- AlmaLinux Users - AlmaLinux List Archives

LSRRB (Linux Software Raid Redundant Boot)
by Robert Moskowitz 11 Jan '23

11 Jan '23

I have a new HPE Prioliant gen10plus that I will be setting up with RAID1. I have been asking questions on the Centos-user list, but my plan is to install AlmaLinux 9.1 And I have been following comments about problems with RAID support in it. Meanwhile in my digging into RAID on my gen10+ install I find: https://downloads.linux.hpe.com/SDR/project/lsrrb/ And lsrrb. It is available for RH8. Can I get it to work with AL9.1? should I for a single server? It seems to use PXE, TFTP, and kickstart. A lot of work, is it worth it? Or is there a short cut? thanks for any help you can provide.

2 4

mail server platform
by Robert Moskowitz 01 Jan '23

01 Jan '23

Past time to upgrade my email server I run my own setup with RedSleeve6-arm. I never successfully got the Centos7-arm working, but if interested you can see what I was doing at: http://medon.htt-consult.com/Centos7-mailserver.html I want something as turnkey as possible with RAID1 drives. So first level question is a small Almalinux platform with RAID. Will have to be Intel, not ARM, as the mail software tends to be Intel. I do want low power. Note my network server is a little, low-power QNAP TS-230 and I had to replace a drive with errors, so I am sold on RAID. Thus first a recommendation on a platform. 4TB drives would be overkill for my mail needs. Then email software. My current setup is file-based messages. So I have to think about that for any migration, but I SO want out of maintaining the software myself. Running an updater is all I want at this age (now 72). I found: https://geekflare.com/self-hosted-email-server/ And iRedMail looks interestingly easy for me. Modoboa looks a little harder. Mail will be the ONLY think on this system, so I should not need any docker setups. Anyone can point me where to get going? thanks

1 1

Forums Down
by Jack Aboutboul 29 Dec '22

29 Dec '22

Hi All, Our forum provider, Discourse, is having an outage this morning and we are waiting on them for an update. You can monitor the situation here: https://status.discourse.org. You can always reach out on https://chat.almalinux.org, or on the mailing lists and certainly via social. We will send an update as soon as we have one. Jack

2 1

dependency problem for python3-virtualenv?
by Adrian Sevcenco 28 Dec '22

28 Dec '22

Hi! I'm new to Alma (and el9) and i just seen that i cannot install python3-virtualenv.noarch: dnf install python3-virtualenv.noarch Last metadata expiration check: 0:31:21 ago on Fri 23 Dec 2022 01:14:06 AM EET. Error: Problem: conflicting requests - nothing provides python3-wheel-wheel needed by python3-virtualenv-20.17.1-1.el9.noarch (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) any idea what could be the problem? is this known? Thanks a lot! Adrian

4 4

git.almalinux.org Planned Outage
by Jonathan Wright 19 Dec '22

19 Dec '22

Tomorrow we have a planned outage on git.almalinux.org at 12PM EST / 5PM UTC for Gitea upgrades. The maintenance is anticipated to take less than an hour. -- Jonathan Wright AlmaLinux Foundation Mattermost: chat <https://chat.almalinux.org/almalinux/messages/@jonathan>

1 0

Migrating Virtualmin Master Server from CentOS 7.9 to AlmaLinux 9.1
by Turritopsis Dohrnii Teo En Ming 15 Dec '22

15 Dec '22

Subject: Migrating Virtualmin Master Server from CentOS 7.9 to AlmaLinux 9.1 Good day from Singapore, I have shared my guides at the following links. [01] https://sourceforge.net/p/webadmin/mailman/message/37749090/ [02] https://marc.info/?l=webmin-l&m=167109901806173&w=2 [03] https://pastebin.com/raw/Gg8hSFsW [04] https://controlc.com/5c6ea18d [05] https://www.klgrth.io/paste/h6wcb [06] https://rentry.co/fv4bxi I hope my guides are useful to you. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com

1 0

Migrating Virtualmin Master Server from CentOS 7.9 to AlmaLinux 9.1
by Turritopsis Dohrnii Teo En Ming 15 Dec '22

