Re: Useless setroubleshoot alerts

2009-12-17 Thread Chuck Anderson
On Wed, Dec 09, 2009 at 01:34:45PM +, Christopher Brown wrote:
 SELinux was quite good on F11 and F12. Now it would seem it is 
 starting to regress again.

Your expectations are too high if you think rawhide shouldn't have 
regressions.

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: Suitability of Python for daemon processes

2009-10-26 Thread Chuck Anderson
On Sun, Oct 25, 2009 at 06:46:05PM -0400, Ben Boeckel wrote:
 Seeing as it is a mirroring daemon, the network is the bottleneck. If it 
 isn't 
 then either you're sitting next door, our implementation is bad, or the 
 hardware shouldn't be a mirror in the first place.

Speaking from experience, the network isn't always the bottleneck.  
I/O performance is often a performance problem, especially when 
walking the directory tree to build filelists.  CPU performance can 
come into play if you are performing hashes or compression of the data 
to be transferred.  I suggest you post your message to the Fedora 
mirror-list-d where I'm sure you'll get lots of feedback.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Simplify non-responsive maintainers policy Part 2

2009-10-22 Thread Chuck Anderson
On Thu, Oct 22, 2009 at 09:43:46AM -0700, Jesse Keating wrote:
 On Thu, 2009-10-22 at 11:16 +0200, Till Maas wrote:
  What kind of checks do you mean? If maintainers want to keep their
  packages, they can just change the owner of the package to their new
  private account before leaving Red Hat. 
 
 That assumes the maintainer knows they're leaving Red Hat ahead of time.

Perhaps no one should be using their @redhat.com address for Fedora 
work :-/

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


dracut, or should booting a LiveCD touch the hard disk?

2009-10-04 Thread Chuck Anderson
Dracut currently tries to find and activate all RAID, LVM, and LUKS 
partitions on the hard disks when booting the LiveCD.

Several of my systems are made up of many RAID, LVM, and LUKS 
partitions in various combinations.  Booting the LiveCD now goes and 
activates these and asks for passphrases that I have to skip over by 
entering blank/bogus values to get the system to boot up.  I now know 
that you can pass various rd_* options such as rd_NO_LUKS to grub 
to have dracut skip these things, but I was hoping for something 
better, perhaps a skip button.

The new behavior makes the LiveCD less independent of and more tied 
to the existing installations on the hard disk.  This is surprising 
and unexpected.  Many uses of LiveCD's expect that the live 
environment will be completely independent of, and unaffected by, what 
is on the hard disk.  This is no longer true.  It may be confusing for 
users of LiveCD's when an (unidentified) passphrase input text box 
pops up when booting the LiveCD.

What do others think?  Should the LiveCD by default access and 
activate storage volumes, including encrypted partitions, on the hard 
disks?  Should the LUKS prompts better identify the volume so that 
users know what passphrase to enter?

I would prefer a LiveCD that doesn't do anything to the hard disk at 
all, at least by default when booting up.  It should be 
self-contained.  Perhaps we should create another entry in 
syslinux.cfg that enables rd_NO_LUKS by default, and call it Boot 
without accessing hard disk.

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: dracut, or should booting a LiveCD touch the hard disk?

2009-10-04 Thread Chuck Anderson
On Sun, Oct 04, 2009 at 06:44:47PM -0400, Ray Strode wrote:
  What do others think?  Should the LiveCD by default access and
  activate storage volumes, including encrypted partitions, on the hard
  disks?  Should the LUKS prompts better identify the volume so that
  users know what passphrase to enter?
 This seems like a misfeature in dracut for LiveCD or otherwise.
 
 The initrd should be about getting / mounted read-only and nothing else.
 
 There's a reason why plymouth doesn't identify the volume in the initrd.
 Plymouth is graphical and so would need to ship fonts, font
 renderering libraries,
 and translations in the initrd to display text. That's a non-starter.
 
 It's okay though, because in most cases the user should only ever get
 asked for one passphrase from the initrd,
 so we don't need to show anything but a lock icon and an entry box.
 
 If that's no longer the case in a dracut world, we probably need to fix 
 dracut.

I agree that this is the best solution.  Fix dracut to only activate 
and mount /.  I found these bugs closed as NOTABUG:

https://bugzilla.redhat.com/show_bug.cgi?id=512620
https://bugzilla.redhat.com/show_bug.cgi?id=524366

and this is the one I had just opened:

https://bugzilla.redhat.com/show_bug.cgi?id=525877

so if this is working as intended is there any chance of changing 
the default behavior to work as expected above?

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: yum-presto plugin by default

2009-08-18 Thread Chuck Anderson
On Wed, Aug 19, 2009 at 11:03:44AM +0800, Steven James Drinnan wrote:
 I would hold off on the default thing. 
 
 I have found that it has played havoc with intel video drivers and
 NetworkManager. I do not know how but for me it was a pain in the neck.
 
 All I know is that after I re-installed and upgraded I have had no
 problems
 
 -1 to installing it by default in F12.

What the heck does yum-presto have to do with the quality of the 
xorg-x11-drv-intel and NetworkManager packages?

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: yum-presto plugin by default

2009-08-18 Thread Chuck Anderson
On Wed, Aug 19, 2009 at 12:36:15AM -0400, Chuck Anderson wrote:
 On Wed, Aug 19, 2009 at 11:03:44AM +0800, Steven James Drinnan wrote:
  I would hold off on the default thing. 
  
  I have found that it has played havoc with intel video drivers and
  NetworkManager. I do not know how but for me it was a pain in the neck.
  
  All I know is that after I re-installed and upgraded I have had no
  problems
  
  -1 to installing it by default in F12.
 
 What the heck does yum-presto have to do with the quality of the 
 xorg-x11-drv-intel and NetworkManager packages?

Responding to myself, are you perhaps confusing yum-presto with 
presto?

Name   : yum-presto
Arch   : noarch
Version: 0.5.0
Release: 1.fc11
Size   : 78 k
Repo   : installed
Summary: Presto plugin for yum
URL: http://www.lesbg.com/jdieter/presto/
License: GPLv2+
Description: Yum-presto is a plugin for yum that looks for deltarpms rather than
   : rpms whenever they are available.  This has the potential of saving
   : a lot of bandwidth when downloading updates.
   : 
   : A Deltarpm is the difference between two rpms.  If you already have
   : foo-1.0 installed and foo-1.1 is available, yum-presto will
   : download the deltarpm for foo-1.0 = 1.1 rather than the full
   : foo-1.1 rpm, and then build the full foo-1.1 package from your
   : installed foo-1.0 and the downloaded deltarpm.

Name   : presto
Arch   : x86_64
Version: 0.1.3
Release: 6.fc11
Size   : 35 k
Repo   : fedora
Summary: A tilemap engine using the Allegro game programming library
URL: http://www.hypersonicsoft.org/projects/showproject.php?id=29
License: GPLv3+
Description: Presto is a general-use tilemap engine coded in C that uses Allegro
   : for graphics rendering, and therefore is intended for use in games
   : using Allegro. It can handle rectangular tiles of any height and
   : width (and different height from width), loading tilemaps from
   : files, tile blending, and the capability to change most of these
   : elements on the fly.

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: yum-presto plugin by default

2009-08-17 Thread Chuck Anderson
On Tue, Aug 18, 2009 at 01:35:37AM +0530, Rahul Sundaram wrote:
 On 07/26/2009 06:40 AM, Rahul Sundaram wrote:
  Hi,
  
  Can we make it a default in comps for Rawhide?
  
  Rahul
 
 No answer here after weeks.
 
 After some lengthy discussion with rel-eng team in irc, not much care
 either way. Talked to desktop team and based on their recommendation, I
 have added yum-presto to the GNOME Desktop group by default.
 
 If rel-eng wants to add it a base group for the DVD image, feel free to
 do so. Spin owners - likewise. Thanks.

I've been using yum-presto since before F11 came out, and it is great.  
+1 to installing it by default in F12.

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: fedora 11 worst then ever release

2009-07-25 Thread Chuck Anderson
On Sat, Jul 25, 2009 at 04:41:53PM +0100, Alan Cox wrote:
 md /boot is definitely broken, has been for ages and the bugs don't seem
 to have been touched. It's also obvious nobody bothered to actually test
 that case because the error paths in the install code don't actually
 work for that case either !

I always set up my md /boot manually and it works fine after that.

 Fortunately the usual updating fedora-release, yum upgrade approach
 worked on my boxes. I'd avoid preupgrade anyway it seems to like breaking
 systems and leaving them half upgraded so you have to rescue the mess by
 hand.

I don't even upgrade anymore.  I just keep two partitions (Logical 
Volumes actually)--one for Fedora N and one for Fedora N+1.  I always 
do a fresh install, formatting the partition from the older install.  
This has the advantage of providing a backup in case the new Fedora 
doesn't work so well.  Eventually, when updates to the new Fedora fix 
the most annoying bugs, I switch to using it full time.

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: rpm AutoRequires/AutoProvides and dsos not in linker path, do we care ?

2009-06-17 Thread Chuck Anderson
On Wed, Jun 17, 2009 at 02:57:53PM +0100, Caolán McNamara wrote:
 So, https://bugzilla.redhat.com/show_bug.cgi?id=502226 was logged a
 while ago against OOo for the rpms improperly providing and
 requiring .sos that are not in the linker path, but instead in OOo's own
 subdirs.

 a) do we care ?

Yes I care.  I ran into somthing similar for perl modules.  Packages 
shouldn't provide 'perl(foo)' unless those modules are in perl's 
default module path.  It clearly breaks programs when a perl module in 
a private directory satisfies an rpm dependency for another package.

 b) if we care do we want to 
 b.1) make every package that has some shared libraries in it that are
 not in the default linker path make manual filters to exclude the
 provides/requires ? (oh, the pain)

That is what I had to do in the case of a perl program I'm packaging.  
There are even Fedora guidelines on how to do this for perl.

 b.2) extend the autorequires/autoprovides in some (handwaves) way to
 better indicate the desired match

I like this idea better.  AutoReq/Prov should only search system-wide 
deafult search paths for .so's, perl modules, and any other such 
objects that it supports.

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: rpm AutoRequires/AutoProvides and dsos not in linker path, do we care ?

2009-06-17 Thread Chuck Anderson
On Wed, Jun 17, 2009 at 09:42:38AM -0500, Chris Adams wrote:
 Once upon a time, Chuck Anderson c...@wpi.edu said:
   b.2) extend the autorequires/autoprovides in some (handwaves) way to
   better indicate the desired match
  
  I like this idea better.  AutoReq/Prov should only search system-wide 
  deafult search paths for .so's, perl modules, and any other such 
  objects that it supports.
 
 That breaks things, because a program in /usr/bin may require a module
 or library in a private directory.  You have to search all directories
 for provides to satisfy internal requires.

If a program in /usr/bin requires something in a private, non-system 
directory that is provided by a different package, then the 
provides/requires need to express that somehow, perhaps by using a 
full path in the provides.  Until that becomes possible, I'm inclined 
to say that AutoReq/Prov shouldn't be searching private directories, 
and we should require all packages that have such requirements to use 
manual Requires: on either the file path or the package that provides 
the private library.  Keeping things the way they are now is just 
plain broken.

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: rpm AutoRequires/AutoProvides and dsos not in linker path, do we care ?

2009-06-17 Thread Chuck Anderson
On Wed, Jun 17, 2009 at 11:00:06AM -0500, Chris Adams wrote:
 Once upon a time, Chuck Anderson c...@wpi.edu said:
  On Wed, Jun 17, 2009 at 09:42:38AM -0500, Chris Adams wrote:
   That breaks things, because a program in /usr/bin may require a module
   or library in a private directory.  You have to search all directories
   for provides to satisfy internal requires.
  
  If a program in /usr/bin requires something in a private, non-system 
  directory that is provided by a different package, then the 
  provides/requires need to express that somehow, perhaps by using a 
  full path in the provides.
 
 I was talking about in the same package.  For example, MRTG installs in
 /usr/bin/mrtg, and then needs private perl modules.  If you simply
 remove the private directories, you'll end up with broken dependencies
 because /usr/bin/mrtg needs modules that are not provided anywhere.

I don't see why.  You would obviously filter out the Requires as well 
as the Provides.  Those files are in the same package as the binary, 
so they'll always be there when the package is installed.

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: rpm AutoRequires/AutoProvides and dsos not in linker path, do we care ?

2009-06-17 Thread Chuck Anderson
On Wed, Jun 17, 2009 at 10:50:43PM -0400, Bill Nottingham wrote:
 Chuck Anderson (c...@wpi.edu) said: 
   system-wide includes paths mentioned in /etc/ld.so.conf.d/*, which are
   files provided by other packages.  Suddenly your search scope is
   unbounded again.
  
  Not really unbounded.  If a package puts a file in /etc/ld.so.conf.d/ 
  then the library is now available system-wide, so it should be 
  searched by autorequires/autoprovides.
 
 The package that puts the file in ld.so.conf.d and the package that
 puts libraries into the location specified in that file may not be
 the same package, and actually may have no dependencies between
 them at all...

Do we have any examples of that?  I'd be inclined to say if there are 
a very few cases where one package provides an ld.so.conf.d file that 
ends up being used by many other packages, we should just put that 
path into the system default /etc/ld.so.conf, so it is always present.

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: packaging web applications, SELinux

2009-06-16 Thread Chuck Anderson
On Tue, Jun 16, 2009 at 04:46:00PM +0100, Paul Howarth wrote:
 On 16/06/09 16:34, Chuck Anderson wrote:
 Is there any pointer to best practices for packing a web application
 that provides static content, cgi scripts, integrates with Apache
 configuration, and works with SELinux?  How should I package the
 SELinux policy needed to make this work?

 The Packaging Guidelines mention Web Applications, but not how to make
 them work with SELinux:

 https://fedoraproject.org/wiki/Packaging/Guidelines#Web_Applications

 Do you already have the policy for your webapp written?

 If so, you can proceed according to
 https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft
 but better still would be to post your policy on fedora-selinux-list for  
 comment and get it merged into the main Fedora policy and upstream.

No policy yet.  I think I just need file_contexts to go along with the 
standard ones:

/srv/([^/]*/)?www(/.*)? system_u:object_r:httpd_sys_content_t:s0
/var/www(/.*)?  system_u:object_r:httpd_sys_content_t:s0
/var/www(/.*)?/logs(/.*)?   system_u:object_r:httpd_log_t:s0
/var/www/[^/]*/cgi-bin(/.*)?system_u:object_r:httpd_sys_script_exec_t:s0
/var/www/perl(/.*)? system_u:object_r:httpd_sys_script_exec_t:s0
/var/www/icons(/.*)?system_u:object_r:httpd_sys_content_t:s0
/var/www/html/[^/]*/cgi-bin(/.*)?   
system_u:object_r:httpd_sys_script_exec_t:s0
/var/www/cgi-bin(/.*)?  system_u:object_r:httpd_sys_script_exec_t:s0

I found that Debian has pretty well-defined (draft) guidelines for web 
applications:

http://webapps-common.alioth.debian.org/draft/html/

that standardizes on /usr/share/PACKAGE/www for static content and 
/usr/lib/cgi-bin/PACKAGE for arch-dependent dynamically executed 
content.

If we could come up with a similiar standard, then we could add 
standard SELinux file_contexts to deal with it, such as:

/usr/share/[^/]*/www(/.*)?  system_u:object_r:httpd_sys_content_t:s0
/usr/share/[^/]*/cgi-bin(/.*)?  system_u:object_r:httpd_sys_script_exec_t:s0
/usr//lib(64)?/[^/]*/cgi-bin(/.*)?  
system_u:object_r:httpd_sys_script_exec_t:s0

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: iptables/firewall brainstorming

2009-06-14 Thread Chuck Anderson
On Sun, Jun 14, 2009 at 12:30:41PM -0600, Kevin Fenzi wrote:
 On Sun, 14 Jun 2009 18:34:52 +0100
 Matthew Garrett m...@redhat.com wrote:
 
  On Sun, Jun 14, 2009 at 06:13:51PM +0200, Julian Aloofi wrote:
  
   So, solving this is pretty easy, even for newbies. But I agree that
   the error message will not help someone without advanced knowledge.
   Although I think people running Samba generally will know where to
   look for the problem.
  
  I think this is actually a problem that needs solving. We have
  several network services that are either installed by default or
  might be expected to be part of a standard setup, but which don't
  work because of the default firewall rules. The Anaconda people have
  (sensibly, IMHO) refused to simply add further exceptions to the
  firewall policy.
  
  So, what should happen here? Should we leave the firewall enabled in 
  these cases* by default and require admins to open them? If so, is
  there any way that we can make this easier in some
  Packagekit-oriented manner? If not, how should we define that
  packages indicate that they need ports opened? Should this be handled
  at install time or run time?
  
  * The case that I keep hitting is mDNS resolution, which requires 
  opening a hole in the firewall

For the case of mDNS resolution, we should create a nf_conntrack 
module to track outbound requests and allow the related replies back 
in.  This case is identical to the Samba browsing case where we 
created nf_conntrack_netbios_ns [1].  We need a nf_conntrack_mdns too.

 I keep wondering if we couldn't come up with something
 like a /etc/iptables.d/ type setup somehow that would work for these
 cases. 

That might be a good idea for services, but for clients (Samba NetBIOS 
browsing, mDNS, other client-initiated broadcast/multicast-based 
browsing or discovery protocols) we should just unconditionally 
install and enable iptables conntrack modules to handle them by 
default [1] [2].  Clients should just work out-of-the-box without 
requiring any user configuration.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=113918
[2] https://bugzilla.redhat.com/show_bug.cgi?id=469884

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: What I HATE about F11

2009-06-14 Thread Chuck Anderson
On Sun, Jun 14, 2009 at 10:45:09AM -0400, Simo Sorce wrote:
 * Samba (outbound) browsing requires firewall mods
  I don't know how Samba works, so forgive me if I say obvious stupidity,
  but shouldn't *client* work even behind closed firewall (like with any
  other services like ssh, ftp, ...)? Isn't this a samba bug then?
 
 Samba as a client needs to listen for Netbios packets replies (UDP) to
 do browsing, so since F-10 (yes this is not something new in F-11) the
 firewall has strict rules and there is a samba client specific rule.

...which is broken in that it is too permissive, and in that it isn't 
enabled by default.  We need to fix it so it only uses the conntrack 
module but doesn't open inbound ports, and also enable it in the 
default install.

https://bugzilla.redhat.com/show_bug.cgi?id=469884

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: Announcing Fedora Activity Day - Fedora Development Cycle 2009

2009-06-04 Thread Chuck Anderson
On Thu, Jun 04, 2009 at 10:56:34AM -0400, Seth Vidal wrote:


 On Thu, 4 Jun 2009, Tom \spot\ Callaway wrote:

 On 06/03/2009 07:48 PM, Chuck Anderson wrote:
 Not necessarily.  I don't see why the Fedora Project couldn't qualify
 as a Sponsored Participant on Internet2 [1].  In fact, Red Hat is
 already connected in Raleigh.

 I think this is because they're technically on NC State University.


 and last time I checked it's a 100mbit connection to i2.

Well, they are listed as Red Hat on the Internet2 map.  Time to 
upgrade to Gig :-)

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


Re: Announcing Fedora Activity Day - Fedora Development Cycle 2009

2009-06-03 Thread Chuck Anderson
On Mon, Jun 01, 2009 at 06:45:07PM -0400, Tom spot Callaway wrote:
 On 06/01/2009 06:45 PM, Jesse Keating wrote:
  If we had I2 in PHX this would get a lot faster.
 
 We just need to hold some classes and get the PHX datacenter certified
 as a University. ;)

Not necessarily.  I don't see why the Fedora Project couldn't qualify 
as a Sponsored Participant on Internet2 [1].  In fact, Red Hat is 
already connected in Raleigh.  I'd gladly help pursue this, but I may 
not be the right person seeing as I'm in Boston, not PHX.

I2 also has a private lambda service where you can get your own 
dedicated 10Gig wavelength across the backbone [2].  It seems they are 
currently offering no-fee trials of this service to I2 connectors.

Arizona State University is already on I2 via CENIC, and CENIC offers 
this Dynamic Circuit capability.  MCNC in Durham where Red Hat is 
connected doesn't appear to have DCN though.

