CentOS/RHEL 8

Question: How too avoid the warning “BAD PASSWD : is too simple” when changing password in Linux? 1. Modify the configuration file /etc/pam.d/password-auth and /etc/pam.d/system-auth to set the password complexity. # vi /etc/pam.d/password-auth The following information are displayed. auth required pam_env.so auth sufficient pam_unix.so try_first_pass nullok auth required pam_deny.so account required pam_unix.so #password requisite pam_cracklib.so […]

This post outlines steps to add a host or network range to a trusted zone, in firewalld, to allow all traffic regardless of the destination port. To create a rule to allow all traffic from a node or network range, it should use the trusted network zone in firewalld. 1. To add an host to […]

Question: How to enable logging in firewalld for CentOS/RHEL 8? 1. Edit the /etc/firewalld/firewalld.conf and change the “LogDenied” line to the following: # vi /etc/firewalld/firewalld.conf LogDenied=all 2. Edit the /etc/sysconfig/firewalld and add or change the “FIREWALLD_ARGS” line to the following: # vi /etc/sysconfig/firewalld FIREWALLD_ARGS=–debug=10 3. Restart the firewalld service: # systemctl restart firewalld.service 4. Check […]

The Problem While installing package or listing using dnf or yum commands getting below errors: # dnf repolist .. Failed to synchronize cache for repo ‘xxx’, ignoring this repo. Failed to synchronize cache for repo ‘yyy’, ignoring this repo. While checking the dnf logs: # tail -f /var/log/dnf.log 2019-08-12T10:58:13Z INFO — logging initialized — 2019-08-12T10:58:13Z […]

This post provides information about the user account systemd-bus-proxy. The user account systemd-bus-proxy was used in the past by systemd-bus-proxyd service. systemd-bus-proxy:x:999:997:systemd Bus Proxy:/:/sbin/nologin Starting systemd-219-32, bus-proxyd was removed. Therefore, it is no longer in use in later systemd versions. * Mon Feb 20 2017 Lukas Nykryn – 219-32 … – remove bus-proxyd (#1317518) NOTE: […]

The high-level steps are outlined below: Installing the Cockpit Virtual Machines Module Creating a Virtual Machine in Cockpit Starting the Installation Add other servers in Cockpit to montior The Web Console is installed by default on Oracle Linux 8 installations unless you do a minimal installation. The Web Console is not started by default, so […]

1. Install the cockpit package On CentOS/RHEL 8 8 systems with non-minimal installations, the cockpit package is included by default. Otherwise, it would need to manually install Cockpit. In either case, running the following command ensures that the package is installed and is up to date. # sudo dnf install cockpit 2. Enable and start […]

The mokutil package is used to update the MOK list with a certificate or hash. Mokutil package is not available for CentOS/RHEL 6. It is available for CentOS/RHEL 7 and 8. If you are using CentOS/RHEL 8, make sure you have the CentOS/RHEL 8 (x86_64) BaseOS Latest repository enabled and then run command below to […]

Question: How tp add a rule using firewall-cmd to drop/reject specific IP connecting to the server? This can be used as an added security on the server. firewall-cmd is the most common method of managing firewalld configurations (both running as well as permanent). This tool is a part of the firewalld package. 1. Create new […]

This post explains how to rotate Tang Server Keys and update the Clevis Client. Note, below is an example hence all certificates, keys and device names/uuid’s are fictional. Change the keys on the tang server 1. Check existing key: # ls -la /var/db/tang total 8 dr-xrws—. 2 tang tang 84 Jun 26 11:24 . drwxr-xr-x. […]