Re: Koji downtime?

2016-02-24 Thread Remi Collet
Koji is up, but f25 tags are not ready yet.


Remi.
--
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
http://lists.fedoraproject.org/admin/lists/test@lists.fedoraproject.org

Wordpress and security updates

2015-05-08 Thread Remi Collet
Hi,

Various upstream updates have been published recently (since March 23th)
to fix at least 3 critical security issues.

My first idea was to keep 4.1.2 to get a fast fix, and then push 4.2 and
have a more longer testing phase...

But 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.2.0, 4.2.1, 4.2.2... in a few days.

So all branches now have 4.2.2 in testing.
Some builds got karma, but because of new builds and push to stable
delay, we still need more.

So all branches still have old unsecure 4.1.1, for  2 weeks.


Please test and give Karma so we can have a secure version in stable repo.


Thanks,
Remi.
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

Re: Does anyone reuse /boot or /var partitions ?

2015-01-23 Thread Remi Collet
Le 22/01/2015 22:36, Adam Williamson a écrit :
 There's a proposed anaconda patch ATM which would disallow mounting an 
 existing partition as /boot or /var (or any subdirectory of those 
 except /var/www ) without reformatting it. i.e., you can't reuse an 
 existing partition with those mountpoints.

I reuse tons of sub-directory of /var

/var/lib/mysql
/var/lib/libvirt/images
/var/cache/mock
/var/lib/mock

Ok, I don't really need them on install
(I usually re-enable them after install)

 I'm curious to know if anyone / many people do this, and if so, if 
 there's a particularly good use case for it; if so, we might want to 
 provide that feedback to the anaconda folks.
 
 There are a few references to using shared /boot on Google, but not 
 that many, and mostly for crazy multiboot configurations that we 
 really don't want to be stuck dealing with. Does anyone know of a 
 really sensible use case for this?

Yes, I use shared /boot for multi-boot (multiple fedora version).

I don't think disallowint mounting an existing partition without
reformatting it is a good idea.


Remi.

 
 For the record, this is actually re-hooking up code that was used in 
 oldUI - that is, F17 and earlier - but in oldUI it just produced a 
 warning you had to click through; the current patch flat disallows it. 
 The main driving force for this is 
 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1074358 , as it 
 keeps turning out to be annoyingly tricky to make sure that only newly-
 installed kernels have their initramfs regenerated when installing to a
 shared /boot partition.
 

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

php-fpm and IPv6 support - call for tests

2014-11-17 Thread Remi Collet
Hi,

I just push PHP 5.6.3-4 in f21
https://admin.fedoraproject.org/updates/FEDORA-2014-15053

This minor release introduce quite an important feature:
php-fpm is now aware of Ipv6.

In upstream release this feature is mostly broken, but our build include
various upstream patches (all up to now)

Default configuration listen to 127.0.0.1:9000,
so is not directly affected by this change.

listen = 9000 (all IPv4) should be (also) unchanged

Now you can also use

listen = [IPv6 address]:port
listen = [::]:port (all addresses, IPv6 + IPv4-Mapped)

listen.allowed_clients also accepts both IPv4 IPv6 addr.


Test / feedback for this feature is very welcome


Thanks
Remi.


P.S.1 this feature is also part of 5.5.19, our build also includes
most of the upstream patches, but I'm thinking to revert this IPv6
feature or to add the other upstream patches, so tests really needed.

P.S.2 from RPM changelog
- FPM: add upstream patch for https://bugs.php.net/68428
listen.allowed_clients is IPv4 only
- FPM: add upstream patch for https://bugs.php.net/68421 access.format=R
doesn't log ipv6 address
- FPM: add upstream patch for https://bugs.php.net/68420 listen=9000
listens to ipv6 localhost instead of all addresses
- FPM: add upstream patch for https://bugs.php.net/68423 will no longer
load all pools
- sync php-fpm configuration with upstream
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

PHP SIG (revival) probably more a webapp or LAMP SIG.

2014-04-03 Thread Remi Collet
Hi,

People interested in the PHP stack, or more generally the web
applications stuff, should probably join the
php-de...@lists.fedoraproject.org mailing list.

For example the is some change proposal under discussion there

- php 5.6

https://lists.fedoraproject.org/pipermail/php-devel/2014-March/000240.html

- httpd-filesystem proposal

https://lists.fedoraproject.org/pipermail/php-devel/2014-March/000241.html

- numeric prefix for php configuration files:

https://lists.fedoraproject.org/pipermail/php-devel/2014-April/000242.html

- apache configuration change for php-fpm

https://lists.fedoraproject.org/pipermail/php-devel/2014-April/000243.html


Remi.
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

Re: Fedora 20 Final blocker - Please add symfony packages.

