Re: Orphaned Packages in rawhide (2017-03-01)

2017-03-03 Thread Stephen John Smoogen 
On 2 March 2017 at 23:58, Ralf Corsepius  wrote:
> On 03/02/2017 05:06 PM, Ralf Corsepius wrote:
>>
>> Also, in the past, IIRC, koji (or was it bodhi?) did record a person's
>> last build activites, which would provide a strong indication about a
>> person's activities. Unfortunately I can't find this anymore.
>
>
> The URL I was referring to, is:
> https://koji.fedoraproject.org/koji/userinfo?userID=
>
> Pick a random UID and check the results.
>
> You'll find many users/accounts,
> * who appear to stopped have contributing to Fedora many years ago
> * who appear to never have built any package.
> * for "build machines" (No idea, why these exist and why these are mixed up
> with "real users").

That is probably a limitation of the system in that we don't know if
any person will ever become a packager or become one again. So even if
the account is set inactive, it will show up in that userID part. The
GUI would be useful if it said something like "Account Inactive". The
history is kept so that if someone needs to know if package X was
touched by say UID99 because it was found out that they were
silently dropping exploits in.. and then left we (and everyone else)
can audit it for that. [Or at least that is the usual reasoning
given.]



>
> Ralf
> ___
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-le...@lists.fedoraproject.org



-- 
Stephen J Smoogen.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Orphaned Packages in rawhide (2017-03-01)

2017-03-03 Thread Ralf Corsepius 

On 03/03/2017 10:48 AM, Vít Ondruch wrote:


Wasn't there rule to remove packages after two failed mass rebuilds?


Besides the fact, there wasn't an F25 mass rebuild, which alone implies 
"2 failed mass rebuilds == 2+ years", this rule never really worked, 
IMO, because packages often FTBFS for trivial reasons (e.g. missing BRs) 
which were fixed as "easy fixes" by provenpackagers, resulting into the 
package surviving longer.


Just consider the openssl-1.1.0 case: Most packages which currently FTBS 
due to openssl-1.1.0 compatibility issues (Wild guess: 20+ packages), 
probably can be rebuilt by switching their specs to using 
compat-openssl-devel.


Ralf


___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Orphaned Packages in rawhide (2017-03-01)

2017-03-03 Thread Vít Ondruch 


Dne 3.3.2017 v 06:51 Ralf Corsepius napsal(a):
> On 03/02/2017 01:43 PM, Josh Boyer wrote:
>> On Thu, Mar 2, 2017 at 1:22 AM, Ralf Corsepius 
>> wrote:
>>> On 03/01/2017 09:23 PM, opensou...@till.name wrote:

 The following packages are orphaned and will be retired when they
 are orphaned for six weeks, unless someone adopts them. If you know
 for
 sure
 that the package should be retired, please do so now with a proper
 reason:
 https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life
>>>
>>>
>>> Is there a way to request a package owned by somebody else to be
>>> retired?
>>>
>>> I am asking, because during the recent mass rebuilt, a larger number
>>> packages have been rebuilt, whose maintainers are known to have left
>>> Fedora
>>> or apparently do not seem/do not seem to be able to care about their
>>> packages.
>>
>> We have nothing in place other than to start the non-active maintainer
>> process for all of them.
>
> Unfortunately, this doesn't cover the case of
> "IMHO package X should be removed, because I believe it's
> obsolete/dead/outdated/insecure whatever, but I am not in position
> and/or not knowledgeable on details to decide".
>
>
> A real world example, I just encountered this situation, is this:
> https://bugzilla.redhat.com/show_bug.cgi?id=1424024
>
> - Maintainer apparently is inactive in Fedora since 2015-06-22
> (https://koji.fedoraproject.org/koji/userinfo?userID=819)
>
> - No maintainer activity on package since 2013 (fc20).
> All builds since fc20 were performed by releng/provenpackagers.
>
> - Package F26FTBFSes
> (https://koji.fedoraproject.org/koji/packageinfo?packageID=11868)
> Trigger for the F26FTBFS is -Werror, but the real issue underneath is
> openssl-1.1.0 incompatibility. As a short term "work-around/easy-fix",
> it is possible to resort to building against compat-openssl10, but in
> longer terms, a port to openssl-1.1.0 would be required.
>
>
> Would a tracking bug in RHBZ "nominees for package removal", which
> would be assigned to FESCO be helpful?
>

Wasn't there rule to remove packages after two failed mass rebuilds?


Vít
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Orphaned Packages in rawhide (2017-03-01)

2017-03-02 Thread Ralf Corsepius 

On 03/02/2017 01:43 PM, Josh Boyer wrote:

On Thu, Mar 2, 2017 at 1:22 AM, Ralf Corsepius  wrote:

On 03/01/2017 09:23 PM, opensou...@till.name wrote:


The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for
sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life



Is there a way to request a package owned by somebody else to be retired?

I am asking, because during the recent mass rebuilt, a larger number
packages have been rebuilt, whose maintainers are known to have left Fedora
or apparently do not seem/do not seem to be able to care about their
packages.


We have nothing in place other than to start the non-active maintainer
process for all of them.


Unfortunately, this doesn't cover the case of
"IMHO package X should be removed, because I believe it's 
obsolete/dead/outdated/insecure whatever, but I am not in position 
and/or not knowledgeable on details to decide".



A real world example, I just encountered this situation, is this: 
https://bugzilla.redhat.com/show_bug.cgi?id=1424024


- Maintainer apparently is inactive in Fedora since 2015-06-22 
(https://koji.fedoraproject.org/koji/userinfo?userID=819)


- No maintainer activity on package since 2013 (fc20).
All builds since fc20 were performed by releng/provenpackagers.

- Package F26FTBFSes 
(https://koji.fedoraproject.org/koji/packageinfo?packageID=11868)
Trigger for the F26FTBFS is -Werror, but the real issue underneath is 
openssl-1.1.0 incompatibility. As a short term "work-around/easy-fix", 
it is possible to resort to building against compat-openssl10, but in 
longer terms, a port to openssl-1.1.0 would be required.



Would a tracking bug in RHBZ "nominees for package removal", which would 
be assigned to FESCO be helpful?


Ralf
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Orphaned Packages in rawhide (2017-03-01)

2017-03-02 Thread Ralf Corsepius 

On 03/02/2017 05:06 PM, Ralf Corsepius wrote:

Also, in the past, IIRC, koji (or was it bodhi?) did record a person's
last build activites, which would provide a strong indication about a
person's activities. Unfortunately I can't find this anymore.


The URL I was referring to, is:
https://koji.fedoraproject.org/koji/userinfo?userID=

Pick a random UID and check the results.

You'll find many users/accounts,
* who appear to stopped have contributing to Fedora many years ago
* who appear to never have built any package.
* for "build machines" (No idea, why these exist and why these are mixed 
up with "real users").


Ralf
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Orphaned Packages in rawhide (2017-03-01)

2017-03-02 Thread Ralf Corsepius 

On 03/02/2017 04:12 PM, Stephen John Smoogen wrote:

On 2 March 2017 at 07:51, Ralf Corsepius  wrote:

On 03/02/2017 01:43 PM, Josh Boyer wrote:




And I also fear, this AWOL process doesn't work, because I have seen
packages in the mass-rebuilt, owned by persons, of whom I am pretty sure
went through the AWOL-ticket process at FESCO.

Ralf


Can you give us a list of these?
I didn't keep records of those names, I tumbled across and I am not sure 
whether it's fair to "denunciate" these people in public.
However I can send you the (very short) list of those "suspects" I 
recall off-head on PM.



It will be easier to track down what
is going on.

Theoretically, FESCO's track should have tickets about these.

Also, in the past, IIRC, koji (or was it bodhi?) did record a person's 
last build activites, which would provide a strong indication about a 
person's activities. Unfortunately I can't find this anymore.


Furthermore, very strong hints on such packagers provides this page:
http://dl.fedoraproject.org/pub/alt/mass-rebuild/f26-need-rebuild.html
when combining it with koji and finding packages which have not been 
built by its maintainers/owners for years.



Personally I would like to have a "sign of life" renewal
to Fedora accounts to try and track this down but people have said
that is too much bureaucracy.

Agreed, I think this is inevitable.

Ralf
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Orphaned Packages in rawhide (2017-03-01)

2017-03-02 Thread Stephen John Smoogen 
On 2 March 2017 at 07:51, Ralf Corsepius  wrote:
> On 03/02/2017 01:43 PM, Josh Boyer wrote:
>>
>> On Thu, Mar 2, 2017 at 1:22 AM, Ralf Corsepius 
>> wrote:
>>>
>>> On 03/01/2017 09:23 PM, opensou...@till.name wrote:


 The following packages are orphaned and will be retired when they
 are orphaned for six weeks, unless someone adopts them. If you know for
 sure
 that the package should be retired, please do so now with a proper
 reason:
 https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life
>>>
>>>
>>>
>>> Is there a way to request a package owned by somebody else to be retired?
>>>
>>> I am asking, because during the recent mass rebuilt, a larger number
>>> packages have been rebuilt, whose maintainers are known to have left
>>> Fedora
>>> or apparently do not seem/do not seem to be able to care about their
>>> packages.
>>
>>
>> We have nothing in place other than to start the non-active maintainer
>> process for all of them.
>
>
> That's, what I feared ;)
>
> And I also fear, this AWOL process doesn't work, because I have seen
> packages in the mass-rebuilt, owned by persons, of whom I am pretty sure
> went through the AWOL-ticket process at FESCO.
>
> Ralf

Can you give us a list of these? It will be easier to track down what
is going on. Personally I would like to have a "sign of life" renewal
to Fedora accounts to try and track this down but people have said
that is too much bureaucracy.



-- 
Stephen J Smoogen.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Orphaned Packages in rawhide (2017-03-01)

2017-03-02 Thread Ralf Corsepius 

On 03/02/2017 01:43 PM, Josh Boyer wrote:

On Thu, Mar 2, 2017 at 1:22 AM, Ralf Corsepius  wrote:

On 03/01/2017 09:23 PM, opensou...@till.name wrote:


The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for
sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life



Is there a way to request a package owned by somebody else to be retired?

I am asking, because during the recent mass rebuilt, a larger number
packages have been rebuilt, whose maintainers are known to have left Fedora
or apparently do not seem/do not seem to be able to care about their
packages.


We have nothing in place other than to start the non-active maintainer
process for all of them.


That's, what I feared ;)

And I also fear, this AWOL process doesn't work, because I have seen 
packages in the mass-rebuilt, owned by persons, of whom I am pretty sure 
went through the AWOL-ticket process at FESCO.


Ralf

___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Orphaned Packages in rawhide (2017-03-01)

2017-03-02 Thread Josh Boyer 
On Thu, Mar 2, 2017 at 1:22 AM, Ralf Corsepius  wrote:
> On 03/01/2017 09:23 PM, opensou...@till.name wrote:
>>
>> The following packages are orphaned and will be retired when they
>> are orphaned for six weeks, unless someone adopts them. If you know for
>> sure
>> that the package should be retired, please do so now with a proper reason:
>> https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life
>
>
> Is there a way to request a package owned by somebody else to be retired?
>
> I am asking, because during the recent mass rebuilt, a larger number
> packages have been rebuilt, whose maintainers are known to have left Fedora
> or apparently do not seem/do not seem to be able to care about their
> packages.

We have nothing in place other than to start the non-active maintainer
process for all of them.

josh
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Orphaned Packages in rawhide (2017-03-01)

2017-03-01 Thread Ralf Corsepius 

On 03/01/2017 09:23 PM, opensou...@till.name wrote:

The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life


Is there a way to request a package owned by somebody else to be retired?

I am asking, because during the recent mass rebuilt, a larger number 
packages have been rebuilt, whose maintainers are known to have left 
Fedora or apparently do not seem/do not seem to be able to care about 
their packages.


Ralf

___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Orphaned Packages in rawhide (2017-03-01)

2017-03-01 Thread opensource 
The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life

Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will be retired when the affected package gets retired.

  Package(co)maintainers  Status Change 
===
GLee   orphan 16 weeks ago  
PyKDE  orphan, group::kde-sig,4 weeks ago   
   jamatos, rdieter 
PyQt   orphan, rdieter, than  4 weeks ago   
amplab-tachyon orphan, hchen, java-sig,   6 weeks ago   
   tstclair 
bootparamd orphan, lnykryn, odvorace  1 weeks ago   
budgie orphan, cicku, 6 weeks ago   
   williamjmorenor, zsun
condor-ec2-enhancedorphan, rrati  6 weeks ago   
condor-ec2-enhanced-hooks  orphan, rrati  6 weeks ago   
condor-job-hooks   orphan, rrati  6 weeks ago   
condor-low-latency orphan, rrati  6 weeks ago   
cssed  orphan, affix  5 weeks ago   
eekboard   orphan, fujiwara, i18n-team,   1 weeks ago   
   ueno 
elfinfoorphan, pnemade0 weeks ago   
flasm  orphan 2 weeks ago   
fontik orphan, i18n-team, ueno1 weeks ago   
glyphtracerorphan, pnemade0 weeks ago   
golang-launchpad-go-xdg-v0 orphan, agoode 0 weeks ago   
greadelf   orphan, pnemade0 weeks ago   
ibus-gucharmap orphan, i18n-team, ueno3 weeks ago   
jenkins-openid-plugin  orphan, java-sig, mizdebsk,1 weeks ago   
   msimacek 
jung   orphan, coolsvap, moceap,  6 weeks ago   
   rrati
kfilemetadata  orphan, group::kde-sig,4 weeks ago   
   jgrulich, jreznik, nucleo,   
   rdieter, than
kimono orphan, group::kde-sig,1 weeks ago   
   jreznik, rdieter, than   
libgnome-media-profilesorphan, hadess, yaneti 8 weeks ago   
libkdcraw  orphan, group::kde-sig,1 weeks ago   
   jreznik, nucleo, rdieter,
   than 
libkgeomap orphan, group::kde-sig 1 weeks ago   
libkipiorphan, group::kde-sig,1 weeks ago   
   jreznik, nucleo, rdieter,
   than 
libqinfinity   orphan, dvratil, jgrulich, 1 weeks ago   
   rdieter  
libqzeitgeist  orphan, rdieter, tdfischer 1 weeks ago   
mj orphan, goeran 7 weeks ago   
openshift-restclient-java  orphan, marcusk2 weeks ago   
php-fpdf   orphan, ke4qqq 7 weeks ago   
php-htmlpurifier-  orphan, ke4qqq 7 weeks ago   
htmlpurifier
php-nusoap orphan, ke4qqq 7 weeks ago   
php-pear-HTML-Common   orphan, remi   11 weeks ago  
pkgconfig  orphan, ajax, alexl,   0 weeks ago   
   caillon, caolanm, group  
   ::gnome-sig, johnp, mbarnes, 
   mclasen, rhughes, rstrode,   
   ssp, teuf, xiphmont  
python-SimpleCV

Orphaned Packages in rawhide (2017-03-01)

2017-03-01 Thread opensource 
The following packages are orphaned and will be retired when they
are orphaned for six weeks, unless someone adopts them. If you know for sure
that the package should be retired, please do so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life

Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one. Please adopt the affected package or
retire your depending package to avoid broken dependencies, otherwise your
package will be retired when the affected package gets retired.

  Package(co)maintainers  Status Change 
===
GLee   orphan 16 weeks ago  
PyKDE  orphan, group::kde-sig,4 weeks ago   
   jamatos, rdieter 
PyQt   orphan, rdieter, than  4 weeks ago   
amplab-tachyon orphan, hchen, java-sig,   6 weeks ago   
   tstclair 
bootparamd orphan, lnykryn, odvorace  1 weeks ago   
budgie orphan, cicku, 6 weeks ago   
   williamjmorenor, zsun
condor-ec2-enhancedorphan, rrati  6 weeks ago   
condor-ec2-enhanced-hooks  orphan, rrati  6 weeks ago   
condor-job-hooks   orphan, rrati  6 weeks ago   
condor-low-latency orphan, rrati  6 weeks ago   
cssed  orphan, affix  5 weeks ago   
eekboard   orphan, fujiwara, i18n-team,   1 weeks ago   
   ueno 
elfinfoorphan, pnemade0 weeks ago   
flasm  orphan 2 weeks ago   
fontik orphan, i18n-team, ueno1 weeks ago   
glyphtracerorphan, pnemade0 weeks ago   
golang-launchpad-go-xdg-v0 orphan, agoode 0 weeks ago   
greadelf   orphan, pnemade0 weeks ago   
ibus-gucharmap orphan, i18n-team, ueno3 weeks ago   
jenkins-openid-plugin  orphan, java-sig, mizdebsk,1 weeks ago   
   msimacek 
jung   orphan, coolsvap, moceap,  6 weeks ago   
   rrati
kfilemetadata  orphan, group::kde-sig,4 weeks ago   
   jgrulich, jreznik, nucleo,   
   rdieter, than
kimono orphan, group::kde-sig,1 weeks ago   
   jreznik, rdieter, than   
libgnome-media-profilesorphan, hadess, yaneti 8 weeks ago   
libkdcraw  orphan, group::kde-sig,1 weeks ago   
   jreznik, nucleo, rdieter,
   than 
libkgeomap orphan, group::kde-sig 1 weeks ago   
libkipiorphan, group::kde-sig,1 weeks ago   
   jreznik, nucleo, rdieter,
   than 
libqinfinity   orphan, dvratil, jgrulich, 1 weeks ago   
   rdieter  
libqzeitgeist  orphan, rdieter, tdfischer 1 weeks ago   
mj orphan, goeran 7 weeks ago   
openshift-restclient-java  orphan, marcusk2 weeks ago   
php-fpdf   orphan, ke4qqq 7 weeks ago   
php-htmlpurifier-  orphan, ke4qqq 7 weeks ago   
htmlpurifier
php-nusoap orphan, ke4qqq 7 weeks ago   
php-pear-HTML-Common   orphan, remi   11 weeks ago  
pkgconfig  orphan, ajax, alexl,   0 weeks ago   
   caillon, caolanm, group  
   ::gnome-sig, johnp, mbarnes, 
   mclasen, rhughes, rstrode,   
   ssp, teuf, xiphmont  
python-SimpleCV