[Bug 2184301] perl-Syntax-Feature-Loop-1.8.0-18.fc39 FTBFS: t/01_basic.t and 3 more tests fail

2024-04-13 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2184301 --- Comment #8 from Fedora Release Engineering --- Dear Maintainer, your package has an open Fails To Build From Source bug for Fedora 39. Action is required from you. If you can fix your package to build, perform a build in koji, and

Fedora 40 compose report: 20240413.n.1 changes

2024-04-13 Thread Fedora Branched Report
OLD: Fedora-40-20240412.n.0 NEW: Fedora-40-20240413.n.1 = SUMMARY = Added images:1 Dropped images: 3 Added packages: 0 Dropped packages:0 Upgraded packages: 4 Downgraded packages: 0 Size of added packages: 0 B Size of dropped packages:0 B Size of upgraded

Opensubdiv updated to 3.6.0

2024-04-13 Thread Luya Tshimbalanga
Hello team, Opensubdiv is updated to 3.6.0 with a soversion changes that may affect the following packages: - blender-1:4.0.2-1.fc40.x86_64 * luxcorerender-core-0:2.7-0.13.beta1.fc40.x86_64 * usd-libs-0:23.11-7.fc40.x86_64 * wdune-0:1.958-12.fc39.i686 Please use the following side tag for

Re: network service removed in Fedora 40 without a Change proposal(?)

2024-04-13 Thread Chris Adams
Once upon a time, Matthew Miller said: > > With this change, existing profiles in ifcfg format will be automatically > > migrated to the native keyfile format via a migration service shipped with > > the NetworkManager-initscripts-ifcfg-rh package. In Fedora, we plan to > > drop the plugin by

Re: network service removed in Fedora 40 without a Change proposal(?)

2024-04-13 Thread Matthew Miller
On Fri, Apr 12, 2024 at 06:00:41PM -0700, Adam Williamson wrote: > > This should have been an announced Change. This is a significant > > change with wide impact. > > I've filed a bug, proposed it as a blocker, and filed a FESCo ticket > asking FESCo to designate the bug as a blocker. > >

[Bug 2274936] New: perl-Business-ISBN-Data-20240413.001 is available

2024-04-13 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=2274936 Bug ID: 2274936 Summary: perl-Business-ISBN-Data-20240413.001 is available Product: Fedora Version: rawhide Status: NEW Component: perl-Business-ISBN-Data Keywords:

Re: F41 Change Proposal - Reproducible Package Builds (System-Wide)

2024-04-13 Thread Zbigniew Jędrzejewski-Szmek
On Sat, Apr 13, 2024 at 01:38:49PM +, Zbigniew Jędrzejewski-Szmek wrote: > On Sat, Apr 13, 2024 at 01:41:59PM +0200, Fabio Valentini wrote: > > On Sat, Apr 13, 2024 at 1:18 PM Zbigniew Jędrzejewski-Szmek > > wrote: > > > > > > Yes. But actually I think Rust is the optimal choice here. Writing

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-13 Thread Jonathan Steffan
On Thu, Apr 11, 2024 at 6:50 PM Adam Williamson wrote: > On Fri, 2024-04-12 at 00:09 +, Gary Buhrmaster wrote: > > > > What is the best way to formally propose > > that 2FA is required for packagers after > > some date > > There is already a FESCo ticket. https://pagure.io/fesco/issue/3186 /

spice-vdagent

2024-04-13 Thread Steven A. Falco
I noticed that the load average on a rawhide vm was higher than expected, and according to 'top' I had two copies of /usr/bin/spice-vdagent running, with one of them taking up a whole cpu core. I removed /etc/xdg/autostart/spice-vdagent.desktop and rebooted. Now there is only one copy of

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-13 Thread Gary Buhrmaster
On Fri, Apr 12, 2024 at 4:05 PM Kevin Fenzi wrote: > So, if FESCo decided we wanted to enforce 2fa for provenpackagers or > whatever, right now that would require some work on some scripting, > which I guess would remove people without otp? But then there would > still be a window when the user

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-13 Thread Kevin Fenzi
On Fri, Apr 12, 2024 at 03:45:40PM -0400, Steve Cossette wrote: > What about simply blocking access to the git repos/koji/bodhi for those > without 2fa? Well, git I suppose could be a hook that checks the status of the user, but koji and bodhi don't really have any place to hook that in directly.

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-13 Thread Gary Buhrmaster
On Sat, Apr 13, 2024 at 8:44 AM Richard W.M. Jones wrote: > I sometimes think how hard it would be to explain all of this to my > mother. I don't understand why 2FA needs to be so obscure and clumsy > to use. FIDO2 (Apple branded[0] as "passkeys") is not that hard to use, or explain. The

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-13 Thread Carlos Rodriguez-Fernandez
On 4/13/24 01:44, Richard W.M. Jones wrote: On Fri, Apr 12, 2024 at 04:50:13PM -0500, Chris Adams wrote: Once upon a time, Richard W.M. Jones said: So the problem with github is they don't allow you to have 2FA on a backup device (or rather, it *is* possible, but the process is

Fedora rawhide compose report: 20240413.n.0 changes

2024-04-13 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20240412.n.0 NEW: Fedora-Rawhide-20240413.n.0 = SUMMARY = Added images:1 Dropped images: 1 Added packages: 8 Dropped packages:3 Upgraded packages: 110 Downgraded packages: 0 Size of added packages: 2.48 MiB Size of dropped packages

Re: F41 Change Proposal - Reproducible Package Builds (System-Wide)

2024-04-13 Thread Zbigniew Jędrzejewski-Szmek
On Sat, Apr 13, 2024 at 01:41:59PM +0200, Fabio Valentini wrote: > On Sat, Apr 13, 2024 at 1:18 PM Zbigniew Jędrzejewski-Szmek > wrote: > > > > Yes. But actually I think Rust is the optimal choice here. Writing > > this in Python would be possibly slightly nicer, but we don't want > > to pull the

Re: F41 Change Proposal - Reproducible Package Builds (System-Wide)

2024-04-13 Thread Fabio Valentini
On Sat, Apr 13, 2024 at 1:18 PM Zbigniew Jędrzejewski-Szmek wrote: > > Yes. But actually I think Rust is the optimal choice here. Writing > this in Python would be possibly slightly nicer, but we don't want > to pull the interpreter and packages into the buildroot. Python > also has the problem

Re: Orphaned packages looking for new maintainers

2024-04-13 Thread Michael J Gruber
Michel Lind venit, vidit, dixit 2024-04-12 21:59:42: > On Fri, Apr 12, 2024 at 07:59:46AM -0700, Carlos Rodriguez-Fernandez wrote: > > Regarding libteam, the author of the package is the maintainer, email in > > bugzilla is different than the one on the project. I wonder if Jiro just > > missed

Re: F41 Change Proposal - Reproducible Package Builds (System-Wide)

2024-04-13 Thread Zbigniew Jędrzejewski-Szmek
On Sat, Apr 13, 2024 at 04:12:09AM -0500, Neal Gompa wrote: > On Sat, Apr 13, 2024 at 3:59 AM Richard W.M. Jones wrote: > > > > On Fri, Apr 12, 2024 at 10:41:43PM +0100, Aoife Moloney wrote: > > > [https://github.com/keszybz/add-determinism add-determinism] is a Rust > > > program which, as its

Re: F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-13 Thread Nikita Popov
On Sat, Apr 13, 2024 at 5:55 PM Richard W.M. Jones wrote: > On Fri, Apr 12, 2024 at 07:08:36PM -0500, Neal Gompa wrote: > > I would like for us to consider evaluating a global change to -O3. I > > am not convinced that there's a good reason anymore to remain at -O2. > > FYI here are the

Re: F41 Change Proposal - Reproducible Package Builds (System-Wide)

2024-04-13 Thread Neal Gompa
On Sat, Apr 13, 2024 at 3:59 AM Richard W.M. Jones wrote: > > On Fri, Apr 12, 2024 at 10:41:43PM +0100, Aoife Moloney wrote: > > [https://github.com/keszybz/add-determinism add-determinism] is a Rust > > program which, as its name suggests, adds determinism to files that > > are given as input by

Re: F41 Change Proposal - Reproducible Package Builds (System-Wide)

2024-04-13 Thread Richard W.M. Jones
On Fri, Apr 12, 2024 at 10:41:43PM +0100, Aoife Moloney wrote: > [https://github.com/keszybz/add-determinism add-determinism] is a Rust > program which, as its name suggests, adds determinism to files that > are given as input by attempting to standardize metadata contained in > binary or source

Re: F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-13 Thread Richard W.M. Jones
On Sat, Apr 13, 2024 at 10:18:03AM +0200, Miro Hrončok wrote: > On 13. 04. 24 10:04, Miro Hrončok wrote: > >On 13. 04. 24 2:33, Kevin Kofler via devel wrote: > >>How much larger is Python at -O3 compared to -O2? And other packages? > > > >That is a good question, will measure. > > -O2 RPM size: >

Re: F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-13 Thread Richard W.M. Jones
On Fri, Apr 12, 2024 at 07:08:36PM -0500, Neal Gompa wrote: > I would like for us to consider evaluating a global change to -O3. I > am not convinced that there's a good reason anymore to remain at -O2. FYI here are the optimizations added by gcc -O3 (over -O2), from

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-13 Thread Richard W.M. Jones
On Fri, Apr 12, 2024 at 04:50:13PM -0500, Chris Adams wrote: > Once upon a time, Richard W.M. Jones said: > > So the problem with github is they don't allow you to have 2FA on a > > backup device (or rather, it *is* possible, but the process is > > ludicrous[1]). If you have your phone as second

Re: [SPDX] Mass license change MPLv2.0 to MPL-2.0

2024-04-13 Thread Miroslav Suchý
Dne 06. 04. 24 v 10:14 dop. Miroslav Suchý napsal(a): I am going to do the mass change of the license from MPLv2.0 to MPL-2.0 Done. -- Miroslav Suchy, RHCA Red Hat, Manager, Packit and CPT, #brno, #fedora-buildsys -- ___ devel mailing list --

Re: F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-13 Thread Miro Hrončok
On 13. 04. 24 10:04, Miro Hrončok wrote: On 13. 04. 24 2:33, Kevin Kofler via devel wrote: How much larger is Python at -O3 compared to -O2? And other packages? That is a good question, will measure. -O2 RPM size: python3-3.12.2-3.fc41.x86_6432638

Re: F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-13 Thread Miro Hrončok
On 13. 04. 24 2:33, Kevin Kofler via devel wrote: How much larger is Python at -O3 compared to -O2? And other packages? That is a good question, will measure. -- Miro Hrončok -- Phone: +420777974800 IRC: mhroncok -- ___ devel mailing list --

Re: convert everything to rpmautospec?

2024-04-13 Thread Miro Hrončok
On 07. 04. 24 17:47, Miro Hrončok wrote: Note that it produces incorrect results if the Release value is not numerical (or if it is a greater number than count of the commits since last bump). It will happily convert release 0.1 to 3, 29.20130501hg26242d0aa7b8 to 30 or even release 500 to 10.