CentOS-7 1503.
> When 1511 was released several days ago I've tried to upgrade several of
> those, but failed. I've got some strange errors with e1000 virtual NIC
> being restarted frequently with 'tx unit hang' errors. Anyway, it's not the
> thing I'd like to discuss here.
>
> What I'd like to know is the answer to the question "will there be any
> security updates for CentOS-7 1503, and how long"? I was searching on a
> wiki, but couldn't find anything clear enough. What I've found is the
> phrase in 1511 announcement letter
>
>   This release supersedes all previously released content for CentOS
>   Linux 7, and therefore we highly encourage all users to upgrade their
>   machines. Information on different upgrade strategies and how to
>   handle stale content is included in the Release Notes.
>
> This makes me think that there will be no security updates for 1503 and the
> only way to get them is to upgrade to 1511, but I'd like to find any proof.
> Unfortunately, there is nothing about this in Release Notes :(
>
>
>
Keep this in mind ... there is only 7 ... there's no point release to pay
attention to.

That date (or point release) is just a point in time milestone and carrying
out a yum update will continue you along the EL7 path (and
/etc/centos-release will be updated in the process as just another update).

The 'older' CentOS release is not 7.0 or 7.1 ... it is 6 or 5 ... similarly
6.6 doesn't get an 'update' as such with yum update just providing the
packages in the 6.7 milestone (+ updates).

If you do have a specific need to stay on a particular point release for
some arcane and silly reason Red Hat provides a specific z-stream support
subscription their sales team can talk to you about.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS-7 Security Updates

[Дмитрий Тесёлкин]

Hi all,

I'm trying to clarify the security updates policy for older CentOS-7
releases.

There is a number of servers I'm supporting that are running CentOS-7 1503.
When 1511 was released several days ago I've tried to upgrade several of
those, but failed. I've got some strange errors with e1000 virtual NIC
being restarted frequently with 'tx unit hang' errors. Anyway, it's not the
thing I'd like to discuss here.

What I'd like to know is the answer to the question "will there be any
security updates for CentOS-7 1503, and how long"? I was searching on a
wiki, but couldn't find anything clear enough. What I've found is the
phrase in 1511 announcement letter

  This release supersedes all previously released content for CentOS
  Linux 7, and therefore we highly encourage all users to upgrade their
  machines. Information on different upgrade strategies and how to
  handle stale content is included in the Release Notes.

This makes me think that there will be no security updates for 1503 and the
only way to get them is to upgrade to 1511, but I'd like to find any proof.
Unfortunately, there is nothing about this in Release Notes :(

-- 
Regards,
Dmitry Teselkin
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS-7 Security Updates

[Gordon Messmer]

On 12/18/2015 01:34 AM, Дмитрий Тесёлкин wrote:

This makes me think that there will be no security updates for 1503 and the
only way to get them is to upgrade to 1511, but I'd like to find any proof.


That's correct.  CentOS treats minor releases as just a label for a 
point in time.  There are, essentially, no minor releases of CentOS, 
except for the purpose of spinning new installation ISOs.


The solution you're looking for is something that Red Hat provides to 
paying customers, though:

https://access.redhat.com/solutions/22763
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Network services start before network is up since migrating to 7.2

[Gordon Messmer]

On 12/17/2015 07:59 AM, Sylvain CANOINE wrote:

Well it looks like you are using the network service rather than the
recommended NetworkManager ...

Yes. That's the way our security experts made the models I use to setup my 
servers.
I'll test a migration to NetworkManager, and take their advice on it.


Note that the behavior you're seeing is documented:
http://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/

If you're using NetworkManager, you can "systemctl enable 
NetworkManager-wait-online.service" and you won't have to override any 
of the individual services.



The network service is not blocking  the flow so it executes and systemd
carries on ...

 From the point of view of the system as soon as /etc/init.d/network start
has been called the service is running as a state... as you can see from
your logs lots of other services also start before the network interface
itself is up.

I understand this, but why only on one of my servers ? Is the order the 
services start only a question of latencies ?


Basically, yes.




Incidentally I just tried a quick test in a VM and it would appear
NetworkManager.service completed with an IP on the network interface before
network.target was considered reached ... you may want to test this on your
system to see if it's a race condition


It is, as documented above.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] "installation source" specification for netinstall

[Gordon Messmer]

On 12/17/2015 07:02 AM, ken wrote:
What I described was plenty enough for anyone who's been through the 
netinstall configuration before.  There's no point in explanation a 
simple gui for those who don't what I'm talking about. 


It might look that way to you, as a new user, but all along the way 
you're making choices that you take for granted, but can affect the 
outcome of the process.  In order for us to help you troubleshoot a 
technical problem, you need to describe very specifically the steps you 
took before you saw the problem.


It's easy enough to *say* that "it's pretty fool-proof" but you were 
describing a series of attempts using input that definitely wouldn't 
have worked.  You were mixing /7/ in the download URL, which is a 
symlink to /7.2.1511/, with /7.1.1503/.  IIRC, you can't mix those. 
Installation media has to match the installation tree.  You were also 
trying URLs that weren't even install trees, but ISO directories.