[1] http://www.internet2.edu/network/participants/

Sponsored participants are individual educational institutions 
(including not-for-profit and for-profit K-20, technical, and trade 
schools), museums, art galleries, libraries, hospitals, as well as 
other non-educational, not-for-profit or for-profit organizations that 
require routine collaboration on instructional, clinical, and/or 
research projects, services, and content with Primary participants or 
with other Sponsored Participants. Such organizations typically are 
either not eligible or not able to become Internet2 members.

[2] http://www.internet2.edu/network/dc/

To support the development, deployment, and use of innovative hybrid 
optical networking capabilities, Internet2 is initiating a no-fee 
trial of the Internet2 DCN.

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


[webmas...@fedoraproject.org: FedoraProject page FUDCon:FUDConF10 has been changed by anonymous user 189.73.88.220]

2009-06-02 Thread Chuck Anderson
Can we make this page read-only now that FUDConF10 is over?

- Forwarded message from WikiAdmin webmas...@fedoraproject.org -

From: WikiAdmin webmas...@fedoraproject.org
To: Cra c...@fedoraproject.org
Date: Tue,  2 Jun 2009 13:09:13 + (UTC)
Subject: FedoraProject page FUDCon:FUDConF10 has been changed by anonymous user 
189.73.88.220
Reply-To: fedorawiki-nore...@fedoraproject.org

Dear Cra,


The FedoraProject page FUDCon:FUDConF10 has been changed on
09:09, 2 June 2009 by anonymous user 189.73.88.220, see
https://fedoraproject.org/wiki/FUDCon:FUDConF10 for the current
version.

See
https://fedoraproject.org/w/index.php?title=FUDCon:FUDConF10diff=0oldid=104632
for all changes since your last visit.

Editor's summary: -300 

Contact the editor:
mail: No e-mail address
wiki: https://fedoraproject.org/wiki/User:189.73.88.220

There will be no other notifications in case of further changes unless
you visit this page.
You could also reset the notification flags for all your watched pages
on your watchlist.

 Your friendly FedoraProject notification system

--
To change your watchlist settings, visit
https://fedoraproject.org/wiki/Special:Watchlist/edit

Feedback and further assistance:
https://fedoraproject.org/wiki/Help:Contents

- End forwarded message -

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: 2.6.29.1-102.fc11 --with vanilla broken

2009-04-28 Thread Chuck Anderson
On Tue, Apr 28, 2009 at 01:01:17PM -0400, Chuck Ebbert wrote:
 On Tue, 28 Apr 2009 11:17:04 -0400
 Chuck Anderson c...@wpi.edu wrote:
 
  
  Great.  I ended up having lots of other issues with vanilla build.  At 
  some point during the build, the make oldconfig becomes interactive 
  during the %install phase.  I answer all the questions with default 
  values (hitting enter on each one) and then the build fails.  I also 
  see some interesting thigs with ia64.  Why is it messing with ia64 
  configs?
  
  Excerpts:
  
  Building for target noarch
  ...
 
 You should always specify an arch.
 
 I normally use:
 
   rpmbuild -bb --target x86_64 --with baseonly --without debuginfo --with 
 firmware kernel.spec
 
 (--with firmware has some problems when building 32-bit kernels on x86_64 
 though.)

Sorry, I should have specified the command I had used.  It was similar 
to this:

rpmbuild -ba --target=i386,i686,noarch --with vanilla --without debuginfo 
--without debug --with firmware kernel.spec

I was building on an F10 i386 host.

___
Fedora-kernel-list mailing list
Fedora-kernel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-kernel-list


Re: 2.6.29.1-102.fc11 --with vanilla broken

2009-04-28 Thread Chuck Anderson
On Tue, Apr 28, 2009 at 01:51:08PM -0400, Chuck Ebbert wrote:
 On Tue, 28 Apr 2009 13:14:08 -0400
 Chuck Anderson c...@wpi.edu wrote:
 
  Sorry, I should have specified the command I had used.  It was similar 
  to this:
  
  rpmbuild -ba --target=i386,i686,noarch --with vanilla --without debuginfo 
  --without debug --with firmware kernel.spec
  
  I was building on an F10 i386 host.
  
 
 I don't think the target can be a list. And if you say '--with firmware' you 
 don't need
 to build the noarch target unless you want docs (if you do want the whole 
 noarch build
 then you don't need '--with firmware'.)

The target has been able to be list for as long as I can remember 
building Fedora kernels.  If it can't be a list now, then that is news 
to me.

___
Fedora-kernel-list mailing list
Fedora-kernel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-kernel-list


deltarpms not working since rawhide was signed

2009-04-24 Thread Chuck Anderson
As stated by Jonathan Dieter in the bug below, deltarpms are mucking 
up rawhide updates right now because the drpms were created before the 
packages were signed, and the signed versions don't match the deltarpm 
reconstructed versions.  For me at least, this is causing a problem 
because I'm not using a mirrorlist right now (too many problems with 
metalink mismatches).  So when yum fails to accept the drpm-patched 
package, the yum update just fails outright because there are no more 
mirrors to get the full updated package from.

Is there anything that can be done on the infastructure side as 
proposed below?

https://bugzilla.redhat.com/show_bug.cgi?id=497459

Comment #2 From  Jonathan Dieter (jdie...@gmail.com)  2009-04-24 11:18:36 EDT   
(-) [reply] ---

This is not a deltarpm bug or a yum-presto bug, but rather an 
Infrastructure bug.  The deltarpm was created before the target rpm 
was gpg signed.  So it does indeed build to a valid rpm with exactly 
the same data as the downloaded rpm, but without the signature.  
Because it's not exactly the same file, yum refuses to use it and 
redownloads the full (signed) rpm (which is what it should do).

The infrastructure should either delete and regenerate drpms after the 
rpm signatures have changed or they should use the code fragment from 
https://fedorahosted.org/koji/ticket/38#comment:3 to attach rpm 
signatures to deltarpms.

Not sure how to reassign to Infrastructure.  

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


2.6.29.1-102.fc11 --with vanilla broken

2009-04-22 Thread Chuck Anderson
Trying to build a vanilla kernel with:

rpmbuild -ba --with vanilla kernel.spec 

fails like so:

+ ApplyPatch linux-2.6-build-nonintconfig.patch
+ local patch=linux-2.6-build-nonintconfig.patch
+ shift
+ '[' '!' -f 
/home/cra/rpmbuild/SOURCES/linux-2.6-build-nonintconfig.patch ']'
ERROR: Patch  linux-2.6-build-nonintconfig.patch  not listed as a 
source patch in specfile
error: Bad exit status from /var/tmp/rpm-tmp.8pegaB (%prep)

this is due to the following code in ApplyPatch():

  if ! egrep ^Patch[0-9]+: $patch\$ %{_specdir}/%{name}.spec ; then
if [ ${patch:0:10} != patch-2.6. ] ; then
  echo ERROR: Patch  $patch  not listed as a source patch in specfile
  exit 1
fi
  fi 2/dev/null

Why is it checking for patch-2.6.* in the patch file name?  I 
removed that entire block of code and --with vanilla now works.  What 
is the expected behavior of that block of code?

___
Fedora-kernel-list mailing list
Fedora-kernel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-kernel-list


metalink doesn't match

2009-04-18 Thread Chuck Anderson
The mirror system for rawhide is currenlty broken.  Every mirror 
reports the same error:

Loaded plugins: dellsysidplugin2, refresh-packagekit, security
rawhide/metalink | 4.1 kB 
00:00 
rawhide  | 3.8 kB 
00:00 
ftp://mirror.cs.princeton.edu/pub/mirrors/fedora/linux/development/x86_64/os/repodata/repomd.xml:
 
[Errno -1] repomd.xml does not match metalink for rawhide
Trying other mirror.
rawhide  | 3.8 kB 
00:00 
ftp://ftp.cse.buffalo.edu/pub/Linux/fedora/linux/development/x86_64/os/repodata/repomd.xml:
 
[Errno -1] repomd.xml does not match metalink for rawhide
Trying other mirror.
rawhide  | 3.8 kB 
00:00 
http://archive.linux.duke.edu/pub/fedora/linux/development/x86_64/os/repodata/repomd.xml:
 
[Errno -1] repomd.xml does not match metalink for rawhide
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for 
repository: rawhide. Please verify its path and try again

...
etc.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Status of the picture book

2009-02-26 Thread Chuck Anderson
On Thu, Feb 26, 2009 at 01:32:42PM -0500, Tom spot Callaway wrote:
 Okay, here is the release form:
 http://spot.fedorapeople.org/Model%20and%20Contribution%20Release.pdf
 
 Questions? Comments?

It feels too much like giving away my rights perpetually.  Also, why 
does this have to be an exclusive agreement?

-- 
Fedora-marketing-list mailing list
Fedora-marketing-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-marketing-list


Re: arch fun.

2009-02-06 Thread Chuck Anderson
On Fri, Feb 06, 2009 at 10:19:17AM -0500, Bill Nottingham wrote:
 Thorsten Leemhuis (fed...@leemhuis.info) said: 
  Yes -- all that have kernel.i686 installed now would get the new  
  kernel.i686 later (the one with PAE). But the latter will not boot on  
  all machines where the curret kernel.i686 works. If there is no  
  kernel.i686 (because it is named kernel-PAE.i686), then yum/anaconda  
  will automatically install kernel.i586, which is what should happen to  
  make sure all system still boot after updating.
 
  But maybe some yum/anaconda plugin/magic could automatically select the  
  best kernel on update. Not sure, but something like that might be needed  
  for Live-CD-Installs anyway
 
 We could invent a new rpm arch. This may not be practical, though.

x86_pae would be good.

___
Fedora-kernel-list mailing list
Fedora-kernel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-kernel-list


Re: What is doing this?

2009-01-27 Thread Chuck Anderson
On Tue, Jan 27, 2009 at 02:19:05PM -0500, mmcgr...@redhat.com wrote:
 Yes, rsync always do that:

 building file list ... done
 ...
 receiving file list ... done

 This makes me wonder if rsync is sending part of that message to stderr. 
 I tried to reproduce it but have been unable to.  It just sortof happens 
 sometimes.

I tried this and the only thing that appeared in /tmp/stderr was the 
remote host's SSH banner:

rsync --rsh=ssh -avHn . remotehost:foo/  2 /tmp/stderr 1 /tmp/stdout

The file list ... done lines all appeared in /tmp/stdout.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: ssh_host_keys

2008-12-10 Thread Chuck Anderson
On Wed, Dec 10, 2008 at 11:04:25PM +0100, Till Maas wrote:
 On Wed December 10 2008, Mike McGrath wrote:
  http://fedoraproject.org/wiki/Infrastructure/SOP/ssh_known_hosts
 
 I suggest to use
 
 echo app1,10.8.34.59 $(cat /etc/ssh/ssh_host_rsa_key.pub)

You may also want to include the FQDN and any other aliases for each 
machine.  Otherwise if you try to ssh to a host using an FQDN or 
alias/CNAME, ssh will add a new entry to ~/.ssh/known_hosts with the 
new name, even if an entry for that IP address already exists in the 
global /etc/ssh/ssh_known_hosts.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Fixing CSRF exploits in Infrastructure

2008-11-26 Thread Chuck Anderson
On Wed, Nov 26, 2008 at 04:53:00PM +0100, Till Maas wrote:
 How big the regression is if users have to log in for every external link 
 they 
 click on, depends on how often this happens. I believe that links to FAS are 
 not exchanged very often, therefore it will not hurt very much. I guess there 
 is also not so often a need to use FAS with tabs. But maybe there are people 
 who have to use FAS more often. With Bodhi it is contrary, because there it 
 is normal to get mails with links if someone added a comment to a package or 
 for testers to exchange links to Bodhi updates. Also links to Bodhi updates 
 are used in Bugzilla comments. There it would have a much bigger impact on 
 the efficiency of testing new package updates imho.
 
 Regarding the time needed for auditing applications: There may still be a lot 
 of other vulnerabilites in these applications which cannot be fixed 
 automatically. Therefore they still need to be written carefully. But maybe a 
 compromise would be to require the token for all requests by default and then 
 whitelist the ones, that are not meant to change state, e.g. requests like:
 
 https://admin.fedoraproject.org/updates/pstreams-devel-0.6.0-6.fc10
 
 Nevertheless it seems to me that securing all requests against CSRF 
 automatically makes it a little easier to write a application, because the 
 author does not need to care whether a request changes state or not. On the 
 downside it has a high impact on usability or makes the automatic CSRF 
 protection a lot more complicated. Also securing all requests may cost a lot 
 of performance, because more requests need to be made.
 Last but not least is always more time spent on using an application than on 
 writing it, therefore if the usability of an application is only enhanced a 
 little, because of the many times it is used, there will be more manpower 
 saved than is used to enhance the application.

Has anyone taken a look at PubCookie?  It sounds like we are trying to 
re-invent the wheel here, which is probably not a good idea when it 
comes to security-related infrastructure.

http://www.pubcookie.org/

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Fixing CSRF exploits in Infrastructure

2008-11-26 Thread Chuck Anderson
On Wed, Nov 26, 2008 at 09:47:06AM -0800, Toshio Kuratomi wrote:
 Pretty much agreed on this analysis.  My one note is that in my usage,
 at least, I already have to login most of the time when clicking on a
 link in bugzilla or email due to my session having expired already.

Stange.  I almost never have to re-login to bugzilla once I've logged 
in on a particular system.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: proper way to update /var/lib/puppet/application/mirrors/releases.txt

2008-11-25 Thread Chuck Anderson
On Mon, Nov 24, 2008 at 04:05:40PM -0800, Jesse Keating wrote:
 This looks like it is its own git repo, but apparently you need to be in
 the sysadmin-web group to edit this.  I'm not in the group, so in order
 for me to manage this we either need to add me to the group (yuck, more
 groups) or move this to a different ownership set, or something else.

use POSIX ACLs :-)

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


bugzilla down?

2008-08-11 Thread Chuck Anderson
I'm getting 503 Service Temporarily Unavailable from 
bugzilla.redhat.com.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: bash $TMOUT

2008-07-23 Thread Chuck Anderson
On Wed, Jul 23, 2008 at 07:44:25PM -0500, Mike McGrath wrote:
 The idea is more to ensure that sessions aren't just left open for someone
 to come upon and mess with.  6 days is a long time to have been logged in
 especially in idle.  Means there's a shell who knows where protected by
 who knows what.  I'd hate for someone to start a screen session on their
 remote machine, ssh into ours, and just leave it there for days having
 their machine get hacked, someone attaching to that screen session.
 
 Just one such example of an attack, the more obvious is having company
 over for the night, mind if I use your computer? sort of thing, or in a
 dorm room, or who knows what.  Its not complete protection, but I think
 its a good first step.

Ok.  I wonder if there is a way to launch vlock or similar instead 
of just forcing an autologout then?

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Release Overview

2008-05-07 Thread Chuck Anderson
On Wed, May 07, 2008 at 02:32:07PM +0100, Jonathan Roberts wrote:
 Oh, and you can find it here:
 
 http://fedoraproject.org/wiki/Releases/9/SingleSourceSummary#head-0a80f02dfb335eee253034e1ed30332b240414db

In NetworkManager Improvements - It might be nice to highlight 
Fedora developer and NetworkManager developer Dan Williams in this 
section, as you have done for other Fedora/upstream developers in the 
GNOME section.

In Anaconda Installer Improvements:

I don't think you need iamanext4developer to try ext4 anymore.  I 
believe it has changed to an ext4 option instead.

boot.iso in the end didn't get nuked--too many things depended on the 
filename boot.iso.  So actually, what was going to be netinst.iso is 
now named boot.iso.

In Upstart Init Daemon - customization to inittab EXCEPT initdefault 
need to be ported over.  In the end, it was decided to have F9 use 
/etc/inittab for just the initdefault line.


Down in the Features section, some of the above changes also need to 
be made again.  There is a reference to netboot.iso.

-- 
Fedora-marketing-list mailing list
Fedora-marketing-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-marketing-list


Re: Mandriva supports eee

2008-03-20 Thread Chuck Anderson
On Thu, Mar 20, 2008 at 06:58:58PM +0200, Jonathan Dieter wrote:
 ATM the only non-Fedora bits I have on it are the patched madwifi driver
 for wireless and the asus_acpi_eee driver so the hotkeys work.  The atl2
 wired driver is now included in the latest Fedora kernels.

ath5k doesn't work on this wireless hardware?

-- 
Fedora-marketing-list mailing list
Fedora-marketing-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-marketing-list


nagios config for mirrorlist monitoring

2008-02-08 Thread Chuck Anderson
I thought people here might be interested in my nagios config for 
checking the output of the mirrorlist CGI.

- Forwarded message from Chuck Anderson [EMAIL PROTECTED] -

From: Chuck Anderson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Date: Fri, 8 Feb 2008 01:43:44 -0500
Subject: netblock mirror not showing up for Fedora 8

On Thu, Feb 07, 2008 at 10:13:15PM -0600, Matt Domsch wrote:
 The MM hourly refresh had been taking 12 hours due to database
 slowness, which _hopefully_ now is resolved.  Will watch it closely
 over the next few days.
 
 I'll have to regen the pages manually right now.  The cronjobs seem to
 still be disabled even though they should have restarted by now...

My netblock mirror still isn't showing up for just the Fedora 8 
updates and updates-testing repos, all archs.  Everything else is 
coming up fine (Fedora 7 updates, Fedora 7 updates-testing, Rawhide, 
Fedora 7 and 8 base releases).

These are the bad queries that don't return my netblock mirror:

http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f8arch=i386
http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f8arch=x86_64
http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f8arch=ppc
http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f8arch=ppc64

http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f8arch=i386
http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f8arch=x86_64
http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f8arch=ppc
http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f8arch=ppc64

I wrote a bit of nagios configuration that checks the mirrorlist 
results.  Here are the checkcommands.cfg definitions:

# 'check_fedora_mirrorlist' command definition
#
# Checks Fedora Project's mirrorlist redirector for a specific mirror
# URL.
#
define command {
command_namecheck_fedora_mirrorlist
command_line$USER1$/check_http -H $HOSTADDRESS$ -u 
'/mirrorlist?repo=$ARG1$arch=$ARG2$' -l -R '^$ARG3$'
}

# 'check_fedora_mirrorlist_netblock' command definition
#
# Checks Fedora Project's mirrorlist redirector for a specific mirror
# URL using a preferred netblock entry.  Ideally, this would check for
# the URL as the immediate next line after Using preferred netblock
# but I couldn't figure out how to embed a newline in the regex in the
# nagios config file.
#
define command {
command_namecheck_fedora_mirrorlist_netblock
command_line$USER1$/check_http -H $HOSTADDRESS$ -u 
'/mirrorlist?repo=$ARG1$arch=$ARG2$' -l -R 'Using preferred netblock.*$ARG3$'
}

And here is how you use it in the hosts.cfg file (netblock check):

#
# Fedora mirrorlist service
#
define host {
host_name   mirrors.fedoraproject.org
parents internet
use generic-host
alias   mirrors.fedoraproject.org
address mirrors.fedoraproject.org
}
#
# Fedora 8 updates-released
#
define service {
host_name   mirrors.fedoraproject.org
use generic-service
service_description updates-released-f8 i386
check_command   
check_fedora_mirrorlist_netblock!updates-released-f8!i386!http://download.wpi.edu/pub/fedora/linux/updates/8/i386
}

--

- End forwarded message -

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: file has vanished

2008-01-11 Thread Chuck Anderson
On Thu, Jan 10, 2008 at 05:41:56PM -0200, Ricardo J. Barberis wrote:
 El Jueves 10 Enero 2008, Chuck Anderson escribió:
  rsync: failed to set times on /srv/ftp/pub/fedora/linux/core/updates:
  Operation not permitted (1) rsync: failed to set times on
  /srv/ftp/pub/fedora/linux/core/updates/testing: Operation not permitted
  (1) IO error encountered -- skipping file deletion
  rsync: failed to set times on /srv/ftp/pub/fedora/linux/core/updates:
  Operation not permitted (1) rsync: failed to set times on
  /srv/ftp/pub/fedora/linux/core/updates/testing: Operation not permitted
  (1)
 
 Well, because of these messages it could be a permissions problem, rsync 
 can't 
 delete those files and so they appear over and over again.

No, those are unrelated to the reported issue.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: file has vanished

2008-01-11 Thread Chuck Anderson
On Fri, Jan 11, 2008 at 06:18:16PM -0200, Ricardo J. Barberis wrote:
 El Viernes 11 Enero 2008, Chuck Anderson escribió:
  On Fri, Jan 11, 2008 at 03:30:14PM -0200, Ricardo J. Barberis wrote:
   Sorry, I meant this line specificly:
  IO error encountered -- skipping file deletion
  
   It looks like it's not deleting the vanished files.
 
  The IO error always accompanies the file has vanished messages.  I
  would assume that the IO error message is a result of the file has
  vanished messages.
 
 And I assumed the other way around :)
 
 AFAIK, file has vanished means the file is no longer on the server from 
 which rsync is downloading, so my guess was rsync schedules them for deleting 
 but when it tries to, it can't.
 
 But if you're sure it's not a permissions problem (or maybe a disk problem? - 
 yet another wild guess), we'll have to wait for some of the rsync gurus to 
 show up.

No, it's not something local at all:

$ ls -l 8Kingdoms-1.1.0-*
-rw-r--r-- 1 mirror mirror 21954697 Dec 11 11:27 8Kingdoms-1.1.0-2.fc7.src.rpm
-rw-r--r-- 1 mirror mirror 21960477 Jan  6 11:44 8Kingdoms-1.1.0-4.fc7.src.rpm

$ rsync 
rsync://download1.fedora.redhat.com/fedora-enchilada/linux/updates/7/SRPMS/ | 
grep 8King
file has vanished: linux/updates/7/SRPMS/8Kingdoms-1.1.0-2.fc7.src.rpm (in 
fedora-enchilada)
-rw-r--r--21960477 2008/01/06 11:44:01 8Kingdoms-1.1.0-4.fc7.src.rpm

$ ls -l 8Kingdoms-1.1.0-*
-rw-r--r-- 1 mirror mirror 21954697 Dec 11 11:27 8Kingdoms-1.1.0-2.fc7.src.rpm
-rw-r--r-- 1 mirror mirror 21960477 Jan  6 11:44 8Kingdoms-1.1.0-4.fc7.src.rpm

$ rm -f 8Kingdoms-1.1.0-2.fc7.src.rpm 

$ ls -l 8Kingdoms*
-rw-r--r-- 1 mirror mirror 21960477 Jan  6 11:44 8Kingdoms-1.1.0-4.fc7.src.rpm

$ rsync 
rsync://download1.fedora.redhat.com/fedora-enchilada/linux/updates/7/SRPMS/ | 
grep 8King
file has vanished: linux/updates/7/SRPMS/8Kingdoms-1.1.0-2.fc7.src.rpm (in 
fedora-enchilada)
-rw-r--r--21960477 2008/01/06 11:44:01 8Kingdoms-1.1.0-4.fc7.src.rpm

$ ls -l 8Kingdoms*
-rw-r--r-- 1 mirror mirror 21960477 Jan  6 11:44 8Kingdoms-1.1.0-4.fc7.src.rpm

See, the error message is the same whether the vanished file exists 
locally or not.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: file has vanished

2008-01-11 Thread Chuck Anderson
On Fri, Jan 11, 2008 at 03:30:14PM -0200, Ricardo J. Barberis wrote:
 Sorry, I meant this line specificly:
 
IO error encountered -- skipping file deletion 
 
 It looks like it's not deleting the vanished files.

The IO error always accompanies the file has vanished messages.  I 
would assume that the IO error message is a result of the file has 
vanished messages.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: file has vanished

2008-01-11 Thread Chuck Anderson
On Fri, Jan 11, 2008 at 01:30:51PM -0500, Chuck Anderson wrote:
 On Fri, Jan 11, 2008 at 03:30:14PM -0200, Ricardo J. Barberis wrote:
  Sorry, I meant this line specificly:
  
 IO error encountered -- skipping file deletion 
  
  It looks like it's not deleting the vanished files.
 
 The IO error always accompanies the file has vanished messages.  I 
 would assume that the IO error message is a result of the file has 
 vanished messages.

Manual rsync listing shows the error too:

rsync 
rsync://download1.fedora.redhat.com/fedora-enchilada/linux/updates/7/SRPMS/ | 
grep 8King 
file has vanished: 
linux/updates/7/SRPMS/8Kingdoms-1.1.0-2.fc7.src.rpm (in 
fedora-enchilada)
-rw-r--r--21960477 2008/01/06 11:44:01 8Kingdoms-1.1.0-4.fc7.src.rpm
ls -l 8Kingdoms-1.1.0-*
-rw-r--r-- 1 mirror mirror 21954697 Dec 11 11:27 8Kingdoms-1.1.0-2.fc7.src.rpm
-rw-r--r-- 1 mirror mirror 21960477 Jan  6 11:44 8Kingdoms-1.1.0-4.fc7.src.rpm

It's almost as if the underlying storage mechanism on the master 
server is caching directory entries for files that don't exist 
anymore.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: dormant bugs and our perception

2008-01-02 Thread Chuck Anderson
On Wed, Jan 02, 2008 at 10:23:03AM -0500, Greg DeKoenigsberg wrote:
 Cross-posting to the Fedora advisory board list.  Our inability to create 
 and nurture a bug triage community continues to be painful, and our current 
 QA resources within Red Hat continue to be (necessarily) technically 
 focused rather than community focused.  This is a problem we need to solve.

I think my IRC conversation during a recent Bug Day sums up the 
problems pretty well:

Nov 19 13:39:04 cra   how do I officially become part of the QA and bug 
triage team?
Nov 19 13:43:01 cra   i'd like to get the Release Notes updated to 
mention that Xinerama doesn't work and how to use xrandr to set up dual-head
Nov 19 13:45:24 f13   cra: I think you show up and you're part of the team.
Nov 19 13:46:01 cra   f13: but in the past i've tried to update bugs, and I 
don't have
permission to do things like mark-duplicate, change product/release, etc.
Nov 19 13:46:26 f13   cra: you need to be in the fedora-bugs group I think, 
which all
contributors were supposed to be added to I thought.
Nov 19 13:57:05 poelcat   cra: hopefully nothing official for either, but 
if there are blockers to getting involved let me know... chances are I have some
 extra bugzilla privs I don't know about that should be sorted out for everyone 
else

There seems to be no official process to become a QA contributor or 
Bug Triager.  Formalizing this process and documenting it would go a 
long way to improving things.

Some things I think would be helpful:

1. Allow QA contributors to subscribe to certain products/components 
so they are CC'd on any new bugs in those areas.

2. Allow QA contributors to have the access rights on Bugzilla 
necessary to manage bugs, mark duplicates, etc.

-- 
Fedora-marketing-list mailing list
Fedora-marketing-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-marketing-list


Re: wiki madness

2007-11-01 Thread Chuck Anderson
On Fri, Nov 02, 2007 at 12:49:31AM -0400, Ignacio Vazquez-Abrams wrote:
 Option 3: Roll our own TurboGears wiki
 
 Advantages:
 - We're in control (workflow, features, upstream, etc.)
 - Integration with FAS is trivial
 
 Disadvantages:
 - Almost no current specifications
 - Minimal existing code (based on requirements)
 - Smaller developer base
 - Content many need to be transcribed (based on requirements)
 - GSoC work may need retooling (based on requirements)

Won't there be performance problems with a TurboGears-based wiki?  I 
thought MirrorManager was having issues with TG performance and had to 
enable form-data caching to get acceptable performance at the cost of 
possibly stale data.  I don't know the details behind it, but that was 
the reason I was given for why when you edit forms in MM it sometimes 
returns old pre-edit field values.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Eastern Massachusetts Linux Fest Inquiry

2007-10-20 Thread Chuck Anderson
On Sat, Oct 20, 2007 at 03:07:49PM -0400, Máirín Duffy wrote:
  The communities out here don't know anything about Linux and a 
  FEST out here is vital!!!
 
 Really? I live in the Boston area and a substantial number of other 
 folks who work on Fedora live here as well. Red Hat has an office in the 
 area as does Novell. The GNOME summit was a couple weekends ago in 
 Cambridge, and next weekend there is going to be FOSS Camp in Cambridge 
 as well, on MIT's campus. So I am not sure that it is fair to say the 
 communities in eastern Massachusetts don't know anything about Linux any 
 more so than other areas of Massachusetts. Then again it depends what 
 you mean by community -
 
 What target audience are you looking to reach? Since you appear to not 
 be particularly concerned about Fedora for this, you might want to get 
 in touch with the Boston LUG group: http://blu.org/

I'd also like to point out the Worester LUG: http://www.wlug.org/ of 
which I'm a member.

-- 
Fedora-marketing-list mailing list
Fedora-marketing-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-marketing-list


Re: Moin and notifications

2007-10-18 Thread Chuck Anderson
On Wed, Oct 17, 2007 at 09:14:05AM +0300, Nicu Buculei wrote:
 Mike McGrath wrote:
 I'm just going to throw it out there and see what people say.
 
 Proposal:  Disable notifications in Moin
 
 Without notification, how can one effectively use a page like 
 http://fedoraproject.org/wiki/Artwork/DesignService ?
 That is, without subscribing to a wiki-wide mailing list or RSS feed.
 
 Probably a solution would be to not use the wiki for such task, maybe 
 bugzilla, but the wiki has a lower barrier to entry and a larger chance 
 to get people involved.

What about an application external to the wiki which notices page 
changes and emails those out asynchronously?

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: report_mirror traceback

2007-05-23 Thread Chuck Anderson
On Wed, May 23, 2007 at 11:37:22AM -0500, Matt Domsch wrote:
 On Wed, May 23, 2007 at 11:29:32AM -0400, Chuck Anderson wrote:
  I'm getting a traceback running report_mirror on my FC6 mirror system:
  
  $ ./report_mirror -o mirror-report.txt -c report_mirror.conf 
  Traceback (most recent call last):
  xmlrpclib.Fault: Fault 1: 'NoneType' object has no attribute 
  'keys'
 
 Thanks for the report.  This was a caching bug on the server side.  It
 had updated the database, but hadn't synced that data into the DB
 before trying to read it in another function a moment later.  I think
 I know how to fix it.  Should be OK in a few hours.

I was able to rerun the script successfully at 11:54 EDT.  When should 
I expect the mirror cgi to start returning my mirror for my netblock?

Thanks.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: report_mirror traceback

2007-05-23 Thread Chuck Anderson
On Wed, May 23, 2007 at 11:49:51AM -0500, Matt Domsch wrote:
  I was able to rerun the script successfully at 11:54 EDT.  When should 
  I expect the mirror cgi to start returning my mirror for my netblock?
 
 It takes up to 2 hours to refresh all the web servers with this data.

Thanks, it's working now.  One other question.  What is the output 
file used for?  I noticed it is in some binary format.  Do I need to 
keep this somewhere?

Thanks.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Single Entry ReWrite Code - foo.rpm

2007-02-22 Thread Chuck Anderson
On Thu, Feb 22, 2007 at 02:23:57PM -0700, Jonathan Steffan wrote:
 I've been working on getting jigdo usable for Fedora Unity. In the
 process, I needed a way to have a single url to access rpms on public
 mirrors. Assume the requested file is foo.rpm What I have done so far is
 setup a rewrite map that does the following:

This will be great especially if we start creating jigdo templates as 
part of the Fedora release.  I'm going to look at Pungi soon to see 
how feasible it is to get the jigdo-template command added right after 
the iso's are created.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: [Fedora-marketing-list] Wave of end-user questions

2006-10-17 Thread Chuck Anderson
On Mon, Oct 16, 2006 at 03:58:54AM -0500, Patrick W. Barnes wrote:
  1. New mailing list
  2. Ticketing system
  3. Replace info@ listing with an HTML form

Any of these three ideas are better than dumping the messages onto 
this list.

-- 
Fedora-marketing-list mailing list
Fedora-marketing-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-marketing-list


Re: Here's what the next FUDCon should look like:

2006-05-31 Thread Chuck Anderson
On Wed, May 31, 2006 at 08:06:51PM -0400, Greg DeKoenigsberg wrote:
 http://www.boxesandarrows.com/view/an_open_source_conference_barcamp
 Thoughts?

Excellent.  What a great idea which embraces the idea of open source 
and brings it all the way to the conference floor.

--
Fedora-marketing-list mailing list
Fedora-marketing-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-marketing-list


Re: FC3 (j)whois on .eu fails

2006-04-10 Thread Chuck Anderson
On Tue, Apr 11, 2006 at 12:23:07AM +0200, Nils Breunese (Lemonbit Internet) 
wrote:
 Isn't being able to use whois for all TLDs too (at a stretch)?

I remember a time when you had to manually specify which server to 
query for whois data.  whois -h server foo.eu or whois [EMAIL PROTECTED]

--
fedora-legacy-list mailing list
fedora-legacy-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-legacy-list


Re: Unable to use instructions to using yum 2.x on RH 9

2006-01-19 Thread Chuck Anderson


On Thu, Jan 19, 2006 at 11:15:53PM +1000, Ronald Bradford wrote:
 I use CentOS 4.2, however the machine is a dedicated host located in a 
 data centre in Texas, so I'm limited to Operating systems provided as I 
 have no physical access.
 They do provide RHEL (which is great) a moderate cost for upgrade, 
 however it's a clean wipe, and with 30+ web sites, the downtime is 
 likely to be 2-3 days.
 
 I was looking for a cheap out without the dedicated down time, and 
 complete re-install of custom software, which I can do, it just takes time.

I did an anaconda upgrade from RHL 7.3 to FC3 without too much 
trouble.  You can also do the upgrade remotely by rebooting into the 
installer via grub or lilo, and then starting a VNC-based install.  
Just be sure to put the installer vmlinuz/initrd.img first in 
grub/lilo so it boots automatically, and then during the upgrade 
choose create new bootloader configuration so that it reboots into 
the OS afterwards.  I'd also recommend specifying the MAC address of 
the NIC you want to install with, since device names eth0 eth1 etc.  
can change.

--
fedora-legacy-list mailing list
fedora-legacy-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-legacy-list