[atomic-devel] Getting to full deprecation of the projectatomic/ Github organization

2019-09-27 Thread Colin Walters
bubblewrap moved: https://github.com/containers/bubblewrap rpm-ostree moved: https://github.com/coreos/rpm-ostree Of the things remaining...probably the biggest is our docker branch: https://github.com/projectatomic/docker I feel like it'd be cleanest if we created a new org for this stuff...queu

Re: [atomic-devel] libvirtd+qemu-kvm on atomic server, make sense?

2019-05-04 Thread Colin Walters
On Sat, May 4, 2019, at 7:27 PM, Angelos Ching wrote: > Dear Fellow Dev / Users, > > I'm trying to figure out whether running libvirtd+qemu-kvm on Atomic > server make sense. > > One of my CentOS 7 box (my homelab VM host) had been through > interrupted OS update twice and it required my int

Re: [atomic-devel] Rebase Fedora Atomic 27 > 29 fails to boot

2019-03-23 Thread Colin Walters
On Wed, Mar 20, 2019, at 11:41 AM, Doug Campbell wrote: > Currently running Fedora Atomic 27.153 > > Following instructions at: > http://www.projectatomic.io/blog/2018/10/fedora-atomic-28-to-29-upgrade/ to > upgrade to version 29. > > Upon reboot everything is fine until I see: > > (1 of 2)

Re: [atomic-devel] Install CRI-O on Atomic Host

2019-01-30 Thread Colin Walters
On Wed, Jan 30, 2019, at 9:20 AM, Daniel Walsh wrote: > Right you can get CRI-O and OKD installed on atomic host as layered > packages.  But it will not be updated via the atomic upgrades. Hmm? rpm-ostree updates layered packages too. It's a true hybrid image/package system. Now...there

Re: [atomic-devel] Install CRI-O on Atomic Host

2019-01-30 Thread Colin Walters
On Tue, Jan 29, 2019, at 2:31 PM, mabi wrote: > Ah ok so standard CentOS would do it... I guess I missed the point, I > thought Atomic Host is THE distribution to go with when using such > platforms like okd.io/OpenShift... An interesting topic here is whether saying "Fedora/CentOS/RHEL" mean

Re: [atomic-devel] "Hello World" - seems to be successful

2018-11-20 Thread Colin Walters
On Tue, Nov 20, 2018, at 12:02 AM, Bob Gustafson wrote: > rpm-ostree uninstall for all of my packages, but there must be a > 'blow them all away' command, yes? rpm-ostree uninstall --all It's in --help but not the man page because...those get out of sync =/ See also https://github.com/proj

Re: [atomic-devel] Bare metal installation without video display??

2018-08-22 Thread Colin Walters
On Wed, Aug 22, 2018, at 11:12 AM, Bob Gustafson wrote: > Hi Colin > > Thanks very much for your comments. > > (I have had some success - see my email which was sent 3 mins before > yours..) > > I tried accessing your bugzilla.redhat link, but got: > > You are not authorized to access

Re: [atomic-devel] Bare metal installation without video display??

2018-08-22 Thread Colin Walters
On Sun, Aug 19, 2018, at 10:50 AM, Bob Gustafson wrote: > My particular piece of bare metal seems to have enough memory, disk > space, Intel x86_64 architecture w/4 cores, ethernet nics, but it does > not have any video support. See https://bugzilla.redhat.com/show_bug.cgi?id=1057271 and https:/

Re: [atomic-devel] docker optionsin /etc/sysconfig/docker

2018-06-02 Thread Colin Walters
On Sat, Jun 2, 2018, at 8:30 AM, arnaud gaboury wrote: > > # systemctl edit docker.service > [Service] > Execstart= > ExecStart=/usr/bin/dockerd --selinux-enabled > # systemctl restart docker > # docker run fedora cat /proc/self/attr/current > system_u:system_r:container_t:s0:c81,c142# See: /

[atomic-devel] AMIs on magnetic storage vs gp2

2018-06-01 Thread Colin Walters
I'm looking at general things in how CoreOS Container Linux does things vs Fedora Atomic - specifically I think we should have a file like: https://alpha.release.core-os.net/amd64-usr/current/coreos_production_ami_all.json While I was doing this, one thing I noticed is that CL is gp2 only: https:/

Re: [atomic-devel] Atomic as Base OS for Standalone Appliance

2018-05-22 Thread Colin Walters
Hi Shane, On Mon, May 21, 2018, at 3:09 PM, Shane O'Donnell wrote: > Hey All – > > We’re building an IoT edge device based on CentOS Atomic Host Cool; without knowing more it feels like this falls in between "server" and "device"? If it's more "device" like then the newly formed Fedora IoT gr

Re: [atomic-devel] rpm-ostree equivalent of fastest mirror and parallel downloads

2018-05-21 Thread Colin Walters
On Thu, May 17, 2018, at 8:24 PM, Muayyad AlSadi wrote: > Hi, > > in /etc/dnf/dnf.conf I have > > fastestmirror=1 > max_parallel_downloads=20 > > what is the of that in rpm-ostree? So...this is an interesting topic. As the name implies, rpm-ostree glues together two fundamentally different "

Re: [atomic-devel] build atomic workstation live usb (iso)

2018-05-16 Thread Colin Walters
On Wed, May 16, 2018, at 12:38 AM, Damian Ivanov wrote: > Hello, > > I would like to test Fedora Atomic Workstation and make custom images > of it (like I used to with livecd-tools). There are guides for > building VM images, what would be needed to convert them into *iso > images that can be wr

Re: [atomic-devel] Failed to start Docker Storage Setup

2018-05-16 Thread Colin Walters
Hi, On Tue, May 15, 2018, at 7:44 PM, Rares Vernica wrote: > Hi, > > I installed the latest CentOS image on bare metal. Docker seems to work > fine, but I get an error message at start-up about the docker-storage-setup > service failing to start. I am happy with the current Docker storage setup,

Re: [atomic-devel] Podman-0.4.4 was just releeased.

2018-04-28 Thread Colin Walters
On Sat, Apr 28, 2018, at 4:51 AM, Daniel Walsh wrote: > This version no longer  requires the Buildah package to be installed but > can still do podman builds.  It is 36 Mb in size and I believe should > now be considered for inclusion into the atomic host by default as a > container runtime.

Re: [atomic-devel] Fedora Container Release

2018-03-19 Thread Colin Walters
On Mon, Mar 19, 2018, at 3:38 PM, Clement Verna wrote: > So if you maintain a container could you please build your container > against the f28 and master branch. There's a fairly important deeper question here: Do we really want to build all of these containers against each fedora release? Do

Re: [atomic-devel] Kubernetes manual setup

2018-02-22 Thread Colin Walters
On Wed, Feb 21, 2018, at 12:34 PM, Chris Negus wrote: > In my mind, this means that someone trying out vanilla Kubernetes will > start with some OS outside of the Fedora/RHEL/CentOS ecosystem. My > question is, is it okay to let this content die? Or should we encourage > some way to still manua

Re: [atomic-devel] Proposing moving https://github.com/stefwalter/oci-kvm-hook into projectatomic

2018-02-16 Thread Colin Walters
On Fri, Feb 16, 2018, at 2:30 PM, Josh Berkus wrote: > On 02/16/2018 11:23 AM, Colin Walters wrote: > > Hi, > > > > In working on our CI (and just locally in containers in general), I > > find https://github.com/stefwalter/oci-kvm-hook to be very, very > > usefu

Re: [atomic-devel] Proposing moving https://github.com/stefwalter/oci-kvm-hook into projectatomic

2018-02-16 Thread Colin Walters
On Fri, Feb 16, 2018, at 2:29 PM, Daniel Walsh wrote: > Does this actually work?  Yes =) For example it broke and we fixed it e.g.: https://github.com/stefwalter/oci-kvm-hook/pull/4 > I would figure the device cgroup would prevent > use of the kvm device inside a container unless you also mod

[atomic-devel] Proposing moving https://github.com/stefwalter/oci-kvm-hook into projectatomic

2018-02-16 Thread Colin Walters
Hi, In working on our CI (and just locally in containers in general), I find https://github.com/stefwalter/oci-kvm-hook to be very, very useful. Yes, there are other ways one can do it; see the thread in https://github.com/stefwalter/oci-kvm-hook/issues/5 I propose moving it into our organizatio

Re: [atomic-devel] Fedora Atomic Workstation questions

2018-02-07 Thread Colin Walters
On Wed, Feb 7, 2018, at 1:58 PM, Dusty Mabe wrote: > > Oh, great! for some reason I assumed rpm-ostree can only download > > pre-composed trees from Fedora. Right, rpm-ostree is a fully hybrid system, it links to libdnf *and* libostree and combines functionality from both. See: https://fedorap

[atomic-devel] Atomic/Container talks at devconf.cz 2018

2018-01-31 Thread Colin Walters
tation --- Matthew Micene, Giuseppe Scrivano: Moving to Atomic System Containers Youtube: https://www.youtube.com/watch?v=6ImTdrKv_Q0 Sanja Bonic and Colin Walters: You want a Clean Desktop OS? Containerize it. Youtube: https://www.youtube.com/watch?v=a4IPWlfkJSo Slides: https://fedora

Re: [atomic-devel] [Fedocal] Reminder meeting : General Atomic Community Meeting

2018-01-30 Thread Colin Walters
On Tue, Jan 30, 2018, at 5:01 AM, Sanja Bonic wrote: > This meeting will not happen unless someone else wants to hold it - I am in > flight at that time coming back from FOSDEM. No worries, I think one of us can do it! Since there's a lot going on I'd say let's hold it anyways.

Re: [atomic-devel] Installing packages in Atomic

2018-01-27 Thread Colin Walters
On Fri, Jan 26, 2018, at 9:53 AM, Chris Negus wrote: > I'm working on a procedure for installing RHEL Atomic on Azure. As part > of that, I want to install the WALinuxAgent RPM package, which is in the > rhel-7-server-extras-rpms repository. That repository is not enabled by > default. What I

[atomic-devel] In-flight AH size reduction changes

2018-01-09 Thread Colin Walters
I just want to highlight some "in flight" work on reducing the on-disk footprint of Atomic Host (and also Fedora userspace in general to some degree). https://src.fedoraproject.org/rpms/openssl/pull-request/1 ^ in rawhide, may try to nag maintainer to backport to f27 This one isn't *large* per se

Re: [atomic-devel] 2wk atomic release candidate: 20180102

2018-01-02 Thread Colin Walters
On Tue, Jan 2, 2018, at 3:48 PM, Dusty Mabe wrote: > > ostree 2017.13-3.fc27.x86_64 -> 2017.15-1.fc27.x86_64 Notably this has https://src.fedoraproject.org/rpms/ostree/c/7198ec08c451ff394024709ad2f7d3df01ae5329?branch=master related to: https://pagure.io/atomic-wg/issue/405

Re: [atomic-devel] Proposing a new way to deliver Atomic systems: rpm-ostree jigdo ♲📦

2017-12-13 Thread Colin Walters
On Wed, Dec 6, 2017, at 01:11 PM, Colin Walters wrote: > Basically, we're reviving an old idea for the modern age of images; I'm > calling > it "rpm-ostree jigdo ♲📦" (emoji are for "recycle package"): > > https://github.com/projectatomic/rpm-ostree

[atomic-devel] Proposing a new way to deliver Atomic systems: rpm-ostree jigdo ♲📦

2017-12-06 Thread Colin Walters
I've been working on Project Atomic for several years now; first post: https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2014-April/msg0.html (And the rpm-ostree/ostree projects predate that; rpm-ostree's "gitbirthday" is coming up at Sat Dec 21 19:41:30 2013 -0500) This en

Re: [atomic-devel] Atomic Host for ARM

2017-11-15 Thread Colin Walters
On Fri, Nov 10, 2017, at 03:53 PM, Iván Chavero wrote: > > The Cubie is Cortex-A7 (ARMv7-A) 32bits. We don't currently have any media for this; Fedora Atomic Host is currently more targeted for non-embedded servers. That said I know it's been done in the past - anywhere the general Fedora package

[atomic-devel] Minutes for Fedora Atomic meeting 2017115

2017-11-15 Thread Colin Walters
Minutes: https://meetbot.fedoraproject.org/fedora-meeting-1/2017-11-15/fedora_atomic_wg.2017-11-15-16.30.html Minutes (text): https://meetbot.fedoraproject.org/fedora-meeting-1/2017-11-15/fedora_atomic_wg.2017-11-15-16.30.txt Log: https://meetbot.fedoraproject.org/fedora-meeting-1/2017-11-15/fed

Re: [atomic-devel] please help us test atomic workstation/host images for f27

2017-11-13 Thread Colin Walters
On Sat, Nov 11, 2017, at 07:00 PM, William Brown wrote: > > 1) opensc should be part of the base image as it enables freeipa > smartcard authentication and other related parts to work correctly (I'm > layering it in for now Me too, in my case for yubikey. That said my opinion here is that we

Re: [atomic-devel] Add Nvidia GPU to Centos Atomic Node

2017-11-09 Thread Colin Walters
On Wed, Nov 8, 2017, at 02:29 PM, Stephen Milner wrote: > What about literally providing dkms in a container? It wouldn't > directly take care of the original request but it would give an avenue > for folks to use the dkms toolchain if they'd like to in AH without > package layering. Maybe? Ar

Re: [atomic-devel] Add Nvidia GPU to Centos Atomic Node

2017-11-08 Thread Colin Walters
On Wed, Nov 8, 2017, at 01:58 PM, Colin Walters wrote: > oreos-nvidia approach > is basically "dkms in a container" Nope, I looked at this more and I'm wrong - it's building a container matching each CoreOS release in Travis and pushing that. So if that build somehow

Re: [atomic-devel] Add Nvidia GPU to Centos Atomic Node

2017-11-08 Thread Colin Walters
On Wed, Nov 8, 2017, at 12:44 PM, Stephen Milner wrote: > On Wed, Nov 8, 2017 at 11:33 AM, Dusty Mabe wrote: > > > Really you have two options. > > > > 1. unlock your ostree and install the rpms > > 2. build the kernel module for the kernel you are targeting and deliver via > > a system > >

Re: [atomic-devel] Add Nvidia GPU to Centos Atomic Node

2017-11-08 Thread Colin Walters
On Wed, Nov 8, 2017, at 12:36 PM, Dusty Mabe wrote: > > > On 11/08/2017 12:06 PM, Colin Walters wrote: > > On Wed, Nov 8, 2017, at 11:33 AM, Dusty Mabe wrote: > >> > >> - ostree admin unlock --hotfix > >> - alias yum='/usr/share/yum-cli/yummain.

Re: [atomic-devel] Add Nvidia GPU to Centos Atomic Node

2017-11-08 Thread Colin Walters
On Wed, Nov 8, 2017, at 11:33 AM, Dusty Mabe wrote: > > - ostree admin unlock --hotfix > - alias yum='/usr/share/yum-cli/yummain.py' Let's please not mention `--hotfix`? The reason this breaks is I'm pretty sure DKMS would need a lot of work to properly interact with the underlying ostree "snaps

Re: [atomic-devel] PXE Booting Diskless Atomic - Failed to start switchroot

2017-11-07 Thread Colin Walters
Hi Matt, On Mon, Nov 6, 2017, at 08:50 PM, Matt Jansen wrote: > Hi all, > I'm trying to use iPXE to boot into a live atomic host. Basically at the moment we've put work on "live/diskless" AH on hold because it kind of conflicts with management tools (e.g. Ansible no longer works persistently), a

Re: [atomic-devel] a better place for system container images?

2017-11-06 Thread Colin Walters
On Mon, Nov 6, 2017, at 03:57 AM, Giuseppe Scrivano wrote: > The goal is to build the images automatically on every PR merged. > Occasional builds (maybe daily?) will prevent to miss changes in the > base layers or in the installed rpms. Let's write down these requirements/requests in an issue

Re: [atomic-devel] please help us test atomic workstation/host images for f27

2017-11-02 Thread Colin Walters
On Wed, Nov 1, 2017, at 10:16 PM, Dusty Mabe wrote: > > Atomic workstation is included in the normal fedora release process > and is part of RC 1.7: > > https://kojipkgs.fedoraproject.org/compose/27/Fedora-27-20171101.0/compose/WorkstationOstree/x86_64/iso/Fedora-WorkstationOstree-ostree-x86_64

Re: [atomic-devel] please help us test docker images from f27 RC 1.2

2017-11-02 Thread Colin Walters
On Wed, Nov 1, 2017, at 10:05 PM, Dusty Mabe wrote: > https://kojipkgs.fedoraproject.org/compose/27/Fedora-27-20171101.0/compose/Docker/aarch64/images/Fedora-Docker-Base-27-1.2.aarch64.tar.xz > https://kojipkgs.fedoraproject.org/compose/27/Fedora-27-20171101.0/compose/Docker/armhfp/images/Fedora-D

[atomic-devel] docs hackfest...next steps?

2017-10-05 Thread Colin Walters
Hey, so we had a docs hackfest at Flock, which was great. I was very inspired. Honestly I am terrible about writing docs, and there's many days I feel like we'd be in a lot better place if we were better about this. So the result of the hackfest was: https://github.com/projectatomic/atomic-host-d

Re: [atomic-devel] Atomic and NIST-800/STIG compliance

2017-09-13 Thread Colin Walters
On Thu, Sep 7, 2017, at 02:51 PM, Ryan Barry wrote: > > I'd imagine the same. That said, oVirt Node is also not managed by > yum, and the specific request there was still to have separate > filesystems. The theory being that a runaway process or attacker > which/who fills one of the partitions can

Re: [atomic-devel] should we include microdnf in atomic host

2017-08-25 Thread Colin Walters
On Fri, Aug 25, 2017, at 09:52 AM, Dusty Mabe wrote: > If there is ever a case where people "need" to `ostree admin unlock --hotfix` > and install a new patched rpm that hasn't been released yet, should we > consider > including microdnf to make it easier to grab those rpms? In general, rpm-os

Re: [atomic-devel] Atomic and NIST-800/STIG compliance

2017-08-23 Thread Colin Walters
Hi Ryan, thanks for bringing this up! On Wed, Aug 23, 2017, at 03:31 PM, Ryan Barry wrote: > > /home > /opt > /var > /var/log > /var/log/audit As I understand it, the NIST-800 specification was designed for a "traditional" system managed via yum.  I imagine they did a default RHEL7 install and l

Re: [atomic-devel] RC hardware test -- Fail

2017-08-22 Thread Colin Walters
On Mon, Aug 21, 2017, at 10:23 PM, Josh Berkus wrote: > On 08/21/2017 04:17 PM, Josh Berkus wrote: > > Dusty, > > > > https://kojipkgs.fedoraproject.org/compose/twoweek/Fedora-Atomic-26-20170821.0/compose/Atomic/x86_64/iso/Fedora-Atomic-ostree-x86_64-26-20170821.0.iso > > > > Passed the minnowb

[atomic-devel] Added microcode_ctl to FAH, tuned discussion

2017-08-18 Thread Colin Walters
Hey, so previously we tended to discuss Atomic Host content changes on this list, but since then the https://pagure.io/atomic-wg/ tracker was created and has been used more. See https://pagure.io/atomic-wg/issue/315 for tuned. See this PR for why the PR to add microcode_ctl was pushed: https://pag

[atomic-devel] Why Atomic Host should be built using Modularity

2017-08-02 Thread Colin Walters
There was a discussion today in the Atomic WG about using Modules. Meeting log: https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2017-August/msg4.html Agenda discussion: https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2017-August/msg2.html (Side note;

[atomic-devel] Python 2 and Atomic Host

2017-08-02 Thread Colin Walters
Hey, just a quick note here that I've been waging a fight to keep /usr/bin/python as Python 2 for Fedora Atomic Host, and in general to support Ansible. This was covered on LWN: https://lwn.net/Articles/729366/ For openshift-ansible I think we're generally OK with supporting Python 3 and working

Re: [atomic-devel] 2wk atomic release candidate: 20170723

2017-07-24 Thread Colin Walters
On Mon, Jul 24, 2017, at 10:50 AM, Dusty Mabe wrote: > > ostree 2017.7-2.fc26.x86_64 -> 2017.8-3.fc26.x86_64 > ostree-grub2 2017.7-2.fc26.x86_64 -> 2017.8-3.fc26.x86_64 > ostree-libs 2017.7-2.fc26.x86_64 -> 2017.8-3.fc26.x86_64 This also switches ostree to libcurl (which is why libsoup dropp

Re: [atomic-devel] Fedora Atomic Host Two Week Release Announcement

2017-07-11 Thread Colin Walters
On Tue, Jul 11, 2017, at 12:28 PM, Dusty Mabe wrote: > > We will try to release blogs and documentation over the next few weeks > to show you new features and guide how to upgrade your existing hosts. We have this wiki page for the latter, I've updated it now: https://fedoraproject.org/wiki/Atomic

Re: [atomic-devel] Moving https://github.com/cgwalters/projectatomic-ci-infra into the org

2017-07-05 Thread Colin Walters
On Thu, Jun 22, 2017, at 12:20 PM, Colin Walters wrote: > Hey, > > I propose moving: > https://github.com/cgwalters/projectatomic-ci-infra > into our org, and renaming it to paci. This follows on from the > move of PAPR (formerly redhat-ci) into the org. > >

Re: [atomic-devel] gpg2 warning with gpg verification enabled on atomic host

2017-06-25 Thread Colin Walters
On Sun, Jun 25, 2017, at 07:35 AM, Dusty Mabe wrote: > Saw this today. I was on the serial console so kernel messages were coming to > the console. > Not sure if it is an issue or can safely be ignored. > > [root@localhost ~]# rpm-ostree status > [ 23.266519] gpg2 (1095) used greatest stack

[atomic-devel] Moving https://github.com/cgwalters/projectatomic-ci-infra into the org

2017-06-22 Thread Colin Walters
Hey, I propose moving: https://github.com/cgwalters/projectatomic-ci-infra into our org, and renaming it to paci. This follows on from the move of PAPR (formerly redhat-ci) into the org. See: https://github.com/projectatomic/papr/issues/29#issuecomment-304020880 The main content of this reposit

Re: [atomic-devel] Changing partitioning defaults discussion

2017-06-06 Thread Colin Walters
do this in a different commit with a > commit message that is relevant? I updated the existing commit message, I think the "match Fedora Server" rationale should cover it, right? From 430a8722acd55c93d8794e93c54c992e2c8a7ee7 Mon Sep 17 00:00:00 2001 From: Colin Walters Date: Mon, 5

Re: [atomic-devel] Changing partitioning defaults discussion

2017-06-05 Thread Colin Walters
On Mon, Jun 5, 2017, at 01:58 PM, Dusty Mabe wrote: > > One qualification - we use overlay2 by default, but we are going to be > placing all of /var/lib/docker/ on its own filesystem: > > $ cat /etc/sysconfig/docker-storage-setup > # Edit this file to override any configuration options s

[atomic-devel] Changing partitioning defaults discussion

2017-06-05 Thread Colin Walters
le) So let's do the same thing here as for the QCOW2/AMI, except keep the 40GB number? From ccbe400f0340eda93b7d8f3c052c355dea17aebc Mon Sep 17 00:00:00 2001 From: Colin Walters Date: Mon, 5 Jun 2017 12:46:40 -0400 Subject: [PATCH] Match Fedora Server's partitioning The max size of

Re: [atomic-devel] Thinking about CRI-O and Docker on Atomic Host

2017-06-01 Thread Colin Walters
On Thu, Jun 1, 2017, at 12:00 PM, Clayton Coleman wrote: > oc cluster up will likely continue to use docker for the near future. That makes sense to me - and for that matter from my perspective AH is going to include docker for the near future. But my original goal was to talk about the not-near

[atomic-devel] Thinking about CRI-O and Docker on Atomic Host

2017-06-01 Thread Colin Walters
I've seen some interesting work on CRI-O for Kube/OpenShift. But I'm wondering about what people are thinking the future of docker.service and /usr/bin/docker is (particularly for Atomic Host). The particular intersection with AH is handling container storage; AIUI right now you can't have CRI-O

Re: [atomic-devel] Openshift Origin + CRI-O

2017-05-10 Thread Colin Walters
On Wed, May 10, 2017, at 10:08 AM, Antonio Murdaca wrote: > I've started working on the integration between Openshift Origin and > CRI-O some time ago with nice initial results. Nice work! > For anyone who wants to step in and try out Openshift Origin and CRI-O, I've > created some scripts to se

Re: [atomic-devel] Many new dependencies in f25 updates-testing

2017-04-26 Thread Colin Walters
On Wed, Apr 26, 2017, at 01:31 PM, Daniel Walsh wrote: > On 04/26/2017 01:12 PM, Colin Walters wrote: > > > > On Wed, Apr 26, 2017, at 12:57 PM, Jonathan Lebon wrote: > >> I traced it down to: > >> > >> http://pkgs.fedoraproject

Re: [atomic-devel] Many new dependencies in f25 updates-testing

2017-04-26 Thread Colin Walters
On Wed, Apr 26, 2017, at 12:57 PM, Jonathan Lebon wrote: > I traced it down to: > > http://pkgs.fedoraproject.org/cgit/rpms/atomic.git/commit/?h=f25&id=7d15e4a0be2db29deda4b92a039a041d81bbe205 > http://pkgs.fedoraproject.org/cgit/rpms/atomic.git/commit/?h=f25&id=cb845639e7388bb9aa3b5aef7dabffa34

Re: [atomic-devel] Many new dependencies in f25 updates-testing

2017-04-26 Thread Colin Walters
On Wed, Apr 26, 2017, at 12:04 PM, Dusty Mabe wrote: > > Difference between 25.113 from fedora-atomic/25/x86_64/updates/docker-host > and 25.119 from fedora-atomic/25/x86_64/testing/docker-host introduces > quite a few new deps: > > Upgraded: I suspect one of these... > binutils-2.26.1-1.fc

Re: [atomic-devel] Moving to atomic-workstation

2017-04-25 Thread Colin Walters
On Tue, Apr 25, 2017, at 10:52 AM, Daniel Walsh wrote: > I decided to try out Atomic Workstation as default laptop, and it is > very interesting. If anyone wants more info, see https://fedoraproject.org/wiki/Workstation/AtomicWorkstation => https://lists.fedoraproject.org/archives/list/desk...

Re: [atomic-devel] Storage for system containers

2017-04-25 Thread Colin Walters
On Mon, Apr 24, 2017, at 01:56 PM, Dusty Mabe wrote: > NOTE: please reply-all when responding to this message > > > In Fedora Atomic Host if we use system containers as advertised > we end up using `atomic pull --storage ostree` which by default > throws images into /var/lib/containers/atomic/.

Re: [atomic-devel] Httpd vs. Containers

2017-04-24 Thread Colin Walters
On Mon, Apr 24, 2017, at 02:18 PM, Josh Berkus wrote: > > 1. Is there a *reason* we didn't relocate the HTTPD logs to Journald > when Fedora went Systemd? It impacts performance: https://bugzilla.redhat.com/show_bug.cgi?id=963620

Re: [atomic-devel] firewalld in atomic host

2017-04-21 Thread Colin Walters
On Fri, Apr 21, 2017, at 10:16 AM, Dusty Mabe wrote: > NOTE: if you respond to this message please 'reply-all'. > > I'd like to discuss firewalld on atomic host. I think there here are two cases: AH-as-Kube/OpenShift host: In this I'd turn the conversation around - do Kube/OpenShift want to d

Re: [atomic-devel] Running VMs in Openshift

2017-03-30 Thread Colin Walters
On Thu, Mar 30, 2017, at 03:34 PM, Colin Walters wrote: > On Thu, Mar 30, 2017, at 03:04 PM, Stef Walter wrote: > > After starting a VM in kubevirt, can access the qemu monitor or have > > libvirt access to that VM ... from a container in a kubernetes pod? > > To rephras

Re: [atomic-devel] Running VMs in Openshift

2017-03-30 Thread Colin Walters
On Thu, Mar 30, 2017, at 03:04 PM, Stef Walter wrote: > After starting a VM in kubevirt, can access the qemu monitor or have > libvirt access to that VM ... from a container in a kubernetes pod? To rephrase what Stef is saying: First, this is mostly about using VMs for *testing*. Not running pro

Re: [atomic-devel] using rpm-ostree compose tree no subject

2017-03-23 Thread Colin Walters
On Thu, Mar 23, 2017, at 07:07 AM, Chen Fan wrote: > ... > the logging showing no subject, is it a bug? how can I add any > statement to this commit? See: https://github.com/projectatomic/rpm-ostree/issues/162 TL;DR: we actually haven't really plumbed through a story on making commit mes

[atomic-devel] Status of containerizing docker and https://github.com/projectatomic/atomic-system-containers

2017-03-15 Thread Colin Walters
Hey, Does anyone know what the status of https://github.com/projectatomic/atomic-system-containers is in general, and in particular I'm interested in the "containerized docker" approach. Can someone who knows a bit more about this add e.g. a `README.md` with getting started instructions? I did f

Re: [atomic-devel] Buildah in projectatomic/

2017-03-15 Thread Colin Walters
On Tue, Mar 14, 2017, at 06:56 PM, Josh Berkus wrote: > Folks, > > The Buildah project (https://github.com/nalind/buildah) would like to > move under projectatomic. Now that we have some CI services maintained by people in this org, part of this template should be: - Do you want to use https://

Re: [atomic-devel] 2wk atomic release candidate: 20170314

2017-03-14 Thread Colin Walters
On Tue, Mar 14, 2017, at 10:29 AM, Dusty Mabe wrote: > > We are going to attempt to release the 20170314 images. > These images contain the following ostree version/commit: > > 25.80 > 24d4499420ffb2cc49681020bbe5aa6780d780d2b811eab1f5ffea6446b5a4c5 This commit passed the atomic-host-tests at l

Re: [atomic-devel] Has anyone considered packaging dumb-init or tini for use in Fedora/CentOS/RHEL?

2017-03-07 Thread Colin Walters
On Tue, Mar 7, 2017, at 08:32 AM, Clayton Coleman wrote: > Doesn't work in Kubernetes today. Is there a kube issue for exposing it? I can't find it if so. For reference this came from: https://github.com/docker/docker/pull/26061

Re: [atomic-devel] 2wk atomic release candidate: 20170228

2017-02-28 Thread Colin Walters
On Tue, Feb 28, 2017, at 01:37 AM, Dusty Mabe wrote: > The atomic images are here: ^ Host =) > https://kojipkgs.fedoraproject.org/compose/twoweek/Fedora-Atomic-25-20170228.0/compose/CloudImages/x86_64/images/ Autocloud: https://apps.fedoraproject.org/autocloud/jobs/857 Lo

[atomic-devel] CentOS Atomic Host Devel 7.2017.109

2017-02-16 Thread Colin Walters
The CentOS Atomic Host "Devel" branch, or "CAHC" is a development stream on top of the CentOS Core. More information is available at https://wiki.centos.org/SpecialInterestGroup/Atomic/Devel This is a new release of the "alpha" branch which is a good place to try out newer versions of the atomic/

Re: [atomic-devel] Fedora Atomic 2wk: Release Candidate

2017-01-24 Thread Colin Walters
On Tue, Jan 24, 2017, at 05:32 AM, Dusty Mabe wrote: > The vm images are here: > > https://kojipkgs.fedoraproject.org/compose/twoweek/Fedora-Atomic-25-20170124.1/compose/CloudImages/x86_64/images/ As a reminder, Atomic Host uses rpm-ostree (which uses ostree) for updates, and in the future[1] ho

Re: [atomic-devel] Fedora 26 change: using overlayfs as default

2017-01-05 Thread Colin Walters
On Thu, Jan 5, 2017, at 07:22 PM, Josh Berkus wrote: > Also, performance is MUCH better on PostgreSQL pgbench than devicemapper > is. Like 3X better. You really should not store databases (or any persistent data) in the container's rootfs. Use kubernetes PVs, etc., or for a real pet database, a

Re: [atomic-devel] Fedora 26 change: using overlayfs as default

2016-12-13 Thread Colin Walters
On Tue, Dec 13, 2016, at 12:45 PM, Clayton Coleman wrote: > Are the POSIX issues in applications running on overlay mostly > resolved now? I.e. if we flipped the default would be reasonably able > to support a diverse range of Linux workloads without the risk that > previously existed? overlayf

Re: [atomic-devel] UEFI Fedora atomic partition layout and bootloader install error

2016-12-09 Thread Colin Walters
On Thu, Dec 8, 2016, at 07:25 PM, Vasiliy Tolstov wrote: > 2016-12-09 0:18 GMT+03:00 Josh Berkus : > > Vasiliy, > > > > You can follow the UEFI bug here: > > > > https://pagure.io/atomic-wg/issue/185 There's a patch available for this now. > Thanks, also i have problem on uefi system with my la

Re: [atomic-devel] Changing /etc/localtime with container images

2016-12-08 Thread Colin Walters
On Wed, Dec 7, 2016, at 04:14 PM, Daniel J Walsh wrote: > docker run -ti -v /etc/localtime:/etc/localtime:ro fedora bash One problem with this (and in general, any host <-> container binds) is that one needs to consider format versioning. Right now glibc is on its second version of the timezon

Re: [atomic-devel] systemd broken in fedora 25 atomic

2016-11-28 Thread Colin Walters
On Mon, Nov 28, 2016, at 10:00 AM, Vasiliy Tolstov wrote: > I found hack in pagure.io, and in post process script remove protected > tmp and protected home. After that all works fine. Yeah, we'll carry the hack until systemd upgrades. For reference, this is: https://github.com/systemd/systemd/is

Re: [atomic-devel] recheck local tree against remote

2016-11-22 Thread Colin Walters
On Tue, Nov 22, 2016, at 02:56 AM, Vasiliy Tolstov wrote: > Does it possible to recheck tree against remote, for example i have > local storage that can lost data (ssd/flash/hdd) and want to compare > local objects with remotes (via fingerprint, hash or something like > this). > Does it possible

Re: [atomic-devel] Atomic Host Vagrant box crashes when inserting kernel module

2016-11-21 Thread Colin Walters
On Sat, Nov 19, 2016, at 10:26 PM, Yun-Chih Chen wrote: > I use the Vagrantfile[1] in rpm-ostree to boot up a CentOS 7 > Atomic Host. > The kernel panics when running "rpm-ostree install fuse-sshfs", in the > stage of "Copying /etc changes: xx modified, xx removed, xx added". > It turns out that a

Re: [atomic-devel] CentOS Atomic Host schedule

2016-11-16 Thread Colin Walters
Hi Mark, On Mon, Nov 14, 2016, at 08:27 PM, Mark Dyer wrote: > I'm trying to justify moving our CentOS 6.6 based product to > Atomic Host. > > It looks like Atomic Host on CentOS is currently still in 'alpha'. There are two CentOS streams: - Core: A rebuild of "upstream" EL7 Atomic Host, just l

Re: [atomic-devel] I would like to discuss a new IMAGE label to indicate whether an image is a --system image.

2016-11-08 Thread Colin Walters
On Tue, Nov 8, 2016, at 02:59 PM, Daniel J Walsh wrote: > LABEL org.projectatomic.atomic.type=system Seems OK, though we could also just auto-infer it from the presence of /exports/service.template in the image. Also, I'd vote to deprecate `atomic install` and port users to either package layeri

[atomic-devel] Switching Atomic Host to all locales

2016-10-27 Thread Colin Walters
See this downstream bug: https://bugzilla.redhat.com/show_bug.cgi?id=1186757 What I'm arguing here essentially is that building on the previous change of https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2016-August/msg00054.html Atomic Host should now be thought of more as a *gen

Re: [atomic-devel] How to apply non-atomic tuned profiles to atomic host

2016-10-20 Thread Colin Walters
On Fri, Oct 14, 2016, at 10:22 AM, Jason DeTiberus wrote: > The other issue is that we don't require users to manage their > environments with Ansible, so our temporary modifications would > also need to be documented and implemented separately for non- > Ansible users. I see the point, but the tu

Re: [atomic-devel] We are looking at using OSTree as a backend for sharing file systems into an OCID Container runtime

2016-10-14 Thread Colin Walters
On Fri, Oct 14, 2016, at 02:37 PM, Daniel J Walsh wrote: > If we block the creation of the devices when exploding a OCI Image > Bundle, we end up with something that is different then what is > downloaded and this could potentially cause problems with mtree checking > of the image on disk versus t

Re: [atomic-devel] bubblewrap 0.1.3 (fixes CVE-2016-8659)

2016-10-14 Thread Colin Walters
On Fri, Oct 14, 2016, at 12:53 PM, Colin Walters wrote: > A new release of bubblewrap is available: > > https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.3 ... > So, expect updates to land in: > > - EPEL7 https://bodhi.fedoraproject.org/updates/bubb

[atomic-devel] bubblewrap 0.1.3 (fixes CVE-2016-8659)

2016-10-14 Thread Colin Walters
A new release of bubblewrap is available: https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.3 Which fixes a local privilege escalation. Specifically relevant to Project Atomic, this applies only to CentOS7/RHEL7 systems which have bubblewrap installed as privileged code. Notably, w

[atomic-devel] Atomic Workstation development work

2016-10-13 Thread Colin Walters
Hey, so we've talked about this a lot, and there are now two change pages: https://fedoraproject.org/wiki/Changes/WorkstationOstree This is in Fedora release engineering, and the scope is basically rpm-ostree + flatpak https://fedoraproject.org/wiki/Workstation/AtomicWorkstation But I'd lik

[atomic-devel] CentOS Atomic Host Alpha 7.2016.402

2016-10-13 Thread Colin Walters
Hi, I've tagged a new CentOS Atomic Host Alpha, see: https://wiki.centos.org/SpecialInterestGroup/Atomic/Devel There's a lot happening in the atomic/skopeo components, and this continues to track the latest there, as well as newer ostree/rpm-ostree, which have a few fixes for package layering.

Re: [atomic-devel] How to apply non-atomic tuned profiles to atomic host

2016-10-12 Thread Colin Walters
On Tue, Oct 11, 2016, at 02:45 PM, Jeremy Eder wrote: > Because layered products (not just OpenShift) do not want to be > coupled to the RHEL release schedule to update their profiles. They > want to own their profiles and rely on the tuned daemon to be there. I see two aspects to this discussio

Re: [atomic-devel] rpm-ostree error: Bus owner changed, aborting.

2016-10-11 Thread Colin Walters
On Tue, Oct 11, 2016, at 10:10 AM, Colin Walters wrote: > https://bugzilla.redhat.com/show_bug.cgi?id=1383708 https://bodhi.fedoraproject.org/updates/gnutls-3.5.5-2.fc25

Re: [atomic-devel] How to apply non-atomic tuned profiles to atomic host

2016-10-11 Thread Colin Walters
On Tue, Oct 11, 2016, at 01:36 PM, Jeremy Eder wrote: > Going fwd, I think we would rather not maintain two locations (atomic- > * and atomic-openshift-* tuned profiles with identical content. Yes, agreed. > > So, trying to reason a way to get those profiles onto an AH since we > can't install t

Re: [atomic-devel] rpm-ostree error: Bus owner changed, aborting.

2016-10-11 Thread Colin Walters
On Mon, Oct 10, 2016, at 04:36 PM, Dusty Mabe wrote: > -bash-4.3# rpm-ostree upgrade > Updating from: fedora-atomic:fedora-atomic/25/x86_64/docker-host > error: Bus owner changed, aborting. https://bugzilla.redhat.com/show_bug.cgi?id=1383708

Re: [atomic-devel] is that suitable to run chef-solo/chef-client in treecompose-post ?

2016-09-27 Thread Colin Walters
On Fri, Sep 23, 2016, at 05:44 PM, Vasiliy Tolstov wrote: > I need to do some things - for example, but not full: > > * mask/disable some services > * modify journald.conf > * write sysctl.conf > * create some udev rules > > I don't need to run this again and again in all ostree running servers

Re: [atomic-devel] creating an ostree repo from a running atomic host?

2016-09-23 Thread Colin Walters
On Sun, Sep 18, 2016, at 02:27 PM, Tom McKay wrote: > I'm trying to wrap my head around ostree/rpm-ostree/atomic to think > about how Satellite-6 (and upstream katello) can contribute to the > flow. A couple questions... > First, I see rpm-ostree-toolkit referenced in a lot of places but am > strug

[atomic-devel] rpm-ostree v2016.8

2016-09-14 Thread Colin Walters
Hi, I don't announce every release of rpm-ostree, but this one is notable because the package layering is now marked as stable, and is now known as `rpm-ostree install` or `atomic host install`. A bit more info in the tag: https://github.com/projectatomic/rpm-ostree/releases/tag/v2016.8 (With a

Re: [atomic-devel] move users home to dedicated lv

2016-09-09 Thread Colin Walters
On Fri, Sep 9, 2016, at 06:56 AM, Vasiliy Tolstov wrote: > I have ostree system with /boot and / lv > Now my users home lives on lv / > I create new lv with name home and want to use it to store /home. > Can somebody provide me description what target path i need to use to > move users dir, so it

  1   2   3   >