yajl - call for new maintainer and/or to stop using it

2024-10-02 Thread Daniel P . Berrangé
I've been maintainer of the yajl package in Fedora forever, as it was a dep of libvirt. yajl upstream has been dead since 2015, so the current release tarball has multiple CVEs, which I've patched downstream by grabbing patches from github issue comments from third parties or other distros [1]. I

Re: F42 Change Proposal: Integrate FEX in Fedora Linux (Self-Contained)

2024-09-12 Thread Daniel P . Berrangé
On Thu, Sep 12, 2024 at 04:50:39PM +0100, Aoife Moloney wrote: > == Owner == > * Name: [[User:dcavalca|Davide Cavalca]], [[User:ngompa|Neal Gompa]], > [[User:alyssa|Alyssa Rosenzweig]] > * Responsible Teams: [[SIGs/Asahi|Asahi SIG]], [[SIGs/KDE|KDE SIG]] > * Email: davide(at)cavalca.name, ngompa13(

Re: [SPDX] packages that are "not valid neither as Callaway nor as SPDX"

2024-09-09 Thread Daniel P . Berrangé
On Mon, Sep 09, 2024 at 04:00:57PM +0200, Miroslav Suchý wrote: > Dne 09. 09. 24 v 3:33 odp. Vít Ondruch napsal(a): > > > > Neat. This would allow to slap in some comments, right? E.g: > > > > > > ~~~ > > > > License:    %{shrink: > >     %dnl src/*.* > >     MIT AND

Re: [SPDX] packages that are "not valid neither as Callaway nor as SPDX"

2024-09-06 Thread Daniel P . Berrangé
On Fri, Sep 06, 2024 at 06:52:03AM -0500, Richard Shaw wrote: > I need a class again on how to do this... I remember years ago being told > we should try to come up with what the effective license is, so if the > package has sources that are both GPL--or-later and they have both GPL 2 > and GPL 3 s

Re: [SPDX] packages that are "not valid neither as Callaway nor as SPDX"

2024-09-06 Thread Daniel P . Berrangé
On Fri, Sep 06, 2024 at 10:49:07AM +0200, Miroslav Suchý wrote: > Bellow is list of packages that have licenses that are neither valid as > Callaway nor as SPDX. I.e. the license cannot be validated neither using > 'license-validate' nor using 'license-validate --old'. > > Some examples I checked

Re: How to handle nodejs bundling with native compiled modules ?

2024-09-05 Thread Daniel P . Berrangé
for it. > > As a consequence, there's currently *no good way* to package Node.js > stuff. The bundling exception and `nodejs-packaging-bundler` script > are stop-gap solutions to allow us to package at least something. > Basically any improvements and patches welcome, let me kn

How to handle nodejs bundling with native compiled modules ?

2024-09-04 Thread Daniel P . Berrangé
I'm working on packaging where one component is written in nodejs. The Fedora packaging guidelines are pretty explicit that I should be bundling all the 3rd party nodejs https://docs.fedoraproject.org/en-US/packaging-guidelines/Node.js "You can provide a package that uses nodejs, but you shou

Re: How to contact Fedora Security Team

2024-08-20 Thread Daniel P . Berrangé
On Tue, Aug 20, 2024 at 12:54:52PM +0200, Fabio Valentini wrote: > On Sun, Aug 18, 2024 at 5:23 PM Andrew Bauer > wrote: > > > > Thanks everyone for the great responses. > > > > I'll certainly check out the Matrix room if I have to, but I was hoping I > > could do this in a way that allows me to

Re: flatpak vs pkg-config system libdir

2024-08-01 Thread Daniel P . Berrangé
On Thu, Aug 01, 2024 at 07:09:56AM -0400, Neal Gompa wrote: > On Tue, Jul 9, 2024 at 9:38 AM Daniel P. Berrangé wrote: > > > > There have been a number of PRs[1] opened to workaround problems > > with pkg-config not finding .pc files when dependencies have > > be

Re: Schedule for Tuesday's FESCo Meeting (2024-07-23)

2024-07-31 Thread Daniel P . Berrangé
On Wed, Jul 31, 2024 at 05:21:29PM +0200, Vít Ondruch wrote: > > Dne 31. 07. 24 v 15:12 Stephen Gallagher napsal(a): > > On Wed, Jul 31, 2024 at 5:54 AM Vít Ondruch wrote: > > > > > > Dne 24. 07. 24 v 20:17 Stephen Gallagher napsal(a): > > > > On Wed, Jul 24, 2024 at 1:46 PM Miroslav Suchý > >

Re: F42 Change Proposal: Enable Drm Panic (system-wide)

2024-07-25 Thread Daniel P . Berrangé
On Mon, Jul 15, 2024 at 11:20:27AM +0200, Jocelyn Falempe wrote: > > On 15/07/2024 10:30, Zbigniew Jędrzejewski-Szmek wrote: > > > > There's just so many different and special ways in how people hook up > > console logging from VMs and other systems. Disabling VT_CONSOLE at > > compile time is ha

Re: Schedule for Tuesday's FESCo Meeting (2024-07-23)

2024-07-25 Thread Daniel P . Berrangé
On Wed, Jul 24, 2024 at 07:35:09PM -0500, Michael Catanzaro wrote: > > > On Wed, Jul 24 2024 at 09:41:16 AM -04:00:00, Stephen Smoogen > wrote: > > 1. There are some subset of people who use Fedora because they thought > > it was a privacy focused distribution. Their concerns did not seem to > >

Re: Schedule for Tuesday's FESCo Meeting (2024-07-23)

2024-07-24 Thread Daniel P . Berrangé
On Wed, Jul 24, 2024 at 09:41:16AM -0400, Stephen Smoogen wrote: > That said, I also find this unanimous approval problematic for a > couple of reasons: > > 1. There are some subset of people who use Fedora because they thought > it was a privacy focused distribution. Their concerns did not seem t

Re: Schedule for Tuesday's FESCo Meeting (2024-07-23)

2024-07-24 Thread Daniel P . Berrangé
On Wed, Jul 24, 2024 at 03:27:01AM +0200, Kevin Kofler via devel wrote: > > The big issue with the process is that there is this ground assumption in > Fedora that change is inherently good, and hence any Change should be > approved by default. But IMHO, Fedora used to already be almost perfect, t

Re: Privacy-conscious policy for Fedora Linux [was Re: F42 Change Proposal: Opt-In Metrics for Fedora Workstation (system-wide)]

2024-07-18 Thread Daniel P . Berrangé
On Thu, Jul 18, 2024 at 09:48:21AM +, Zbigniew Jędrzejewski-Szmek wrote: > On Wed, Jul 17, 2024 at 02:13:12PM -0500, Michel Lind wrote: > > On Wed, Jul 17, 2024 at 02:45:31PM -0400, Matthew Miller wrote: > > > On Sun, Jul 14, 2024 at 04:14:03AM +0200, Kevin Kofler via devel wrote: > > > > That

Re: sbin-merge: what to do?

2024-07-16 Thread Daniel P . Berrangé
On Mon, Jul 15, 2024 at 05:07:57PM -0700, Kevin Fenzi wrote: > On Mon, Jul 15, 2024 at 08:23:05AM GMT, Zbigniew Jędrzejewski-Szmek wrote: > > > So… the question now: should I pull the plug on the change for F41, > > dump the side tag, and try again for F42? Or wait for some of the patches > > abov

Re: the sad state of installability tests

2024-07-15 Thread Daniel P . Berrangé
On Mon, Jul 15, 2024 at 11:52:07AM +, Zbigniew Jędrzejewski-Szmek wrote: > On Mon, Jul 15, 2024 at 01:26:09PM +0200, Petr Pisar wrote: > > V Mon, Jul 15, 2024 at 08:45:53AM +, Zbigniew Jędrzejewski-Szmek > > napsal(a): > > > On Mon, Jul 15, 2024 at 10:31:06AM +0200, Petr Pisar wrote: > > >

Re: Sending mail using @fedoraproject.org (SMTP server needed)

2024-07-11 Thread Daniel P . Berrangé
On Thu, Jul 11, 2024 at 03:48:40PM +0200, Remi Collet wrote: > Hi, > > For years, it was possible to send email using a fedoraproject.org address. > > It seems that various ISP now refuse to send mail from an alias outside > of their authority > > Ex: Orange French ISP now only allows @orange.fr

Re: Summary/Minutes from today's FESCo Meeting (2024-07-09)

2024-07-10 Thread Daniel P . Berrangé
On Wed, Jul 10, 2024 at 09:36:35AM -0400, Stephen Gallagher wrote: > I'm guessing Josh's response was an attempt to use AI to generate a > summary. In the future, please label it as such, so people will read > it with a critical eye. It has some flaws which I will address inline: If content is lab

Re: Flaws detected by static analyzers in Fedora 41 Critical Path Packages

2024-07-10 Thread Daniel P . Berrangé
On Wed, Jul 10, 2024 at 11:10:34AM +0200, Siteshwar Vashisht wrote: > On Tue, Jul 9, 2024 at 10:10 PM David Malcolm wrote: > > > On Tue, 2024-07-09 at 13:37 +0200, Siteshwar Vashisht wrote: > > > On Tue, Jul 9, 2024 at 1:16 PM Daniel P. Berrangé > > > > > &

Re: Flaws detected by static analyzers in Fedora 41 Critical Path Packages

2024-07-09 Thread Daniel P . Berrangé
On Tue, Jul 09, 2024 at 04:03:10PM -0400, David Malcolm wrote: > On Tue, 2024-07-09 at 13:37 +0200, Siteshwar Vashisht wrote: > > On Tue, Jul 9, 2024 at 1:16 PM Daniel P. Berrangé > > > > wrote: > > > > > For packages I'm involved in (QEMU, l

flatpak vs pkg-config system libdir

2024-07-09 Thread Daniel P . Berrangé
There have been a number of PRs[1] opened to workaround problems with pkg-config not finding .pc files when dependencies have been built in flatpak context. Normally pkg-config would always find .pc files in any system dirs. ie /usr/local/lib64/pkgconfig /usr/local/share/pkgconfig /usr/lib6

Re: Flaws detected by static analyzers in Fedora 41 Critical Path Packages

2024-07-09 Thread Daniel P . Berrangé
On Sat, Jul 06, 2024 at 02:05:37AM +0200, Siteshwar Vashisht wrote: > Hello, > > I am writing this message to get feedback from the community on possibly > new defects identified by static analyzers in Critical Path Packages that > have changed in Fedora 41. For context, please see my previous ema

Re: F41 Change Proposal: Make OpenSSL distrust SHA-1 signatures by default (system-wide)

2024-07-05 Thread Daniel P . Berrangé
On Fri, Jul 05, 2024 at 02:59:36PM +0200, Clemens Lang wrote: > Hi, > > > On 5. Jul 2024, at 14:49, Daniel P. Berrangé wrote: > > > > On Fri, Jul 05, 2024 at 02:37:41PM +0200, Clemens Lang wrote: > >> > >> > >> Please start addressin

Re: F41 Change Proposal: Make OpenSSL distrust SHA-1 signatures by default (system-wide)

2024-07-05 Thread Daniel P . Berrangé
On Fri, Jul 05, 2024 at 02:37:41PM +0200, Clemens Lang wrote: > Hi, > > > On 5. Jul 2024, at 12:38, Daniel P. Berrangé wrote: > > > > I've (re-)discovered that this change is going to impact on swtpm that is > > used with QEMU to provide a virtual TPM to gues

Re: F41 Change Proposal: Make OpenSSL distrust SHA-1 signatures by default (system-wide)

2024-07-05 Thread Daniel P . Berrangé
On Mon, Jun 10, 2024 at 08:40:22PM +0200, Clemens Lang wrote: > Hi, > > > On 10. Jun 2024, at 20:16, Richard W.M. Jones wrote: > > > > On Mon, Jun 10, 2024 at 01:43:57PM +0200, Vít Ondruch wrote: > >> I wish this proposal included some examples of what might get broken > >> and what will keep wo

Re: %firewalld_reload macro is a bad idea

2024-07-04 Thread Daniel P . Berrangé
On Wed, Jul 03, 2024 at 11:14:56AM -0500, Chris Adams wrote: > I got bit on an EPEL 8 system by upgrading munin-node and losing > networking to my podman containers. I started digging and found that > munin uses the %firewalld_reload macro in %post. Then I dug a little > more and found that there

Re: Fedora & AI Survey Now Live Until July 16th

2024-07-02 Thread Daniel P . Berrangé
On Tue, Jul 02, 2024 at 11:53:22AM -0400, Matthew Miller wrote: > On Tue, Jul 02, 2024 at 09:17:55AM +0100, Daniel P. Berrangé wrote: > > I can't see how this helps understand the Fedora contributor's preferences > > about the use of AI, when the survey is restricting th

Re: Fedora & AI Survey Now Live Until July 16th

2024-07-02 Thread Daniel P . Berrangé
On Mon, Jul 01, 2024 at 08:07:46PM +0100, Aoife Moloney wrote: > DJ & Tom - thank you for that clarification on how to interpret your > ranking, and I can assure you and other folks who feel similar about > answering that question that that is indeed the way we will be analysing > the results - top

Re: [Fedora-legal-list] Re: [SPDX] Mass license change GPLv2 to GPL-2.0-only

2024-06-26 Thread Daniel P . Berrangé
On Wed, Jun 26, 2024 at 02:32:34PM +0200, Miro Hrončok wrote: > On 26. 06. 24 14:17, Miroslav Suchý wrote: > > Dne 26. 06. 24 v 11:47 dop. Miro Hrončok napsal(a): > > > > > > Clearly, I must miss something. What do we gain by causing all > > > license tags to conform to the SPDX license expression

Re: [Fedora-legal-list] Re: [SPDX] Mass license change GPLv2 to GPL-2.0-only

2024-06-26 Thread Daniel P . Berrangé
On Wed, Jun 26, 2024 at 11:47:55AM +0200, Miro Hrončok wrote: > On 26. 06. 24 5:59, Richard Fontana wrote: > > On Tue, Jun 25, 2024 at 7:20 PM Miro Hrončok wrote: > > > > > > On 25. 06. 24 22:50, Miroslav Suchý wrote: > > > > Dne 25. 06. 24 v 1:09 odp. Miro Hrončok napsal(a): > > > > > > > > > >

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Daniel P . Berrangé
On Mon, Jun 24, 2024 at 01:33:52PM -0400, Stephen Gallagher wrote: > On Mon, Jun 24, 2024 at 1:30 PM Daniel P. Berrangé > wrote: > > > > On Mon, Jun 24, 2024 at 05:11:07PM +, Mattia Verga via devel wrote: > > > > > > Messaggio originale &

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Daniel P . Berrangé
On Mon, Jun 24, 2024 at 05:11:07PM +, Mattia Verga via devel wrote: > > Messaggio originale > 24/06/24 18:21, Kevin Fenzi ha scritto: > > > > > I personally don't see why entering a otp once a week is such a > > burden... but it does seem to be. ;( > > > > Once a wee

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-20 Thread Daniel P . Berrangé
On Thu, Jun 20, 2024 at 10:51:56AM -0400, Stephen Gallagher wrote: > On Thu, Jun 20, 2024 at 10:49 AM Daniel P. Berrangé > wrote: > > > > On Thu, Jun 20, 2024 at 03:24:18PM +0100, Tom Hughes via devel wrote: > > > On 20/06/2024 15:03, Stephen Gallagher wrote: > >

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-20 Thread Daniel P . Berrangé
On Thu, Jun 20, 2024 at 03:24:18PM +0100, Tom Hughes via devel wrote: > On 20/06/2024 15:03, Stephen Gallagher wrote: > > > Honestly, I'd like to pitch that we retarget Fedora at x86_64-v3 (yes, > > three) and recommend creation of a Fedora "Hardware Life Extension" > > Remix that can provide rebu

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Daniel P . Berrangé
On Wed, Jun 19, 2024 at 02:45:33PM +, Zbigniew Jędrzejewski-Szmek wrote: > On Mon, Jun 17, 2024 at 12:44:53PM +0100, Aoife Moloney wrote: > > What we're doing this time is using mokutil to create a key for the > > user to self-sign the drivers. When installing the drivers, the user > > is asked

Re: Orphaned NVML

2024-06-19 Thread Daniel P . Berrangé
On Wed, Jun 19, 2024 at 12:23:51PM -0300, Emanuel Lima wrote: > I orphaned NVML as Intel discontinued Optane ( > https://pmem.io/announcements/2023/customer-letter-march-2023/) and I'm > having trouble finding the time to maintain the package. The question that > remains is whether QEMU still depen

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Daniel P . Berrangé
On Wed, Jun 19, 2024 at 02:30:20PM +0200, Vitaly Zaitsev via devel wrote: > On 19/06/2024 13:10, Daniel P. Berrangé wrote: > > Should this be a system-wide change, rather than self-contained > > change ? While the implementation is in gnome-software, since this > > is semi-aut

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Daniel P . Berrangé
On Mon, Jun 17, 2024 at 12:44:53PM +0100, Aoife Moloney wrote: > Wiki - https://fedoraproject.org/wiki/Changes/NvidiaInstallationWithSecureboot > Discussion Thread - > https://discussion.fedoraproject.org/t/f41-change-proposal-nvidia-driver-installation-with-secure-boot-support-self-contained/12033

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Daniel P . Berrangé
On Mon, Jun 17, 2024 at 07:37:15AM -0500, Chris Adams wrote: > Once upon a time, Daniel P. Berrangé said: > > I think I've convinced upstream to change their approach to make their > > recent changes a compile-time opt-in, to allow build time choice of the > > non-o

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-17 Thread Daniel P . Berrangé
On Mon, Jun 17, 2024 at 08:24:40AM +0100, Richard W.M. Jones wrote: > On Wed, Jun 12, 2024 at 03:07:02PM +0100, Daniel P. Berrangé wrote: > > On Wed, Jun 12, 2024 at 09:59:25AM -0400, Stephen Gallagher wrote: > > > On Wed, Jun 12, 2024 at 9:55 AM Daniel P. Berr

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-12 Thread Daniel P . Berrangé
On Wed, Jun 12, 2024 at 11:50:00AM -0400, Ben Cotton wrote: > On Wed, Jun 12, 2024 at 8:41 AM Daniel P. Berrangé > wrote: > > > > The context is that QEMU has recently merged changes upstream that force > > use of the x86-64-v2 baseline for QEMU, in order get more effic

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-12 Thread Daniel P . Berrangé
On Wed, Jun 12, 2024 at 10:05:13AM -0400, Ben Beasley wrote: > This never made it to the packaging guidelines, but FESCo made a relevant > decision a few years ago: > > Libraries packaged in Fedora may require ISA extensions, however any > packaged application must not crash on any officially supp

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-12 Thread Daniel P . Berrangé
On Wed, Jun 12, 2024 at 09:59:25AM -0400, Stephen Gallagher wrote: > On Wed, Jun 12, 2024 at 9:55 AM Daniel P. Berrangé > wrote: > > > > On Wed, Jun 12, 2024 at 09:51:34AM -0400, Stephen Gallagher wrote: > > > On Wed, Jun 12, 2024 at 8:41 AM Daniel P. Berrangé &

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-12 Thread Daniel P . Berrangé
On Wed, Jun 12, 2024 at 09:51:34AM -0400, Stephen Gallagher wrote: > On Wed, Jun 12, 2024 at 8:41 AM Daniel P. Berrangé > wrote: > > IOW, if [when] we rebase Fedora to the next QEMU upstream release, users > > with older x86_64 hardware would likely be unable to run QEMU, fr

Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-12 Thread Daniel P . Berrangé
There have been various change proposals & associated mailing list threads over the years about the possibility of moving Fedora compiler toolchain to build with a newer x86_64 baseline ABI, which have ended up rejected, with some quite strong negative feedback. Regardless of the Fedora general po

Re: F41 Change Proposal: Anaconda as native Wayland application (System Wide)

2024-06-12 Thread Daniel P . Berrangé
On Tue, Jun 11, 2024 at 01:52:19PM +0100, Sérgio Basto wrote: > On Tue, 2024-06-04 at 14:26 +0200, Jiri Konecny wrote: > > You should be able to install from Live ISO which we are not > > modifying > > (depends on environment set by SIG owners). However, we won't support > > X11 together with Wayl

Re: Macros stored in a separate file

2024-06-10 Thread Daniel P . Berrangé
On Mon, Jun 10, 2024 at 08:35:36AM -0700, Adam Williamson wrote: > On Mon, 2024-06-10 at 16:38 +0200, Vít Ondruch wrote: > > Dne 10. 06. 24 v 16:24 Daniel P. Berrangé napsal(a): > > > On Mon, Jun 10, 2024 at 04:18:14PM +0200, Miroslav Suchý wrote: > > > > Lately, I n

Re: Macros stored in a separate file

2024-06-10 Thread Daniel P . Berrangé
On Mon, Jun 10, 2024 at 04:18:14PM +0200, Miroslav Suchý wrote: > Lately, I noticed that several SPEC files in Fedora use this syntax: > > Source:        macros.vlc > > And this file defines macros that are loaded by rpmbuild during buildtime and > are used in the SPEC file. > > This makes pars

Re: rpm-4.20 and __debug_install_post

2024-06-04 Thread Daniel P . Berrangé
On Tue, Jun 04, 2024 at 08:40:15AM +0200, Sandro Mani wrote: > Hi > > In rpm 4.20 as currently available in rawhide, defining __debug_install_post > seems to have no effect. The %mingw_package_header sets __debug_install_post > as follows > > %mingw_package_header 

Re: New Fedora Planet

2024-05-17 Thread Daniel P . Berrangé
On Thu, May 16, 2024 at 05:16:17PM -0300, Pedro Moura wrote: > Hi everyone, > > We are moving Fedora Planet from the old (python2) software running on > fedorapeople.org to a new application that is running in OpenShift. > This new application uses information from the Fedora Account System to > f

Re: GIMP 3.0 in F41?

2024-05-13 Thread Daniel P . Berrangé
On Mon, May 13, 2024 at 12:38:06PM +0200, Fabio Valentini wrote: > On Mon, May 13, 2024, 12:34 Daniel P. Berrangé wrote: > > > On Mon, May 13, 2024 at 12:14:14PM +0200, Fabio Valentini wrote: > > > On Mon, May 13, 2024, 11:50 Dominik 'Rathann' Mierzejewski < &

Re: GIMP 3.0 in F41?

2024-05-13 Thread Daniel P . Berrangé
On Mon, May 13, 2024 at 12:14:14PM +0200, Fabio Valentini wrote: > On Mon, May 13, 2024, 11:50 Dominik 'Rathann' Mierzejewski < > domi...@greysector.net> wrote: > > > On Monday, 13 May 2024 at 01:00, Neal Gompa wrote: > > > On Sun, May 12, 2024 at 4:59 PM Sérgio Basto wrote: > > > > > > > > > > >

Re: Enabling RPM based sysuser handling

2024-05-13 Thread Daniel P . Berrangé
On Fri, May 10, 2024 at 01:28:07PM +0200, Florian Festi wrote: > Hi everyone! > > RPM 4.19 added automatic sysuser handling [1]. In Fedora 39 this feature > was not enabled right away [2] as it requires some care to properly > transition to it. Also going back to 4.18 was technically still the > f

Re: Spec file using github repo - not tarball

2024-05-09 Thread Daniel P . Berrangé
On Thu, May 09, 2024 at 11:21:11AM -0400, Nico Kadel-Garcia wrote: > On Wed, May 8, 2024 at 4:36 PM Kenneth Goldman wrote: > > > > Is it possible for a .spec file to clone a github.com repo rather than > > download a tarball? Can someone link to a working example? > > Git clones are bulky, with

calendar.fp.o pointing to obsolete IRC for meetings

2024-05-03 Thread Daniel P . Berrangé
Somehow the news that various (some ? all? ) Fedora meetings have moved off IRC, to Matrix passed me by. This is not helped by the official project meeting calendar: https://calendar.fedoraproject.org/ which continues to mislead people who want to attend, by publishing libera.chat IRC as the v

Re: [HEADS-UP] openexr so name bump heading Rawhide and f40

2024-04-24 Thread Daniel P . Berrangé
On Wed, Apr 24, 2024 at 01:05:08PM +, Gary Buhrmaster wrote: > On Mon, Apr 22, 2024 at 12:15 PM Josef Řídký wrote: > > > > Hi folks, > > > > this is in advance notice about the upcoming rebase of the openexr package > > in Fedora Rawhide and f40. > > > > I note that there is a patent clause

Re: [HEADS-UP] openexr so name bump heading Rawhide and f40

2024-04-24 Thread Daniel P . Berrangé
On Wed, Apr 24, 2024 at 03:48:28PM +0200, Josef Řídký wrote: > As the mentioned patent clause is there for 10+ years I might just believe > it went through Fedora Legal, as it is a much older legal related task than > I am co-maintainer of the openexr itself. > > But I am fine with having conversa

Re: Fedora RISC-V port needs to put shared objects into /usr/lib64/lp64d

2024-04-19 Thread Daniel P . Berrangé
On Fri, Apr 19, 2024 at 02:21:57PM +0200, Florian Weimer wrote: > There are multiple PRs and patches floating around that make RISC-V use > the /usr/lib64 directory, like other 64-bit ports. However, RISC-V > recommends to use /usr/lib64/lp64d for the Fedora ABI variant, and > various upstream pro

Re: Three steps we could take to make supply chain attacks a bit harder

2024-03-31 Thread Daniel P . Berrangé
On Sat, Mar 30, 2024 at 09:37:44AM +, Richard W.M. Jones wrote: > I'm not pretending these will solve everything, but they should make > attacks a little harder in future. > > > (1) We should routinely delete autoconf-generated cruft from upstream > projects and regenerate it in %prep. It is

Re: Three steps we could take to make supply chain attacks a bit harder

2024-03-31 Thread Daniel P . Berrangé
On Sun, Mar 31, 2024 at 01:58:21AM -0700, Adam Williamson wrote: > On Sat, 2024-03-30 at 09:37 +, Richard W.M. Jones wrote: > > I'm not pretending these will solve everything, but they should make > > attacks a little harder in future. > > I don't disagree with Richard's list. However...more i

Re: F41 Change Proposal: Disable openSSL Engine Support (system-wide)

2024-03-20 Thread Daniel P . Berrangé
On Wed, Mar 20, 2024 at 03:27:34PM +0100, Petr Pisar wrote: > V Wed, Mar 20, 2024 at 02:05:52PM +0000, Daniel P. Berrangé napsal(a): > > Consider you've built your own app on Fedora 39 that uses these > > symbols, and now upgrade to F40. RPM will consider the dependency > &g

Re: F41 Change Proposal: Disable openSSL Engine Support (system-wide)

2024-03-20 Thread Daniel P . Berrangé
On Wed, Mar 20, 2024 at 02:35:21PM +0100, Dmitry Belyavskiy wrote: > Dear Daniel, > > On Wed, Mar 20, 2024 at 1:44 PM Daniel P. Berrangé > wrote: > > > On Fri, Mar 08, 2024 at 08:37:19PM +, Aoife Moloney wrote: > > > Wiki - https://fedoraproject.or

Re: F41 Change Proposal: Disable openSSL Engine Support (system-wide)

2024-03-20 Thread Daniel P . Berrangé
On Fri, Mar 08, 2024 at 08:37:19PM +, Aoife Moloney wrote: > Wiki - https://fedoraproject.org/wiki/Changes/OpensslNoEngine > > This is a proposed Change for Fedora Linux. > This document represents a proposed Change. As part of the Changes > process, proposals are publicly announced in order t

Re: Why can't I add karlowich as co-maintainer of this package?

2024-03-18 Thread Daniel P . Berrangé
On Mon, Mar 18, 2024 at 09:57:58AM +, Richard W.M. Jones wrote: > > https://src.fedoraproject.org/rpms/xnvme/adduser > > I try to add karlowich (https://accounts.fedoraproject.org/user/karlowich/) > but his name doesn't appear in the username field even though he's > in the packager group. W

Re: dmesg restricted to root in Rawhide

2024-02-28 Thread Daniel P . Berrangé
On Wed, Feb 28, 2024 at 10:30:10AM +, Richard W.M. Jones wrote: > On Wed, Feb 28, 2024 at 11:24:41AM +0100, Karel Zak wrote: > > On Tue, Feb 27, 2024 at 08:15:49PM +, Richard W.M. Jones wrote: > > > > > > https://gitlab.com/cki-project/kernel-ark/-/commit/ed5ba266c61e01a52359b5793a627e7c9a

Re: dmesg restricted to root in Rawhide

2024-02-28 Thread Daniel P . Berrangé
On Tue, Feb 27, 2024 at 08:15:49PM +, Richard W.M. Jones wrote: > > https://gitlab.com/cki-project/kernel-ark/-/commit/ed5ba266c61e01a52359b5793a627e7c9aae8854 > > Why wasn't this a Fedora change proposal? > > Also the justification given for such a major change is very thin. > I'm sure prod

Re: Fw: [Bug 2066129] mingw-libgsf-1_14_52 is available

2024-02-16 Thread Daniel P . Berrangé
On Fri, Feb 09, 2024 at 11:12:42PM -0600, Greg Hellings wrote: > Looks like I'm not allowed to retire on the f39 branch. It was already > retired in Rawhide before I could get there. > > $ fedpkg retire "MinGW support merged to native package in Fedora 39 > release" > Fedora release (f39) is in st

Re: Fw: [Bug 2066129] mingw-libgsf-1_14_52 is available

2024-02-06 Thread Daniel P . Berrangé
On Tue, Feb 06, 2024 at 08:27:33AM -0600, Greg Hellings wrote: > I'm happy to pass the project off to whomever needs it, if you give me the > user name and a quick reference. Or retire it, if you have a link with > instructions on how to do that. It should not require more than the first step in

Re: Fw: [Bug 2066129] mingw-libgsf-1_14_52 is available

2024-02-05 Thread Daniel P . Berrangé
On Mon, Feb 05, 2024 at 05:34:06PM +0100, Dan Horák wrote: > Hi, > > could someone in the mingw team look at mingw-libgsf / libgsf (please > see the bug forwarded below)? If I see right, then the standalone > mingw-libgsf package should be retired as there are mingw builds from > the regular libgs

Re: Figure out what killed an app (rhbz#2253099)

2024-01-31 Thread Daniel P . Berrangé
On Wed, Jan 31, 2024 at 11:06:02AM +, Tom Hughes via devel wrote: > On 31/01/2024 10:08, Milan Crha wrote: > > > I tried to investigate a rawhide bug: > > https://bugzilla.redhat.com/show_bug.cgi?id=2253099 > > which is about Evolution being killed "by something". That's the thing, > > I do no

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-01-30 Thread Daniel P . Berrangé
On Tue, Jan 30, 2024 at 08:38:51AM -0500, Stephen Gallagher wrote: > On Tue, Jan 30, 2024 at 8:07 AM Richard W.M. Jones wrote: > > > > On Tue, Jan 30, 2024 at 12:47:44PM +, Sérgio Basto wrote: > > > Link to the FESCo ticket: https://pagure.io/fesco/issue/3165 > > > > > > and I'm very upset sn

Re: A reminder: you cannot just "revert" package version bumps

2024-01-30 Thread Daniel P . Berrangé
On Mon, Jan 29, 2024 at 03:43:39PM -0800, Adam Williamson wrote: > nirik ran a script that checks for versioning issues in Rawhide today, and > it found several: https://pagure.io/releng/issue/11922#comment-893797 > > Some of these followed a pattern, so I figured a reminder was in order. In > all

Re: Build error with GCC 14, not even a warning in GCC 13

2024-01-16 Thread Daniel P . Berrangé
On Tue, Jan 16, 2024 at 11:54:48PM +, Tom Hughes via devel wrote: > On 16/01/2024 23:49, Richard Shaw wrote: > > On Tue, Jan 16, 2024 at 5:36 PM Aleksei Bavshin > > mailto:aleba...@fedoraproject.org>> wrote: > > > > Ah, I misread the include path. It's our package that is too old :( > >

Re: Obsoleting zlib in Fedora Rawhide

2024-01-09 Thread Daniel P . Berrangé
On Mon, Dec 04, 2023 at 04:10:18PM -0300, Tulio Magno Quites Machado Filho wrote: > Following the recent approval from Fesco, I'm planning to distribute > zlib-ng-compat packages for Rawhide later this week. > I hope this will give us enough time to work on the issues before > Fedora 40 is releas

Re: Change of cronie and crontabs CIS compliance

2023-12-06 Thread Daniel P . Berrangé
On Wed, Dec 06, 2023 at 11:16:44AM +0100, Ondrej Pohorelsky wrote: > Hi everyone, > > For F40 I would like to change file permissions of few files that are > provided by cronie and crontabs and swap deny list for allow list. I'm not > really sure if I should make a change proposal. I figured I'll

Re: Change of cronie and crontabs CIS compliance

2023-12-06 Thread Daniel P . Berrangé
On Wed, Dec 06, 2023 at 11:53:26AM +, Tom Hughes via devel wrote: > On 06/12/2023 11:08, Ondrej Pohorelsky wrote: > > > The only difference is that if you have populated the cron.deny list, > > after update it gets saved as .rpmsave and cron.allow is created. > > If the cron.deny is blank, it

Re: Change of cronie and crontabs CIS compliance

2023-12-06 Thread Daniel P . Berrangé
On Wed, Dec 06, 2023 at 12:39:02PM +0100, Fabio Valentini wrote: > On Wed, Dec 6, 2023 at 11:17 AM Ondrej Pohorelsky wrote: > > > > Hi everyone, > > > > For F40 I would like to change file permissions of few files that are > > provided by cronie and crontabs and swap deny list for allow list. I'm

Re: F40 Change Proposal: Unified Kernel Support Phase Two (System-Wide)

2023-12-06 Thread Daniel P . Berrangé
On Tue, Dec 05, 2023 at 04:14:00PM -0500, Neal Gompa wrote: > On Tue, Dec 5, 2023 at 3:47 PM Aoife Moloney wrote: > > > > This document represents a proposed Change. As part of the Changes > > process, proposals are publicly announced in order to receive > > community feedback. This proposal will

Re: Update on the Modern C initiative

2023-12-05 Thread Daniel P . Berrangé
On Sat, Dec 02, 2023 at 05:42:11PM +0100, Florian Weimer wrote: > * Vít Ondruch: > > > Dne 01. 12. 23 v 11:40 Milan Crha napsal(a): > >> On Thu, 2023-11-30 at 18:09 +0100, Florian Weimer wrote: > >>> Again, some of these are false positives. > >>Hi, > >> I think the errors from the configure t

Re: Proven to be sickened

2023-12-05 Thread Daniel P . Berrangé
On Tue, Dec 05, 2023 at 11:18:57AM +0100, Vít Ondruch wrote: [snip] > Granted, these are dissimilar to initial Michaels's issue. But how can I be > sure that if I touch some of the packages, I won't be told that they were in > such state for purpose? IMHO all changes should be opened as merge re

Re: libxml2 2.12.0 (and 2.12.1) in rawhide, with some API breaks

2023-11-27 Thread Daniel P . Berrangé
On Mon, Nov 27, 2023 at 04:20:16PM +0100, Fabio Valentini wrote: > On Fri, Nov 24, 2023 at 12:08 PM David King wrote: > > > > The latest released versions of libxml2 have a couple of important > > changes in header files that have unintentionally caused some packages > > to fail to build without m

Re: libxml2 2.12.0 (and 2.12.1) in rawhide, with some API breaks

2023-11-27 Thread Daniel P . Berrangé
On Mon, Nov 27, 2023 at 02:23:51PM +0100, Frederic Berat wrote: > On Fri, Nov 24, 2023 at 12:07 PM David King wrote: > > > The latest released versions of libxml2 have a couple of important > > changes in header files that have unintentionally caused some packages > > to fail to build without mod

Re: Summary/Minutes from today's FESCo Meeting (2023-11-09)

2023-11-16 Thread Daniel P . Berrangé
On Thu, Nov 16, 2023 at 01:39:14PM +0100, Kevin Kofler via devel wrote: > Fabio Valentini wrote: > > There's a difference between *claiming* LSB compliance (what you refer > > to as backwards compatibility ?) and actually *achieving* it. > > Claiming it (the thing we objected to) without achieving

Re: Making -Wmissing-include-dirs an error?

2023-11-13 Thread Daniel P . Berrangé
On Tue, Oct 10, 2023 at 12:16:55PM +0100, Ian McInerney via devel wrote: > On Tue, Oct 10, 2023 at 11:59 AM Neal Gompa wrote: > > > Hey all, > > > > Recently, one of the folks working on packaging stuff in Fedora KDE > > nearly missed an issue caused by GCC emitting a warning about missing > > in

Re: F40 Change Proposal: Linker Error on Security Issues (System-Wide)

2023-11-13 Thread Daniel P . Berrangé
On Mon, Nov 13, 2023 at 11:07:19AM +, Aoife Moloney wrote: > == Scope == > * Proposal owners: > Enable the 'error_for_executable_stacks' and 'error_for_rwx_segments' > optional features in the binutils.spec file and then rebuild the > binutils. > > Following that a system wide rebuild will be

Re: [Fedora-legal-list] SPDX short name for "Redistributable, no modification permitted" (firmware)

2023-10-16 Thread Daniel P . Berrangé
On Sun, Oct 15, 2023 at 03:02:34PM -0400, Richard Fontana wrote: > On Sun, Oct 15, 2023 at 5:13 AM Robert-André Mauchin > wrote: > > > > Hi, > > > > I'm doing a MR on an old package that contains firmware data. > > > > I wanna convert to SPDX, what is the equivalent to "Redistributable, no > > m

Re: Getting package NEVR list from core dump ?

2023-10-13 Thread Daniel P . Berrangé
On Fri, Oct 13, 2023 at 03:10:45PM +0200, František Šumšal wrote: > Hey > > On 10/13/23 09:41, Daniel P. Berrangé wrote: > > Not too long ago Fedora added a new ELF note with the NEVR information for > > a package, to all shared libraries > > > >https

Getting package NEVR list from core dump ?

2023-10-13 Thread Daniel P . Berrangé
Not too long ago Fedora added a new ELF note with the NEVR information for a package, to all shared libraries https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects For cores dumped by processes on my local system, coredumpctl extracts the package info which is great. Lets s

Re: An update on RHEL moving to issues.redhat.com

2023-09-18 Thread Daniel P . Berrangé
On Mon, Sep 18, 2023 at 09:57:28AM +0200, Petr Pisar wrote: > V Fri, Sep 15, 2023 at 01:27:23PM -0400, Colin Walters napsal(a): > > To state the blindingly obvious thing, RHEL made a decision to centralize on > > Gitlab. Having Fedora be on pagure creates IMO unnecessary friction for me. > > I wou

Re: Automate your Fedora package maintenance using Packit

2023-09-15 Thread Daniel P . Berrangé
On Fri, Sep 15, 2023 at 04:02:04PM +0200, Frantisek Lachman wrote: > Thanks Dan and Daniel for the responses. You both are right. For our > defence, this is always setup by an existing Fedora user (=human). > > I can't speak of rel-eng (and honestly don't know) how problematic > this "physical rem

Re: Automate your Fedora package maintenance using Packit

2023-09-15 Thread Daniel P . Berrangé
On Fri, Sep 15, 2023 at 03:13:58PM +0200, Frantisek Lachman wrote: > Hi Petr, > > we would like to avoid storing the archive in the lookaside cache before > approving but the problem is that the CI on the PR (mainly the scratch > build) does not work without the archive being in the lookaside cach

Re: KDE and GNOME Join Hands To Add Payments To Turn Flathub Into a Store for the Linux Desktop

2023-09-01 Thread Daniel P . Berrangé
On Wed, Aug 30, 2023 at 10:18:50PM -, Ryan Bach via devel wrote: > It would be nice for Redhat to monetize the Desktop. What do you guys think? IMHO talking about Red Hat needing to monetize the desktop is missing the point of this. There are 1000's of OSS projects that will never be interesti

Re: KDE and GNOME Join Hands To Add Payments To Turn Flathub Into a Store for the Linux Desktop

2023-09-01 Thread Daniel P . Berrangé
On Fri, Sep 01, 2023 at 08:35:54AM -0400, JT wrote: > That looks like it's just a proposal by some random people that KDE and > GNOME should to work together. I've not seen a statement by either > desktop. the file referenced is literally under a directory called > "proposals". and I've never hear

Re: zlib-ng as a compat replacement for zlib

2023-09-01 Thread Daniel P . Berrangé
On Fri, Sep 01, 2023 at 11:03:54AM +0100, Richard W.M. Jones wrote: > On Fri, Sep 01, 2023 at 10:55:50AM +0100, Daniel P. Berrangé wrote: > > On Fri, Sep 01, 2023 at 10:42:16AM +0100, Richard W.M. Jones wrote: > > > On Fri, Sep 01, 2023 at 10:48:14AM +0200, Kevin Wolf wrote: >

Re: zlib-ng as a compat replacement for zlib

2023-09-01 Thread Daniel P . Berrangé
On Fri, Sep 01, 2023 at 10:42:16AM +0100, Richard W.M. Jones wrote: > On Fri, Sep 01, 2023 at 10:48:14AM +0200, Kevin Wolf wrote: > > Am 31.08.2023 um 11:20 hat Richard W.M. Jones geschrieben: > > > On Thu, Aug 31, 2023 at 11:05:55AM +0200, Kevin Wolf wrote: > > > > [ Cc: qemu-block ] > > > > > >

Re: Why does mingw-filesystem depend on mingw-binutils-generic?

2023-08-30 Thread Daniel P . Berrangé
On Wed, Aug 30, 2023 at 10:39:44AM +0100, Richard W.M. Jones wrote: > On Wed, Aug 30, 2023 at 10:36:26AM +0200, Sandro Mani wrote: > > Hi > > > > I'd say, as least as it stands now, this is because the dependency > > generators require mingw-objdump, see mingw.req [1]. > > > > Sandro > > > > [1]

Re: Request to review a MinGW subpackges in libsodium

2023-08-21 Thread Daniel P . Berrangé
On Mon, Aug 21, 2023 at 03:17:21PM +0200, Marián Konček wrote: > I opened a PR adding mingw subpackages to libsodium according to my best > knowledge (which is not too large related to mingw packaging): > https://src.fedoraproject.org/rpms/libsodium/pull-request/3 > > I talked with the maintainer

Re: Removal of Modular repos broke upgrades to Fedora 39: What now?

2023-08-04 Thread Daniel P . Berrangé
On Fri, Aug 04, 2023 at 12:25:34PM +0100, Adam Williamson wrote: > On Fri, 2023-08-04 at 12:16 +0100, Daniel P. Berrangé wrote: > > > > > > It looks like the public 'rawhide' location *does* still have a Modular > > > tree: > > > > > >

Re: Removal of Modular repos broke upgrades to Fedora 39: What now?

2023-08-04 Thread Daniel P . Berrangé
On Fri, Aug 04, 2023 at 11:42:07AM +0100, Adam Williamson wrote: > On Fri, 2023-08-04 at 12:16 +0200, Miro Hrončok wrote: > > Hello folks, > > > > With the retirement of modularity, the modular dnf repositories for Fedora > > 39 > > no longer exist. However, this will introduce a problem during

  1   2   3   4   5   6   7   >