golang April 2016

golang@lists.fedoraproject.org

7 participants
217 discussions

[Bug 1264699] New: kubernetes do not respect tpmfiles.d policu
by Red Hat Bugzilla 29 Jun '16

29 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1264699 Bug ID: 1264699 Summary: kubernetes do not respect tpmfiles.d policu Product: Fedora Version: 22 Component: kubernetes Assignee: jchaloup(a)redhat.com Reporter: mscherer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org, jcajka(a)redhat.com, jchaloup(a)redhat.com, lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com Description of problem: /run/kubernetes is listed as unowned. ] That's against policy: https://fedoraproject.org/wiki/Packaging:Tmpfiles.d Version-Release number of selected component (if applicable): kubernetes-1.1.0-0.5.gite44c8e6.fc22.x86_64 How reproducible: each time Steps to Reproduce: 1. install kubernetes 2. verify with rpm -qf Actual results: # rpm -qf /run/kubernetes/ file /run/kubernetes is not owned by any package Expected results: file is owned, and with the right permission. Additional info: This also mean that something create /run/kubernetes/ owned as root:root, which prevent kubernetes-apiserver from starting: Sep 20 14:01:15 gluster2 kube-apiserver[17759]: E0920 14:01:15.230961 17759 server.go:485] Unable to listen for secure (open /var/run/kubernetes/apiserver.crt: no such file or directory); will try again. And likely linked to http://ask.projectatomic.io/en/question/199/missing-apiservercrt-unable-to-… Here is a trivial patch to add that. -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1269449] New: Summary for kubernetes-devel package should be more informative
by Red Hat Bugzilla 29 Jun '16

29 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1269449 Bug ID: 1269449 Summary: Summary for kubernetes-devel package should be more informative Product: Fedora Version: rawhide Component: kubernetes Severity: low Assignee: jchaloup(a)redhat.com Reporter: kumarpraveen.nitdgp(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org, jcajka(a)redhat.com, jchaloup(a)redhat.com, lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com Description of problem: Currently if you check kubernetes-devel package summary section which directly inherit from master package and not much informative till user check description section. Version-Release number of selected component (if applicable): N/A How reproducible: N/A Actual results: Summary : Container cluster management Expected results: (something like below, wording can be changed) Summary : Libraries to build packages which use GoogleCloudPlatform/kubernetes Additional info: N/A -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1210364] New: Embedded kubelet cadvisor fails to enumerate docker containers
by Red Hat Bugzilla 29 Jun '16

29 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1210364 Bug ID: 1210364 Summary: Embedded kubelet cadvisor fails to enumerate docker containers Product: Fedora Version: 22 Component: kubernetes Assignee: jchaloup(a)redhat.com Reporter: stefw(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org, jchaloup(a)redhat.com, lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com Description of problem: The cAdvisor embedded in kubelet fails to enumerate docker containers. It fails with the message: failed to get all Docker containers with error: unable to find data for container /system.slice/docker-....scope Version-Release number of selected component (if applicable): kubernetes-0.13.2-0.5.git8d94c43.fc22.x86_64 How reproducible: Every time. Tried restarting Docker. Steps to Reproduce: 1. http://localhost:4194/api/v1.2/docker 1. Or just go to http://localhost:4194 and click on 'Docker Containers' to see the same thing. Actual results: failed to get all Docker containers with error: unable to find data for container /system.slice/docker-9dade0a01bf0368b6c0dad722f7e85af98593dde00873e6abb2cfd86d2d2b7a9.scope Expected results: Output like this: {"/system.slice/docker-1a0bda816225dc1fcae4e9f0583f982664675f66d523095513ff01694c3311e1.scope":{"name":"/system.slice/docker-1a0bda816225dc1fcae4e9f0583f982664675f66d523095513ff01694c3311e1.scope","aliases":["k8s_ruby-helloworld.8ec853e6_frontend-58wav_default_19192267-d9c8-11e4-b2d6-10c37bdb8410_025ed744","1a0bda816225dc1fcae4e9f0583f982664675f66d523095513ff01694c3311e1"],"namespace":"docker","spec":{"creation_time":"0001-01-01T00:00:00Z","has_c... Additional info: When running standalone cadvisor I get the above expected output. cadvisor-0.10.1-0.1.gitef7dddf.fc22.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

1 18

[Bug 1272146] New: Mounted secrets unreadible with SELinux enabled
by Red Hat Bugzilla 23 Jun '16

23 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1272146 Bug ID: 1272146 Summary: Mounted secrets unreadible with SELinux enabled Product: Fedora Version: 23 Component: kubernetes Severity: high Assignee: jchaloup(a)redhat.com Reporter: thijs.elferink(a)topicus.nl QA Contact: extras-qa(a)fedoraproject.org CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org, jcajka(a)redhat.com, jchaloup(a)redhat.com, lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com Description of problem: On a freshly installed Fedora Atomic host (as well as on a CentOS Atomic host); When mounting a secret in a pod, the mount shows up with garbled permissions and is inaccessible. Version-Release number of selected component (if applicable): ostree images (both have this problem): TIMESTAMP (UTC) VERSION ID OSNAME REFSPEC 2015-10-14 11:25:03 23.33 89be310d70 centos-atomic-host fedora-atomic:fedora-atomic/f23/x86_64/docker-host 2015-10-01 09:32:09 7.20151001 1e9838ce88 centos-atomic-host centos-atomic-host:centos-atomic-host/7/x86_64/standard kubernetes node description: Kernel Version: 4.2.3-300.fc23.x86_64 OS Image: Fedora 23 (Twenty Three) Container Runtime Version: docker://1.7.0-dev.fc23 Kubelet Version: v1.1.0-alpha.0.1588+e44c8e6661c931 Kube-Proxy Version: v1.1.0-alpha.0.1588+e44c8e6661c931 How reproducible: always Steps to Reproduce: 1. fresh fedora/centos atomic host 2. deploy secret (kubectl create -f secret.json) secret.json: { "apiVersion": "v1", "kind": "Secret", "metadata" : { "name": "test-secret" }, "type": "Opaque", "data": { "test-data":"dGVzdDEyMw==" } } 3. deploy pod (kubectl create -f test-pod.yaml) test-pod.yaml: apiVersion: v1 kind: Pod metadata: name: test-pod spec: containers: - name: test image: busybox volumeMounts: - name: "test-volume" mountPath: "/test" readOnly: true command: ["sh"] args: ["-c 'ls -l /test/test-data; cat /test/test-data'"] volumes: - name: "test-volume" secret: secretName: "test-secret" Actual results: output: -bash-4.2# kubectl logs test-pod ls: cannot access /test/test-data: Permission denied total 0 -????????? ? ? ? ? ? test-data cat: /test/test-data: Permission denied Expected results: output: -bash-4.2# kubectl logs test-pod total 4 -r--r--r--. 1 root root 7 Oct 15 08:08 test-data test123 Additional info: After disabling SELinux (setenforce 0) the secret is accessible. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1326890] New: FTBFS with gcc-go on s390x
by Red Hat Bugzilla 23 Jun '16

23 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1326890 Bug ID: 1326890 Summary: FTBFS with gcc-go on s390x Product: Fedora Version: 24 Component: golang-googlecode-net Assignee: fpokorny(a)redhat.com Reporter: dan(a)danny.cz QA Contact: extras-qa(a)fedoraproject.org CC: fpokorny(a)redhat.com, golang(a)lists.fedoraproject.org, jchaloup(a)redhat.com, mattdm(a)redhat.com, vbatts(a)redhat.com Blocks: 467765 (ZedoraTracker) Created attachment 1146911 --> https://bugzilla.redhat.com/attachment.cgi?id=1146911&action=edit build.log Build of golang-googlecode-net fails on s390x that uses gcc-go with tons of errors ... + go test -compiler gccgo -gccgoflags '-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -march=z9-109 -mtune=z10 ' golang.org/x/net/ipv4 # golang.org/x/net/ipv4 ../../BUILDROOT/golang-googlecode-net-0-0.31.git6acef71.fc24.s390x/usr/share/gocode/src/golang.org/x/net/ipv4/icmp.go:34:2: error: use of undefined type 'sysICMPFilter' sysICMPFilter ^ ../../BUILDROOT/golang-googlecode-net-0-0.31.git6acef71.fc24.s390x/usr/share/gocode/src/golang.org/x/net/ipv4/control_pktinfo.go:19:11: error: reference to undefined name 'sysIP_PKTINFO' m.Type = sysIP_PKTINFO ^ ../../BUILDROOT/golang-googlecode-net-0-0.31.git6acef71.fc24.s390x/usr/share/gocode/src/golang.org/x/net/ipv4/control_pktinfo.go:20:27: error: reference to undefined name 'sysSizeofInetPktinfo' ... see http://s390.koji.fedoraproject.org/koji/taskinfo?taskID=2183406 for full logs, or attachment for build.log Version-Release number of selected component (if applicable): golang-googlecode-net-0-0.31.git6acef71.fc24 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=467765 [Bug 467765] Fedora for System z (s390): Bug Tracker -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1223445] New: Update flannel to the latest commit to get "mutli-network support and abstract subnet mgr"
by Red Hat Bugzilla 23 Jun '16

23 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1223445 Bug ID: 1223445 Summary: Update flannel to the latest commit to get "mutli-network support and abstract subnet mgr" Product: Fedora Version: rawhide Component: flannel Assignee: jchaloup(a)redhat.com Reporter: jchaloup(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org, jchaloup(a)redhat.com, linville(a)redhat.com, lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com Update to at least [1] [1] https://github.com/coreos/flannel/commit/9cbad3b7f08e8e2a803d00dbbeeba3a444… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1038683] New: golang appears to contain an ECC implementation
by Red Hat Bugzilla 17 Jun '16

17 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1038683 Bug ID: 1038683 Summary: golang appears to contain an ECC implementation Product: Fedora Version: 20 Component: golang Assignee: adam(a)spicenitz.org Reporter: notting(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: adam(a)spicenitz.org, admiller(a)redhat.com, golang(a)lists.fedoraproject.org, lemenkov(a)gmail.com, lsm5(a)redhat.com, renich(a)woralelandia.com, skottler(a)redhat.com, vbatts(a)redhat.com Blocks: 182235 (FE-Legal), 1019390 (ecc) Description of problem: At least, I would assume that's what is in go/src/pkg/crypto/elliptic/. In Fedora, we only ship certain reviewed curves. Version-Release number of selected component (if applicable): 1.2-1 How reproducible: 100% Steps to Reproduce: 1. look at golang's crypto code Actual results: Hey, that looks like ECC, and it appears to have been always included. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=182235 [Bug 182235] Fedora Legal Tracker https://bugzilla.redhat.com/show_bug.cgi?id=1019390 [Bug 1019390] [tracking bug] re-enable ECC/ECDHE/EC/ECDSA/elliptic curves in Fedora -- You are receiving this mail because: You are on the CC list for the bug.

1 19

[Bug 1243479] New: RFE: Ship docker with all RHEL patches
by Red Hat Bugzilla 08 Jun '16

08 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1243479 Bug ID: 1243479 Summary: RFE: Ship docker with all RHEL patches Product: Fedora Version: 22 Component: docker-io Assignee: ichavero(a)redhat.com Reporter: riek(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: adimania(a)gmail.com, admiller(a)redhat.com, golang(a)lists.fedoraproject.org, hushan.jia(a)gmail.com, ichavero(a)redhat.com, jchaloup(a)redhat.com, jperrin(a)centos.org, lsm5(a)redhat.com, mgoldman(a)redhat.com, miminar(a)redhat.com, msamia(a)netsuite.com, s(a)shk.io, thrcka(a)redhat.com, vbatts(a)redhat.com, wolfy(a)nobugconsulting.ro In order to ensure that cross-development works for RHEL on Fedora, please ship docker with all the same patches currently shipped or planned to be shipped in RHEL. Specifically please include the secrets patch to allow using RHEL subscriptions to develop RHEL containers on top of a Fedora workstation. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1046469] New: docker privileged mode with cmd /sbin/init - agetty & high cpu
by Red Hat Bugzilla 08 Jun '16

08 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1046469 Bug ID: 1046469 Summary: docker privileged mode with cmd /sbin/init - agetty & high cpu Product: Fedora Version: 20 Component: docker-io Assignee: lsm5(a)redhat.com Reporter: fortuik(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: golang(a)lists.fedoraproject.org, lsm5(a)redhat.com, mattdm(a)redhat.com, mgoldman(a)redhat.com, skottler(a)redhat.com, vbatts(a)redhat.com Description of problem: docker containers in privileged mode mess with the host agetty and produce very hicht cpu load Version-Release number of selected component (if applicable): Fedora 20 Docker 0.7.1, 0.7.2 How reproducible: docker run -privileged -d mattdm/fedora:latest /sbin/init Actual results: docker container runs cpu load is very high - agetty stopping the container & the docker daemon do not free the cpu resources one have to kill the agetty process Expected results: docker container runs Additional info: In my real case i run rhel containers with puppet & ssh daemons for a small puppet lab. The reason i met this bug is that running docker container with /sbin/init cmd under RHEL 6.5 require priviliged mode. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1192081] New: Modify base image Dockerfile to enable systemd to run smoothly
by Red Hat Bugzilla 08 Jun '16

08 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1192081 Bug ID: 1192081 Summary: Modify base image Dockerfile to enable systemd to run smoothly Product: Fedora Version: rawhide Component: docker-io Assignee: lsm5(a)redhat.com Reporter: vpavlin(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: adimania(a)gmail.com, admiller(a)redhat.com, golang(a)lists.fedoraproject.org, hushan.jia(a)gmail.com, jchaloup(a)redhat.com, jperrin(a)centos.org, lsm5(a)redhat.com, mattdm(a)redhat.com, mgoldman(a)redhat.com, miminar(a)redhat.com, s(a)shk.io, thrcka(a)redhat.com, vbatts(a)redhat.com Description of problem: systemd requires container=docker set in env and /run, /tmp to be mountpoints start successfully. In my opinion, we should add ENV container=docker VOLUME ['/run', '/tmp'] to the base image Dockerfile. Command docker run --it --rm -v /sys/fs/cgroup:/sys/fs/cgroup:ro fedora:rawhide /usr/sbin/init would then be all an user would need to "boot" systemd in a container. I've already made some changes in KS file - remove fstab and machine-id, mask mount units... which make the boot sequence smooth. More changes to boot sequence will probably come later (f.e. switch from graphical.target to multi-user target) I'd also like to suggest new Rawhide build to be pushed to registry. This one works for me quite well: http://koji.fedoraproject.org/koji/taskinfo?taskID=8883309 -- You are receiving this mail because: You are on the CC list for the bug.

1 16

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

golang April 2016