Re: Heads-up: trousers (TPM 1.2) silently orphaned
On Sat, Jan 15, 2022 at 11:42:34AM +, Peter Robinson wrote: > On Sat, Jan 15, 2022 at 4:20 AM Michel Alexandre Salim > wrote: > > > > On Fri, Dec 17, 2021 at 12:35:59PM -0800, Adam Williamson wrote: > > > > > > It does seem to be used by robosignatory (the thing that signs Fedora > > > packages, I think): > > > > Sorry for the late reply! Meant to ask you about this, as I tried and > > find what requires trousers before my first post and didn't see > > robosignatory at all. > > I asked Patrick about this last week, it's an old dependency that was > never cleaned up. On a previous generation of HW they used to use a > TPM1 to store bits used by robosignatory but it was never a direct > dependency. That's no longer the case so it can be cleaned up. Ah, that's good to know! I still intend to maintain trousers for at least the next couple of years - but the less dependent packages, the better. Best regards, -- Michel Alexandre Salim identities: https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2 signature.asc Description: PGP signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: Heads-up: trousers (TPM 1.2) silently orphaned
On Sat, Jan 15, 2022 at 4:20 AM Michel Alexandre Salim wrote: > > On Fri, Dec 17, 2021 at 12:35:59PM -0800, Adam Williamson wrote: > > On Fri, 2021-12-17 at 10:35 -0800, Michel Alexandre Salim wrote: > > > On Thu, Dec 16, 2021 at 10:11:53AM -0800, Michel Alexandre Salim wrote: > > > > Hi all, > > > > > > > > `trousers` got silently orphaned around the time an EPEL9 branch for it > > > > was requested: https://bugzilla.redhat.com/show_bug.cgi?id=2032258 > > > > > > > > Looks like we're slowly uncoupling ourselves from it, e.g. > > > > > > > > - for ARM, uboot-tools no longer pulls in vboot-utils which pulls in > > > > trousers: > > > > https://lists.fedoraproject.org/archives/list/scm-comm...@lists.fedoraproject.org/message/JAAC32MNLJMMENVJG7QUSKHGZFABLUHX/ > > > > > > > > - Neal disabled TPM/TSS 1.2 support in strongswan, dropping the trousers > > > > dependency, in > > > > https://src.fedoraproject.org/rpms/strongswan/pull-request/13 > > > > > > > > but there are several dependencies still around (strongswan still shows > > > > up here as the PR just got merged a few hours ago) > > > > > > > I've taken this package for now. > > > > > > It's probably OK for most of the trousers dependent to drop their > > > dependencies on it though, the use case I have in mind is rather > > > specialized. > > > > It does seem to be used by robosignatory (the thing that signs Fedora > > packages, I think): > > Sorry for the late reply! Meant to ask you about this, as I tried and > find what requires trousers before my first post and didn't see > robosignatory at all. I asked Patrick about this last week, it's an old dependency that was never cleaned up. On a previous generation of HW they used to use a TPM1 to store bits used by robosignatory but it was never a direct dependency. That's no longer the case so it can be cleaned up. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: Heads-up: trousers (TPM 1.2) silently orphaned
On Fri, Dec 17, 2021 at 12:35:59PM -0800, Adam Williamson wrote: > On Fri, 2021-12-17 at 10:35 -0800, Michel Alexandre Salim wrote: > > On Thu, Dec 16, 2021 at 10:11:53AM -0800, Michel Alexandre Salim wrote: > > > Hi all, > > > > > > `trousers` got silently orphaned around the time an EPEL9 branch for it > > > was requested: https://bugzilla.redhat.com/show_bug.cgi?id=2032258 > > > > > > Looks like we're slowly uncoupling ourselves from it, e.g. > > > > > > - for ARM, uboot-tools no longer pulls in vboot-utils which pulls in > > > trousers: > > > https://lists.fedoraproject.org/archives/list/scm-comm...@lists.fedoraproject.org/message/JAAC32MNLJMMENVJG7QUSKHGZFABLUHX/ > > > > > > - Neal disabled TPM/TSS 1.2 support in strongswan, dropping the trousers > > > dependency, in > > > https://src.fedoraproject.org/rpms/strongswan/pull-request/13 > > > > > > but there are several dependencies still around (strongswan still shows > > > up here as the PR just got merged a few hours ago) > > > > > I've taken this package for now. > > > > It's probably OK for most of the trousers dependent to drop their > > dependencies on it though, the use case I have in mind is rather > > specialized. > > It does seem to be used by robosignatory (the thing that signs Fedora > packages, I think): Sorry for the late reply! Meant to ask you about this, as I tried and find what requires trousers before my first post and didn't see robosignatory at all. I just checked: ❯ sudo dnf repoquery --disablerepo=\* --enablerepo=rawhide,rawhide-source --requires python3-robosignatory Waiting for process with pid 3549064 to finish. Fedora - Rawhide - Developmental packages for t 8.6 MB/s | 64 MB 00:07 Fedora - Rawhide - Source 2.3 MB/s | 7.9 MB 00:03 Last metadata expiration check: 0:00:02 ago on Fri 14 Jan 2022 08:16:34 PM PST. /usr/bin/python3 koji python(abi) = 3.10 python3-fedora-messaging python3.10dist(boto3) python3.10dist(click) python3.10dist(fedora-messaging) python3.10dist(psutil) python3.10dist(six) rpmdevtools if robosignatory actually uses trousers, should it be added to the spec? Best regards, -- Michel Alexandre Salim profile: https://keyoxide.org/mic...@michel-slm.name signature.asc Description: PGP signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: Heads-up: trousers (TPM 1.2) silently orphaned
On Sat, Dec 18, 2021 at 1:13 PM Adam Williamson wrote: > > On Fri, 2021-12-17 at 10:35 -0800, Michel Alexandre Salim wrote: > > On Thu, Dec 16, 2021 at 10:11:53AM -0800, Michel Alexandre Salim wrote: > > > Hi all, > > > > > > `trousers` got silently orphaned around the time an EPEL9 branch for it > > > was requested: https://bugzilla.redhat.com/show_bug.cgi?id=2032258 > > > > > > Looks like we're slowly uncoupling ourselves from it, e.g. > > > > > > - for ARM, uboot-tools no longer pulls in vboot-utils which pulls in > > > trousers: > > > https://lists.fedoraproject.org/archives/list/scm-comm...@lists.fedoraproject.org/message/JAAC32MNLJMMENVJG7QUSKHGZFABLUHX/ > > > > > > - Neal disabled TPM/TSS 1.2 support in strongswan, dropping the trousers > > > dependency, in > > > https://src.fedoraproject.org/rpms/strongswan/pull-request/13 > > > > > > but there are several dependencies still around (strongswan still shows > > > up here as the PR just got merged a few hours ago) > > > > > I've taken this package for now. > > > > It's probably OK for most of the trousers dependent to drop their > > dependencies on it though, the use case I have in mind is rather > > specialized. > > It does seem to be used by robosignatory (the thing that signs Fedora > packages, I think): > > https://pagure.io/fedora-infra/ansible/blob/main/f/roles/robosignatory/tasks/main.yml#_6 Well, then, I guess it's good that it has a maintainer now... -- 真実はいつも一つ！/ Always, there's only one truth! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: Heads-up: trousers (TPM 1.2) silently orphaned
On Fri, 2021-12-17 at 10:35 -0800, Michel Alexandre Salim wrote: > On Thu, Dec 16, 2021 at 10:11:53AM -0800, Michel Alexandre Salim wrote: > > Hi all, > > > > `trousers` got silently orphaned around the time an EPEL9 branch for it > > was requested: https://bugzilla.redhat.com/show_bug.cgi?id=2032258 > > > > Looks like we're slowly uncoupling ourselves from it, e.g. > > > > - for ARM, uboot-tools no longer pulls in vboot-utils which pulls in > > trousers: > > https://lists.fedoraproject.org/archives/list/scm-comm...@lists.fedoraproject.org/message/JAAC32MNLJMMENVJG7QUSKHGZFABLUHX/ > > > > - Neal disabled TPM/TSS 1.2 support in strongswan, dropping the trousers > > dependency, in > > https://src.fedoraproject.org/rpms/strongswan/pull-request/13 > > > > but there are several dependencies still around (strongswan still shows > > up here as the PR just got merged a few hours ago) > > > I've taken this package for now. > > It's probably OK for most of the trousers dependent to drop their > dependencies on it though, the use case I have in mind is rather > specialized. It does seem to be used by robosignatory (the thing that signs Fedora packages, I think): https://pagure.io/fedora-infra/ansible/blob/main/f/roles/robosignatory/tasks/main.yml#_6 -- Adam Williamson Fedora QA IRC: adamw | Twitter: adamw_ha https://www.happyassassin.net ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: Heads-up: trousers (TPM 1.2) silently orphaned
On Thu, Dec 16, 2021 at 10:11:53AM -0800, Michel Alexandre Salim wrote: > Hi all, > > `trousers` got silently orphaned around the time an EPEL9 branch for it > was requested: https://bugzilla.redhat.com/show_bug.cgi?id=2032258 > > Looks like we're slowly uncoupling ourselves from it, e.g. > > - for ARM, uboot-tools no longer pulls in vboot-utils which pulls in > trousers: > https://lists.fedoraproject.org/archives/list/scm-comm...@lists.fedoraproject.org/message/JAAC32MNLJMMENVJG7QUSKHGZFABLUHX/ > > - Neal disabled TPM/TSS 1.2 support in strongswan, dropping the trousers > dependency, in https://src.fedoraproject.org/rpms/strongswan/pull-request/13 > > but there are several dependencies still around (strongswan still shows > up here as the PR just got merged a few hours ago) > I've taken this package for now. It's probably OK for most of the trousers dependent to drop their dependencies on it though, the use case I have in mind is rather specialized. Best regards, -- Michel Alexandre Salim profile: https://keyoxide.org/mic...@michel-slm.name signature.asc Description: PGP signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Heads-up: trousers (TPM 1.2) silently orphaned
Hi all, `trousers` got silently orphaned around the time an EPEL9 branch for it was requested: https://bugzilla.redhat.com/show_bug.cgi?id=2032258 Looks like we're slowly uncoupling ourselves from it, e.g. - for ARM, uboot-tools no longer pulls in vboot-utils which pulls in trousers: https://lists.fedoraproject.org/archives/list/scm-comm...@lists.fedoraproject.org/message/JAAC32MNLJMMENVJG7QUSKHGZFABLUHX/ - Neal disabled TPM/TSS 1.2 support in strongswan, dropping the trousers dependency, in https://src.fedoraproject.org/rpms/strongswan/pull-request/13 but there are several dependencies still around (strongswan still shows up here as the PR just got merged a few hours ago) ``` ~ ❯ sudo dnf repoquery --disablerepo=\* --enablerepo=rawhide-source --whatrequires trousers-devel Last metadata expiration check: 0:00:10 ago on Thu 16 Dec 2021 10:08:04 AM PST. ecryptfs-utils-0:111-25.fc36.src gnutls-0:3.7.2-2.fc35.src golang-github-google-tspi-0:0.2.0-6.fc35.src openconnect-0:8.10-7.fc35.src strongswan-0:5.9.4-3.fc36.src tpm-quote-tools-0:1.0.4-8.fc35.src tpm-tools-0:1.3.9-12.fc36.src vboot-utils-0:20190823-8.git595108c0.fc36.src ``` Do we want to keep trousers in Fedora? If so someone who needs it should probably step up, if not, we should toggle it off in these packages. Maintainers BCC:ed. Best regards, -- Michel Alexandre Salim profile: https://keyoxide.org/mic...@michel-slm.name signature.asc Description: PGP signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
