Re: [leaf-devel] Bering-uClibc4.0-beta2 Observations
07.02.2011 16:42, KP Kirchdoerfer пишет: Am Samstag, 5. Februar 2011, um 17:27:36 schrieb KP Kirchdoerfer: Hi David; Am Samstag, 5. Februar 2011, um 17:16:58 schrieb davidMbrooke: Hi, I successfully migrated from -beta1 to -beta2 about a week ago (actually re-installed from scratch and re-applied all the config manually to check I had it all documented properly). I am using Bering-uClibc_4.0-beta2_i486_syslinux_vga.tar.gz on a Compaq EN SFF PC. Just a few minor/cosmetic issues: 1. The contents of modules.tgz have UID/GID 1000/1000 rather than 0/0. Perhaps buildimage.pl was not run using fakeroot? Yes, I missed that. Changed my notes. +# Check we are running as (fake)root +warn WARNING: Not running as (fake)root if ( $ != 0 ); + thx David :) kp Maybe it'll be better to add --owner root --group root to tar command line? -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ leaf-devel mailing list leaf-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [leaf-devel] SF: Service downtime
On Tue, 2011-02-08 at 09:12 -0800, Mike Noyes wrote: On Thu, 2011-02-03 at 07:20 -0800, Mike Noyes wrote: On Wed, 2011-02-02 at 06:49 -0800, Mike Noyes wrote: On Wed, 2011-02-02 at 06:40 -0800, Mike Noyes wrote: On Tue, 2011-02-01 at 07:17 -0800, Mike Noyes wrote: On Sun, 2011-01-30 at 05:27 -0800, Mike Noyes wrote: On Sun, 2011-01-30 at 05:18 -0800, Mike Noyes wrote: On Fri, 2011-01-28 at 17:13 -0800, Mike Noyes wrote: On Fri, 2011-01-28 at 07:56 -0800, Mike Noyes wrote: On Thu, 2011-01-27 at 07:52 -0800, Mike Noyes wrote: Everyone, SF was attacked and exploited. Service downtime due to exploit http://sourceforge.net/apps/wordpress/sourceforge/2011/01/27/service-downtime/ SourceForge.net Attack Update http://sourceforge.net/apps/wordpress/sourceforge/2011/01/27/sourceforge-net-attack-update/ SourceForge.net passwords reset http://sourceforge.net/blog/sourceforge-net-global-password-reset/ Sourceforge Attack: Full Report http://sourceforge.net/blog/sourceforge-attack-full-report/ CVS CVS service is one of SourceForge.net’s oldest services and, due to limitations in CVS itself, cannot readily live on our scalable network storage solution. Validation of this data is going to require several days and we anticipate that this service will be restored sometime in the later part of week. We are also considering the end-of-life of the CVS service and hope to have user support in migrating CVS users to Subversion in coming months. Subversion generally provides parity to CVS commands, and many of our users have made this transition successfully in the past. From SVN, projects can move to Git if desired. Changed email address notifications http://sourceforge.net/apps/wordpress/sourceforge/2011/01/31/changed-email-address-notifications/ Update on the SourceForge.net attack http://sourceforge.net/blog/update-on-the-sourceforgenet-attack/ SCM data validation is in-progress. CVS service and ViewVC (web browsing of SCM) service remain offline pending completion of data validation activities. 2011-02-01: File uploads back online 2011-02-01: New SSH key fingerprints for frs and web http://p.sf.net/sourceforge/sshfp Update: SourceForge.net Attack http://sourceforge.net/blog/update-sourceforgenet-attack/ CVS data CVS servers were compromised, so we are taking extra time with this data. CVS requires the significant validation effort, and its configuration made it harder to get the data we needed to start validation. The good news is that comparisons are running now against backup data. We still expect this to be one of the last services restored, but are committed to making that happen as quickly as possible. ViewVC (web-based SCM access) for CVS will be brought online as we ship the updated SCM servers. http://sourceforge.net/blog/update-on-services/ CVS service restore has been time-consuming due to the design of that service. CVS data is housed on direct-attached storage on a small pool of servers. Data restore from backups is in-progress and reload of machines is in-progress as of today (Monday). We intend to have CVS service online by the end of the week. http://sourceforge.net/apps/wordpress/sourceforge/2011/02/07/2011-02-07-interactive-shell-service-restored/ http://sourceforge.net/apps/trac/sourceforge/wiki/SSH%20key%20fingerprints -- Mike Noyes mhnoyes at users.sourceforge.net http://sourceforge.net/users/mhnoyes/ SF.net Projects: leaf, sourceforge/sitedocs -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ leaf-devel mailing list leaf-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [leaf-devel] next steps
Am Sonntag, 6. Februar 2011, um 12:14:16 schrieb ads...@genis-x.com: Is anyone able to push all the contrib packages into git? All package sources has been moved into git. Pls test and give feedback if it works - or report back errors you detect while building the packages. thx kp -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ leaf-devel mailing list leaf-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-devel
Re: [leaf-devel] Bering-uClibc4.0-beta2 Observations
Am Dienstag, 8. Februar 2011, um 23:32:05 schrieb Martin Hejl: Am 08.02.2011 18:36, schrieb Andrew: 1. The contents of modules.tgz have UID/GID 1000/1000 rather than 0/0. Perhaps buildimage.pl was not run using fakeroot? Yes, I missed that. Changed my notes. +# Check we are running as (fake)root +warn WARNING: Not running as (fake)root if ( $ != 0 ); + thx David :) kp Maybe it'll be better to add --owner root --group root to tar command line? it should work, if either every single file in every single package was owned by root:root (unlikely, from my recollection), or if the not quite as simple approach was taken to change the --owner and --group setting on a per file basis, when creating the lrp (should be doable, but it would most likely require a few changes in buildpacket.pl - if that's even used these days). I can assure you that builpacket.pl is still an essential piece in the buildtool environment. It just has been accompanied by buildimage.pl, which replaced and improved createimages.sh, geniso.sh etc.. Feel free to give it a shot. It shouldn't be too hard, if one can find the spare time to do it. I never found the time, since getting fakeroot to work on my devel boxes always seemed like the lesser evil. David made the change to make shure the release dude runs buildimage fakerooted, so the modules tarball is packaged with root:root - and I think that's a valuable and *simple* help during the release process, just in case someone forget to run buildimage fakerooted. As long as I'm in the duty to build the images, I hope a warning should be enough :) kp -- The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ___ leaf-devel mailing list leaf-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-devel
