Re: [CentOS] firewalld: removing rich-rules based on its own list fails

[Patrick via CentOS]

Hi Kenneth,

On 22-12-2021 22:39, Kenneth Porter wrote:
--On Wednesday, December 22, 2021 8:03 PM +0100 Patrick via CentOS 
 wrote:



Error: INVALID_RULE: internal error in _lexer(): rule family="ipv4"
source NOT address="46.23.XX.0/24" forward-port port="53" protocol="udp"
to-port="60053" to-addr="46.23.XX.53"


If you don't get help here, you might try one of the firewalld mailing 
lists or other support resources here:


<https://firewalld.org/community.html>

I'm curious to hear what you discover. (This might be a bug that 
warrants a patch for the CentOS package.)


Thanks for the pointer. I'll follow up with the firewalld ML and if 
anything surfaces will let you know.


Best,
Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] firewalld: removing rich-rules based on its own list fails

[Patrick via CentOS]

Hi,

I have some ansible roles which each create some firewalld rich-rules. 
For ansible idempotency I tried to remove any dns related rich-rules 
before creating the ones in the playbook. After some searching I came up 
with this:


#!/bin/bash
OLDIFS=$IFS
IFS=''
while read -r line; do firewall-cmd --zone=public --permanent 
--remove-rich-rule=\'$line\'; done <<< $(firewall-cmd --zone=public 
--list-rich-rules | egrep 'dns|53')

IFS=$OLDIFS

But this fails with for example:

Error: INVALID_RULE: internal error in _lexer(): rule family="ipv4" 
source NOT address="46.23.XX.0/24" forward-port port="53" protocol="udp" 
to-port="60053" to-addr="46.23.XX.53"


My googling & variations came up empty. Anyone know why this is failing 
and could possibly share how to make this work?


Thanks!

Best,
Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos versions in the future?

[HEDE Patrick]

Hi
  What about https://rockylinux.org ?
Best regards
Pat


-Message d'origine-
De : CentOS  De la part de J Martin Rushton via 
CentOS
Envoyé : mercredi 7 juillet 2021 17:39
À : centos@centos.org
Objet : Re: [CentOS] Centos versions in the future?

On 07/07/2021 13:41, Leon Fauster via CentOS wrote:
> On 07.07.21 14:31, J Martin Rushton via CentOS wrote:
>> Fashion, and Oracle's past practices.  I evaluated
>>  Alma Linux
>>  Fedora
>>  Mint
>>  Open SuSE
>>  Oracle Linux
>>  Springdale Linux
>> and settled on Alma.  Rocky was still vapourware when Alma was stable. 
>> I've seen how Oracle promise no change in the long term, then change 
>> their charging model in the past.  We got badly burned at work when 
>> they took over DEC RDB.
>>
>> I like Alma's independence built on Cloud's experience over many 
>> years building RHEL clones.
>>
> 
> Here is another one:
> 
> https://navylinux.org/
> 
> --
> Leon
> 
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos

I hadn't seen that one, but I do notice that it aims to be "minimalist" 
whereas my main machine is the network server (DNS, DHCP etc), a server (Wiki, 
Cloud, storage) and my workstation.

BTW, anyone know who the "Navy Foundation" are?  Is this an arm of the US 
government?

Martin

--
J Martin Rushton MBCS
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 8 future

[Patrick Bégou]

I'm also using CentOS for a while and I'm deploying a CentOS8 cluster
for some months because it was supported until 2029! Bad idea.
For me, using debian has 2 important drawbacks
- some of proprietary software we are using is certified RHEL and SLES.
Deploying on CentOS is out-of-thebox. Deploying on debian (we have also
debian servers) is often a nightmare and some functionalities still
doesn't work (and support reply "debian is not supported"). We have no
alternative for these softwares.
- hardware support for servers rely also on some certifications and they
are mainly for RHEL or SLES (or Unbutu but for laptops, not servers) and
in case of trouble the support has yet answered "please use a certified
os". Centos is considered as RHEL by the support. Not sure that with
stream it will be the same.

Patrick

Le 14/12/2020 à 17:57, Lamar Owen a écrit :
> On 12/12/20 10:34 PM, Konstantin Boyandin via CentOS wrote:
>> My only concern ATM is whether RH can change its CentOS 7 maintenance
>> plans as well, all of a sudden. 
> This is what bothers me, too, but in a slightly different way.  Even
> for the GPL software, Red Hat actually doesn't have to provide public
> access to the source code; the only thing required by GPL is that
> those who receive binaries must be able to get sources.  So, even
> though it has been said that the source will be available, well, it
> was also said that C8 would be supported to 2029.  There are enough
> packages in RHEL with non-GPL licenses where it would be very
> difficult to rebuild the whole distribution without them, and RH is
> not required by those licenses (MIT, BSD, and others) to redistribute
> those modified sources even to people who have been distributed
> binaries.  So, while I want to believe that the sources will remain
> available, that belief relies on trust, which unfortunately is less
> abundant these days.
>
> So while using another rebuild seems to be a good stopgap solution, I
> do wonder if it will prove to be sustainable post-2021.  I'm
> personally looking at which of the four (that we know about) to
> possibly go to; I just really doubt I am going to use Oracle; Rocky
> isn't really there yet and is very young; Springdale is available,
> mature, and academically supported (nothing wrong with that, just a
> statement); CloudLinux OS Project Lenix isn't yet released.  Out of
> the bunch, Springdale would be my first choice right now because it's
> been around a very long time and is available now.  C8 is supposed to
> be around until end of 2021, so there is some time for the dust to
> settle and the way to become more clear, though.  But CentOS 8 Stream
> is only an option for me if the hardware driver KABI synchronization
> issue is solved and stays solved.  RHEL?  Under the current
> subscription models we just can't afford it. (Cost also keeps SLES out
> of the running.)
>
> But I'm now seriously considering just simply going to something that
> is both older than Red Hat, fully and totally open, extremely
> well-supported by a diverse developer community, and used by a whole
> lot of people.  Yes, that's Debian; until I realized where the name
> came from (Deb and Ian) it read to me like a play on 'deviant.'  The
> 'stable' period is shorter, for sure.  The tradeoffs are pretty
> simple: guaranteed openness versus less change for ten years.
>
> So, let's look at that last piece.  CentOS 6's support just ended;
> what have the last nine years and three months of actual C6 support
> looked like?  I supported several C6 machines, and there were distinct
> challenges early on, at least for the first four years or so.  Since
> then, on the server, it's been very stable, but really old; key pieces
> of infrastructure software we use slowly became unusable on C6 due to
> the old versions of specific packages, and either a third-party repo
> with newer packages or a newer CentOS was needed.
>
> Third-party repos have improved over the years, but some of the
> earlier C6 machines I installed had packages from Linuxtech, Dag,
> ATrpms, City-Fan (one particular DVD burner that just had to have the
> non-wodim cdrtools for some reason; yes, I know all the warnings about
> that repo), and others.  Having EPEL and Dag both package a few things
> that I needed, but package them differently, introduced me to package
> pinning and repo priorities I don't miss those days.  Seriously
> stable in the core repos means very little when you need much less
> stable third-party repos to get actual work done. That's also why
> Fedora isn't really an option, just too much package churn; been
> there, done that, a few years ago.
>
> So I've start

Re: [CentOS] MTU report question

[Patrick Bégou]

Hi Strahil

I get:

ping: local error: Message too long, mtu=2044
ping: local error: Message too long, mtu=2044

so ip report is correct and nmcli did not the job ?

Patrick

Le 14/12/2020 à 20:23, Strahil Nikolov via CentOS a écrit :
> what happens when you 'ping -M do -s 65000 -c 4  ?
>
> Best Regards,
> Strahil Nikolov
>
>
>
>
>
>
> В понеделник, 14 декември 2020 г., 15:46:50 Гринуич+2, Patrick Bégou 
>  написа: 
>
>
>
>
>
> Hi,
>
> I'm deploying a CentOS8 (not stream 😁) cluster and I have a question
> about MTU on the interfaces. I have a connectX6 Mellanox interface where
> I need IBoIP setup.
> I've setup this interface via nmcli and set the MTU to 65520 with:
>
>     nmcli connection modify ib0 mtu 65520
>     nmcli connection up ib0
>
> Running "nmcli connection show ib0" report:
>
>     infiniband.mtu: 65520
>
> But "ip addr show ib0" report a mtu of 2044:
>
>     6: ib0:  *mtu 2044 *qdisc mq state
>     UP group default qlen 256
>
> Why ? Who is wrong (possibly me)?
>
> Thanks
>
> Patrick
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] MTU report question

[Patrick Bégou]

Hi,

I'm deploying a CentOS8 (not stream 😁) cluster and I have a question
about MTU on the interfaces. I have a connectX6 Mellanox interface where
I need IBoIP setup.
I've setup this interface via nmcli and set the MTU to 65520 with:

nmcli connection modify ib0 mtu 65520
nmcli connection up ib0

Running "nmcli connection show ib0" report:

infiniband.mtu: 65520

But "ip addr show ib0" report a mtu of 2044:

6: ib0:  *mtu 2044 *qdisc mq state
UP group default qlen 256

Why ? Who is wrong (possibly me)?

Thanks

Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Odd issue happening CentOS 7

[Patrick Bégou]

Did you notice the address ? It is not the same IP.

Patrick

Le 02/11/2020 à 17:48, Jerry Geis a écrit :
> So I have two CentOS 7 machines running.
>
> if I am on my server and I do "curl  http://192.168.1.8"; I get data.
> If I do "host devgeis.LayeredSolutionsInc.com" I get the correct address
> 192.168.1.8
>
> if I goto another machine with CentOS 7.
> I do "curl http://192.168.1.8"; I get data.
> I do "host devgeis.LayeredSolutionsInc.com" I get the correct address
> *192.*168.1.8
>
> BUT then I do "curl http://devgeis.LayeredSolutionsinc.com"; I get "nothing"
> BUt then doing the -v with "curl -v http://devgeis.LayeredSolutionsinc.com";
> * About to connect() to devgeis.LayeredSolutionsinc.com port 80 (#0)
> *  *Trying 198.*168.1.8...
>
> So why when using the name is it not giving me the index.html page ?
>
> Should not be a firewall issue - as the actual address worked. Also I tried
> stopping the firewall - and all the above is the exact same.
>
> What is possibly happening here ?
>
> Thanks
>
> Jerry
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] [CentOS7] cups, cups-browsed

[Patrick Bégou]

Hi,

I have a strange problem on one laptop with cups in CentOS7, all updates
applied.

Sometime, the lpstat -t command returns "No destination host name
supplied by cups-browsed for printer" and asks if  cups-browsed is
running. Nonetheless cups-browsed is running and is configured.
Restarting  cups-browsed  does not help so the problem is not related to
cups-browsed . The solution is to manually restart cups service

But, the user has no root access on his laptop (it is not allowed in our
professional environment) so the only work-around would be a cron task.
But this is a work-around, not a solution to this problem.

Did someone encounter this behavior and found the solution ? Could it be
related to swiching from Wifi (at home) to wired network (at workplace)?

I have several laptops, all installed with the same kickstart file via
PXE boot and cups running fine. All are DELL computers except this one
which is a HP ZBook.

Thanks

Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS7 and NFS

[Patrick Bégou]

Hello,

I'm back with these NFS problems
Server and client have been updated but it still rise time to time.

server is: Linux robin.legi.grenoble-inp.fr 3.10.0-1127.18.2.el7.x86_64
#1 SMP Sun Jul 26 15:27:06 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
client is :  Linux grivola.legi.grenoble-inp.fr
3.10.0-1127.18.2.el7.x86_64 #1 SMP Sun Jul 26 15:27:06 UTC 2020 x86_64
x86_64 x86_64 GNU/Linux

CentOS Linux release 7.8.2003 (Core) each.

It seams related to an scp session: the NFS client downloads a large
data set from a remote server and store the files on it's NFS file system.

On the client I have such messages in /var/log/messages:

Aug 28 10:03:08 grivola kernel: INFO: task scp:78495 blocked for
more than 120 seconds.
Aug 28 10:03:08 grivola kernel: "echo 0 >
/proc/sys/kernel/hung_task_timeout_secs" disables this message.
Aug 28 10:03:08 grivola kernel: scp D
97e37fa9acc0 0 78495 147369 0x0084
Aug 28 10:03:08 grivola kernel: Call Trace:
Aug 28 10:03:08 grivola kernel: [] ?
bit_wait+0x50/0x50
Aug 28 10:03:08 grivola kernel: [] schedule+0x29/0x70
Aug 28 10:03:08 grivola kernel: []
schedule_timeout+0x221/0x2d0
Aug 28 10:03:08 grivola kernel: [] ?
rpc_run_task+0xf6/0x150 [sunrpc]
Aug 28 10:03:08 grivola kernel: [] ?
rpc_put_task+0x10/0x20 [sunrpc]
Aug 28 10:03:08 grivola kernel: [] ?
bit_wait+0x50/0x50
Aug 28 10:03:08 grivola kernel: []
io_schedule_timeout+0xad/0x130
Aug 28 10:03:08 grivola kernel: []
io_schedule+0x18/0x20
Aug 28 10:03:08 grivola kernel: []
bit_wait_io+0x11/0x50
Aug 28 10:03:08 grivola kernel: []
__wait_on_bit+0x67/0x90
Aug 28 10:03:08 grivola kernel: []
wait_on_page_bit+0x81/0xa0
Aug 28 10:03:08 grivola kernel: [] ?
wake_bit_function+0x40/0x40
Aug 28 10:03:08 grivola kernel: []
__filemap_fdatawait_range+0x111/0x190
Aug 28 10:03:08 grivola kernel: []
filemap_fdatawait_range+0x14/0x30
Aug 28 10:03:08 grivola kernel: []
filemap_fdatawait+0x27/0x30
Aug 28 10:03:08 grivola kernel: []
filemap_write_and_wait+0x4c/0x80
Aug 28 10:03:08 grivola kernel: []
nfs_wb_all+0x20/0x100 [nfs]
Aug 28 10:03:08 grivola kernel: []
nfs_setattr+0x1f0/0x210 [nfs]
Aug 28 10:03:08 grivola kernel: []
notify_change+0x30c/0x4d0
Aug 28 10:03:08 grivola kernel: []
do_truncate+0x75/0xc0
Aug 28 10:03:08 grivola kernel: [] ?
__sb_start_write+0x58/0x120
Aug 28 10:03:08 grivola kernel: []
do_sys_ftruncate.constprop.14+0x139/0x1a0
Aug 28 10:03:08 grivola kernel: []
SyS_ftruncate+0xe/0x10
Aug 28 10:03:08 grivola kernel: []
system_call_fastpath+0x25/0x2a

At this time the NFS server freeze. Even a ssh session or the local
console (via IDRAC or screen/keyboard physically plugged on the server)
do not work.

I have no special messages on the NFS server. The freeze period end with:

On the server:

Aug 28 10:20:26 robin kernel: NFSD: client 194.254.66.26 testing
state ID with incorrect client ID
Aug 28 10:20:26 robin kernel: NFSD: client 194.254.66.26 testing
state ID with incorrect client ID
Aug 28 10:20:26 robin kernel: NFSD: client 194.254.66.26 testing
state ID with incorrect client ID
Aug 28 10:20:26 robin kernel: NFSD: client 194.254.66.26 testing
state ID with incorrect client ID
Aug 28 10:20:26 robin kernel: NFSD: client 194.254.66.26 testing
state ID with incorrect client ID
Aug 28 10:20:26 robin kernel: NFSD: client 194.254.66.26 testing
state ID with incorrect client ID
Aug 28 10:20:26 robin kernel: NFSD: client 194.254.66.26 testing
state ID with incorrect client ID
Aug 28 10:20:26 robin kernel: NFSD: client 194.254.66.26 testing
state ID with incorrect client ID
Aug 28 10:20:26 robin kernel: NFSD: client 194.254.66.26 testing
state ID with incorrect client ID
Aug 28 10:20:26 robin kernel: NFSD: client 194.254.66.26 testing
state ID with incorrect client ID

and on the client:

Aug 28 10:20:26 grivola kernel: nfs: server
robin.legi.grenoble-inp.fr OK
Aug 28 10:20:26 grivola kernel: nfs: server
robin.legi.grenoble-inp.fr OK
Aug 28 10:20:26 grivola kernel: nfs: server
robin.legi.grenoble-inp.fr OK
Aug 28 10:20:26 grivola kernel: nfs: server
robin.legi.grenoble-inp.fr OK
Aug 28 10:20:26 grivola kernel: nfs: server
robin.legi.grenoble-inp.fr OK


I do not know how to investigate this

Patrick

Le 09/07/2020 à 12:11, Patrick Bégou a écrit :
> Hi Orion,
>
> no, I still have this problem. I delay working on it as I the latest
> updates have not been installed on the server and on the client. I'll
> work again on this problem as soon as possible.
>
> Thanks Charles for your detailed information on how to track this
> problem. I'll check all these metrics.
>
> I have several clients for this nfs server and the

Re: [CentOS] Laptop and NFS homedir

[Patrick Bégou]

In my professional environment, user's laptop have small (but fast ;-))
storage and a local home directory (centOS7).
They use sshfs to reach a central storage for most of their needs. This
central storage is secured (ceph replication + daily backup).
It works also from home but, of course, with lower performances behind
an ADSL box.
No problem with closing connections.

Patrick

Le 26/08/2020 à 15:08, Jonathan Billings a écrit :
> On Wed, Aug 26, 2020 at 12:08:56PM +0100, isdtor wrote:
>> Are there any documented best practices for using NFS home
>> directories on laptops? Right now, and this is on CentOS 7, when I
>> disconnect the machine from the network, the desktop freezes, and I
>> can't even tell if the machine switches to the wireless network. If
>> this sort of adapter switching, which is standard in e.g. Windows
>> 10, is even supported. 
> I'd say: Don't do it.
>
> NFS does not handle disconnected operations well, nor does the client
> handle IP migrations well.  You'd have to restart the client to get it
> to work, most likely, and processes that are living in $HOME would
> need to be killed before you could unmount it.
>
> There is some effort being made in making fscache work with NFS but
> I've not had much luck in CentOS7 or 8.  It still wouldn't help with
> IP roaming.
>
> Best advice I can offer is to make $HOME local but have symlinks into
> NFS for directories that can be safely unmounted and remounted.
>
> Windows doesn't really have network home directories like UNIX does,
> and their SMB client handles IP roaming better.
>

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Boot fails with lvm snapshot

[Patrick Bégou]

Hi,

I check this morning, dm-snapshot.ko was yet included in initrd as show
by lsinitrd.

$ lsinitrd /boot/initramfs-3.10.0-1127.18.2.el7.x86_64.img | grep
dm-snapshot.ko
-rw-r--r--   1 root root    20372 Jul 26 17:38
usr/lib/modules/3.10.0-1127.18.2.el7.x86_64/kernel/drivers/md/dm-snapshot.ko.xz

I've rebuilt the image this morning (dracut -fv) with the snapshot "on"
and I'll try a reboot next week (I work remotely these next days).

An important thing is that during the kernel update (and initrd build
for the new kernel), the snapshot was also available.

$lvs
  LV   VG  Attr   LSize   Pool Origin   Data%  Meta%  Move
Log Cpy%Sync Convert
  data1lv1 data1vg owi-aos--- 
75,00t 
  snapdata data1vg swi-aos---  <2,93t  data1lv1
1,23  
  homevol  osvg    -wi-ao  
4,88g 
  optvol   osvg    -wi-ao
<97,66g 
  rootvol  osvg    -wi-ao
<32,23g 
  swapvol  osvg    -wi-ao  
7,81g 
  tmpvol   osvg    -wi-ao 
<9,77g 
  varvol   osvg    -wi-ao  <9,77g  

Patrick

Le 19/08/2020 à 18:18, Patrick Bégou a écrit :
> Hi Gordon,
>
> my dracut package is the latest available for Centos7 (this occur just
> after my "yum update" and reboot). It is dracut-033-568.el7.x86_64 in
> CentOS Linux release 7.8.2003 (Core)
> I'm going to rebuild my initrd as suggested with the snapshot setup.
>
> Thanks for the links.
>
> Patrick
>
> Le 19/08/2020 à 17:31, Gordon Messmer a écrit :
>> On 8/19/20 1:02 AM, Patrick Bégou wrote:
>>> However, if this snapshot exists, reboot of the server
>>> freeze at boot time and I must manually remove this snapshot. Why ?
>>
>> It's a bug.  Update dracut.
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1287940
>> https://bugzilla.redhat.com/show_bug.cgi?id=1546577
>>
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> https://lists.centos.org/mailman/listinfo/centos
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Boot fails with lvm snapshot

[Patrick Bégou]

Hi Gordon,

my dracut package is the latest available for Centos7 (this occur just
after my "yum update" and reboot). It is dracut-033-568.el7.x86_64 in
CentOS Linux release 7.8.2003 (Core)
I'm going to rebuild my initrd as suggested with the snapshot setup.

Thanks for the links.

Patrick

Le 19/08/2020 à 17:31, Gordon Messmer a écrit :
> On 8/19/20 1:02 AM, Patrick Bégou wrote:
>> However, if this snapshot exists, reboot of the server
>> freeze at boot time and I must manually remove this snapshot. Why ?
>
>
> It's a bug.  Update dracut.
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1287940
> https://bugzilla.redhat.com/show_bug.cgi?id=1546577
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Boot fails with lvm snapshot

[Patrick Bégou]

Hi,

I have a strange problem with my centos7 file server. I have a large
data storage (75TB in RAID6, managed by lvm) and each night I create a
snapshot  (removing first the previous one). The snapshot is mounted
read-only so if a user remove a file accidentally he can restore it in
the same day. However, if this snapshot exists, reboot of the server
freeze at boot time and I must manually remove this snapshot. Why ?
There are no entry in /etc/fstab for this snapshot, it is a cron script 
that manage this snapshot and mount it.

Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Boot failed on latest CentOS 7 update

[Patrick Bégou]

Le 02/08/2020 à 09:47, Alessandro Baggi a écrit :
>
> Il 02/08/20 00:42, Mike McCarthy, W1NR ha scritto:
>> It appears that it is affecting multiple distributions including Debian
>> and Ubuntu so it looks like the grub2 team messed up. See
>>
>> https://www.zdnet.com/article/boothole-fixes-causing-boot-problems-across-multiple-linux-distros/
>>
>>
>> Mike
>>
>> On 8/1/2020 6:11 PM, Marc Balmer via CentOS wrote:
>>>
>>>> Am 01.08.2020 um 23:52 schrieb Leon Fauster via CentOS
>>>> :
>>>>
>>>> Am 01.08.20 um 23:41 schrieb Kay Schenk:
>>>>> Well misery loves company but still...just truly unfathomable!
>>>>> Time for a change.
>>>>
>>>> I can only express my incomprehension for such statements!
>>>>
>>>> Stay and help. Instead running away or should I say out of the
>>>> frying pan and into the fire? :-)
>>> The thing, RHEL and CentOS not properly testing updates, cost me at
>>> minimum 3-4 full working days, plus losses at customer sites.
>>>
>>> This is really a huge failure of RHEL and CentOS.
>>>
>>> A lot of trust has been destroyed.
>
> Hi Mike,
>
> I'm not interested that the issue is present on Debian, Ubuntu and the
> others. Currently I'm using CentOS, I'm a CentOS user and currently
> I'm interested what is happening on CentOS because I have machines
> that runs CentOS. If the "wrong" patch was not pushed as update so
> fast (maybe waiting more time before release with more testing to get
> all cases [yes because when you update grub and depending on the fix
> you can break a system easily]) there would have been no problem, by
> the way I prefer wait some days (consider that I can accept the
> release delay of minor/major release) then break my systems...and
> without messages on ML announces about this type of problem does not
> help. Sorry I can't know what and when a packages is updated, why it
> is updated, what type of problem (CVE) it suffers and do my reasoning
> for an update process. This is a missing for me but I still use centos
> and I should not need a RHEL account to access to get advisories and
> see what applies on CentOS (6,7,8 and Stream).
>
> Many of us, choose CentOS due to its stability and enteprise-ready
> feature (and because is partially/enterely backed by RH). Due to
> actual problem, many server and workstation died and it's normal that
> some user said "A lot of trust has been destroyed." because they
> placed a lot of trust on the pro-redhat support. On the other side,
> all of us can fall in error and this is the case (like me that I
> updated blindy, so its also my fault not only the broken update).
>
> Only one error in many years could not destroy a distro and its
> stability reputation (I think and correct me if I'm wrong) and I hope
> it won't happen again.
>
>
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos

I am an "old unix admin" and I remember that many years ago (let say
1990), on my unix systems, I was creating a backup before each update.
All updates were not successful

Today, we run "yum update" blindly, sometime daily,  as it is "always"
running fine, have rollback commands even on critical servers. But
not sure that "always" exist really.

Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS7 and NFS

[Patrick Bégou]

Hi Orion,

no, I still have this problem. I delay working on it as I the latest
updates have not been installed on the server and on the client. I'll
work again on this problem as soon as possible.

Thanks Charles for your detailed information on how to track this
problem. I'll check all these metrics.

I have several clients for this nfs server and the problem seems only to
occur from the client using nfs 4.1 in CentOS Linux release 7.7.1908 (Core).
The default options used are:
rw,relatime,vers=4.1,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,clientaddr=194.254.xx.xx,local_lock=none,addr=194.254.yy.yy

On olders clients (Red Hat Enterprise Linux Server release 6.7
(Santiago)) default options are:
rw,intr,hard,sloppy,vers=4,addr=194.254.xx.xx,clientaddr=194.254.yy.yy

The server in CentOS7.6.1810

Will see if the latest updates help to solve the problem.

Patrick

Le 03/07/2020 à 00:05, Orion Poplawski a écrit :
> On 6/1/20 3:08 AM, Patrick Bégou wrote:
>> Le 13/05/2020 à 02:13, Orion Poplawski a écrit :
>>> On 5/12/20 2:46 AM, Patrick Bégou wrote:
>>>> Hi,
>>>>
>>>> I need some help with NFSv4 setup/tuning. I have a dedicated nfs
>>>> server
>>>> (2 x E5-2620  8cores/16 threads each, 64GB RAM, 1x10Gb ethernet and
>>>> 16x
>>>> 8TB HDD) used by two servers and a small cluster (400 cores). All the
>>>> servers are running CentOS 7, the cluster is running CentOS6.
>>>>
>>>> Time to time on the server I get:
>>>>
>>>>    kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with
>>>>   incorrect client ID
>>>>
>>>> And the client xxx.xxx.xxx.xxx freeze whith:
>>>>
>>>>    kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>>>   still trying
>>>>    kernel: nfs: server x.legi.grenoble-inp.fr OK
>>>>    kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>>>   still trying
>>>>    kernel: nfs: server x.legi.grenoble-inp.fr OK
>>>>
>>>> There is a discussion on RedHat7 support about this but only open to
>>>> subscribers. Other searches with google do not provide  useful
>>>> information.
>>>
>>> FYI - you can get access to such info with a free RHEL developers
>>> account.
>>>
>>>
>> Thanks for your suggestion. As the problem is back I've subscribed to
>> reach the full content of this discussion.
>>
>> The answer was "do not use antivirus" :-(. I do not use antivirus as I
>> am CentOS only.
>>
>> Patrick
>>
>
> Just curious to see if you have had any luck resolving these issues?
> I'm afraid that NFS on EL 7 has become much less stable for us
> recently as well with lots more client access hangs.
>
> Orion
>

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Google authenticator on C8

[Patrick DERWAEL]

Hi folks

I have installed Google authenticator on a few C8 boxes
This is working fine on all of them except one...

- google-authenticator is installed and the box is added to my Android app
- /etc/pam.d/sshd contains
auth   sufficient   pam_google_authenticator.so
- /etc/ssh/sshd_config  contains ChallengeResponseAuthentication yes
- sshd restarted

When logging in, I'm prompted with the password (i.e. no request OTP
request)

I have already uninstalled/reinstalled/rebooted and compared the config
files across boxes... but I can't see what I have done wrong

Any clue about what I could have missed?

Thanks!

-- 

Patrick Derwael
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS7 and NFS

[Patrick Bégou]

Le 13/05/2020 à 02:13, Orion Poplawski a écrit :
> On 5/12/20 2:46 AM, Patrick Bégou wrote:
>> Hi,
>>
>> I need some help with NFSv4 setup/tuning. I have a dedicated nfs server
>> (2 x E5-2620  8cores/16 threads each, 64GB RAM, 1x10Gb ethernet and 16x
>> 8TB HDD) used by two servers and a small cluster (400 cores). All the
>> servers are running CentOS 7, the cluster is running CentOS6.
>>
>> Time to time on the server I get:
>>
>>   kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with
>>  incorrect client ID
>>
>> And the client xxx.xxx.xxx.xxx freeze whith:
>>
>>   kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>  still trying
>>   kernel: nfs: server x.legi.grenoble-inp.fr OK
>>   kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>  still trying
>>   kernel: nfs: server x.legi.grenoble-inp.fr OK
>>
>> There is a discussion on RedHat7 support about this but only open to
>> subscribers. Other searches with google do not provide  useful
>> information.
>
> FYI - you can get access to such info with a free RHEL developers
> account.
>
>
Thanks for your suggestion. As the problem is back I've subscribed to
reach the full content of this discussion.

The answer was "do not use antivirus" :-(. I do not use antivirus as I
am CentOS only.

Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS7 and NFS

[Patrick Bégou]

Hi Barbara,

Thanks for all these suggestions. Yes, jumbo frames are activated and I
have only two 10Gb ethernet switch between the server and the client,
connected with a monomode fiber.
I saw yesterday that the client showing the problem had not the right
MTU (1500 instead of 9000). I don't know why. I changed the MTU to 9000
yesterday and I'm looking at the logs now to see if the problems occur
again.

I will try to increase the number of nfs daemon in a few day, to check
each setup change one after the other. Because of covid19, I'm working
from home so I should be really careful when changing the setup of the
servers.

On a cluster node I try to set "rsize=1048576,wsize=1048576,vers=4,tcp"
(I cannot have a larger value for rsize/wsize) but comparison with the
mount using default setup do not show significant improvements. I sent
20GB to the server or 2x10GB (2 concurrent processes) with dd to be
larger than the raid controller cache but lower than the  server and
client RAM. It was just a short test this morning.

Patrick

Le 15/05/2020 à 15:32, Barbara Krašovec a écrit :
> The number of threads has nothing to do with the number of cores on the 
> machine. It depends on the I/O, network speed, type of workload etc.
> We usually start with 32 threads and increase if necessary. 
>
> You can check the statistics with:
> watch 'cat /proc/net/rpc/nfsd | grep th’
>
> Or you can check on the client
> bide5.bin 
> nfsstat -rc
> Client rpc stats:
> calls  retransauthrefrsh
> 1326777974   0  1326645701
>
> If you see a large number of retransmissions, you should increase the number 
> of threads.
>
> However, your problem could also be related to the filesystem or network.
>
> Do you have jumbo frames (if yes, you should have them on clients and 
> server)? You might think about disabling flow control on the switch and on 
> the network card. Are there a lot of dropped packets?
>
> For network tuning, check http://fasterdata.es.net/host-tuning/linux/
>
> Did you try to enable readahead (blockdev —setra) on the filesystem?
>
> On the client side, changing the mount options helps. The default read/write 
> block size is quite little, increase it (rsize, wsize), and use noatime.
>
>
> Cheers,
> Barbara
>
>
>
>
>
>> On 15 May 2020, at 09:26, Patrick Bégou  
>> wrote:
>>
>> Le 13/05/2020 à 15:36, Patrick Bégou a écrit :
>>> Le 13/05/2020 à 07:32, Simon Matter via CentOS a écrit :
>>>>> Le 12/05/2020 à 16:10, James Pearson a écrit :
>>>>>> Patrick Bégou wrote:
>>>>>>> Hi,
>>>>>>>
>>>>>>> I need some help with NFSv4 setup/tuning. I have a dedicated nfs server
>>>>>>> (2 x E5-2620  8cores/16 threads each, 64GB RAM, 1x10Gb ethernet and 16x
>>>>>>> 8TB HDD) used by two servers and a small cluster (400 cores). All the
>>>>>>> servers are running CentOS 7, the cluster is running CentOS6.
>>>>>>>
>>>>>>> Time to time on the server I get:
>>>>>>>
>>>>>>>   kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with
>>>>>>>  incorrect client ID
>>>>>>>
>>>>>>> And the client xxx.xxx.xxx.xxx freeze whith:
>>>>>>>
>>>>>>>   kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>>>>>>  still trying
>>>>>>>   kernel: nfs: server x.legi.grenoble-inp.fr OK
>>>>>>>   kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>>>>>>  still trying
>>>>>>>   kernel: nfs: server x.legi.grenoble-inp.fr OK
>>>>>>>
>>>>>>> There is a discussion on RedHat7 support about this but only open to
>>>>>>> subscribers. Other searches with google do not provide  useful
>>>>>>> information.
>>>>>>>
>>>>>>> Do you have an idea how to solve these freeze states ?
>>>>>>>
>>>>>>> More generally I would be really interested with some advice/tutorials
>>>>>>> to improve NFS performances in this dedicated context. There are so
>>>>>>> many
>>>>>>> [different] things about tuning NFS available on the web that I'm a
>>>>>>> little bit lost (the opposite of the previous question). So if some one
>>>>>>> has "the tutorial"...;-)
>>>>>> How many nfsd threads are you run

Re: [CentOS] CentOS7 and NFS

[Patrick Bégou]

Le 13/05/2020 à 15:36, Patrick Bégou a écrit :
> Le 13/05/2020 à 07:32, Simon Matter via CentOS a écrit :
>>> Le 12/05/2020 à 16:10, James Pearson a écrit :
>>>> Patrick Bégou wrote:
>>>>> Hi,
>>>>>
>>>>> I need some help with NFSv4 setup/tuning. I have a dedicated nfs server
>>>>> (2 x E5-2620  8cores/16 threads each, 64GB RAM, 1x10Gb ethernet and 16x
>>>>> 8TB HDD) used by two servers and a small cluster (400 cores). All the
>>>>> servers are running CentOS 7, the cluster is running CentOS6.
>>>>>
>>>>> Time to time on the server I get:
>>>>>
>>>>>   kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with
>>>>>  incorrect client ID
>>>>>
>>>>> And the client xxx.xxx.xxx.xxx freeze whith:
>>>>>
>>>>>   kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>>>>  still trying
>>>>>   kernel: nfs: server x.legi.grenoble-inp.fr OK
>>>>>   kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>>>>  still trying
>>>>>   kernel: nfs: server x.legi.grenoble-inp.fr OK
>>>>>
>>>>> There is a discussion on RedHat7 support about this but only open to
>>>>> subscribers. Other searches with google do not provide  useful
>>>>> information.
>>>>>
>>>>> Do you have an idea how to solve these freeze states ?
>>>>>
>>>>> More generally I would be really interested with some advice/tutorials
>>>>> to improve NFS performances in this dedicated context. There are so
>>>>> many
>>>>> [different] things about tuning NFS available on the web that I'm a
>>>>> little bit lost (the opposite of the previous question). So if some one
>>>>> has "the tutorial"...;-)
>>>> How many nfsd threads are you running on the server? - current count
>>>> will be in /proc/fs/nfsd/threads
>>>>
>>>> James Pearson
>>> Hi James,
>>>
>>> Thanks for your answer. I've configured 24 threads (for 16 hardware
>>> cores/ 32Threads on the NFS server with this processors)
>>>
>>> But it seams that there are buffer setup to modify too when increasing
>>> the threads number... It is not done.
>>>
>>> Load average on the server is below 1
>> I'd be very careful with higher thread numbers than physical cores. NFS
>> threads and so called CPU hyper/simultaneous threads are quite different
>> things and it can hurt performance if not configured correctly.
>>
> So you suggest to limit the setup to 16 daemons ? I'll try this evening.
>
Setting 16 daemons (the number of physical cores) do not solve this
problem. Moreover I saw a document (but old) provided by DELL to
optimize NFS servers performances in HPC context and they suggest to
use... 128 daemons on a dedicated poweredge server. :-\

I saw that it is always the same client showing the problem (a large fat
node), may be I must investigate on the client side more than on the
serveur side.

Patrick



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS7 and NFS

[Patrick Bégou]

Le 13/05/2020 à 07:32, Simon Matter via CentOS a écrit :
>> Le 12/05/2020 à 16:10, James Pearson a écrit :
>>> Patrick Bégou wrote:
>>>> Hi,
>>>>
>>>> I need some help with NFSv4 setup/tuning. I have a dedicated nfs server
>>>> (2 x E5-2620  8cores/16 threads each, 64GB RAM, 1x10Gb ethernet and 16x
>>>> 8TB HDD) used by two servers and a small cluster (400 cores). All the
>>>> servers are running CentOS 7, the cluster is running CentOS6.
>>>>
>>>> Time to time on the server I get:
>>>>
>>>>   kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with
>>>>  incorrect client ID
>>>>
>>>> And the client xxx.xxx.xxx.xxx freeze whith:
>>>>
>>>>   kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>>>  still trying
>>>>   kernel: nfs: server x.legi.grenoble-inp.fr OK
>>>>   kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>>>  still trying
>>>>   kernel: nfs: server x.legi.grenoble-inp.fr OK
>>>>
>>>> There is a discussion on RedHat7 support about this but only open to
>>>> subscribers. Other searches with google do not provide  useful
>>>> information.
>>>>
>>>> Do you have an idea how to solve these freeze states ?
>>>>
>>>> More generally I would be really interested with some advice/tutorials
>>>> to improve NFS performances in this dedicated context. There are so
>>>> many
>>>> [different] things about tuning NFS available on the web that I'm a
>>>> little bit lost (the opposite of the previous question). So if some one
>>>> has "the tutorial"...;-)
>>> How many nfsd threads are you running on the server? - current count
>>> will be in /proc/fs/nfsd/threads
>>>
>>> James Pearson
>> Hi James,
>>
>> Thanks for your answer. I've configured 24 threads (for 16 hardware
>> cores/ 32Threads on the NFS server with this processors)
>>
>> But it seams that there are buffer setup to modify too when increasing
>> the threads number... It is not done.
>>
>> Load average on the server is below 1
> I'd be very careful with higher thread numbers than physical cores. NFS
> threads and so called CPU hyper/simultaneous threads are quite different
> things and it can hurt performance if not configured correctly.
>
So you suggest to limit the setup to 16 daemons ? I'll try this evening.

Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS7 and NFS

[Patrick Bégou]

Le 12/05/2020 à 16:10, James Pearson a écrit :
> Patrick Bégou wrote:
>>
>> Hi,
>>
>> I need some help with NFSv4 setup/tuning. I have a dedicated nfs server
>> (2 x E5-2620  8cores/16 threads each, 64GB RAM, 1x10Gb ethernet and 16x
>> 8TB HDD) used by two servers and a small cluster (400 cores). All the
>> servers are running CentOS 7, the cluster is running CentOS6.
>>
>> Time to time on the server I get:
>>
>>   kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with
>>  incorrect client ID
>>
>> And the client xxx.xxx.xxx.xxx freeze whith:
>>
>>   kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>  still trying
>>   kernel: nfs: server x.legi.grenoble-inp.fr OK
>>   kernel: nfs: server x.legi.grenoble-inp.fr not responding,
>>  still trying
>>   kernel: nfs: server x.legi.grenoble-inp.fr OK
>>
>> There is a discussion on RedHat7 support about this but only open to
>> subscribers. Other searches with google do not provide  useful
>> information.
>>
>> Do you have an idea how to solve these freeze states ?
>>
>> More generally I would be really interested with some advice/tutorials
>> to improve NFS performances in this dedicated context. There are so many
>> [different] things about tuning NFS available on the web that I'm a
>> little bit lost (the opposite of the previous question). So if some one
>> has "the tutorial"...;-)
>
> How many nfsd threads are you running on the server? - current count
> will be in /proc/fs/nfsd/threads
>
> James Pearson

Hi James,

Thanks for your answer. I've configured 24 threads (for 16 hardware
cores/ 32Threads on the NFS server with this processors)

But it seams that there are buffer setup to modify too when increasing
the threads number... It is not done.

Load average on the server is below 1

Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS7 and NFS

[Patrick Bégou]

Hi,

I need some help with NFSv4 setup/tuning. I have a dedicated nfs server
(2 x E5-2620  8cores/16 threads each, 64GB RAM, 1x10Gb ethernet and 16x
8TB HDD) used by two servers and a small cluster (400 cores). All the
servers are running CentOS 7, the cluster is running CentOS6.

Time to time on the server I get:

 kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with
incorrect client ID

And the client xxx.xxx.xxx.xxx freeze whith:

 kernel: nfs: server x.legi.grenoble-inp.fr not responding,
still trying
 kernel: nfs: server x.legi.grenoble-inp.fr OK
 kernel: nfs: server x.legi.grenoble-inp.fr not responding,
still trying
 kernel: nfs: server x.legi.grenoble-inp.fr OK

There is a discussion on RedHat7 support about this but only open to
subscribers. Other searches with google do not provide  useful information.

Do you have an idea how to solve these freeze states ?

More generally I would be really interested with some advice/tutorials
to improve NFS performances in this dedicated context. There are so many
[different] things about tuning NFS available on the web that I'm a
little bit lost (the opposite of the previous question). So if some one
has "the tutorial"...;-)


Thanks

Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Zoom?

[Patrick Bégou]

Hi,

There were some "security issues" as detailed by our DSI. Personal data
going to FB servers and some data going to other server located in china
Not sure  all has been disabled, almost for subscribed licenses. We are
seriously discouraged to use it now (it was a suggested tool some weeks
ago by the DSI)
Just be careful with this tool, even if its deployment is easy if it
works very fine.

Patrick

Le 10/04/2020 à 12:16, Gary Stainburn a écrit :
> For those of you who are not aware, Zoom have issued an update to their app 
> on all platforms.
>
> I believe this is to fix a number of security issues so I strongly suggest 
> everyone to upgrade.  Older versions had a number of flaws in that area.
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Zoom?

[Patrick Bégou]

Le 06/04/2020 à 00:34, mark a écrit :
> Hi, folks,
>
>    After I did a complete reinstall of current 7, with KDE instead of
> minimal, I'm mostly ok... except for Zoom. Has anyone gotten sound
> working with firefox? I get video, but it keeps claiming that my
> browser (the default firefox) can't access the system sound.
>
>    Given that even as I type this, I'm streaming WUMB through its
> player I have noScript, but I enabled everything (except
> google-analytics), and no joy. I'd *really* rather use my browser than
> trust their app
>
> mark
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos


I was not able to use it with firefox in CentOS7. The client is working
fine. I've downloaded the tar.gz (other linux) and installed it as a
simple user, in the home directory, not used the rpm based install.


Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mounting CIFS shares on C8

[Patrick DERWAEL]

Ok guys, issue solved.
This was a RTFM issue 

I have scratched my VM and restarted the installation. When I came to the
fstab update, I noticed a mistake in the NAS IP... so obviously, cifs could
not find my shares...
I'm pretty sure this is the result of my frustrated house elf which has
deliberately changed the IP in my instructions...

Anyway, thanks a lot for your support. This was greatly appreciated! (and
beware the angry house elves)

Le sam. 4 avr. 2020 à 11:17, Simon Matter  a écrit :

> Then, what I'd try is
>
> 1) With an other directory like /mnt/xxx just to make sure it's not
> something with /home that it doesn't like.
>
> 2) See what it's doing by running it with strace -f mount.
>
> Regards,
> Simon
>
> > Exactly the same... 😤😤😤
> >
> >
> > [root@plexvm ~]# mount -t cifs //192.168.1.200/mp3 /home/plex/Musique
> > --verbose -o username=plex,password=plex,domain=DERWAEL,ro,auto,vers=3.0
> > mount.cifs kernel mount options:
> >
> ip=192.168.1.200,unc=\\192.168.1.200\mp3,vers=3.0,user=plex,domain=DERWAEL,pass=
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > [root@plexvm ~]#
> >
> > Le ven. 3 avr. 2020 à 19:15, Simon Matter via CentOS 
> a
> > écrit :
> >
> >> > That was my initial setup before trying the abbreviations, but anyway:
> >> >
> >> > [root@plexvm ~]# nano /etc/fstab
> >> > [root@plexvm ~]# cat /etc/fstab
> >> >
> >> > #
> >> > # /etc/fstab
> >> > # Created by anaconda on Fri Apr  3 14:02:23 2020
> >> > #
> >> > # Accessible filesystems, by reference, are maintained under
> >> '/dev/disk/'.
> >> > # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more
> >> > info.
> >> > #
> >> > # After editing this file, run 'systemctl daemon-reload' to update
> >> systemd
> >> > # units generated from this file.
> >> > #
> >> > /dev/mapper/cl_plexvm-root /   xfs defaults
> >> >  0 0
> >> > UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot   ext4
> >> >  defaults1 2
> >> > /dev/mapper/cl_plexvm-swap swapswapdefaults
> >> >  0 0
> >> > //192.168.1.200/mp3 /home/plex/Musique  cifs
> >> >  username=plex,password=plex,domain=DERWAEL,ro,auto,vers=3.0
> >> > #//192.168.1.200/videos /home/plex/Vidéos   cifs
> >> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> >> > #//192.168.1.200/series /home/plex/Séries   cifs
> >> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> >> > [root@plexvm ~]# systemctl daemon-reload
> >> > [root@plexvm ~]# mount -a
> >> > mount error(2): No such file or directory
> >> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> >> > [root@plexvm ~]#
> >> >
> >>
> >> What happens when you run
> >>
> >> mount -t cifs //192.168.1.200/mp3 /home/plex/Musique --verbose \
> >>   -o username=plex,password=plex,domain=DERWAEL,ro,auto,vers=3.0
> >>
> >> Regards,
> >> Simon
> >>
> >> ___
> >> CentOS mailing list
> >> CentOS@centos.org
> >> https://lists.centos.org/mailman/listinfo/centos
> >>
> >
> >
> > --
> >
> > Patrick Derwael
> > Rue de la fontaine, 3
> > 4210 Burdinne
> > Tél:+32.(0)479.80.50.79
> >
>
>
>

-- 

Patrick Derwael
Rue de la fontaine, 3
4210 Burdinne
Tél:+32.(0)479.80.50.79
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mounting CIFS shares on C8

[Patrick DERWAEL]

Hi Matt,

Yes all the directories do exist, are empty and (as far as I know) have the
proper permissions

[root@plexvm ~]# ls -l /home/plex
total 0
drwxrwx--- 2 plex plex 6 Apr  3 15:41 Music
drwxrwx--- 2 plex plex 6 Apr  3 15:41 Musique
drwxrwx--- 2 plex plex 6 Apr  3 15:41 Séries
drwxrwx--- 2 plex plex 6 Apr  3 15:41 Vidéos
[root@plexvm ~]# find /home/plex -ls
 68073798  0 drwxrwx---   6  plex plex   64 Apr  3 15:41
/home/plex
 33674251  0 drwxrwx---   2  plex plex6 Apr  3 15:41
/home/plex/Musique
 68166320  0 drwxrwx---   2  plex plex6 Apr  3 15:41
/home/plex/Vid\303\251os
101999836  0 drwxrwx---   2  plex plex6 Apr  3 15:41
/home/plex/S\303\251ries
   992376  0 drwxrwx---   2  plex plex6 Apr  3 15:41
/home/plex/Music
[root@plexvm ~]#

Le ven. 3 avr. 2020 à 23:26, Phelps, Matthew  a
écrit :

> On Fri, Apr 3, 2020 at 4:09 PM Patrick DERWAEL  wrote:
>
> > Exactly the same... 😤😤😤
> >
> >
> > [root@plexvm ~]# mount -t cifs //192.168.1.200/mp3 /home/plex/Musique
> > --verbose -o username=plex,password=plex,domain=DERWAEL,ro,auto,vers=3.0
> > mount.cifs kernel mount options:
> >
> >
> ip=192.168.1.200,unc=\\192.168.1.200\mp3,vers=3.0,user=plex,domain=DERWAEL,pass=
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > [root@plexvm ~]#
> >
>
> Just checking... do the target directories exist? I.e. "/home/plex/Musique"
> ?
>
>
>
> > Le ven. 3 avr. 2020 à 19:15, Simon Matter via CentOS 
> a
> > écrit :
> >
> > > > That was my initial setup before trying the abbreviations, but
> anyway:
> > > >
> > > > [root@plexvm ~]# nano /etc/fstab
> > > > [root@plexvm ~]# cat /etc/fstab
> > > >
> > > > #
> > > > # /etc/fstab
> > > > # Created by anaconda on Fri Apr  3 14:02:23 2020
> > > > #
> > > > # Accessible filesystems, by reference, are maintained under
> > > '/dev/disk/'.
> > > > # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for
> more
> > > > info.
> > > > #
> > > > # After editing this file, run 'systemctl daemon-reload' to update
> > > systemd
> > > > # units generated from this file.
> > > > #
> > > > /dev/mapper/cl_plexvm-root /   xfs defaults
> > > >  0 0
> > > > UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot
>  ext4
> > > >  defaults1 2
> > > > /dev/mapper/cl_plexvm-swap swapswapdefaults
> > > >  0 0
> > > > //192.168.1.200/mp3 /home/plex/Musique  cifs
> > > >  username=plex,password=plex,domain=DERWAEL,ro,auto,vers=3.0
> > > > #//192.168.1.200/videos /home/plex/Vidéos   cifs
> > > >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > > > #//192.168.1.200/series /home/plex/Séries   cifs
> > > >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > > > [root@plexvm ~]# systemctl daemon-reload
> > > > [root@plexvm ~]# mount -a
> > > > mount error(2): No such file or directory
> > > > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > > > [root@plexvm ~]#
> > > >
> > >
> > > What happens when you run
> > >
> > > mount -t cifs //192.168.1.200/mp3 /home/plex/Musique --verbose \
> > >   -o username=plex,password=plex,domain=DERWAEL,ro,auto,vers=3.0
> > >
> > > Regards,
> > > Simon
> > >
> > > ___
> > > CentOS mailing list
> > > CentOS@centos.org
> > > https://lists.centos.org/mailman/listinfo/centos
> > >
> >
> >
> > --
> >
> > Patrick Derwael
> > Rue de la fontaine, 3
> > 4210 Burdinne
> > Tél:+32.(0)479.80.50.79
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > https://lists.centos.org/mailman/listinfo/centos
> >
>
>
> --
>
> *Matt Phelps*
>
> *Information Technology Specialist, Systems Administrator*
>
> (Computation Facility, Smithsonian Astrophysical Observatory)
>
> Center for Astrophysics | Harvard & Smithsonian
>
>
> 60 Garden Street | MS 39 | Cambridge, MA 02138
> email: mphe...@cfa.harvard.edu
>
>
> cfa.harvard.edu | Facebook <http://cfa.harvard.edu/facebook> | Twitter
> <http://cfa.harvard.edu/twitter> | YouTube <http://cfa.harvard.edu/youtube
> >
> | Newsletter <http://cfa.harvard.edu/newsletter>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


-- 

Patrick Derwael
Rue de la fontaine, 3
4210 Burdinne
Tél:+32.(0)479.80.50.79
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mounting CIFS shares on C8

[Patrick DERWAEL]

Exactly the same... 😤😤😤


[root@plexvm ~]# mount -t cifs //192.168.1.200/mp3 /home/plex/Musique
--verbose -o username=plex,password=plex,domain=DERWAEL,ro,auto,vers=3.0
mount.cifs kernel mount options:
ip=192.168.1.200,unc=\\192.168.1.200\mp3,vers=3.0,user=plex,domain=DERWAEL,pass=
mount error(2): No such file or directory
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
[root@plexvm ~]#

Le ven. 3 avr. 2020 à 19:15, Simon Matter via CentOS  a
écrit :

> > That was my initial setup before trying the abbreviations, but anyway:
> >
> > [root@plexvm ~]# nano /etc/fstab
> > [root@plexvm ~]# cat /etc/fstab
> >
> > #
> > # /etc/fstab
> > # Created by anaconda on Fri Apr  3 14:02:23 2020
> > #
> > # Accessible filesystems, by reference, are maintained under
> '/dev/disk/'.
> > # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more
> > info.
> > #
> > # After editing this file, run 'systemctl daemon-reload' to update
> systemd
> > # units generated from this file.
> > #
> > /dev/mapper/cl_plexvm-root /   xfs defaults
> >  0 0
> > UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot   ext4
> >  defaults1 2
> > /dev/mapper/cl_plexvm-swap swapswapdefaults
> >  0 0
> > //192.168.1.200/mp3 /home/plex/Musique  cifs
> >  username=plex,password=plex,domain=DERWAEL,ro,auto,vers=3.0
> > #//192.168.1.200/videos /home/plex/Vidéos   cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > #//192.168.1.200/series /home/plex/Séries   cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > [root@plexvm ~]# systemctl daemon-reload
> > [root@plexvm ~]# mount -a
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > [root@plexvm ~]#
> >
>
> What happens when you run
>
> mount -t cifs //192.168.1.200/mp3 /home/plex/Musique --verbose \
>   -o username=plex,password=plex,domain=DERWAEL,ro,auto,vers=3.0
>
> Regards,
> Simon
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


-- 

Patrick Derwael
Rue de la fontaine, 3
4210 Burdinne
Tél:+32.(0)479.80.50.79
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mounting CIFS shares on C8

[Patrick DERWAEL]

That was my initial setup before trying the abbreviations, but anyway:

[root@plexvm ~]# nano /etc/fstab
[root@plexvm ~]# cat /etc/fstab

#
# /etc/fstab
# Created by anaconda on Fri Apr  3 14:02:23 2020
#
# Accessible filesystems, by reference, are maintained under '/dev/disk/'.
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info.
#
# After editing this file, run 'systemctl daemon-reload' to update systemd
# units generated from this file.
#
/dev/mapper/cl_plexvm-root /   xfs defaults
 0 0
UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot   ext4
 defaults1 2
/dev/mapper/cl_plexvm-swap swapswapdefaults
 0 0
//192.168.1.200/mp3 /home/plex/Musique  cifs
 username=plex,password=plex,domain=DERWAEL,ro,auto,vers=3.0
#//192.168.1.200/videos /home/plex/Vidéos   cifs
 user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
#//192.168.1.200/series /home/plex/Séries   cifs
 user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
[root@plexvm ~]# systemctl daemon-reload
[root@plexvm ~]# mount -a
mount error(2): No such file or directory
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
[root@plexvm ~]#

Le ven. 3 avr. 2020 à 18:55, Chris Schanzle  a
écrit :

> On 4/3/20 12:48 PM, Patrick DERWAEL wrote:
> > User & pass are present
> > According to the man pages, workgroup is supported
> > I have changed it to domain, but that didn't change a thing
> >
> > [root@plexvm ~]# cat /etc/fstab
> >
> > #
> > # /etc/fstab
> > # Created by anaconda on Fri Apr  3 14:02:23 2020
> > #
> > # Accessible filesystems, by reference, are maintained under
> '/dev/disk/'.
> > # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more
> info.
> > #
> > # After editing this file, run 'systemctl daemon-reload' to update
> systemd
> > # units generated from this file.
> > #
> > /dev/mapper/cl_plexvm-root /   xfs defaults
> >   0 0
> > UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot   ext4
> >   defaults1 2
> > /dev/mapper/cl_plexvm-swap swapswapdefaults
> >   0 0
> > //192.168.1.200/mp3 /home/plex/Musique  cifs
> >   user=plex,pass=plex,domain=DERWAEL,ro,auto,vers=3.0
> > #//192.168.1.200/videos /home/plex/Vidéos   cifs
> >   user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > #//192.168.1.200/series /home/plex/Séries   cifs
> >   user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > [root@plexvm ~]# systemctl daemon-reload
> > [root@plexvm ~]# mount -a
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > [root@plexvm ~]#
> >
> > Le ven. 3 avr. 2020 à 18:23, Leon Fauster via CentOS 
> a
> > écrit :
> >
> >> Am 03.04.20 um 18:01 schrieb Patrick DERWAEL:
> >>> Le ven. 3 avr. 2020 à 17:54, Jonathan Billings  a
> >>> écrit :
> >>>
> >>>> On Fri, Apr 03, 2020 at 04:00:42PM +0200, Patrick DERWAEL wrote:
> >>>>> //192.168.1.200/mp3 /home/plex/Musique  cifs
> >>>>>user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> >>>>> //192.168.1.200/videos  /home/plex/Vidéos   cifs
> >>>>>user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> >>>>> //192.168.1.200/series  /home/plex/Séries   cifs
> >>>>>user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> >>>> Try removing non-ascii characters from your mountpoints and try again.
> >>>>
> >>>> --
> >>>> Jonathan Billings 
> >>>> ___
> >>>> CentOS mailing list
> >>>> CentOS@centos.org
> >>>>
> https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.centos.org%2Fmailman%2Flistinfo%2Fcentos&data=02%7C01%7Cchristopher.schanzle%40nist.gov%7C50e5520598c94cdebfc708d7d7eefb64%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C0%7C637215293735011190&sdata=jVoqTxBRGNNfP7%2BWZCRP%2Fbb5vQ9RdErHznttq5wkWH8%3D&reserved=0
> >>>>
> >>> I have commented out the 2 mounts with non-ascii... that didn't help...
> >>>
> >>>
> >>> [root@plexvm ~]# cat /etc/fstab
> >>>
> >>> #
> >>> # /etc/fstab
> >>> # Created by anaconda on Fri Apr  3 14:02:23 2020
> >>> #
> >>> # Accessible filesystems, by reference, are maintained under
> >> '

Re: [CentOS] Mounting CIFS shares on C8

[Patrick DERWAEL]

User & pass are present
According to the man pages, workgroup is supported
I have changed it to domain, but that didn't change a thing

[root@plexvm ~]# cat /etc/fstab

#
# /etc/fstab
# Created by anaconda on Fri Apr  3 14:02:23 2020
#
# Accessible filesystems, by reference, are maintained under '/dev/disk/'.
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info.
#
# After editing this file, run 'systemctl daemon-reload' to update systemd
# units generated from this file.
#
/dev/mapper/cl_plexvm-root /   xfs defaults
 0 0
UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot   ext4
 defaults1 2
/dev/mapper/cl_plexvm-swap swapswapdefaults
 0 0
//192.168.1.200/mp3 /home/plex/Musique  cifs
 user=plex,pass=plex,domain=DERWAEL,ro,auto,vers=3.0
#//192.168.1.200/videos /home/plex/Vidéos   cifs
 user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
#//192.168.1.200/series /home/plex/Séries   cifs
 user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
[root@plexvm ~]# systemctl daemon-reload
[root@plexvm ~]# mount -a
mount error(2): No such file or directory
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
[root@plexvm ~]#

Le ven. 3 avr. 2020 à 18:23, Leon Fauster via CentOS  a
écrit :

> Am 03.04.20 um 18:01 schrieb Patrick DERWAEL:
> > Le ven. 3 avr. 2020 à 17:54, Jonathan Billings  a
> > écrit :
> >
> >> On Fri, Apr 03, 2020 at 04:00:42PM +0200, Patrick DERWAEL wrote:
> >>> //192.168.1.200/mp3 /home/plex/Musique  cifs
> >>>   user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> >>> //192.168.1.200/videos  /home/plex/Vidéos   cifs
> >>>   user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> >>> //192.168.1.200/series  /home/plex/Séries   cifs
> >>>   user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> >>
> >> Try removing non-ascii characters from your mountpoints and try again.
> >>
> >> --
> >> Jonathan Billings 
> >> ___
> >> CentOS mailing list
> >> CentOS@centos.org
> >> https://lists.centos.org/mailman/listinfo/centos
> >>
> >
> > I have commented out the 2 mounts with non-ascii... that didn't help...
> >
> >
> > [root@plexvm ~]# cat /etc/fstab
> >
> > #
> > # /etc/fstab
> > # Created by anaconda on Fri Apr  3 14:02:23 2020
> > #
> > # Accessible filesystems, by reference, are maintained under
> '/dev/disk/'.
> > # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more
> info.
> > #
> > # After editing this file, run 'systemctl daemon-reload' to update
> systemd
> > # units generated from this file.
> > #
> > /dev/mapper/cl_plexvm-root /   xfs defaults
> >   0 0
> > UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot   ext4
> >   defaults1 2
> > /dev/mapper/cl_plexvm-swap swapswapdefaults
> >   0 0
> > //192.168.1.200/mp3 /home/plex/Musique  cifs
> >   user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > #//192.168.1.200/videos /home/plex/Vidéos   cifs
> >   user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > #//192.168.1.200/series /home/plex/Séries   cifs
> >   user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > [root@plexvm ~]# mount -a
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > [root@plexvm ~]#
> >
> >
>
>   username=value
>   password=value
>   domain=value
>
> ?
>
> --
> Leon
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


-- 

Patrick Derwael
Rue de la fontaine, 3
4210 Burdinne
Tél:+32.(0)479.80.50.79
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mounting CIFS shares on C8

[Patrick DERWAEL]

Done that and rebooted as well


Patrick Derwael
Rue de la Fontaine 3
4210 Burdinne
+32.(0)479.80.50.79

Le ven. 3 avr. 2020 à 18:11, Frank Cox  a écrit :

> On Fri, 3 Apr 2020 18:01:27 +0200
> Patrick DERWAEL wrote:
>
> > #
> > # After editing this file, run 'systemctl daemon-reload' to update
> systemd
> > # units generated from this file.
>
> I assume that you have done this part too?
>
> --
> MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mounting CIFS shares on C8

[Patrick DERWAEL]

Le ven. 3 avr. 2020 à 17:54, Jonathan Billings  a
écrit :

> On Fri, Apr 03, 2020 at 04:00:42PM +0200, Patrick DERWAEL wrote:
> > //192.168.1.200/mp3 /home/plex/Musique  cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > //192.168.1.200/videos  /home/plex/Vidéos   cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > //192.168.1.200/series  /home/plex/Séries   cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
>
> Try removing non-ascii characters from your mountpoints and try again.
>
> --
> Jonathan Billings 
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

I have commented out the 2 mounts with non-ascii... that didn't help...


[root@plexvm ~]# cat /etc/fstab

#
# /etc/fstab
# Created by anaconda on Fri Apr  3 14:02:23 2020
#
# Accessible filesystems, by reference, are maintained under '/dev/disk/'.
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info.
#
# After editing this file, run 'systemctl daemon-reload' to update systemd
# units generated from this file.
#
/dev/mapper/cl_plexvm-root /   xfs defaults
 0 0
UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot   ext4
 defaults1 2
/dev/mapper/cl_plexvm-swap swapswapdefaults
 0 0
//192.168.1.200/mp3 /home/plex/Musique  cifs
 user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
#//192.168.1.200/videos /home/plex/Vidéos   cifs
 user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
#//192.168.1.200/series /home/plex/Séries   cifs
 user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
[root@plexvm ~]# mount -a
mount error(2): No such file or directory
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
[root@plexvm ~]#


-- 

Patrick Derwael
Rue de la fontaine, 3
4210 Burdinne
Tél:+32.(0)479.80.50.79
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mounting CIFS shares on C8

[Patrick DERWAEL]

Le ven. 3 avr. 2020 à 17:02, Simon Matter via CentOS  a
écrit :

> > Hi all,
> >
> > I'm tearing my hair off trying to understand the difference between C7 &
> > C8
> > for mounting a cifs FS with fstab
> >
> > I'm building a Plex media server on C8 and duplicated the fstab entries
> > over from my current C7 installation
> > My data (music & movies) are on CIFS shares on a Synology NAS.
> > The packages cifs-utils samba-client samba-common are installed, up to
> > date
> > etc...
> >
> > These are my current fstab entries on the C7 box
> >
> > //192.168.1.200/mp3 /home/plex/Musique cifs
> > user=plex,pass=plex,ro,auto,vers=3.0
> > //192.168.1.200/videos /home/plex/Vidéos cifs
> > user=plex,pass=plex,ro,auto,vers=3.0
> >
> >
> > On my C8:
> >
> > [root@plexvm etc]# cat fstab
> >
> > #
> > # /etc/fstab
> > # Created by anaconda on Fri Apr  3 14:02:23 2020
> > #
> > # Accessible filesystems, by reference, are maintained under
> '/dev/disk/'.
> > # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more
> > info.
> > #
> > # After editing this file, run 'systemctl daemon-reload' to update
> systemd
> > # units generated from this file.
> > #
> > /dev/mapper/cl_plexvm-root /   xfs defaults
> >  0 0
> > UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot   ext4
> >  defaults1 2
> > /dev/mapper/cl_plexvm-swap swapswapdefaults
> >  0 0
> > //192.168.1.200/mp3 /home/plex/Musique  cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > //192.168.1.200/videos  /home/plex/Vidéos   cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > //192.168.1.200/series  /home/plex/Séries   cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > [root@plexvm etc]# mount -a
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > [root@plexvm etc]#
> >
> >
> >
> > Any pointer would be MUCH appreciated!
>
> Do the directories /home/plex/Musique, /home/plex/Vidéos and
> /home/plex/Séries really exist on the C8 host?
>
> Regards,
> Simon
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

Yes, they do exist and the directories are empty

[root@plexvm ~]# l /home/plex
total 0
drwxrwx--- 2 plex plex 6 Apr  3 15:41 Music
drwxrwx--- 2 plex plex 6 Apr  3 15:41 Musique
drwxrwx--- 2 plex plex 6 Apr  3 15:41 Séries
drwxrwx--- 2 plex plex 6 Apr  3 15:41 Vidéos
[root@plexvm ~]# find /home/plex -ls
 68073798  0 drwxrwx---   6  plex plex   64 Apr  3 15:41
/home/plex
 33674251  0 drwxrwx---   2  plex plex6 Apr  3 15:41
/home/plex/Musique
 68166320  0 drwxrwx---   2  plex plex6 Apr  3 15:41
/home/plex/Vid\303\251os
101999836  0 drwxrwx---   2  plex plex6 Apr  3 15:41
/home/plex/S\303\251ries
   992376  0 drwxrwx---   2  plex plex6 Apr  3 15:41
/home/plex/Music
[root@plexvm ~]#
-- 

Patrick Derwael
Rue de la fontaine, 3
4210 Burdinne
Tél:+32.(0)479.80.50.79
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Mounting CIFS shares on C8

[Patrick DERWAEL]

Le ven. 3 avr. 2020 à 16:13, Fred Smith  a
écrit :

> On Fri, Apr 03, 2020 at 04:00:42PM +0200, Patrick DERWAEL wrote:
> > Hi all,
> >
> 
> >
> > These are my current fstab entries on the C7 box
> >
> > //192.168.1.200/mp3 /home/plex/Musique cifs
> > user=plex,pass=plex,ro,auto,vers=3.0
> > //192.168.1.200/videos /home/plex/Vidéos cifs
> > user=plex,pass=plex,ro,auto,vers=3.0
> >
> >
> > On my C8:
> >
> > [root@plexvm etc]# cat fstab
> >
> 
> > /dev/mapper/cl_plexvm-root /   xfs defaults
> >  0 0
> > UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot   ext4
> >  defaults1 2
> > /dev/mapper/cl_plexvm-swap swapswapdefaults
> >  0 0
> > //192.168.1.200/mp3 /home/plex/Musique  cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > //192.168.1.200/videos  /home/plex/Vidéos   cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > //192.168.1.200/series  /home/plex/Séries   cifs
> >  user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
> > [root@plexvm etc]# mount -a
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > mount error(2): No such file or directory
> > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> > [root@plexvm etc]#
> >
> >
> >
> > Any pointer would be MUCH appreciated!
> >
> > Thanks
>
> I don't know the answer, but a thought or three:
>
> 1. the entries for the cifs mounts don't have the last two fields
> specified. I dunno if they're absolutely required, so it may not mean
> anything.
> 2. you might want to experiment with the smbclient tool to see if you can
> learn anything from its responses when trying to access the remote.
> 3. also verify that seliinux is not blocking the access.. I've had at
> least one case in which I spent hours banging my head, only to discover
> it was selinux and not anything in Samba.
>
> Good luck!
>
> Fred
>
> --
>
> ---
>  .Fred Smith   /
> ( /__  ,__.   __   __ /  __   : /
>  //  /   /__) /  /  /__) .+'   Home:
> fre...@fcshome.stoneham.ma.us
> //  (__ (___ (__(_ (___ / :__
>  781-438-5471
>  Jude 1:24,25
> -
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

Hi,

starting with the easy bit: (3) selinux is disabled, and F/W is (for the
time being) stopped as well

(2) smbclient can access my cifs shares... no sweat...
[root@plexvm ~]# smbclient //192.168.0.200/mp3/
Enter SAMBA\root's password:
Try "help" to get a list of possible commands.
smb: \> ls
  .  DA0  Sun Mar 29 15:21:54 2020
  .. DA0  Thu Mar 26 11:28:36 2020
  T  DA0  Thu Jun 20 09:53:40 2019
  W  DA0  Thu Dec 19 11:28:50 2019

  F  DA0  Mon Mar  9 14:08:49 2020
  N      DA0  Thu Mar 12 09:54:55 2020

11523186296 blocks of size 1024. 3135971700 blocks available
smb: \>

as for (1), if I understand well, the 5th field is optional and it is used
to determine if the fs needs to be dumped
The 6th field is also optional and controls the fsck. As the fs is remote,
I don't want my C8 box to fsck it
That should be ok then...
-- 

Patrick Derwael
Rue de la fontaine, 3
4210 Burdinne
Tél:+32.(0)479.80.50.79
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Mounting CIFS shares on C8

[Patrick DERWAEL]

Hi all,

I'm tearing my hair off trying to understand the difference between C7 & C8
for mounting a cifs FS with fstab

I'm building a Plex media server on C8 and duplicated the fstab entries
over from my current C7 installation
My data (music & movies) are on CIFS shares on a Synology NAS.
The packages cifs-utils samba-client samba-common are installed, up to date
etc...

These are my current fstab entries on the C7 box

//192.168.1.200/mp3 /home/plex/Musique cifs
user=plex,pass=plex,ro,auto,vers=3.0
//192.168.1.200/videos /home/plex/Vidéos cifs
user=plex,pass=plex,ro,auto,vers=3.0


On my C8:

[root@plexvm etc]# cat fstab

#
# /etc/fstab
# Created by anaconda on Fri Apr  3 14:02:23 2020
#
# Accessible filesystems, by reference, are maintained under '/dev/disk/'.
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info.
#
# After editing this file, run 'systemctl daemon-reload' to update systemd
# units generated from this file.
#
/dev/mapper/cl_plexvm-root /   xfs defaults
 0 0
UUID=f7c4e0e2-703e-4e61-8d7a-0aa34f836b02 /boot   ext4
 defaults1 2
/dev/mapper/cl_plexvm-swap swapswapdefaults
 0 0
//192.168.1.200/mp3 /home/plex/Musique  cifs
 user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
//192.168.1.200/videos  /home/plex/Vidéos   cifs
 user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
//192.168.1.200/series  /home/plex/Séries   cifs
 user=plex,pass=plex,workgroup=DERWAEL,ro,auto,vers=3.0
[root@plexvm etc]# mount -a
mount error(2): No such file or directory
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
mount error(2): No such file or directory
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
mount error(2): No such file or directory
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
[root@plexvm etc]#



Any pointer would be MUCH appreciated!

Thanks



-- 

Patrick Derwael
Rue de la fontaine, 3
4210 Burdinne
Tél:+32.(0)479.80.50.79
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Upgrade to CentOS8

[Patrick DERWAEL]

So that means I have no excuse not doing the job😉

Thanks!

Le dim. 29 mars 2020 à 21:51, Phil Perry  a écrit :

> On 29/03/2020 14:31, Patrick DERWAEL wrote:
> > Hi Phil
> >
> > Here it is:
> >
> >
> > [root@totorbex ~]# lspci -nn
> > .00:00.0 Host bridge [0600]: Intel Corporation Atom/Celeron/Pentium
> > Processor x5-E8000/J3xxx/N3xxx Series SoC Transaction Register
> [8086:2280]
> > (rev 21)
> > 00:02.0 VGA compatible controller [0300]: Intel Corporation
> > Atom/Celeron/Pentium Processor x5-E8000/J3xxx/N3xxx Integrated Graphics
> > Controller [8086:22b1] (rev 21)
>
> ^^ video is supported by the i915 driver
>
> > 00:10.0 SD Host controller [0805]: Intel Corporation Atom/Celeron/Pentium
> > Processor x5-E8000/J3xxx/N3xxx Series MMC Controller [8086:2294] (rev 21)
> > 00:13.0 SATA controller [0106]: Intel Corporation Atom/Celeron/Pentium
> > Processor x5-E8000/J3xxx/N3xxx Series SATA Controller [8086:22a3] (rev
> 21)
> > 00:14.0 USB controller [0c03]: Intel Corporation Atom/Celeron/Pentium
> > Processor x5-E8000/J3xxx/N3xxx Series USB xHCI Controller [8086:22b5]
> (rev
> > 21)
> > 00:1a.0 Encryption controller [1080]: Intel Corporation
> > Atom/Celeron/Pentium Processor x5-E8000/J3xxx/N3xxx Series Trusted
> > Execution Engine [8086:2298] (rev 21)
> > 00:1b.0 Audio device [0403]: Intel Corporation Atom/Celeron/Pentium
> > Processor x5-E8000/J3xxx/N3xxx Series High Definition Audio Controller
> > [8086:2284] (rev 21)
>
> ^^ supported by snd_hda_intel
>
> > 00:1c.0 PCI bridge [0604]: Intel Corporation Atom/Celeron/Pentium
> Processor
> > x5-E8000/J3xxx/N3xxx Series PCI Express Port #1 [8086:22c8] (rev 21)
> > 00:1c.1 PCI bridge [0604]: Intel Corporation Atom/Celeron/Pentium
> Processor
> > x5-E8000/J3xxx/N3xxx Series PCI Express Port #2 [8086:22ca] (rev 21)
> > 00:1c.2 PCI bridge [0604]: Intel Corporation Atom/Celeron/Pentium
> Processor
> > x5-E8000/J3xxx/N3xxx Series PCI Express Port #3 [8086:22cc] (rev 21)
> > 00:1c.3 PCI bridge [0604]: Intel Corporation Atom/Celeron/Pentium
> Processor
> > x5-E8000/J3xxx/N3xxx Series PCI Express Port #4 [8086:22ce] (rev 21)
> > 00:1f.0 ISA bridge [0601]: Intel Corporation Atom/Celeron/Pentium
> Processor
> > x5-E8000/J3xxx/N3xxx Series PCU [8086:229c] (rev 21)
> > 00:1f.3 SMBus [0c05]: Intel Corporation Atom/Celeron/Pentium Processor
> > x5-E8000/J3xxx/N3xxx SMBus Controller [8086:2292] (rev 21)
> > 02:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd.
> > RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [10ec:8168]
> (rev
> > 0c)
> > 03:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd.
> > RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [10ec:8168]
> (rev
> > 0c)
>
> ^^ supported by r8169
>
> > 04:00.0 Network controller [0280]: Intel Corporation Wireless 3160
> > [8086:08b3] (rev 83)
>
> ^^ supported by iwlwifi
>
> So looks like your gfx, wifi and ethernet are all covered :-)
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Upgrade to CentOS8

[Patrick DERWAEL]

Hi Phil

Here it is:


[root@totorbex ~]# lspci -nn
.00:00.0 Host bridge [0600]: Intel Corporation Atom/Celeron/Pentium
Processor x5-E8000/J3xxx/N3xxx Series SoC Transaction Register [8086:2280]
(rev 21)
00:02.0 VGA compatible controller [0300]: Intel Corporation
Atom/Celeron/Pentium Processor x5-E8000/J3xxx/N3xxx Integrated Graphics
Controller [8086:22b1] (rev 21)
00:10.0 SD Host controller [0805]: Intel Corporation Atom/Celeron/Pentium
Processor x5-E8000/J3xxx/N3xxx Series MMC Controller [8086:2294] (rev 21)
00:13.0 SATA controller [0106]: Intel Corporation Atom/Celeron/Pentium
Processor x5-E8000/J3xxx/N3xxx Series SATA Controller [8086:22a3] (rev 21)
00:14.0 USB controller [0c03]: Intel Corporation Atom/Celeron/Pentium
Processor x5-E8000/J3xxx/N3xxx Series USB xHCI Controller [8086:22b5] (rev
21)
00:1a.0 Encryption controller [1080]: Intel Corporation
Atom/Celeron/Pentium Processor x5-E8000/J3xxx/N3xxx Series Trusted
Execution Engine [8086:2298] (rev 21)
00:1b.0 Audio device [0403]: Intel Corporation Atom/Celeron/Pentium
Processor x5-E8000/J3xxx/N3xxx Series High Definition Audio Controller
[8086:2284] (rev 21)
00:1c.0 PCI bridge [0604]: Intel Corporation Atom/Celeron/Pentium Processor
x5-E8000/J3xxx/N3xxx Series PCI Express Port #1 [8086:22c8] (rev 21)
00:1c.1 PCI bridge [0604]: Intel Corporation Atom/Celeron/Pentium Processor
x5-E8000/J3xxx/N3xxx Series PCI Express Port #2 [8086:22ca] (rev 21)
00:1c.2 PCI bridge [0604]: Intel Corporation Atom/Celeron/Pentium Processor
x5-E8000/J3xxx/N3xxx Series PCI Express Port #3 [8086:22cc] (rev 21)
00:1c.3 PCI bridge [0604]: Intel Corporation Atom/Celeron/Pentium Processor
x5-E8000/J3xxx/N3xxx Series PCI Express Port #4 [8086:22ce] (rev 21)
00:1f.0 ISA bridge [0601]: Intel Corporation Atom/Celeron/Pentium Processor
x5-E8000/J3xxx/N3xxx Series PCU [8086:229c] (rev 21)
00:1f.3 SMBus [0c05]: Intel Corporation Atom/Celeron/Pentium Processor
x5-E8000/J3xxx/N3xxx SMBus Controller [8086:2292] (rev 21)
02:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd.
RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [10ec:8168] (rev
0c)
03:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd.
RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [10ec:8168] (rev
0c)
04:00.0 Network controller [0280]: Intel Corporation Wireless 3160
[8086:08b3] (rev 83)
[root@totorbex ~]#





[root@plex ~]# lspci -nn
00:00.0 Host bridge [0600]: Intel Corporation Xeon E3-1200 v5/E3-1500
v5/6th Gen Core Processor Host Bridge/DRAM Registers [8086:1904] (rev 08)
00:02.0 VGA compatible controller [0300]: Intel Corporation Skylake GT2 [HD
Graphics 520] [8086:1916] (rev 07)
00:08.0 System peripheral [0880]: Intel Corporation Xeon E3-1200 v5/v6 /
E3-1500 v5 / 6th/7th Gen Core Processor Gaussian Mixture Model [8086:1911]
00:14.0 USB controller [0c03]: Intel Corporation Sunrise Point-LP USB 3.0
xHCI Controller [8086:9d2f] (rev 21)
00:14.2 Signal processing controller [1180]: Intel Corporation Sunrise
Point-LP Thermal subsystem [8086:9d31] (rev 21)
00:16.0 Communication controller [0780]: Intel Corporation Sunrise Point-LP
CSME HECI #1 [8086:9d3a] (rev 21)
00:17.0 SATA controller [0106]: Intel Corporation Sunrise Point-LP SATA
Controller [AHCI mode] [8086:9d03] (rev 21)
00:1c.0 PCI bridge [0604]: Intel Corporation Sunrise Point-LP PCI Express
Root Port #4 [8086:9d13] (rev f1)
00:1c.4 PCI bridge [0604]: Intel Corporation Sunrise Point-LP PCI Express
Root Port #5 [8086:9d14] (rev f1)
00:1d.0 PCI bridge [0604]: Intel Corporation Device [8086:9d1b] (rev f1)
00:1f.0 ISA bridge [0601]: Intel Corporation Sunrise Point-LP LPC
Controller [8086:9d48] (rev 21)
00:1f.2 Memory controller [0580]: Intel Corporation Sunrise Point-LP PMC
[8086:9d21] (rev 21)
00:1f.3 Audio device [0403]: Intel Corporation Sunrise Point-LP HD Audio
[8086:9d70] (rev 21)
00:1f.4 SMBus [0c05]: Intel Corporation Sunrise Point-LP SMBus [8086:9d23]
(rev 21)
01:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd.
RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [10ec:8168] (rev
0c)
02:00.0 Network controller [0280]: Intel Corporation Wireless 3165
[8086:3165] (rev 81)
03:00.0 USB controller [0c03]: ASMedia Technology Inc. ASM1142 USB 3.1 Host
Controller [1b21:1242]
[root@plex ~]#



<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
Virus-free.
www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

Le dim. 29 mars 2020 à 15:05, Phil Perry  a écrit :

> On 29/03/2020 13:52, Patrick DERWAEL wrote:
> > Hi Leon,
> >
> > I don't have the infra (nor the knowledge or expertise) to create a
> LiveCD
> > I didn't think about Fedora. This is indeed a good pointer, I will
> > definitely try that
> > Actually, I'm not too worried about the basi

Re: [CentOS] Upgrade to CentOS8

[Patrick DERWAEL]

Hi Leon,

I don't have the infra (nor the knowledge or expertise) to create a LiveCD
I didn't think about Fedora. This is indeed a good pointer, I will
definitely try that
Actually, I'm not too worried about the basics, but rather about the wifi,
audio & video drivers (one of the boxes is a multimedia system)

Thanks!

<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
Virus-free.
www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

Le dim. 29 mars 2020 à 14:43, Leon Fauster via CentOS  a
écrit :

> Am 29.03.20 um 14:16 schrieb Patrick DERWAEL:
> > Hi folks
> > I have a couple of Zotac mini PCs running CentOS7 which I want/need to
> > upgrade to CentOS8
> > In theory, they are CentOS8 capable, but assuming Murphy might be lurking
> > around, I prefer validating the hardware before starting the effective
> > installation
> >
> > As there is no LiveCD, what would be the recommended way to do this?
>
> No LiveCD, no recommendation but I see two options: If you have the
> infra (workstation/build/mock/imagebuilder) you can generate a custom
> spin / LiveCD, or just use a similar Fedora LiveCD to get an idea if you
> run in major problems. EL8 has some OS areas better equipped with
> backport etc. then the vanilla Fedora release but for a raw test its
> worth to try a fedora LiveCD - EL8 is "similar to" / "a mix of"  Fedora
> 27/28/29 ...
>
> BTW, starting the CentOS8 iso also shows if it boots at all ... :-)
>
> --
> Leon
>
>
>
>
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


-- 

Patrick Derwael
Rue de la fontaine, 3
4210 Burdinne
Tél:+32.(0)479.80.50.79
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Upgrade to CentOS8

[Patrick DERWAEL]

Hi folks
I have a couple of Zotac mini PCs running CentOS7 which I want/need to
upgrade to CentOS8
In theory, they are CentOS8 capable, but assuming Murphy might be lurking
around, I prefer validating the hardware before starting the effective
installation

As there is no LiveCD, what would be the recommended way to do this?

Thanks!



Virus-free.
www.avast.com

<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ssh failure from CentOS7 to Centos6

[Patrick Bégou]

Thanks all for your answers ans suggestions. It cannot be a fail2ban
problem as firewall was disabled on the server for the tests.

The time was playing against me so I went back to centos6 (these
desktops must be available monday) and all run fine. I will investigate
this later. It's easy for me to switch from Centos6 to Centos7 as the OS
is automatically installed (PXE boot + Kickstart)


Patrick


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] ssh failure from CentOS7 to Centos6

[Patrick Bégou]

ug1: identity file /home/tec21/.ssh/id_ecdsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/tec21/.ssh/id_ed25519 type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/tec21/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.4
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH_5* compat 0x0c00
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to kareline:22 as 'tec21'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms:
curve25519-sha256,curve25519-sha...@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c
debug2: host key algorithms:
ecdsa-sha2-nistp256-cert-...@openssh.com,ecdsa-sha2-nistp384-cert-...@openssh.com,ecdsa-sha2-nistp521-cert-...@openssh.com,ssh-ed25519-cert-...@openssh.com,ssh-rsa-cert-...@openssh.com,ssh-dss-cert-...@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss
debug2: ciphers ctos:
chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc
debug2: ciphers stoc:
chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc
debug2: MACs ctos:
umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-sha1-...@openssh.com,umac...@openssh.com,umac-...@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc:
umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-sha1-...@openssh.com,umac...@openssh.com,umac-...@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,z...@openssh.com,zlib
debug2: compression stoc: none,z...@openssh.com,zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug2: peer server KEXINIT proposal
debug2: KEX algorithms:
diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: host key algorithms: ssh-rsa,ssh-dss
debug2: ciphers ctos:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-...@lysator.liu.se
debug2: ciphers stoc:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-...@lysator.liu.se
debug2: MACs ctos:
hmac-md5,hmac-sha1,umac...@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: MACs stoc:
hmac-md5,hmac-sha1,umac...@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd...@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: compression ctos: none,z...@openssh.com
debug2: compression stoc: none,z...@openssh.com
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug1: kex: algorithm: diffie-hellman-group-exchange-sha256
debug1: kex: host key algorithm: ssh-rsa
debug1: kex: server->client cipher: aes128-ctr MAC: umac...@openssh.com
compression: none
debug1: kex: client->server cipher: aes128-ctr MAC: umac...@openssh.com
compression: none
debug1: kex: diffie-hellman-group-exchange-sha256 need=16 dh_need=16
debug1: kex: diffie-hellman-group-exchange-sha256 need=16 dh_need=16
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<3072<8192) sent
Connection closed by 194.254.66.8 port 22

I'm stuck


Patrick


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] looking for rpms in CentOS 8

[Patrick Rael]

On 12/28/19 2:29 PM, Orion Poplawski wrote:
On 12/27/19 11:51 AM, Patrick Rael wrote:
Hi,
I can't find 3 rpms (for now, maybe more later) in centos 8,
which are available for centos 7 and 6.

perl-Crypt-SSLeay

See https://bugzilla.redhat.com/show_bug.cgi?id=1744782  Apparently it's been 
superseded by perl-Net-SSLeay.

Thanks, it looks like we may not need this one anymore, just had a stale 
dependency for it.


perl-Data-Validate-IP

I don't even see this in EL7 proper - 
https://pkgs.org/download/perl-Data-Validate-IP

We must have got it from rpmfusion or some place outside of the main centos 
repos.
I guess the answer is probably go there to get it again, but it's not there yet 
either.
Probably the best answer is build it ourselves from source. Here's a link I 
found.

http://repo.openfusion.net/srpms/perl-Data-Validate-IP-0.27-1.of.el7.src.rpm



ndisc6

It's been requested in EPEL: 
https://bugzilla.redhat.com/show_bug.cgi?id=1779134 but no response yet.

Eagerly awaiting this. We might use the build steps from that url and build our 
own until it's supported.



   Any ideas why these aren't in the repos yet?
I'm using these repos below and I've browsed repos searching for these.

All of the above was found by fairly straightforward google and bugzilla 
searches.
Thanks!

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] looking for rpms in CentOS 8

[Patrick Rael]

Hi,
   I can't find 3 rpms (for now, maybe more later) in centos 8,
which are available for centos 7 and 6.

perl-Crypt-SSLeay
perl-Data-Validate-IP
ndisc6

  Any ideas why these aren't in the repos yet?
I'm using these repos below and I've browsed repos searching for these.

# dnf repolist
...
repo idrepo namestatus
AppStream  CentOS-8 - AppStream 5,089
BaseOS CentOS-8 - Base  2,843
Stream-AppStream   CentOS-Stream - AppStream4,629
Stream-BaseOS  CentOS-Stream - Base 2,326
Stream-extras  CentOS-Stream - Extras   3
cr CentOS-8 - cr6,338
*epel  Extra Packages for Enterprise Linux 8 - x86_64   3,732
extras CentOS-8 - Extras3

Plus, I just want to say thanks for the entire CentOS team and community, you 
do a lot
of work that is critical, and is highly appreciated!

-->Pat
-
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Intel Wireless 3160 adapter misbehaving

[Patrick DERWAEL]

Hi folks

I'm having some hard time troubleshooting a Wifi issue

Centos7, fully up to date, with an Intel Dual Band 3160 Wireless adapter
After the machine boots, the Wifi connects and runs ok for a few hours
After this, the Wifi just stops


[root@orbex ~]# lspci -v | grep Wireless
04:00.0 Network controller: Intel Corporation Wireless 3160 (rev 83)
Subsystem: Intel Corporation Dual Band Wireless AC 3160
[root@orbex ~]# grep iwlwifi messages
Nov 10 03:44:02 orbex kernel: iwlwifi :04:00.0: Error sending
SCAN_OFFLOAD_REQUEST_CMD: enqueue_hcmd failed: -5
Nov 10 03:44:02 orbex kernel: iwlwifi :04:00.0: Scan failed! ret -5
Nov 10 03:44:02 orbex kernel: iwlwifi :04:00.0: Failed to wake NIC for
hcmd

100s of similar lines

Nov 10 14:55:01 orbex kernel: iwlwifi :04:00.0: Failed to wake NIC for
hcmd
Nov 10 14:55:01 orbex kernel: iwlwifi :04:00.0: Error sending
SCAN_OFFLOAD_REQUEST_CMD: enqueue_hcmd failed: -5
Nov 10 14:55:01 orbex kernel: iwlwifi :04:00.0: Scan failed! ret -5
Nov 10 14:56:37 orbex kernel: iwlwifi :04:00.0: loaded firmware version
17.3216344376.0 op_mode iwlmvm
Nov 10 14:56:37 orbex kernel: iwlwifi :04:00.0: Detected Intel(R) Dual
Band Wireless AC 3160, REV=0x164
Nov 10 14:56:37 orbex kernel: iwlwifi :04:00.0: base HW address:
34:de:1a:f0:c2:fb
Nov 10 14:56:38 orbex NetworkManager[1154]:   [1573394198.8523]
rfkill1: found Wi-Fi radio killswitch (at
/sys/devices/pci:00/:00:1c.3/:04:00.0/ieee80211/phy0/rfkill1)
(driver iwlwifi)
[root@orbex log]#

Any advice?

Thanks!

-- 

Patrick Derwael
Rue de la fontaine, 3
4210 Burdinne
Tél:+32.(0)479.80.50.79
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 8 for armv7hl

[Patrick Laimbock]

> Hello together
> 
> were can I find any information on working on Centos 8 for ARM 7 ? I can't 
> find anything.

Hi Andreas,

There is a CentOS Arm Dev list where you can discuss that topic. You can 
subscribe at:
https://lists.centos.org/mailman/listinfo/arm-dev

Best,
Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Top 7 Programming Languages That Employers Really Want

[Patrick Laimbock]

-Original message-
> From:Turritopsis Dohrnii Teo En Ming 
> Sent: Friday 18th October 2019 4:28
> To: J Martin Rushton via CentOS 
> Subject: [CentOS] Top 7 Programming Languages That Employers Really Want
[snip]

Your posting fails to follow the CentOS mailinglist policy [1], specifically:

Do not Cross Post - you also sent the same question to the Fedora mailinglist.
Stay on-topic - your question does not relate to CentOS (nor Fedora)
Netiquette - research *before* posting to the list. Your question is easily 
answered by searching Google.

Please follow the mailinglist policy and read 
http://www.catb.org/~esr/faqs/smart-questions.html before posting.

Thanks,
Patrick

[1] https://wiki.centos.org/GettingHelp/ListInfo/Policy
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS7/Cups/Ldap

[Patrick Bégou]

Hi,

I've posted this on cups forum several days ago but did not receive any 
suggestion. May be Centos Users/admins could give me some advices.

I've setup my first cups server to provide printing services to several clients 
(instead of each CentOS client reaching the printer).

It is a dedicated VM running CentOS7.

On the web interface all requests belong to Withheld user and it is difficult 
to know who is printing and who can cancel his request.

Is there some documentation/tutorial to instruct cups to use a remote ldap 
server to identify users? Of course users should not be allowed to log on the 
cups server with ssh!

Thanks

Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Network switch to IPV6 after PXE boot

[Patrick Bégou]

Le 18/02/2019 à 18:58, Tru Huynh a écrit :
> On Mon, Feb 18, 2019 at 06:36:10PM +0100, Patrick Bégou wrote:
> ...
>> - PXE boot start and the desktop load the kernel and the inirtd file
>>
>> - the kernel is booted and at this time the led of the network switch
>> goes down for the port used by the desktop.
>>
>> - then I have a message "no carrier detected on interface em1"
>>
>> - followed by " IPv6 ADDRCONF(NETDEV_CHANGED): em1: link become ready
>> (and of course the led goes back to green on the switch)
> just add "nicdelay=50 linksleep=50" to your kickstart script
> (adapt the 50 secondes to your needs)
>
> Cheers
>
> Tru
>

I Tru,

Thanks for your answer. This morning I spent a long time testing but it
is still not working. "Googling" with  *nicdelay* show me some
interesting documentations about anaconda. I also try:

*ipv6.disable=1*, do disable the IPv6 setup, and *inst.waitfornet=30*
options.

However when the kernel boot I never get any DHCP request to my server.
I can see the DHCP request at PXE boot time, and it works, but none
after dowlnoading vmlinuz and initrd.img.

The only solution was to provide the network setup the grub.cfg file and
a waitfornet instruction:

set timeout=5
    menuentry 'Centos7-UEFI-most-most8pc19' {
    linuxefi centos74/vmlinuz *inst.waitfornet=30 ipv6.disable=1
ip=**//**::**//**:**//**:**//**:em1:none
*inst.repo=http:/centos74 inst.ks=http:/Kickstart7/optiplex9030_uefi_fr.cfg devfs=nomount
    echo "Loading centos74/initrd.img"
    initrdefi centos74/initrd.img
    echo "Booting installation kernel"
}

Realy strange as I boot and autoinstall many other PC from these server.
I also notice that network is set to 100MbFD even if I have Gigabit
switch. May be something related to the e1000 driver provided at boot time.

Patrick


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Network switch to IPV6 after PXE boot

[Patrick Bégou]

I'm trying to autoinstall a DELL 9030 desktop with CentOS7 using PXE and
Kikstart. I fall in a strange problem (I have several other laptop or
desktop using this install process without any problem, kernel and
initrd are from a Centos 7.4 iso)

- PXE boot start and the desktop load the kernel and the inirtd file

- the kernel is booted and at this time the led of the network switch
goes down for the port used by the desktop.

- then I have a message "no carrier detected on interface em1"

- followed by " IPv6 ADDRCONF(NETDEV_CHANGED): em1: link become ready
(and of course the led goes back to green on the switch)

But I have no IPV6 network setup!

How can I force to IPV4 setup to load the kikstart file ?

I've tried do switch from legacy boot to UEFI boot (my local server
setup can answer requests for the two options), update the BIOS of the
desktop...


Any help is welcome


Patrick


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Signature Pad (Evolis Signotec Sig100)

[Patrick Laimbock]

On 30-01-19 03:49, Gregory P. Ennis wrote:

On Tue, 29 Jan 2019 20:00:03 -0600
Gregory P. Ennis wrote:


Thanks much for your help.  I had tried the links you listed above and in
both cases the scripts do not identify the signature pad as been attached to
the system.  I have tried this with both a kvm guest and a kvm host.  In all
cases their software does not recognize the presence of the signature pad.


Does anything show up in /var/log/messages when you plug the pad into the 
computer?

-

Frank,

Thanks for your help.  I do get recognition in the message file.  The results of
dmesg on the host are belo, but there is no recognition in the message file at 
all on thej
guest.


If you want the guest VM to see the USB device attached to the host you 
need to pass through the USB device from the host to the guest VM.


See https://www.linux-kvm.org/page/USB_Host_Device_Assigned_to_Guest

Patrick


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Signature Pad (Evolis Signotec Sig100)

[Patrick Laimbock]

Hi,

On 29-01-19 23:16, Gregory P. Ennis wrote:

Everyone,

Please forgive me for being off topic and really off list !!!

I am trying to get a Sig100 signature pad to work with Centos 7.6 machine and 
am not
getting much support from the manufacturer.  The product is sold as linux 
compatible, but
so far it is not.  I have been able to download their software on a microsoft 
system and
see that the unit does work on microsoft.

My question to everyone on the list is have any of you had any brand of 
signature pad work
with Centos 7.6?  If so I would surely appreciate knowing the brand and how you 
did it.

I have been able to get a HUION H610PRO wacom to easily work with Centos 7.6, 
but the use
of this for a production application for signatures will not really work easily 
for a user.

Any ideas?


Nope but I found these links:

There's a signoPAD-API JAVA SDK. Try that on the CentOS box?
See https://en.signotec.com/download/sdk-api/signopad-api/

There's also a WebSocket Pad Server for Linux.
See https://en.signotec.com/download/sdk-api/websocket-pad-server/

Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Fedora Server - as an alternative ?

[Patrick Bégou]

Le 20/12/2018 à 16:21, Chris Schanzle via CentOS a écrit :
> On 12/20/18 10:07 AM, Patrick Bégou wrote:
>> Le 20/12/2018 à 14:11, lejeczek via CentOS a écrit :
>>> hi guys
>>>
>>> I wonder if any Centosian here have done something different than only
>>> contemplated using Fedora Server, actually worked on it in
>>> test/production envs.
>>>
>>> If here are some folks who have done it I want to ask if you deem it
>>> to be a viable option to put it on at least portion of servers stack.
>>>
>>> Anybody?
>>>
>>> Many thanks, L.
>>>
>>> ___
>>> CentOS mailing list
>>> CentOS@centos.org
>>>
>> Using fedora will lead you to reinstall servers frequently, for almost
>> each new versions I think.
>>
>> Many years ago I was using opensuse as some of my servers were running
>> SLES and migration between versions was  realy difficult without full
>> reinstall every 1,5 to 2 years...
>>
>>
>> Patrick
>
>
> That's just...err, misinformation.  The Fedora team works very hard to
> enable upgrading (without a clean install) from one release to the
> next...often skipping releases is fine (e.g., 27 to 29).
>
> That said, I only have a few Fedora boxes (used like servers -- that
> is, not on people's desks) for my users that need more bleeding edge
> software stacks and additional packages than CentOS + EPEL can
> provide.  Due to the heavy flow of packages updates and kernel
> updates, it takes a special kind of user to cope with updates,
> reboots, and occasional breakage.
>
> Chris


... or just 27 years of migration experience :-D (all OS included). Even
with Fedora laptop, but of course it was many years ago with realy old
versions (4 to 5 to 6...). No doubtthat things have been improved but
between theory and practice

Patrick


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Fedora Server - as an alternative ?

[Patrick Bégou]

Le 20/12/2018 à 14:11, lejeczek via CentOS a écrit :
> hi guys
>
> I wonder if any Centosian here have done something different than only
> contemplated using Fedora Server, actually worked on it in
> test/production envs.
>
> If here are some folks who have done it I want to ask if you deem it
> to be a viable option to put it on at least portion of servers stack.
>
> Anybody?
>
> Many thanks, L.
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
Using fedora will lead you to reinstall servers frequently, for almost
each new versions I think.

Many years ago I was using opensuse as some of my servers were running
SLES and migration between versions was  realy difficult without full
reinstall every 1,5 to 2 years...


Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos7 broken after update

[Patrick Bégou]

Le 08/12/2018 à 16:23, Pete Biggs a écrit :
>> thanks for the suggestion. Indeed it seems I have a problem with
>> glibc. Version is different between x86_64 and i386 and I have two
>> glibc-common for x86_64. 
>> Trying to remove the old one request removing half of the system
>> packages because of the dependancies. The newest cannot be removed. 
>>
>>
>> glibc-2.17-222.el7.i686 
>> glibc-2.17-260.el7.x86_64 
>> glibc-common-2.17-222.el7.x86_64 
>> glibc-common-2.17-260.el7.x86_64 
>> glibc-devel-2.17-260.el7.x86_64 
>> glibc-headers-2.17-260.el7.x86_64 
>>
> Yes, I battled with this exact same problem earlier in the week -
> machine crashed halfway through the big update leaving things in a very
> inconsistent state (lots of dupes, some library files zero length -
> which was fun). Took me about 12 hours in total to sort out - I was
> that close to just re-installing.
>
> For glibc problem, can you do 
>
>yum erase glibc-2.17-222.el7.i686
>
> there shouldn't be any serious dependencies on the .i686 version.  If
> there are, just make a note and reinstall them later.
>
> "package-cleanup --cleandupes" helped sort out some of the issues and
> with the remaining few it was a case of manually removing the specific
> versions and reinstalling what dependencies there were.
>
> Once most of the issues were done, I then did a 'yum distrosync" (or
> whatever it's called) to make sure packages were correct.
>
> I still had problems with zero length files in some places, so I
> installed yum-verify and ran 'yum verify' to show packages that were
> inconsistent - there were lots. To get a list of them I did
>
>   yum verify > yum.verify.out
>   grep ' : ' yum.verify.out
>
> The 'yum verify' takes a looong time, so be patient.
>
> P.
>
Thanks all for these advices. I've cleaned all these duplicates. It
removed several hundreds of rpm. Two duplicates were not removables
because they were depedencies of protected package (ie :yum...). After
checking with "yum verify" I reinstalled near 50 packages manualy. Then
"yum update" was successfull and I reinstalled (with "yum groupinstall")
most of the things. Then ran again a duplicate removal with success
(there were 2 packages remaining in duplicate state).
The laptop is stable now and works even if my environment is a little
bit different than previously. Difficult to know what is missing now.

Monday I'll update the backup of my datas (last backup was 2 days ago)
and re-install this laptop (it's fast, just a pxe boot and kickstart) at
work as I need to have the same config than the other users. Many thanks
for your help wich allow me to understand how to solve such a situation.
Crashing this laptop was not critical, just unable to work this
week-end, but if this happens later on one of my servers, I have now a
validated strategy to apply. This was why solving the problem was
important!

And sorry Ulf for previous top posting.

Patrick


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos7 broken after update

[PATRICK BÉGOU]

Hi Ulf 

thanks for the suggestion. Indeed it seems I have a problem with glibc. Version 
is different between x86_64 and i386 and I have two glibc-common for x86_64. 
Trying to remove the old one request removing half of the system packages 
because of the dependancies. The newest cannot be removed. 


glibc-2.17-222.el7.i686 
glibc-2.17-260.el7.x86_64 
glibc-common-2.17-222.el7.x86_64 
glibc-common-2.17-260.el7.x86_64 
glibc-devel-2.17-260.el7.x86_64 
glibc-headers-2.17-260.el7.x86_64 


Patrick 


De: "Ulf Volmer"  
À: centos@centos.org 
Envoyé: Samedi 8 Décembre 2018 14:07:11 
Objet: Re: [CentOS] Centos7 broken after update 

On 08.12.18 13:48, Patrick Bégou wrote: 

> There are 1 outstanding transactions to complete. Finishing the most 

> Any idea to go back to a normal situation before a full re-install ? 

restoring the old state before the broken 'yum update' can be done by 
package-cleanup. 

package-cleanup --dupes 

will give you a long list of duplicate packages. 

package-cleanup --cleandupes --removenewestdupes 

will try to remove the duplicate rpms from the update. 

after that you should run 'package-cleanup --dupes' and clean the 
remaining dupes manually. if this is done, you can try to run the 
'yum update' again. 

HTH and best regards 
Ulf 
___ 
CentOS mailing list 
CentOS@centos.org 
https://lists.centos.org/mailman/listinfo/centos 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Centos7 broken after update

[Patrick Bégou]

I've launch a "yum update" while I was going to lunch. 1 hour later the
system was completely freezed (no mouse, no keyboard, screen black, no
network).

I try a hard reboot => kernel panic on the new kernel

I boot on the old kernel => boot hangs with gnome-shell failure. SSH was
OK so I remove the new kernel and re-install gnome shell.

Reboot is ok but now the computer freeze (no mouse, no keyboard, screen
black) after some time. Yum asks to run  yum-complete-transaction

Running yum-complete-transaction says:

There are 1 outstanding transactions to complete. Finishing the most
recent one
The remaining transaction had 1537 elements left to run

then many package to be removed and start a very long dependances check
and show a lot of errors at the end with a depsolving loop limit reached:

Erreur : Depsolving loop limit reached.
Erreur : Paquet : gtk3-3.22.30-3.el7.i686 (base)
 Requiert : libXext.so.6
 Suppression  : libXext-1.3.3-3.el7.i686 (@base)
 libXext.so.6
Erreur : Paquet : evolution-mapi-3.28.3-2.el7.x86_64 (base)
 Requiert : libemail-engine.so()(64bit)
 Suppression  : evolution-3.22.6-14.el7.x86_64 (@base)
 libemail-engine.so()(64bit)
 Suppression  : evolution-3.28.5-2.el7.x86_64 (installed)
 libemail-engine.so()(64bit)

...


and then:

 Vous pouvez essayer d'utiliser --skip-broken pour contourner le problème
** 775 problèmes RPMDB préexistants trouvés, la sortie de « yum check »
est la suivante :
GeoIP-1.5.0-13.el7.x86_64 est un doublon de GeoIP-1.5.0-11.el7.x86_64
1:NetworkManager-1.12.0-8.el7_6.x86_64 est un doublon de
1:NetworkManager-1.10.2-16.el7_5.x86_64
1:NetworkManager-glib-1.12.0-8.el7_6.x86_64 des conflits sont installés
NetworkManager-libnm < ('1', '1.12.0', '8.el7_6'):
1:NetworkManager-libnm-1.10.2-16.el7_5.x86_64
1:NetworkManager-glib-1.12.0-8.el7_6.x86_64 est un doublon de
1:NetworkManager-glib-1.10.2-16.el7_5.x86_64
1:NetworkManager-libnm-1.12.0-8.el7_6.x86_64 des conflits sont installés
NetworkManager-glib < ('1', '1.12.0', '8.el7_6'):

...etc and fails.

Any idea to go back to a normal situation before a full re-install ?


Thanks


Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS Dojo at FOSDEM, February 1, 2019

[Patrick Laimbock]

Hi,

Adding direct links for easier access.

On 28-11-18 19:28, Rich Bowen wrote:

The final schedule for the CentOS Dojo at FOSDEM is now live at
https://wiki.centos.org/Newsletter and registration is open. We've got a
whole day of content for you, covering technical topics, information
about RHEL 8 (and what's coming in CentOS), and updates from our Special
Interest Groups (SIGs).


Schedule:
https://wiki.centos.org/Events/Dojo/Brussels2019


Registration is free, but we do need you to register, so that we can
adequately plan.


Register here:
https://www.eventbrite.com/e/centos-dojo-at-fosdem-tickets-52306704762


We'll see you in Brussels!

If you're not going to be at FOSDEM, but are interested in hosting a
Dojo in your home town, get in touch with us on the centos-promo mailing
list - https://lists.centos.org/mailman/listinfo/centos-promo - with
your proposal.


Cheers,
Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] [Marketing Mail] Re: Cups freeze when remote server is unavailable

[Patrick Bégou]

Hi Lange,

thanks for these links. Following John reply I goes back and deeper in
looking for documentation. Using the web interface is not an option as I
have many laptops to set up and they are all automatically
(re)installable from a PXE boot + kickstart in case of trouble. So all
must be setup automatically (using command lines in the kickstart file)
and user must be allowed to add their own home printer.

I understand some things this afternoon, discover cups-browsed that was
not available in 1.4 version (CentOS6), understand why it was not
working (the laboratory cups version was 1.4 on a debian server and
CentOS7 has 1.6.x now) discover also that ppd files are deprecated in
newer cups version (> 2.x ?)

Time is to go deeper in all these documentations and build a scenario to
set up cups in these automatic installations process. I agree, it was
not a bug, just misunderstanding new cups software behaviour.

Patrick

Le 29/10/2018 à 17:15, Lange, Markus a écrit :
> Hi,
>
> John tries to tell you:
> Revert your configuration changes to the config file and use the local
> web interface / lp* / GUI Print Server Configuration tool to setup all
> printers at work and / or at home using these tools.
>
> This method needs a local cups instance that works if your OS is
> running (if a printer is not reachable for printing cups can still keep
> the job in it's queue until the printer is reachable).
> You can find an linux.com article on Printer Setups in [1] (mainly
> selected for its screenshots of cups web interface and not for its
> actuality) which should give you all information's to get it work.
>
> At least for desktop setups cups should be running by default, see
> "systemctl status cups" to check if it's running.
>
> For a more in-depth view on cups I can recommend reading the archwiki
> [2].
>
> best regards
> Markus
>
> [1] https://www.linux.com/learn/linux-101-printing
> [2] https://wiki.archlinux.org/index.php/CUPS
>
>
> On Mon, 2018-10-29 at 15:35 +0100, Patrick Bégou wrote:
>> Hi John
>>
>> thanks for your quick reply. If it is not a bug, as I was reading on
>> the
>> web, it is some misunderstanding from me.
>> Running cups 1.4.2 (CentOS6) I was using the "BrowsePoll" directive
>> in
>> cupsd.conf. So the printers were automatically known from the central
>> server of the lab. And home printers were working fine with this
>> setup too.
>> In CentOS7, with cups 1.6.3, this directive does not exist any more
>> and
>> reading the doc I had understood that it was replaced by the
>> client.conf
>> file. Reading your answer suggest it is not true.
>>
>> So could you tell me or suggest reading on the right manner to
>> reproduce
>> my previous centos6 setup ?
>>
>> Sorry for this newbie question, I'm not very familiar with cups
>> setup.
>>
>> Patrick
>>
>>
>> Le 29/10/2018 à 14:45, John Hodrien a écrit :
>>> On Mon, 29 Oct 2018, Patrick Bégou wrote:
>>>
>>>> Any idea ?
>>> I don't see that this is a bug.
>>>
>>> In client.conf you're telling it which server to use, exclusively. 
>>> You're not
>>> adding remote printers, you're telling it which CUPS server to talk
>>> to
>>> everytime you use CUPS clients commands.  You don't even need to
>>> run a
>>> local
>>> CUPS server if you configure it like this.
>>>
>>> If you want a machine to work at both ends, I'd suggest you don't
>>> do
>>> this, and
>>> instead run a local CUPS server, and add remote printers to that
>>> local
>>> server.
>>>
>>> jh
>>> ___
>>> CentOS mailing list
>>> CentOS@centos.org
>>> https://lists.centos.org/mailman/listinfo/centos
>>>
>>
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> https://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cups freeze when remote server is unavailable

[Patrick Bégou]

Hi John

thanks for your quick reply. If it is not a bug, as I was reading on the
web, it is some misunderstanding from me.
Running cups 1.4.2 (CentOS6) I was using the "BrowsePoll" directive in
cupsd.conf. So the printers were automatically known from the central
server of the lab. And home printers were working fine with this setup too.
In CentOS7, with cups 1.6.3, this directive does not exist any more and
reading the doc I had understood that it was replaced by the client.conf
file. Reading your answer suggest it is not true.

So could you tell me or suggest reading on the right manner to reproduce
my previous centos6 setup ?

Sorry for this newbie question, I'm not very familiar with cups setup.

Patrick


Le 29/10/2018 à 14:45, John Hodrien a écrit :
> On Mon, 29 Oct 2018, Patrick Bégou wrote:
>
>> Any idea ?
>
> I don't see that this is a bug.
>
> In client.conf you're telling it which server to use, exclusively. 
> You're not
> adding remote printers, you're telling it which CUPS server to talk to
> everytime you use CUPS clients commands.  You don't even need to run a
> local
> CUPS server if you configure it like this.
>
> If you want a machine to work at both ends, I'd suggest you don't do
> this, and
> instead run a local CUPS server, and add remote printers to that local
> server.
>
> jh
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Cups freeze when remote server is unavailable

[Patrick Bégou]

Hi,

I have a setup problem with cups on my CentOS7 laptop.

In client.conf If have set the cups server FDQN used at work

ServerName servprint.lmy.lab.fr


But when I'm at home if I do not comment this line with:

# ServerName servprint.lmy.lab.fr


cups freeze as soon as I try to print something on my local home printer
as the remote server is unreachable.

This seams to be an old 2012 bug (see
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1050422) but I'm
unable to find any work around 6 years later!

My cups in CentOS7 is cups-1.6.3-35.el7.x86_64


Any idea ?



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos7/Kde4 freeze

[Patrick Bégou]

Le 18/09/2018 à 10:04, Patrick Begou a écrit :
> Hi
>
> I have a fresh install of centos 7.4 with KDE on a laptop (latitude
> 5590) connected to a DELL WD15 dockstation with an additionnal screen.
> It works quite well, I have 2 screens side by side (default config),
> but
> If I add a second menu bar for the screen connected to the dockstation
> (KDE allow for this) it is not possible anymore to start a kde session
> if the laptop is not connected to the dock station (eg: at home), kde
> freeze and never show any menubar. I have to use gnome to login and
> remove the .kde directory.
>
> Is there a way to avoid this ?
>
> Thanks
>
> Patrick
>

This problem seams more general... adding an application to the
"favorite" when connected to a docks station produce the same freeze
when laptop is standalone. The workaround is to to do this BEFORE
connecting to the doc station the first time. :-(

I found also some problems with kwallet when seting up a wifi
connection: it was requesting for a password but kwallet/centos was
unable to focus in the popup windows to allow entering the
password...:-\ (standalone laptop at this time)

kde seams to have some trouble in dynamic screen configurations. I
switched to Xfce which just runs fine and do the job!


Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] L1TF in CentOS

[Patrick Rael]

Hi,
  I've applied the latest kernel upticks of kernel and 
microcode_ctl for L1TF.

Just rpm updates and rebooted, no further changes.

kernel-2.6.32-754.3.5.el6.x86_64.rpm
kernel-firmware-2.6.32-754.3.5.el6.noarch.rpm
kernel-headers-2.6.32-754.3.5.el6.x86_64.rpm
perf-2.6.32-754.3.5.el6.x86_64.rpm
microcode_ctl-1.17-33.3.el6_10.x86_64.rpm

L1TF has several mitigations.  So far I can see that only this one is 
applied.


# cat /sys/devices/system/cpu/vulnerabilities/l1tf
Mitigation: PTE Inversion

Is this the definitive check?  I'm trying to confirm the L1Data Cache 
flush isn't
enabled.    It's ok if only this PTE Inversion is applied for me, I just 
need

to be sure, because when I read this url from Redhat, it says 2 of the 3
mitigations are enabled by default, but I see only 1:

https://access.redhat.com/security/vulnerabilities/L1TF
"/All mitigations are enabled by default with the exception of disabling
Hyper-Threading, which customers must take explicit manual steps to turn 
off./"


Also, I haven't been able to find clarity on what mitigations need to be 
applied

to VMs, which ones to VM servers, which to kvm instances and kvm servers,
and if containers and container servers need any special treatment.

Thanks!
-->Pat
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firewall trouble with Kickstart

[Patrick Begou]

Damned! I do not know how many time I check this line without finding my error!
Thanks Mark :-)

Mark Milhollan wrote:

On Fri, 21 Sep 2018, Patrick Begou wrote:


firewall --enabled --ssh --service=nfs --port=111:tcp,111:upd,875:tcp,875:upd

udp not upd.


/mark
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos




--
===
|  Equipe M.O.S.T. |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] [CentOS7] Firewall trouble with Kickstart

[Patrick Begou]

helow

my goal is to install via kickstart a CentOS 7 NFS server but I fail to set the 
firewall rules at installation time.

In my kickstart file I set:

# Firewall configuration
# ssh and NFS
# Ports 111 and 875 are for rquotad
firewall --enabled --ssh --service=nfs --port=111:tcp,111:upd,875:tcp,875:upd

On the installed server,  /root/anaconda-ks.cfg contains:
# Firewall configuration
firewall --enabled --port=111:tcp,111:upd,875:tcp,875:upd --service=ssh,nfs

But after install "firewall-cmd --list-all" returns:

public (active)
  target: default
  icmp-block-inversion: no
  interfaces: p4p1
  sources:
  services: ssh dhcpv6-client
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

An idea about my mistake ?

Thanks

Patrick

--
===
|  Equipe M.O.S.T. |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Centos7/Kde4 freeze

[Patrick Begou]

Hi

I have a fresh install of centos 7.4 with KDE on a laptop (latitude 5590) 
connected to a DELL WD15 dockstation with an additionnal screen.

It works quite well, I have 2 screens side by side (default config), but
If I add a second menu bar for the screen connected to the dockstation (KDE 
allow for this) it is not possible anymore to start a kde session if the laptop 
is not connected to the dock station (eg: at home), kde freeze and never show 
any menubar. I have to use gnome to login and remove the .kde directory.


Is there a way to avoid this ?

Thanks

Patrick

--
===
|  Equipe M.O.S.T. |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos on Dell XPS15

[Patrick Laimbock]

-Original message-
> From:H 
> Sent: Monday 3rd September 2018 14:52
> To: Centos Mailing List 
> Subject: [CentOS] Centos on Dell XPS15
> 
> Is anyone successfully running Centos 7 on a Dell XPS15? If so, which model? 
> If not, what was the problem?
> 
> Thank you!

I only ran Fedora 28 Workstation Live from USB stick on the latest XPS15 (9570) 
and did not try CentOS 7. Fedora 28 ran great and the 4K screen is beautiful 
but the laptop had some issues so I sent it back. Issues:

- the CPU throttles when putting it under load. The "fix"was to undervolt the 
CPU, turn off Turbo speed in the BIOS and turn off HT in the BIOS. This issue 
seems similar to the thermal problem the latest MacBook Pro had. IIRC Apple 
fixed it in a BIOS update. I don't know if/when Dell will fix it (or if they 
even can fix it).
- fingerprint reader does not work. With the latest XPS13 (9370) Developer 
Edition, Dell "fixed" it by removing the fingerprint reader.
- no separate PageUp and PageDown keys. The latest XPS13 does have them but on 
the XPS15 there were 2 gaps in the keyboard where those keys should be but 
aren't.
- it's not possible to open the screen 180 degrees
- the webcam at the bottom of the screen (aka NoseCam) is really annoying

As an alternative to the XPS15 there's the new Inspiron 15 7000 series and the 
Lenovo Thinkpad X1 Extreme (though I have no idea if either of them runs CentOS 
7).

HTH,
Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] OpenLDAP support in future versions of CentOS

[Patrick Laimbock]

Hi Alicia,

On 28-08-18 17:51, Alicia Smith wrote:

Hello!

I just joined this mailing list, so I apologize in advance if this topic
has already been covered.

Red Hat and Suse announced they are no longer supporting OpenLDAP in future
releases.
https://www.ostechnix.com/redhat-and-suse-announced-to-
withdraw-support-for-openldap/

However, we mainly use CentOS and while it's a RH derivative, I wanted to
find out what CentOS plans on doing in this regard.
Will you continue to include OpenLDAP or will it simply be removed?


I wasn't able to find any CentOS related articles in response to this, and
the only thing I did find that said CentOS hasn't released whether they
will continue to support it or not is from two years ago?

https://daasi.de/en/2017/09/25/red-hat-wont-continue-openldap-support-rhel-8-daasi-international-supports-migration/


Any updates/feedback/information is appreciated :)

Thank you!


In addition to Johnny's feedback, here's my 2 cents. On the OpenLDAP 
mailing list users with problems with RHEL/CentOS provided OpenLDAP have 
been advised for years to use the latest OpenLDAP RPMs from 
https://ltb-project.org/ or from https://symas.com which also provides 
paid support.
The OpenLDAP version included in RHEL 7 (and thus CentOS 7) is 2.4.44 
which is missing a ton of fixes compared to upstream's latest release.


tl;dr use the latest RPMs from the LTB Project or Hymas.

BR, Patrick


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] ZFS on Linux repository

[Patrick Brisson]

I'm using ZFS On Linux with CentOS 6 since almost two years.
http://zfsonlinux.org/
I'm not using it to boot from it or for any vm stuff, but just for storage
disks.

Recently updated to ZOL version 0.7.9.
To install, I simply follow the instructions from this page:
https://github.com/zfsonlinux/zfs/wiki/RHEL-and-CentOS
Apply the modifications listed in the section "kABI-tracking kmod".
For CentOS 6, after installation, make sure to run the following:
$ service zfs-import start
$ service zfs-mount start
$ service zfs-share start
$ service zfs-zed start
$ chkconfig zfs-import on
$ chkconfig zfs-mount on
$ chkconfig zfs-zed on
$ chkconfig zfs-share on

I played a bit with it on CentOS 7, with older ZOL version 0.7.4.
Again, follow instructions in the section "kABI-tracking kmod".
For CentOS 7, after installation, make sure to run the following:
$ systemctl preset zfs-import-cache zfs-import-scan zfs-mount zfs-share
zfs-zed zfs.target
$ systemctl enable zfs-import-scan

Hope this helps.

Patrick.

On Tue, Jun 26, 2018 at 1:31 PM, Gionatan Danti  wrote:

> Il 25-06-2018 23:59 Yves Bellefeuille ha scritto:
>
>> I think the simplest solution would be to add this (which I haven't
>> tried):
>>
>> http://zfsonlinux.org/
>> https://github.com/zfsonlinux/zfs/wiki/RHEL-and-CentOS
>>
>> to the Available Repositories for CentOS wiki page:
>>
>> https://wiki.centos.org/fr/AdditionalResources/Repositories/
>>
>> unless someone with some authority says that you can't do this.
>>
>
> Sure, this is the simplest path. Anyone has a good reason to be against it?
> That said, I keep the idea that SIG would be highly preferable.
> Anyone is using ZFS on this list? Any ideas?
> Thanks.
>
> --
> Danti Gionatan
> Supporto Tecnico
> Assyoma S.r.l. - www.assyoma.it
> email: g.da...@assyoma.it - i...@assyoma.it
> GPG public key ID: FF5F32A8
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>



-- 
*Patrick Brisson, P.Eng.*
ETI-NET
www.etinet.com
505 Maisonneuve West, suite 400
Montreal, QC H3A 3C2, Canada
Phone: 514-395-1200
Fax: 514-395-9080
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS7: Setting up ldap over TLS in kickstart file

[Patrick Begou]

Thanks Paul and Gordon for your reply.

I'm not sure, but I think the problem is setting up ldap+TLS while the 
certificates are not uploaded on the server. So I decide to setup LDAP in a 
"post" section only, adding the "--enablesssd --enablesssdauth" options 
suggested by Gordon too.


in the kickstart file:
*auth  --useshadow --passalgo=sha512
*
in a post section:
#  LDAP setup
*authconfig --enableldap --enableldapauth --enablesssd --enablesssdauth 
--ldapserver="ldaps://my.ldap.server" --ldapbasedn=dc=my,dc=local,dc=dn --update**

*# Certificat Upload
*cd /etc/openldap/cacerts/ && wget 
http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/ca-bundle.crt**

*# server public key upload
*cd /etc/openldap/cacerts/ && wget 
http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/server.crt**

*cd /
#  TLS setup
*authconfig --enableldaptls --update**
*
And this works fine. Certificat bundle seams to be accepted (I've also tryed to 
split the file, no change) and the last command builds the hashes of the 
certificates too.


My last problem is that
 firstboot --disabled
don't seams to work in my config but...

Thanks for your helpfull suggestions about sssd and certificates.


Patrick

--
===
|  Equipe M.O.S.T. |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] CentOS7: Setting up ldap over TLS in kickstart file

[Patrick Begou]

Hi,

I'm facing a problem with setting up LDAP+TLS client authentication in a 
kickstart script on CentOS7 for several days.


Setting up manualy the config with system-config-authentication works but I need 
to automate this in kickstart for deploying cluster nodes.

This show that the server side is running fine.

At this time the message is

#systemctl status sssd

|
sssd[be[default]][2732]: Could not start TLS encryption. error:14090086:SSL 
routines:ssl3_get_server_certificate:certificate verify failed (self signed 
certificate)|


In my kickstart file I use:
auth  --useshadow --enableldaptls --enablecache  --passalgo=sha512 --enableldap 
--enableldapauth --ldapserver="ldaps://my.ldap.server.fr" 
--ldapbasedn=dc=my,dc=base,dc=dn


Then in a post install script I download the server and ca certificates and 
stops nslcd that I do not use:


echo "TLS_REQCERT allow">>/etc/openldap/ldap.conf
cd /etc/openldap/cacerts/ && wget 
http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/ca-bundle.crt && ln -s ca-bundle.crt 
$(openssl x509 -hash -in ca-bundle.crt -noout).0
cd /etc/openldap/certs/ && wget 
http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/server.crt

cd /
systemctl disable nslcd

I'm unable to see what system-config-authentication is doing more in it's setup.

Thanks for your help

Patrick


||

--
===
|  Equipe M.O.S.T. |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] home on nfs

[Patrick Bégou]

Thanks Pete and James for pointing to this detailed page on NFS. I was 
unable to find this from google and now  I clearly understand why these 
files occur.


Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] home on nfs

[Patrick Bégou]

hw a écrit :

Hi,

I have the home directory of a user on an nfs server and mount it on a
client.  When the user logs in, they end up in the root directory rather
than in their actual home directory and need to cd into it.

The user can read and write to their home directory, so it kinda works
fine --- but only kinda.  When the user starts emacs, some of the
settings in ~/.emacs are not applied, but the saved desktop is being
loaded.

Both machines are running Centos 7.4.  What could be wrong with the nfs
mount?


About NFS home directories and CentOS have you .nfsx tempory 
files located in the home of your user ?
I have this very often. I was not able to found any documentation about 
this but if they are temporary files for NFS transactions is there a way 
to store them on on local client disk area like /tmp instead of a NFS 
storage?
These files are some time difficult (if not impossible) to remove by the 
user on the client side and stay on the disk... until I remove the 
oldest ones on the server side.


Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] NFS mount on Centos 7 crashing

[Patrick Begou]

This config is working fior me, with just using an older kernel.

[root@mnemosyne ~]# uname -r
3.10.0-514.21.2.el7.x86_64
[root@mnemosyne ~]# rpm -qa | grep rpcbind
rpcbind-0.2.0-42.el7.x86_64
[root@mnemosyne ~]# rpm -qa | grep nfs
libnfsidmap-0.25-17.el7.x86_64
nfs-utils-1.3.0-0.48.el7.x86_64

Patrick

--
===
|  Equipe M.O.S.T. |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 (1708) CR content

[Patrick Laimbock]

On 24-08-17 14:53, Johnny Hughes wrote:

We have released the CR repo with what will be the CentOS 7 (1708)
content.

Please see this link for details:

http://bit.ly/2w7eIe6

Release Notes:

http://bit.ly/2is4Kku

Announcements:

http://bit.ly/2viRAIl

Special thanks, as always, to our community based QA team.  We could
never get this stuff done without them.  You guys and gals ROCK!

Enjoy !


Thank you Johnny, the QA team and everybody else involved!

Cheers,
Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] GPX files

[Patrick Bégou]

Viewing GPX on a map ?

GPX files can be viewed with several web applications. I'm using GPS for 
running and I use:

http://www.visugpx.com/
or
https://www.geoportail.gouv.fr/

For viewing gpx files on your linux box you can also use turtlesport (I 
use it for a while)

http://turtlesport.sourceforge.net/FR/home.html

Patrick

J Martin Rushton a écrit :

I have a Garmin 78s marine GPS receiver and it stores tracks in GPX
format.  This is an XML encoded set of points giving longitude,
latitude, time and sea depth.  Garmin support viewing this via their
Garmin Express product, but there only seem to be Windows and Mac
versions.  I've emailed them and await a reply.  In the mean time, does
anyone know of any Linux products that will emable me to view track data
on a decent sized screen?  I don't want to re-invent the wheel by coding
up a hack myself.

Thanks,
Martin



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] NFS Client with quota

[Patrick Begou]

man rquotad:

rquotad  is an rpc(3) server which returns quotas for a user of a local
   filesystem which is mounted by a remote machine over the NFS.  It  also
   allows  setting of quotas on NFS mounted filesystem (if configured dur-
   ing compilation and allowed by a command line option -S) etc

Seams to be also possible to set quotas from the client, but I never use it.

Patrick

koji.morikawa wrote:

Thanks Patrick.

For Solaris, quota can be set when mounting from NFS client.

There is a transition from Solaris to CentOS 6 this time.
Therefore, quota setting is required for NFS mounting
from CentOS 6 as with Solaris.

Is it still impossible for CentOS 6?

koji

On Sun, 2 Apr 2017 14:44:59 +0200
Patrick B??gou  wrote:


Quota are managed at the filesystem level, so they are managed by the
NFS server.
rquotad allow NFS clients to display users quotas when the filesystem is
mounted.
Be carefull withe autofs, if a remote filesystem is not mounted on the
client, nos quotas are displayed by the quota command.

Patrick

koji.morikawa a ??crit :

Hello. I am "koji".

I have a question.

Can I mount a NFS with quota? (Not Server side)
I understand quota is set NFS server. But I must client side.
(Is rquota only report?)

Does anyone know a good solution?

Best regard.

koji
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

/
システムズ・デザイン 株式会社
大阪支社  SI部 SI3課
森川 孝司 

〒530-6008
大阪市北区天満橋1丁目8番30号  OAPタワー 8階
TEL：06-6355-5971  FAX：06-6355-5974
http://www.sdcj.co.jp/
/
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos




--
===
|  Equipe M.O.S.T. |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] NFS Client with quota

[Patrick Bégou]

Quota are managed at the filesystem level, so they are managed by the 
NFS server.
rquotad allow NFS clients to display users quotas when the filesystem is 
mounted.
Be carefull withe autofs, if a remote filesystem is not mounted on the 
client, nos quotas are displayed by the quota command.


Patrick

koji.morikawa a écrit :

Hello. I am "koji".

I have a question.

Can I mount a NFS with quota? (Not Server side)
I understand quota is set NFS server. But I must client side.
(Is rquota only report?)

Does anyone know a good solution?

Best regard.

koji
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Systemd interface rename does not work

[Oberdorfer Patrick]

Hi,

i dont know what way you prefer to archieve network interface renaming,
what I do is set specific udev rules.

user@host# cat /etc/udev/rules.d/60-net.rules
SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="00:00:50:cc:19:0a",
ATTR{type}=="1", NAME="eth0"
SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="00:00:50:cc:4f:3c",
ATTR{type}=="1", NAME="eth1"
SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="00:00:50:cc:10:02",
ATTR{type}=="1", NAME="eth2"

After a reboot the interface names will be seit accordingly.
I have never read about an way to change an interface name via
networkmanager.


-Ursprüngliche Nachricht-
Von: CentOS [mailto:centos-boun...@centos.org] Im Auftrag von Matt .
Gesendet: Sonntag, 26. März 2017 14:17
An: centos@centos.org
Betreff: [CentOS] Systemd interface rename does not work

Hi,

I'm moving to Systemd for my network management but I don't see my link name
changed when I try to using a .link name.

The .network file works right, networkmanager is removed as well to
accomplish this.

Any idea why the rename is not done ?


/etc/systemd/network/0-eth.network
[Match]
MACAddress=00:1a:4a:a9:0a:17

[Network]
Address=172.16.3.141/24
Gateway=172.16.3.254
DNS=172.16.3.1
DNS=172.16.3.2

/etc/systemd/network/0-eth.link
[Match]
MACAddress=00:1a:4a:a9:0a:17

[Link]
Name=eth0
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 7.3.1611 - NetworkManager + dhcp + ipv6

[Patrick Laimbock]

On 21-03-17 20:51, Diaulas Castro wrote:

Used steps on sysctl from Centos7 FAQ (https://wiki.centos.org/FAQ/CentOS7) and 
some gathered on internet

# cat /etc/sysctl.d/90-disable_ipv6.conf
net.ipv6.conf.all.disable_ipv6=1
net.ipv6.conf.default.disable_ipv6=1
net.ipv6.conf.eth0.disable_ipv6=1
net.ipv6.conf.eth1.disable_ipv6=1
net.ipv6.conf.all.use_tempaddr=0
net.ipv6.conf.all.autoconf=0
net.ipv6.conf.all.accept_ra=0
net.ipv6.conf.default.autoconf=0
net.ipv6.conf.default.accept_ra=0
net.ipv6.conf.eth0.autoconf=0
net.ipv6.conf.eth1.autoconf=0


But with dhcp, NetworkManager (or something) reenables ipv6 on interfaces.

#sysctl -a | grep ipv6 | grep disable
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.eth0.disable_ipv6 = 0
net.ipv6.conf.eth1.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1

And the interface gets the ipv4 but still have temporary ipv6 on it (our dhcp 
doesnt support ipv6)

# ip a s eth0
2: eth0:  mtu 1500 qdisc mq state UP qlen 1000
link/ether 00:0c:29:31:5a:9d brd ff:ff:ff:ff:ff:ff
inet 10.10.216.247/24 brd 10.10.216.255 scope global dynamic eth0
   valid_lft 451sec preferred_lft 451sec
inet6 fe80::20c:29ff:fe31:5a9d/64 scope link
   valid_lft forever preferred_lft forever

And this bugs  my use for ovftool with the option "--X:waitForIp" because it's 
returns (mostly of times) the ipv6 addr

It's a bug, missing documentation or my


IIRC you can disable IPv6 in NetworkManager with:

# nmcli connection modify eth0 ipv6.method ignore
# systemctl restart NetworkManager

or you can disable IPv6 entirely with:

# vi /etc/default/grub
GRUB_CMDLINE_LINUX_DEFAULT="ipv6.disable=1 "

# grub-mkconfig -o /boot/grub2/grub.cfg
# reboot

HTH,
Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos7: Intel nuc/Linksys usb-ethernet

[Patrick Laimbock]

Hi,

Suggestions inline.

On 21-02-17 21:03, johan.vermeul...@telenet.be wrote:
[snip]


Next I cannot launch the network:

[root@clgmol ~]# systemctl status network
● network.service - LSB: Bring up/down networking
Loaded: loaded (/etc/rc.d/init.d/network; bad; vendor preset: disabled)


Your network.service is still disabled so try enabling it:

# systemctl stop NetworkManager.service
# systemctl disable NetworkManager.service
# systemctl enable network.service
# systemctl start network.service
# systemctl status network.service

If the network.service fails, see below, review, fix and try again.


Active: failed (Result: exit-code) since di 2017-02-21 20:57:56 CET; 15s ago
Docs: man:systemd-sysv-generator(8)
Process: 2638 ExecStart=/etc/rc.d/init.d/network start (code=exited, 
status=1/FAILURE)
CGroup: /system.slice/network.service
└─1076 /sbin/dhclient -H clgmol -1 -q -lf 
/var/lib/dhclient/dhclient-13b56b89-7b1d-42fa-aeb7-af96a38102ce-enp3s0.lease 
-pf /var/run/dhclient-enp3s0.pid en...

feb 21 20:57:56 clgmol.router network[2638]: RTNETLINK answers: File exists

[snip]

IIRC make dhclient release the current lease and stop the running DHCP 
client, then remove any lingering leases files:


# dhclient -r
# rm -v -i /var/lib/dhclient/dhclient*.lease*

Also remove any /etc/sysconfig/network-scripts/ifcfg-* files created by 
NetworkManager that might interfere with your ifcfg-enp0s20u3c2 and the 
network.service. Then try to start the network.service again.


HTH,
Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Wich web browser on CentOS6 ?

[Patrick Bégou]

Alice Wonder a écrit :

On 02/10/2017 12:34 PM, James B. Byrne wrote:


On Fri, February 10, 2017 06:26, Patrick Begou wrote:

Hello

I have more and more troubles using firefox in professional
environment with
CentOS6. The latest version is 45.7.0 But I can't use it anymore to
access some
old server hardware (IDRAC7 of DELL C6100) because of
"/SSL_ERROR_WEAK_SERVER_CERT_KEY/".  I had to install an old Firefox32
version
to administrate these servers.

Today I upgrade the firmware of 2 DELL switch and now Firefox cannot
connect to them anymore saying: /An error occurred during a
connection to xxx.xxx.xxx.xxx. The server rejected
the handshake because the client downgraded to a lower TLS version
than the server supports// //SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT

/Is there a CentOS6 recommended web browser allowing continuous
connections to olds and new base level (and local) system
administration services ?



This situation arises because older, dare I say old, equipment
released with embedded software and using http/https as the
administrative front end were shipped with minimally compliant x-509
certificates.  Often self-signed with 1kb keys and md5 signature
hashes. Not to mention many are past their expiry dates.

However, given the revelations of state sanctioned snooping on network
traffic browsers are being pushed to implement increased compliance
checking for the overall security of users. Firefox is simply
implementing what various 'authorities' are recommending as secure
practices with respect to authentication using pki and x-509
certificates.

The present situation is a PIA.  It could be a lot more user-friendly
if FF so chose. They could have easily allowed one to turn off these
advanced compliance checks for specific IP and DNS addresses so that
the intended benefit remained but the interference with existing
infrastructure was minimised.

But, FF is on its own chosen path to oblivion and the idea of
compromise is totally absent from their project plan.




IMHO FireFox is doing the right thing. Compromises in policy is how 
system compromises often happen.


If you can change the setting to be more forgiving of certain bad 
vendors, then so can malware.
In this situation the working solution is the  worst one: disabling 
https and re-enabling http on these devices.


What we really need to do is demand better from the manufacturers of 
products we use in a "professional environment" - and it is extremely 
important we demand better from them now, during the dawn of IoT.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Wich web browser on CentOS6 ?

[Patrick Bégou]

Yes David, I'm using a release 32 of Firefox to reach my olds C6100 
IDRAC7 interface.
The problem is for latest Firefox versions as they require libgtk-3 not 
available in Centos6/RHEL6 distribution.


Today I use a very very bad solution to reach my switch with latest 
firmware version from the latest Firefox available in CentOS: I disable 
https and use http
Even if it is on a private network, in a dedicated vlan behind a 
firewall... I don't like this.


Patrick

David Nelson a écrit :

On 2/10/17 3:26 AM, Patrick Begou wrote:
/Is there a CentOS6 recommended web browser allowing continuous 
connections to olds and new base level (and local) system 
administration services ?


FYI you can download any previous release of Firefox from the URL 
below, and it will run right out of its own directory without being 
'installed' per se. So you could find one that is compatible and keep 
it separate from the one you use for regular browsing. You'd probably 
want to run it as a different user on your box, and/or a separate 
profile.


http://ftp.mozilla.org/pub/firefox/releases/

Or if you don't want to worry about which user and profile you're in, 
you could try an equivalent release of SeaMonkey.


http://ftp.mozilla.org/pub/seamonkey/releases/

Either way it would enable you to have a more secure, up-to-date 
browser for regular use while also having one that is compatible with 
the other systems you need to use.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Wich web browser on CentOS6 ?

[Patrick Begou]

Tru Huynh wrote:

On Fri, Feb 10, 2017 at 12:26:14PM +0100, Patrick Begou wrote:

Hello

I have more and more troubles using firefox in professional
environment with CentOS6. The latest version is 45.7.0 But I can't
use it anymore to access some old server hardware (IDRAC7 of DELL
C6100) because of "/SSL_ERROR_WEAK_SERVER_CERT_KEY/".  I had to
install an old Firefox32 version to administrate these servers.


Can you try: (in Firefox's about:config):
possible workaround for SSL_ERROR_WEAK_SERVER_CERT_KEY
 security.ssl3.dhe_rsa_aes_128_sha
 security.ssl3.dhe_rsa_aes_256_sha

These are yet set to true.



Today I upgrade the firmware of 2 DELL switch and now Firefox cannot
connect to them anymore saying:
/An error occurred during a connection to xxx.xxx.xxx.xxx. The
server rejected the handshake because the client downgraded to a
lower TLS version than the server supports//
//SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT

possible workaround for SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT
 security.tls.version.max 3 -> 1

You might want to revert for safer browsing, after.
With this setting I get SSL_ERROR_NO_CYPHER_OVERLAP and I cannot connect to the 
switch.
Of course I can re-activate the old firmware version of the switch, but it has a 
bug I would like to solve too.


I know that to remains compatible with old config could have security problems 
but all of these devices
use dedicated ports (IDRAC, Out of band port management) on a private network 
which could be easily isolated.
The idea is to have a browser dedicated to this administration (instead of 
several versions/profiles)

/Is there a CentOS6 recommended web browser allowing continuous
connections to olds and new base level (and local) system
administration services ?

maybe different profiles with differents security setup?

Cheers

Tru


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Thanks all for your suggestion to find a solution or detailing your local work 
around


Patrick

--
===
|  Equipe M.O.S.T. |      |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Wich web browser on CentOS6 ?

[Patrick Begou]

Hello

I have more and more troubles using firefox in professional environment with 
CentOS6. The latest version is 45.7.0 But I can't use it anymore to access some 
old server hardware (IDRAC7 of DELL C6100) because of 
"/SSL_ERROR_WEAK_SERVER_CERT_KEY/".  I had to install an old Firefox32 version 
to administrate these servers.


Today I upgrade the firmware of 2 DELL switch and now Firefox cannot connect to 
them anymore saying:
/An error occurred during a connection to xxx.xxx.xxx.xxx. The server rejected 
the handshake because the client downgraded to a lower TLS version than the 
server supports//

//SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT

/Is there a CentOS6 recommended web browser allowing continuous connections to 
olds and new base level (and local) system administration services ?


Thanks

Patrick

--
===
|  Equipe M.O.S.T. |      |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] [solved] Centos6.8 and Python33

[Patrick Begou]

Current versions of numpy seams to be not compatible anymore with python 3.3 
:-[.
I had to specify an older package version:

pip install numpy==1.10.4
as 1.12.0 doesn't work anymore.

Patrick

--
===
|  Equipe M.O.S.T. |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos6.8 and Python33

[Patrick Begou]

Pete Biggs wrote:

On Mon, 2017-02-06 at 13:07 +0100, Patrick Begou wrote:

I've some trouble with installing numpy in python 3.3 on Centos 6.8 as
installation request a different python version...

[root@sge ~]$ yum install python33 python33-python-tools
[root@sge ~]$ scl enable python33 bash
 = *this load Python 3.3.2*  ===
[root@sge ~]$ easy_install pip
[root@sge ~]$ pip install numpy
Collecting numpy
Using cached numpy-1.12.0.zip
  Complete output from command python setup.py egg_info:
  Traceback (most recent call last):
File "", line 1, in 
File "/tmp/pip-build-wyb0pj/numpy/setup.py", line 34, in 
  raise RuntimeError("Python version 2.7 or >= 3.4 required.")
*RuntimeError: Python version 2.7 or >= 3.4 required.


*I'm not familar with python and I do not find on google how to work arround
this


Even not knowing python, it's fairly obvious - it says you need Python
version 3.4 or greater for numpy 1.12.0, you've installed Python 3.3

Generally, I don't use pip for installing numpy - it's such a common
requirement for other packages that it's in the repositories. Try
something like

   yum install python33-numpy

P.

Using "yum install python33-numpy " could be a solution for numpy but this just 
forward the problem to the next package I have to install with pip. I do not 
understand why a python 3.3 environment try to install incompatibles packages.


I tryed to install python34 with yum but it does not seem to work with scl 
environment (yum install python34-setuptools python34)


Patrick


--
=======
|  Equipe M.O.S.T. |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Centos6.8 and Python33

[Patrick Begou]

I've some trouble with installing numpy in python 3.3 on Centos 6.8 as 
installation request a different python version...


[root@sge ~]$ yum install python33 python33-python-tools
[root@sge ~]$ scl enable python33 bash
   = *this load Python 3.3.2*  ===
[root@sge ~]$ easy_install pip
[root@sge ~]$ pip install numpy
Collecting numpy
  Using cached numpy-1.12.0.zip
Complete output from command python setup.py egg_info:
Traceback (most recent call last):
  File "", line 1, in 
  File "/tmp/pip-build-wyb0pj/numpy/setup.py", line 34, in 
raise RuntimeError("Python version 2.7 or >= 3.4 required.")
*RuntimeError: Python version 2.7 or >= 3.4 required.


[root@sge ~]$which python
/opt/rh/python33/root/usr/bin/python
[root@sge ~]$which pip
/opt/rh/python33/root/usr/bin/pip


*I'm not familar with python and I do not find on google how to work arround 
this


Thanks

Patrick

--
===
|  Equipe M.O.S.T.     |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] disable/mask NetworkManager leads to unit startup fails

[Oberdorfer Patrick]

Thank you very much James for your deep explaining answer!
That cleared everything up for me and yes that helped a lot.

Have a nice day :)

-Ursprüngliche Nachricht-
Von: CentOS [mailto:centos-boun...@centos.org] Im Auftrag von James Hogarth
Gesendet: Montag, 16. Jänner 2017 19:37
An: CentOS mailing list 
Betreff: Re: [CentOS] disable/mask NetworkManager leads to unit startup
fails

On 16 January 2017 at 15:24, Oberdorfer Patrick
 wrote:
> Hello!
>
>
>
> For me it was best practice to disable "NetworkManager" on headless 
> installations.
>
> Now suddenly I ran into an problem with several programs not starting 
> correctly upon boot anymore.
>
> The problem seems to be that their unit files contain
"After=network.target"
> but network.target wont wait till network is up and working, just 
> waits for some low level network stuff.
>
>
>
> Now I read that it would be good practice to edit this and use 
> "After=network-online.target" instead. But I don't want to touch 
> several systemd unit files shipped via rpm packages.
>
>
>
> Software like unbound, postfix and so on which needs to bind to 
> ip+port on startup fails on my systems now since I disabled
NetworkManager.
>
>
>
> What solved the problem for me was to install "systemd-networkd" 
> instead and enable it upon boot.
>
> It's system unit file pulls in "network.target" as "Wants" this way 
> software that says "After=network.target" will start after network 
> cards are configured. Why there is this behavior I haven't found out yet.
>
>
>
> Whats your best practice to archieve stable networking upon reboot? Do 
> you use NetworkManager or systemd-networkd or maybe something exotic
anyway?
>
>
>


Use NetworkManager ... it's the supported RH configuration tool.

This article is a little old (7.3 had a NM rebase and I've not revisited it
yet ... the prime gain in 7.3 though is arbitrary layering of
vlan/bridge/bond/etc negating the caveat at the end for edge case).

https://www.hogarthuk.com/?q=node/8

As for the targets ... man systemd.special to get a better understanding:

https://www.freedesktop.org/software/systemd/man/systemd.special.html

By default services you install will listen on all interfaces, usually a
configuration with something like ListenAddress :: to indicate this (there
is an internal ipv6->ipv4 translation going on so you only should listen on
:: and not 0.0.0.0 as well) ... when a service binds to a port on all
addresses then the address does not need to exist yet
- the kernel just handles it.

If you configure your service to bind on a specific IP though then they way
the binding system call works it already needs to exist (by
default) which is why with the default configuration if the service tries to
start before the IPs are applied (quite likely given parallel
startup) you have a nice race condition and a fairly high likelihood of
failure.

There's two ways to handle this - and it depends on the service.

You can order it via after (and potential requires if you want no attempt to
start the service if the target fails to activate) network-online.target
(see referenced man page) which won't be complete until at least one IP is
on any interface.

If it's your own application and you can set the flags on the actual bind
then you can use so_freebind on the socket opened, some applications may
have this as a compile time or configurable option.

Another option is to enable net.ipv4.ip_nonlocal_bind and
net.ipv6.ip_nonlocal_bind which allows the kernel to bind a socket on an IP
it doesn't have (do note the caveat it may break some things).

https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt

If it's a systemd socket being used by the service then you can enable the
freebind option via FreeBind=true

https://www.freedesktop.org/software/systemd/man/systemd.socket.html

Overall you may be interested in this:

https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/

I really wouldn't use systemd-network on CentOS as a general thing as it's
basically undocumented/unsupported by Red Hat at this time, with NM being
their actual supported solution.

https://access.redhat.com/solutions/783533 <-- network Vs NetworkManager

https://access.redhat.com/solutions/876183 <-- no systemd alternative for NM
in EL7


Hope that helps and explains things!
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] disable/mask NetworkManager leads to unit startup fails

[Oberdorfer Patrick]

Hello!

 

For me it was best practice to disable "NetworkManager" on headless
installations.

Now suddenly I ran into an problem with several programs not starting
correctly upon boot anymore. 

The problem seems to be that their unit files contain "After=network.target"
but network.target wont wait till network is up and working, just waits for
some low level network stuff.

 

Now I read that it would be good practice to edit this and use
"After=network-online.target" instead. But I don't want to touch several
systemd unit files shipped via rpm packages. 

 

Software like unbound, postfix and so on which needs to bind to ip+port on
startup fails on my systems now since I disabled NetworkManager.

 

What solved the problem for me was to install "systemd-networkd" instead and
enable it upon boot.

It's system unit file pulls in "network.target" as "Wants" this way software
that says "After=network.target" will start after network cards are
configured. Why there is this behavior I haven't found out yet. 

 

Whats your best practice to archieve stable networking upon reboot? Do you
use NetworkManager or systemd-networkd or maybe something exotic anyway?

 

PS: I have already filed an Bugzilla report here:
https://bugzilla.redhat.com/show_bug.cgi?id=1412570

 

Thanks! 

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 + KDE - default keyboard layout?

[Patrick Hess]

On 14.11.2016 17:55, Nicolas Kovacs wrote:

But then, I'm also running Xfce on this machine, so I don't know if on
the CentOS machine, the problem is related to localectl, to X.org or to
KDE.


Alright, I just installed KDE in an existing VirtualBox VM (so that I
can easily undo everything later) that used to be "fully Germanized",
and then tried to switch the whole system over to French:

virtualcentos7:~ > localectl
   System Locale: LANG=fr_FR.UTF-8
   VC Keymap: fr-nodeadkeys
  X11 Layout: fr
   X11 Model: pc105
 X11 Variant: nodeadkeys
virtualcentos7:~ > getafrencherrormessage
bash: getafrencherrormessage : commande introuvable

So far, so good. Here's where the fun begins... XFCE talks to me in French,
whereas KDE still insists on speaking English (there's probably a separate
package that needs to be installed, but who cares). What's more important,
the keyboard layout in GDM, XFCE and KDE is still *German*! In fact, even
GDM still offers only German and US layouts to choose from.

Honestly, I have no clue what's going on here anymore. I surely must be
missing something.
 

I tried to replace the CentOS configuration stub with the one I have on
the Slackware machine, but to no avail. The keyboard is still US. While
it's not a big deal, of course, I'd rather avoid having to reconfigure
all my users' keyboard layout by hand.


Well, there's always "setxkbmap 'ch(fr)'" that you could run automatically
when a user logs in. And this *does* actually work here, e.g. pressing the
Ö key on my German keyboard causes an é to appear, which should correspond
to a Swiss-French layout. I'm not entirely sure what the best place to put
this command would be, though. Maybe /etc/profile or ~/.profile?

test -n "$DISPLAY" && setxkbmap 'ch(fr)'

After all, this doesn't look like a KDE issue to me. Let's blame systemd,
shall we? ;-)

Patrick

--
If you'd like to send me a private message, make sure to remove
the "_lists" part from my address.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 + KDE - default keyboard layout?

[Patrick Hess]

On 14.11.2016 14:33, Nicolas Kovacs wrote:

# localectl set-x11-keymap fr_CH-latin1 pc105 nodeadkey

As is to be expected, this modifies /etc/X11/xorg.conf.d/00-keyboard.conf:


Interesting, I didn't actually realize that myself before.


Option "XkbLayout" "fr_CH-latin1"


According to this link


https://wiki.manjaro.org/index.php?title=Configuration_du_clavier_apr%C3%A8s_l%27installation

the XkbLayout should read "ch(fr)" instead of "fr_CH-latin1", as the
system console and X.org seem to use a different notation for selecting
the layout in this particular case:

   - Dans le terminal - Pour la Suisse romande:
 loadkeys fr_CH-latin1

   - Dans X11 / Xorg - Configurer le clavier de manière permanente:
 Option "XkbLayout" "ch(fr)"

Then, this should work as well:

localectl set-x11-keymap 'ch(fr)' pc105 nodeadkey


This looks like a CentOS bug to me: unable to define a non-US
system-wide keyboard when using KDE.


That could be possible, of course. On FreeBSD, with the keyboard layout 
configured the old-fashioned way via /etc/X11/xorg.conf, KDE does respect
the system-wide settings. I would expect KDE to behave the same on CentOS.
However, I only had to deal with easy layouts like "de" and "us" so far;
Swiss-French might pose a bit more of a challenge. ;-)

Patrick

--
If you'd like to send me a private message, make sure to remove
the "_lists" part from my address.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] How do I default to "Folder View" in my custom KDE user profile?

[Patrick Hess]

On 13.11.2016 08:46, Nicolas Kovacs wrote:

One thing I can't seem to define is a default "folder view" for the
desktop. Instead of the plasmoids on the desktop introduced with KDE4,
I'd like my environment to behave like a "classic" desktop with folders
and files on the desktop, and where a right click can - for example -
create a folder. My KDE is in french, but if I remember correctly, this
setup is called "Folder View" in english.


All my KDE4 desktops around here are in German (and they're on FreeBSD,
but that shouldn't really matter) so the translations are not exact.
Anyway, try this:

   - Right-click on your desktop
   - Choose "Settings for Default Workspace"
   - From the dialog, select "Folder View" for the layout
 

Question: how can I define this behavior as default? Which file or stub
do I have to put in /etc/skel so a newly created user's KDE defaults to
"Folder View"?


After making said change in the GUI, I ran:

find ~/.kde4 -mtime -60s

to see what files have been changed within the last 60 seconds, and these
two guys showed up:

~/.kde4/share/config/plasma-desktoprc
~/.kde4/share/config/plasma-desktop-appletsrc

Patrick

--
If you'd like to send me a private message, make sure to remove
the "_lists" part from my address.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 + KDE - default keyboard layout?

[Patrick Hess]

On 10.11.2016 08:30, Nicolas Kovacs wrote:

My system is installed in French, with a swiss french keyboard
(fr_CH-latin1) as default. This works OK in console mode, but when KDE
launches the first time, the default keyboard is US, and there's a
french (fr-latin1) alternative configured.


XFCE user here, so I'm not sure if KDE tries to enforce its own settings with
regard to the keyboard layout, but have you tried (as root):

localectl set-x11-keymap  
pc105 nodeadkey

This changes the X11 keyboard settings permanently for all users on the system
and works fine with (at least) XFCE.

Patrick

--
If you'd like to send me a private message, make sure to remove
the "_lists" part from my address.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] How to convert /etc/machine-id into a default-duid for IPv6 static DHCP?

[Patrick Laimbock]

Hi,

The use-case is deploying C7 VMs with a pre-set machine-id and 
default-duid based on the machine-id to facilitate static DHCP with 
IPv6. The default-duid is found in dhclient6--eth0.lease and IPv6 
DHCP uses default-duid like IPv4 DHCP uses MAC addresses for static DHCP.


How does one convert /etc/machine-id to a default-duid (in bash)?

1) /etc/machine-id -> DUID:



Use sha256 hash of machine-id, use first 128 bits, add colons and 
prepend 00:04:


$ MACHINE_ID_SHA256=`cat /etc/machine_id | sha256sum | cut -c1-32`
$ TMPID=$(sed -e 's/.\{2\}/&:/g;s/.$//' <<<$MACHINE_ID_SHA256)
$ DUID=00:04:`echo $TMPID`

Correct?

2) convert $DUID to a default-duid. Example value of default-duid can be 
found in /var/lib/NetworkManager/dhclient6--eth0.lease.
Will stick the pre-set default-duid in /etc/dhclient6.leases so it gets 
picked up by NM once the VM is deployed and started.


So going from e.g.
/etc/machine-id 52d8c0f2a04a462a9c9ac1a906446d85
to
duid 00:04:a6:89:54:e8:bf:e2:13:71:82:3d:ea:33:4d:a5:2f:75
to
default-duid ???

example:
default-duid 
"\000\004%\011\324\251\274\334\001c\304\366\275\314\220\357\255(";


So how does one create the default-duid from the duid? The default-duid 
seems escaped octal with some chars here and there. The NetworkManager 
code at [2] that does the duid->default-duid conversion is above my pay 
grade. Anyone know how do this conversion preferably in bash?


TIA,
Patrick

[0] 
https://cgit.freedesktop.org/NetworkManager/NetworkManager/tree/src/nm-core-utils.c#n2658


[1] 
https://cgit.freedesktop.org/NetworkManager/NetworkManager/tree/src/dhcp-manager/nm-dhcp-client.c#n439


[2] 
https://cgit.freedesktop.org/NetworkManager/NetworkManager/tree/src/dhcp-manager/nm-dhcp-dhclient-utils.c#n356

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] openssl Security Update for CentOS 6.7 ETA

[Patrick Rael]

On 05/11/2016 11:24 AM, m.r...@5-cent.us wrote:

Patrick Rael wrote:

On 05/11/2016 09:45 AM, Steve Snyder wrote:

On Wednesday, May 11, 2016 11:20am, "Patrick Rael" 
said:


Hi,
  Is there an ETA on the openssl security update (CVE-2016-0799) for
CentOS 6.7?I saw the openssl update for CentOS 7 on 5/9, eagerly
awaiting the same for 6.7.


Looks like Red Hat pushed it to RHEL v6.8, released yesterday.  Unless
CentOS does a special back-port we'll have to wait for CentOS v6.8 to
get the OpenSSL update.

Is there an ETA on CentOS v6.8?Days? Weeks? Months? (years?)
I just need to predict when CVE-2016-0799 will be fixed for CentOS 6.7.
I thought security updates would be available on 6.7 for many more years.


Please - it was *just* released, and the build team is presumably already
on it. Hopefully, upstream hasn't screwed with their build environment
again.

At any rate, when upstream did, it took our build team about a month to
get builds working again; if they haven't, then I'd hope for a few weeks.

PLEASEPLEASEPLEASEPLEASE people, *don't* turn this into a 5k posts a day
arguing over whether the build team is lazy, or 75% of them "ANYTHING
NEW?! HOW SOON?!

Give them some bloody time, children. It's a job of work, as the old
saying goes.

   mark

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Thanks!   You developers do a mountain of work, it's really appreciated 
greatly!


-->Pat
--

--
Patrick Rael
Contractor, Lumeta Corporation
Network Situational Awareness
Phone: 703-298-3276

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] openssl Security Update for CentOS 6.7 ETA

[Patrick Rael]

On 05/11/2016 09:45 AM, Steve Snyder wrote:


On Wednesday, May 11, 2016 11:20am, "Patrick Rael"  said:


Hi,
 Is there an ETA on the openssl security update (CVE-2016-0799) for
CentOS 6.7?I saw the openssl update for CentOS 7 on 5/9, eagerly
awaiting
the same for 6.7.

Thanks!

Looks like Red Hat pushed it to RHEL v6.8, released yesterday.  Unless CentOS 
does a special back-port we'll have to wait for CentOS v6.8 to get the OpenSSL 
update.

Is there an ETA on CentOS v6.8?Days? Weeks? Months? (years?)
I just need to predict when CVE-2016-0799 will be fixed for CentOS 6.7.
I thought security updates would be available on 6.7 for many more years.

Best regards!



--
Patrick Rael
Contractor, Lumeta Corporation
Network Situational Awareness
Phone: 703-298-3276

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] openssl Security Update for CentOS 6.7 ETA

[Patrick Rael]

Hi,
   Is there an ETA on the openssl security update (CVE-2016-0799) for
CentOS 6.7?I saw the openssl update for CentOS 7 on 5/9, eagerly 
awaiting

the same for 6.7.

Thanks!
-->Pat

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] c6, drbd and file systems

[Patrick Begou]

John R Pierce wrote:

On 5/3/2016 2:52 PM, Clint Dilks wrote:

Are you using SE Linux?  If so does the context for /dev/drbd0 match on
both systems ?


afaik, this has nothing to do with the drbd slave. I reboot the master, 
replication resumes just fine, but the /data filesystem doesn't get 
automounted til I manually mount it.






Any messages in /var/log/boot.log ?

Patrick

--
===
|  Equipe M.O.S.T. |  |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Storage cluster advise, anybody?

[Patrick Begou]

May be this can be a good starting point:

https://pve.proxmox.com/wiki/High_Availability_Cluster

There is also a book "Proxmox High Availability" by Simon M. C. Cheng.

I'm starting to build such a solution to provide NFS service to my CentOS 
clients (i've just received the hardware). I'm using proxmox for a while, but 
without HA at this time, and it is very stable and reliable.


Patrick

Gordon Messmer wrote:

On 04/22/2016 12:24 PM, Digimer wrote:

My requirements are:

This sounds like you want a cloud-type storage, like ceph or gluster.


I agree.  I think either would work.  A cluster with striping and mirroring of 
volumes should fit all the requirements.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos




--
===
|  Equipe M.O.S.T. |      |
|  Patrick BEGOU   | mailto:patrick.be...@grenoble-inp.fr |
|  LEGI|  |
|  BP 53 X | Tel 04 76 82 51 35   |
|  38041 GRENOBLE CEDEX| Fax 04 76 82 52 71   |
===

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Freeradius, openldap and TLS

[Patrick Laimbock]

On 15-04-16 13:14, g wrote:



On 04/15/16 04:29, Patrick Laimbock wrote:

On 15-04-16 00:39, Andrew Daviel wrote:

<<>>

Patrick,

'threading breaking' is against centos etiquette and netiquette.

replying thread breakers does nothing but encourage them to do so again.

many subscribers frown on thread breakers and their responders.

please help good etiquette by not responding to them.

thank you.


Please keep your posting on-list.

It's unclear what you mean. I saw a new message on the ML and responded 
to it. Where did this 'threading breaking' take place?


Patrick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Freeradius, openldap and TLS

[Patrick Laimbock]

On 15-04-16 00:39, Andrew Daviel wrote:


We have a freeradius server using LDAP authentication against openldap.

We have had freeradius-3.0.4-6 on CentOS 7 successfully communicating
with openldap-servers-2.3.43 on CentOS 5.

We need some features in freeradius-3.0.12. When I build that on CentOS
6, it initially works, but then develops TLS errors.

We can search and authenticate against the LDAP server with Apache, and
with ldapsearch using ldaps:// URLs and with start_tls.

If I ask the freeradius community, I am told unequivocally to use
OpenSSL not NSS.


You will hear the same thing from the OpenLDAP Community and will be 
asked to first verify the issue on the latest OpenLDAP with OpenSSL (no 
NSS). Even the latest RHEL7/CentOS7 OpenLDAP packages are behind and 
lack a lot of important bugfixes. If you use (are going to use) MDB 
(highly recommended) or replication then you'll definitely need to use 
the latest OpenLDAP version (with OpenSSL, no NSS).


The OpenLDAP Community usually recommends the free OpenLDAP RPM packages 
built with OpenSSL from http://ltb-project.org or to get supported 
packages from http://www.symas.com also built with OpenSSL.


HTH,
Patrick
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos