Install Upgrade Centmin Mod 124.00stable release discussion

For EL9 means you need to give the EL9 eco system and 3rd party YUM repo/package developers time to catch up. Just like EL8 needed time and is better shape now than when EL8 was first released. It's why Centmin Mod waits quite a while for EL8 at least. Same wait - but probably not as long will be for EL9. The biggest change was EL7 to EL8. So EL8 to EL9 isn't that bad from what I can see.

 

FYI, I just updated Centmin Mod 124.00stable and 130.00beta01 with a fix for missing pure-ftpd passive port range config in CSF Firewall due to CSF v14.18 default changes which came out ~August 18, 2023. This would only impact new Centmin Mod installs from August 18, 2023 onwards.

You can run cmupdate command on your Centmin Mod install to update the code and then run and exit centmin.sh menu once to auto apply the fix and then run command

Code (Text):

egrep '^TCP_|^TCP6_|^UDP_|^UDP6_' /etc/csf/csf.conf

to check if TCP_IN and TCP6_IN now show in comma separated list of whitelisted ports the pure-ftpd passive port range entry = 30001:50011

 

Updated 124.00stable with fix for Cloudflare zlib upstream updates which broke Nginx compilations https://community.centminmod.com/th...are-zlib-broken-update-in-124-00stable.24137/.

Existing users can run cmupdate command before, running centmin.sh menu option 4

 

Nginx 1.25.3 released with official HTTP/2 Rapid Reset DDOS Attack vulnerability patched mitigations https://community.centminmod.com/th...os-attack-vulnerability-cve-2023-44487.24186/

 

NGINX_DYNAMICTLS and NGINX_HPACK are disabled in Nginx 1.25.x as no longer compatible though difference without isn't much unless you have a lot of traffic millions of requests.

 

The official MariaDB 10.3 YUM public mirror has now bee deprecated and removed as MariaDB 10.3 is end of life (EOL). MariaDB folks moved 10.3 YUM public mirror to archives mirror now.
As MariaDB 10.3 yum mirrors are now deprecated as 10.3 is EOL:

1. I updated Centmin Mod 124.00stable and 130.00beta01 to switch the MariaDB 10.3 yum mirror over to the archives mirror. You want to run cmupdate command to pull these update fixes to your local Centmin Mod install, and run and exit centmin.sh once to apply the fix updates.
2. For Centmin Mod 124.00stable, like 130.00beta01, now has switched to MariaDB 10.4 initial fresh new installs. If you're using Centmin Mod with MariaDB 10.3, you'd want to run cmupdate command and then update to MariaDB 10.4 via centmin.sh menu option 11 submenu option 8 as outlined at https://community.centminmod.com/threads/mariadb-10-1-upgrades-to-mariadb-10-2-10-3-and-10-4.17793/

 

You referring to EL8 native module for MariaDB 10.3? Centmin Mod EL8 uses MariaDB 10.4 now so doesn't apply anymore. This announced fix, is only really a fix for CentOS 7 users right now.

However, did add a note for EL8 users https://community.centminmod.com/th...c-mirror-deprecated-removal.24274/#post-97895

 

Maxmind GeoLite2 Database Download & Rate Limit Enforcement March 2024

Centmin Mod 124.00stable and 130.00beta01 have been updated to tackle Maxmind's latest changes in GeoLite2 database download policy and rate limits https://community.centminmod.com/th...ase-routines-for-nginx-in-130-00beta01.24815/. You can discuss these changes in existing thread at https://community.centminmod.com/th...eolite2-free-database-download-changes.18960/.

• Maxmind is now enforcing GeoLite2 database download rate limits as of March 2024 to 30 daily direct API downloads and recommends users to download a copy locally to distribute to many servers if you hit the limits https://support.maxmind.com/hc/en-us/articles/4408216129947-Download-and-Update-Databases
• Maxmind has been slowly clamping down on the free GeoLite2 database downloads see https://community.centminmod.com/th...eolite2-free-database-download-changes.18960/ and https://community.centminmod.com/th...eolite2-free-database-download-changes.18959/.
• Centmin Mod uses GeoLIte2 databases in 2 places, 1 is via CSF Firewall it optionally can use GeoLite2 database for IP address geo meta data lookups but defaults to now using alternative geo meta databases like DB-IP instead of GeoLite2 in CSF Firewall config file /etc/csf/csf.conf CC_SRC = "2" variable set as outlined at https://community.centminmod.com/th...eolite2-free-database-download-changes.18960/. The Maxmind changes here will need CSF Firewall developers to update if impacted
• Centmin Mod's 2nd usage of GeoLite2 database is in optional Nginx GeoLite2 nginx module which isn't enabled by default unless you set in persistent config file /etc/centminmod/custom_config.inc the variable NGINX_GEOIPTWOLITE='y' prior to centmin.sh menu option 4 Nginx upgrade/recompiles or prior to initial Centmin Mod installation. Centmin Mod 124.00stable and 130.00beta01 latest update is for this second usage case for Nginx GeoLite2 nginx module routine to use cached copy if the Centmin Mod user doesn't setup their own Maxmind API key as outlined under solutions header in post at .https://community.centminmod.com/th...eolite2-free-database-download-changes.18960/
• Existing Centmin Mod 124.00stable and 130.00beta01 users can get this update via cmupdate command.

 

Centmin Mod 131.00stable and 140.00beta01 have been released. Full details and links to their respective discussion threads are outlined at https://community.centminmod.com/th...ase-with-almalinux-rocky-linux-support.25572/