Re: [CentOS] systemctl restart changes permission.

2020-04-29 Thread Kenneth Porter

On 4/29/2020 9:06 PM, Kaushal Shriyan wrote:

I am running CentOS Linux release 7.8.2003 (Core)
with php72u-fpm-7.2.30-1.el7.ius.x86_64 version. I am facing the below
permission denied issue. I also did the below steps
#cd /run
#chown -Rc nginx.nginx php-fpm
changed ownership of ‘php-fpm/php-fpm.pid’ from root:root to nginx:nginx
changed ownership of ‘php-fpm’ from root:root to nginx:nginx
#systemctl restart php-fpm again changes it from nginx.nginx to root.root
user.


/run is a tmpfs that gets recreated on every boot. Your permission 
changes won't persist a reboot. See here:


https://lwn.net/Articles/436012/

You could instead drop a systemd unit file customization file into 
/etc/systemd that changes the user that php-fpm runs as.


https://www.certdepot.net/rhel-7-systemd-unit-file-customization/
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] systemctl restart changes permission.

2020-04-29 Thread Kaushal Shriyan
Hi,

I am running CentOS Linux release 7.8.2003 (Core)
with php72u-fpm-7.2.30-1.el7.ius.x86_64 version. I am facing the below
permission denied issue. I also did the below steps
#cd /run
#chown -Rc nginx.nginx php-fpm
changed ownership of ‘php-fpm/php-fpm.pid’ from root:root to nginx:nginx
changed ownership of ‘php-fpm’ from root:root to nginx:nginx
#systemctl restart php-fpm again changes it from nginx.nginx to root.root
user.


nginx error logs
> 2020/04/30 03:09:28 [crit] 17175#0: *154570 connect() to
> unix:/run/php-fpm/www.sock failed (13: *Permission denied*) while
> connecting to upstream, client: 49.207.54.161, server: _, request: "GET /
> HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host:
> "35.128.212.112"
> 2020/04/30 03:09:28 [error] 17175#0: *154570 open()
> "/var/www/drupal/web/50x.html" failed (2: No such file or directory),
> client: 49.207.54.161, server: _, request: "GET / HTTP/1.1", upstream:
> "fastcgi://unix:/run/php-fpm/www.sock", host: "35.128.212.112"
> 2020/04/30 03:09:35 [crit] 17176#0: *154573 connect() to
> unix:/run/php-fpm/www.sock failed (13: Permission denied) while connecting
> to upstream, client: 49.207.54.161, server: _, request: "GET / HTTP/1.1",
> upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "35.128.212.112"
> 2020/04/30 03:09:35 [error] 17176#0: *154573 open()
> "/var/www/drupal/web/50x.html" failed (2: No such file or directory),
> client: 49.207.54.161, server: _, request: "GET / HTTP/1.1", upstream:
> "fastcgi://unix:/run/php-fpm/www.sock", host: "35.128.212.112"
> 2020/04/30 03:09:49 [crit] 17175#0: *154575 connect() to
> unix:/run/php-fpm/www.sock failed (13: Permission denied) while connecting
> to upstream, client: 14.98.153.6, server: _, request: "GET / HTTP/1.1",
> upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "35.128.212.112"
> 2020/04/30 03:09:49 [error] 17175#0: *154575 open()
> "/var/www/drupal/web/50x.html" failed (2: No such file or directory),
> client: 14.98.153.6, server: _, request: "GET / HTTP/1.1", upstream:
> "fastcgi://unix:/run/php-fpm/www.sock", host: "35.128.212.112"
> 2020/04/30 03:09:50 [crit] 17175#0: *154575 connect() to
> unix:/run/php-fpm/www.sock failed (13: Permission denied) while connecting
> to upstream, client: 14.98.153.6, server: _, request: "GET / HTTP/1.1",
> upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "35.128.212.112"
> 2020/04/30 03:09:50 [error] 17175#0: *154575 open()
> "/var/www/drupal/web/50x.html" failed (2: No such file or directory),
> client: 14.98.153.6, server: _, request: "GET / HTTP/1.1", upstream:
> "fastcgi://unix:/run/php-fpm/www.sock", host: "35.128.212.112"
> 2020/04/30 03:10:46 [crit] 17176#0: *154578 connect() to
> unix:/run/php-fpm/www.sock failed (13: Permission denied) while connecting
> to upstream, client: 184.22.107.148, server: _, request: "GET / HTTP/1.1",
> upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "35.128.212.112"
> 2020/04/30 03:10:46 [error] 17176#0: *154578 open()
> "/var/www/drupal/web/50x.html" failed (2: No such file or directory),
> client: 184.22.107.148, server: _, request: "GET / HTTP/1.1", upstream:
> "fastcgi://unix:/run/php-fpm/www.sock", host: "35.128.212.112"


Please let me know if you need any additional information. Thanks in
Advance.

Best Regards,

Kaushal
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] GNS3 installation docs for CentOS 8

2020-04-29 Thread Earl Ramirez

> Does anyone have GNS3 installation guide for CentOS 8?
This was validated in a KVM

- Install dependencies 
  $ sudo dnf -y install platform-python-devel qt5-qtbase python3-qt5
- Download and install dynamips and ubridge 
  ubridge-0.9.14-5.fc30.x86_64.rpm [
https://rpmfind.net/linux/rpm2html/search.php?query=ubridge]
  dynamips-0.2.21-1.el8.x86_64 [
https://rpmfind.net/linux/rpm2html/search.php?query=dynamips]
  $ sudo dnf install ~/Downloads/ubridge-0.9.14-5.fc30.x86_64.rpm
  $ sudo dnf install ~/Downloads/dynamips-0.2.21-1.el8.x86_64.rpm
- install GNS3 packages
  $ pip3 install gns3-gui gns3-server gns3-netifaces gns3-net-converter

I tested a couple of docker container and a cisco router, hope this
helps
  


signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] INITRD_MODULES

2020-04-29 Thread Jerry Geis
This solution did work. thanks for the suggestion. on dracut.

Jerry
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] INITRD_MODULES

2020-04-29 Thread Jerry Geis
> man dracut

Sure there is always that - thanks. But for a person doing this the first
time - one is always wondering if he did something wrong with the command -
that is why I asked.

I'm doing something like:
dracut -f /boot/initramfs-3.10.0-1062.el7.x86_64.img $(uname -r)

Thanks again. Is there not a "simpler" command that says take the
current kernel and re-run - no command args - it just knows what the
current kernel is and does it?

Jerry
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] INITRD_MODULES

2020-04-29 Thread Alexander Dalloz

Am 29.04.2020 um 22:07 schrieb Jerry Geis:

Sure - I'm game. I didn't know to run dracut directly I guess (never done
it).
What is the command for that on CentOS 7.
dracut 

Jerry



man dracut

Alexander
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] INITRD_MODULES

2020-04-29 Thread Jerry Geis
Sure - I'm game. I didn't know to run dracut directly I guess (never done
it).
What is the command for that on CentOS 7.
dracut 

Jerry
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] INITRD_MODULES

2020-04-29 Thread Alexander Dalloz

Am 29.04.2020 um 21:48 schrieb Jerry Geis:

I am trying to take a CentOS 7 img and get hyperv to boot.

First step.
qemu-img convert "CentOS7.img" -O vhdx -o subformat=dynamic "CentOS7.vhdx"

after adding new hyper-v I get dracut-timeout...
So doing some searching it says add hv_vmbus hv_netvsc hv_storvsc to
INITRD_MODULES.

which doesnt really exist any more in CentOS 7.

I did find /etc/dracut.conf and add_drivers...
I uncommented the line for '#add_drivers += "" ' added the above modules
and then ran:
grub2-mkconfig -o /boot/grub2/grub.cfg


Why didn't you run dracut to create the new initramfs image file?


Then redid the convert above... Hyper-V still gives me dracut-timeout
errors.

Thoughts ? Did I miss something ?

Thanks

Jerry


Alexander


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] INITRD_MODULES

2020-04-29 Thread Jerry Geis
I am trying to take a CentOS 7 img and get hyperv to boot.

First step.
qemu-img convert "CentOS7.img" -O vhdx -o subformat=dynamic "CentOS7.vhdx"

after adding new hyper-v I get dracut-timeout...
So doing some searching it says add hv_vmbus hv_netvsc hv_storvsc to
INITRD_MODULES.

which doesnt really exist any more in CentOS 7.

I did find /etc/dracut.conf and add_drivers...
I uncommented the line for '#add_drivers += "" ' added the above modules
and then ran:
grub2-mkconfig -o /boot/grub2/grub.cfg

Then redid the convert above... Hyper-V still gives me dracut-timeout
errors.

Thoughts ? Did I miss something ?

Thanks

Jerry
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Tomcat or what on CentOS 8?

2020-04-29 Thread Jonathan Billings
On Wed, Apr 29, 2020 at 03:16:45PM +0200, Simon Matter via CentOS wrote:
> But then why would you want to use CentOS for it or even pay for RHEL if
> you can have all this packaged nicely in FreeBSD? Plus, as a long term
> Unix and Linux user I feel much more at home on FreeBSD these days than I
> feel on CentOS 7 or 8. Even Fedora provides Tomcat 9 which I'm calling an
> enterprise feature. How can an enterprise distribution lack such an
> important and widely used feature?

Upstream (RHEL) supports JBoss (aka WildFly) which is probably why
it's not packaging Tomcat anymore.

-- 
Jonathan Billings 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Diagnosing IPv6 routing

2020-04-29 Thread Chris Adams
Once upon a time, Kenneth Porter  said:
> --On Tuesday, April 28, 2020 10:16 PM -0500 Chris Adams
>  wrote:
> >And frankly, giving you a /56 is pretty crappy, since ARIN rules say to
> >give every site a /48.  I'd only do a /56 for a home connection prefix
> >delegation.  But, that's AT! :)
> 
> I'd just read about that when researching this. Maybe they decided
> that since we only have about a dozen people at our site, we won't
> have a lot of subnets. What do small offices DO with 256 public
> subnets, anyway? I suppose eventually we'll have an IoT subnet on
> every person.

The idea with IPv6 is not to even necessarily think about it in terms of
direct numbers, but in layers.  It is not uncommon to have several
layers of routers, firewalls, guest wifi networks, etc., and each layer
should request a prefix delegation from its parent.  So rather than 256
subnets, think about it as 8 layers (at most... but if a layer has more
than 2 children, you have fewer layers available).

So for example, if your Internet gateway has a desktop firewall, a guest
wifi, a public DMZ, and a development lab gateway connected, and you
want to allow for more things at that layer, there's 3 of your 8 bits in
a /56.  If the dev lab needs to fan out more, and maybe your public DMZ
needs to break up for production and QA-testing networks, and you add a
VPN concentrator to the desktop network... you can go through those bits
fast.

In IPv4, people would just NAT the crap out of everything, having to
tunnel from one NATted network to another, making life really difficult.
The plan is no NAT in IPv6, so allow for all potential allocations up
front.

Also, allocations should be larger than necessary and sparse, so that
you never need another allocation (even if you grow to 1000 employees
and multiple buildings on a campus).  This is to hopefully prevent
routing tables from exploding like IPv4 did (and also to avoid you
having to renumber everything just to stay in a single block).

-- 
Chris Adams 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] GNS3 installation docs for CentOS 8

2020-04-29 Thread Earl Ramirez

> Does anyone have GNS3 installation guide for CentOS 8?
I have some notes for the installation that I use for Fedora, I can
test for CentOS 8 and share it with you or stick it on the Wiki.


signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] GNS3 installation docs for CentOS 8

2020-04-29 Thread System Administrator via CentOS
Hi,
Does anyone have GNS3 installation guide​ for CentOS 8?


Would be grateful if you could give me.


Thank you.

Sonam
**
Information contained in this message maybe confidential in nature and is meant 
for the intended recipient(s) of the message only. Tashi InfoComm Limited has 
the sole right to such information and any copying/redistribution of the 
information contained in the message, without the prior written consent of 
Tashi InfoComm Limited, is Prohibited.
**
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Tomcat or what on CentOS 8?

2020-04-29 Thread Simon Matter via CentOS
> --On Tuesday, April 28, 2020 9:35 PM +0200 Simon Matter via CentOS
>  wrote:
>
>> If I don't find usable RPMs for CentOS 8 I'm going to build our own as I
>> do for other things as well. But I just can't believe they don't already
>> exist.
>
> Some upstream providers have taken to providing their own repositories.
> I'm
> now getting Nginx, MariaDB, and PostgreSQL from the source that way.
> Perhaps Tomcat has its own upstream repo.

But then why would you want to use CentOS for it or even pay for RHEL if
you can have all this packaged nicely in FreeBSD? Plus, as a long term
Unix and Linux user I feel much more at home on FreeBSD these days than I
feel on CentOS 7 or 8. Even Fedora provides Tomcat 9 which I'm calling an
enterprise feature. How can an enterprise distribution lack such an
important and widely used feature?

Regards,
Simon

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Tomcat or what on CentOS 8?

2020-04-29 Thread Simon Matter via CentOS
> On Tue, Apr 28, 2020 at 7:35 PM Simon Matter via CentOS
>  wrote:
>> If I don't find usable RPMs for CentOS 8 I'm going to build our own as I
>> do for other things as well. But I just can't believe they don't already
>> exist.
>
> I've packaged tomcat8 and tomcat9 in my repo here:
> https://harbottle.gitlab.io/harbottle-main/8/x86_64/

Thanks, that's a good starting point to look at.

Regards,
Simon

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos