[Freeipa-devel] Re: Preparing for FreeIPA 4.9.0 release candidate

[Stanislav Levin via FreeIPA-devel]

11.11.2020 12:45, Alexander Bokovoy via FreeIPA-devel пишет:
> Hi,
> 
> we are close to get FreeIPA 4.9.0 release candidate out.
> 
> Draft release notes: https://vda.li/drafts/freeipa-4.9.0-release-notes.html
Thank you. Great, as usual.

> 
> They include difference between 4.8.10 and current git master. Note that
> since many things were backported to 4.8 in separate commits that
> referenced the same FreeIPA tickets, they appear in the release notes
> too even though you might have seen them in release notes for FreeIPA
> 4.8 releases.
> 
> Currently, in nightly tests
> https://github.com/freeipa-pr-ci2/freeipa/pull/525 we have 126
> successful testsuites and 6 failures, out of which four have known
> failures:
>  - test_adtrust_install, test_cert, test_ipahealthcheck_nodns_extca_file
>    failure already reported in FreeIPA#8533
> 
>  - test_installation_TestInstallWithCA2 failure already reported in
>    FreeIPA#8477
> 
>  - test_webui_general failure already reported in FreeIPA#8570
> 
>  - test_webui_users failure already reported in FreeIPA#8569
> 
> The latter two issues will most likely be irrelevant for FreeIPA release
> as they track behavior change in Fedora FAS plugin and we simply need to
> install that plugin in a confined environment, to avoid overlapping with
> our tests. FAS behavior is specific to Fedora/CentOS AAA deployment and
> should not be a problem for anything else, it is simply a design choice
> in FAS plugin.
> 
> This makes us down to two known and two not-yet-investigated failures.
FYI: there is a regression(WebUI) of 4.8.10:
https://pagure.io/freeipa/issue/8523
> 
> On top of that we have a worrying behavior of the Azure CI with regards
> to DNSSEC that waits for investigation.
please, where to see the failure?
> 
> One major part not exercised in the nightlies is an upgrade code.
> 
> My plan is to do FreeIPA 4.9.0 release candidate this week -- I planned
> it to do last week but things slipped due to various failures and
> load at other projects. I think for a release candidate this state is
> quite good.
> 
> 
> 


OpenPGP_0xABABFE8D5D9A19E8.asc
Description: application/pgp-keys


OpenPGP_signature
Description: OpenPGP digital signature
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org

[Freeipa-devel] Re: Preparing for FreeIPA 4.9.0 release candidate

[Stanislav Levin via FreeIPA-devel]

11.11.2020 14:11, Alexander Bokovoy via FreeIPA-devel пишет:
> On ke, 11 marras 2020, Stanislav Levin wrote:
>>>
>>> On top of that we have a worrying behavior of the Azure CI with regards
>>> to DNSSEC that waits for investigation.
>> please, where to see the failure?
> 
> You can look, for example, at https://github.com/freeipa/freeipa/pull/5248
It is like https://pagure.io/freeipa/issue/8538

At least, 389-ds logging may be raised to 8192 from the current one (0)
for debugging.



OpenPGP_0xABABFE8D5D9A19E8.asc
Description: application/pgp-keys
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org

[Freeipa-devel] Re: Azure test failures

[Stanislav Levin via FreeIPA-devel]

The mentioned Java traceback is there even for OK cases.

Unfortunately, I don't know the exact reason right now.
It may be related to the region of Azure hosting and for example,
countermeasures for mining through GH Actions(performance downgrade). I
run exactly the same CI on my account without failures:
https://dev.azure.com/slev0538/slev_/_build/results?buildId=101&view=results
https://dev.azure.com/slev0538/slev_/_build/results?buildId=100&view=results

Workaround:
if test env's memory limit(sum of limits) doesn't exceed provided by
Azure VM(7Gb+4Gb swap), then tests are OK:

https://github.com/freeipa/freeipa/pull/5656/commits/3f0308c275fc07a1cec87f39e9f4bdefb7ffc011

https://dev.azure.com/freeipa/freeipa/_build/results?buildId=8780&view=results



OpenPGP_signature
Description: OpenPGP digital signature
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[Freeipa-devel] Re: Azure test failures

[Stanislav Levin via FreeIPA-devel]

05.05.2021 19:55, Florence Renaud пишет:
> Hi all,
> 
> Stanislav, thanks for your investigation. Could you do a separate PR
> with the commit azure: Re-group test envs
> 
> (it would unblock our other PRs without waiting for your PR 5656
>  to be reviewed)?

https://github.com/freeipa/freeipa/pull/5751



OpenPGP_signature
Description: OpenPGP digital signature
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[Freeipa-devel] Re: [I] Azure CI parallel jobs limit restored

[Stanislav Levin via FreeIPA-devel]

15.02.2022 12:29, Alexander Bokovoy via FreeIPA-devel пишет:
> On ti, 15 helmi 2022, Alexander Bokovoy via FreeIPA-devel wrote:
>> Hi,
>>
>> Azure CI jobs limit was restored yesterday to 10 parallel jobs.
>>
>> Thanks to Microsoft for handling the request quickly.
>>
>> I restarted Azure CI in Rob's pull request
>> https://github.com/freeipa/freeipa/pull/6184 to see how it goes.
>>
>> One thing I noticed this morning is that Build / Tox / WebUI unit test
>> phases do not work anymore with Fedora 34 as nodejs cannot be installed:
>> Error:  Problem: cannot install the best candidate for the job
>>  - nothing provides /usr/bin/pwsh needed by
>> nodejs-1:14.19.0-2.fc34.x86_64
>>
>> This is definitely a Fedora issue but it is a reminder that we should
>> actually switch to Fedora 35 or even Fedora 36 in Azure CI. Fedora 36
>> was recently branched and will go to Beta stage in March, so we should
>> be able to test-drive it.
> 
> I submitted https://github.com/freeipa/freeipa/pull/6188 to switch Azure
> CI to registry.fedoraproject.org/fedora-toolbox:36 as a base. This also
> gives us opportunity to run against OpenSSL 3.0.0 and OpenLDAP 2.6.
> 
> Build and docs targets worked out of the box but Web UI unit tests
> failed as there is no default OpenSSL configuration anymore. I'll look
> into it.
> 
> Tox build also failed as python-ldap wheel in PIP is not ready for
> OpenLDAP 2.6 (attempts to link against libldap_r which is removed in
> 2.6).
> 
> Christian, any idea how we can update python-ldap wheel?
> 

As far as I know Tox task was intended for checking of PyPI related
stuff (ipa-client's wheels), but freeipa-client is stuck on PyPI as
4.8.9. If PyPI is no longer the case then the tox task can be removed.



OpenPGP_signature
Description: OpenPGP digital signature
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

[Freeipa-devel] Re: Release planning

[Stanislav Levin via FreeIPA-devel]

Alexander, thank you for writing this.


13.11.2019 14:35, Alexander Bokovoy via FreeIPA-devel пишет:

> FreeIPA presence in various distributions can be tracked with Repology
> project: https://repology.org/project/freeipa/versions 

Unfortunately, ALT Linux is presented there only by one branch (don't
know why).
Just for your information, we have the following FreeIPAs:

- 4.3.  I understand, that this is on my own support. There is a plan to
migrate to 4.6+, but this is just a plan for now.

- 4.7.  I don't have any reason to stay on this, but only time to rebase
(plan: by the end of this year).

So, my targets are 4.6 and 4.8.


I would like to ask you about release dates.
For example, FreeIPA has one minor release per year, this happens at the
end of some month. Also there could be patch-releases - the end of each
quarter.
I understand that releases could be tied to the releases of major
distros, but is some date schedule applicable?

Thanks.





signature.asc
Description: OpenPGP digital signature
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org

[Freeipa-devel] Re: Azure tests failing

[Stanislav Levin via FreeIPA-devel]

certmonger 0.79.11 + FreeIPA-4.8.8 = oops


TestSelfExternalSelf.test_switch_back_to_self_signed:

[2020-07-03 10:43:36] ERROR   
ipatests.pytest_ipa.integration.host.Host.master1.cmd66:host.py:199
stderr: Error resubmitting certmonger request '20200703103033', please
check the request manually
[2020-07-03 10:43:36] The ipa-cacert-manage command failed.


journalctl:

Jul 03 10:41:57 master1.ipa.test certmonger[6356]: 2020-07-03 10:41:57
[6356] Running enrollment helper
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Jul 03 10:41:59 master1.ipa.test
/dogtag-ipa-ca-renew-agent-submit[6356]: Forwarding request to
dogtag-ipa-renew-agent
Jul 03 10:41:59 master1.ipa.test
/dogtag-ipa-ca-renew-agent-submit[6356]: dogtag-ipa-renew-agent returned -11
Jul 03 10:41:59 master1.ipa.test certmonger[1822]: 2020-07-03 10:41:59
[1822] Certificate submission still ongoing.
Jul 03 10:41:59 master1.ipa.test certmonger[1822]: 2020-07-03 10:41:59
[1822] Certificate submission attempt complete.
Jul 03 10:41:59 master1.ipa.test certmonger[1822]: 2020-07-03 10:41:59
[1822] Child status = 245.
Jul 03 10:41:59 master1.ipa.test certmonger[1822]: 2020-07-03 10:41:59
[1822] Child output:
Jul 03 10:41:59 master1.ipa.test certmonger[1822]: "
Jul 03 10:41:59 master1.ipa.test certmonger[1822]: "
Jul 03 10:41:59 master1.ipa.test certmonger[1822]: 2020-07-03 10:41:59
[1822] Certificate not (yet?) issued.
Jul 03 10:41:59 master1.ipa.test certmonger[1822]: 2020-07-03 10:41:59
[1822] Unable to determine course of action for Request5('20200703103033').


The stacktrace is attached.




37785.stacktrace.tar.gz
Description: application/gzip


signature.asc
Description: OpenPGP digital signature
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org