check_cpanel_rpms - p0f Missing

Niteblade · Sep 17, 2016

[email protected] [~]# /usr/local/cpanel/scripts/check_cpanel_rpms --fix

Code:

[2016-09-17 12:41:14 -0500]
[2016-09-17 12:41:14 -0500]   Problems were detected with cPanel-provided files which are RPM controlled.
[2016-09-17 12:41:14 -0500]   If you did not make these changes intentionally, you can correct them by running:
[2016-09-17 12:41:14 -0500]
[2016-09-17 12:41:14 -0500]   > /usr/local/cpanel/scripts/check_cpanel_rpms --fix
[2016-09-17 12:41:14 -0500]   The following RPMs are missing from your system:
[2016-09-17 12:41:14 -0500]   p0f-3.09b-1.cp1150
[2016-09-17 12:41:23 -0500]   Removing 0 broken rpms:
[2016-09-17 12:41:23 -0500]   rpm: no packages given for erase
[2016-09-17 12:41:24 -0500]   Downloading http://httpupdate.cpanel.net/RPM/11.50/centos/7/x86_64/rpm.sha512
[2016-09-17 12:41:24 -0500] W Failed to download URL 'http://httpupdate.cpanel.net/RPM/11.50/centos/7/x86_64/rpm.sha512.asc'.
[2016-09-17 12:41:24 -0500] ***** FATAL: No digest data for p0f-3.09b-1.cp1150.x86_64.rpm
[2016-09-17 12:41:24 -0500]   The Administrator will be notified to review this output when this script completes
No digest data for p0f-3.09b-1.cp1150.x86_64.rpm at /usr/local/cpanel/Cpanel/RPM/Versions/File.pm line 777.

[email protected] [~]# /usr/local/cpanel/scripts/check_cpanel_rpms --fix
[2016-09-17 12:41:29 -0500]
[2016-09-17 12:41:29 -0500]   Problems were detected with cPanel-provided files which are RPM controlled.
[2016-09-17 12:41:29 -0500]   If you did not make these changes intentionally, you can correct them by running:
[2016-09-17 12:41:29 -0500]
[2016-09-17 12:41:29 -0500]   > /usr/local/cpanel/scripts/check_cpanel_rpms --fix
[2016-09-17 12:41:29 -0500]   The following RPMs are missing from your system:
[2016-09-17 12:41:29 -0500]   p0f-3.09b-1.cp1150
[2016-09-17 12:41:38 -0500]   Removing 0 broken rpms:
[2016-09-17 12:41:38 -0500]   rpm: no packages given for erase
[2016-09-17 12:41:39 -0500]   Downloading http://httpupdate.cpanel.net/RPM/11.50/centos/7/x86_64/rpm.sha512
[2016-09-17 12:41:40 -0500] W Failed to download URL 'http://httpupdate.cpanel.net/RPM/11.50/centos/7/x86_64/rpm.sha512.asc'.
[2016-09-17 12:41:40 -0500] ***** FATAL: No digest data for p0f-3.09b-1.cp1150.x86_64.rpm
[2016-09-17 12:41:40 -0500]   The Administrator will be notified to review this output when this script completes
No digest data for p0f-3.09b-1.cp1150.x86_64.rpm at /usr/local/cpanel/Cpanel/RPM/Versions/File.pm line 777.

Vince778 · Sep 17, 2016

I'm having the same problem now as well. Two days in a row after each 'upcp' I start getting hundreds of emails telling me p0f-3.09b-1.cp1150 is missing. I don't want to have to login and fix this by hand every night, when is there going to be a fix for this problem? It's killing my machine.

rpvw · Sep 17, 2016

If one chooses to add repos like EPEL to ones server, I am not at all sure that cPanel would ever be able to "fix" these issues.

cPanel has no idea which of the many hundreds of repos that are available for use you might install, and it is possibly unrealistic to expect them to write code to modify these repos when an admin might have installed and configured them deliberately.

My perspective (sorry !) is that if one is going to work 'outside the box' and add repos that are not included in the cPanel (cloudlinux/kernelcare/MariaDB) installation, then one should be obliged to administrate and configure them at one's own risk.

Vince778 · Sep 17, 2016

rpvw said:
If one chooses to add repos like EPEL to ones server, I am not at all sure that cPanel would ever be able to "fix" these issues.

cPanel has no idea which of the many hundreds of repos that are available for use you might install, and it is possibly unrealistic to expect them to write code to modify these repos when an admin might have installed and configured them deliberately.

My perspective (sorry !) is that if one is going to work 'outside the box' and add repos that are not included in the cPanel (cloudlinux/kernelcare/MariaDB) installation, then one should be obliged to administrate and configure them at one's own risk.

I personally have only ever installed 2 things outside of the normal cPanel packages.

ConfigServer Security & Firewall - csf (Current v9.14)
Munin (Current v2.0.25)

Both were recommended by cPanel, specific instructions for installation were provided by cPanel and both have been running for years already without a problem.

p0f appears to be part of the cPanel & WHM 11.50 release which you can read in the documentation as an 'Updated feature'. So, I'm confused by your statement @rpvw... Is this a broken feature maintained by cPanel or did I do something to cause this in your opinion?

Regards,
Vince

Tonmoy Ajize · Sep 17, 2016

Having the same issues on my server too, running that command line every night ... still getting mails everyday ....

it's happening after last update, before it was ... is it a bug ?

gizzmo2006 · Sep 18, 2016

Hello ex300,

this will fix your Problem only until next update.

Add the line:

exclude=p0f

to /etc/yum.repos.d/epel.repo like this:

[epel]

name=Extra Packages for Enterprise Linux 6 - $basearch
#baseurl=http://download.fedoraproject.org/pub/epel/6/$basearch
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
exclude=p0f

This fixed it for me.

24x7server · Sep 18, 2016

Same here, Even after running the following command we are still receiving multiple alerts

Code:

/usr/local/cpanel/scripts/check_cpanel_rpms --fix

24x7server · Sep 18, 2016

I tried adding p0f* in exclude section under /etc/yum.conf , hopefully it should work.

epaslv · Sep 18, 2016

Infopro said:
This post should be helpful:
p0f service shows "down" icon

The post merely confirms the issue, but offers no solution which is unhelpful.

Is there anything else on offer other than a workaround?

rpvw · Sep 18, 2016

@Vince778

I was attempting to address, and comment on, the conflict that the use of additional repos cause, that the starter of this topic posted about.

If it doesn't apply to your particular issue, you may either be in the wrong thread, or you should just ignore it rather than try to attack me over it.

If some other, and more fundamental, problem exists regarding the p0f RPM's as supplied by cPanel/CentOS - then obviously this needs to be addressed.

Vince778 · Sep 18, 2016

rpvw said:
@Vince778

I was attempting to address, and comment on, the conflict that the use of additional repos cause, that the starter of this topic posted about.

If it doesn't apply to your particular issue, you may either be in the wrong thread, or you should just ignore it rather than try to attack me over it.

If some other, and more fundamental, problem exists regarding the p0f RPM's as supplied by cPanel/CentOS - then obviously this needs to be addressed.

@rpvw

Your comment directly followed my own and did not appear to point to anyone else so I'm not sure why your upset. I responded with more information and was simply trying to understand what you said. It was not an attack, please read it again.

caroseuk · Sep 18, 2016

So an update, which has solved it for me.

Editted my /etc/yum.repos.d/epel.repo file

Added in the following line on the enabled block:

exclude=p0f*

Save > Exit and re-run the --fix command.

Then when upcp next runs the yum update command, it will stop the cPanel p0f rpm from being replaced by the one in EPEL.

That solved it for me anyway.

The reason we have EPEL installed is for installing further useful packages such as Redis for session management in Magento installations.

glauco · Sep 18, 2016

Thanks Chris for this solution. Just to be clear, when you say:

Chris Rose said:
Editted my /etc/yum.repos.d/epel.repo file

Added in the following line on the enabled block:

exclude=p0f*

The first part of my epel.repo file now looks like this:

[epel]
name=Extra Packages for Enterprise Linux 7 - $basearch
#baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
exclude=p0f*

Is that correct? I then ran the /usr/local/cpanel/scripts/check_cpanel_rpms --fix command and fingers crossed, tomorrow I won't be bombarded with another 200 notifications?

Thanks

caroseuk · Sep 18, 2016

Yup! Identical to mine

Worked for me, so should also work for you! Though not sure why you have that many emails? I got one per server.

Let me know how you get on

caroseuk · Sep 18, 2016

I would try excluding it from the epel.repo file as that is where the conflicting rpm is based. That should tell yum to not replace the cpanel p0f rpm with the one found in epel.

Just an idea

tommyxv · Sep 18, 2016

Chris Rose said:
So an update, which has solved it for me.

Editted my /etc/yum.repos.d/epel.repo file

Added in the following line on the enabled block:

exclude=p0f*

Save > Exit and re-run the --fix command.

Then when upcp next runs the yum update command, it will stop the cPanel p0f rpm from being replaced by the one in EPEL.

That solved it for me anyway.

The reason we have EPEL installed is for installing further useful packages such as Redis for session management in Magento installations.

Thanks! This also fixed it for me too. I guess cPanel needs to address this. This started after I upgraded from 58 build 27 to build 28.

Infopro · Sep 18, 2016

epaslv said:
The post merely confirms the issue, but offers no solution which is unhelpful.

Is there anything else on offer other than a workaround?

The below quote was shared with the EDGE users email list this morning:

I submitted a ticket about this yesterday. It turns out this is a known issue. This is the reply:

"The internal case number is CPANEL-8634. The issue happens when the EPEL yum repo is enabled. A yum update installs the p0f package from EPEL instead of the cPanel provided p0f package. To correct this, you should added p0f*.el7.* to the excludes line in /etc/yum.conf, and ran /scripts/check_cpanel_rpms --fix to get the cPanel provided p0f package installed. Then you shouldn't have this issue again."

tommyxv · Sep 18, 2016

I should revert this...

/etc/yum.repos.d/epel.repo file

Added in the following line on the enabled block:

exclude=p0f*

And do this instead?

To correct this, you should added p0f*.el7.* to the excludes line in /etc/yum.conf

Infopro · Sep 18, 2016

That seems proper to me, the second quote being from cPanel Technical Support.

caroseuk · Sep 18, 2016

I personally think keeping it in the epel.repo exclude is better... as the cPanel scripts amend the yum.conf file every time it prepares to run. So it might remove your manually added p0f entry.

I can confirm what I said fixes the issue. I adjusted the crib task to update sooner and all was green across the board

Thread starter	Similar threads	Forum	Replies	Date
	DNS Only [check_cpanel_rpms] There are altered RPMs on xyz	Installation & Updates	2	Oct 31, 2020
V	check_cpanel_rpms --fix hangs non-stop	Installation & Updates	2	Jul 2, 2016
C	[check_cpanel_rpms] Altered RPMs found on	Installation & Updates	2	May 30, 2016
J	[check_cpanel_rpms] Altered RPMs found on	Installation & Updates	4	May 29, 2015
T	[check_cpanel_rpms] Altered RPMs found on	Installation & Updates	5	May 10, 2015

check_cpanel_rpms - p0f Missing

Registered

Member

Well-Known Member

Member

Registered

Active Member

Well-Known Member

Well-Known Member

Member

Well-Known Member

Member

Member

Member

Member

Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Member