CentOS - Oct 2019 - CentOS 8: what changed (regular UNIX admin commands)?

On Tue, 22 Oct 2019 at 14:11, David G. Miller <dave at davenjudy.org>
wrote:
>
> On 10/22/19 10:55 AM, Valeri Galtsev wrote:
> > Hello Experts!
> >
> > I'm sure many of you run CentOS for some time already.
> >
> > My question is: is there some place that lists which of the most often
> > used sysadmin commands are gone and what are replacements for them. Or
> > what else one needs to do after successful installation. (in the past
> > it was process accounting that was not enabled by default, but which
> > gives you quite some handle in investigating compromise).
> >
> > I just tried quite ordinaly command of freshly installed CentOS 8:
> >
> > last
> >
> > and got an error:
> >
> > last: (default utx db): No such file or directory
> >
> > I realize that it could be just me, and I'll cope with that myself
one
> > way or another but this one prompted me to ask everybody: Is there
> > anything I can read so I can learn what differenmt to expect on CentOS
> > 8 from, say, CentOS 7?
> >
> > Thanks.
> > Valeri
> >
> > ++++++++++++++++++++++++++++++++++++++++
> > Valeri Galtsev
> > Sr System Administrator
> > Department of Astronomy and Astrophysics
> > Kavli Institute for Cosmological Physics
> > University of Chicago
> > Phone: 773-702-4247
> > ++++++++++++++++++++++++++++++++++++++++
> > _______________________________________________
> > CentOS mailing list
> > CentOS at centos.org
> > https://lists.centos.org/mailman/listinfo/centos
> Saw your later response that the problem was solved but this is an
> interesting question that deserves an answer (and not just what changed
> in RHEL8).  As an example, I'm used to ifconfig and route but keep
> getting reminded that these commands are now deprecated and "ip"
should
> be used instead.  Likewise for using dnf instead of yum, systemctl
I think that the deprecation of ifconfig and route was started before
RHEL-7 came out.. and yet I just can't get used to them.
> instead of service, firewallcmd instead of iptables, etc. I wonder how
> many shell scripts there are "out there" that folks have written
or
> accumulated over the years and which now need to be updated before
> deprecated becomes no longer available?  Or, like using iptables instead
> of firewallcmd, may cause something very different than what is expected.
>
> Anyone know of any resource out there that might provide such
documentation?
>
> Cheers,
> Dave
>
> --
> "They that can give up essential liberty to obtain a little temporary
safety deserve neither safety nor liberty."
>
> -- Benjamin Franklin
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos


-- 
Stephen J Smoogen.

The ip commands have been around since Centos 6 if not earlier.  you can do
things with them that you can't do with ifconfig, such as setup policy
routing rule sets..



On Tue, Oct 22, 2019 at 11:27 AM Stephen John Smoogen <smooge at
gmail.com>
wrote:
> On Tue, 22 Oct 2019 at 14:11, David G. Miller <dave at davenjudy.org>
wrote:
> >
> > On 10/22/19 10:55 AM, Valeri Galtsev wrote:
> > > Hello Experts!
> > >
> > > I'm sure many of you run CentOS for some time already.
> > >
> > > My question is: is there some place that lists which of the most
often
> > > used sysadmin commands are gone and what are replacements for
them. Or
> > > what else one needs to do after successful installation. (in the
past
> > > it was process accounting that was not enabled by default, but
which
> > > gives you quite some handle in investigating compromise).
> > >
> > > I just tried quite ordinaly command of freshly installed CentOS
8:
> > >
> > > last
> > >
> > > and got an error:
> > >
> > > last: (default utx db): No such file or directory
> > >
> > > I realize that it could be just me, and I'll cope with that
myself one
> > > way or another but this one prompted me to ask everybody: Is
there
> > > anything I can read so I can learn what differenmt to expect on
CentOS
> > > 8 from, say, CentOS 7?
> > >
> > > Thanks.
> > > Valeri
> > >
> > > ++++++++++++++++++++++++++++++++++++++++
> > > Valeri Galtsev
> > > Sr System Administrator
> > > Department of Astronomy and Astrophysics
> > > Kavli Institute for Cosmological Physics
> > > University of Chicago
> > > Phone: 773-702-4247
> > > ++++++++++++++++++++++++++++++++++++++++
> > > _______________________________________________
> > > CentOS mailing list
> > > CentOS at centos.org
> > > https://lists.centos.org/mailman/listinfo/centos
> > Saw your later response that the problem was solved but this is an
> > interesting question that deserves an answer (and not just what
changed
> > in RHEL8).  As an example, I'm used to ifconfig and route but keep
> > getting reminded that these commands are now deprecated and
"ip" should
> > be used instead.  Likewise for using dnf instead of yum, systemctl
>
> I think that the deprecation of ifconfig and route was started before
> RHEL-7 came out.. and yet I just can't get used to them.
>
> > instead of service, firewallcmd instead of iptables, etc. I wonder how
> > many shell scripts there are "out there" that folks have
written or
> > accumulated over the years and which now need to be updated before
> > deprecated becomes no longer available?  Or, like using iptables
instead
> > of firewallcmd, may cause something very different than what is
expected.
> >
> > Anyone know of any resource out there that might provide such
> documentation?
> >
> > Cheers,
> > Dave
> >
> > --
> > "They that can give up essential liberty to obtain a little
temporary
> safety deserve neither safety nor liberty."
> >
> > -- Benjamin Franklin
> >
> > _______________________________________________
> > CentOS mailing list
> > CentOS at centos.org
> > https://lists.centos.org/mailman/listinfo/centos
>
>
>
> --
> Stephen J Smoogen.
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