Anyway, I hope this thread convinces some people that minimal and 
netinstall should not be recommended to new users.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS-announce Digest, Vol 130, Issue 7

[centos-announce-request]

Send CentOS-announce mailing list submissions to
centos-annou...@centos.org

To subscribe or unsubscribe via the World Wide Web, visit
https://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
centos-announce-requ...@centos.org

You can reach the person managing the list at
centos-announce-ow...@centos.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. Announcing release for Ruby 1.9.3, 2.0.0, 2.2 and Ruby on
  Rails 3.2, 4.0, 4.1 on CentOS Linux 6 x86_64 SCL (Honza Horak)
   2. Announcing release for Python 2.7, 3.3 and 3.4 on CentOS
  Linux 6 and 7 x86_64 SCL (Honza Horak)


--

Message: 1
Date: Thu, 17 Dec 2015 14:33:18 +0100
From: Honza Horak 
To: centos-annou...@centos.org
Subject: [CentOS-announce] Announcing release for Ruby 1.9.3, 2.0.0,
2.2 and Ruby on Rails 3.2, 4.0, 4.1 on CentOS Linux 6 x86_64 SCL
Message-ID: <5672b99e.6060...@redhat.com>
Content-Type: text/plain; charset=utf-8; format=flowed

I am pleased to announce the immediate availability versions 1.9.3, 
2.0.0, and 2.2 of the Ruby, and versions 3.2, 4.0 and 4.1 of the Ruby on 
Rails, now also on CentOS Linux 6 x86_64, delivered via a Software 
Collection (SCL) built by the SCLo Special Interest Group 
(https://wiki.centos.org/SpecialInterestGroup/SCLo).

This is an addition for the Ruby collections that are already available 
for CentOS 7 
(https://lists.centos.org/pipermail/centos-announce/2015-November/021501.html).

QuickStart
--
You can get started in three easy steps (example of Ruby 2.2 and Ruby on 
Rails 4.1):
$ sudo yum install centos-release-scl
$ sudo yum install rh-ruby22 rh-ror41
$ scl enable rh-ruby22 bash

At this point you should be able to use ruby just as a normal
application. An examples of commands run might be:
$ ruby my-app.rb
$ gem install activeresource
$ bundle

In order to view the individual components included in this
collection, including additional rubygems plugins, you can run:
$ sudo yum list rh-ruby22\* rh-ror41\*

The rh-ror41 collection relies on the rh-ruby22 collection and the ror40 
collection relies on the ruby200 collection, so the Ruby collections 
will be also installed when the Ruby on Rails collection is installed.

About Software Collections
--
Software Collections give you the power to build, install, and use 
multiple versions of software on the same system, without affecting 
system-wide installed packages. Each collection is delivered as a group 
of RPMs, with the grouping being done using the name of the collection 
as a prefix of all packages that are part of the software collection.

The collection rh-ruby22 delivers bundler and version 2.2 of the Ruby 
interpreter, while the collection rh-ror41 delivers version 4.1 of the 
Ruby on Rails framework that allows to create and run applications in 
Ruby or Ruby on Rails framework.

The collection ruby200 delivers version 2.0.0 of the Ruby interpreter, 
while the ror40 collection delivers version 4.0 of the Ruby on Rails 
framework and bundler.

The collection ruby193 delivers version 1.9.3 of the Ruby interpreter, 
bundler and version 3.2 of the Ruby on Rails framework.

Some of the most common rubygems are also included in the collections as 
RPMs, the rest may be installed using bundler or gem tools.

For more on the Ruby and Ruby on Rails, see https://www.ruby-lang.org, 
http://rubyonrails.org or https://rubygems.org.

The SCLo SIG in CentOS
--
The Software Collections SIG group is an open community group 
co-ordinating the development of the SCL technology, and helping curate 
a reference set of collections. In addition to the Ruby and Ruby on 
Rails collections being released here, we also build and deliver 
databases, web servers, and language stacks including multiple versions 
of PostgreSQL, MariaDB, Apache HTTP Server, NodeJS, Python and others.

Software Collections SIG release was announced at 
https://lists.centos.org/pipermail/centos-announce/2015-October/021446.html

You can learn more about Software Collections concepts at: 
http://softwarecollections.org
You can find information on the SIG at 
https://wiki.centos.org/SpecialInterestGroup/SCLo ; this includes howto 
get involved and help with the effort.

We meet every second Wednesday at 16:00 UTC in #centos-devel (ref: 
https://www.centos.org/community/calendar), for an informal open forum 
open to anyone who might have comments, concerns or wants to get started 
with SCL's in CentOS.

Enjoy!

Honza
SCLo SIG member


--

Message: 2
Date: Thu, 17 Dec 2015 14:52:58 +0100
From: Honza Horak 
To: centos-annou...@centos.org
Subject: [CentOS-announce] Announcing release for Python 2.7, 3.3 and
 

[CentOS-es] /boot y grub

[miguel angel gonzalez]

 Buenas tardes,
>
> Me gustaría resolver una duda antes de lanzarme a la piscina.
> Necesito instalar en la misma máuina CentOs y Windows 8, es sobremesa,
> había pensado sacar la partición de /boot a otro disco. Mi duda es, de
> esta manera aunque reinstale windows en el futuro no perderé el
> arranque. Quiero evitarme reinstalar grub en un futuro.
> Gracias.
>
no entiendo bien la idea... significa que ya tienes un linux instalado y
quieres sacar el grub de ese linux ya instalado?

o quieres instalar ambos y sacar el grub por alguna razón?

En todo caso te sugiero valores la posibilidad de instalar uno de los
sistemas en el equipo, y luego virtualbox, encima de este virtualbox
instalas el otro.. realmente la virtualización es muy eficiente y no te
dará mayores problemas.. y evitas este que quieres evitar
saludos
epe

--
CEDIA
La principal herramienta de Investigación en el Ecuador.

Calle La Condamine 12-109 "Casa Rivera".
Cuenca -  Ecuador
Telf: (593) 7405 1000 Ext. 4220/4223
i...@cedia.org.ec
www.cedia.org.ec

-

Las instalaciones van a ser de cero. La idea es sacar /boot de la
partición principal por seguridad y saber si de esta manera mato dos
pájaros de un tiro y me puedo ahorrar si reinstalo Windows tener que
reparar grub. Por más que lo pienso, creo que no es posible, aunque
/boot esté fuera de ese disco, si en un futuro reinstalo windows
tendría que modificar grub para que decirle dónde están los sistemas
operativos y arrancar La virtualización muchas veces es una solución
pero en este caso no, hay software específico para sonido en linux
pero de momento no de esa calidad. Virtualizar come recursos, necesito
windows y linux. Gracias!

--
``M.A.´´


--

Message: 2
Date: Thu, 17 Dec 2015 11:39:13 -0300
From: Jorge Sanchez 
To: centos-es@centos.org
Subject: Re: [CentOS-es] /boot y grub
Message-ID:

Content-Type: text/plain; charset=UTF-8

Por lo que entendi, tenes dos discos.

Lo que podrias hacer es instalar cada uno, con el otro disco deshabilitado.
Y tu boot loader podria pasar a ser simplemente el F8.





Si efectivamente esa era la otra idea, otro disco y en bios arranco de
uno u otro.

Otra pregunta relacionada pero con diferente escenario. Pongo dos
distros en el mismo disco, saco /boot fuera y que tenga una entrada
propia cada s.o. de linux, en caso de reinstalar uno de ellos no haría
falta reinstalar grub?
Gracias de nuevo
___
CentOS-es mailing list
CentOS-es@centos.org
https://lists.centos.org/mailman/listinfo/centos-es

Re: [CentOS] CentOS-7 Security Updates

[Karanbir Singh]

On 18/12/15 09:34, Дмитрий Тесёлкин wrote:
> 
> This makes me think that there will be no security updates for 1503 and the
> only way to get them is to upgrade to 1511, but I'd like to find any proof.
> Unfortunately, there is nothing about this in Release Notes :(
> 

Thats right, there are no point release updates, you will also notice
that older deprecated content will be removed from mirror.centos.org in
a few weeks time.

The way to work around surprises in large installation is to enable the
CR/ repos on a select few testing machines - this will give you access,
ahead of main release, to the content for the main release. Any update
that is going to take more than a few days to get out, is released via
CR/ repos first. Also, finding and reporting bugs during this process
helps get rectification in before it becomes the default for the entire
user base.

Having said this, what exactly is the issue you are facing ?


-- 
Karanbir Singh
+44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh
GnuPG Key : http://www.karan.org/publickey.asc
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] google chrome future / centos 7

[Jonathan Billings]

On Thu, Dec 17, 2015 at 09:38:40PM +, Richard wrote:
> On the linked-to help page:
> 
>  
> 
> they show fedora-21[+] as supported. If I remember correctly,
> RHEL/CentOS-7 is based against fedora-19.

Actually, in two places on that page they say:

"Ubuntu 12.04+, Debian 7+, OpenSuSE 13.1+, or Fedora Linux 21"

No plus (+) after the 21.

I assume it must be a typo, since f21 left support on the 1st of this
month.  The fact that their documentation is poorly maintained is just
another bit of evidence that no one seems to care.  Either that, or
Google doesn't support Chrome on any supported version of RHEL or
Fedora.  I guess I have to switch to OpenSuSE.

-- 
Jonathan Billings 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] google chrome future / centos 7

[Richard]

> Date: Friday, December 18, 2015 08:34:36 -0500
> From: Jonathan Billings 
>
> On Thu, Dec 17, 2015 at 09:38:40PM +, Richard wrote:
>> On the linked-to help page:
>> 
>>  
>> 
>> they show fedora-21[+] as supported. If I remember correctly,
>> RHEL/CentOS-7 is based against fedora-19.
> 
> Actually, in two places on that page they say:
> 
> "Ubuntu 12.04+, Debian 7+, OpenSuSE 13.1+, or Fedora Linux 21"
> 
> No plus (+) after the 21.
> 
> I assume it must be a typo, since f21 left support on the 1st of
> this month.  The fact that their documentation is poorly
> maintained is just another bit of evidence that no one seems to
> care.  Either that, or Google doesn't support Chrome on any
> supported version of RHEL or Fedora.  I guess I have to switch to
> OpenSuSE.

Right. I put the "+" in square brackets because, knowing that
fedora-21 is EOL, I assumed that they meant to include more recent
releases too (as they indicated with the "+" on the other linux
spins). 

I am curious as to what's in FC21+, but not in ~FC19, that might be
about to cause things to break. I looked through the various
discussions linked from:



but didn't see anything obvious, but it may be too early for the
changes to be mentioned.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] playing DVDs on C7

[Lamar Owen]

On 12/17/2015 08:33 PM, Fred Smith wrote:

Hi all!

I'm trying to finish setting up my newly upgraded C7 system.

It's on the same hardware I ran C6 on for several years. on C6 I had no
trouble playing DVDs (after installing tons of packages and libdvdcss).

I have found that whether VLC will play a DVD is somewhat dependent on 
the DVD.  I have played DVD's through VLC successfully on my CentOS 7 
system using the nux package stack, incidentally, but there are several 
DVD's in my collection that will not play with the VLC in nux dextop.  
But I also purchased (the very first version a number of years ago) and 
keep support updated for the Fluendo OnePlay DVD player (fully legal, 
licensed, DVD playback) and it both works perfectly on CentOS 7 and 
plays those titles that VLC has trouble with (like the DVD copy included 
in the Bluray edition of Titanic).


If you want fully legal and fully supported DVD playback, see 
http://www.oneplaydirect.com/oneplay/oneplay-dvd-player/ (which features 
a 30 day free trial so you can test to see if it will work on your 
hardware).  Fluendo also has fully legal codecs for the GStreamer 
framework, and they're not terribly expensive, either. I've been using 
their products for several years, now, and am quite satisfied.  The DVD 
player does install a licensing daemon package, incidentally, which is a 
bit of a new experience on Linux (although once was routine on Un*x 
systems; anyone else remember FlexLM?).


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] google chrome future / centos 7

[Valeri Galtsev]

On Fri, December 18, 2015 7:34 am, Jonathan Billings wrote:
> On Thu, Dec 17, 2015 at 09:38:40PM +, Richard wrote:
>> On the linked-to help page:
>>
>>  
>>
>> they show fedora-21[+] as supported. If I remember correctly,
>> RHEL/CentOS-7 is based against fedora-19.
>
> Actually, in two places on that page they say:
>
> "Ubuntu 12.04+, Debian 7+, OpenSuSE 13.1+, or Fedora Linux 21"
>
> No plus (+) after the 21.
>
> I assume it must be a typo, since f21 left support on the 1st of this
> month.  The fact that their documentation is poorly maintained is just
> another bit of evidence that no one seems to care.  Either that, or
> Google doesn't support Chrome on any supported version of RHEL or
> Fedora.  I guess I have to switch to OpenSuSE.
>


I guess we all are divided into two categories

1. If google [something] doesn't work on the operating system of my
choice, the hell with that crap (and google itself).

2. If google [something] doesn't work on the operating system of my
choice, I'll use whatever mighty google orders me (even if it is MS
Windows ? ).



Valeri

> --
> Jonathan Billings 


Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS-virt] CentOS 7 libvirt-1.3.0-1 coming to virt-xen buildlogs

[George Dunlap]

Centos 7.2 has updated its version of libvirt to 1.2.17, which ends up
getting installed in preference to the previous virt-xen libvirt
package (1.2.15).

I've merged in the most recent Fedora libvirt package, 1.3.0, smoked
tested it, and pushed it to buildlogs, which can be accessed by adding
--enablerepo=centos-virt-xen-testing (after installing the CentOS 7
centos-release-xen package).  Please test and let me know if there are
any problems.

 -George
___
CentOS-virt mailing list
CentOS-virt@centos.org
https://lists.centos.org/mailman/listinfo/centos-virt

Re: [CentOS] google chrome future / centos 7

[zep]

On 12/18/2015 08:34 AM, Jonathan Billings wrote:
> On Thu, Dec 17, 2015 at 09:38:40PM +, Richard wrote:
> "Ubuntu 12.04+, Debian 7+, OpenSuSE 13.1+, or Fedora Linux 21" No plus
> (+) after the 21. I assume it must be a typo, since f21 left support
> on the 1st of this month. The fact that their documentation is poorly
> maintained is just another bit of evidence that no one seems to care.
> Either that, or Google doesn't support Chrome on any supported version
> of RHEL or Fedora. I guess I have to switch to OpenSuSE. 

it could also be an indictment of Fedora itself, in effect saying 'well,
it worked on 21, but we have no idea WTF batcrap craziness will be
coming out of them next... so.   good luck with that.'


-- 
public gpg key id: 1362BA1A

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] playing DVDs on C7

[Alice Wonder]

On 12/18/2015 06:32 AM, Lamar Owen wrote:

On 12/17/2015 08:33 PM, Fred Smith wrote:

Hi all!

I'm trying to finish setting up my newly upgraded C7 system.

It's on the same hardware I ran C6 on for several years. on C6 I had no
trouble playing DVDs (after installing tons of packages and libdvdcss).


I have found that whether VLC will play a DVD is somewhat dependent on
the DVD.  I have played DVD's through VLC successfully on my CentOS 7
system using the nux package stack, incidentally, but there are several
DVD's in my collection that will not play with the VLC in nux dextop.
But I also purchased (the very first version a number of years ago) and
keep support updated for the Fluendo OnePlay DVD player (fully legal,
licensed, DVD playback) and it both works perfectly on CentOS 7 and
plays those titles that VLC has trouble with (like the DVD copy included
in the Bluray edition of Titanic).

If you want fully legal and fully supported DVD playback, see
http://www.oneplaydirect.com/oneplay/oneplay-dvd-player/ (which features
a 30 day free trial so you can test to see if it will work on your
hardware).  Fluendo also has fully legal codecs for the GStreamer
framework, and they're not terribly expensive, either. I've been using
their products for several years, now, and am quite satisfied.  The DVD
player does install a licensing daemon package, incidentally, which is a
bit of a new experience on Linux (although once was routine on Un*x
systems; anyone else remember FlexLM?).



I had problems in CentOS 7 with the nvidia card that did not exist in 
earlier CentOS versions, with some proprietary codecs.


Yanking the nvidia card and just using the Intel GPU in the CPU fixed 
that. And no more kernel taint.


For GStreamer I do have the fluendo codecs but if anyone wants I also 
have GStreamer 1.6.2 packages for CentOS 7


http://awel.domblogger.net/7/media/

has a lot of the libraries (and ffmpeg)

http://awel.domblogger.net/7/gstreamer/

has the gstreamer stuff.

I have found the fluendo codecs have better performance than the open 
source for h.264 and related potentially patent encumbered codecs.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] google chrome future / centos 7

[Always Learning]

On Fri, 2015-12-18 at 09:55 -0600, Valeri Galtsev wrote:

> 
> I guess we all are divided into two categories
> 
> 1. If google [something] doesn't work on the operating system of my
> choice, the hell with that crap (and google itself).
> 
> 2. If google [something] doesn't work on the operating system of my
> choice, I'll use whatever mighty google orders me (even if it is MS
> Windows ? ).
> 
> 

(3)  If its Google, apart from the search engine, I will not use it
because its the biggest intelligence gathering operation on the entire
planet.

