[oi-dev] OpenSSL update process
Hi, two (belated) PRs are queued to amend OpenSSL 1.0 and add OpenSSL 1.1 to our repository: https://github.com/OpenIndiana/oi-userland/pull/6471 https://github.com/OpenIndiana/oi-userland/pull/6472 Both implementations live in their own prefix with mediated links in /lib and /usr/lib; pkg-config files are also mediated. The recipe is adapted from the solaris-userland efforts, thanks to them. Tasks at hand: 1. Fix 3 small illumos-gate nits due to cypher deprecation. 2. Add macros to ease the switch between OpenSSL 1.0/1.1 3. Move all the components supporting OpenSSL 1.1 or update them. 4. Deprecate possible rotting components which cannot be updated and may cause security issues. A PR will contain 2 + 3 and we'll try to use the simple build_plan scheme to publish on the build server in one go. Priority is on the cryptographic Python modules used by pkg5 and security + server side software. When we feel confident that all is rebuilt and well we set OpenSSL 1.1 as the default mediator version. Any ideas on the details? Kind regards, Aurélien -- --- Praise the Caffeine embeddings ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev
[oi-dev] PostgreSQL 9.5 deprecation notice
Hi, during the migration to newer Python and the OpenSSL update, a few components delivered as 32-bit binaries will either be moved to 64-bit or phased out. According to https://www.postgresql.org/support/versioning/, PostgreSQL 9.5 the last 32/64-bit postgres we deliver, is EOL'ed on 11th February 2021. Therefore you are encouraged to migrate to a newer version as version 9.5 will be deprecated in our repository shortly after its official EOL. Note that PostgreSQL 9.6 will be phased out at the end of November 2021 as well. Kind regards, Aurélien -- --- Praise the Caffeine embeddings ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev
[oi-dev] Python modules update status
Hi, we are moving forward well with the migration. Out of 172 components: 1) 46 got Python 3.7 and 3.9 support (in bold pending for merge): argcomplete 2.7 3.5 3.7 3.9 atomicwrites 2.7 3.5 3.7 3.9 attrs 2.7 3.5 3.7 3.9 *automat* 3.5 3.7 3.9 chardet 2.7 3.5 3.7 3.9 *cheroot* 3.5 3.7 3.9 *cherrypy* 3.5 3.7 3.9 *constantly* 3.7 3.9 coverage 2.7 3.5 3.7 3.9 *hamcrest* 3.5 3.7 3.9 *hyperlink* 2.7 3.5 3.7 3.9 idna 2.7 3.5 3.7 3.9 importlib-metadata 2.7 3.5 3.7 3.9 incremental 2.7 3.5 3.7 3.9 iniconfig 3.5 3.7 3.9 mock 2.7 3.5 3.7 3.9 more-itertools 3.5 3.7 3.9 *nose* 3.5 3.7 3.9 packaging 2.7 3.5 3.7 3.9 *pexpect* 3.5 3.7 3.9 pip 2.7 3.5 3.7 3.9 pipdeptree 3.5 3.7 3.9 pluggy 2.7 3.5 3.7 3.9 *ptyprocess* 3.5 3.7 3.9 py 2.7 3.5 3.7 3.9 py-cpuinfo 3.5 3.7 3.9 pycodestyle 2.7 3.5 3.7 3.9 pylxml 2.7 3.5 3.7 3.9 pyparsing 3.5 3.7 3.9 pytest 3.5 3.7 3.9 pytest-benchmark 3.5 3.7 3.9 pytest-reporter 3.5 3.7 3.9 python-rapidjson 3.7 3.9 pytz 2.7 3.5 3.7 3.9 requests 2.7 3.5 3.7 3.9 setuptools 3.5 3.7 3.9 setuptools_scm 2.7 3.5 3.7 3.9 six 2.7 3.5 3.7 3.9 sortedcontainers 2.7 3.5 3.7 3.9 toml 3.5 3.7 3.9 twisted 3.5 3.7 3.9 urllib3 2.7 3.5 3.7 3.9 wcwidth 2.7 3.5 3.7 3.9 zc.lockfile 2.7 3.5 3.7 3.9 zipp 2.7 3.5 3.7 3.9 zope-interface 2.7 3.5 3.7 3.9 2) 46 are Python 2.7 only and some of them may simply be deprecated. Thanks to Andreas, Nona, and Gary for their help. Kind regards, Aurélien -- --- Praise the Caffeine embeddings ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev
Re: [oi-dev] brand10 support broken in OI
On Thu, 4 Feb 2021 at 13:14, Klaus Ziegler - owner of sunfreeware.de wrote: > thanks very much for letting us know, is anybody picking up this very > small fix for illumos-gate? it would be really much appreciated. Anybody can submit a fix for review if it has been tested. Small fixes like this are probably a good place to get started with contribution. We have a guide to contribution that should help: https://illumos.org/docs/contributing/ If you need assistance, there are folks on the mailing list and in IRC that can help! Cheers. -- Joshua M. Clulow http://blog.sysmgr.org ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev
Re: [oi-dev] brand10 support broken in OI
Hi Peter, thanks very much for letting us know, is anybody picking up this very small fix for illumos-gate? it would be really much appreciated. Much Regards Klaus On 01.02.21 23:13, Peter Tribble wrote: Solaris10 branded zone support in Openindiana is broken likely since last year July, because of the following undefined symbol in s10_brand.so.1: November, when stack smashing protection was added to userland. https://www.illumos.org/issues/13274 My initial fix in Tribblix, like here, was to roll back the s10_brand pieces to a previous version. The brand code here isn't changing at all. This is a potential fix for illumos-gate: https://github.com/tribblix/tribblix-build/blob/master/illumos/s10-brand-ssp.patch (I have a successful build with it, but haven't installed it yet to test it.) root@myserver:~# zlogin myzone [Connected to zone 'myzone' pts/2] ld.so.1: s10_brand.so.1: fatal: relocation error: file /.SUNWnative/usr/lib/s10_brand.so.1: symbol __stack_chk_guard: referenced symbol not found [Connection to zone 'myzone' pts/2 closed] -- -Peter Tribble http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/ ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev ___ oi-dev mailing list oi-dev@openindiana.org https://openindiana.org/mailman/listinfo/oi-dev