15 Dec '22

Subject: Migrating Virtualmin Master Server from CentOS 7.9 to AlmaLinux 9.1 Good day from Singapore, Author: Mr. Turritopsis Dohrnii Teo En Ming (TARGETED INDIVIDUAL) Country: Singapore Date: 15 Dec 2022 Thursday I have successfully migrated Virtualmin Master Server from CentOS 7.9 to AlmaLinux 9.1 on 14 Dec 2022 Wed from 4.00 PM to 7.30 PM Singapore Time. Even though I have a fever of 38.5 degrees C on 14 Dec 2022 Wed, I still managed to carry out the migration. As of 15 Dec 2022 Thursday at 4.30 PM, I still have a mild fever of 37.5 degrees C. Below are the detailed instructions. Special thanks to Jamie Cameron at Virtualmin.com for providing guidance. I am not migrating the slave DNS server yet. It is still running CentOS 7.9. DETAILED INSTRUCTIONS ====================== SECTION A - Installing Virtualmin 7.0.0 on new AlmaLinux 9.1 VPS ================================================================= # wget https://software.virtualmin.com/gpl/scripts/install.sh # /bin/sh install.sh Running Virtualmin 7 pre-installation setup: Syncing system time .. .. done Updating CA certificates .. .. done Welcome to the Virtualmin GPL installer, version 7.0.0 This script must be run on a freshly installed supported OS. It does not perform updates or upgrades (use your system package manager) or license changes (use the "virtualmin change-license" command). The systems currently supported by install script are: Red Hat Enterprise Linux and derivatives - RHEL 8 and 9 on x86_64 - Alma and Rocky 8 and 9 on x86_64 - CentOS 7 on x86_64 Debian Linux and derivatives - Debian 10 and 11 on i386 and amd64 - Ubuntu 20.04 LTS and 22.04 LTS on i386 and amd64 If your OS/version/arch is not listed, installation will fail. More details about the systems supported by the script can be found here: https://www.virtualmin.com/os-support The selected package bundle is LAMP and the size of install is full. It will require up to 650 MB of disk space. Exit and re-run this script with --help flag to see available options. Continue? (y/n) y [INFO] Started installation log in /root/virtualmin-install.log ▣◻◻ Phase 1 of 3: Setup Installing core plugins for package manager [ ✔ ] Downloading Virtualmin 7 release package [ ✔ ] Installing Virtualmin 7 release package [ ✔ ] ▣▣◻ Phase 2 of 3: Installation Installing EPEL release package [ ✔ ] Enabling CRB package repository [ ✔ ] Cleaning up software repo metadata [ ✔ ] Checking and installing system packages updates [ ✔ ] Installing dependencies and system packages [ ✔ ] Installing Virtualmin 7 and all related packages [ ✔ ] Installing Virtualmin 7 and all related packages updates [ ✔ ] ▣▣▣ Phase 3 of 3: Configuration [1/21] Configuring AWStats [ ✔ ] [2/21] Configuring Apache [ ✔ ] [3/21] Configuring Bind [ ✔ ] [4/21] Configuring ClamAV [ ✔ ] [5/21] Configuring Dovecot [ ✔ ] [6/21] Configuring Etckeeper [ ✔ ] [7/21] Configuring Firewalld [ ✔ ] [8/21] Configuring MySQL [ ✔ ] [9/21] Configuring Postfix [ ✔ ] [10/21] Configuring ProFTPd [ ✔ ] [11/21] Configuring Procmail [ ✔ ] [12/21] Configuring Quotas [ ✔ ] [13/21] Configuring SASL [ ✔ ] [14/21] Configuring Shells [ ✔ ] [15/21] Configuring SpamAssassin [ ✔ ] [16/21] Configuring Status [ ✔ ] [17/21] Configuring Upgrade [ ✔ ] [18/21] Configuring Usermin [ ✔ ] [19/21] Configuring Webmin [ ✔ ] [20/21] Configuring Fail2banFirewalld [ ✔ ] [21/21] Configuring Virtualmin [ ✔ ] ▣▣▣ Cleaning up [SUCCESS] Installation Complete! [SUCCESS] If there were no errors above, Virtualmin should be ready [SUCCESS] to configure at https://vmi1122973.contaboserver.net:10000 (or https://217.76.54.74:10000). [SUCCESS] You may receive a security warning in your browser on your first visit. [SUCCESS] Chromium based browsers, to bypass security warning screen may require [SUCCESS] you to type `thisisunsafe` to get to the login page. Post-Installation Wizard ========================= Introduction ============= This post-installation wizard allows you to configure Virtualmin optimally for your system. You can make selections depending on whether you want to host websites, email or databases, and based on your system's memory and CPU power. To continue, click the Next button below. To skip it and use the default settings, click Cancel. Click Next. Memory use =========== Virtualmin can be tuned to improve performance in its user interface and email processing, but at the cost of increased memory use. The best choice depends on how your system will be used. Preload Virtualmin libraries? Choose Yes, faster UI with more RAM used (≈40M) Run email domain lookup server? Choose Yes, faster mail processing with more RAM used (≈70M) Click Next. If your system is going to host domains that will receive a large amount of email, scanning incoming messages for viruses can generate high CPU load. Because scanning is done using the ClamAV scanning server clamd, it will consume RAM even when not processing email. If your system will not be hosting email, virus scanning can be disabled. Enable virus scanning with ClamAV? Choose Yes, uses up to 2G of RAM Click Next. Spam filtering ================== If your system is going to host domains that will receive a large amount of email, filtering incoming messages for spam can generate significant CPU load. This is due to CPU use by the SpamAssassin mail filter when it is started, which can be avoided by running the SpamAssassin filter server spamd in the background. This consumes RAM, but reduces CPU load and makes mail processing faster. Run SpamAssassin server filter? Choose Yes, faster mail processing with more RAM used (≈30M) and no per-domain settings Click Next. Database servers ================ Virtualmin supports both the MariaDB and PostgreSQL database servers, but you might want to run only one (or neither) on your system. Each consumes RAM when running, even if they are not being used. Depending on the websites and applications you plan to host, running MariaDB only may be enough, as most web applications do not support or require PostgreSQL. If your system will only be used for mail or DNS hosting, there is no need to run either. Run MariaDB database server? Yes Run PostgreSQL database server? No Click Next. MariaDB password ================ To prevent other users on your system from managing the MariaDB database, a password for the root user should be set. Currently the MariaDB password is not set, which is highly insecure. Set MariaDB password: <removed> Click Next. DNS configuration ================== For DNS zones created by Virtualmin to be resolvable, the primary nameserver record for each zone must be set to something that can itself be resolved by other systems on the Internet. Primary nameserver: ns1.turritopsis-dohrnii-teo-en-ming.com Click Skip check for resolvability. Secondary nameservers (optional): ns2.turritopsis-dohrnii-teo-en-ming.com Click Next. All done ========= Virtualmin post-installation configuration is now complete! However, you can continue with the wizard to configure optional features. Click Next. Password storage ================= Virtualmin gives you the option of storing plain-text passwords for virtual servers and mailboxes, or storing only one-way encrypted (hashed) passwords. Plain text passwords are more convenient, but less secure if your system is compromised. However, with