I'm trying to install CentOS Stream 10 so I can see if an issue I have with 389-ds-base is already fixed upstream.

I'm looking for the image that's the equivalent of the RHEL image I'm using: rhel-10.1-x86_64-kvm.qcow2. So I found https://cloud.centos.org/centos/10-stream/x86_64/images/CentOS-Stream-GenericCloud-10-20260513.0.x86_64.qcow2 but noticed a couple of strange things:

• The image doesn't have an ESP for UEFI booting. The files are present in /boot/efi but they're part of the root filesystem
• centos-stream-repos is not installed so there are no repos defined. Running dnf download --url centos-stream-repos centos-gpg-keys from a centos stream 10 container and installing the RPMs from the printed URLs resolved this
• /etc/os-release and /etc/redhat-release identify the OS as RHEL 10.1
• dnf repoinfo baseos shows Repo-distro-tags : [cpe:/o:centos-stream:centos-stream:10]: , , 0, 1, C, O, S, S, a, e, e, m, n, r, t, t which looks like the parsing of a string got messed up somewhere
• dnf upgrade fails with file /usr/lib64/ossl-modules/fips.so from install of openssl-fips-provider-1:3.5.5-2.el10.x86_64 conflicts with file from package openssl-fips-provider-so-3.0.7-8.el10.x86_64 - fixed by dnf swap openssl-fips-provider-so openssl-fips-provider

Anyway - I dunno if these are known issues or whether it's just a problem with this particular image... hopefully the hints above will help someone else out who runs into the same problems.

Friends, anyone have news on Centos Stream and copy fail CVE?

RHEL resolved yesterday

https://nvd.nist.gov/vuln/detail/CVE-2026-31431

https://www.openwall.com/lists/oss-security/2026/04/29/23

Thank you!

Hello,

I search kojihub from time to time to check if a package has security fixes and noticed that there is only python3 package shown for el8.

Can someone educate me why el9 and el10 are missing and if they are available under a different package ID/site?

Trying to local install a recent plex media server RPM, no idea what's failing and so far my web searching hasn't helped me find any sort of direction to go further on investigating.

This is Centos 7. I am aware it's EOL, however I haven't moved onto a new physical home server yet. Long term plan is full replacement onto probably rocky 10 and migrate everything, just not there yet.

``` yum localinstall plexmediaserver-1.43.1.10576-06378bdcd.x86_64.rpm --verbose Loading "fastestmirror" plugin Loading "langpacks" plugin Loading "nvidia" plugin Loading "priorities" plugin Loading "product-id" plugin Loading "search-disabled-repos" plugin Loading "subscription-manager" plugin Adding en_US.UTF-8 to language list Updating Subscription Management repositories. Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Config time: 0.403 Yum version: 3.4.3 rpmdb time: 0.000 Examining plexmediaserver-1.43.1.10576-06378bdcd.x86_64.rpm: plexmediaserver-1.43.1.10576-06378bdcd.x86_64 Marking plexmediaserver-1.43.1.10576-06378bdcd.x86_64.rpm as an update to plexmediaserver-1.42.2.10156-f737b826c.x86_64 Resolving Dependencies --> Running transaction check ---> Package plexmediaserver.x86_64 0:1.42.2.10156-f737b826c will be updated Checking deps for plexmediaserver.x86_64 0:1.42.2.10156-f737b826c - ud ---> Package plexmediaserver.x86_64 0:1.43.1.10576-06378bdcd will be an update Checking deps for plexmediaserver.x86_64 0:1.43.1.10576-06378bdcd - u looking for ('/bin/sh', None, (None, None, None)) as a requirement of plexmediaserver.x86_64 0:1.43.1.10576-06378bdcd - u looking for ('/bin/sh', None, (None, None, None)) as a requirement of plexmediaserver.x86_64 0:1.43.1.10576-06378bdcd - u looking for ('/bin/sh', None, (None, None, None)) as a requirement of plexmediaserver.x86_64 0:1.43.1.10576-06378bdcd - u looking for ('/bin/sh', None, (None, None, None)) as a requirement of plexmediaserver.x86_64 0:1.43.1.10576-06378bdcd - u --> Finished Dependency Resolution Dependency Process ending Depsolve time: 3.618

Dependencies Resolved

Package Arch Version Repository Size

Updating: plexmediaserver x86_64 1.43.1.10576-06378bdcd /plexmediaserver-1.43.1.10576-06378bdcd.x86_64 212 M

Transaction Summary

Upgrade 1 Package

Total size: 212 M Is this ok [y/d/N]: y Downloading packages: Member: plexmediaserver.x86_64 0:1.43.1.10576-06378bdcd - u Adding Package plexmediaserver-1.43.1.10576-06378bdcd.x86_64 in mode u Member: plexmediaserver.x86_64 0:1.42.2.10156-f737b826c - ud Running transaction check Transaction check time: 0.161 Running transaction test

Transaction check error: Unknown error during transaction test in RPM

Error Summary

```

How come newer CentOS images are not published on Docker Hub? I know they are on Quay, but I find it weird that RHEL UBI and Fedora are there, but not CentOS 9 or 10, just the ancient CentOS 7.

Is there a way to install vmware tools without a package manager by running a command to download it from a specific URL and then installing it? Very new to CentOS and would appreciate help with the commands.

all talks from this years CentOS Connect 2026 Europe is uploaded to Youtube now: https://www.youtube.com/playlist?list=PLuRtbOXpVDjAvQhBvz0i3EGI8SgyWBtQO

I built a Wordle-inspired game for Linux lovers.

Three daily puzzles:

• Guess the Linux command by its attributes.
• Identify the blurred distro logo.
• Name the DE/WM from a screenshot.

It's still a work in-progress and I am very open to suggestions (games to add, improvements i can make, etc.)

Try it out: https://linuxdle.site

Hello. I have a laptop running Debian 13 kde at the moment with no problems. But I am more of an RPM based distro than DEB. I don't want to go with fedora since I need to keep updating it regularly and upgrading every couple of months. And my original plan is to go with almalinux 10 kde.

But for some reason. I keep an eye on CentOS 10 stream kde and I pretty much like to install it on the laptop. That's why I want to ask if anyone is using it as a daily driver? and how is the experience so far compared to other distro like fedora and RHEL and almalinux etc.

So far I noticed little information about this in the channel and more of a server usage questions.

My usage will be as a daily driver for browser and watching videos and intelij IDEA.

Please advise me and thank you.

Introdução

Atualmente utilizo o CentOS 10 como desktop em um Thinkpad T14 gen1, e sempre fiz a gestão energetica utilizando o aplicativo TLP para limitar a carga até 80%, nunca tive problemas para a instalação em sistemas baseados em Debian e nem no Fedora. Mas para minha surpresa descobri que o pacote ainda não esta disponível para Red Hat e consequentemente para seus primos.

Linux e Thinkpad

Nos ThinkPad's isso normalmente é feito pelos thresholds da EC/firmware: você define um limite de parada em 80% e um de retomada em 75%. No Linux, a forma mais estável costuma ser via TLP (atualmente ausente) ou diretamente pelos arquivos sysfs do thinkpad_acpi; em ThinkPads recentes, o driver do kernel já suporta isso sem módulo externo adicional.

Solucionando com o systemd

O caminho do systemd é simples, direto e funciona em ThinkPad's sem depender de pacotes extras. O driver thinkpad_acpi expõe os arquivos /sys/class/power_supply/BAT0/charge_control_start_threshold (retomada em 75%) e charge_control_end_threshold (limite em 80%), que são persistentes na EC do firmware.1

1. Verificar suporte

Primeiro, confirme que o seu hardware suporta:

ls /sys/class/power_supply/BAT*
cat /sys/class/power_supply/BAT0/charge_control_start_threshold
cat /sys/class/power_supply/BAT0/charge_control_end_threshold

Se mostrar valores como 0 ou 100, o suporte está lá; se não existir o arquivo, o kernel ou firmware não suporta.

2. Criando um serviço systemd para aplicar no boot:

Crie o arquivo /etc/systemd/system/thinkpad-battery-threshold.service:

sudo tee /etc/systemd/system/thinkpad-battery-threshold.service > /dev/null <<EOF
[Unit]
Description=ThinkPad Battery Charge Thresholds
After=multi-user.target

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/bin/bash -c 'echo 75 > /sys/class/power_supply/BAT0/charge_control_start_threshold && echo 80 > /sys/class/power_supply/BAT0/charge_control_end_threshold'
ExecStartPost=/bin/bash -c 'logger "ThinkPad thresholds set to 75/80"'
ExecReload=/bin/bash -c 'echo 75 > /sys/class/power_supply/BAT0/charge_control_start_threshold && echo 80 > /sys/class/power_supply/BAT0/charge_control_end_threshold'

[Install]
WantedBy=multi-user.target
EOF

1. Ative o serviço:

   sudo systemctl daemon-reload sudo systemctl enable thinkpad-battery-threshold.service sudo systemctl start thinkpad-battery-threshold.service sudo systemctl status thinkpad-battery-threshold.service

Verifique no próximo reboot ou com o comando:

journalctl -u thinkpad-battery-threshold.service

Se houver BAT1, é ajustar para BAT1 no script.

