Hot answers tagged

60

https://access.redhat.com/discussions/3106621#comment-1196821 Don't forget that you might need to reboot because of core library updates, at least if it is glibc. (And also, services may need to be restarted after updates). If you install the yum-utils package, you can use a command called needs-restarting. You can use it both for checking if a full reboot ...


31

Modify the OPTIONS line in /etc/sysconfig/memcached adding ">> /var/log/memcached 2>&1" on the end. IE OPTIONS="-vv >> /var/log/memcached 2>&1"


18

https://pkgs.org/ provides a "Linux Packages Search" for several distributions, including CentOS 5–7.


13

The most reliable way when lsb_release is not installed is: # rpm -q --queryformat '%{VERSION}' redhat-release-server 6Server # rpm -q --queryformat '%{RELEASE}' redhat-release-server 6.4.0.4.el6 On minimal installs, lsb_release is missing. To get this working also with Red Hat clones (credit goes to comments): # rpm -q --queryformat '%{VERSION}' $(rpm -...


11

From the man page:- "vgrename Zvlifi-Ep3t-e0Ng-U42h-o0ye-KHu1-nl7Ns4 VolGroup00_tmp" changes the name of the Volume Group with UUID Zvlifi-Ep3t-e0Ng-U42h-o0ye-KHu1-nl7Ns4 to "VolGroup00_tmp". ...so for your case:- vgrename zOuHvA-QTBR-wNPs-3GIQ-b2zQ-yOeH-2fBS87 newvolgroupname ...will rename the volume group with ID zOuHvA-QTBR-wNPs-3GIQ-b2zQ-yOeH-...


10

Using 2>&1 >> logfile in the OPTIONS or init script is not wise, as the log file will not get reopened when log rotation occurs, assuming of course that you have put something in place for that to occur. The implication of this is that you'll end up with rotated log files (empty, depending on rotation settings) and your actual log data will be ...


10

This is because after a recent update to openssl on CentOS 6, openssl-1.0.1e-30.el6.11.x86_64, programs using this library started to refuse connecting to servers vulnerable to Logjam TLS vulnerability. You need to configure sendmail to use stronger temporary Diffie–Hellman key — at least 1024 bit. It is not the same key that you use in your TLS certificate,...


8

I assume you've done the basic troubleshooting steps of restarting OMSA (service dataeng restart) and making sure IPMI is loaded: service dataeng stop service dsm_sa_ipmi start service dataeng start One common non-obvious cause of this problem is system semaphore exhaustion. Check your system logs; if you see something like this: Server Administrator (...


8

The user ID of scan is set to 0 (root). Check if /etc/passwd contains two entries for scan. One mapped to root. Otherwise, if you are using any other name services check that these dont export scan as UID 0. And make sure you tell these people mapping multiple accounts to the same UID is not a good idea as you break the separation of privileges you would ...


7

One thing that can be helpful to look at in terms of "is a reboot required" is whether or not there are any files that have been removed/replaced by the update but for which the old files are still loaded/used by active processes. Basically, when YUM updates a file that is in use by a process, the file itself may have been marked for deletion, but the ...


7

uname -a vs. rpm -q kernel and needs-restarting from yum-utils


7

Assuming all the users are local users (that is, there's no network directory service like LDAP, Active Directory, NIS, etc), then local users are probably all enumerated in /etc/passwd, which is a colon delimited file with the following fields: username:password:uid:gid:name:home directory:shell You can get just the usernames and home directories, if that'...


7

Looking at top output is completely wrong. It's about the IOPS. To get a view on the NFS statistics, use nfsstat: Server rpc stats: calls badcalls badauth badclnt xdrcall 40833255 0 0 0 0 Server nfs v3: null getattr setattr lookup access readlink 0 0% 1411374 3% ...


7

Your lvextend command is incorrect. You told it to 'make the logical volume the size of 100% of the free space.' I think you intended to say 'make the logical volume GROW by the size of 100% of the free space.' lvextend -l 100%FREE /dev/VolGroup00/LogVol01 Should be: lvextend -l +100%FREE /dev/VolGroup00/LogVol01 Note the '+'.


6

Disabling Large Send Offload may fix that. Ive seen 15k and even 30k packets, regardless of MTU.


6

Unless you're looking for some specific version a 3rd party package has been compiled against, it's called curl-devel in RHEL 5. yum install curl-devel # rpm -qpl curl-devel-7.15.5-17.el5_9.x86_64.rpm | grep libcurl /usr/lib64/libcurl.a /usr/lib64/libcurl.so /usr/lib64/pkgconfig/libcurl.pc /usr/share/man/man3/libcurl-easy.3.gz /usr/share/man/man3/libcurl-...


5

I wouldn't run the upgrade process this way if you're planning to perform in-place transitions from EL5 to EL6. It's not an easy or clean process. See: Why is it so difficult to upgrade between major versions of Red Hat and CentOS? and Upgrade CentOS 5.x to CentOS 6.x - tips and techniques However, you have the right idea of testing this in a limited-...


5

%sy indicates both the time spent in kernel processes (really kernel threads), and those parts of the kernel which are not processes. Kernel processes show up normally in top (ksoftirqd/0 is one). If you are sorting by instantaneous CPU usage, and it is a kernel process contributing to %sy, that process would show up. However, if it is not a kernel ...


5

Clearly, your svnserve process runs as root. So change the configuration to run that process as some non-privileged user (it's not clear exactly how svnserve is started from your description; could be xinetd or something else). Securety-wise, the best approach IMO would be to add both apache and the snvserve user to a common group (like 'svn') and change ...


4

login - rules for local (console login) system-auth - common rules many services password-auth - common rules for many remote services sshd - rules for SSHD daemon only


4

For the CentOS 7 AMI, set a static hostname by commenting out the lines: - set_hostname - update_hostname in /etc/cloud/cloud.cfg. The comment character for YAML is #. This is in addition to setting the hostname normally.


4

If your server has Plesk ProFTPD daemon is xinetd. Use /etc/init.d/xinetd restart


4

You should be able to modify your svnserv startup script to run as a different user. take a look at https://gist.github.com/dexterbt1/905615 with the relevant part being start() { echo -n $"Starting $desc ($prog): " daemon --user $USER $prog -d $OPTIONS RETVAL=$? [ $RETVAL -eq 0 ] && touch /var/lock/subsys/$prog echo } ...


4

Try umount -a -t autofs. This will umount every autofs mount.


4

You want to boot with "init=/bin/sh" instead of "single" appended to the Grub kernel command line. Once up, remount / at the command line with, mount -o remount,rw / Then make your password changes and reboot.


3

As has been pointed out, colocated servers, lacking that random human being to create entropy, generally don't have much of it to spare. If you have a physical server with a spare USB port, and a demonstrable need for high-grade entropy, you could do worse than get yourself an Entropy Key. I don't normally recommend specific products on SF, but I rather ...


3

I've been using option exactarch=1 in /etc/yum.conf for some time, and it has worked for me. It still allows you to manually specify arch, but if you don't, it install only x86_64, not both. According to el6 manual, yum.conf(5): exactarch Either ‘1’ or ‘0’. Set to ‘1’ to make yum update only update the architectures of packages that ...


3

If you write a redhat-style init script, the daemon function has a --user option. daemon --user=$runasuser --pidfile="$PIDFILE" $yourbinary $youroptions


3

I prefer hostnamectl: $ hostnamectl Static hostname: xxxxxx.xxx.xxx Icon name: computer-server Chassis: server Machine ID: 3e3038756eaf4c5c954ec3d24f35b13f Boot ID: 958452e0088b4191a4ea676ebc90403b Operating System: Red Hat Enterprise Linux Server 7.5 (Maipo) CPE OS Name: cpe:/o:redhat:enterprise_linux:7.5:...


3

Ultimately Sergey is right - this is a driver problem. But let's check things out first: First off you'll want to use the deadline I/O scheduler rather than CFQ. deadline, as its name implies, ensures that all IOPs complete in a timely manner. Grab the events from the megaraid card: megacli -adpeventlog -getevents -f /tmp/megaraid-$(date +%F_%T) -aALL ...


Only top voted, non community-wiki answers of a minimum length are eligible