hashed passwords enabled, password recovery for virtual servers will not be not possible, and database password for new servers will be different from the administration password, and will be randomly generated. Password storage mode: Only store hashed passwords Click Next. MariaDB database size ====================== MariaDB can be configured to trade off memory use for performance, depending on how much RAM your system has and how heavily you expect the database to be used. MariaDB configuration size: Keep MariaDB system defaults Click Next. SSL key directory ================== Virtualmin gives you the option of keeping SSL certificates and keys in each virtual server's home directory, or another location under /etc. The former is easier to manage, but introduces the risk that server owners may cause your webserver to fail to start if they delete the certificate file. Location for SSL certificates: Per-domain directory under /etc/ssl/virtualmin Click Next. Virtualmin can create a default virtual server that will serve web requests to your system that don't match any other domain. It can also be used to request a Let's Encrypt SSL certificate for use by Virtualmin's own UI. Setup default virtual server? No, thanks Click Next. Additional post-installation configuration is now complete! Click Finish. SECTION B - Backing up Virtualmin Virtual Servers on old CentOS 7.9 VPS ======================================================================== Refer to my guide. Reference guide: Have I performed my backups using Virtualmin GUI correctly? Link a: https://sourceforge.net/p/webadmin/mailman/message/37744989/ Link b: https://marc.info/?l=webmin-l&m=167038794008036&w=2 SECTION C - Transferring Backup Files From CentOS 7.9 VPS to AlmaLinux 9.1 VPS =============================================================================== Download all the 20 backup files from CentOS 7.9 Linux server to your laptop using WinSCP. Upload all the 20 backup files from your laptop to AlmaLinux 9.1 server using WinSCP. The backup files should be uploaded to /restore directory on AlmaLinux 9.1 server. SECTION D - Restore Backups in AlmaLinux 9.1 Server ==================================================== Login to Virtualmin. Click Backup and Restore. Click Restore Virtual Servers. Restore Virtual Servers Page ============================= Source and format ================== Restore source: Local file or directory Click and choose /restore Features and settings ===================== Features to restore: Restore all features Virtualmin settings to restore: Select all Other restore options ===================== Re-allocate UIDs and GID: Yes Just re-import server details: No Delete and re-create virtual servers: No IPv4 address for restored servers: Shared, on IP 217.76.54.74 IPv6 address for restored servers: Shared, on IP 2a02:c206:2112:2973:0000:0000:0000:0001 Click Show What Will Be Restored Checking contents of the backup .. .. found 6 virtual servers and 8 global virtualmin settings Information! The following features were enabled in one or more of the domains in the backup, but are not enabled : Webalizer reporting Without them, some functions of the restored virtual servers may not work. Warning! Are you sure you want to restore the selected domains and features from local file /restore? Any existing data for the features in these domains will be over-written! Click government-of-the-multiverse.online (Server does not exist, will be re-created) Virtual server password, description and other details Administration user's password, quota and Cron jobs Records in DNS domain, except SOA Mail/FTP users and mail aliases Apache webserver configuration Apache SSL webserver configuration and certificate Logrotate configuration for log file Contents of server's MariaDB databases Spam filtering Webmin ACL files Server's home directory and web pages AWStats configuration file Click shaunlohxiaowen.xyz (Server does not exist, will be re-created) Virtual server password, description and other details Administration user's password, quota and Cron jobs Records in DNS domain, except SOA Mail/FTP users and mail aliases Apache webserver configuration Apache SSL webserver configuration and certificate Logrotate configuration for log file Contents of server's MariaDB databases Spam filtering Webmin ACL files Server's home directory and web pages AWStats configuration file Click teo-en-ming-corp.com (Server does not exist, will be re-created) Virtual server password, description and other details Administration user's password, quota and Cron jobs Records in DNS domain, except SOA Mail/FTP users and mail aliases Apache webserver configuration Apache SSL webserver configuration and certificate Logrotate configuration for log file Contents of server's MariaDB databases Spam filtering Webmin ACL files Server's home directory and web pages AWStats configuration file Click teo-en-ming.com (Server does not exist, will be re-created) Virtual server password, description and other details Administration user's password, quota and Cron jobs Records in DNS domain, except SOA Mail/FTP users and mail aliases Apache webserver configuration Apache SSL webserver configuration and certificate Logrotate configuration for log file Contents of server's MariaDB databases Spam filtering Webmin ACL files Server's home directory and web pages AWStats configuration file Click theonlinecitizens.com (Server does not exist, will be re-created) Virtual server password, description and other details Administration user's password, quota and Cron jobs Records in DNS domain, except SOA Mail/FTP users and mail aliases Apache webserver configuration Apache SSL webserver configuration and certificate Logrotate configuration for log file Contents of server's MariaDB databases Spam filtering Webmin ACL files Server's home directory and web pages AWStats configuration file Click turritopsis-dohrnii-teo-en-ming.com (Server does not exist, will be re-created) Virtual server password, description and other details Administration user's password, quota and Cron jobs Records in DNS domain, except SOA Mail/FTP users and mail aliases Apache webserver configuration Apache SSL webserver configuration and certificate Logrotate configuration for log file Contents of server's MariaDB databases Spam filtering Webmin ACL files Server's home directory and web pages AWStats configuration file Click Virtualmin configuration settings Virtualmin configuration Custom fields, links and shells New user email messages Mail server settings Scheduled Virtualmin backups Third-party script installers Server templates and plans Click Restore Now. Checking contents of the backup .. .. found 6 virtual servers and 8 global virtualmin settings Starting restore of 6 domains from local file /restore .. Extracting backup archive files .. .. done Restoring Virtualmin settings .. Restoring Virtualmin configuration .. .. done Restoring templates and plans .. .. done Restoring email templates .. .. done Restoring custom fields, links, categories and shells .. .. done Restoring custom script installers .. .. done Restoring scheduled backups and keys .. .. done Restoring DKIM settings .. Finding virtual servers to enable DKIM for .. .. no virtual servers with DNS and email enabled were found, but enabling for 1 extra domains Extracting public key from private key in /etc/opendkim/keys/default.private .. .. done Setting domain and selector in DKIM filter configuration .. .. done Enabling DKIM filter at boot time .. .. done Starting DKIM filter .. .. done Configuring mail server to use DKIM filter .. .. done .. done Restoring greylisting settings .. .. leaving disabled Restoring rate limiting settings .. .. leaving disabled Restoring mail server configuration .. .. done .. done Re-creating virtual server government-of-the-multiverse.online .. Creating administration group government-of-the-multiverse .. .. done Creating administration user government-of-the-multiverse .. .. done Creating aliases for administration user .. .. done Adding administration user to groups .. .. done Creating home directory .. .. done Creating mailbox for administration user .. .. done Adding new DNS zone .. .. done Adding to email domains list .. .. done Adding default mail aliases .. .. done Adding DKIM records to DNS domain government-of-the-multiverse.online .. .. added successfully Adding new virtual website .. .. done Starting FCGIwrap server .. .. done Adding webserver user apache to server's group .. .. done Performing other Apache configuration .. .. done Setting up scheduled Webalizer reporting .. .. Webalizer reporting failed! : Webalizer config file /etc/webalizer.conf does not exist! Creating SSL certificate and private key .. .. done Adding new SSL virtual website .. .. done Setting up log file rotation .. .. done Creating MariaDB login .. .. done Creating MariaDB database government_of_the_multiverse .. .. done Setting up spam filtering .. .. done Setting up virus filtering .. .. done Setting up AWStats reporting .. .. done Setting up password protection for AWStats .. .. done Creating Webmin user .. .. done Saving server details .. .. done Re-starting DNS server .. .. done Applying web server configuration .. .. done Re-loading Webmin .. .. done Re-starting Usermin .. .. done Restarting mail server .. .. done Restoring backup for virtual server government-of-the-multiverse.online .. Restoring virtual server password, quota and other details .. .. done Updating administration password and quotas .. .. done Restoring Cron jobs .. .. done Extracting TAR file of home directory .. .. done Setting ownership of home directory .. .. done Re-creating records in DNS domain .. .. done Restoring Apache virtual host configuration .. .. done Checking restored PHP execution mode .. .. mode FCGId cannot be used, switching to FPM. Updating PHP FPM configuration .. .. no fixes needed Restoring Apache log files .. .. done Restoring SSL Apache virtual host configuration and certificate .. .. done Restoring Logrotate configuration .. .. done Restoring allowed MariaDB hosts .. .. done Re-loading MariaDB database government_of_the_multiverse .. .. done Re-loading MariaDB database government_of_the_multiverse_roundcube .. Creating MariaDB database government_of_the_multiverse_roundcube .. .. done .. done Restoring SpamAssassin and Procmail configurations .. .. done Restoring Webmin ACL files .. .. done Restoring AWStats configuration file .. .. done Re-creating mail and FTP users .. .. done Re-creating mail aliases .. .. done Restoring mail and FTP user Cron jobs .. .. done Updating Webmin user .. .. done Re-creating virtual server shaunlohxiaowen.xyz .. Creating administration group shaun .. .. done Creating administration user shaun .. .. done Creating aliases for administration user .. .. done Adding administration user to groups .. .. done Creating home directory .. .. done Creating mailbox for administration user .. .. done Adding new DNS zone .. .. done Adding to email domains list .. .. done Adding default mail aliases .. .. done Adding DKIM records to DNS domain shaunlohxiaowen.xyz .. .. added successfully Adding new virtual website .. .. done Starting FCGIwrap server .. .. done Adding webserver user apache to server's group .. .. done Performing other Apache configuration .. .. done Setting up scheduled Webalizer reporting .. .. Webalizer reporting failed! : Webalizer config file /etc/webalizer.conf does not exist! Creating SSL certificate and private key .. .. done Adding new SSL virtual website .. .. done Setting up log file rotation .. .. done Creating MariaDB login .. .. done Creating MariaDB database shaun .. .. done Setting up spam filtering .. .. done Setting up virus filtering .. .. done Setting up AWStats reporting .. .. done Setting up password protection for AWStats .. .. done Creating Webmin user .. .. done Saving server details .. .. done Re-starting DNS server .. .. done Restarting PHP-FPM 8.0 server .. .. done Applying web server configuration .. .. done Re-loading Webmin .. .. done Re-starting Usermin .. .. done Restoring backup for virtual server shaunlohxiaowen.xyz .. Restoring virtual server password, quota and other details .. .. done Updating administration password and quotas .. .. done Restoring Cron jobs .. .. done Extracting TAR file of home directory .. .. done Setting ownership of home directory .. .. done Re-creating records in DNS domain .. .. done Restoring Apache virtual host configuration .. .. done Checking restored PHP execution mode .. .. mode FCGId cannot be used, switching to FPM. Updating PHP FPM configuration .. .. no fixes needed Restoring Apache log files .. .. done Restoring SSL Apache virtual host configuration and certificate .. .. done Restoring Logrotate configuration .. .. done Restoring allowed MariaDB hosts .. .. done Re-loading MariaDB database shaun .. .. done Re-loading MariaDB database shaun_roundcube .. Creating MariaDB database shaun_roundcube .. .. done .. done Restoring SpamAssassin and Procmail configurations .. .. done Restoring Webmin ACL files .. .. done Restoring AWStats configuration file .. .. done Re-creating mail and FTP users .. .. done Re-creating mail aliases .. .. done Restoring mail and FTP user Cron jobs .. .. done Updating Webmin user .. .. done Re-creating virtual server teo-en-ming-corp.com .. Creating administration group ceo .. .. done Creating administration user ceo .. .. done Creating aliases for administration user .. .. done Adding administration user to groups .. .. done Creating home directory .. .. done Creating mailbox for administration user .. .. done Adding new DNS zone .. .. done Adding to email domains list .. .. done Adding default mail aliases .. .. done Adding DKIM records to DNS domain teo-en-ming-corp.com .. .. added successfully Adding new virtual website .. .. done Starting FCGIwrap server .. .. done Adding webserver user apache to server's group .. .. done Performing other Apache configuration .. .. done Setting up scheduled Webalizer reporting .. .. Webalizer reporting failed! : Webalizer config file /etc/webalizer.conf does not exist! Creating SSL certificate and private key .. .. done Adding new SSL virtual website .. .. done Setting up log file rotation .. .. done Creating MariaDB login .. .. done Creating MariaDB database ceo .. .. done Setting up spam filtering .. .. done Setting up virus filtering .. .. done Setting up AWStats reporting .. .. done Setting up password protection for AWStats .. .. done Creating Webmin user .. .. done Saving server details .. .. done Re-starting DNS server .. .. done Restarting PHP-FPM 8.0 server .. .. done Applying web server configuration .. .. done Re-loading Webmin .. .. done Re-starting Usermin .. .. done Restoring backup for virtual server teo-en-ming-corp.com .. Restoring virtual server password, quota and other details .. .. done Updating administration password and quotas .. .. done Restoring Cron jobs .. .. done Extracting TAR file of home directory .. .. done Setting ownership of home directory .. .. done Re-creating records in DNS domain .. .. done Restoring Apache virtual host configuration .. .. done Checking restored PHP execution mode .. .. mode FCGId cannot be used, switching to FPM. Updating PHP FPM configuration .. .. no fixes needed Restoring Apache log files .. .. done Restoring SSL Apache virtual host configuration and certificate .. .. done Restoring Logrotate configuration .. .. done Restoring allowed MariaDB hosts .. .. done Re-loading MariaDB database ceo .. .. done Re-loading MariaDB database ceo_roundcube .. Creating MariaDB database ceo_roundcube .. .. done .. done Restoring SpamAssassin and Procmail configurations .. .. done Restoring Webmin ACL files .. .. done Restoring AWStats configuration file .. .. done Re-creating mail and FTP users .. .. done Re-creating mail aliases .. .. done Restoring mail and FTP user Cron jobs .. .. done Updating Webmin user .. .. done Re-creating virtual server teo-en-ming.com .. Creating administration group teo-en-ming .. .. done Creating administration user teo-en-ming .. .. done Creating aliases for administration user .. .. done Adding administration user to groups .. .. done Creating home directory .. .. done Creating mailbox for administration user .. .. done Adding new DNS zone .. .. done Adding to email domains list .. .. done Adding default mail aliases .. .. done Adding DKIM records to DNS domain teo-en-ming.com .. .. added successfully Adding new virtual website .. .. done Starting FCGIwrap server .. .. done Adding webserver user apache to server's group .. .. done Performing other Apache configuration .. .. done Setting up scheduled Webalizer reporting .. .. Webalizer reporting failed! : Webalizer config file /etc/webalizer.conf does not exist! Creating SSL certificate and private key .. .. done Adding new SSL virtual website .. .. done Setting up log file rotation .. .. done Creating MariaDB login .. .. done Creating MariaDB database teo_en_ming .. .. done Setting up spam filtering .. .. done Setting up virus filtering .. .. done Setting up AWStats reporting .. .. done Setting up password protection for AWStats .. .. done Creating Webmin user .. .. done Saving server details .. .. done Re-starting DNS server .. .. done Restarting PHP-FPM 8.0 server .. .. done Applying web server configuration .. .. done Re-loading Webmin .. .. done Re-starting Usermin .. .. done Restoring backup for virtual server teo-en-ming.com .. Restoring virtual server password, quota and other details .. .. done Updating administration password and quotas .. .. done Restoring Cron jobs .. .. done Extracting TAR file of home directory .. .. done Setting ownership of home directory .. .. done Re-creating records in DNS domain .. .. done Restoring Apache virtual host configuration .. .. done Checking restored PHP execution mode .. .. mode FCGId cannot be used, switching to FPM. Updating PHP FPM configuration .. .. no fixes needed Restoring Apache log files .. .. done Restoring SSL Apache virtual host configuration and certificate .. .. done Restoring Logrotate configuration .. .. done Restoring allowed MariaDB hosts .. .. done Re-loading MariaDB database teo_en_ming .. .. done Re-loading MariaDB database teo_en_ming_roundcube .. Creating MariaDB database teo_en_ming_roundcube .. .. done .. done Restoring SpamAssassin and Procmail configurations .. .. done Restoring Webmin ACL files .. .. done Restoring AWStats configuration file .. .. done Re-creating mail and FTP users .. .. done Re-creating mail aliases .. .. done Restoring mail and FTP user Cron jobs .. .. done Updating Webmin user .. .. done Re-creating virtual server theonlinecitizens.com .. Creating administration group theonlinecitizens .. .. done Creating administration user theonlinecitizens .. .. done Creating aliases for administration user .. .. done Adding administration user to groups .. .. done Creating home directory .. .. done Creating mailbox for administration user .. .. done Adding new DNS zone .. .. done Adding to email domains list .. .. done Adding default mail aliases .. .. done Adding DKIM records to DNS domain theonlinecitizens.com .. .. added successfully Adding new virtual website .. .. done Starting FCGIwrap server .. .. done Adding webserver user apache to server's group .. .. done Performing other Apache configuration .. .. done Setting up scheduled Webalizer reporting .. .. Webalizer reporting failed! : Webalizer config file /etc/webalizer.conf does not exist! Creating SSL certificate and private key .. .. done Adding new SSL virtual website .. .. done Setting up log file rotation .. .. done Creating MariaDB login .. .. done Creating MariaDB database theonlinecitizens .. .. done Setting up spam filtering .. .. done Setting up virus filtering .. .. done Setting up AWStats reporting .. .. done Setting up password protection for AWStats .. .. done Creating Webmin user .. .. done Saving server details .. .. done Re-starting DNS server .. .. done Restarting PHP-FPM 8.0 server .. .. done Applying web server configuration .. .. done Re-loading Webmin .. .. done Re-starting Usermin .. .. done Restoring backup for virtual server theonlinecitizens.com .. Restoring virtual server password, quota and other details .. .. done Updating administration password and quotas .. .. done Restoring Cron jobs .. .. done Extracting TAR file of home directory .. .. done Setting ownership of home directory .. .. done Re-creating records in DNS domain .. .. done Restoring Apache virtual host configuration .. .. done Checking restored PHP execution mode .. .. mode FCGId cannot be used, switching to FPM. Updating PHP FPM configuration .. .. no fixes needed Restoring Apache log files .. .. done Restoring SSL Apache virtual host configuration and certificate .. .. done Restoring Logrotate configuration .. .. done Restoring allowed MariaDB hosts .. .. done Re-loading MariaDB database theonlinecitizens .. .. done Re-loading MariaDB database theonlinecitizens_roundcube .. Creating MariaDB database theonlinecitizens_roundcube .. .. done .. done Restoring SpamAssassin and Procmail configurations .. .. done Restoring Webmin ACL files .. .. done Restoring AWStats configuration file .. .. done Re-creating mail and FTP users .. .. done Re-creating mail aliases .. .. done Restoring mail and FTP user Cron jobs .. .. done Updating Webmin user .. .. done Re-creating virtual server turritopsis-dohrnii-teo-en-ming.com .. Creating administration group turritopsis-dohrnii-teo-en-ming .. .. done Creating administration user turritopsis-dohrnii-teo-en-ming .. .. done Creating aliases for administration user .. .. done Adding administration user to groups .. .. done Creating home directory .. .. done Creating mailbox for administration user .. .. done Adding new DNS zone .. .. done Adding to email domains list .. .. done Adding default mail aliases .. .. done Adding DKIM records to DNS domain turritopsis-dohrnii-teo-en-ming.com .. .. added successfully Adding new virtual website .. .. done Starting FCGIwrap server .. .. done Adding webserver user apache to server's group .. .. done Performing other Apache configuration .. .. done Setting up scheduled Webalizer reporting .. .. Webalizer reporting failed! : Webalizer config file /etc/webalizer.conf does not exist! Creating SSL certificate and private key .. .. done Adding new SSL virtual website .. .. done Setting up log file rotation .. .. done Creating MariaDB login .. .. done Creating MariaDB database turritopsis_dohrnii_teo_en_ming .. .. done Setting up spam filtering .. .. done Setting up virus filtering .. .. done Setting up AWStats reporting .. .. done Setting up password protection for AWStats .. .. done Creating Webmin user .. .. done Saving server details .. .. done Re-starting DNS server .. .. done Restarting PHP-FPM 8.0 server .. .. done Applying web server configuration .. .. done Re-loading Webmin .. .. done Re-starting Usermin .. .. done Restoring backup for virtual server turritopsis-dohrnii-teo-en-ming.com .. Restoring virtual server password, quota and other details .. .. done Updating administration password and quotas .. .. done Restoring Cron jobs .. .. done Extracting TAR file of home directory .. .. done Setting ownership of home directory .. .. done Re-creating records in DNS domain .. .. done Restoring Apache virtual host configuration .. .. done Checking restored PHP execution mode .. .. mode FCGId cannot be used, switching to FPM. Updating PHP FPM configuration .. .. no fixes needed Restoring Apache log files .. .. done Restoring SSL Apache virtual host configuration and certificate .. .. done Restoring Logrotate configuration .. .. done Restoring allowed MariaDB hosts .. .. done Re-loading MariaDB database turritopsis_dohrnii_teo_en_ming .. .. done Re-loading MariaDB database turritopsis_dohrnii_teo_en_ming_roundcube .. Creating MariaDB database turritopsis_dohrnii_teo_en_ming_roundcube .. .. done .. done Re-loading MariaDB database turritopsis_dohrnii_teo_en_ming_roundcube_2 .. Creating MariaDB database turritopsis_dohrnii_teo_en_ming_roundcube_2 .. .. done .. done Restoring SpamAssassin and Procmail configurations .. .. done Restoring Webmin ACL files .. .. done Restoring AWStats configuration file .. .. done Re-creating mail and FTP users .. .. done Re-creating mail aliases .. .. done Restoring mail and FTP user Cron jobs .. .. done Updating Webmin user .. .. done Enabling PHP modules for restored scripts .. .. no PHP modules needed to be installed WARNING - The following scripts used PHP versions that are not available : government-of-the-multiverse.online - RoundCube - Version 7.2 government-of-the-multiverse.online - SquirrelMail - Version 7.2 shaunlohxiaowen.xyz - RoundCube - Version 7.2 teo-en-ming-corp.com - SquirrelMail - Version 7.2 teo-en-ming-corp.com - RoundCube - Version 7.2 teo-en-ming.com - SquirrelMail - Version 7.2 teo-en-ming.com - RoundCube - Version 7.2 theonlinecitizens.com - RoundCube - Version 7.2 turritopsis-dohrnii-teo-en-ming.com - RoundCube - Version 7.2 Re-starting DNS server .. .. done Restarting PHP-FPM 8.0 server .. .. done Applying web server configuration .. .. done Re-loading Webmin .. .. done Re-starting Usermin .. .. done .. restore complete. SECTION E - Changing IP Address of Virtualmin Master Server (Primary DNS Server) at your Domain Registrar ========================================================================================================== Refer to the following guide. Reference guide: [NAMECHEAP] How can I update my personal nameserver's IP address? Link: https://www.namecheap.com/support/knowledgebase/article.aspx/292/10/how-can… SECTION F - Checking Virtualmin Configuration =============================================== The status of your system is being checked to ensure that all enabled features are available and properly configured .. Your system has 7.5 GiB of memory, which is at or above the Virtualmin recommended minimum of 256 MiB BIND DNS server is installed Mail server Postfix is installed and configured Postfix is configured to support per-domain outgoing IP addresses PHP execution mode fcgid was selected in the default template, but is not supported on this system, and now will be changed to none Apache is installed CGI scripts can be executed using FCGIwrap Apache supports HTTP/2 on your system The following PHP execution modes are available : fpm The following PHP-FPM versions are available : 8.0.20 (php-fpm) PHP versions have changed to 8.0 since last check. Regenerating any missing php.ini files Webalizer does not appear to be installed on your system, or has not yet been set up properly in Webmin's Webalizer Logfile Analysis module. If your system does not use Webalizer, it should be disabled in Virtualmin's module configuration page .. your system is not ready for use by Virtualmin SECTION G - System Information =============================== System hostname vmi1122973.contaboserver.net (217.76.54.74) Operating system AlmaLinux 9.1 Webmin version 2.001 Usermin version 1.860 Virtualmin version 7.3 Authentic theme version 20.01.1:5 Time on system Wednesday, December 14, 2022 10:35 AM Kernel and CPU Linux 5.14.0-162.6.1.el9_1.x86_64 on x86_64 Processor information AMD EPYC 7282 16-Core Processor, 4 cores System uptime 19 hours, 12 minutes Running processes 171 CPU load averages 0.28 (1 min) 0.37 (5 mins) 0.41 (15 mins) Real memory 2.43 GiB used / 4.71 GiB cached / 7.5 GiB total Local disk space 17.53 GiB used / 178.22 GiB free / 195.76 GiB total Package updates All installed packages are up to date SECTION H - Tying up some loose ends for the Slave DNS Server =============================================================== Part 1 ======= Because I haven't migrate the slave DNS server (it is still running CentOS 7.9), we need to tie up some loose ends. Use the following guide. Reference guide: [PART 8 - DRAFT 2] [Virtualmin and Webmin] Teo En Ming's Notes for Setting Up Slave DNS Server Link a: https://sourceforge.net/p/webadmin/mailman/message/37373922/ Link b: https://marc.info/?l=webmin-l&m=163528877500627&w=2 Link c: https://pastebin.com/raw/hVShREH6 Part 2 ======= Then you need to login to the Webmin of the slave DNS server. Click Servers > BIND DNS Server For EACH AND EVERY DNS Zone, click on the DNS Zone. Click Edit Zone Options. Master servers: 217.76.54.74 Allow transfers from.. Click Listed.. and then specify 217.76.54.74 Click Save. Part 3 ======= Putty/SSH into the slave DNS server. # systemctl restart named Run the below command for every domain name. # rndc reload <domain name> Reference guide: Force dns zone transfer Link: https://archive.virtualmin.com/node/14479 CONCLUSION ========== You have successfully migrated your Virtualmin master server from CentOS 7.9 to AlmaLinux 9.1! ADDITIONAL READING MATERIALS ============================== Reference guide: [8-Part Series] Complete Guide to Setting Up Virtualmin Web Hosting Control Panel with Master and Slave DNS Servers Configuration Link a: https://sourceforge.net/p/webadmin/mailman/message/37373937/ Link b: https://marc.info/?l=webmin-l&m=163529128901657&w=2 Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com

1 0

Centos 7.9 transition blocked, how to solve??
by just4safe＠hotmail.com 07 Dec '22

07 Dec '22

Hi all, My home desktop machine runs Centos 7.9 Due to the Centos issues I want to migrate to Almalinux (8 or later). I updated Centos 7.9 I found a/the site with the Elevate/Leapp route, so I started there. After making steps as in the description (on that page), in Leapp I did the preupgrade check, and that returns some issues which seem to block the process: >>> start of last part of screen output: Complete! ==> Processing phase `TargetTransactionCheck` ====> * local_repos_inhibit Inhibits the upgrade if local repositories were found. ====> * dnf_transaction_check This actor tries to solve the RPM transaction to verify the all package dependencies can be successfully resolved. Applying transaction workaround - yum config fix Last metadata expiration check: 0:03:06 ago on Sat Dec 3 09:53:09 2022. Process Process-464: Traceback (most recent call last): File "/usr/lib64/python2.7/multiprocessing/process.py", line 258, in _bootstrap self.run() File "/usr/lib64/python2.7/multiprocessing/process.py", line 114, in run self._target(*self._args, **self._kwargs) File "/usr/lib/python2.7/site-packages/leapp/repository/actor_definition.py", line 72, in _do_run actor_instance.run(*args, **kwargs) File "/usr/lib/python2.7/site-packages/leapp/actors/__init__.py", line 290, in run self.process(*args) File "/usr/share/leapp-repository/repositories/system_upgrade/common/actors/dnftransactioncheck/actor.py", line 44, in process xfs_info=xfs_info, storage_info=storage_info, plugin_info=plugin_info File "/usr/share/leapp-repository/repositories/system_upgrade/common/libraries/dnfplugin.py", line 371, in perform_transaction_check context=context, stage='check', target_repoids=target_repoids, plugin_info=plugin_info, tasks=tasks File "/usr/share/leapp-repository/repositories/system_upgrade/common/libraries/dnfplugin.py", line 219, in _transaction e.stdout = e.stdout.encode('utf-8', 'xmlcharrefreplace') AttributeError: can't set attribute ====================================================================================================== Actor dnf_transaction_check unexpectedly terminated with exit code: 1 - Please check the above details ====================================================================================================== >>> end of screen output. I guess, something in python-2.7 is a problem; I guess, something in leapp-repositories is a problem. and maybe the AttributeError... Being a simple and old Centosuser, I do not know how to solve this. Can any member give the help to overcome this blocking? Note: my Centos 7.9 uses 'yum' and not 'dnf' as a manager.