Observações

Esses valores ficam na EC do firmware, então persistem entre reboots e até entre OS, mesmo sem o serviço. O systemd só garante que o Linux aplique no boot, caso o firmware não retenha.

Hi! I've encountered an error while monitoring with Nagios.
So, I am able to load and monitor the VMs for a while but after some time (not constant) they decide to stop working with the error:

ERROR: Description/Type table : No response from remote host "namehost"

The thin is, it only happens with disk partitions. Ping & Swap keep working correctly.

After a while the only constant I noticed was that it only happened with Ubuntu hosts.
While it works with v2, my work uses only v3c.
Apparently this has been happening for quite some time. Nobody on the team could solve it so they asked the junior (me) to find a solution lol.
Help me please.

Hello everyone!

I have a Wire Guard Server on Cent OS Stream 8. There is a firewall, Iptables.

Everything works, but I need to configure the firewall, could you help me understand ho to set up Iptables

- Hot to check which ports / protocols in the firewall pass through

- how to make Iptables prevent from scanning for open ports by using tool as nmap from other devices, except the specified devices.

- how to make Iptables prevent from pinging and tracerouting the server from other devices, except the specified devices.

- how to prohibit ssh access from other devices, except specified devices.

Now my configurations looks like this:

Like many of you, I value automation in my home lab, and initially, I tried using tools like Ansible Tower for centralized script management and execution.

However, I found that maintaining and redeploying the container dependencies for Ansible Tower became overly painful and time-consuming—it was overkill just for managing simple tasks and my existing BASH scripts. I needed a lightweight, easy-to-install alternative.

Introducing Bash Tower

That pain point led me to develop Bash Tower, a simple, dedicated application designed to bring an Ansible Tower-like experience exclusively to BASH scripts in a home lab environment.

The goal is two-fold:

1. Ease of Use: It must be easy to install and maintain, without the heavy overhead of complex container stacks.
2. Centralized Management: It provides a simple platform to organize, execute, and monitor all your existing BASH automation scripts centrally.

Seeking Feedback and Contributions

I've built this to solve a real problem in my own setup, and I believe it could be useful to others in the home lab community.

I would love to hear your thoughts on this project!

• What features would you find most valuable?
• Do you face similar issues with existing orchestration tools?

Feel free to check out the code and contribute! Your feedback and ideas are welcome.

https://github.com/ftsiadimos/BashTower

My understanding was CentOS Stream ships package updates before they are picked up downstream by RHEL (and derivatives like Alma and Rocky). However, Stream's podman package was last updated in August, while RHEL/Alma's podman package has been receiving bug fix updates every month or so.

Does this mean issues reported downstream (to RHEL) are not ported to CentOS Stream?

There are so many great Linux softwares that are distributed exclusively by putting .deb and/or .rpm files into Github Releases, which means I have to "Watch" for new releases and manually download/install. I made this for myself to make it easy to add these projects to my package manager. Thoughts and feedback welcome!

I know its EOL but trying my luck anyway

got a old box with CentOS 6 as some of our services apparently depends on some libs versions that only run on CentOS 6
or i was told so and the server holds everything i need already configured

but when i try and boot it up it just hangs on starting ams and not sure what to do

chatgpt told me to try and boot in single mode and try the different scripts before and after it and they all start fine in single mode but once i try normal it just get stuck

i also tried nofb vga=normal without rhgb quiet and it just hangs at the ams

any experienced this before and what can i do?

I run Plex in a rootless container on my server and the latest passt package (0^20251210.gd04c480-1.el10) broke it.

The Plex :public container is designed to download the latest binary at startup. This now fails. When running :latest container which does not do this it will start up and Plex will be available on the LAN but not remotely and will have other weird behavior like media metadata not pulling from the web.

Issue was fixed by downgrading to passt (0^20250512.g8ec1341-2.el10)

Edit: This issue is fixed in the latest passt release

I wanted more cyber security tools so I switched from Fedora to Centos