[Python-modules-team] Bug#848287: python-testing.mysqld: (build-)depends on mysql-{client, server}
Source: python-testing.mysqld Version: 1.4.0-1 Severity: serious Your package (build-)depends on mysql-server/client. Since we're transitioning to mariadb as the default mysql provider, you should switch your build dependencies and dependencies to something like: default-mysql-server | virtual-mysql-server, default-mysql-client | virtual-mysql-client I have seen in your override that you have forwarded this upstream. I am filing this anyway to keep track of this along with the rest of the packages. Cheers, Emilio Cheers, Emilio -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (800, 'unstable'), (700, 'experimental'), (650, 'testing'), (500, 'unstable-debug'), (500, 'testing-debug') Architecture: amd64 (x86_64) Foreign Architectures: i386, armhf Kernel: Linux 4.8.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
[Python-modules-team] Bug#848287: python-testing.mysqld: (build-)depends on mysql-{client, server}
Control: severity -1 important Hi, > Your package (build-)depends on mysql-server/client. Since we're > transitioning to mariadb as the default mysql provider, you should > switch your build dependencies and dependencies to something like: > > default-mysql-server | virtual-mysql-server, default-mysql-client | > virtual-mysql-client > > I have seen in your override that you have forwarded this upstream. > I am filing this anyway to keep track of this along with the rest of the > packages. Lowering priority to important (you said "should"). As we are in a transition freeze and nothing along that lines will happen to stretch, I do not see why this should remove python-testing.mysqld and all packages that depend on it from testing. -nik -- PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17 FD26 B79A 3C16 A0C4 F296 Dominik George · Hundeshagenstr. 26 · 53225 Bonn Mobile: +49-1520-1981389 · https://www.dominik-george.de/ Teckids e.V. · FrOSCon e.V. Fellowship of the FSFE · Piratenpartei Deutschland Opencaching Deutschland e.V. · Debian Maintainer LPIC-3 Linux Enterprise Professional (Security) signature.asc Description: PGP signature ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
[Python-modules-team] Bug#848287: python-testing.mysqld: (build-)depends on mysql-{client, server}
Control: severity -1 serious On Fri, 23 Dec 2016 10:36:54 +0100 Dominik George wrote: > Control: severity -1 important > > Hi, > > > Your package (build-)depends on mysql-server/client. Since we're > > transitioning to mariadb as the default mysql provider, you should > > switch your build dependencies and dependencies to something like: > > > > default-mysql-server | virtual-mysql-server, default-mysql-client | > > virtual-mysql-client > > > > I have seen in your override that you have forwarded this upstream. > > I am filing this anyway to keep track of this along with the rest of the > > packages. > > Lowering priority to important (you said "should"). > > As we are in a transition freeze and nothing along that lines will > happen to stretch, I do not see why this should remove > python-testing.mysqld and all packages that depend on it from testing. We're doing this for stretch. You should have kept me in Cc if you wanted me to see your reply and have a chance to reply. Cheers, Emilio ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
[Python-modules-team] Bug#848287: python-testing.mysqld: (build-)depends on mysql-{client, server}
Hi, > You should have kept me in Cc if you wanted me to see your reply and have a > chance to reply. sorry, I just cannot remember that the Debian BTS does not automatically notify the submitter ☹. So, I have several problems: * I cannot find the formal transition for this. * I cannot see that mysql-server will be removed from stretch. As a matter of sad fact, testing.mysqld does not work with mariadb right now. What is wrong with depending on mysql-server, given that mysql-server will still exist although mariadb will become the default? -nik -- PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17 FD26 B79A 3C16 A0C4 F296 Dominik George · Hundeshagenstr. 26 · 53225 Bonn Mobile: +49-1520-1981389 · https://www.dominik-george.de/ Teckids e.V. · FrOSCon e.V. Fellowship of the FSFE · Piratenpartei Deutschland Opencaching Deutschland e.V. · Debian Maintainer LPIC-3 Linux Enterprise Professional (Security) signature.asc Description: PGP signature ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
[Python-modules-team] Bug#848287: python-testing.mysqld: (build-)depends on mysql-{client, server}
On 01/01/17 12:49, Dominik George wrote: > Hi, > >> You should have kept me in Cc if you wanted me to see your reply and have a >> chance to reply. > > sorry, I just cannot remember that the Debian BTS does not automatically > notify the submitter ☹. > > So, I have several problems: > > * I cannot find the formal transition for this. > * I cannot see that mysql-server will be removed from stretch. > > As a matter of sad fact, testing.mysqld does not work with mariadb right > now. > > What is wrong with depending on mysql-server, given that mysql-server > will still exist although mariadb will become the default? We're aiming at dropping mysql from testing/stretch because of concerns from the security team. See email threads in debian-release@ and pkg-mysql-maint@. Cheers, Emilio ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
[Python-modules-team] Bug#848287: python-testing.mysqld: (build-)depends on mysql-{client, server}
Control: severity -1 important Hi, > We're aiming at dropping mysql from testing/stretch because of concerns from > the > security team. See email threads in debian-release@ and pkg-mysql-maint@. ok, that changes things. It's very unfortunate that this was not really announced anywhere. Still, lowering severity as this, per se, is not an RC bug. This package depends on mysql-server, and this is reality, and there is nothing that prevents it from doing so if it does for a good reason. In the case that mysql-server is removed from testing, so will this package, anyway. I am trying to port it to mariadb, though. -nik -- PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17 FD26 B79A 3C16 A0C4 F296 Dominik George · Hundeshagenstr. 26 · 53225 Bonn Mobile: +49-1520-1981389 · https://www.dominik-george.de/ Teckids e.V. · FrOSCon e.V. Fellowship of the FSFE · Piratenpartei Deutschland Opencaching Deutschland e.V. · Debian Maintainer LPIC-3 Linux Enterprise Professional (Security) signature.asc Description: PGP signature ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
[Python-modules-team] Bug#848287: python-testing.mysqld: (build-)depends on mysql-{client, server}
Hi, I was able to identify the issue, but need help fixing it. The problem is that the testing module uses the default root user of the newly created database, and it uses the UNIX socket, and that has peercred authentication by default in MariaDB. I tried the following to disable peercred for the socket: $ cat >init.sql USE mysql; UPDATE user SET plugin='' WHERE User='root'; FLUSH PRIVILEGES; $ mysqld … --initialize-insecure --init-file=init.sql But it still does not allow connecting a non-root user as root through the UNIX socket. Any help appreciated. -nik -- PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17 FD26 B79A 3C16 A0C4 F296 Dominik George · Hundeshagenstr. 26 · 53225 Bonn Mobile: +49-1520-1981389 · https://www.dominik-george.de/ Teckids e.V. · FrOSCon e.V. Fellowship of the FSFE · Piratenpartei Deutschland Opencaching Deutschland e.V. · Debian Maintainer LPIC-3 Linux Enterprise Professional (Security) signature.asc Description: PGP signature ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
[Python-modules-team] Bug#848287: python-testing.mysqld: (build-)depends on mysql-{client, server}
On 01/01/17 17:30, Dominik George wrote: > Hi, > > I was able to identify the issue, but need help fixing it. > > The problem is that the testing module uses the default root user of the > newly created database, and it uses the UNIX socket, and that has > peercred authentication by default in MariaDB. > > I tried the following to disable peercred for the socket: > > $ cat >init.sql > USE mysql; > UPDATE user SET plugin='' WHERE User='root'; > FLUSH PRIVILEGES; > > $ mysqld … --initialize-insecure --init-file=init.sql > > But it still does not allow connecting a non-root user as root through > the UNIX socket. > > Any help appreciated. Cc'ing pkg-mysql-maint, maybe someone there can help. Emilio ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
[Python-modules-team] Bug#848287: python-testing.mysqld: (build-)depends on mysql-{client, server}
Dear MySQL/Mariadb maintainers, > > I was able to identify the issue, but need help fixing it. > > > > The problem is that the testing module uses the default root user of the > > newly created database, and it uses the UNIX socket, and that has > > peercred authentication by default in MariaDB. > > > > I tried the following to disable peercred for the socket: > > > > $ cat >init.sql > > USE mysql; > > UPDATE user SET plugin='' WHERE User='root'; > > FLUSH PRIVILEGES; > > > > $ mysqld … --initialize-insecure --init-file=init.sql > > > > But it still does not allow connecting a non-root user as root through > > the UNIX socket. > > > > Any help appreciated. > > Cc'ing pkg-mysql-maint, maybe someone there can help. As I would like to fix this issue before the full freeze, can you give any hints on how to circumvent this change in default behaviour of the mariadb "drop in replacement"? Kind regards, Nik -- PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17 FD26 B79A 3C16 A0C4 F296 Dominik George · Hundeshagenstr. 26 · 53225 Bonn Mobile: +49-1520-1981389 · https://www.dominik-george.de/ Teckids e.V. · FrOSCon e.V. Fellowship of the FSFE · Piratenpartei Deutschland Opencaching Deutschland e.V. · Debian Maintainer LPIC-3 Linux Enterprise Professional (Security) signature.asc Description: PGP signature ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
[Python-modules-team] Bug#848287: python-testing.mysqld: (build-)depends on mysql-{client, server}
Control: severity -1 serious On Fri, 13 Jan 2017 11:48:34 +0100 Kristian Nielsen wrote: > Otto Kekäläinen writes: > > > On a quick look the solution suggested by Kristian looks OK. I will > > eventually do something to implement and test it, but if somebody has > > time to do it right now and send me a git merge request (or Github > > pull request) then things would progress much faster. That should now fixed in mariadb-10.1. Andreas ___ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
