An Old-timer Needs to Install CentOS 7

General support questions
kenmorgan
Posts: 70
Joined: 2012/07/30 17:28:43
Contact:

Re: An Old-timer Needs to Install CentOS 7

Post by kenmorgan » 2020/12/18 17:13:42

Yes, the old timer once again is lost.

Thanks pjsr2 and Trevor; I appreciate your help. But I don't understand this:

"you might want to point the updates repo at vault just to pick up 2 final-day updates"

What is the "Vault"?

Could you give me a step-by-step procedure on how to do this? And would this procedure make the "Problem connecting to a software source..." stop coming up? It comes up ten or twelve time a day.

Ken
CentOS 6

User avatar
TrevorH
Forum Moderator
Posts: 30344
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: An Old-timer Needs to Install CentOS 7

Post by TrevorH » 2020/12/18 17:45:29

"vault" is vault.centos.org which is where all old dead releases of CentOS go to when they reach end of life. The various files under /etc/yum.repos.d currently point to either mirrorlist.c.o or to mirror.c.o and those no longer contain CentOS 6. You will need to edit those files and change all the baseurl= lines to point to the equivalent directory on vault.centos.org and comment out all the mirrorlist= lines (since mirrorlist no longer returns CentOS 6 urls).

There were updates to thunderbird and firefox on the very last day of support but by the time they were built, the repos had already been closed down and archived to vault so those 2 updates went directly to the archived copy on vault.
CentOS 6 died in November 2020 - migrate to a new version!
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 is dead, do not use it.
Full time Geek, part time moderator. Use the FAQ Luke

User avatar
jlehtone
Posts: 3349
Joined: 2007/12/11 08:17:33
Location: Finland

Re: An Old-timer Needs to Install CentOS 7

Post by jlehtone » 2020/12/18 22:29:50

vault.centos.org lists three sites that might have copies of the binary packages (and most likely have better bandwidth than the vault server).

kenmorgan
Posts: 70
Joined: 2012/07/30 17:28:43
Contact:

Re: An Old-timer Needs to Install CentOS 7

Post by kenmorgan » 2021/01/14 20:40:14

The Old-timer is older! :cry: But finally I'm back.

Trevor, you suggested this:

"The various files under /etc/yum.repos.d currently point to either mirrorlist.c.o or to mirror.c.o and those no longer contain CentOS 6. You will need to edit those files and change all the baseurl= lines to point to the equivalent directory on vault.centos.org and comment out all the mirrorlist= lines (since mirrorlist no longer returns CentOS 6 urls)."

I probably misunderstand what you are saying, but the files in my directory /etc/yum.repos.d are these:

/etc/yum.repos.d/adobe-linux-i386.repo
/etc/yum.repos.d/CentOS-Base.repo
/etc/yum.repos.d/CentOS-Debuginfo.repo
/etc/yum.repos.d/CentOS-fasttrack.repo
/etc/yum.repos.d/CentOS-Media.repo
/etc/yum.repos.d/CentOS-Vault.repo
/etc/yum.repos.d/elrepo.repo
/etc/yum.repos.d/epel.repo
/etc/yum.repos.d/epel-testing.repo
/etc/yum.repos.d/google-chrome.old
/etc/yum.repos.d/linuxtech.repo

(Sorry for the bad words in the second to the last! :lol: )

There was no "mirrorlist.c.o" or "mirror.c.o" in the list. Therefore, I looked inside two of these files (only two!):

First File:

/etc/yum.repos.d/CentOS-Vault.repo:

# CentOS-Vault.repo
#
# CentOS Vault holds packages from previous releases within the same CentOS Version
# these are packages obsoleted by the current release and should usually not
# be used in production
#-----------------

[C6.0-base]
name=CentOS-6.0 - Base
baseurl=http://vault.centos.org/6.0/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=0

[C6.0-updates]
name=CentOS-6.0 - Updates
baseurl=http://vault.centos.org/6.0/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=0

Etc., etc.

No "mirrorlist.c.o" or "mirror.c.o".

Here's File Two:

/etc/yum.repos.d/CentOS-Base.repo:

# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base
mirrorlist=http://mirrorlist.centos.org/?release=$ ... fra=$infra
#baseurl=http://mirror.centos.org/centos/$releas ... $basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#released updates
[updates]
name=CentOS-$releasever - Updates
mirrorlist=http://mirrorlist.centos.org/?release=$ ... fra=$infra
#baseurl=http://mirror.centos.org/centos/$releas ... $basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

Etc., etc.

Here "mirrorlist" appears but not "mirrorlist.c.o" or "mirror.c.o".

So the question I think I should ask is this: what should I do with the contents of the eleven files in /etc/yum.repos.d to stop that little pop up ??

Thanks again!
CentOS 6

sml
Posts: 221
Joined: 2020/01/17 09:01:44

Re: An Old-timer Needs to Install CentOS 7

Post by sml » 2021/01/16 10:24:50

kenmorgan wrote:
2021/01/14 20:40:14
what should I do with the contents of the eleven files in /etc/yum.repos.d to stop that little pop up?
Remove these files:
kenmorgan wrote:
2021/01/14 20:40:14

Code: Select all

/etc/yum.repos.d/CentOS-Base.repo
/etc/yum.repos.d/CentOS-Debuginfo.repo
/etc/yum.repos.d/CentOS-fasttrack.repo
 
kenmorgan wrote:
2021/01/14 20:40:14
There was no "mirrorlist.c.o" or "mirror.c.o" in the list.
mirrorlist.c.o and mirror.c.o stand for mirrorlist.centos.org resp. mirror.centos.org. Saves you a few keystrokes when you type an answer in the forum. ;)
 
kenmorgan wrote:
2021/01/14 20:40:14
/etc/yum.repos.d/CentOS-Vault.repo:

Code: Select all

# CentOS-Vault.repo
#
# CentOS Vault holds packages from previous releases within the same CentOS Version
# these are packages obsoleted by the current release and should usually not 
# be used in production
#-----------------

[C6.0-base]
name=CentOS-6.0 - Base
baseurl=http://vault.centos.org/6.0/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=0
Manually add similar sections for C6.10 to this file and make them enabled:

Code: Select all

[C6.10-base]
name=CentOS-6.10 - Base
baseurl=http://vault.centos.org/6.10/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=1
Etc., etc.
;)

kenmorgan
Posts: 70
Joined: 2012/07/30 17:28:43
Contact:

Re: An Old-timer Needs to Install CentOS 7

Post by kenmorgan » 2021/01/27 20:18:15

Thanks so much, sml -- :)

I think I did everything you said. But did you mean to do only the first set of five (Base, Updates, Extras, Contrib, and CentOSPlus) by changing the 6.0 to 6.10 and the "enable=0" to "enable=1"?

OR, do I also do the remaining nine sets of five? The second set would then require the 6.1 to become 6.11, the third set 6.2 to become 6.12, etc.?

Ken
CentOS 6

sml
Posts: 221
Joined: 2020/01/17 09:01:44

Re: An Old-timer Needs to Install CentOS 7

Post by sml » 2021/01/27 20:25:04

No, 6.10 is the final point release of CentOS 6. There will be no 6.11.

The whole point of this exercise is to give you (a temporary) access to working 6.10 repositories while you're preparing your migration to CentOS 7. The vault repositories don't change and don't get any updates.

User avatar
TrevorH
Forum Moderator
Posts: 30344
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: An Old-timer Needs to Install CentOS 7

Post by TrevorH » 2021/01/28 14:43:21

CentOS 6 is dead, You need to get off it ASAP. It's only been out of support for 2 months and there is already one critical update (for sudo) that allows a local attacker to immediately gain complete root access. This will never be fixed in CentOS 6.
CentOS 6 died in November 2020 - migrate to a new version!
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 is dead, do not use it.
Full time Geek, part time moderator. Use the FAQ Luke

kenmorgan
Posts: 70
Joined: 2012/07/30 17:28:43
Contact:

Re: An Old-timer Needs to Install CentOS 7

Post by kenmorgan » 2021/01/28 19:36:54

Hi Trevor, and thanks so much for your warning. :oops:

Here's what I did, based on sml's suggestions. This is the result on /etc/yum.repos.d :

drwxr-xr-x. 2 root root 4096 Jan 27 14:50 .
drwxr-xr-x. 139 root root 12288 Jan 27 04:51 ..
-rw-r--r--. 1 root root 179 Jan 22 2016 adobe-linux-i386.repo
-rw-r--r--. 1 root root 179 Jan 22 2016 adobe-linux-i386.repo~
-rw-r--r-- 1 root root 1991 Jan 27 14:12 CentOS-Base.repo-old
-rw-r--r-- 1 root root 647 Jan 27 14:15 CentOS-Debuginfo.repo-old
-rw-r--r-- 1 root root 289 Jan 27 14:16 CentOS-fasttrack.repo-old
-rw-r--r-- 1 root root 630 Jun 26 2018 CentOS-Media.repo
-rw-r--r-- 1 root root 8869 Jan 27 14:50 CentOS-Vault.repo
-rw-r--r-- 1 root root 8854 Jun 26 2018 CentOS-Vault.repo~
-rw-r--r-- 1 root root 8854 Jan 27 14:39 CentOS-Vault.repo-old
-rw-r--r-- 1 root root 1946 Jun 15 2020 elrepo.repo
-rw-r--r-- 1 root root 957 Nov 4 2012 epel.repo
-rw-r--r-- 1 root root 1056 Nov 4 2012 epel-testing.repo
-rw-r--r-- 1 root root 114 Aug 25 2012 google-chrome.old
-rw-r--r-- 1 root root 614 Nov 29 2011 linuxtech.repo

