devel March 2013

devel@lists.fedoraproject.org

280 participants
272 discussions

upgrading RH 9 system->Fedora with iso files and apt only
by Didier Casse 17 Jan '22

17 Jan '22

I have the yarrow's iso files on my HD in a RH9 system. Let's say I want to upgrade selected packages using an "apt-get install" pointing to my iso-mounted files, how do I do it? i.e I mount the iso into some /mnt/yarrow1, /mnt/yarrow 2 etc.. Then what is the complete procedure to make my apt look into my own HD to upgrade packages. Can anybody redirect me to the correct resource or some literature hanging on the web? Thanks. Assume also that I do not wish to burn CDs! I do not want to use apt-cdrom. Thanks. With kind regards, Didier. --- PhD student Singapore Synchrotron Light Source (SSLS) 5 Research Link, Singapore 117603 Email: slsbdfc at nus dot edu dot sg \or\ didierbe at sps dot nus dot edu dot sg Website: http://ssls.nus.edu.sg

6 9

git push permission denied
by Neal Becker 10 Feb '21

10 Feb '21

I just had to setup a new machine, and new ssh keys. I visited https://admin.fedoraproject.org/accounts/user/edit/xxxx I chose my new id_rsa.pub to upload. But I get: git push --verbose Pushing to ssh://nbecker@pkgs.fedoraproject.org/mercurial Permission denied (publickey). fatal: The remote end hung up unexpectedly Hints?

4 5

Expanding the list of "Hardened Packages"
by Dhiru Kholia 22 Jul '14

22 Jul '14

Hi, This proposal was originally at https://fedorahosted.org/fesco/ticket/1104 (mitr asked me to move the discussion to fedora-devel to get more attention and feedback) ... http://fedoraproject.org/wiki/Hardened_Packages page mentions that "FESCo requires some packages to use PIE and relro hardening by default." It would be great if this list could be expanded to include even more packages which are at comparatively more risk of being exploited (locally or remotely). Such packages will typically include various system daemons, network daemons and network enabled applications. Lot of network daemons are already using PIE and RELRO (e.g. httpd, MariaDB). So a natural question is why packages in same "network daemons" class like PostgreSQL, Dovecot and MongoDB aren't being hardened? Some of the ways to implement this proposal are, 1. Hardening flags should be turned on (by default) for all packages which are at comparatively more risk of being exploited or which meet some well-defined criteria (suggestions welcome). "Packaging Guidelines" say that "Other packages may enable the flags at the maintainer's discretion." Thinking from a security perspective, I find "Hardening flags can only be disabled for other packages at the maintainer's discretion provided enough justification is given to FESCo" to be more appropriate. 2. An alternate approach is to come up with an expanded list of packages which should be hardened. Any feedback is welcome! -- Dhiru

39 140

Moving xine-lib and dependent apps to RPM Fusion Free for F17?
by Kevin Kofler 24 Oct '13

24 Oct '13

Hi, the current xine-lib maintainer speaking. :-) The Xine project: http://www.xine-project.org/home has recently released a new major version, version 1.2.0. Unfortunately, among the list of changes: http://sourceforge.net/projects/xine/files/xine-lib/1.2.0/README.txt.asc/vi… there are these new "features": * Use libavutil-provided implementations for CRC, SHA1 and BASE64 algorithms, this makes use of libavutil even outside the FFmpeg decoding plugin, but avoid duplication of algorithms between different plugins. * Use av_mallocz() when xine_xmalloc_aligned() wouldn't be needed. * FFmpeg is now required as an external dependency; if you want to build xine-lib from source, please download a copy of FFmpeg from their SVN server. which basically mean that xine-lib now has a global, non-optional dependency on FFmpeg's libavutil library. So there are 4 possible ways forward: (a) Stick with 1.1.x forever. I don't think that's a good idea in the long run, upstream won't be providing security fixes for the old branch forever. (b) Package libavutil (and only libavutil) from FFmpeg in Fedora. (I don't think libavutil, as opposed to libavcodec, is actually patent-encumbered, though that'd also have to be checked.) The issue there is that FFmpeg upstream obviously doesn't support this. It would need some more black packaging magic of the kind already done in xine-lib, and more legal auditing. I don't think I want to investigate going down that road. (c) Bundle parts or all of libavutil with xine-lib. Yuck!!! (d) Move the whole thing (back) to RPM Fusion (where it originally was, before we started needing xine-lib for Amarok and Phonon, which both no longer use it). It would go to the Free section, of course. My proposal is to go with (d). The following packages currently depend on xine-lib: * gxine * (k9copy – already in RPM Fusion, not affected) * kaffeine (my package, the reason why I maintain xine-lib in the first place) * oxine * xine-plugin * xine-ui These packages would have to move to RPM Fusion along with xine-lib. In Kaffeine's case, upstream is switching from xine-lib to MPlayer in their git repository, so it will likely have to move to RPM Fusion sooner or later anyway. This means the affected packages are basically *xine*. So my plan is to retire (for my packages, resp. have the respective maintainer retire) the listed packages in Fedora for Fedora ≥ 17 and get (or have the respective maintainer get) them into RPM Fusion Free instead. (I'd take care of xine-lib and kaffeine myself, I hope the maintainers of the other packages will take care of them.) Comments? Objections? Kevin Kofler

4 15

Self Introduction
by Peter Hanecak 19 Aug '13

19 Aug '13

Hello, I've been asked by Luya Tshimbalanga <luya(a)fedoraproject.org> to maintain the gimp-separate+ package for official Fedora project so that it can be included in Design Suite Livemedia. Having read some introductory information, I would now like to introduce myself with few short facts: - I'm using Linux (at start Red Hat, later Fedora) since roughly 1997. - To ease the maintenance of my systems, I'm creating RPM packages "just for myself" since 1998 - this one seems to be the oldest one: http://hany.sk/~hany/RPM/doors1/jserv-doc-0.9.11-2.i386.html - I'm supporter of Free and Open Source Software and small-scale contributor, more recently broadening it with participation in Open Data initiatives. - Now, Luya's invite finally pushed me to come closer to the Fedora project. - I'm earning a living by doing software development and related consulting work. - I'm married with two children. I'm looking forward for future cooperation. And I would also like to thank in advance to all which will help me to get through initial stages of first package submission (https://bugzilla.redhat.com/show_bug.cgi?id=913289). Sincerely Peter -- Peter Hanecak <hany(a)hany.sk> http://hany.sk/~hany/ GnuPG: http://hany.sk/~hany/gpg/E4C349E3.txt

2 3

twinkle: Intent to retire
by Kevin Fenzi 12 Aug '13

12 Aug '13

Greetings. I'm the current Fedora maintainer of the twinkle package. Sadly, it's in poor shape: - Segfaults on start in recent fedora versions (depending on config). - Has not had an upstream release in 4+ years. - Has not had any response from upstream maintainer in at least that long. - Uses Qt3 and a complex stack of c++ libraries. - 8 open bugs: https://apps.fedoraproject.org/packages/twinkle/bugs/all Debian removed it last year, Arch moved it to a user repo instead of the main repo last year. So, I am going to retire this package in rawhide soon unless there's folks with a very strong C++ background wishing to fix issues and basically become the new upstream. kevin

11 21

Orphaning Docky
by Lukas Zapletal 01 Aug '13

01 Aug '13

Hello all, although package Docky was lot of work for me (licensing patching etc) I am no longer using it and last two releases were very unstable. There are couple of bugzillas reported mainly because of gconf migration. """ Docky is an advanced shortcut bar that sits at the edges of your screen. It provides easy access to some of the files, folders and applications on your computer, displays which applications are currently running, holds windows in their minimized state and more. Docky is written in mono. http://wiki.go-docky.com """ Please ping me if you are interested to maintain the package. -- Later, Lukas "lzap" Zapletal #katello #systemengine

2 1

Review Sugar Activities
by Danishka Navin 04 Jun '13

04 Jun '13

Hi, I need a help from some who can review packages I have been created and push them to build system. Please note that I do only work with packaging on Sugar Activities and packaged 8 activities so far. https://bugzilla.redhat.com/show_bug.cgi?id=841239 https://bugzilla.redhat.com/show_bug.cgi?id=842107 https://bugzilla.redhat.com/show_bug.cgi?id=842101 Best Regards, -- Danishka Navin http://danishkanavin.blogspot.com http://twitter.com/danishkanavin http://www.flickr.com/photos/danishkanavin/

2 5

appliance-creator: how can I shorten the grub timeout in kickstart?
by Matthew Miller 31 May '13

31 May '13

This perplexing to me. In my %post section, I tried both writing "GRUB_TIMEOUT=0" to /etc/default/grub and using sed to replace "set timeout=5" in grub2.cfg. I even put a call to grub2-mkconfig to re-write the config file after doing those things. But on boot, grub.cfg file always contains timeout=5. Why / how is this happening? I'm using appliance-creator, in case that's doing anything silly. -- Matthew Miller ☁☁☁ Fedora Cloud Architect ☁☁☁ <mattdm(a)fedoraproject.org>

9 34

replacing folders with symlinks leads to rpm cpio rename errors
by Julian Sikorski 28 May '13

28 May '13

Hi list, one of the updates I am preparing is supposed to replace some of the folders with symlinks. Unfortunately, this leads to rpm cpio: rename errors upon an update attempt. Is there a standard way of dealing with this? Regards, Julian

6 10

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

devel March 2013