devel-announce September 2017

devel-announce@lists.fedoraproject.org

2 participants
10 discussions

Fedora 27 Beta status is GO, release on October 03, 2017
by Jan Kurik 28 Sep '17

28 Sep '17

The Fedora 27 Beta 1.5 compose [1] is considered as GOLD and is going to be shipped live on Tuesday, October 3rd, 2017. For more information please check the Go/No-Go meeting minutes [2] or logs [3]. I would like to thank all the people who were and are still working on this release. [1] http://dl.fedoraproject.org/pub/alt/stage/27_Beta-1.5/ [2] https://meetbot.fedoraproject.org/fedora-meeting-1/2017-09-28/f27-beta-go-n… [3] https://meetbot.fedoraproject.org/fedora-meeting-1/2017-09-28/f27-beta-go-n… Regards, Jan -- Jan Kuřík Platform & Fedora Program Manager Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic

1 0

F28 System Wide Change: Annobin
by Jan Kurik 27 Sep '17

27 Sep '17

= Proposed System Wide Change: Annobin = https://fedoraproject.org/wiki/Changes/Annobin Change owner(s): * Nick Clifton <nickc AT redhat DOT com> This change causes extra information to be stored in binary files compiled by gcc. This information can be used by scripts to check on various features of the file, such as the hardening options used of potential ABI conflicts. == Detailed Description == The plan is to use a plugin to gcc to record extra information in the object files it creates. This information can then be examined by static analysis tools. The information is recorded in a compact, extensible format, described here: https://fedoraproject.org/wiki/Toolchain/Watermark The Fedora annobin package is an implementation of the plugin for gcc. It also includes some example scripts that demonstrate how the recorded information can be used to, for example, check that an executable has been compiled with the correct hardening options, or detect if any conflicting ABI options have been used when compiling various parts of the executable. To enable this change it is proposed that the redhat-rpm-config package should be extended to add the "-fplugin=annobin" option to the __global_compiler-flags macro. In theory such a change will be completely invisible to Fedora users but should prove to be very helpful to Fedora Release Management, assuming that they like the idea of these annotated binaries. == Scope == * Proposal owners: Make sure the annobin plugin is ready. * Other developers: An update is needed to the redhat-rpm-config package in order for the plugin to be invoked when gcc is used to compile programs, and to add a dependency upon the annobin package. * Release engineering: https://pagure.io/releng/issue/7069 - Coordination with release engineering is needed. - A mass rebuild will be required. * List of deliverables: All delivered images are affected, however there no changes to the list it self. * Policies and guidelines: No updates needed * Trademark approval: N/A (not needed for this Change) -- Jan Kuřík Platform & Fedora Program Manager Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic

1 0

Fwd: Removal of dependencies on net-tools
by James Hogarth 26 Sep '17

26 Sep '17

Hi, So net-tools has been deprecated a long time at this point with numerous known issues - especially as we enter an IPv6 world. There was an initial discussion a few months back as can be reviewed here: https://lists.fedoraproject.org/archives/list/devel@lists.fe doraproject.org/thread/OATM2PQLRKNUW54CQRZ33WUNS6WZMPVL/ FESCo agreed with the goal of removing the distributions dependency on net-tools a couple of months ago: https://pagure.io/fesco/issue/1711 In accordance with the mass bug filing process the packages that are affected have been located with `dnf repoquery --all --alldeps --whatrequires net-tools` and the list of maintainers/packagers affected are at the end. I'll be filing the tracker bug in due course and bugs against the packages in question. I'm going to go through as best I can to check for the reason for the dependency on each, but naturally I only have so much time. If you are able to swiftly remove the dependency yourself, or if there is a good reason for it, please actively close the bugs opened - or reach out to me to do so. I'm already knee deep in facter which is a complex update to remove the requirement as new dependency packages are introduced to get to the current version without the requirement. If you're unsure how to port a net-tools related script to one using the iproute2 utilities please do let me know and I'll be happy to help move them over. For those who aren't currently packagers that would like to help - remember that the new Pagure based interface to our git does support pull requests :) For any changes that are made to packages, please just include them in Rawhide to be a part of F28 and leave the F27 branch and packages at the current versions they are. If it's going to make a change to the user experience please file (or ping me and I'll do so on your behalf whilst managing this process overall) a Self Contained Change for Fedora 28. Regards, James Maintainers by package: WALinuxAgent cottsay beakerlib afri sopos chkrootkit limb cloud-init adimania apevec gholms larsks shardy skottler ctdb facter gchamoul kanarip lzap rrati skottler stahnma gnome-nettool alexl caolanm group::gnome-sig johnp kalev mbarnes rhughes rnorwood rstrode ssp iodine hubbitus lystor mariadb hhorak jstanek mbayer mkocka mmuzila mschorm mediatomb limb open-vm-tools ravindrakumar rjones slaanesh openslp rdieter vcrhonek openwsman gunnersrini praveenp vcrhonek peervpn jcholast pki-core edewata kwright mharmsen vakwetu psad rathann recap bharper carlwgeorge redhat-lsb ovasik pnemade resource-agents beekhof cfeist dvossel lon oalbrigt synce-connector awjb systemtap brolley drsmith2 fche jistone lberk mjw nathans scox smakarov wcohen testcloud group::qa-tools-sig mkrizek tflink tunir kushal wicd dcantrel wifi-radar robyduck wlassistant spot x2goserver orion Packages by maintainer: adimania cloud-init afri beakerlib alexl gnome-nettool apevec cloud-init awjb synce-connector beekhof resource-agents bharper recap brolley systemtap caolanm gnome-nettool carlwgeorge recap cfeist resource-agents cottsay WALinuxAgent dcantrel wicd drsmith2 systemtap dvossel resource-agents edewata pki-core fche systemtap gchamoul facter gholms cloud-init group::gnome-sig gnome-nettool group::qa-tools-sig testcloud gunnersrini openwsman hhorak mariadb hubbitus iodine jcholast peervpn jistone systemtap johnp gnome-nettool jstanek mariadb kalev gnome-nettool kanarip facter kushal tunir kwright pki-core larsks cloud-init lberk systemtap limb chkrootkit mediatomb lon resource-agents lystor iodine lzap facter mbarnes gnome-nettool mbayer mariadb mharmsen pki-core mjw systemtap mkocka mariadb mkrizek testcloud mmuzila mariadb mschorm mariadb nathans systemtap oalbrigt resource-agents orion x2goserver ovasik redhat-lsb pnemade redhat-lsb praveenp openwsman rathann psad ravindrakumar open-vm-tools rdieter openslp rhughes gnome-nettool rjones open-vm-tools rnorwood gnome-nettool robyduck wifi-radar rrati facter rstrode gnome-nettool scox systemtap shardy cloud-init skottler cloud-init facter slaanesh open-vm-tools smakarov systemtap sopos beakerlib spot wlassistant ssp gnome-nettool stahnma facter tflink testcloud vakwetu pki-core vcrhonek openslp openwsman wcohen systemtap

1 0

Fedora 27 Beta status is NO-GO
by Jan Kurik 21 Sep '17

21 Sep '17

Release status of the Fedora 27 Beta is NO-GO. The next Go/No-Go meeting is planned on Thursday, Sep 28th. The Beta release slips for one week. All further milestones will move out 1 week also. For more information please check the minutes from the second round of F27 Beta Go/No-Go meeting [1][2]. [1] https://meetbot.fedoraproject.org/fedora-meeting-1/2017-09-21/f27-beta-go-n… [2] https://meetbot.fedoraproject.org/fedora-meeting-1/2017-09-21/f27-beta-go-n… Regards, Jan -- Jan Kuřík Platform & Fedora Program Manager Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic

1 0

Fedora 27 Beta status is NO-GO
by Jan Kurik 14 Sep '17

14 Sep '17

Release status of the Fedora 27 Beta is NO-GO. The next Go/No-Go meeting is planned on Thursday, Sep 21st. The Beta release slips for one week however due to “Rain date feature” we are not going to slip the Final GA yet. For more information please check the F27 Beta Readiness meeting minutes [1][2] and/or F27 Beta Go/No-Go minutes [3][4]. [1] https://meetbot.fedoraproject.org/fedora-meeting-2/2017-09-14/f27-beta-read… [2] https://meetbot.fedoraproject.org/fedora-meeting-2/2017-09-14/f27-beta-read… [3] https://meetbot.fedoraproject.org/fedora-meeting-2/2017-09-14/f27-beta-go-n… [4] https://meetbot.fedoraproject.org/fedora-meeting-2/2017-09-14/f27-beta-go-n… Regards, Jan -- Jan Kuřík Platform & Fedora Program Manager Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic

1 0

F28 System Wide Change: Deprecate TCP wrappers
by Jan Kurik 13 Sep '17

13 Sep '17

= Proposed System Wide Change: Deprecate TCP wrappers = https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers Change owner(s): * Jakub Jelen <jjelen AT redhat DOT com > TCP wrappers is a simple tool to block incoming connection on application level. This was very useful 20 years ago, when there were no firewalls in Linux. This is not the case for today and connection filtering should be done in network level or completely in application scope if it makes sense. After recent discussions I believe it is time to go for this package, if not completely, than at least as a dependency of modern daemons in system by default. == Detailed Description == Last version of tcp_wrappers was released 20 years ago (with later addition of IPv6 support). At that time, it was very powerful tool to "block all traffic", but these days we can do the same thing using firewalls/iptables/nftables for all traffic on network level or similar filtering exists in most of the applications. One of the motivating factors for this change was removal of TCP wrappers support from systemd and openssh in 2014, based on the thread on fedora devel list [1]. I started another thread during 2017 [2] which is trying to explain the reasons why we should do that with other constructive ideas. Another factor which has driven the deprecation of this package is the lack of any upstream community around it. Although the threats on networking communications increase, the threat coverage of this package has remained the same the last two decades, suggesting that new threats are now being handled on different components. [1] https://lists.fedoraproject.org/pipermail/devel/2014-March/196913.html [2] https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org… == Scope == * Proposal owners: Deprecate tcp_wrappers in Fedora, remove dependency on other pacakges maintained and notify other maintainers to follow the same procedure. * Other developers: Remove dependency of your software on tcp_wrappers * Release engineering: https://pagure.io/releng/issues/7029 List of deliverables: Not affected Policies and guidelines: If package will not be retired, update packaging guidelines to NOT RECOMMEND building against tcp_wrappers Trademark approval: N/A (not needed for this Change) -- Jan Kuřík Platform & Fedora Program Manager Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic

1 0

Fedora 27 Beta Go/No-Go Meeting on Thursday, September 14 @ 17:00 UTC
by Jan Kurik 07 Sep '17

07 Sep '17

Join us on irc.freenode.net in #fedora-meeting-2 for this important meeting, wherein we shall determine the readiness of the Fedora 27 Beta. The meeting is going to be held on Thursday, Sep 14, 2017 at 17:00 UTC. Please check the [1] link for your time zone. Before each public release Development, QA and Release Engineering meet to determine if the release criteria are met for a particular release. This meeting is called the Go/No-Go Meeting. Verifying that the Release criteria are met is the responsibility of the QA Team. Release Candidate (RC) availability and good QA coverage are prerequisites for the Go/No-Go meeting. If you have any bug on the list, please help us with Beta release. If we won't be ready by Thursday, we will use this meeting to review blockers and decide what to do. In the meantime, please keep also an eye on the Fedora 27 Beta Blocker list [2]. For more details about this meeting please follow the [3] link. [1] https://apps.fedoraproject.org/calendar/meeting/6448/ [2] http://qa.fedoraproject.org/blockerbugs/milestone/27/beta/buglist [3] https://fedoraproject.org/wiki/Go_No_Go_Meeting Thank you in advance for your support. Regards, Jan -- Jan Kuřík Platform & Fedora Program Manager Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic

1 0

Fedora 27 Beta Release Readiness Meeting on Thursday, September 14 @ 19:00 UTC
by Jan Kurik 07 Sep '17

07 Sep '17

Join us on irc.freenode.net in #fedora-meeting-2 for the Fedora 27 Beta Release Readiness Meeting meeting. The meeting is going to be held on Thursday, Sep 14, 2017 at 19:00 UTC. Please check the [1] link for your time zone. We will meet to make sure we are coordinated and ready for the Beta release of Fedora 27. Please note that this meeting is going to be held even if the release is delayed at the Go/No-Go meeting on the same day two hours earlier. You may received this message several times, but it is by purpose to open this meeting to the teams and to raise awareness, so hopefully more team representatives will come to this meeting. This meeting works best when we have representatives from all of the teams. For more information please check the [2] link. [1] https://apps.fedoraproject.org/calendar/meeting/6447/ [2] https://fedoraproject.org/wiki/Release_Readiness_Meetings Thank you for your support, Regards, Jan -- Jan Kuřík Platform & Fedora Program Manager Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic

1 0

F28 Self Contained Change: MinGW MiniDebugInfo
by Jan Kurik 05 Sep '17

05 Sep '17

= Proposed Self Contained Change: MinGW MiniDebugInfo = https://fedoraproject.org/wiki/Changes/MingwMiniDebugInfo Change owner(s): * Sandro Mani <manisandro AT gmail DOT com> Analogously to the MiniDebugInfo change [1] for native packages, install minimal debuginfos by default also for MinGW packages. == Detailed Description == Currently the debuginfo data of MinGW binaries is completely stripped from the binary and placed in the respective .debuginfo file. This change proposes keeping the PE symbols in the binary, similarly to what was done for native binaries [1]. The change basically involves changing mingw-find-debuginfo.sh as follows: diff --git a/mingw-filesystem/mingw-find-debuginfo.sh b/mingw-filesystem/mingw-find-debuginfo.sh index de6dee1..261385f 100755 --- a/mingw-filesystem/mingw-find-debuginfo.sh +++ b/mingw-filesystem/mingw-find-debuginfo.sh @@ -25,7 +25,10 @@ do echo extracting debug info from $f mingw-objcopy --only-keep-debug $f $f.debug || : pushd `dirname $f` - mingw-objcopy --add-gnu-debuglink=`basename $f.debug` --strip-unneeded `basename $f` || : + keep_symbols=`mktemp` + mingw-nm $f.debug --format=sysv --defined-only | awk -F \| '{ if ($4 ~ "Function") print $1 }' | sort > "$keep_symbols" + mingw-objcopy --add-gnu-debuglink=`basename $f.debug` --strip-unneeded `basename $f` --keep-symbols="$keep_symbols" || : + rm -f "$keep_symbols" popd done A test with some packages in this COPR repo [2] shows that the price is a size increase of in average 17%: == Scope == * Proposal owners: - Change mingw-binutils toalso install a generic mingw-nm, which will be used by mingw-find-debuginfo.sh - Change mingw-find-debuginfo.sh as outlined above - Rebuild all mingw packages * Other developers: N/A (not a System Wide Change) * Release engineering: #7005 https://pagure.io/releng/issue/7005 * List of deliverables: N/A (not a System Wide Change) * Policies and guidelines: N/A (not a System Wide Change) * Trademark approval: N/A (not needed for this Change) [1] https://fedoraproject.org/wiki/Features/MiniDebugInfo [2] https://copr.fedorainfracloud.org/coprs/smani/mingw-debuginfo-test/builds/ -- Jan Kuřík Platform & Fedora Program Manager Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic

1 0

Fedora 27 Change Checkpoint: 100% Code Complete Deadline & Beta Freeze
by Jan Kurik 05 Sep '17

05 Sep '17

Today, on 2017-Sep-05, we reach two important milestones of the Fedora 27 release [1]: == Change Checkpoint: 100% Code Complete Deadline [2] == * New accepted changes must be code complete, meaning all the code required to enable a new Change is finished. * The level of code completeness is reflected in tracker bug as state "ON_QA". The change does not have to be fully tested by this deadline. == Beta Freeze [3] == Only packages fixing a bug approved as Accepted Blocker or Freeze Exception [4] will be marked as 'stable' and included in Beta composes. Other builds will remain in updates-testing until the Beta release is approved, at which point the Beta Freeze is lifted and packages can move to 'stable' as usual until the Final Freeze. [1] https://fedoraproject.org/wiki/Releases/27/Schedule [2] https://fedoraproject.org/wiki/Changes/Policy [3] https://fedoraproject.org/wiki/Milestone_freezes [4] https://qa.fedoraproject.org/blockerbugs/milestone/27/beta/buglist Regards, Jan -- Jan Kuřík Platform & Fedora Program Manager Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

devel-announce September 2017