-- 
-john r pierce
  recycling used bits in santa cruz

Once upon a time, Stephen John Smoogen <smooge at gmail.com>
said:
> I think that the deprecation of ifconfig and route was started before
> RHEL-7 came out.. and yet I just can't get used to them.
I've started using "ip" for more things lately... partly because
I'm
lazy, and once I learned the commands can be abbreviated, I can type
less. :)

ifconfig -> ip l  (or maybe ip -s l if I want counters)
route -> ip r
arp -> ip n

I'm also getting more used to nmcli for connection and configuration
management (which also allows abbreviation - wooo for laziness!).

firewalld is not really the same thing as iptables though; it's more of
a management layer on top of just writing raw rules.  One big issue I
have though is that firewalld always sets up kernel connection state
tracking, which is not a good thing for some uses (high-traffic DNS
servers for example).

The bigger change there is switching from iptables to nftables - while
you can keep using the iptables command and language (there's a
translation), to get the most out of it, you have to learn the nft
command and language (which is different).  I've barely scratched the
surface on that one.

-- 
Chris Adams <linux at cmadams.net>

On Tue, Oct 22, 2019 at 11:36:54AM -0700, John Pierce
wrote:
> The ip commands have been around since Centos 6 if not earlier.  you can do
> things with them that you can't do with ifconfig, such as setup policy
> routing rule sets..
which makes them harder to learn...

Unix philosophy: small programs, each of which does one thing well.
-- 
---- Fred Smith -- fredex at fcshome.stoneham.ma.us
-----------------------------
               But God demonstrates his own love for us in this: 
                         While we were still sinners, 
                              Christ died for us.
------------------------------- Romans 5:8 (niv) ------------------------------

On 10/22/19 1:26 PM, Stephen John Smoogen wrote:
> On Tue, 22 Oct 2019 at 14:11, David G. Miller <dave at davenjudy.org>
wrote:
<snip>
>> On 10/22/19 10:55 AM, Valeri Galtsev wrote:
>> Saw your later response that the problem was solved but this is an
>> interesting question that deserves an answer (and not just what changed
>> in RHEL8).  As an example, I'm used to ifconfig and route but keep
>> getting reminded that these commands are now deprecated and
"ip" should
>> be used instead.  Likewise for using dnf instead of yum, systemctl
> 
> I think that the deprecation of ifconfig and route was started before
> RHEL-7 came out.. and yet I just can't get used to them.
> 
Smooge, that is because you are OLD :)

Actually .. i have the same issues .. probably for the same reason :)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20191023/63cb031b/attachment-0002.sig>

On Oct 22, 2019, at 15:04, Chris Adams <linux at cmadams.net>
wrote:
> 
> firewalld is not really the same thing as iptables though; it's more of
> a management layer on top of just writing raw rules.  One big issue I
> have though is that firewalld always sets up kernel connection state
> tracking, which is not a good thing for some uses (high-traffic DNS
> servers for example).
One major change is that the Firewalld in el8 doesn?t use ?iptables? rules
(netfilter) but instead ?nft? rules (nftables).

--
Jonathan Billings