Note that I didn't throw out anything from /etc/yum.repos.d that I had. These three -- CentOS-Base.repo-old, CentOS-Debuginfo.repo-old, and CentOS-fasttrack.repo-old -- are still what they used to be. The "old" just "removed" them as sml suggested. CentOS-Vault.repo-old is also what it had been, but here I created a new CentOS-Vault.repo, again as sml suggested. All that was yesterday, and nothing else was done. Now today I suddenly find the following from yum:

yum check-update
Loaded plugins: fastestmirror, refresh-packagekit, security
Determining fastest mirrors
epel/metalink | 2.5 kB 00:00
* elrepo: muug.ca
* epel: mirror.math.princeton.edu
C6.10-base | 3.7 kB 00:00
C6.10-base/primary_db | 3.7 MB 00:02
C6.10-centosplus | 3.4 kB 00:00
C6.10-centosplus/primary_db | 5.6 MB 00:03
C6.10-contrib | 2.9 kB 00:00
C6.10-contrib/primary_db | 7.3 kB 00:00
C6.10-extras | 3.3 kB 00:00
C6.10-extras/primary_db | 20 kB 00:00
C6.10-updates | 3.4 kB 00:00
C6.10-updates/primary_db | 11 MB 00:08
adobe-linux-i386 | 2.9 kB 00:00
elrepo | 3.0 kB 00:00
linuxtech-release | 2.6 kB 00:00

elrepo-release.noarch 6-12.el6.elrepo elrepo
firefox.i686 78.5.0-1.el6.centos C6.10-updates
flash-plugin.i386 32.0.0.465-release adobe-linux-i386
java-1.8.0-openjdk.i686 1:1.8.0.275.b01-0.el6_10 C6.10-updates
java-1.8.0-openjdk-headless.i686
1:1.8.0.275.b01-0.el6_10 C6.10-updates
kernel.i686 2.6.32-754.35.1.el6.centos.plus C6.10-centosplus
kernel-firmware.noarch 2.6.32-754.35.1.el6.centos.plus C6.10-centosplus
kernel-headers.i686 2.6.32-754.35.1.el6.centos.plus C6.10-centosplus
microcode_ctl.i686 2:1.17-33.31.el6_10 C6.10-updates
net-snmp.i686 1:5.5-60.el6_10.2 C6.10-updates
net-snmp-libs.i686 1:5.5-60.el6_10.2 C6.10-updates
postfix.i686 2:2.6.6-8.el6.centos.plus C6.10-centosplus

You'll notice all the "C6.10" appearances as sml suggested. Does what he said allow a local attacker to immediately gain complete root access?

Because of reading your latest warning, I have NOT used yum to update any of those items by running check-update. So now for my questions:

(1) Should I remove everything in /etc/yum.repos.d that starts with "CentOS..."?

(2) Or should I remove BOTH all the "CentOS" items AS WELL AS adobe-linux-i386.repo, elrepo.repo, epel.repo, epel-testing.repo, and linuxtech.repo?

(3) Whether I do (1) or (2), I think I should certainly removed "google-chrome.old". :D

Thanks again, Trevor. I really appreciate how you're helping me.

Ken
CentOS 6

kenmorgan
Posts: 70
Joined: 2012/07/30 17:28:43
Contact:

Re: An Old-timer Needs to Install CentOS 7

Post by kenmorgan » 2021/02/04 20:27:04

:?

Hi Trevor. The two latest posts here were first from you (01/28) and then from me (also 01/28). I really appreciated that post you gave, and then I put together my post, based on your really helpful and important comments. My response was rather lengthy and then ended with my questions on how to proceed. I know you are really busy, but as your time permits, I'm really anxious for your answers. :)

Thanks so much.

Ken
CentOS 6

Post Reply

Return to “CentOS 7 - General Support”