users November 2020

users@lists.fedoraproject.org

127 participants
147 discussions

Re: F32 bind9 split dns debug
by J.Witvliet＠mindef.nl 13 Nov '20

13 Nov '20

The allow-query { internals; } might be something worth tinkering.... From: "Jack Craig" <jack.craig.aptos(a)gmail.com<mailto:jack.craig.aptos@gmail.com>> Date: Friday, 13 November 2020 at 08:03:43 To: "Community support for Fedora users" <users(a)lists.fedoraproject.org<mailto:users@lists.fedoraproject.org>> Subject: F32 bind9 split dns debug hi all, any dns pros in the house?? i am trying to debug a split view dns. i am using F32 & bind9 where i have internal & external views. internal network 10.0.0.0/24<http://10.0.0.0/24>, external 108.220.213.120/29<http://108.220.213.120/29> what i think i am seeing is a refusal of query, but Why?? where can i find a query_log print-severity definition? dig shows, ... dig ws.linuxlighthouse.com<http://ws.linuxlighthouse.com> ns ; <<>> DiG 9.11.23-RedHat-9.11.23-1.fc32 <<>> ws.linuxlighthouse.com<http://ws.linuxlighthouse.com> ns ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 45484 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>. IN NS ;; Query time: 355 msec ;; SERVER: 10.0.0.1#53(10.0.0.1) ;; WHEN: Thu Nov 12 22:53:45 PST 2020 ;; MSG SIZE rcvd: 51 dig 108.220.213.121 ; <<>> DiG 9.11.23-RedHat-9.11.23-1.fc32 <<>> 108.220.213.121 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46338 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;108.220.213.121. IN A ;; ANSWER SECTION: 108.220.213.121. 0 IN A 108.220.213.121 ;; Query time: 1 msec ;; SERVER: 10.0.0.1#53(10.0.0.1) ;; WHEN: Thu Nov 12 22:54:52 PST 2020 ;; MSG SIZE rcvd: 60 suggestions? tia, jackc... my named.conf /* top of file */ acl slaves { 108.220.213.122; }; acl internals { 10.0.0.0/24<http://10.0.0.0/24>; 127.0.0.0/8<http://127.0.0.0/8>; }; /* 108.220.213.120/29<http://108.220.213.120/29>; */ options { // Put files that named is allowed to write in the data/ directory: directory "/var/named"; // "Working" directory dump-file "data/cache_dump.db"; statistics-file "data/named_stats.txt"; memstatistics-file "data/named_mem_stats.txt"; secroots-file "data/named.secroots"; recursing-file "data/named.recursing"; listen-on port 53 { localhost; }; listen-on-v6 port 53 { any; }; allow-query { internals; }; allow-query-cache { any; }; allow-transfer { 108.220.213.120/29<http://108.220.213.120/29>; }; recursion yes; forwarders { 8.8.8.8; 8.8.4.4; }; /* DNSSEC related options. See information about keys ("Trusted keys", bellow) */ /* Enable serving of DNSSEC related data - enable on both authoritative and recursive servers DNSSEC aware servers */ dnssec-enable yes; /* Enable DNSSEC validation on recursive servers */ dnssec-validation yes; /* In Fedora we use /run/named instead of default /var/run/named so we have to configure paths properly. */ pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key"; managed-keys-directory "/var/named/dynamic"; /* In Fedora we use system-wide Crypto Policy */ /* https://fedoraproject.org/wiki/Changes/CryptoPolicy */ include "/etc/crypto-policies/back-ends/bind.config"; /* use querylog all the time rndc */ querylog yes; }; logging { channel default_file { file "/var/log/named/default.log" versions 3 size 5m; severity dynamic; print-time yes; print-category yes; print-severity yes; }; default.log:12-Nov-2020 22:16:58.021 query-errors: info: client @0x7f99e01bab90 60.215.138.163#62853 (ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>): view external-wan-view: query failed (REFUSED) for ws.linuxlighthouse.com/IN/AAAA<http://ws.linuxlighthouse.com/IN/AAAA> at ../../../bin/named/query.c:7270 default.log:12-Nov-2020 22:16:58.503 query-errors: info: client @0x7f99e01bab90 60.215.138.163#48181 (ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>): view external-wan-view: query failed (REFUSED) for ws.linuxlighthouse.com/IN/A<http://ws.linuxlighthouse.com/IN/A> at ../../../bin/named/query.c:7270 default.log:12-Nov-2020 22:16:59.036 query-errors: info: client @0x7f99e01bab90 60.215.138.163#52399 (ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>): view external-wan-view: query failed (REFUSED) for ws.linuxlighthouse.com/IN/A<http://ws.linuxlighthouse.com/IN/A> at ../../../bin/named/query.c:7270 channel security_file { severity debug 2; file "/var/log/named/security.log" versions 3 size 5m; print-time yes; print-category yes; print-severity yes; }; security.log:12-Nov-2020 22:16:58.021 client @0x7f99e01bab90 60.215.138.163#62853 (ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>): view external-wan-view: query 'ws.linuxlighthouse.com/AAAA/IN<http://ws.linuxlighthouse.com/AAAA/IN>' denied security.log:12-Nov-2020 22:16:58.503 client @0x7f99e01bab90 60.215.138.163#48181 (ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>): view external-wan-view: query 'ws.linuxlighthouse.com/A/IN<http://ws.linuxlighthouse.com/A/IN>' denied security.log:12-Nov-2020 22:16:59.036 client @0x7f99e01bab90 60.215.138.163#52399 (ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>): view external-wan-view: query 'ws.linuxlighthouse.com/A/IN<http://ws.linuxlighthouse.com/A/IN>' denied channel queries_file { file "/var/log/named/queries.log" versions 3 size 5m; severity debug 3; print-time yes; print-category yes; print-severity yes; }; queries.log:12-Nov-2020 22:16:58.021 queries: info: client @0x7f99e01bab90 60.215.138.163#62853 (ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>): view external-wan-view: query: ws.linuxlighthouse.com<http://ws.linuxlighthouse.com> IN AAAA -E(0)DC (10.0.0.101) queries.log:12-Nov-2020 22:16:58.503 queries: info: client @0x7f99e01bab90 60.215.138.163#48181 (ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>): view external-wan-view: query: ws.linuxlighthouse.com<http://ws.linuxlighthouse.com> IN A -E(0)DC (10.0.0.101) queries.log:12-Nov-2020 22:16:59.036 queries: info: client @0x7f99e01bab90 60.215.138.163#52399 (ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>): view external-wan-view: query: ws.linuxlighthouse.com<http://ws.linuxlighthouse.com> IN A -E(0)DC (10.0.0.101) category default { default_file; }; category general { general_file; }; category database { database_file; }; category security { security_file; }; category config { config_file; }; category resolver { resolver_file; }; category xfer-in { xfer-in_file; }; category xfer-out { xfer-out_file; }; category notify { notify_file; }; category client { client_file; }; category unmatched { unmatched_file; }; category queries { queries_file; }; category network { network_file; }; category update { update_file; }; category dispatch { dispatch_file; }; category dnssec { dnssec_file; }; category lame-servers { lame-servers_file; }; }; include "/etc/rndc.key"; controls { inet 127.0.0.1 allow { localhost; } keys { "rndc-key"; }; }; /* This view will contain zones you want to serve only to "internal" clients that connect via your directly attached LAN interfaces - "localnets" . */ view "internal-lan-view" { match-clients { internals; }; recursion yes; zone "linuxlighthouse.com<http://linuxlighthouse.com>" { type master; file "/var/named/internal.db"; }; }; /* This view will contain zones you want to serve only to "external" clients that have addresses that are not match any above view: */ view "external-wan-view" { match-clients { any; }; recursion no; zone "linuxlighthouse.com<http://linuxlighthouse.com>" { type master; file "/var/named/linuxlighthouse.com.db"; allow-query { any; }; /* allow-transfer { slaves; }; */ }; zone "213.220.108.in-addr.arpa" { type master; file "/var/named/213.220.108.in-addr.arpa"; allow-query { any; }; }; }; ; Authoritative data for linuxlighthouse.com<http://linuxlighthouse.com> zone ; ; $ORIGIN linuxlighthouse.com<http://linuxlighthouse.com>. $TTL 86400 @ IN SOA ws.linuxlighthouse.com<http://ws.linuxlighthouse.com>. root.linuxlighthouse.com<http://root.linuxlighthouse.com>. ( 2020101601 ; serial 1D ; refresh 1H ; retry 1W ; expire 86400 ) ; minimum ; ;jack.craig.aptos(a)gmail.com<mailto:jack.craig.aptos@gmail.com> ; @ IN NS ws IN MX 10 mail IN A 108.220.213.121 ws IN A 108.220.213.121 www IN A 108.220.213.121 mail IN A 108.220.213.121 ; cname later ;ws2 IN A 68.94.157.1 ;dns157r8.sbcglobal.net<http://dns157r8.sbcglobal.net>. IN A 68.94.157.8 ; ; DNSSEC/CAA setup ; example.org<http://example.org>. CAA 128 issue "letsencrypt.org<http://letsencrypt.org>" ; linuxlighthouse.com<http://linuxlighthouse.com>. CAA 128 issue "letsencrypt.org<http://letsencrypt.org>" ; $include "/var/named/linuxlighthouse.com.db" @ IN A 10.0.0.1 ws IN A 10.0.0.101 www IN A 10.0.0.101 ws2 IN A 10.0.0.102 [jackc@ws ~$ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

2 1

Need help with rsync
by ToddAndMargo 13 Nov '20

13 Nov '20

Hi All, I am trying to use rsync to 1) copy new files on the source to the destination 2) remove all files on the destination that do not reside on the source Problem: the extra files on the destination are not being removed. This is bash code: Synchronize () { # $1 rsync command local Cmd="rsync ${1}" echo "${Cmd}" sync; sync eval "${Cmd}" sync; sync echo "-----------------------------"; echo "" } Options="--recursive --verbose --delete --delete-excluded --modify-window=5 --times --inplace --copy-links " ExcludeLinux="--exclude='wine-*'" Synchronize "${Options} ${ExcludeLinux} ${MyCDsSource}/Linux ${MyCDsTarget}/." Synchronize "${Options} ${MyCDsSource}/WindowsInternet ${MyCDsTarget}/." ... [eleven more] What am I missing? Many thanks, -T

3 7

rsync and weird characters, Invalid argument (22)
by ToddAndMargo 12 Nov '20

12 Nov '20

Hi All, How do I get rsync to recognize weird characters that my file system is okay with? Many thanks, -T rsync --recursive --verbose --delete --delete-excluded --modify-window=5 --times --inplace --copy-links /home/CDs/Keepers /mnt/MyCDs/. sending incremental file list Keepers/Linux/core.dumps.txt Keepers/Linux/Perl/Perl5/perl.->.txt Keepers/Linux/Perl/Perl5/perl.HTTP::Response.html Keepers/Linux/Perl/Perl5/perl.Net::Nslookup.host.html Keepers/Linux/Perl/Perl6/perl6.*@.**@.slurp.txt Keepers/Linux/Perl/Perl6/perl6.<>{}<<>>.txt Keepers/Linux/Perl/Perl6/perl6.prefix:.txt rsync: [receiver] open "/mnt/MyCDs/Keepers/Linux/Perl/Perl5/perl.->.txt" failed: Invalid argument (22) rsync: [receiver] open "/mnt/MyCDs/Keepers/Linux/Perl/Perl5/perl.HTTP::Response.html" failed: Invalid argument (22) rsync: [receiver] open "/mnt/MyCDs/Keepers/Linux/Perl/Perl5/perl.Net::Nslookup.host.html" failed: Invalid argument (22) rsync: [receiver] open "/mnt/MyCDs/Keepers/Linux/Perl/Perl6/perl6.*@.**@.slurp.txt" failed: Invalid argument (22) rsync: [receiver] open "/mnt/MyCDs/Keepers/Linux/Perl/Perl6/perl6.<>{}<<>>.txt" failed: Invalid argument (22) rsync: [receiver] open "/mnt/MyCDs/Keepers/Linux/Perl/Perl6/perl6.prefix:.txt" failed: Invalid argument (22) Keepers/Thunderbird/Th.??.txt Keepers/Thunderbird/Th.Ã¯Â¿Â½.space.issue.txt rsync: [receiver] open "/mnt/MyCDs/Keepers/Thunderbird/Th.??.txt" failed: Invalid argument (22) rsync: [receiver] open "/mnt/MyCDs/Keepers/Thunderbird/Th.\#303\#203\#302\#257\#303\#202\#302\#277\#303\#202\#302\#275.space.issue.txt" failed: Invalid argument (22) Keepers/Windows/Batch/batch.||.&&.txt rsync: [receiver] open "/mnt/MyCDs/Keepers/Windows/Batch/batch.||.&&.txt" failed: Invalid argument (22)

3 4

coredump problems
by Neal Becker 12 Nov '20

12 Nov '20

I install the latest tortoisehg using pip --user. It is segfaulting (coredumped). However, there is no core. ulimit -c says unlimited. coredumpclt list does not show it (should be python actually) /var/log/messages shows: Nov 12 08:47:53 nbecker2 systemd[1]: Started Process Core Dump (PID 1460045/UID 0). Nov 12 08:47:53 nbecker2 systemd-coredump[1460045]: Failed to send coredump datagram: No buffer space available Nov 12 08:47:53 nbecker2 kwin_x11[1845]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 40052, resource id: 127926278, major code: 15 (QueryTree), minor code: 0 Nov 12 08:47:53 nbecker2 kwin_x11[1845]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 40097, resource id: 127926320, major code: 15 (QueryTree), minor code: 0 Nov 12 08:47:53 nbecker2 kwin_x11[1845]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 40102, resource id: 127926320, major code: 18 (ChangeProperty), minor code: 0 Nov 12 08:47:53 nbecker2 systemd-coredump[1460046]: Coredump file descriptor missing. Nov 12 08:47:53 nbecker2 systemd[1]: systemd-coredump(a)5-1460045-0.service: Succeeded. Nov 12 08:47:53 nbecker2 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-coredump@5-1460045-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Any ideas? Thanks, Neal -- *Those who don't understand recursion are doomed to repeat it*

2 2

Fedora on a remote mac
by S Bob 12 Nov '20

12 Nov '20

Hi all; I have a Fedora 33 laptop. I also have a mac running OSX 10.15 I want to run firefox on the mac but display it on the Fedora laptop. Is there a way to do this with tunneling?

2 1

python-enum34 for ceph
by Eyal Lebedinsky 12 Nov '20

12 Nov '20

For a few weeks now I get this error for "dnf update" nothing provides python-enum34 needed by ceph-mgr-2:14.2.12-1.fc32.x86_64 I hoped this is a timing issue and the module will show up, but the error still persists. The result is 14 errors and a result: =================================================================================================== Package Architecture Version Repository Size =================================================================================================== Skipping packages with conflicts: (add '--best --allowerasing' to command line to force their upgrade): ceph-base x86_64 2:14.2.12-1.fc32 updates 4.9 M ceph-common x86_64 2:14.2.12-1.fc32 updates 17 M ceph-grafana-dashboards noarch 2:14.2.12-1.fc32 updates 26 k ceph-selinux x86_64 2:14.2.12-1.fc32 updates 30 k libcephfs2 x86_64 2:14.2.12-1.fc32 updates 525 k librados2 x86_64 2:14.2.12-1.fc32 updates 3.4 M librbd1 x86_64 2:14.2.12-1.fc32 updates 1.7 M Skipping packages with broken dependencies: ceph-mgr x86_64 2:14.2.12-1.fc32 updates 1.6 M ceph-mgr-dashboard noarch 2:14.2.12-1.fc32 updates 3.5 M ceph-mgr-diskprediction-cloud noarch 2:14.2.12-1.fc32 updates 43 k ceph-mgr-diskprediction-local noarch 2:14.2.12-1.fc32 updates 1.1 M ceph-mgr-k8sevents noarch 2:14.2.12-1.fc32 updates 26 k ceph-mgr-rook noarch 2:14.2.12-1.fc32 updates 19 k ceph-mgr-ssh noarch 2:14.2.12-1.fc32 updates 20 k This does not help: --best --allowerasing Neither does this: --best --allowerasing --skip-broken On ceph.io I see that version 14.2.13 may have it resolved - is it in our pipeline? In https://bodhi.fedoraproject.org/releases/F32 I do not see a new ceph release or a python-enum34 package. How can this issue be resolved? TIA -- Eyal Lebedinsky (fedora(a)eyal.emu.id.au)

3 5

f32:: teamd process takes 100% cput
by Adrian Sevcenco 12 Nov '20

12 Nov '20

Hi! I have a strange situation where my teamd process take 100% processor without having any kind of traffic (beside my ssh connection) I thought that is a NM problem and i disabled the connectivity check of NM .. does anyone encountered this and have any idea of the problem? Thanks a lot! Adrian

2 7

Run Firefox on a remote mac with display on my Linux laptop
by S Bob 12 Nov '20

12 Nov '20

Hi all; I have a Fedora laptop, and a mac laptop (OSX 10.15) Is there a method I can use to run firefon on the mac and have it display on my Fedora laptop? Thanks in advance Sorry if this seems to be a dupe, my previous subject line was unclear

3 2

Anaconda RAID levels
by Matti Pulkkinen 12 Nov '20

12 Nov '20

Hello! I tried looking at the documentation for installing Fedora[1], but didn't see an explanation of what raid level "single" means in Anaconda. If I select two disks for a volume, and then select single level RAID, does this mean I'm actually only using one disk, or is it somehow equivalent to one of the other RAID levels, or something else entirely? [1] https://docs.fedoraproject.org/en-US/fedora/f33/install-guide/install/Insta… -- Terveisin / Regards, Matti Pulkkinen

3 9

Swap on BTRFS
by Patrick O'Callaghan 11 Nov '20

11 Nov '20

The swapon(8) man page says: The swap file implementation in the kernel expects to be able to write to the file directly, without the assistance of the filesystem. This is a problem on files with holes or on copy-on-write files on filesystems like Btrfs. As I'm getting OOM errors when I try to run a VM, it looks like I need a swap file or partition. I'd prefer to use part of my (large) SSD for this, but currently it's entirely formatted as BTRFS. Do I need to resize the BTRFS partition rather than using a swap file? poc

7 26

← Newer
1
...
7
8
9
10
11
12
13
14
15
Older →

Jump to page: