Re: Using guestfish inside mock?

[Colin Walters]

On Tue, Dec 15, 2015, at 06:19 PM, Richard W.M. Jones wrote:

> For some reason the patch is conditional on the existence of
> /sbin/new-kernel-pkg (and hence on grubby being installed), whereas I
> believe the patch should be unconditional, because we always want to
> have a kernel in /boot on Fedora.

One could teach libguestfs to find the kernel in both locations, no?
This is what we did for rpm-ostree:

https://github.com/projectatomic/rpm-ostree/commit/1c3a549ef9ebaecf9a0eab7515adddc594c78779
See also: 
https://github.com/projectatomic/rpm-ostree/commit/15ecaacd36bfcb91181400a7399461deef57e062
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: Easier %config management?

[Colin Walters]

On Tue, Dec 15, 2015, at 06:43 PM, Japheth Cleaver wrote:
>
>
Perhaps RPM (or yum/dnf, via plugin) could write a duplicate copy of
all config files into a tree somewhere? (E.g., /usr/lib/config/ or
/usr/share/config/?)

I mentioned this above, but might as well repeat since it was missed;
OSTree (as used by the existing Fedora Atomic Host) does this by default
today in /usr/etc, so if one was adapting this change to the client-side
system assembly tools like yum/dnf, I'd say it would make sense to
follow the precedent.


--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: F24 System Wide Change: Default Local DNS Resolver

[Neal Becker]

 
>>> Really, the biggest issue people fear is their split view DNS. Which is
>>> easilly solved by extending the concept of firewalld zones into Network
>>> Manager, and always use broken DNS forwarders on "trusted networks".
>> 
>> Hmmm... "easily solved" is not "solved":
>>  * Has this "biggest issue" really been solved? Do we have this NM
>>  integration?
> 
> I don't know. I don't think the integration with firewalld/NM uses the
> same concept of "zones".
> 
>>Does it show in "nm-applet" (I avoid bringing up KDE which I
>>personally use, or other desktops)
>>  * What other issues we don't know, simply because this Fedora setup
>>  hasn't been *widely* deployed?
> 
> I'd be more sympathetic to this if we haven't gone through major things
> like /usr move already :P
> 
> Paul
> --

The split-dns case is I believe what I have at work.  I did test the 
proposed local dns resolver.  I was able to resolve names of machines 
internal to my work network (after some workaround), but when I needed to 
connect to a machine with a different domainname, and it wasn't resolved, 
and I needed that to do my timesheet, I reverted.

Using firewalld is not a perfect solution either, if that's the suggestion.  
My machines are configured to use iptables.  I have a perfectly good working 
iptables setup, and found firewalld looked like it had too much learning 
curve, so I don't use it.
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: Easier %config management?

[Japheth Cleaver]

On 12/15/2015 10:54 AM, Christopher wrote:
On Tue, Dec 15, 2015 at 12:37 AM J. Randall Owens 
mailto:jrowens.fed...@ghiapet.net>> wrote:


On 12/14/2015 02:47 PM, Christopher wrote:
> On Mon, Dec 14, 2015 at 11:22 AM Reindl Harald
mailto:h.rei...@thelounge.net>
> >>
wrote:
>
> i modified my "httpd.conf" based on Apache 2.2 years ago, as
Fedora
> swicthed to Apache 2.4 your approach would have compared a
customized
> Apache 2.2 version with a Fedora 2.4 version
>
>
> But, that's precisely what I want to do I want to know which
fields
> in the current configuration could possibly have introduced a
breakage I
> see... or which changes I need to make from a clean installation
to get
> a user back to the state they wanted.
>

But in order to do the former, you'd best compare the new default
to the
old default, to see what had changed in the default. (E.g. distro
2.2 to
distro 2.4) To do the latter, you'd compare the old default
(distro 2.2)
to your modified version (altered 2.2), to see what you'd changed
locally. And yet, you seem to be proposing comparing the new
default to
the old default (distro 2.4 to altered 2.2), which gets you
neither? (Or
both, really, but uselessly mashed together so you don't know which is
which.) Am I missing something?


I'm less interested in what the user intended to change in an older 
version than the full difference between the current default 
(presumably working) configs and the current files (which would 
include any user modifications AND any old defaults carried forward). 
The current system breakage could be the result of user edits, or a 
carry-forward of an older config. I don't care which is the case... I 
just want to see the differences to troubleshoot the problem... I just 
want to fix the system as it exists today... not question user edit 
decisions which occurred years ago.


Certainly, a full history, tracking all user edits, and all system 
updates, would be useful to some. It's just more than what I 
personally need, and seems a bit outside the scope of the existing 
installer tools (as previously stated with the suggestion to use 
etckeeper).




Full tracking of user edits and system edits, seems like a very 
development-focused perspective on config management. Sometimes, a 
sysadmin just wants to see what's different *now* without too much more 
detail.


For now, I think I'm going to write a script to parse the output of 
`rpm -V` and then `dnf download` all the packages corresponding to 
changed configs, then extract each rpm's %config files, to compare 
with those on the system. It's messy, but it'll work, and in the 
absence of rpm storing the full configs or being able to instruct 
rpm/dnf to reset configs back to the defaults (after backing up), 
there doesn't seem to be an existing solution that will give me the 
same result.


It seems like there's already a little bit of precedent for "alternate 
trees" representing the existing file system with the debuginfo rpms and 
/usr/lib/debug/ hierarchy. Although the easiest solution might be to 
have RPM deposit a duplicate copy of *all* config files (not just 
%config(noreplace)) adjacent to the config file actually read by the 
programs (e.g., /etc/httpd/conf.d/ssl.conf and 
/etc/httpd/conf.d/ssl.conf.rpmdist), that leaves lots of ugly, mostly 
unused, files everywhere.


Perhaps RPM (or yum/dnf, via plugin) could write a duplicate copy of all 
config files into a tree somewhere? (E.g., /usr/lib/config/ or 
/usr/share/config/?) RPM/yum/dnf could then do the equivalent of an `rpm 
-qlca` and compare each /etc/httpd/conf.d/ssl.conf to 
/usr/lib/config/etc/httpd/conf.d/ssl.conf with no real magic or complex 
tech needed. Merging left up to the sysadmin.


Having everything in one location might also give some future options 
for automated compression, refreshing scripts, and the like.


Regards,
-jc
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: Using guestfish inside mock?

[Richard W.M. Jones]

Cc-ing to Fedora devel list.

This is related to why you have to install 'grubby' in order for mock
to have a /boot/vmlinuz-* kernel.  Another thing we have to work
around in libguestfs:

http://pkgs.fedoraproject.org/cgit/libguestfs.git/commit/?id=113fbdf63811f1ba66129ff678f90741037cb3a3

On Tue, Dec 15, 2015 at 02:14:21PM -0700, Ryan Barry wrote:
> Thanks Richard, that did the trick.
> 
> Is this documented somewhere? Or is there a bug against the kernel package?

No & no, but there probably should be a bug, against systemd (maybe).

When I originally looked at the 'kernel-install' code I couldn't
really understand why the script did what it did and whether it was
intentional or just an accidental bug.

Now I just looked at it again, and the problem is that upstream
systemd 'kernel-install' doesn't copy the kernel to /boot at all.
This is something that Fedora patches into the kernel-install script:

http://pkgs.fedoraproject.org/cgit/systemd.git/tree/kernel-install-grubby.patch

For some reason the patch is conditional on the existence of
/sbin/new-kernel-pkg (and hence on grubby being installed), whereas I
believe the patch should be unconditional, because we always want to
have a kernel in /boot on Fedora.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
libguestfs lets you edit virtual machines.  Supports shell scripting,
bindings from many languages.  http://libguestfs.org
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: -fstack-protector-strong vs -fstack-protector-all

[Antonio Trande]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 12/15/2015 02:27 PM, Michael Schwendt wrote:
> On Tue, 15 Dec 2015 12:18:59 +0100, Antonio Trande wrote:
> 
>> libmodplug/libtimidity in 'MOC' (RPM Fusion free)
> 
> Oh, this made me thought this actually refers to duplicated/bundled
> libs (as both libmodplug and libtimidity are Fedora packages), but
> in "moc" it's just:
> 
> decoder_plugins/libmodplug_decoder.so 
> decoder_plugins/libtimidity_decoder.so
> 
> Phew! ;-)

Michael, you don't trust me enough. :P

- -- 
Antonio Trande

mailto: sagitter 'at' fedoraproject 'dot' org
http://fedoraos.wordpress.com/
https://fedoraproject.org/wiki/User:Sagitter
GPG Key: 0x565E653C
Check on https://keys.fedoraproject.org/
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJWcH1rAAoJEF5tK7VWXmU8SWMH/ihQqfsXxQNcY1YuSLjtPlG0
GnP6MRra1dkwDceRV2+mL7v+vvOXD7WP3jY7FWBGDh0eImFi8SwQFmDdlSFAlhGw
q3WwFSLZ2003zwjonRYzG3VtmVucJA12eU6mkl/m9K57uXWBCxfilZoMXR3nasO2
hsalt24vSycLB/7Ri0Rgv3WfsMKBJH6wXWNmIrqcJ6pJZiweIWWjE4iBAEvhyGmX
arhG3CnyKQwzzrYkwrOjGSieCvX05x60zbrmQQWgELrsRWLW6F62ZafvClioeoqJ
CMqV9lDvyhg98jxdzwj6Y4MwrjGiZQKCZC+vCIpfSiqtMd6SZgKmhcZ6Y2uiqt8=
=78OL
-END PGP SIGNATURE-
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: rpmbuild Perl dependency finder broken since F23?

[Michael Schwendt]

Here's a test-case:

  https://bugzilla.redhat.com/1291903

The Perl script contents somehow confuse the dep generator.

Which component to assign to?
rpm or perl-generators?
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: rpmbuild Perl dependency finder broken since F23?

[Neal Gompa]

Michael,

Perhaps it has something to do with our move to Perl 5.22 on Fedora 23?

On Tue, Dec 15, 2015 at 2:36 PM, Michael Schwendt  wrote:
> Been trying to figure out why an unchanged package rebuilt in koji for F23
> is missing _all_ Perl dependencies. Without those deps it crashes at runtime.
>
> Turned out that rpmbuild did not generate any Perl deps for the single
> Perl script in /usr/bin.
>
> Shebang was '#!/usr/bin/perl -w'.
>
> Changing that to drop the trailing ' -w', and rpmbuild does generate the
> Perl deps again.
>
> What has changed in F23? How many other Perl packages are affected?
> --
> devel mailing list
> devel@lists.fedoraproject.org
> http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org



-- 
真実はいつも一つ！/ Always, there's only one truth!
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: Fedora Rawhide 20151215 compose check report

[Adam Williamson]

On Tue, 2015-12-15 at 20:21 +0100, Marek Doležel wrote:
> for workstation x86_64 and probably others failed because of:
> *Error creating Live CD : Dependency check failed :
> (('java-1.8.0-openjdk-headless', '1:1.8.0.65', '12.b17.fc24'),
> ('/bin/sh', ''), 0, 0, None)*

Yes, that's the same as yesterday; I asked dgilmore to take a look at
it then, he's still working on it.
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net

--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

rpmbuild Perl dependency finder broken since F23?

[Michael Schwendt]

Been trying to figure out why an unchanged package rebuilt in koji for F23
is missing _all_ Perl dependencies. Without those deps it crashes at runtime.

Turned out that rpmbuild did not generate any Perl deps for the single
Perl script in /usr/bin.

Shebang was '#!/usr/bin/perl -w'.

Changing that to drop the trailing ' -w', and rpmbuild does generate the
Perl deps again.

What has changed in F23? How many other Perl packages are affected?
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Namespacing in pkgdb

[Pierre-Yves Chibon]

Hello everyone,

The Fedora infrastructure and the release-engineering teams have worked together
to begin to add namespacing to our infrastructure. The idea is that in a near
future Fedora will distribute more than just rpms, such as docker containers but
also other technologies that might arise [1].

For this, we have been working on a new version of pkgdb2 and a few adjustments
to dist-git allowing to have a docker and a rpm with the same name but under
different namespace.

On Thursday December 17th, we would like to roll out this new release of pkgdb2.

Currently, all your tools: fedpkg, pkgdb-cli, pkgdb-admin should work as they do
today, all changes being backward compatible, but as for everything, there
might be bugs. So we would appreciate if you could let us know as early as 
possible
if you think you ran into one, either
- here
- on #fedora-admin on irc.freenode.net
- via a ticket on https://fedorahosted.org/fedora-infrastructure/

If you want to see how the new pkgdb2 looks like, feel free to test our staging
instance:
https://admin.stg.fedoraproject.org/pkgdb/


Thank you for your help and understanding,

Happy packaging,
Pierre for the Fedora Infrastructure team

[1] 
https://lists.fedoraproject.org/archives/list/devel%40lists.fedoraproject.org/thread/QIHGWL5ZHZXEJJ6YLVSEHKF7W5DPKI24/#VKDVATVI3XJUKIS3EKNGC3HKG4UVA4M4


pgpjWipkXjd9W.pgp
Description: PGP signature
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: Fedora Rawhide 20151215 compose check report

[Marek Doležel]

for workstation x86_64 and probably others failed because of:
*Error creating Live CD : Dependency check failed :
(('java-1.8.0-openjdk-headless', '1:1.8.0.65', '12.b17.fc24'),
('/bin/sh', ''), 0, 0, None)*




Best regards,
Marek Dolezel

On Tue, Dec 15, 2015 at 4:32 PM, Fedora compose checker <
rawh...@fedoraproject.org> wrote:

> Missing expected images:
>
> Cloud_atomic disk raw x86_64
> Workstation live x86_64
> Workstation live i386
> Kde disk raw armhfp
> Kde live i386
> Kde live x86_64
>
> Images in this compose but not Rawhide 20151214:
>
> Security live i386
>
> No images in Rawhide 20151214 but not this.
>
> Failed openQA tests: 2 of 54
>
> ID: 1016Test: i386 universal package_set_kde
> URL: https://openqa.fedoraproject.org/tests/1016
> ID: 967 Test: x86_64 universal package_set_kde
> URL: https://openqa.fedoraproject.org/tests/967
>
> Passed openQA tests: 52 of 54
> --
> Mail generated by check-compose:
> https://git.fedorahosted.org/cgit/fedora-qa.git/tree/check-compose
> --
> devel mailing list
> devel@lists.fedoraproject.org
> http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org
>
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: Easier %config management?

[Christopher]

On Tue, Dec 15, 2015 at 12:37 AM J. Randall Owens <
jrowens.fed...@ghiapet.net> wrote:

> On 12/14/2015 02:47 PM, Christopher wrote:
> > On Mon, Dec 14, 2015 at 11:22 AM Reindl Harald  > > wrote:
> >
> > i modified my "httpd.conf" based on Apache 2.2 years ago, as Fedora
> > swicthed to Apache 2.4 your approach would have compared a customized
> > Apache 2.2 version with a Fedora 2.4 version
> >
> >
> > But, that's precisely what I want to do I want to know which fields
> > in the current configuration could possibly have introduced a breakage I
> > see... or which changes I need to make from a clean installation to get
> > a user back to the state they wanted.
> >
>
> But in order to do the former, you'd best compare the new default to the
> old default, to see what had changed in the default. (E.g. distro 2.2 to
> distro 2.4) To do the latter, you'd compare the old default (distro 2.2)
> to your modified version (altered 2.2), to see what you'd changed
> locally. And yet, you seem to be proposing comparing the new default to
> the old default (distro 2.4 to altered 2.2), which gets you neither? (Or
> both, really, but uselessly mashed together so you don't know which is
> which.) Am I missing something?
>
>
I'm less interested in what the user intended to change in an older version
than the full difference between the current default (presumably working)
configs and the current files (which would include any user modifications
AND any old defaults carried forward). The current system breakage could be
the result of user edits, or a carry-forward of an older config. I don't
care which is the case... I just want to see the differences to
troubleshoot the problem... I just want to fix the system as it exists
today... not question user edit decisions which occurred years ago.

Certainly, a full history, tracking all user edits, and all system updates,
would be useful to some. It's just more than what I personally need, and
seems a bit outside the scope of the existing installer tools (as
previously stated with the suggestion to use etckeeper).

For now, I think I'm going to write a script to parse the output of `rpm
-V` and then `dnf download` all the packages corresponding to changed
configs, then extract each rpm's %config files, to compare with those on
the system. It's messy, but it'll work, and in the absence of rpm storing
the full configs or being able to instruct rpm/dnf to reset configs back to
the defaults (after backing up), there doesn't seem to be an existing
solution that will give me the same result.
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: lxqt

[Kevin Fenzi]

On Tue, 15 Dec 2015 05:23:48 -
" mastaiza"  wrote:

> When you install through yumex-dnf not a window to enter the password.
> I'm not exactly sure but lacks the components lxqt-sudo lxqt-admin

I'm not sure I understand what you are asking here, but it sounds like
perhaps a bug with yumex-dnf? If so, please file in bugzilla:

https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&version=23&component=yumex-dnf

kevin


pgpMM0XYHI2tR.pgp
Description: OpenPGP digital signature
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

RE: Bodhi front page after login

[John Florian]

Ditto!  That seems like a much simpler solution overall.

--
John Florian


> -Original Message-
> From: Petr Spacek [mailto:pspa...@redhat.com]
> Sent: Friday, December 11, 2015 03:48
> To: devel@lists.fedoraproject.org
> Subject: Re: Bodhi front page after login
> 
> On 11.12.2015 01:34, Zbigniew Jędrzejewski-Szmek wrote:
> > On Thu, Dec 10, 2015 at 02:57:55PM -0700, Kevin Fenzi wrote:
> >> On Thu, 10 Dec 2015 15:39:16 +
> >> John Florian  wrote:
> >>
>  From: Michael Schwendt [mailto:mschwe...@gmail.com]
>  Sent: Sunday, December 06, 2015 14:49
>  To: devel@lists.fedoraproject.org
>  Subject: Re: Bodhi front page after login
> 
>  On Sun, 6 Dec 2015 20:17:37 +0100, Reindl Harald wrote:
> >>>
> >>>
>  As far as I know, bodhi posts to bugzilla tickets about test
>  updates. Unfortunately, it does that too early with a first
>  notification.  Bug reporters read the mail, try to apply the
>  update, but it is not available for download. It has not been
>  pushed, and even when the second notification tells it has been
>  pushed, it has not arrived on mirrors.
> >>>
> >>> This gets me all the time.  Then I simply forget to test the update
> >>> unless it's something I need badly.  Perhaps these two messages in BZ
> >>> should indicate that the update will be available when it reaches the
> >>> mirrors and a 3rd message could indicate when that has happened
> >>> through the use of some mirror probing.  Such a 3rd message should be
> >>> carefully worded to indicate that the package has started reaching
> >>> *some* mirrors and that most should have it within another day.
> >>
> >> How many is some though? And if those happen to not be ones you are
> >> hitting you wouldn't see it then either.
> >>
> >> Perhaps we could get a dnf plugin thats advised in bugs for testers
> >> that checks enabled mirrors, then master mirrors, then koij for a
> >> specific update that someone wants to test? The downsides would be if
> >> everyone just decided to enable it, or if it's only in koji it possibly
> >> wouldn't be signed yet.
> >
> > What about scrapping the existing bugzilla message, and instead posting
> > the direct link to koji download the package:
> >
> > """To test the update now run:
> >   dnf upgrade https://koji.fp.o/update-/path-to.rpm
> https://koji.fp.o/update-/path-to-another.rpm
> https://koji.fp.o/update-/path-to-yet-another.rpm
> >
> > After that go to https://bodhi.fp.o/update-/ to leave karma.
> > """
> 
> I like this idea!
> 
> > dnf will skip packages that are not already installed with 'upgrade'.
> > Since this would be only run manually, and the dependent packages
> > would be downloaded from mirrors, this shouldn't cause too much load
> > on koji servers. The advantage would be that the message would be
> > actionable and feedback from the bug reporters would be as fast as
> > possible.
> 
> --
> Petr Spacek  @  Red Hat
> --
> devel mailing list
> devel@lists.fedoraproject.org
> http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Fedora Rawhide 20151215 compose check report

[Fedora compose checker]

Missing expected images:

Cloud_atomic disk raw x86_64
Workstation live x86_64
Workstation live i386
Kde disk raw armhfp
Kde live i386
Kde live x86_64

Images in this compose but not Rawhide 20151214:

Security live i386

No images in Rawhide 20151214 but not this.

Failed openQA tests: 2 of 54

ID: 1016Test: i386 universal package_set_kde
URL: https://openqa.fedoraproject.org/tests/1016
ID: 967 Test: x86_64 universal package_set_kde
URL: https://openqa.fedoraproject.org/tests/967

Passed openQA tests: 52 of 54
-- 
Mail generated by check-compose:
https://git.fedorahosted.org/cgit/fedora-qa.git/tree/check-compose
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: Upstream DNF?

[Honza Šilhan]

> From: "Christopher" 
> 
> Where is the upstream DNF issue tracker? I see the project on GitHub:
> https://github.com/rpm-software-management/dnf

If you wanna report a bug or file RFE then follow this guide [0].

> However, there doesn't appear to be a corresponding issue tracker, or point
> of contact to request access to edit Wiki pages (which are locked down),
> etc.

If you wanna become a DNF contributor and improve documentation [1] / code,
then doing a pull request [2] is a way to go.

To keep in touch with DNF developers, join #yum IRC channel on Freenode.


Honza

[0] https://github.com/rpm-software-management/dnf/wiki/Bug-Reporting
[1] http://dnf.readthedocs.org/
[2] https://github.com/rpm-software-management/dnf#contribution
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: FESCo - Nov/Dec 2015 Election - Result announcement

[Matthew Miller]

On Tue, Dec 15, 2015 at 10:11:42AM +0100, Jan Kurik wrote:
> 1426  |  Kevin Fenzi (nirik / kevin)
> 1053  | Adam Miller (maxamillion)
> 1028  | Jared Smith (jsmith)
>  675  | Kalev Lember (kalev)
>  669  | Parag Nemade (paragn)

Congratulations, everyone!

-- 
Matthew Miller

Fedora Project Leader
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: FESCo - Nov/Dec 2015 Election - Result announcement

[Justin Forbes]

Congratulations to the winners!

Justin

On Tue, Dec 15, 2015 at 3:11 AM, Jan Kurik  wrote:

> Greetings, all!
>
> The elections for FESCo - Nov/Dec 2015 have concluded, and the results
> are shown below.
>
> FESCo is electing 5 seats this time.
> A total of 280 ballots were cast, meaning a candidate
> could accumulate up to 1960 votes (280 * 7).
>
> The results for the elections are as follows:
>
>   # votes |  name
> - +--
> 1426  |  Kevin Fenzi (nirik / kevin)
> 1053  | Adam Miller (maxamillion)
> 1028  | Jared Smith (jsmith)
>  675  | Kalev Lember (kalev)
>  669  | Parag Nemade (paragn)
> - +--
>  666  | Justin Forbes (jforbes)
>  526  | Germano Massullo (Caterpillar / germano)
>
>
> Congratulations to the winning candidates, and thank you all
> candidates for running this elections!
> --
> Jan Kuřík
> Platform & Fedora Program Manager
> Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
> --
> devel mailing list
> devel@lists.fedoraproject.org
> http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

python-mongoengine maintainer absent

[Randy Barlow]

Hello!

I've been attempting to contact the python-mongoengine maintainers,
Yohan Graterol and Eduardo Javier Echeverria Alvarado, for some time
with no response[0]. In addition to the two bugs I've filed, I've
written e-mail to Yohan twice (on 2015-11-21 and 2015-11-30) and to
Eduardo once (2015-11-30). It has been 24 days since I first attempted
to contact Yohan.

My project is working to get included in Fedora 24 and we need the
version of python-mongoengine to be raised, and more importantly,
maintained. If anybody knows how to get in touch with them, please let
me know here or on the ticket.

[0] https://bugzilla.redhat.com/show_bug.cgi?id=1287148

-- 
Randy Barlow
xmpp: bowlofe...@electronsweatshop.com
irc:  bowlofeggs on Freenode



signature.asc
Description: OpenPGP digital signature
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: -fstack-protector-strong vs -fstack-protector-all

[Michael Schwendt]

On Tue, 15 Dec 2015 12:18:59 +0100, Antonio Trande wrote:

> libmodplug/libtimidity in 'MOC' (RPM Fusion free)

Oh, this made me thought this actually refers to duplicated/bundled libs
(as both libmodplug and libtimidity are Fedora packages), but in "moc"
it's just:

  decoder_plugins/libmodplug_decoder.so
  decoder_plugins/libtimidity_decoder.so

Phew! ;-)
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

rawhide report: 20151215 changes

[Fedora Rawhide Report]

Compose started at Tue Dec 15 05:15:02 UTC 2015
Broken deps for i386
--
[IQmol]
IQmol-2.3.0-9.fc24.i686 requires libboost_serialization.so.1.58.0
IQmol-2.3.0-9.fc24.i686 requires libboost_iostreams.so.1.58.0
IQmol-2.3.0-9.fc24.i686 requires libOpenMeshCore.so.3.2
[alliance]
alliance-5.0-40.20090901snap.fc22.i686 requires libXm.so.2
[csound]
csound-wiimote-6.03.2-7.fc24.i686 requires libwiiuse.so.0
[eclipse-jbosstools]
eclipse-jbosstools-as-4.2.2-1.fc22.noarch requires 
osgi(org.eclipse.tm.terminal)
[fawkes]
fawkes-core-0.5.0-26.fc24.i686 requires libmicrohttpd.so.10
fawkes-plugin-player-0.5.0-26.fc24.i686 requires libgeos-3.4.2.so
fawkes-plugin-xmlrpc-0.5.0-26.fc24.i686 requires libmicrohttpd.so.10
[gnash]
1:gnash-0.8.10-19.fc24.i686 requires libboost_thread.so.1.58.0
1:gnash-0.8.10-19.fc24.i686 requires libboost_system.so.1.58.0
1:gnash-0.8.10-19.fc24.i686 requires libboost_serialization.so.1.58.0
1:gnash-0.8.10-19.fc24.i686 requires libboost_program_options.so.1.58.0
1:gnash-0.8.10-19.fc24.i686 requires libboost_iostreams.so.1.58.0
1:gnash-0.8.10-19.fc24.i686 requires libboost_date_time.so.1.58.0
1:gnash-cygnal-0.8.10-19.fc24.i686 requires libboost_thread.so.1.58.0
1:gnash-cygnal-0.8.10-19.fc24.i686 requires libboost_system.so.1.58.0
1:gnash-cygnal-0.8.10-19.fc24.i686 requires 
libboost_serialization.so.1.58.0
1:gnash-cygnal-0.8.10-19.fc24.i686 requires 
libboost_program_options.so.1.58.0
1:gnash-cygnal-0.8.10-19.fc24.i686 requires libboost_iostreams.so.1.58.0
1:gnash-cygnal-0.8.10-19.fc24.i686 requires libboost_date_time.so.1.58.0
1:gnash-extension-dejagnu-0.8.10-19.fc24.i686 requires 
libboost_thread.so.1.58.0
1:gnash-extension-dejagnu-0.8.10-19.fc24.i686 requires 
libboost_system.so.1.58.0
1:gnash-extension-dejagnu-0.8.10-19.fc24.i686 requires 
libboost_program_options.so.1.58.0
1:gnash-extension-dejagnu-0.8.10-19.fc24.i686 requires 
libboost_iostreams.so.1.58.0
1:gnash-extension-fileio-0.8.10-19.fc24.i686 requires 
libboost_thread.so.1.58.0
1:gnash-extension-fileio-0.8.10-19.fc24.i686 requires 
libboost_system.so.1.58.0
1:gnash-extension-fileio-0.8.10-19.fc24.i686 requires 
libboost_program_options.so.1.58.0
1:gnash-extension-fileio-0.8.10-19.fc24.i686 requires 
libboost_iostreams.so.1.58.0
1:gnash-extension-lirc-0.8.10-19.fc24.i686 requires 
libboost_thread.so.1.58.0
1:gnash-extension-lirc-0.8.10-19.fc24.i686 requires 
libboost_system.so.1.58.0
1:gnash-extension-lirc-0.8.10-19.fc24.i686 requires 
libboost_program_options.so.1.58.0
1:gnash-extension-lirc-0.8.10-19.fc24.i686 requires 
libboost_iostreams.so.1.58.0
1:gnash-extension-mysql-0.8.10-19.fc24.i686 requires 
libboost_thread.so.1.58.0
1:gnash-extension-mysql-0.8.10-19.fc24.i686 requires 
libboost_system.so.1.58.0
1:gnash-extension-mysql-0.8.10-19.fc24.i686 requires 
libboost_program_options.so.1.58.0
1:gnash-extension-mysql-0.8.10-19.fc24.i686 requires 
libboost_iostreams.so.1.58.0
1:gnash-klash-0.8.10-19.fc24.i686 requires libboost_system.so.1.58.0
1:gnash-klash-0.8.10-19.fc24.i686 requires 
libboost_program_options.so.1.58.0
1:gnash-plugin-0.8.10-19.fc24.i686 requires libboost_iostreams.so.1.58.0
1:python-gnash-0.8.10-19.fc24.i686 requires libboost_thread.so.1.58.0
1:python-gnash-0.8.10-19.fc24.i686 requires libboost_system.so.1.58.0
1:python-gnash-0.8.10-19.fc24.i686 requires 
libboost_program_options.so.1.58.0
1:python-gnash-0.8.10-19.fc24.i686 requires libboost_iostreams.so.1.58.0
[golang-github-kraman-libcontainer]
golang-github-kraman-libcontainer-devel-0-0.4.gitd700e5b.fc24.noarch 
requires golang(github.com/docker/docker/pkg/netlink)
[golang-github-kubernetes-heapster]
golang-github-kubernetes-heapster-devel-0.16.1-1.fc24.noarch requires 
golang(github.com/google/cadvisor/info/v1)
golang-github-kubernetes-heapster-devel-0.16.1-1.fc24.noarch requires 
golang(github.com/google/cadvisor/client)
golang-github-kubernetes-heapster-devel-0.16.1-1.fc24.noarch requires 
golang(github.com/coreos/fleet/schema)
golang-github-kubernetes-heapster-devel-0.16.1-1.fc24.noarch requires 
golang(github.com/coreos/fleet/registry)
golang-github-kubernetes-heapster-devel-0.16.1-1.fc24.noarch requires 
golang(github.com/coreos/fleet/pkg)
golang-github-kubernetes-heapster-devel-0.16.1-1.fc24.noarch requires 
golang(github.com/coreos/fleet/machine)
golang-github-kubernetes-heapster-devel-0.16.1-1.fc24.noarch requires 
golang(github.com/coreos/fleet/etcd)
golang-github-kubernetes-heapster-devel-0.16.1-1.fc24.noarch requires 
golang(github.com/coreos/fleet/client)
[golang-github-prometheus-pr

Re: -fstack-protector-strong vs -fstack-protector-all

[Florian Weimer]

On 12/15/2015 12:18 PM, Antonio Trande wrote:

> Since i started to rebuild my packages for hardened builds issue, I
> discovered (until now) a couple of libraries that result without
> "Canary protection" according to output of 'checksec' tool.

checksec is very unreliable, unfortunately.  Most of its checks can err
in both directions.

> 1) From point of view of packaging, is it acceptable a forcing of
> -fstack-protector-all?

It has a performance impact (a few percent).  In general, it is bad
practice to override RPM_OPT_FLAGS.

> 2) Does -fstack-protector-all permit a real protection where
> -fstack-protector-strong does not?

These cases are GCC bugs.  They do happen.  Here is an example:

  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=68680

But you should not have to worry about this; all you need to make sure
is that all C/C++ sources are compiled with -fstack-protector-strong.

Florian
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

-fstack-protector-strong vs -fstack-protector-all

[Antonio Trande]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi all.

Since i started to rebuild my packages for hardened builds issue, I
discovered (until now) a couple of libraries that result without
"Canary protection" according to output of 'checksec' tool.
Of course, I verified that all optimization flags used in Fedora by
default were respected; as you know, we use '-fstack-protector-strong'
flag to check for buffer overflows, but some libraries like

libmozalloc.so in 'icecat'
https://bugzilla.redhat.com/show_bug.cgi?id=1283307

or

libmodplug/libtimidity in 'MOC' (RPM Fusion free)

seem to need be compiled with '-fstack-protector-all' otherwise
would result a "No Canary protection" warning from 'checksec' output.

GCC-5.3 documentation says:

- -fstack-protector
Emit extra code to check for buffer overflows, such as stack
smashing attacks. This is done by adding a guard variable to functions
with vulnerable objects. This includes functions that call alloca, and
functions with buffers larger than 8 bytes. The guards are initialized
when a function is entered and then checked when the function exits.
If a guard check fails, an error message is printed and the program exits.

- -fstack-protector-all
Like -fstack-protector except that all functions are protected.

- -fstack-protector-strong
Like -fstack-protector but includes additional functions to be
protected — those that have local array definitions, or have
references to local frame addresses.


So,

1) From point of view of packaging, is it acceptable a forcing of
- -fstack-protector-all?

2) Does -fstack-protector-all permit a real protection where
- -fstack-protector-strong does not?

- -- 
Antonio Trande

mailto: sagitter 'at' fedoraproject 'dot' org
http://fedoraos.wordpress.com/
https://fedoraproject.org/wiki/User:Sagitter
GPG Key: 0x565E653C
Check on https://keys.fedoraproject.org/
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJWb/cfAAoJEF5tK7VWXmU8T8QIAKgLd2AtUxi2t/cxWSgsIqBl
EDw/gwv2C87cdJSes/k/e6hPfkdlGdI8bKWlj6ZHlq169cjj28f0mxyc8ZspHqZ6
MKs/MqMPRRBhI00nevZRY0DffaOQL0f6GKHRecQu2pkse7kig4E6JowmSuO0V5e2
soHJmG3Oyr4ugI3hzLCstl0k785Mfh0K1fRodpX/OEuVg/CQ+C5lB5tOD6JsBr0j
OUoKxWL9LAQOw7J162nETMEJd6HsvkCwv1XTFFhh9EDyqFxJUvoBNjcoLBj9LRsb
3RPGWFiDbrFbC+G4OxQT/HI+fj+3sTEDtY7t8kAGn7Fo1UJfiKpbk+F8UO7BZug=
=I0nT
-END PGP SIGNATURE-
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

FAmSCo - Nov/Dec 2015 Election - Result announcement

[Jan Kurik]

Greetings, all!

The elections for FAmSCo - Nov/Dec 2015 have concluded, and the results
are shown below.

FAmSCo is electing 7 seats this time.
A total of 222 ballots were cast, meaning a candidate
could accumulate up to 2442 votes (222 * 11).

The results for the elections are as follows:

  # votes |  name
- +--
1442  | Christoph Wickert (cwickert)
 858  | Sirko Kemter (gnokii)
 846  | Truong Anh Tuan (tuanta)
 796  | Abdel G. Martínez L. (potty)
 767  | Gabriele Trombini (mailga)
 746  | Luis Bazan (lbazan)
 690  | Giannis Konstantinidis (giannisk)
- +--
 677  | Dan Mossor (danofsatx / dmossor)
 600  | Alick Zhao (alick)
 588  | Ben Williams (kk4ewt / jbwillia)
 433  | Matthew Williams (Lorddrachenblut)


Congratulations to the winning candidates, and thank you all
candidates for running this elections!
-- 
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

FESCo - Nov/Dec 2015 Election - Result announcement

[Jan Kurik]

Greetings, all!

The elections for FESCo - Nov/Dec 2015 have concluded, and the results
are shown below.

FESCo is electing 5 seats this time.
A total of 280 ballots were cast, meaning a candidate
could accumulate up to 1960 votes (280 * 7).

The results for the elections are as follows:

  # votes |  name
- +--
1426  |  Kevin Fenzi (nirik / kevin)
1053  | Adam Miller (maxamillion)
1028  | Jared Smith (jsmith)
 675  | Kalev Lember (kalev)
 669  | Parag Nemade (paragn)
- +--
 666  | Justin Forbes (jforbes)
 526  | Germano Massullo (Caterpillar / germano)


Congratulations to the winning candidates, and thank you all
candidates for running this elections!
-- 
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Council - Nov/Dec 2015 Election - Result announcement

[Jan Kurik]

Greetings, all!

The elections for Council - Nov/Dec 2015 have concluded, and the results
are shown below.

Council is electing 1 seat this time.
A total of 237 ballots were cast, meaning a candidate
could accumulate up to 474 votes (237 * 2).

The results for the elections are as follows:

  # votes |  name
- +--
 325  | Robert Mayr (robyduck)
- +--
 245  | Joe Brockmeier (jzb)


Congratulations to the winning candidate, and thank you all
candidates for running this elections!
-- 
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
--
devel mailing list
devel@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org