check_cpanel_rpms - p0f Missing

Niteblade

Registered
Apr 2, 2011
2
0
51
[email protected] [~]# /usr/local/cpanel/scripts/check_cpanel_rpms --fix
Code:
[2016-09-17 12:41:14 -0500]
[2016-09-17 12:41:14 -0500]   Problems were detected with cPanel-provided files which are RPM controlled.
[2016-09-17 12:41:14 -0500]   If you did not make these changes intentionally, you can correct them by running:
[2016-09-17 12:41:14 -0500]
[2016-09-17 12:41:14 -0500]   > /usr/local/cpanel/scripts/check_cpanel_rpms --fix
[2016-09-17 12:41:14 -0500]   The following RPMs are missing from your system:
[2016-09-17 12:41:14 -0500]   p0f-3.09b-1.cp1150
[2016-09-17 12:41:23 -0500]   Removing 0 broken rpms:
[2016-09-17 12:41:23 -0500]   rpm: no packages given for erase
[2016-09-17 12:41:24 -0500]   Downloading http://httpupdate.cpanel.net/RPM/11.50/centos/7/x86_64/rpm.sha512
[2016-09-17 12:41:24 -0500] W Failed to download URL 'http://httpupdate.cpanel.net/RPM/11.50/centos/7/x86_64/rpm.sha512.asc'.
[2016-09-17 12:41:24 -0500] ***** FATAL: No digest data for p0f-3.09b-1.cp1150.x86_64.rpm
[2016-09-17 12:41:24 -0500]   The Administrator will be notified to review this output when this script completes
No digest data for p0f-3.09b-1.cp1150.x86_64.rpm at /usr/local/cpanel/Cpanel/RPM/Versions/File.pm line 777.

[email protected] [~]# /usr/local/cpanel/scripts/check_cpanel_rpms --fix
[2016-09-17 12:41:29 -0500]
[2016-09-17 12:41:29 -0500]   Problems were detected with cPanel-provided files which are RPM controlled.
[2016-09-17 12:41:29 -0500]   If you did not make these changes intentionally, you can correct them by running:
[2016-09-17 12:41:29 -0500]
[2016-09-17 12:41:29 -0500]   > /usr/local/cpanel/scripts/check_cpanel_rpms --fix
[2016-09-17 12:41:29 -0500]   The following RPMs are missing from your system:
[2016-09-17 12:41:29 -0500]   p0f-3.09b-1.cp1150
[2016-09-17 12:41:38 -0500]   Removing 0 broken rpms:
[2016-09-17 12:41:38 -0500]   rpm: no packages given for erase
[2016-09-17 12:41:39 -0500]   Downloading http://httpupdate.cpanel.net/RPM/11.50/centos/7/x86_64/rpm.sha512
[2016-09-17 12:41:40 -0500] W Failed to download URL 'http://httpupdate.cpanel.net/RPM/11.50/centos/7/x86_64/rpm.sha512.asc'.
[2016-09-17 12:41:40 -0500] ***** FATAL: No digest data for p0f-3.09b-1.cp1150.x86_64.rpm
[2016-09-17 12:41:40 -0500]   The Administrator will be notified to review this output when this script completes
No digest data for p0f-3.09b-1.cp1150.x86_64.rpm at /usr/local/cpanel/Cpanel/RPM/Versions/File.pm line 777.
 
Last edited by a moderator:

Vince778

Member
Jan 1, 2010
14
1
53
I'm having the same problem now as well. Two days in a row after each 'upcp' I start getting hundreds of emails telling me p0f-3.09b-1.cp1150 is missing. I don't want to have to login and fix this by hand every night, when is there going to be a fix for this problem? It's killing my machine.
 

rpvw

Well-Known Member
Jul 18, 2013
1,101
472
113
UK
cPanel Access Level
Root Administrator
If one chooses to add repos like EPEL to ones server, I am not at all sure that cPanel would ever be able to "fix" these issues.

cPanel has no idea which of the many hundreds of repos that are available for use you might install, and it is possibly unrealistic to expect them to write code to modify these repos when an admin might have installed and configured them deliberately.

My perspective (sorry !) is that if one is going to work 'outside the box' and add repos that are not included in the cPanel (cloudlinux/kernelcare/MariaDB) installation, then one should be obliged to administrate and configure them at one's own risk.
 

Vince778

Member
Jan 1, 2010
14
1
53
If one chooses to add repos like EPEL to ones server, I am not at all sure that cPanel would ever be able to "fix" these issues.

cPanel has no idea which of the many hundreds of repos that are available for use you might install, and it is possibly unrealistic to expect them to write code to modify these repos when an admin might have installed and configured them deliberately.