3 7

AlmaLinux 9.1 and SELinux problem
by Alessandro Baggi 07 Dec '22

07 Dec '22

Hi, I'm running AlmaLinux 9.1 on VM to play with SELinux and trying to create a custom policy for an app. This app is written in Python and wait files to be processed (uploaded via sftp from another host). It read data from this file and then save them on postgresql DB. If something is wrong with the data, it will send an email. I followed this: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/ht… Generating a custom policy, a permissive line is inserted in the policy: permissive example_t; that, if I'm not wrong, also if denials are found it runs the policy as permissive. Commenting this line and reload the policy my program does not work anymore and I receive this error: psycopg2.connect(127.0.0.1): could not receive data from server: Permission denied could not send SSL negotiation packet: Permission denied The strange thing is that if I run: # ausearch -m AVC -ts recent I don't receive new denied AVC. I tried also to read PostgreSQL side logs but nothing useful. Can someone point me in the right direction? Thank you in advance.

2 6

Re: [Security] Re: Can I use the Elevate tool to migrate my CentOS 7.9 with Virtualmin/Webmin to AlmaLinux 9.0?
by Turritopsis Dohrnii Teo En Ming 24 Nov '22

24 Nov '22

On Sat, 19 Nov 2022 at 06:02, Scott Blaydes <scott(a)nettek.io> wrote: > > As always, create a backup before making changes. > > Thank you, > Scott Blaydes Noted with thanks. I love creating backups :) > > On Fri, Nov 18, 2022 at 10:49:52PM +0800, Turritopsis Dohrnii Teo En Ming wrote: > > On Fri, 18 Nov 2022 at 21:58, Scott Blaydes <scott(a)nettek.io> wrote: > > > > > > I believe that is beyond the scope of this list. > > > > > > Best bet would be to make a clone of the system and try running Elevate. If you can't make a clone, build a new server and try it. > > > > > > Also, if you do choose to build a new server and install an Alma/Virtualmin server, you can migrate backups from the CentOS/Virtualmin and restore them on the new Alma/Virtualmin server. > > > > > > Thank you, > > > Scott Blaydes > > > > Dear Scott Blaydes, > > > > Thank you for your reply. > > > > I think you may have saved my day. > > > > You mean I can make full and complete backups of my web hosting > > control panel using the Virtualmin GUI web interface in CentOS 7.9 and > > restore the backups on the fresh new installation of AlmaLinux > > 9.1/Virtualmin server? > > > > That means I do not need to make a clone of my CentOS 7.9 linux server > > and run Elevate tool already. I can simply make a fresh new > > installation of both AlmaLinux 9.1 and Virtualmin on a brand new > > server. > > > > No migration needed and no headaches and complications. > > > > Thank you. > > > > Mr. Turritopsis Dohrnii Teo En Ming > > > > > > > > On Wed, Nov 16, 2022 at 10:45:10PM +0800, Turritopsis Dohrnii Teo En Ming wrote: > > > > Subject: Can I use the Elevate tool to migrate my CentOS 7.9 with > > > > Virtualmin/Webmin to AlmaLinux 9.0? > > > > > > > > Good day from Singapore, > > > > > > > > I understand both CentOS Linux and AlmaLinux follow Red Hat Enterprise > > > > Linux (RHEL). > > > > > > > > I have 2 CentOS 7.9 Linux virtual private servers (VPS) in Europe. > > > > They are running Virtualmin/Webmin web hosting control panel in master > > > > and slave configuration. > > > > > > > > Unfortunately, the end of life (EOL) date for CentOS 7.9 is 30 June > > > > 2024, which is less than 2 years away. > > > > > > > > Can I use the Elevate tool to migrate my CentOS 7.9 with > > > > Virtualmin/Webmin to AlmaLinux 9.0? Is it technically impossible or > > > > will result in too many complications? > > > > > > > > Should I install AlmaLinux 9.0 from fresh and then install Virtualmin > > > > instead? If I choose this route, I will need to ask Virtualmin > > > > developers how I can migrate the web hosting control panel from CentOS > > > > 7.9 to AlmaLinux 9.0. > > > > > > > > Please advise. > > > > > > > > Thank you. > > > > > > > > Regards, > > > > > > > > Mr. Turritopsis Dohrnii Teo En Ming > > > > Targeted Individual in Singapore > > > > Blogs: > > > > https://tdtemcerts.blogspot.com > > > > https://tdtemcerts.wordpress.com > > > > _______________________________________________ > > > > Security mailing list -- security(a)lists.almalinux.org > > > > To unsubscribe send an email to security-leave(a)lists.almalinux.org > > _______________________________________________ > > Security mailing list -- security(a)lists.almalinux.org > > To unsubscribe send an email to security-leave(a)lists.almalinux.org

1 0