:-)

-- 
Regards,

Paul.
England, EU.  England's place is in the European Union.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] playing DVDs on C7

[Fred Smith]

On Fri, Dec 18, 2015 at 09:32:53AM -0500, Lamar Owen wrote:
> On 12/17/2015 08:33 PM, Fred Smith wrote:
> >Hi all!
> >
> >I'm trying to finish setting up my newly upgraded C7 system.
> >
> >It's on the same hardware I ran C6 on for several years. on C6 I had no
> >trouble playing DVDs (after installing tons of packages and libdvdcss).
> >
> I have found that whether VLC will play a DVD is somewhat dependent
> on the DVD.  I have played DVD's through VLC successfully on my
> CentOS 7 system using the nux package stack, incidentally, but there
> are several DVD's in my collection that will not play with the VLC
> in nux dextop.  But I also purchased (the very first version a
> number of years ago) and keep support updated for the Fluendo
> OnePlay DVD player (fully legal, licensed, DVD playback) and it both
> works perfectly on CentOS 7 and plays those titles that VLC has
> trouble with (like the DVD copy included in the Bluray edition of
> Titanic).

I don't play a LOT of DVDs, but on, e.g., C6 on the same hardware
I don't recall ever having onefail to play with VLC.

In looking at the source package for libdvdcss, last night, I see there
are 3 different ways of cracking the encryption that it supports. The
default one is to try to crack each file's encryption, with the down-side
that it may fail entirely. there is also an option to crack the DISC's
key which can then be used to decrypt each file. from the description
it sounds as if the disc option might be better even though it isn't
the default.

If all else fails I will try hacking around with that option.

> 
> If you want fully legal and fully supported DVD playback, see
> http://www.oneplaydirect.com/oneplay/oneplay-dvd-player/ (which
> features a 30 day free trial so you can test to see if it will work
> on your hardware).  Fluendo also has fully legal codecs for the
> GStreamer framework, and they're not terribly expensive, either.
> I've been using their products for several years, now, and am quite
> satisfied.  The DVD player does install a licensing daemon package,
> incidentally, which is a bit of a new experience on Linux (although
> once was routine on Un*x systems; anyone else remember FlexLM?).

I'll certainly keep that in mind as a fallback position. but I prefer
to  run free software whenever possible, so I'll keep on poking at it
for a while before giving up.

thanks for the idea, though!

-- 
 Fred Smith -- fre...@fcshome.stoneham.ma.us -
   But God demonstrates his own love for us in this: 
 While we were still sinners, 
  Christ died for us.
--- Romans 5:8 (niv) --
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] google chrome future / centos 7

[Jonathan Billings]

On Fri, Dec 18, 2015 at 09:55:39AM -0600, Valeri Galtsev wrote:
> 
> I guess we all are divided into two categories
> 
> 1. If google [something] doesn't work on the operating system of my
> choice, the hell with that crap (and google itself).
> 
> 2. If google [something] doesn't work on the operating system of my
> choice, I'll use whatever mighty google orders me (even if it is MS
> Windows ? ).
> 
> 

Maybe its possible that one works someplace that has all its
email/collaboration/calendars in a Google Apps environment, and has a
central IT org saying to use Chrome for services?  Also, having Chrome
on EL7 was nice because then I didn't have to also track Flash Plugin
updates.  

Last I checked, Google also didn't support the Extended Support
Release of firefox but only the last two releases, which also causes
problems.

My concern isn't really for my personal use of the browser.  Its that
I support classroom and instructional workstations, and not having a
supported browser is just another excuse for management to get rid of
Linux workstations and make everyone use Windows. 

-- 
Jonathan Billings 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] google chrome future / centos 7

[Valeri Galtsev]

On Fri, December 18, 2015 10:27 am, Jonathan Billings wrote:
> On Fri, Dec 18, 2015 at 09:55:39AM -0600, Valeri Galtsev wrote:
>> 
>> I guess we all are divided into two categories
>>
>> 1. If google [something] doesn't work on the operating system of my
>> choice, the hell with that crap (and google itself).
>>
>> 2. If google [something] doesn't work on the operating system of my
>> choice, I'll use whatever mighty google orders me (even if it is MS
>> Windows ? ).
>>
>> 
>
> Maybe its possible that one works someplace that has all its
> email/collaboration/calendars in a Google Apps environment, and has a
> central IT org saying to use Chrome for services?  Also, having Chrome
> on EL7 was nice because then I didn't have to also track Flash Plugin
> updates.
>
> Last I checked, Google also didn't support the Extended Support
> Release of firefox but only the last two releases, which also causes
> problems.
>
> My concern isn't really for my personal use of the browser.  Its that
> I support classroom and instructional workstations, and not having a
> supported browser is just another excuse for management to get rid of
> Linux workstations and make everyone use Windows.
>

Yes, I know. This is why I overcame my laziness and did use "sarcasm" tags
;-)


Indeed, the first thing that happens, UNIX IT heads of institution are
being replaced with Windows brew ones. Then, most of the central services
are outsourced to external companies. Then all central IT everything is
converted to be using google everything. Then finally, on your UNIX
servers you are forced to figure out what to do with darn winmail.dat
crap... you, who considered even html composed e-mail an offense. But what
I'm complaining about? Even logs on our UNIX machines (sorry, Linux, not
UNIX, that slip was purposeful of course) are not plain ASCII but XML
garbage wrapped...


Valeri

> --
> Jonathan Billings 



Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] google chrome future / centos 7

[Always Learning]

On Fri, 2015-12-18 at 10:49 -0600, Valeri Galtsev wrote:


> 
> Indeed, the first thing that happens, UNIX IT heads of institution are
> being replaced with Windows brew ones. Then, most of the central services
> are outsourced to external companies. Then all central IT everything is
> converted to be using google everything. Then finally, on your UNIX
> servers you are forced to figure out what to do with darn winmail.dat
> crap... you, who considered even html composed e-mail an offense. But what
> I'm complaining about? Even logs on our UNIX machines (sorry, Linux, not
> UNIX, that slip was purposeful of course) are not plain ASCII but XML
> garbage wrapped...
> 

Very accurate. +1.


-- 
Regards,

Paul.
England, EU.  England's place is in the European Union.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] google chrome future / centos 7

[Richard]

> Date: Friday, December 18, 2015 13:02:37 -0500
> From: m.r...@5-cent.us
>
> Valeri Galtsev wrote:
>> 
>> On Fri, December 18, 2015 10:27 am, Jonathan Billings wrote:
>>> On Fri, Dec 18, 2015 at 09:55:39AM -0600, Valeri Galtsev wrote:



This item, which I opened, seems to be getting *way* off-topic. Can
we either refocus on whether "someone in the know" can tell if/what
the issue will likely be with chrome (seemingly likely with ~49),
and if there's potential for mitigation, or close this discussion.

It may just be best to wait until 49 hits their beta release stage
and look at it in more detail at that time.

Thanks.
   
  - Richard


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] google chrome future / centos 7

[Alice Wonder]

On 12/18/2015 10:02 AM, m.r...@5-cent.us wrote:



Yep. There IS NO REASON for *any* logfile (or configuration file, for that
matter) to be XML. Logs - if your machine is borked, cat or more may work,
when no other way to view it does. Configuration... XML is for GUI. If the
GUI's already hiding stuff, why not have it write out to *text* files?


XML for configuration is very handy when the configuration file may be 
modified by software, as you can read it into a DOM tree and validate 
before writing back to file.


It also allows you to do things like use an XSLT for displaying the 
configuration is a user friendly way.


Not saying it is always the best way to do things, but it certainly has 
its uses.


sitemap.xml is an excellent example of a configuration file that 
probably should be XML for what it does and how it is used.


Logs, well, I don't have a pro XML argument for those.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS-virt] CentOS 7 libvirt-1.3.0-1 coming to virt-xen buildlogs

[Pulkit Gupta]

Hi,

There is a strange issue in the CentOS 7.2 libvirtd 1.2.17 service.
If there is a symlink in the "/etc/libvirt/qemu/autostart/" which is created
before the libvirtd service is started, libvirtd wont start. 
Deleting the symlink from the autostart folder, then starting the libvirtd
service works.
Is this a know issue ? 

We have found this on 4-5 servers.

Regards,
Pulkit Gupta

-Original Message-
From: centos-virt-boun...@centos.org [mailto:centos-virt-boun...@centos.org]
On Behalf Of George Dunlap
Sent: 18 December 2015 09:34 PM
To: Discussion about the virtualization on CentOS
Subject: [CentOS-virt] CentOS 7 libvirt-1.3.0-1 coming to virt-xen buildlogs

Centos 7.2 has updated its version of libvirt to 1.2.17, which ends up
getting installed in preference to the previous virt-xen libvirt package
(1.2.15).

I've merged in the most recent Fedora libvirt package, 1.3.0, smoked tested
it, and pushed it to buildlogs, which can be accessed by adding
--enablerepo=centos-virt-xen-testing (after installing the CentOS 7
centos-release-xen package).  Please test and let me know if there are any
problems.

 -George
___
CentOS-virt mailing list
CentOS-virt@centos.org
https://lists.centos.org/mailman/listinfo/centos-virt

___
CentOS-virt mailing list
CentOS-virt@centos.org
https://lists.centos.org/mailman/listinfo/centos-virt

Re: [CentOS] google chrome future / centos 7

[m . roth]

Valeri Galtsev wrote:
>
> On Fri, December 18, 2015 10:27 am, Jonathan Billings wrote:
>> On Fri, Dec 18, 2015 at 09:55:39AM -0600, Valeri Galtsev wrote:
>>> 
>>> I guess we all are divided into two categories
>>>
>>> 1. If google [something] doesn't work on the operating system of my
>>> choice, the hell with that crap (and google itself).
>>>
>>> 2. If google [something] doesn't work on the operating system of my
>>> choice, I'll use whatever mighty google orders me (even if it is MS
>>> Windows ? ).
>>>
>>> 
>>
>> Maybe its possible that one works someplace that has all its
>> email/collaboration/calendars in a Google Apps environment, and has a
>> central IT org saying to use Chrome for services?  Also, having Chrome
>> on EL7 was nice because then I didn't have to also track Flash Plugin
>> updates.
>>
>> Last I checked, Google also didn't support the Extended Support
>> Release of firefox but only the last two releases, which also causes
>> problems.
>>
>> My concern isn't really for my personal use of the browser.  Its that
>> I support classroom and instructional workstations, and not having a
>> supported browser is just another excuse for management to get rid of
>> Linux workstations and make everyone use Windows.
>>
>
> Yes, I know. This is why I overcame my laziness and did use "sarcasm" tags
> ;-)
>
> 
> Indeed, the first thing that happens, UNIX IT heads of institution are
> being replaced with Windows brew ones. Then, most of the central services
> are outsourced to external companies. Then all central IT everything is
> converted to be using google everything. Then finally, on your UNIX
> servers you are forced to figure out what to do with darn winmail.dat
> crap... you, who considered even html composed e-mail an offense. But what
> I'm complaining about? Even logs on our UNIX machines (sorry, Linux, not
> UNIX, that slip was purposeful of course) are not plain ASCII but XML
> garbage wrapped...
> 

Yep. There IS NO REASON for *any* logfile (or configuration file, for that
matter) to be XML. Logs - if your machine is borked, cat or more may work,
when no other way to view it does. Configuration... XML is for GUI. If the
GUI's already hiding stuff, why not have it write out to *text* files?

Just because something is K3WL and NEW!!! doesn't mean you *have* to use
it. That there's a screw, don't use your hammer on it.

 mark

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] wifi on servers and fedora [was Re: 7.2 kernel panic on boot]

[Always Learning]

On Mon, 2015-12-07 at 14:27 -0500, m.r...@5-cent.us wrote:

> I've been pleased that the folks on this list have been solicited
> several times in the last six months for our opinions.

??? 


-- 
Regards,

Paul.
England, EU.  England's place is in the European Union.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] "installation source" specification for netinstall

[Karanbir Singh]

On 15/12/15 23:46, ken wrote:
> On 12/15/2015 04:22 PM, John R Pierce wrote:
>> On 12/15/2015 12:29 PM, ken wrote:
>>> Trying to specify the "installation source" in the configuration of
>>> netinstall for centos 7 (7.1).  Three places on the web said
>>>
>>> mirror.centos.org/centos/7/os/x86_64/
>>>
>>> But that configuration page probes, then it says, "Error setting up
>>> base repository".
>>>
>>> What's the magic needed?
>>>
>>> Also, if anyone knows specs for epel and others, they might help too.
>>
>> use one of the actual mirrors.
>> http://mirrors.kernel.org/centos/7/os/x86_64/
> 
> Nope.  No go.

Switch to the VC's and see what the error message is in the logs. do you
have networking setup at this point ? is it working as you'd expect ?


-- 
Karanbir Singh
+44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh
GnuPG Key : http://www.karan.org/publickey.asc
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 installer bug?

[Karanbir Singh]

On 16/12/15 17:47, m.r...@5-cent.us wrote:
> The other admin I work with seems to have found a bug in the installer.
> The setup is: two internal SSD drives. Once the GUI gets to "select drive
> to install on", he goes to , creates a RAID 1, and
> partitions it, regular MBR (they're small). 1G for /boot as the first
> partition, 2G for swap as the second partition, and the rest for / as
> partition 3. fdisk shows the partition types correctly.
> 
> Back to the GUI, select the MD drive... and /boot's fine, / looks ok...
> but the one for swap shows with 0 bytes.
> 
> Anyone else seen this behavior?


this might be down to when anaconda does its disk scan, and when the
parts were created by hand. Ideally, just use anaconda to do the same
thing and you should be fine.


-- 
Karanbir Singh
+44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh
GnuPG Key : http://www.karan.org/publickey.asc
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] yum/RPM and Trust on First Use

[Karanbir Singh]

On 16/12/15 03:05, Alice Wonder wrote:
> I'm not on the yum / RPM list and I don't know that I want to join just
> to discuss this but with respect GPG keys - it is a classic example of
> trust on first use.
> 
> The first time yum installs a package, it asks to import the GPG key
> used to sign the packages. Most people accept without validating the key.
> 

This is a huge issue, its something we've debated many times and I dont
think there is a clear answer, yet. At this point we have yum use the
gpg keys setup at install time, from the install media - it should not
be going over the wire to grab keys. And we sign the install media, and
its sha sum's - so uses can verify things.

the underlaying thinking being that if the install media is compromised,
anything it does and any content it grabs over the wire should be
considered potentially compromised - so enforce the idea of media test,
media validation, and deliver the first ring of trust via the media.

Having said that, your point about using DNS as a second way to verify
the keys is a good one, I believe its come up in the past as well. And
we have a todo item to get dnssec up for centos.org in the near future.
what I would recommend, is to open an issue report at bugs.centos.org/
to track this as a task.

As a related subject, we do push the main key fingerprints via https at
www.centos.org/keys

regards


-- 
Karanbir Singh
+44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh
GnuPG Key : http://www.karan.org/publickey.asc
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS-announce] Release for CentOS AltArch 7 (1511) on x86_64

[Karanbir Singh]

I would like to announce the general availability of the following
CentOS AltArch 7 Releases:

* CentOS AltArch 7 (1511) for i686
* CentOS AltArch UserLand 7 (1511) for Armhfp
* CentOS AltArch 7 (1511) for PowerPC64 (TechPreview)
* CentOS AltArch 7 (1511) for PowerPC8 LE (TechPreview)

We anticipate CentOS AltArch 7 (1511) for Aarch64 will be ready for
release within the coming days, and will be announced independently.

The CentOS AltArch SIG is a group of people working to build alternative
architecture support derived from CentOS Linux's sources. You can find
more details about the AltArch group at
https://wiki.centos.org/SpecialInterestGroup/AltArch including details
on how to get involved and ways to get help for architecture specific
issues.

Releases under the AltArch SIG are hosted at
http://mirror.centos.org/altarch/ and available from external mirrors
via rsync, http, ftp as usual, however under the /altarch/ path. Yum
configs shipped in the altarch builds points at mirror.centos.org
instead of mirrorlist or the external mirrors, as we are still working
through the mechanics to facilitate the wider mirrorlist process. We
hope to have this in place within the next 2 months, and updates to the
yum configs will be issued, when ready, via an updated centos-release rpm.