My perspective (sorry !) is that if one is going to work 'outside the box' and add repos that are not included in the cPanel (cloudlinux/kernelcare/MariaDB) installation, then one should be obliged to administrate and configure them at one's own risk.
I personally have only ever installed 2 things outside of the normal cPanel packages.
  1. ConfigServer Security & Firewall - csf (Current v9.14)
  2. Munin (Current v2.0.25)
Both were recommended by cPanel, specific instructions for installation were provided by cPanel and both have been running for years already without a problem.

p0f appears to be part of the cPanel & WHM 11.50 release which you can read in the documentation as an 'Updated feature'. So, I'm confused by your statement @rpvw... Is this a broken feature maintained by cPanel or did I do something to cause this in your opinion?

Regards,
Vince
 

gizzmo2006

Active Member
May 22, 2007
36
1
158
  • Like
Reactions: Morphis

rpvw

Well-Known Member
Jul 18, 2013
1,101
472
113
UK
cPanel Access Level
Root Administrator
@Vince778

I was attempting to address, and comment on, the conflict that the use of additional repos cause, that the starter of this topic posted about.

If it doesn't apply to your particular issue, you may either be in the wrong thread, or you should just ignore it rather than try to attack me over it.

If some other, and more fundamental, problem exists regarding the p0f RPM's as supplied by cPanel/CentOS - then obviously this needs to be addressed.
 

Vince778

Member
Jan 1, 2010
14
1
53
@Vince778

I was attempting to address, and comment on, the conflict that the use of additional repos cause, that the starter of this topic posted about.

If it doesn't apply to your particular issue, you may either be in the wrong thread, or you should just ignore it rather than try to attack me over it.

If some other, and more fundamental, problem exists regarding the p0f RPM's as supplied by cPanel/CentOS - then obviously this needs to be addressed.
@rpvw

Your comment directly followed my own and did not appear to point to anyone else so I'm not sure why your upset. I responded with more information and was simply trying to understand what you said. It was not an attack, please read it again.
 

caroseuk

Member
Aug 4, 2015
24
5
3
United kingdom
cPanel Access Level
Root Administrator
So an update, which has solved it for me.

Editted my /etc/yum.repos.d/epel.repo file

Added in the following line on the enabled block:

exclude=p0f*

Save > Exit and re-run the --fix command.

Then when upcp next runs the yum update command, it will stop the cPanel p0f rpm from being replaced by the one in EPEL.

That solved it for me anyway.

The reason we have EPEL installed is for installing further useful packages such as Redis for session management in Magento installations.
 
  • Like
Reactions: tommyxv and glauco

glauco

Member
Aug 26, 2011
16
1
53
Thanks Chris for this solution. Just to be clear, when you say:

Editted my /etc/yum.repos.d/epel.repo file

Added in the following line on the enabled block:

exclude=p0f*
The first part of my epel.repo file now looks like this:

[epel]
name=Extra Packages for Enterprise Linux 7 - $basearch
#baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
exclude=p0f*


Is that correct? I then ran the /usr/local/cpanel/scripts/check_cpanel_rpms --fix command and fingers crossed, tomorrow I won't be bombarded with another 200 notifications?

Thanks
 

tommyxv

Well-Known Member
Jun 15, 2006
45
7
158
So an update, which has solved it for me.

Editted my /etc/yum.repos.d/epel.repo file

Added in the following line on the enabled block:

exclude=p0f*

Save > Exit and re-run the --fix command.

Then when upcp next runs the yum update command, it will stop the cPanel p0f rpm from being replaced by the one in EPEL.

That solved it for me anyway.

The reason we have EPEL installed is for installing further useful packages such as Redis for session management in Magento installations.

Thanks! This also fixed it for me too. I guess cPanel needs to address this. This started after I upgraded from 58 build 27 to build 28.
 

Infopro

Well-Known Member
May 20, 2003
17,075
524
613
Pennsylvania
cPanel Access Level
Root Administrator
Twitter
The post merely confirms the issue, but offers no solution which is unhelpful.

Is there anything else on offer other than a workaround?
The below quote was shared with the EDGE users email list this morning:

I submitted a ticket about this yesterday. It turns out this is a known issue. This is the reply:


"The internal case number is CPANEL-8634. The issue happens when the EPEL yum repo is enabled. A yum update installs the p0f package from EPEL instead of the cPanel provided p0f package. To correct this, you should added p0f*.el7.* to the excludes line in /etc/yum.conf, and ran /scripts/check_cpanel_rpms --fix to get the cPanel provided p0f package installed. Then you shouldn't have this issue again."
 
  • Like
Reactions: Vince778

tommyxv

Well-Known Member
Jun 15, 2006
45
7
158
I should revert this...

/etc/yum.repos.d/epel.repo file

Added in the following line on the enabled block:

exclude=p0f*

And do this instead?

To correct this, you should added p0f*.el7.* to the excludes line in /etc/yum.conf
 

caroseuk

Member
Aug 4, 2015
24
5
3
United kingdom
cPanel Access Level
Root Administrator
I personally think keeping it in the epel.repo exclude is better... as the cPanel scripts amend the yum.conf file every time it prepares to run. So it might remove your manually added p0f entry.

I can confirm what I said fixes the issue. I adjusted the crib task to update sooner and all was green across the board ☺
 
  • Like
Reactions: tommyxv