2013-12-06 Thread Remi Collet
Le 28/11/2013 03:25, Adam Williamson a écrit :
 Hi, folks. We have just over one week to the Fedora 20 Go/No-Go meeting,
 and a big happy pile of blocker bugs - everyone's having fun! In order
 to be able to complete testing in time for the go/no-go meeting

Please consider for F20Final:

https://bugzilla.redhat.com/show_bug.cgi?id=1021749
https://admin.fedoraproject.org/updates/FEDORA-2013-22356

Having a broken PHPUnit in F20 will make most of the PHP packages FTBFS.

Note: retiring a package before the new one is pushed is just a VERY bad
idea (despite comment#34 on bz)


Remi.

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

Re: Negative karma for missing update descriptions?

2013-07-04 Thread Remi Collet
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Le 04/07/2013 17:09, Ankur Sinha a écrit :
 On Thu, 2013-07-04 at 14:51 +, Jóhann B. Guðmundsson wrote:
 How does a reporter supposed to know which bugs are fixed if
 there is no update description?
 
 One can specify what bugs an update fixes in Bodhi. These bugs are 
 closed when the update goes stable, and these bugs are listed both
 in bodhi and in fedora-easy-karma.
 
 All the updates I've seen today that received negative karma for
 their descriptions had these bugs specified.

I think an update with some bug link(s) really have a description.

And I also think that an update without description (really no
description, or only a short silly message) could receive negative karma.

But probably because I always try to give as much as possible
information in my updates.

Remi.


-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlHVlOUACgkQYUppBSnxahgYWgCdGgrzupwG/pVI2rPHNLKrzLmw
iRAAnRzEbQfKGfjOauV3f37vL/IOhqm6
=jxqw
-END PGP SIGNATURE-
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

Re: yum question Is this ok [y/d/N]:

2013-06-15 Thread Remi Collet
Le 15/06/2013 10:43, Joachim Backes a écrit :
 Hi all,
 
 can anybody explain the meaning of d in the yum prompt
 Is this ok [y/d/N]:? Googling this, I found this question too, but no
 answer.

download

 
 Kind regards
 
 Joachim Backes

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

Re: yum question Is this ok [y/d/N]:

2013-06-15 Thread Remi Collet
Le 15/06/2013 10:52, Someone Somewhere a écrit :
 I think it should stand for yes/default/no.
 Default action may be different depending on the scrnario. Eg while
 installing it may be yes but qhile erasing it may be a no.
 Can someone confirm if my interpretation is correct?

Default action is the one in uppercase

Remi.

 -Kunal
 On Jun 15, 2013 2:17 PM, Remi Collet fed...@famillecollet.com
 mailto:fed...@famillecollet.com wrote:

 Le 15/06/2013 10:43, Joachim Backes a écrit :
  Hi all,
 
  can anybody explain the meaning of d in the yum prompt
  Is this ok [y/d/N]:? Googling this, I found this question too, but no
  answer.

 download

 
  Kind regards
 
  Joachim Backes

 --
 test mailing list
 test@lists.fedoraproject.org mailto:test@lists.fedoraproject.org
 To unsubscribe:
 https://admin.fedoraproject.org/mailman/listinfo/test
 
 
 

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

Re: thunderbird 14 from rawhide won't install because thunderbird-enigmail needs tbird 14

2012-07-23 Thread Remi Collet
Le 20/07/2012 17:59, Kevin Martin a écrit :
 I didn't see a thunderbird-enigmail package in koji...is anybody working on 
 getting a thunderbird-enigmail package for tbird 14?

Enigmail 1.4.3 for Thunderbird 14.0 is now available in rpmfusion updates.

Remi.


-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

Re: thunderbird 14 from rawhide won't install because thunderbird-enigmail needs tbird 14

2012-07-20 Thread Remi Collet

Le 21/07/2012 04:17, Andre Robatino a écrit :

Kevin Martin ktmdms at gmail.com writes:


I didn't see a thunderbird-enigmail package in koji...is anybody working on

getting a

thunderbird-enigmail package for tbird 14?


Thunderbird-enigmail is from rpmfusion-free. The same problem exists in F17.
Normally a new package appears in rpmfusion-free-updates-testing fairly quickly,
but not this time.


I'm currently AFK, so haven't be able to push enigmail update to rpmfusion.

FYI: enigmail is currently waiting for a reviewer to move to fedora 
repository, the only good solution to have update push in the right time...


Remi.




--
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

Authentification forwarding with ssh on f15

2011-05-04 Thread Remi Collet
I have a strange issue with Authentification forwarding.
It works for me for years...
(and I've just test it on my old fedora 14)

And stop working in fedora 15 (beta, full updates)

Using the same account name on all hosts:

$ ssh serveur1 hostname
ok

$ ssh serveur2 hostname
ok

$ ssh -A serveur1 ssh serveur2 hostname
Permission denied, please try again.
Permission denied, please try again.
Permission denied (publickey,gssapi-with-mic,password).


Any idea where to search ?

Remi


P.S. serveur1 runs RHEL5.6, serveur2, various OS (debian, CentOS, ...)
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: Authentification forwarding with ssh on f15

2011-05-04 Thread Remi Collet
Le 04/05/2011 17:39, James Laska a écrit :

 doesn't like the permissions of a file in $HOME/.ssh/ or something else?

Permissions seems ok as direct ssh works... (.ssh is 700, id_dsa is 600)

 Maybe add a few verbose options (-v) to the ssh command.  See what if it

Here is (one with -v on first server, one with -v on second server)

---
$ ssh -A box ssh -v lind hostname

OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Applying options for lind
debug1: Connecting to lind [195.83.130.94] port 110.
debug1: Connection established.
debug1: identity file /home/remi/.ssh/identity type -1
debug1: identity file /home/remi/.ssh/id_rsa type -1
debug1: identity file /home/remi/.ssh/id_dsa type -1
debug1: loaded 3 keys
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3
debug1: match: OpenSSH_4.3 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server-client aes128-ctr hmac-md5 none
debug1: kex: client-server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(102410248192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'lind' is known and matches the RSA host key.
debug1: Found key in /home/remi/.ssh/known_hosts:2
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue:
publickey,gssapi-with-mic,password
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure.  Minor code may provide more information
Unknown code krb5 195

debug1: Unspecified GSS failure.  Minor code may provide more information
Unknown code krb5 195

debug1: Unspecified GSS failure.  Minor code may provide more information
Unknown code krb5 195

debug1: Next authentication method: publickey
debug1: Trying private key: /home/remi/.ssh/identity
debug1: Trying private key: /home/remi/.ssh/id_rsa
debug1: Trying private key: /home/remi/.ssh/id_dsa
debug1: Next authentication method: password
debug1: read_passphrase: can't open /dev/tty: No such device or address
debug1: Authentications that can continue:
publickey,gssapi-with-mic,password
Permission denied, please try again.
debug1: read_passphrase: can't open /dev/tty: No such device or address
debug1: Authentications that can continue:
publickey,gssapi-with-mic,password
Permission denied, please try again.
debug1: read_passphrase: can't open /dev/tty: No such device or address
debug1: Authentications that can continue:
publickey,gssapi-with-mic,password
debug1: No more authentication methods to try.
Permission denied (publickey,gssapi-with-mic,password).

---
$ ssh -A -v  box ssh lind hostname

OpenSSH_5.6p1, OpenSSL 1.0.0d-fips 8 Feb 2011
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to box [88.191.74.232] port 22.
debug1: Connection established.
debug1: identity file /home/remi/.ssh/id_rsa type -1
debug1: identity file /home/remi/.ssh/id_rsa-cert type -1
debug1: identity file /home/remi/.ssh/id_dsa type -1
debug1: identity file /home/remi/.ssh/id_dsa-cert type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3
debug1: match: OpenSSH_4.3 pat OpenSSH_4*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.6
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server-client aes128-ctr hmac-md5 none
debug1: kex: client-server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(102410248192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'box' is known and matches the RSA host key.
debug1: Found key in /home/remi/.ssh/known_hosts:7
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue:
publickey,gssapi-with-mic,password
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure.  Minor code may provide more information
Credentials cache file '/tmp/krb5cc_500' not found

debug1: Unspecified GSS failure.  Minor code may provide more information
Credentials cache file '/tmp/krb5cc_500' not found

debug1: Unspecified GSS failure.  Minor code may provide more 

Re: Authentification forwarding with ssh on f15 [solved]

2011-05-04 Thread Remi Collet
Forward don't work for my old id_dsa private key.

Diffing verbose output from f14 and f15

--- fedora14.log  2011-05-04 18:28:10.0 +0200
+++ fedora15.log  2011-05-04 18:30:44.0 +0200
@@ -1,16 +1,16 @@
-OpenSSH_5.5p1, OpenSSL 1.0.0d-fips 8 Feb 2011
+OpenSSH_5.6p1, OpenSSL 1.0.0d-fips 8 Feb 2011
 debug1: Reading configuration data /etc/ssh/ssh_config
 debug1: Applying options for *
 debug1: Connecting to box [88.191.74.232] port 22.
 debug1: Connection established.
-debug1: identity file /home/remif9/.ssh/id_rsa type -1
-debug1: identity file /home/remif9/.ssh/id_rsa-cert type -1
-debug1: identity file /home/remif9/.ssh/id_dsa type 2 = !!
-debug1: identity file /home/remif9/.ssh/id_dsa-cert type -1
+debug1: identity file /home/remi/.ssh/id_rsa type -1
+debug1: identity file /home/remi/.ssh/id_rsa-cert type -1
+debug1: identity file /home/remi/.ssh/id_dsa type -1 == !!
+debug1: identity file /home/remi/.ssh/id_dsa-cert type -1
 debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3
 debug1: match: OpenSSH_4.3 pat OpenSSH_4*
 debug1: Enabling compatibility mode for protocol 2.0
-debug1: Local version string SSH-2.0-OpenSSH_5.5
+debug1: Local version string SSH-2.0-OpenSSH_5.6
 debug1: SSH2_MSG_KEXINIT sent
 debug1: SSH2_MSG_KEXINIT received
 debug1: kex: server-client aes128-ctr hmac-md5 none

Don't know if this is a bug

Bug switching to a new id_rsa private key solves the issue.

Remi.

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: certain php-pear and php-channel-doctrine installs or updates run php forever

2010-10-08 Thread Remi Collet
Le 08/10/2010 16:40, stan a écrit :
 Hi,
 
 I installed F14 x86_64 from the Beta DVD this week.  When I updated the
 huge number of packages I normally install, I found that whenever
 certain php-pear packages or the php-channel-doctrine package are
 installed or updated, yum fires off php and it runs using over 90% of
 CPU, and seemingly doing nothing.  I let it run for a while to see if
 it was doing something useful, and it ran for over 40 minutes without
 ending, using most of the cpu during that time.  When I cancel the
 transaction, yum in the future informs me that there is a transaction
 awaiting completion and I should run yum-complete-transaction.  When I
 do the same behavior ensues.

Could you provides the installed php extension list ?

rpm -qa php\* | sort

1/ yum update --exclude php\* (to avoid long list in next)
2/ yum update

And a full yum transaction output

+

 
 I assume this is an error, and so I wonder where to file it. Is this an
 error in yum?  In php?  In the configuration of the package being
 installed? What should the bugzilla be opened against?  I would rather
 not open a bugzilla for each component that does this, so how would I
 generalize it?
 
 Thanks.

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test

Re: certain php-pear and php-channel-doctrine installs or updates run php forever

2010-10-08 Thread Remi Collet
Le 08/10/2010 21:18, stan a écrit :


 PHP Warning:  PHP Startup: Unable to load dynamic library 
 '/usr/lib64/php/modules/gv.so' - /usr/lib64/php/modules/gv.so: undefined 
 symbol: zend_error_noreturn in Unknown on line 0   

At least this should be reported against graphviz (graphviz-php)

You should also try to disable as much as possible extension (put in
comment the extension directive in /etc/php.d/*.ini) to find the
guilty one.

+

   

 (process:9630): GLib-GObject-CRITICAL **: gtype.c:2710: You forgot to call 
 g_type_init() 
   

 (process:9630): GLib-CRITICAL **: g_once_init_leave: assertion 
 `initialization_value != 0' failed
   

 (process:9630): GLib-GObject-CRITICAL **: g_object_new: assertion 
 `G_TYPE_IS_OBJECT (object_type)' failed   
   
 error: %post(php-pear-CAS-1.1.3-1.fc14.noarch) scriptlet failed, signal 2 

  
 
   
   
 PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+   PPID COMMAND  

 9630 root  20   0  736m  31m  23m R 93.0  1.6   1:13.51  9627 php 

 30234 root  20   0 15296 1300  836 R  2.5  0.1   3:21.17  5631 top

   

 PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+   PPID COMMAND  

 9630 root  20   0  736m  31m  23m R 91.8  1.6   2:25.79  9627 php 

 30234 root  20   0 15296 1300  836 R  2.5  0.1   3:22.84  5631 top
  

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test