Differences

This shows you the differences between two versions of the page.

--- linux:rhel [2020/05/15 11:23] – [PATCH] tmade
+++ linux:rhel [2025/11/17 12:24] (current) – [chronyd] tmade
@@ Line 24: / Line 24: @@
   zypper dist-upgrade
   zypper clean -a
+  rpm -qa --last                                          #shows last applied packages
-=== Systeminfo ===
+====rpm database broken====
+To solve a broken rpm-database:
+  yum info expat
+  mkdir /var/lib/rpm/backup
+  cp -a /var/lib/rpm/__db* /var/lib/rpm/backup/
+  rm -f /var/lib/rpm/__db.[0-9][0-9]*
+  rpm --quiet -qa
+  rpm --rebuilddb
+  yum clean all
+  yum info expat
+  rm -rf /var/lib/rpm/backup
+or
+  mv /var/lib/rpm/__db* /tmp/
+  rpm --rebuilddb
+  yum clean all
+==== Systeminfo ====
   lsb_release -d                                          #>= RHEL7
   cat /etc/redhat-release                                 #<= RHEL6
-=== Search & Install ===
+==== Search & Install ====
   yum search package
   yum search all package
   yum list java*                                                                                                       #search versions, getting also repos which contain the package
+  yum list java-1.8.0-ibm*
   yum reinstall package
   yum install package
+  yum erase httpd httpd-tools
   yum -y --nogpgcheck install nrpe nagios-plugins-disk nagios-plugins-load nagios-plugins-swap nagios-plugins-procs
+  yum reinstall --downloadonly --downloaddir=/tmp kernel-debuginfo glibc-langpack-de-2.28-225.el8.x86_64.rpm
   pkcon search name package                                                                                            #shows all available versions of a package
-=== Satellite ===
+==== Satellite ====
   /etc/init.d/taskomatic restart
@@ Line 72: / Line 94: @@
 Open http(s):
-  firewall-cmd --zone=public --add-service=http --permanent
+  firewall-cmd --zone=public --add-service=http --permanent             #persistent
-  firewall-cmd --zone=public --add-service=https --permanent
+  firewall-cmd --zone=public --add-service=https --permanent            #persistent
+  firewall-cmd --permanent --zone=public --add-port=8433/tcp            #persistent
+  firewall-cmd --zone=public --add-port=8080/tcp                        #temporary until reboot
+Check:
+  firewall-cmd --list-ports                                             #show open ports/ services
+  firewall-cmd --list-all-zones
 Activate:
@@ Line 203: / Line 232: @@
   subscription-manager attach --auto
+====Certificate====
+To add a certificate in the simple PEM or DER file formats to the list of CAs trusted on the system, copy the certificate file to the /usr/share/pki/ca-trust-source/anchors/ or /etc/pki/ca-trust/source/anchors/ directory. To update the system-wide trust store configuration, use the update-ca-trust command, for example:
+  cp ~/certificate-trust-examples/Cert-trust-test-ca.pem /usr/share/pki/ca-trust-source/anchors/
+  update-ca-trust
+====chronyd ====
+Check:
+  chronyc tracking
+  chronyc sources
+  chronyc -n sourcestats     #show IP of ntp-server
+  chronyc sourcestats        #show dns-name of ntp-server
+Service:
+  systemctl status chronyd.service
+Sync oneshot:
+  chronyd -q 'server NTPname-DNS-or-IP iburst'                 #chronyd.service has to be stopped before!
+====dnf====
+If you use dnf behind a proxy, the download takes longer and dnf runns into a timeout. To fix ist add "timeout" to "/etc/dnf/dnf.conf":
+  timeout=3000