SecureBoot : rolling out new shim pkgs for CentOS 7.5.1804 in CR repository - asking for testers/feedback

When we consolidated all CentOS Distro builders in a new centralized
setup, covering all arches (so basically x86_64, i386, ppc64le, ppc64,
aarch64 and armhfp those days), we wanted also to add redundancy where
it was possible to.

The interesting "SecureBoot" corner case came on the table and we had to
find a different way to build the following packages:
- shim (both signed and unsigned)
- grub2
- fwupdate
- kernel

The other reason why we considered rebuilding it is that the cert we
were using has expired :

curl --location --silent
<a href="" title=""></a>

LinchPin v1.6.0 (enhancement release) has been released

We are happy to announce that LinchPin v1.6.0 has been released.

This release marks some useful enhancements and features:

* Jenkins releases to pypi #578 / #567
* CI tests allow for ignoring, provider, and more #587 / #528 / #576
* Beaker enhancement #614
* Introduce support for 'family' and 'tag' fields in bkr topology files
* Allow boolean expressions on hostrequire #611
* Generate a unique name if one isn't specified.

rh-postgresql95-postgresql-9.5.14-1.el7 works for me

not sure how to rpovide feedback to scl sig, but for what it's
worth, rh-postgresql95-postgresql-9.5.14-1.el7 which is in testing works
for me.
Looking forward to see this released.


Sftp connections timing out in Centos 7

We are facing some issues in Centos 7. When we create sftp connection and sync data from server to client and vice-versa.
Whenever we are running load on the setup SFTP connections are frequently getting timed out. Resulting in unnecessary sftp processes on system. Is there any known issue related to sftp timeout. Please let us know your suggestions to overcome this issue.

Thanks and Regards,

In place upgrade to Centos 7

Dear team
Is there any standard documnet released for upgrading from Centos 6.5
(Final) to Centos & version .
The upgrade tool (<a href="" title=""></a>)
is not available .

Thanks and regards

Missing Dependency of Openshift 3.10 (Ansible 2.4.3) in repo

On a virgin system CentOS 7.5 can, unfortunately, after the command

#yum install centos-release-openshift-origin"

the following command not be executed without error.

# yum install openshift-ansible

There is a dependency to Ansible 2.4.3 in Openshift 3.10, which
unfortunately is not in the repo (Only Ansible 2.4.2).

Can you please include Ansible 2.4.3 in the rpm repo?



CentOS AMIs for AWS

While at this past weekend, I was asked by a couple of
people, who is responsible for producing the AMIs for AWS, and how we
can go about getting updated ones there. Can someone help out with this?


CentOS Atomic Host 7.1807 Available for Download

The CentOS Atomic SIG has released an updated version of CentOS Atomic
Host (7.1807), an operating system designed to run Linux containers,
built from standard CentOS 7 RPMs, and tracking the component versions
included in Red Hat Enterprise Linux Atomic Host.

CentOS Atomic Host includes these core component versions:


Request to join HPC Sig


Please let me introduce myself. I am Beth Lynn Eicher with the FAS username of bethlynn. My background is a career in engineering systems deployments in research computing. I have worked at the Carnegie Mellon University, the Department of Energy, and the University of Chicago. Currently, I am a High Performance Computing consultant with clients like Pittsburgh Supercomputing Center and the University of Wyoming. There, I worked with Bridges, an XSEDE participating site.

Bridges uses CentOS 7 as do many other large installations.

Canceling Today’s CBS meeting

Hi folks,

We won’t be holding today’s CBS meeting. We will pick up where we left
of next Monday. If there are items we should discuss in the meantime
please let us know here on-list.

: Origin v3.10 rpms released to repo


Following my previous [1] notification, happy to announce the official
release of Origin v3.10 rpms which can be found at [2]

Thank you,
PaaS SIG team

[1] <a href="" title=""></a>
[2] <a href="" title=""></a>

CERN Dojo: Volunteers needed to help select schedule

As you may know, we're planning a Dojo at CERN in October. (Details at
<a href="" title=""></a> )

I need 4 or 5 people to vote on our schedule. I hope to publish a
schedule by the end of next week.

So, if you are planning to go, and are willing to volunteer to read some
session abstracts, please let me know by the end of this week. Thanks.

Documentation help requested (Re: Upgrading from 6 to 7)

Hi, folks,

I was hoping that someone with more knowledge than I about the 6 -> 7
upgrade process would have a look at
<a href="" title=""></a>

The page starts with a vague warning, and then continues to give
detailed instructions, leaving it very unclear which parts the warning
refers to.

If the process is broken, let's remove all of this and point to the
correct process.

: Origin v3.10 rpms available for testing


We would like to announce that Origin v3.10 rpms are available for testing
at [1].

As such we are calling for help from community to start testing and let us
know if there are issues with the rpms and its dependencies.

And in the spirit of transparency see below the plan to promote the rpms to repo:

1. in the next 24/72 hours the packages should be promoted to the test
repo [2] (currently it does not exist, we are waiting to be sync'ed in
the background)

git19 from sclo-rh missing from repodata

<a href="" title=""></a>

On 28-Jun-2018 09:07 git19 was in the repodata. On 03-Jul-2018 it was
not. Is this package no longer supported?

Using meetbot commands in your SIG meetings

A reminder, as we head into August: If you will use the meetbot commands
in your IRC SIG meetings (especially #info, #agreed, and #help - full
command documentation is here - <a href="" title=""></a> ) this
will greatly simplify going back and extracting monthly summaries from
your meeting minutes (published here -
<a href="" title=""></a> ) and turning them into blog
posts, tweets, and the monthly newsletter.

Remember that your SIG meeting is not *just* for you, but is also one of
the ways that you "report" back to the larger community what you've been

: new rpms available


We would like to announce that new openshift-ansible rpms been made

1. *openshift v3.6* => openshift-ansible-
which can be found at [1]
2. *openshift v3.7* => openshift-ansible-3.7.61-1.git.1.3624530.el7
which can be found at [2]

Packages needed for Triple O Container Builds

Hello  all,

We've been trying to enable tripleo container builds in the centos rdo
community and quickly ran into some problematic RPMs. Specifically,
centos-release-ceph-luminous and centos-release-opstools. They were
problematic for altarch but have recently been patched to work with the
$contentdir var. I set up a test to see how they install, linked below
[0][1], and found that centos-release-storage-common would also be
needed. Adding that seemed to allow everything to install properly. The
test also installs ceph, as the centos-release-ceph-luminous package
just enables a repo.

SIG reports due by Wednesday, Aug 1st

If you'd like to have a report from your SIG in the August newsletter,
please get me a sentence/paragraph/whatever by Wednesday.

You can see example reports from other SIGs in the previous newsletters:

<a href="" title=""></a>
<a href="" title=""></a>


Problems with qemu-img when generating Vagrant images

Hello everyone,

we switched from using qemu-img from CentOS 7.x to qemu-img-ev from the
Virt SIG several months ago, to allow us to generate Hyper-V images.

My attempts to build Vagrant images are failing the automated tests
since the beginning of July, apparently due to corrupt filesystems.

Where is the source code for specific build in koji ?

Hi there
Im looking for the git repository for the build <a href="" title=""></a>

I saw at!kubernetes.git but this repo is not matching with the build that im looking for.

The build was made for Centos...

Felipe Ruiz

centos-git-common: Add requirements.txt

Adding requirements.txt file that provides
the non-default python dependencies
requires for the .
This ease the the creation of the virtualenv.

Call for Presentations: CentOS Dojo at FOSDEM

February feels like a long way away right now, but as some folks have
been asking about our annual FOSDEM Dojo, we've opened the Call for
Presentations to start collecting your talk ideas.

CFP: <a href="" title=""></a>

Event details: <a href="" title=""></a>

Volunteers needed for booth at

With just three weeks away, I need folks to help out with the
booth at the event. I'm looking for people who are friendly and able to
answer some basic attendee questions around CentOS, to spend some time
at the booth, so that I can take a break a couple times a day.

The signup sheet is here:
<a href="" title=""></a>

Thanks, and I hope to see you in Boston!

JJB publishing job status

Hello centos,

Recently <a href="" title=""></a> merged, which adds a
ppc64le version of the rdo-test-day-tools job. However, amoralej had
mentioned that the jjb publish job was currently broken. Is the jjb
publish job down for the foreseeable future? We're hoping to get this
job going so we can iterate a bit more easily on tripleo container
builds for rdo on ppc64le.

Mike Turek <mjturek>

CCS meeting (2018-07-19) minutes

#centos-devel: CentOS Cloud SIG meeting (2016-07-19)

Meeting started by leanderthal at 15:12:10 UTC. The full logs are
available at

Meeting summary

first-use feedback on

Hi. I'm _completely_ new to AWS, tried to run a centos image (via
ansible), here are things I bumped into and doc suggestions:

1. First I tried a non-marketplace image, because I needed ami-...

Inconsistency in opening files from networked location e.g. smb/sftp

I am at a loss as to where to post this question/email.

There is a (growing?) inconsistency between application using open
file/folder dialog to access "networked" locations, e.g. smb/sftp.

Firefox ESR 60/Atom editor being the latest in my experience.

Is this a redhat/centos issue? a gnome issue?

When you will fix the CVE's affected to kernel package.

Could you please let us know ,when you will fix these below CVE's in kernel package.
1) CVE-2018-10940
2) CVE-2018-1120


Vault and mantis 6.10 issues

The bug tracker doesn't have 6.10 as a version option.

The vault doesn't have the RPMs for 6.9.


Today's meeting cancelled


nobody else showed up so it's cancelled.

Have a great day!


Hi all,

With the release of firefox 60.x.x ESR that does not by default use the package
'centos-indexhtml', we are left with only KDE's 'konqueror' using it. Just for
discussion... is centos-indexhtml needed any more and have a future in the
distro and should konqueror be altered to homepage to the CentOS homepage?



Reminder meeting on Thursday 3pm UTC


kind reminder that we will hold CentOS Cloud SIG meeting on
#centos-devel on Freenode at 3pm UTC


NSS authentication issue in FIPS mode.

Hi ,

In FIPS mode I was using

"NSS FIPS 140-2 Certificate DB:mypassphrase" in /etc/ipsec.d/nsspassword and in my custom location.

But it is failing with the below error in logs:

Jun 27 12:36:11: authentication of "NSS FIPS 140-2 Certificate DB" failed Jun 27

12:36:11: FATAL: NSS initialization failure

I was using CentOS Linux release 7.4.1708 (Core) with libreswan-3.20-3.el7.x86_64.

Could you please help me to resolve this problem.



new sclo-php*-php-pecl-redis4 packages available for testing

Yet another package available in centos-sclo-sclo-testing

This extension provides an API for communicating
with Redis servers.

<a href="" title=""></a>

For rh-php71 (EL-7 only)

* sclo-php71-php-pecl-redis4-4.1.0-1

For rh-php70

* sclo-php70-php-pecl-redis4-4.1.0-1


- this extension is already available, as sclo-php70-php-pecl-redis
and sclo-php71-php-pecl-redis version 3.1.6.

CentOS Dojo @ CERN: CFP closes this weekend

This is your final reminder that the Call For Papers for the CentOS Dojo
at CERN closes at midnight on Sunday, July 15th.

(If you're one of those people that asks "which timezone", then perhaps
you're putting it off too long! ;-) But, I believe it's CET.)

<a href="" title=""></a> <--- Event details and call for abstracts are here.

New version of moodle container available on


Announcing availability of Moodle[1] container[2] for moodle version 3.5
now available on

[1] <a href="" title=""></a>
[2] <a href="" title=""></a>

6.10 status? (Writeup needed for Newsletter)

Hi, folks,

The July newsletter is almost ready to go out - final draft is here:
<a href="" title=""></a>

I would very much like to include a paragraph about the 6.10 release -
when to expect it, what the highlights are, and anything else. I am
looking for a volunteer to provide that paragraph, by close of business
today, if at all possible.

You can reply here, or send it directly to me off-list, as you prefer.


New SIG Messaging

Creation of a new SIG "Messaging"

Hereby, I'm asking for comments about founding a new SIG to handle
messaging stacks in CentOS. We currently have in CentOS RabbitMQ
handling AMQP 0.9, and QPID, which provides messaging using
AMQP 1.0. There are also packages supporting Kafka, but not
Kafka itself.

Collaborating SIGs would be the Cloud and the Opstools SIGs.
Both would be consuming built packages produced by the Messaging SIG.

We also briefly took into consideration to incorporate the newly
proposed SIG into one of the others.

Do we know the reason why this below listed CVEs will not be fixed For elfutils-libelf, elfutils-libs and elfutils pakages ?

Do we know the reason why this below listed CVEs will not be fixed
For elfutils-libelf,elfutils-libs and elfutils pakages ?

Joining CentOS Storage SIG


I would like to be part of CentOS Storage SIG.
I am from GlusterFS background, but I can contribute to package other
solutions too.

It will be great if we can add documentation about running CentOS based
storage containers (like gluster / ceph containers).
I can contribute here as well.


Experimental Vagrant images

Hi there,

I would like to change the Vagrant images to use a single partition
(xfs) and swap to a file on that partition. This would simplify
resizing the OS partition and also adjusting the size of the swap,
compared to the current images. Would anyone be interested in testing
the images? Please email me off-list for the links. I already had the
changes done last month, tested them myself and on CICO but didn't get
to wider testing or merging the PR for the monthly release... life is
bit complicated lately.

CentOS 7.4 installation getting failed because of nss password prompt during installation.

We have been observing that after migration to CentOS 7.4 the installation fails due to password being prompted for the execution of below command as part of the install script.

<custom_location>certutil -N -d <custom location> -f <custom location>/nsspassword

The install script contains the above command to create the NSSDB at the install time.

Packages tagged for release not showing up on mirrors

Hi, cockpit-169-1.el7 <> has
been tagged for release on Jun 19.
I see it published for x86_64:
<a href="" title=""></a>
It's still missing on ppc64le:
<a href="" title=""></a>
and aarch64:
<a href="" title=""></a>

Seems to be recurring issue not only in virt sig:
<a href="" title=""></a>
<a href="" title=""></a>
<a href="" title=""></a>
<a href="" title=""></a>

Fedora CoreOS and CentOS Atomic Host

Today, the Fedora Project announced [1] a new project, Fedora CoreOS,
which will serve as a successor to Container Linux and Fedora Atomic.

[1] <a href="" title=""></a>

There's an FAQ [2] that addresses, among other things, the future of
CentOS Atomic Host:

"CentOS Atomic Host will continue producing downstream rebuilds of
RHEL Atomic Host and will align with the end-of-life. The Fedora
CoreOS project will be the consolidation point for the community

SIG updates requested for July newsletter

The July CentOS newsletter is being drafted, and we need to hear from
the SIGs.

CFP for Dojo @ closes this weekend

The CentOS Dojo at is rushing up on us, and I'd like to have
a speaker schedule published by early next week.

If you are considering submitting a talk, please do it NOW, so that we
don't have to consider canceling this event. Thank you.

Event details: <a href="" title=""></a>
Call for papers: <a href="" title=""></a>
DevConf information: <a href="" title=""></a>


Authorization to use CentOS logo in GNOME Boxes


Firstly, sorry for the cross-list post (centos-devel and centos-docs).

I'd like to reach you in order to ask for a formal authorization to
use CentOS logo on GNOME Boxes[0]. GNOME Boxes already shows a few
other distro's logos as you can check here[1].

Would be possible to get the explicit confirmation that we could use
CentOS logo as well?

[0]: <a href="" title=""></a>
[1]: <a href="" title=""></a>

Best Regards,

SIGs: Possibility to drop EOL content at 6.10 release time

RHEL 6.10 was released today and building CentOS 6.10 has just started.
This would be an excellent time to remove any EOL software you may have
floating around on

SIGs should explicitly state which content they want copied over from
6.9 to 6.10.

I'd imagine that for example openstack-juno could be dropped because it
went EOL in 2015-12-07 (so actually prior to CentOS 6.8's release..). Is
there some other content that could be dropped?

If SIGs want to transfer some of their packages from 6.9 to 6.10, please
let hughesjr know.

%{?dist} changed from .el7.centos to .el7

[I tried sending this last week, but it never showed up in the list archive, I guess because I wasn't subscribed. Resending.]

I recently found that the "centos" suffix dropped off the default rpm ${?dist} macro sometime between CentOS 7.3 and 7.5.

I applaud the change, but could someone point me to any bug reference, git commit or mailing list discussion about it?

How do you want CentOS8 to look and feel?


How do you want CentOS 8 to look and feel?

It would be nice to see your ideas. It would be nice to know what the
community expects in matters of artwork for CentOS 8. So to organize
and direct forces in the right direction.

Just to set some random ideas, I've started the following page:

<a href="" title=""></a>

Best Regards,

Possible Ceph Mimic package issue?


Sorry for starting a new thread, I accidentally wiped all email in my CentOS folder...

Trying to install the Mimic packages from the test mirror here: <a href="" title=""></a>

You can see the commit where its tested here <a href="" title=""></a>

(ignore the ceph-luminous-sig part, I just override the repo URL and not the name as of now).

Puppet (err): Execution of '/bin/yum -d 0 -e 0 -y install python-rbd' returned 1: Error: Package: lttng-ust-2.10.0-1.el7.x86_64 (ceph-luminous-sig)

Problem compiling dpdk on Centos aarch64

When compiling dpdk for aarch64 on Centos, I receive compilation error.

I see this in the Centos 1804 distribution.

I haven't tried locally n F28 but I see buildlogs in Fedora28 for dpdk.

I have also reproduced it in qemu-system aarch64 emulation:

uname -a
Linux aarch64-centos7 4.14.0-49.2.2.el7a.aarch64 #1 SMP Sat May 19
18:51:40 BST 2018 aarch64 aarch64 aarch64 GNU/Linux

l3fwd_em.c:245:2: error: #error No vector engine (SSE, NEON, ALTIVEC)
available, check your toolchain
 #error No vector engine (SSE, NEON, ALTIVEC) available, check your

Buildlogs show that dpdk built fin

What is the state of glusterfs-server on CentOS 6?

I'm a little confused about  the state of glusterfs-server on CentOS 6.
It isn't supported with gluster 4, the current recommended version
of gluster.

I have an existing server with glusterfs-server 3.18.15-1 which had a
hard drive crash.  So I'd like to rebuild the gluster environment on that
server.  I see that centos-release-gluster38 is available, but I read some-
where that it is no longer supported.  Also centos-release-gluster312
is available, but I don't see any indication that it is still supported.

Is the SIG providing any ongoing support beyond that which is provided
by the gluste

CBS Meeting 18-June-2018 Cancelled

Hi All,

I'll be away on Monday, and since we don't have too many pressing
topics, we'll go ahead and cancel the CBS meeting.

Looking forward to picking this back up the following Monday.


CentOS Atomic Host 7.1805 Available for Download

The CentOS Atomic SIG has released an updated version of CentOS Atomic
Host (7.1805), a lean operating system designed to run Linux
containers, built from standard CentOS 7 RPMs, and tracking the
component versions included in Red Hat Enterprise Linux Atomic Host.

CentOS Atomic Host includes these core component versions:


Removing old centos-release-<sig-project><version> from CentOS Extras?


How are other SIGs handling the removal of repositories from the
mirrors? There are centos-release-<sig-project> packages around that
have YUM .repo files pointing to the now non-existing repos. Some (all?)
of these centos-release-<sig-project> packages are still available in
CentOS Extras.

From #gluster:
21:25 < mallorn1> Anyone know why the 3.13 repository is gone from CentOS?

Docker daemon not respecting the insecure registry which is part of /etc/containers/registry.conf


I spun up a fresh centos-7.5 VM on Digital ocean and tried to do oc
cluster up which require to have insecure registry ``
when I am trying to add this in the /etc/containers/registry.conf this
is not picked up by docker daemon even after restart:(

I can see we have `/run/containers/registries.conf` as env file in the
`/usr/lib/systemd/system/docker.service` which even not present on the
system :(

Not sure where we messed up or I made some mistake here.

# rpm -qa | grep docker

SIG Meeting notes

hi everyone,

Can I request that when you are attending or running a SIG meeting in
#centos-devel, please use the #info command to the bot to record
interesting events/objects/releases/information - these can then be
collected and used for the Newsletter that Rich is putting together.

It would dramatically increase the audience you can get this information
out to as well.

Regards and thanks,

Pulling docker images from fails because of certs


I think with the recent change in the package from
python-rhsm-certificates to subscription-manager-rhsm-certificates
doesn't provide the docker registry certs for and user not able to pull any images from

Syndicate content