desktop April 2014

desktop@lists.fedoraproject.org

42 participants
26 discussions

Introduction, Documenting Workstation
by Pete Travis 17 Jul '14

17 Jul '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I'm acquainted with many of you already, but an introduction seems fitting anyway. I've been involved with the project for a few years now, primarily on the Docs team but also some light packaging and lately light infrastructure things. I live in Montana, US, where the population density is almost as low as the temperature. I work for a small government agency doing user and systems support. Why should you care? Well, the Docs team reached a decision this last weekend to proactively work with the Product WGs to assess documentation needs. I volunteered to liaison with the Workstation team. As we approach the release cycle, I'd like everyone to keep documentation in mind and the discussion open about not only implementation, but how to represent that implementation to the users. An undocumented feature isn't featured :) I'm looking forward to working with everyone, perhaps saying hello at the next meeting - there are meetings, right? - and developing a presentation of the Workstation Product that shows off the capabilities and character of your work. - -- - -- Pete Travis - Fedora Docs Project Leader - 'randomuser' on freenode - immanetize(a)fedoraproject.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTNW1PAAoJEL1wZM0+jj2Zos4H/37WaPQMRumzi766cXv6x3mb ADJuFmZ+mZwosTynurCAKG5p8PczOHKhRrZNslf9nFNx4dczc94QJFlO7hPOq3Mr WOzkSn6pUXppukAd6UxX7qAjtrNomYCM8kDlmyK+ArZmVbo78O2IppeSwZk4R/tJ ILnktcYl4sXJjlOrA28X5uiZ0dvreuZPBT+UsiDZHVvFBQfaYqjUKIioW/R4wQYp FoFvLbXe2XCn609LuHl0TcEP9DIwd2ShKROqw2fhXXSPe4jWWwkm0+FktwEKAt46 DqKBpIZeeIIZfiKXRPS6CCGNOULboepDKj+7RfqmtrjUIqdPQZ4ZP+Hdr1vSC3M= =G3EO -----END PGP SIGNATURE-----

2 2

Workstation status and TODOs
by Josh Boyer 07 Jul '14

07 Jul '14

Hi All, We have just less than 3 months before the F21 Alpha change deadline comes. That means that now is the time to get going in earnest on making sure we have all the things we want lined up for the initial release of Workstation done. Matthias and Christian have done a great job of getting us started, and have gotten some major Changes approved. The GNOME 3.12 rebase was accepted, and the enabling of SCLs should go over fairly well once the questions are addressed. So what is left? Off the top of my head I can think of: 1) Getting the kickstart for Workstation cleaned up with the appropriate package lists (I'd be willing to get this rolling) 2) Integrating KDE into the above in whatever form we work out with the KDE team 3) KDE variant of Adwaita theme 4) Firewall/firewalld integration issues 5) Installation and compose methods work with rel-eng (live image default, but install tree necessary for compose. PXE/netboot iso? etc) I'm sure I'm missing a few things here. Please chime in with what I'm forgetting. In short, there's more than enough work to go around. Lastly, we've been rather quiet as a WG as of late. The Cloud WG is going through a confirmation process with their members to make sure people are still interested and willing to do work. That's not a bad idea for ourselves. WG members, please take the time to reply with whether or not you wish to remain a WG member. As an aside, much of the "heavy lifting" in terms of process is done for this release. The PRD and Tech Specs have been approved, and the initial round of Changes are submitted. Not being overly familiar with the underlying code in much of the DE stacks, my participation has been limited mostly to those kinds of process things. I think we still have some discussions to have on process and interactions with other groups, but I thought I would double check that the WG feels I'm doing a decent job representing them in this capacity. I'm happy to continue to pitch in where I can, but if the WG feels they'd be better served by someone else as the FESCo liaison, please speak up. josh

6 9

Desktop and FirewallD
by Christian Schaller 06 Jun '14

06 Jun '14

Hi everyone, So in response to the ongoing discussion about Firewall functionality and the desktop we had a call at the end of last week with some representatives from both the desktop and firewall development teams, trying to figure out a good compromise and a way forward. I hope people can take the time to look over the ideas we discussed and let us know if you think it is a workable solution. On the call was: Thomas Woerner Matthias Clasen Bastien Nocera Daniel Kopecek Jiri Popelka Peter Vrabec We had a wide ranging discussion going from what is doable in the Fedora 21 timeframe to what we want from a firewall solution in the long run, what the setup is like on other operating systems, the tradeoffs between security and usability, API and adoption, ease of sharing versus unintended sharing and different corner cases where the different models might break down a bit. We all agreed on the following core principles * We want users to be as secure as possible * We want users to have their privacy protected as well as possible * We want users to have a good experience using our products * We want users to be able to use services such as DLNA, Chromecast, Avahi and more without having to search on Google, and more often than not be told that the fix is to disable the firewall. * We all agree that there is no perfect solutions on offer here. Just a range of different tradeoffs. A system with a running firewall isn't secure nor is a system without a firewall insecure. Instead they exist on a continium of 'more secure' and 'less secure'. The challenges seen: * With the current default a lot of services don't work out of the box because the firewall silently blocks them * There doesn't seem to be any non-expensive way for the system to detect that a service is running and being blocked by the firwall. * There is very limited use of the firewalld API for doing things like port unlocking and similar due to it being a predominately Fedora and RHEL only solution currently * Some application developers who do look into using the current API find the API hard to use * The current NetworkManager UI to change zones is both maybe a bit hidden away and also the Zones options listed there are not intuitive or documented in the UI. Plans for Fedora 21 * The Desktop team will look into creating a UI that asks you when you connect to a new wireless network if you consider it trusted or not. Exact wording of the question and look of dialog etc. will need to be worked out. This setting will be remembered for that network. If user say trusted the zone used will be 'trusted', if not trusted then current default will be used. Should be simple enough to not confuse users, yet improve their security on public networks. * Other connection types will keep the current default which sucks a bit for your home ethernet, but we don't currently have a good way to identify your ethernet connection and popping up a dialog every time you connect is probably a worse user experience than having to google a bit. Matthias started a prototype of this already here: https://bugzilla.gnome.org/show_bug.cgi?id=727580 Long term plans * Work with NetworkManager team to see if we can come up with a way to identify ethernet connections in a similar manner * Look into proposing a new DBUS API for firewalld * We will keep talking to see if there are more granular approaches that can be developed as we go forward. For many cases the trusted/untrusted question is a bit to simple. For instance you probably trust your work network, but that doesn't mean you want to share your beach vacation photos on the office network. * Look into using the zones descriptions somehow in the NetworkManager Zone setting UI to make it a bit more understanable than just a list of names. FirewallD team will work on making the descriptions internationalizable. Matthias filed two bugs related to this: https://bugzilla.redhat.com/show_bug.cgi?id=1091067 split off zone configuration in subpackages https://bugzilla.redhat.com/show_bug.cgi?id=1091068 overprotected api

7 6

Fedora.next Product Branding
by Ryan Lerch 23 May '14

23 May '14

*This is sent with my Fedora Design Team hat on* With the creation of 3 products for Fedora, the Fedora Design Team anticipates manynewquestions aroundFedora'sbrand. As the main caretakers of the Fedora brand, weare going to have to figure these things out within the next few months. For example, the Design Team is starting to think about how to answer these types of questions: • Should each product have its own logo? or • Can you add our product to the Fedora website? or • Can you make our product its own website? (How should we represent these products on the website? Should we allow products to have their own separate websites?) To start off the rebranding discussion, the Fedora Design Teamhas4 basic questions for each of the 3 product-focused working groups to answer: (1) What problem does your product solve, in one sentence? (2) Who is the target audience for your product, in one sentence? (3) List at least 5 products that successfully target the same target audience you are after. (4) List at least 5 products that try to solve the same problem. We are reaching out to each group individually to ask that you discuss these questions and come back to us with answers by Wednesday, December 4th2013. cheers, ryanlerch

5 8

Initial WS live image kickstart files
by Josh Boyer 06 May '14

06 May '14

Hi All, Below are the initial kickstart files I have for the Workstation live image. They started as copies of the existing Desktop files, and added some of the packages we need like the QT and devassistant things. I've composed a live image (1.2G) with them and it boots succesfully if you disable SELinux (there's a bug filed for that). How does this look as a start? The installed package list is also below. josh --- fedora-live-workstation.ks | 65 +++++++++++++++++++++++++++++++++++++++ fedora-workstation-packages.ks | 70 ++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 135 insertions(+) create mode 100644 fedora-live-workstation.ks create mode 100644 fedora-workstation-packages.ks diff --git a/fedora-live-workstation.ks b/fedora-live-workstation.ks new file mode 100644 index 0000000..8951d44 --- /dev/null +++ b/fedora-live-workstation.ks @@ -0,0 +1,65 @@ +# Maintained by the Fedora Workstation WG: +# http://fedoraproject.org/wiki/Workstation +# mailto:desktop@lists.fedoraproject.org + +%include fedora-live-base.ks +%include fedora-workstation-packages.ks + +part / --size 6144 + +%post +cat >> /etc/rc.d/init.d/livesys << EOF + + +# disable updates plugin +cat >> /usr/share/glib-2.0/schemas/org.gnome.settings-daemon.plugins.updates.gschema.override << FOE +[org.gnome.settings-daemon.plugins.updates] +active=false +FOE + +# don't run gnome-initial-setup +mkdir ~liveuser/.config +touch ~liveuser/.config/gnome-initial-setup-done + +# make the installer show up +if [ -f /usr/share/applications/liveinst.desktop ]; then + # Show harddisk install in shell dash + sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop "" + # need to move it to anaconda.desktop to make shell happy + mv /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.desktop + + cat >> /usr/share/glib-2.0/schemas/org.gnome.shell.gschema.override << FOE +[org.gnome.shell] +favorite-apps=['firefox.desktop', 'evolution.desktop', 'empathy.desktop', 'rhythmbox.desktop', 'shotwell.desktop', 'libreoffice-writer.desktop', 'nautilus.desktop', 'gnome-documents.desktop', 'anaconda.desktop'] +FOE + + # Make the welcome screen show up + if [ -f /usr/share/anaconda/gnome/fedora-welcome.desktop ]; then + mkdir -p ~liveuser/.config/autostart + cp /usr/share/anaconda/gnome/fedora-welcome.desktop /usr/share/applications/ + cp /usr/share/anaconda/gnome/fedora-welcome.desktop ~liveuser/.config/autostart/ + fi +fi + +# rebuild schema cache with any overrides we installed +glib-compile-schemas /usr/share/glib-2.0/schemas + +# set up auto-login +cat > /etc/gdm/custom.conf << FOE +[daemon] +AutomaticLoginEnable=True +AutomaticLogin=liveuser +FOE + +# Turn off PackageKit-command-not-found while uninstalled +if [ -f /etc/PackageKit/CommandNotFound.conf ]; then + sed -i -e 's/^SoftwareSourceSearch=true/SoftwareSourceSearch=false/' /etc/PackageKit/CommandNotFound.conf +fi + +# make sure to set the right permissions and selinux contexts +chown -R liveuser:liveuser /home/liveuser/ +restorecon -R /home/liveuser/ + +EOF + +%end diff --git a/fedora-workstation-packages.ks b/fedora-workstation-packages.ks new file mode 100644 index 0000000..4464d29 --- /dev/null +++ b/fedora-workstation-packages.ks @@ -0,0 +1,70 @@ +%packages +@firefox +@gnome-desktop +@libreoffice + +#QT +qt +qt-settings +qt-x11 +qt5-qtbase +qt5-qtbase-gui +qt5-qtdeclarative +qt5-qtxmlpatterns + +devassistant + +# FIXME; apparently the glibc maintainers dislike this, but it got put into the +# desktop image at some point. We won't touch this one for now. +nss-mdns + +# This one needs to be kicked out of @standard +-smartmontools + +# We use gnome-control-center's printer and input sources panels instead +-system-config-printer +-im-chooser + +-aisleriot +-baobab +-biosdevname +-coolkey +-deja-dup +-dtc +-dump +-ed +-finger +-ftp +-gc +-gfs2-utils +-gnu-free-fonts-common +-gnu-free-mono-fonts +-gnu-free-sans-fonts +-gnu-free-serif-fonts +-gtk2-immodule-xim +-gtk3-immodule-xim +-gtkmm24 +-guile +-imsettings +-imsettings-gsettings +-imsettings-libs +-irda-utils +-irqbalance +-isdn4k-utils +-kernel-modules-extra +-lftp +-linux-atm +-minicom +-nano +-ntsysv +-numactl +-reiserfs-utils +-rsh +-tagsoup +-talk +-telnet +-uboot-tools +-xl2tpd +-NetworkManager-l2tp + +%end -- 1.9.0

2 3

clarification on "Workstation: Enable Software Collections" change proposal
by Matthew Miller 29 Apr '14

29 Apr '14

Matthias, or anyone else who worked on this: FESCo had some questions about the change proposal https://fedoraproject.org/wiki/Changes/Workstation_Enable_Software_Collecti… Specifically: * is this just "add scl-utils" to the default install, or is the scope greater than that? * particularly, does this mean enabling repositories from softwarecollections.org (either by default, by user opt-in, or through devassistant in some way) * if it is meant to be a larger scope but not meant to include softwarecollections.org directly, does the inclusion of a few SCLs (like Ruby -- see https://fedorahosted.org/fesco/ticket/1296) cover that, or is there something even more? Thanks! -- Matthew Miller -- Fedora Project -- <mattdm(a)fedoraproject.org> "Tepid change for the somewhat better!"

1 0

Current package list for the Workstation product
by Florian Weimer 29 Apr '14

29 Apr '14

What's the current package list for the Workstation product? The list at <https://fedoraproject.org/wiki/Workstation/Technical_Specification> is outdated because gdm-libs is no longer part of rawhide. Is there a CI repository/image I can install to see what the product is like at present, and what the configuration settings are? -- Florian Weimer / Red Hat Product Security Team

4 4

Default font configuration doesn't look right on Fedora...
by Alex G.S. 24 Apr '14

24 Apr '14

Recently, well actually a few months ago, I filed a bug regarding the default font configuration on Fedora installs. The default font configuration just looks wrong and leads to browser font rendering in both Firefox and Chrome that looks radically different from what it normally looks like on Windows and Mac OS. Ubuntu manages to do this correctly and I actually had to copy their font configuration to get things to look right. This is a really annoying manual configuration step I really shouldn't have to do with something as polished as Fedora. This issue is critical because the web-browser is where we spend 90% of our time and is the most important graphical application on any modern system and the font-config should be properly set to optimize that experience. Steps to fix this problem: 1. Install 'freetype-freeworld' from RPMFusion for LCD filtering. 2. Copy Ubuntu's font configs to '/etc/fonts/conf.d' 3. Enable RGB sub-pixel in the desktop environment font configuration. Please take a look at the bug for more details. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1036220 So this leads to a few questions about how this is setup: A) What is the scope of desktop environment based font-configuration? Basically if I enable and configure this from the GNOME or KDE system settings shouldn't it apply to all applications even the browser? If the desktop environment fails to set the proper font anti-aliasing in the browser is this a bug specific to that environment? Are there applications that for technical reasons are separate from the desktop environment such as Google Chrome that uses it's own font rendering engine? B) Since the patents have expired shouldn't freetype-freeworld be included by default? C) Shouldn't system-wide font-config be controllable from a simple 'system-config-fonts' program? Ideally a solution to this is to create a small application that runs in the terminal that allows the user to set the system-wide font-config. This way users don't have to manually edit the '/etc/fonts/conf.d' files. In the short-term this should provide some relief. Thanks.

8 18

technical spec for the workstation up for review
by Matthias Clasen 23 Apr '14

23 Apr '14

I've spent quite a bit of time last week on this document: https://fedoraproject.org/wiki/Workstation/Technical_Specification It is not 100% complete, but I haven't found the time to get back to it since Friday, so I should probably open it up for a first round of review to the other WG member. Let me know what you think, Matthias

19 65

Deliverables and release engineering changes for Fedora.Next
by Jaroslav Reznik 23 Apr '14

23 Apr '14

Hi! As it seems, Fedora.Next and product planning leads also to changes how Fedora is produced and how it's going to be distributed to our users. For this, we need to collect product deliverables, so needed changes for release engineering can be planned (and implemented) and as I was talking to Dennis, we're are currently blocked on it. I created rel-eng ticket - WGs, please, try to sum up required changes there (in consumable way), so we have it in one place (for possible overlaps in requirements etc). https://fedorahosted.org/rel-eng/ticket/5891 Currently, Alpha Change Deadline is planned for no earlier than 2014-07-22, it's not as far as it sounds, especially if changes in releng are needed. So let's try to work this out as soon as possible. I suppose, in the end, FESCo should approve requested changes in product deliverables. So once requirements are collected, I'll create (yet another) ticket for FESCo. Or even better - as Cloud did - Change proposal would be the best solution, even after the submission deadline. (Sorry for cross-posting;-). Thanks Jaroslav

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

desktop April 2014