We are hosting a CentOS Dojo in Brussels, Belgium on the 29th Jan 2016.
Lots of the key people working on the AltArch builds will be present
there and it would be a great forum to engage with these groups. You can
get the details for the event at
https://wiki.centos.org/Events/Dojo/Brussels2016 including the
registration links.

In order to bootstrap these builds, we have turned on direct downloads
of this content from mirror.centos.org. We do encourage people with the
capacity to help seed with external mirrors. Details on howto run a
CentOS Mirror are available at
https://wiki.centos.org/HowTos/CreatePublicMirrors

A key part of our AltArch plans is to make resources available to all
the other SIG's in the CentOS environment, so they are able to build,
test, deliver their content for these architectures. We are working on
setting things up, and hope to start rolling out altarch support for
https://cbs.centos.org/ in the first quarter of 2016. If you are engaged
in any of the SIGs and would like to find out more details, please come
along to our buildsystems meeting that takes place on Mondays in
#centos-devel on irc.freenode.net. Details on this meeting and the other
SIG meetings can be found in our community meetings calendar published
at https://www.centos.org/community/calendar/ .

Bug reports and feedback about specific packages should be filed at
https://bugs.centos.org/ against the relevant package name, for project
CentOS Linux 7, in the same manner as you would for x86_64. However, do
mention the architecture as applicable.


CentOS AltArch 7 (1511) for i686 : This architecture build supports
32-bit Intel/AMD x86 machines and 32 bit IOT x86 boards.

SIG Notes: https://wiki.centos.org/SpecialInterestGroup/AltArch/i386

 * CentOS-7-i386-DVD-1511.iso
   sha256sum :
6af64d8371ed8fb95a56c99530f0dc3eb287e58f72c009c686db0fb80c39f83f
   direct link :
http://mirror.centos.org/altarch/7/isos/i386/CentOS-7-i386-DVD-1511.iso

* CentOS-7-i386-Everything-1511.iso
   sha256sum :
918e0ade9f642c93531c414defeecfc9b2c2a9589d57642d690e46e42b0af82a
   direct link :
http://mirror.centos.org/altarch/7/isos/i386/CentOS-7-i386-Everything-1511.iso

 * CentOS-7-i386-LiveGNOME-1511.iso
   sha256sum :
a03af3c7f6c75c74e1da5d1551ceaf5922427762c5cd6503f4f5e972737134ed
   direct link :
http://mirror.centos.org/altarch/7/isos/i386/CentOS-7-i386-LiveGNOME-1511.iso

*  CentOS-7-i386-LiveKDE-1511.iso
   sha256sum :
9fdef81423b872c361bac3ac55718822b4420de1645a4da8d7a255ae500965fc
   direct link :
http://mirror.centos.org/altarch/7/isos/i386/CentOS-7-i386-LiveKDE-1511.iso

* CentOS-7-i386-Minimal-1511.iso
   sha256sum :
df6edebec370bdee59e67eb70fab7ddc2fcf4c437803ca9e3213552b3908c4e1
   direct link :
http://mirror.centos.org/altarch/7/isos/i386/CentOS-7-i386-Minimal-1511.iso

* CentOS-7-i386-NetInstall-1511.iso
   sha256sum :
b106a0c13c86db86aaf821b66da1119063479e8776b8711dbbd35042b16bfd6d
   direct link :
http://mirror.centos.org/altarch/7/isos/i386/CentOS-7-i386-NetInstall-1511.iso



CentOS AltArch UserLand 7 (1511) for Armhfp : This architecture build
delivers support for ARMv7hl devices including the Raspberry pi2, Cubie
Truck, Bananapi and similar hardware.

SIG Notes: https://wiki.centos.org/SpecialInterestGroup/AltArch/Arm32

The armhfp build is delivered as a userland build, implying that kernel
and bootloader delivered is not derived from the CentOS Linux 7 distro,
but comes from either an upstream kernel.org mainline kernel or is a
vendor supported kernel for their own hardware piece. As such, the
Armhfp build does not aim to deliver a complete feature set, and is
labelled as a UserLand release. There are also no installer images

Re: [CentOS] CentOS 7.2 - Fast TSC calibration failed.

[Steven Tardy]

> On Dec 17, 2015, at 11:58 PM, Earl A Ramirez  wrote:
> I get
> the following error:
> 
> [ 0.00] tsc: Fast TSC calibration failed

TSC is a high accuracy CPU clock. TSC can fail due to motherboard hardware 
fault on multi processor servers. But the kernel usually fails back to the less 
accurate default hpet clock.

Do other versions/kernels work fine? Does RHEL 7.2 work?
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7.2 - Fast TSC calibration failed.

[Earl A Ramirez]

On 19 December 2015 at 12:18, Steven Tardy  wrote:

>
> > On Dec 17, 2015, at 11:58 PM, Earl A Ramirez 
> wrote:
> > I get
> > the following error:
> >
> > [ 0.00] tsc: Fast TSC calibration failed
>
> TSC is a high accuracy CPU clock. TSC can fail due to motherboard hardware
> fault on multi processor servers. But the kernel usually fails back to the
> less accurate default hpet clock.
>
> Do other versions/kernels work fine? Does RHEL 7.2 work?
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

Hello Steven,

Thanks for the information; I'm currently downloading RHEL 7.2 so will if
that a try and report back, I 'assume' that the hardware may be too new
because I am getting the following error when I try to use Fedora 23 live
workstation. The error is "time out waiting for CPU 0".

Will see if I can make any adjustments in the BIOS and try again.

-- 
Kind Regards
Earl Ramirez
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos