users May 2019

users@lists.fedoraproject.org

130 participants
127 discussions

No console login prompt
by Michael Eager 20 May '19

20 May '19

I'm running Fedora 30 in a LXC container (the host is CentOS 7). When I start the container, I get the usual console messages, then nothing. I do not get a login prompt. When I attach to the container and run systemctl, I don't see console-getty.service running. When I try to start it, systemctl says it is masked. Unmasking and starting console-getty.service gives me the missing login prompt. Does anyone know why console-getty.service is masked by default? -- Michael Eager eager(a)eagerm.com 1960 Park Blvd., Palo Alto, CA 94306

2 3

Fedora and the MDS CVEs
by Justin Forbes 20 May '19

20 May '19

For those of you wondering the Fedora status of the MDS CVEs that went public on Tuesday. Here is where we stand: kernel-5.0.16 and microcode_ctl-2.1-29 contain the initial mitigations for kernel/microcode, and are in stable updates for F29 and F30, The kernel is still in updates-testing for F28 as it needs karma, but should make it to regular updates soon. libvirt and qemu have updates in updates-testing across all releases. F29 and F30 updates will push to stable today, and F28 still needs karma. All updates, once they hit stable, may take a day or two to reach all mirrors, so if you do not see it available, you can keep trying, or go directly to the main mirror. If you do not know what the MDS CVEs are, or would like more infomation on them, there is a good write up at https://access.redhat.com/security/vulnerabilities/mds Thanks, Justin

2 1

Re: Planned Outage - Fedora Core Services 2019-04-10 21:00 UTC
by Tim 20 May '19

20 May '19

On Sun, 2019-05-19 at 19:16 -0400, Stephen John Smoogen wrote: > There will be an outage starting at 2019-04-10 21:00 UTC , > which will last approximately 5 hours. Hmm, today there will be an outage last month? ;-)

1 0

TigerVNC fails to display new windows properly
by Alex 20 May '19

20 May '19

Hi, I've installed tigervnc according to the instructions here for a new fedora30 install: https://www.server-world.info/en/note?os=Fedora_28&p=desktop&f=6 mate-desktop doesn't seem to work properly, so I've just stuck with the default xinitrc, which produces the default fedora30 desktop. I can connect to the remote machine after providing authorization, then the local authorization at least twice and finally getting to the remote desktop. It appears as it normally does, with "Activities" in the upper-left. The problem is that after starting any applications, whether it's the file manager, Firefox, or a regular terminal, it starts, but the app does not appear. I believe it's being directed to another display. Is that possible? I've started the application, and I can confirm it's running by connecting to the machine via ssh and finding it in the process list, but it just doesn't display on the remote desktop. I don't have physical access to the machine to see if the app is started on the default desktop. Here is my ~/.vnc/xstartup: $ cat xstartup #!/bin/sh unset SESSION_MANAGER unset DBUS_SESSION_BUS_ADDRESS exec /etc/X11/xinit/xinitrc #exec /usr/bin/mate-session Here is the log file that is produced after starting vncserver: $ cat localhost.localdomain\:1.log Xvnc TigerVNC 1.9.0 - built Feb 3 2019 09:54:51 Copyright (C) 1999-2018 TigerVNC Team and many others (see README.rst) See http://www.tigervnc.org for information on TigerVNC. Underlying X server release 12003000, The X.Org Foundation Thu May 16 20:28:43 2019 vncext: VNC extension running! vncext: Listening for VNC connections on all interface(s), port 5901 vncext: created VNC server for screen 0 Thu May 16 20:28:47 2019 ComparingUpdateTracker: 0 pixels in / 0 pixels out ComparingUpdateTracker: (1:-nan ratio) Thu May 16 20:29:02 2019 Connections: accepted: 68.195.199.42::37586 SConnection: Client needs protocol version 3.8 SConnection: Client requests security type VeNCrypt(19) SVeNCrypt: Client requests security type TLSVnc (258) VNCSConnST: Server default pixel format depth 24 (32bpp) little-endian rgb888 VNCSConnST: Client pixel format depth 24 (32bpp) little-endian rgb888 Here is the command I run on the local machine to start the vncserver as the regular user (gary): $ vncserver :1 -geometry 800x600 -depth 24 Here is what the vncserver command shows in the process table: $ ps ax|grep vnc 6991 pts/5 Sl 0:05 /usr/bin/Xvnc :1 -auth /home/gary/.Xauthority -depth 24 -desktop localhost.localdomain:1 (gary) -fp catalogue:/etc/X11/fontpath.d -geometry 800x600 -pn -rfbauth /home/gary/.vnc/passwd -rfbport 5901 -rfbwait 30000 The reason the hostname is displayed as "localhost.localdomain" is because it's on a private IP range (192.168.9.110) without DNS, and I'm using port forwarding from the cable modem to this host for port 5900 through 6000. Ideas greatly appreciated.

3 2

getfedora.org/keys 404
by raviprakash06 19 May '19

19 May '19

Hi! Thanks for building an excellent Linux distro that I have been using for about 16 versions now :-) In trying to upgrade my Fedora 29 to Fedora 30, using the instructions listed on this page : https://fedoraproject.org/wiki/DNF_system_upgrade , I was prompted to verify trust in the RPM signing keys. Fedora Modular 30 - x86_64 1.6 MB/s | 1.6 kB 00:00 Importing GPG key 0xCFC659B9: Userid : "Fedora (30) <fedora-30-primary(a)fedoraproject.org>" Fingerprint: F1D8 EC98 F241 AAF2 0DF6 9420 EF3C 111F CFC6 59B9 From : /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-30-x86_64 Is this ok [y/N]: When I searched for the fingerprint to verify it (which I like to do so that I can trust the keys atleast as much as I trust the TLS certificate) , my first result was for the page https://getfedora.org/keys/ . However clicking on that link now gives me a 404. I ended up using a version of the page cached by the search engine to verify the keys. Has something else replaced the page? Or maybe was it inadvertently not published? Thanks Ravi

5 6

Fedora 30 install - no wifi
by Geoffrey Leach 17 May '19

17 May '19

This refers to a fresh install of Fedora 30 (Xfce spin) on a laptop that was previously running F25 with no problems. Install took place using a hardwire connection. After install, /etc/hosts was updated and the wifi using the GUI Using the instructions in https://www.blackmoreops.com/2014/09/18/connect-to-wifi-network-from-comman… here's what I have. I've verified that the MAC address of the router is correct. The password supplied is the network password. Suggestions for further diagnostics and/or a fix will be greatly appreciated. # iw dev phy#0 Unnamed/non-netdev interface wdev 0x2 addr a0:a8:cd:ed:9a:09 type P2P-device txpower 0.00 dBm Interface wlp3s0 ifindex 3 wdev 0x1 addr 2e:f0:d8:c5:1e:3e type managed txpower 0.00 dBm # ip link set wlp3s0 up # iw wlp3s0 scan BSS e4:f4:c6:14:f9:1f(on wlp3s0) last seen: 297.765s [boottime] TSF: 10805719880 usec (0d, 03:00:05) freq: 5765 beacon interval: 100 TUs capability: ESS Privacy RadioMeasure (0x1011) signal: -25.00 dBm last seen: 354 ms ago Information elements from Probe Response frame: SSID: NETGEAR78 Supported rates: 6.0* 9.0 12.0* 18.0 24.0* 36.0 48.0 54.0 RSN: * Version: 1 * Group cipher: CCMP * Pairwise ciphers: CCMP * Authentication suites: PSK * Capabilities: 16-PTKSA-RC 1-GTKSA-RC (0x000c) BSS Load: * station count: 0 * channel utilisation: 0/255 * available admission capacity: 0 [*32us] HT capabilities: Capabilities: 0x9ef RX LDPC HT20/HT40 SM Power Save disabled RX HT20 SGI RX HT40 SGI TX STBC RX STBC 1-stream Max AMSDU length: 7935 bytes No DSSS/CCK HT40 Maximum RX AMPDU length 65535 bytes (exponent: 0x003) Minimum RX AMPDU time spacing: 4 usec (0x05) HT RX MCS rate indexes supported: 0-23 HT TX MCS rate indexes are undefined HT operation: * primary channel: 153 * secondary channel offset: below * STA channel width: any * RIFS: 1 * HT protection: no * non-GF present: 0 * OBSS non-GF present: 0 * dual beacon: 0 * dual CTS protection: 0 * STBC beacon: 0 * L-SIG TXOP Prot: 0 * PCO active: 0 * PCO phase: 0 Extended capabilities: * Extended Channel Switching * BSS Transition * Operating Mode Notification * Max Number Of MSDUs In A-MSDU is unlimited VHT capabilities: VHT Capabilities (0x0f8259b2): Max MPDU length: 11454 Supported Channel Width: neither 160 nor 80+80 RX LDPC short GI (80 MHz) TX STBC SU Beamformer SU Beamformee VHT RX MCS set: 1 streams: MCS 0-9 2 streams: MCS 0-9 3 streams: MCS 0-9 4 streams: not supported 5 streams: not supported 6 streams: not supported 7 streams: not supported 8 streams: not supported VHT RX highest supported: 0 Mbps VHT TX MCS set: 1 streams: MCS 0-9 2 streams: MCS 0-9 3 streams: MCS 0-9 4 streams: not supported 5 streams: not supported 6 streams: not supported 7 streams: not supported 8 streams: not supported VHT TX highest supported: 0 Mbps VHT operation: * channel width: 1 (80 MHz) * center freq segment 1: 155 * center freq segment 2: 0 * VHT basic MCS set: 0x0000 WPS: * Version: 1.0 * Wi-Fi Protected Setup State: 2 (Configured) * Response Type: 3 (AP) * UUID: daefb3b6-e5b1-95e3-b129-6eff7b6db709 * Manufacturer: NETGEAR, Inc. * Model: R7000 * Model Number: R7000 * Serial Number: 32 * Primary Device Type: 6-0050f204-1 * Device name: R7000 * Config methods: Display * RF Bands: 0x3 * Unknown TLV (0x1049, 6 bytes): 00 37 2a 00 01 20 WMM: * Parameter version 1 * u-APSD * BE: CW 15-1023, AIFSN 3 * BK: CW 15-1023, AIFSN 7 * VI: CW 7-15, AIFSN 2, TXOP 6016 usec * VO: CW 3-7, AIFSN 2, TXOP 3264 usec # wpa_passphrase NETGEAR78 >> /etc/wpa_supplicant/wpa_supplicant.conf xxxxxxxxxxxx # wpa_supplicant -i wlp3s0 -c /etc/wpa_supplicant/wpa_supplicant.conf Successfully initialized wpa_supplicant nl80211: Could not set interface 'p2p-dev-wlp3s0' UP nl80211: deinit ifname=p2p-dev-wlp3s0 disabled_11b_rates=0 p2p-dev-wlp3s0: Failed to initialize driver interface P2P: Failed to enable P2P Device interface wlp3s0: SME: Trying to authenticate with e4:f4:c6:14:f9:1f (SSID='NETGEAR78' freq=5765 MHz) wlp3s0: Trying to associate with e4:f4:c6:14:f9:1f (SSID='NETGEAR78' freq=5765 MHz) wlp3s0: Associated with e4:f4:c6:14:f9:1f wlp3s0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 wlp3s0: WPA: Key negotiation completed with e4:f4:c6:14:f9:1f [PTK=CCMP GTK=CCMP] wlp3s0: CTRL-EVENT-CONNECTED - Connection to e4:f4:c6:14:f9:1f completed [id=0 id_str=] wlp3s0: CTRL-EVENT-DISCONNECTED bssid=e4:f4:c6:14:f9:1f reason=3 locally_generated=1 nl80211: deinit ifname=wlp3s0 disabled_11b_rates=0 wlp3s0: CTRL-EVENT-TERMINATING ^C

1 0

OTP check via API
by Adam Bishop 17 May '19

17 May '19

Is there an API endpoint I can use to perform OTP verification without the users password (i.e. just with their DN or uid)? I've got a non-web application with its own authentication system that I'd like to add MFA to, and I'd rather avoid copying the OTP secrets to it or re-writing the application.

1 1

nvidia-settings causing problems
by Alan 17 May '19

17 May '19

I have not filed a bug on this because it is from rpmfusion-nonfree repository, but the cause will be unclear to most users. What happens is if you have the nvidia-settings app installed, after a while the X server will no longer open any windows. xlsclients will show a bunch of nvidia-settings connections. This number grows until you hit the limit and nothing else will open. This did not happen with F29, so I expect it is something old and left over that is causing problems. I will be reporting this to the rpmfusion people as soon as I have a login on their bugzilla.

3 4

auto mount and unmount using udev rules
by Danishka Navin 17 May '19

17 May '19

Hi, I am trying to mount a USB drive to given symlink and mount it to a given mount point. Mount is working but when the device removed, I can still see the mount cat /etc/udev/rules.d/81-hnt-usb-rule.rules ACTION=="add", KERNEL=="sd?1", SUBSYSTEM=="block", ENV{ID_BUS}=="usb", \ SYMLINK+="hanthana%n", ENV{SYSTEMD_WANTS}="hnt-usb-rule.service" ACTION=="remove", RUN+="/usr/bin/umount $(/usr/bin/mount | grep backup | /usr/bin/awk '{print $1}')" ------------------------------------------------------------------------------------------------ [danishka@hanthana ~]$ cat /etc/systemd/system/hnt-usb-rule.service [Unit] Description=USB Mount [Service] Type=oneshot ExecStart=/root/hnt.sh [Install] WantedBy=default.target ---------------------------------------------------------------------------------------------------------- cat /root/hnt.sh #!/bin/bash mkdir /backup lsblk > /var/log/hnt.log /usr/bin/mount /dev/hanthana1 /backup ------------------------------------------------------------------------------------------------ ACTION=="remove", RUN+="/usr/bin/umount $(/usr/bin/mount | grep backup | /usr/bin/awk '{print $1}')" [root@hanthana ~]# echo $(/usr/bin/mount | grep backup | /usr/bin/awk '{print $1}') /dev/sda1 Even though you can't access /backup after removing the USB, mount command shows following results (After plugin the usb and remove several times). I wonder why it automatically remove these entries as fedora normally mount USBs on default location. /dev/sda1 on /backup type ext4 (rw, relatime, seclabel) /dev/sdb1 on /backup type ext4 (rw, relatime, seclabel) /dev/sdc1 on /backup type ext4 (rw, relatime, seclabel) /dev/sdd1 on /backup type ext4 (rw, relatime, seclabel) I was testing on both Fedora 28 Gnome and LXDE. Regards, -- Danishka Navin

2 2

why the long pause after bash "command not found"?
by Robert P. J. Day 17 May '19

17 May '19

i'm finally annoyed enough about this to just ask ... on a regular basis, i mistype a command and (predictably) get: bash: xxx: command not found... but, quite often, rather than getting a bash prompt back immediately, there is a loooooooong pause, as i wait, and wait, and wait for a new prompt, finally running out of patience and breaking with ^C to get a new prompt. what in the name of mutt is bash doing all that time? if there's no such command, why the long pause in giving me a new prompt? rday -- ======================================================================== Robert P. J. Day Ottawa, Ontario, CANADA http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday ========================================================================

8 9

← Newer
1
2
3
4
5
6
7
8
9
...
13
Older →