Still use fedpkg to build docker images in OSBS?

2016-11-28 Thread Chenxiong Qi

Hi,

What I know so far is that docker images are built in Koji by the 
container build plugin. I'd like to know if the osbs functionality in 
fedpkg is still useful for some of you. This could be helpful to 
determine whether to remove osbs from package tool totally, or just make 
it a standalone command (separated from container-build command) so that 
some packagers are still able to use it to build images in OSBS directly.


--
Regards,
Chenxiong Qi
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: OpenMPI binary only created on 64bit not on 32bit

2016-11-28 Thread Jens Lody
Am Mon, 28 Nov 2016 21:02:01 -0700
schrieb Orion Poplawski :

> On 11/28/2016 05:29 PM, Susi Lehtola wrote:
> > On 11/28/2016 04:20 AM, Johannes Lips wrote:  
> >>> Am 28.11.2016 09:51, schrieb Johannes Lips:
> >>>
> >>> The pregenerated configure-script looks for libmpi.so in "/usr/lib
> >>>  /usr/lib/openmpi /usr/lib64/openmpi/lib", but on i686 it's in
> >>> "/usr/lib/openmpi/lib". Regenerating the configure-script might
> >>> work. Something like "autoreconf --force --install" in %prep after
> >>> %setup. I can not test it at the moment (just windows-machines
> >>> around me at work).  
> >> Thanks a lot. I will try to regenerate the configure script, once I
> >> am back home. I also reported it back to upstream, since I am not
> >> sure if that's fedora specific.  
> >
> > Usually to compile MPI stuff you just set
> >
> > CC=mpicc
> > CXX=mpic++
> > FC=mpifort
> >
> > since those wrappers handle all the necessary libraries by
> > themselves.
> >
> > Also, note that %{_bindir} is NOT the right place to install OpenMPI
> > binaries - they should go into %{_libdir}/openmpi/bin. They also
> > should have the _openmpi suffix ($MPI_SUFFIX) to distinguish them
> > from the sequential binaries. And the same goes for MPICH vs
> > OpenMPI.  
> 
> Yes, and see https://fedoraproject.org/wiki/Packaging:MPI
> 
Seems to be more comlicated,than just the build-error.
Nevertheless, "autoreconf ..." or "autoconf" does not work.
Just for the build-fix:
the newest upstream should have fixed the library-path problem, but the
configure-script does not find mpi.h now.
Here comes the full "%configure-call" (with your sources, not newest
HEAD) that works for me:
%configure  --disable-static \
--disable-avx \
%ifarch %{ix86}
--with-mpi-include=/usr/include/openmpi-i386 \
%endif
--with-mpi-lib=%{_libdir}/openmpi/lib



But after reading the two answers above, that might be incorrect or
unneeded. But it looks like the configure-script will fail without the
change regardles of the used compiler.


pgpbn3LkKoLim.pgp
Description: Digitale Signatur von OpenPGP
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: OpenMPI binary only created on 64bit not on 32bit

2016-11-28 Thread Orion Poplawski

On 11/28/2016 05:29 PM, Susi Lehtola wrote:

On 11/28/2016 04:20 AM, Johannes Lips wrote:

Am 28.11.2016 09:51, schrieb Johannes Lips:

The pregenerated configure-script looks for libmpi.so in "/usr/lib
 /usr/lib/openmpi /usr/lib64/openmpi/lib", but on i686 it's in
"/usr/lib/openmpi/lib". Regenerating the configure-script might
work. Something like "autoreconf --force --install" in %prep after
%setup. I can not test it at the moment (just windows-machines
around me at work).

Thanks a lot. I will try to regenerate the configure script, once I
am back home. I also reported it back to upstream, since I am not
sure if that's fedora specific.


Usually to compile MPI stuff you just set

CC=mpicc
CXX=mpic++
FC=mpifort

since those wrappers handle all the necessary libraries by themselves.

Also, note that %{_bindir} is NOT the right place to install OpenMPI
binaries - they should go into %{_libdir}/openmpi/bin. They also should
have the _openmpi suffix ($MPI_SUFFIX) to distinguish them from the
sequential binaries. And the same goes for MPICH vs OpenMPI.


Yes, and see https://fedoraproject.org/wiki/Packaging:MPI

--
Orion Poplawski
Technical Manager 303-415-9701 x222
NWRA/CoRA DivisionFAX: 303-415-9702
3380 Mitchell Lane  or...@cora.nwra.com
Boulder, CO 80301  http://www.cora.nwra.com
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


[Fedocal] Reminder meeting : Modularity WG

2016-11-28 Thread jkurik
Dear all,

You are kindly invited to the meeting:
   Modularity WG on 2016-11-29 from 15:00:00 to 16:00:00 UTC
   At fedora-meetin...@irc.freenode.net

The meeting will be about:
Meeting for the Modularity Working Group.

More information available at: [Modularity Working Group wiki 
page](https://fedoraproject.org/wiki/Modularity_Working_Group)

The agenda for the meeting is available at [modularity-wg-agendas 
pad](http://piratepad.nl/modularity-wg-agendas).



Source: https://apps.fedoraproject.org/calendar/meeting/4697/

___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: OpenMPI binary only created on 64bit not on 32bit

2016-11-28 Thread Susi Lehtola

On 11/28/2016 04:20 AM, Johannes Lips wrote:

Am 28.11.2016 09:51, schrieb Johannes Lips:

The pregenerated configure-script looks for libmpi.so in "/usr/lib
 /usr/lib/openmpi /usr/lib64/openmpi/lib", but on i686 it's in
"/usr/lib/openmpi/lib". Regenerating the configure-script might
work. Something like "autoreconf --force --install" in %prep after
%setup. I can not test it at the moment (just windows-machines
around me at work).

Thanks a lot. I will try to regenerate the configure script, once I
am back home. I also reported it back to upstream, since I am not
sure if that's fedora specific.


Usually to compile MPI stuff you just set

CC=mpicc
CXX=mpic++
FC=mpifort

since those wrappers handle all the necessary libraries by themselves.

Also, note that %{_bindir} is NOT the right place to install OpenMPI 
binaries - they should go into %{_libdir}/openmpi/bin. They also should 
have the _openmpi suffix ($MPI_SUFFIX) to distinguish them from the 
sequential binaries. And the same goes for MPICH vs OpenMPI.

--
Susi Lehtola
Fedora Project Contributor
jussileht...@fedoraproject.org
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Changing the paths on binaries

2016-11-28 Thread Matthew Miller
On Mon, Nov 28, 2016 at 03:52:34PM -0600, Richard Shaw wrote:
> I only found one but I have not investigated further:
> # dnf repoquery --whatrequires /usr/sbin/rpcinfo
> Local Packages for Fedora 24 30 MB/s |  70 kB 00:00
> nagios-plugins-rpc-0:2.1.1-1.fc24.x86_64

In that case, there's a section on UsrMove in the guidelines which
might be relevant here — it suggests putting a virtual provides for the
old path:
https://fedoraproject.org/wiki/Packaging:Guidelines#Effect_of_the_UsrMove_Fedora_Feature



-- 
Matthew Miller

Fedora Project Leader
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Nautilus usability

2016-11-28 Thread Samuel Sieb

On 11/28/2016 03:22 AM, Michael Schwendt wrote:

On Sun, 27 Nov 2016 20:23:31 -0800, Samuel Sieb wrote:


An SSD drive might not have this problem, but a spinning disk definitely
will.  You should never try running multiple copies on the same disk if
you want it to finish in a reasonable time.  With one copy, you can do
long contiguous reads and writes, but if you have multiple copies
happening, the read and write head will be bouncing all over the disk.


And what does that have to do with the progress window issue?


Sorry for taking the thread off-track.  I had accidentally deleted the 
original message and thought there was something about multiple copies 
taking a long time as well.


I agree with you that the progress info window is not so useful and 
often seems somewhat broken.

___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: installing RPMs on NFS filesystems

2016-11-28 Thread J. Bruce Fields
On Mon, Nov 28, 2016 at 05:04:07PM -0500, J. Bruce Fields wrote:
> On Wed, Nov 23, 2016 at 08:28:12PM -0500, Stephen John Smoogen wrote:
> > On 23 November 2016 at 19:36, Samuel Sieb  wrote:
> > > On 11/23/2016 07:39 AM, Chuck Anderson wrote:
> > >>
> > >> Is it supposed to be supported to install RPMs onto NFS filesystems?
> > >> Apparently NFSv3 doesn't support capabilities, so I'm not sure what to
> > >> do with this bug which happens because cap_net_raw is used for the
> > >> fping binaries:
> > >>
> > > I would expect that isn't supported, although I'm somewhat surprised that 
> > > it
> > > fails instead of just warning.  That's a very unusual setup, having the 
> > > root
> > > filesystem on NFS.
> > 
> > I doubt that installing on NFS was supported after we began using
> > capabilities on files for security. While installing on NFS was in
> > vogue in the 80's and 90's for thin clients and similar environments,
> > I think it has fallen to the wayside for current development. [In the
> > EPEL environment space I do expect it is still in use for root but
> > probably only in EL6 land versus EL7]
> 
> This isn't the first complaint we've gotten, though admittedly it may
> have been a while.  (And I'm having no luck finding the bugs in
> bugzilla.)
> 
> We could add support for capabilities to the NFS protocol, but that
> could take a while.
> 
> It'd be nice if rpm installs could fall back on something else instead
> of failing, but maybe it's complicated to do that safely.

Oh, here's one:

https://bugzilla.redhat.com/show_bug.cgi?id=648654

--b.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: installing RPMs on NFS filesystems

2016-11-28 Thread J. Bruce Fields
On Wed, Nov 23, 2016 at 08:28:12PM -0500, Stephen John Smoogen wrote:
> On 23 November 2016 at 19:36, Samuel Sieb  wrote:
> > On 11/23/2016 07:39 AM, Chuck Anderson wrote:
> >>
> >> Is it supposed to be supported to install RPMs onto NFS filesystems?
> >> Apparently NFSv3 doesn't support capabilities, so I'm not sure what to
> >> do with this bug which happens because cap_net_raw is used for the
> >> fping binaries:
> >>
> > I would expect that isn't supported, although I'm somewhat surprised that it
> > fails instead of just warning.  That's a very unusual setup, having the root
> > filesystem on NFS.
> 
> I doubt that installing on NFS was supported after we began using
> capabilities on files for security. While installing on NFS was in
> vogue in the 80's and 90's for thin clients and similar environments,
> I think it has fallen to the wayside for current development. [In the
> EPEL environment space I do expect it is still in use for root but
> probably only in EL6 land versus EL7]

This isn't the first complaint we've gotten, though admittedly it may
have been a while.  (And I'm having no luck finding the bugs in
bugzilla.)

We could add support for capabilities to the NFS protocol, but that
could take a while.

It'd be nice if rpm installs could fall back on something else instead
of failing, but maybe it's complicated to do that safely.

--b.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Stuck PPC64 build

2016-11-28 Thread Jerry James
(Two weeks pass...)

On Mon, Nov 14, 2016 at 1:17 PM, Dan Horák  wrote:
> and for polymake - it segfaults the same way on s390x
> (http://s390.koji.fedoraproject.org/koji/taskinfo?taskID=2398862),
> likely a big endian issue

Thank you Dan, Kevin, Patrick, and Zbigniew.  I did not intend to drop
out of this email thread, but shortly after I sent this message, the
motherboard on my home computer suffered some kind of catastrophic
failure.  Couldn't even get to the BIOS setup.  For me, Black Friday
this year was a great day, as it was the day my new computer equipment
arrived.  After a weekend getting everything set back up, I'm ready to
dive back into this issue.  Thanks again and regards,
-- 
Jerry James
http://www.jamezone.org/
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Changing the paths on binaries

2016-11-28 Thread Richard Shaw
On Mon, Nov 28, 2016 at 2:57 PM, Stephen Gallagher 
wrote:

> On 11/28/2016 03:41 PM, Steve Dickson wrote:
> > Hello,
> >
> > Are there any rules regarding changing the
> > path of binaries?
> >
> > rpcbind/rpcinfo has lived in /usr/sbin for
> > years but that is because the spec file moves
> > the binary from /usr/bin to /usr/sbin during
> > the install. Upstream defaults to /usr/bin.
> >
> > Due to some systemd service file changes
> > I would like to just leave rpcbind/rpcinfo
> > in /usr/bin which means the path of those
> > binaries would change.
> >
>
> It depends on whether you consider that file location to be "API" or not.
> Given
> that upstream considers them to belong in /usr/bin, I'd guess that probably
> there aren't any other packages relying on these executables living in that
> location.
>

I only found one but I have not investigated further:

# dnf repoquery --whatrequires /usr/sbin/rpcinfo
Local Packages for Fedora 24 30 MB/s |  70 kB 00:00
nagios-plugins-rpc-0:2.1.1-1.fc24.x86_64



> If there are, you might want to just move them and leave a symlink behind
> for
> compatibility.
>

+1

Thanks,
Richard
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Reminder: Fedora 23 End Of Life on 2016-Dec-20

2016-11-28 Thread Josh Boyer
On Mon, Nov 28, 2016 at 10:46 AM, Matthew Miller
 wrote:
> On Mon, Nov 28, 2016 at 08:57:45AM -0500, Josh Boyer wrote:
>> >> Fedora 23 support is going to be EOL on Tuesday, December 20th, 2016.
>> >> At this day we are going to close all the Fedora 23 bugs which will
>> >> remain open [1].
>> > I'd love to see some statistics on number of bugs closed as EOL (vs
>> > other resolutions) per release (since we started using the EOL
>> > resolution).
>> That should be something anyone with bugzilla access can gather
>
> Yes, and I'll do it if no one else does. :)

Sorry, I was intending my comment to point out that it doesn't take
anything special to get the stats, so anyone could do it thereby
pitching in on an area with clear need.  I wasn't trying to tell you
to do it yourself in a backhanded way.

josh
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Changing the paths on binaries

2016-11-28 Thread Matthew Miller
On Mon, Nov 28, 2016 at 03:57:08PM -0500, Stephen Gallagher wrote:
> It depends on whether you consider that file location to be "API" or
> not. Given that upstream considers them to belong in /usr/bin, I'd
> guess that probably there aren't any other packages relying on these
> executables living in that location.
> 
> If there are, you might want to just move them and leave a symlink
> behind for compatibility.

And you could release-notes this and eventually drop the symlink.



-- 
Matthew Miller

Fedora Project Leader
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Review swaps

2016-11-28 Thread Jerry James
I've got a couple of new package dependencies that need reviews:

prooftree: https://bugzilla.redhat.com/show_bug.cgi?id=1399366
ocaml-ocplib-simplex: https://bugzilla.redhat.com/show_bug.cgi?id=1399367

I've also got a couple more GAP packages waiting in the wings.  These
2 are lower priority than the 2 above:

gap-pkg-hapcryst: https://bugzilla.redhat.com/show_bug.cgi?id=1378526
gap-pkg-xmod: https://bugzilla.redhat.com/show_bug.cgi?id=1399365

Let me know what I can review for you in exchange.  Regards,
-- 
Jerry James
http://www.jamezone.org/
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Changing the paths on binaries

2016-11-28 Thread Stephen Gallagher
On 11/28/2016 03:41 PM, Steve Dickson wrote:
> Hello,
> 
> Are there any rules regarding changing the
> path of binaries? 
> 
> rpcbind/rpcinfo has lived in /usr/sbin for 
> years but that is because the spec file moves 
> the binary from /usr/bin to /usr/sbin during
> the install. Upstream defaults to /usr/bin.
> 
> Due to some systemd service file changes 
> I would like to just leave rpcbind/rpcinfo
> in /usr/bin which means the path of those 
> binaries would change.
> 

It depends on whether you consider that file location to be "API" or not. Given
that upstream considers them to belong in /usr/bin, I'd guess that probably
there aren't any other packages relying on these executables living in that
location.

If there are, you might want to just move them and leave a symlink behind for
compatibility.




signature.asc
Description: OpenPGP digital signature
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Changing the paths on binaries

2016-11-28 Thread Steve Dickson
Hello,

Are there any rules regarding changing the
path of binaries? 

rpcbind/rpcinfo has lived in /usr/sbin for 
years but that is because the spec file moves 
the binary from /usr/bin to /usr/sbin during
the install. Upstream defaults to /usr/bin.

Due to some systemd service file changes 
I would like to just leave rpcbind/rpcinfo
in /usr/bin which means the path of those 
binaries would change.

tia,

steved. 
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: State of LuaTeX in F25/rawhide

2016-11-28 Thread Avram Lubkin
On Mon, Nov 28, 2016 at 3:11 PM, Avram Lubkin  wrote:

> Forcing the pdftex driver gives an error about missing pdf primitives,
> so this is most probably related to the removed pdf primitives in LuaTeX
> 0.85 and later.
>


texlive-luatex85 provides luatex85.sty which might solve your issue.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Planned Outage: Cloud Environment - 2016-12-01 21:00 UTC

2016-11-28 Thread Stephen John Smoogen
There will be an outage starting at 2016-12-01 21:00 UTC, which will last
approximately 4 hours.

To convert UTC to your local time, take a look at
https://fedoraproject.org/wiki/UTCHowto
or run:

date -d '2016-12-01 21:00 UTC'

Reason for outage:

We have been in a freeze for the release of Fedora 25 and have
multiple updates across the systems needed to occur. Part of these are
to bring RHEL-7 systems to 7.3 and others are to bring some systems to
Fedora 25.

Affected Services:

Cloud Environment - *.fedorainfracloud.org

Unaffected Services:

Bodhi - https://admin.fedoraproject.org/updates/
Buildsystem - http://koji.fedoraproject.org/
Package Database - https://admin.fedoraproject.org/pkgdb/

BFO - https://boot.fedoraproject.org/
GIT / Source Control
DNS - ns1.fedoraproject.org, ns2.fedoraproject.org
Docs - https://docs.fedoraproject.org/
Email system
Fedora Account System - https://admin.fedoraproject.org/accounts/
Fedora Community - https://admin.fedoraproject.org/community/
Fedora Hosted - https://fedorahosted.org/
Fedora Insight - https://insight.fedoraproject.org/
Fedora People - https://fedorapeople.org/
Main Website - https://fedoraproject.org/
Mirror List - https://mirrors.fedoraproject.org/
Mirror Manager - https://admin.fedoraproject.org/mirrormanager/
QA Services
Secondary Architectures
Spins - https://spins.fedoraproject.org/
Start - https://start.fedoraproject.org/
Torrent - https://torrent.fedoraproject.org/
Translation Services - https://translate.fedoraproject.org/
Wiki - https://fedoraproject.org/wiki/
Staging - .stg.fedoraproject.org, .stg.phx2.fedoraproject.org

Ticket Link: https://pagure.io/fedora-infrastructure/issue/5581

Contact Information: infrastructure @lists.fedoraproject.org

Please join #fedora-admin in irc.freenode.net or add comments to the
ticket for this outage above.
-- 
Stephen J Smoogen.
___
devel-announce mailing list -- devel-annou...@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-le...@lists.fedoraproject.org
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Planned Outage: General Services Environment - 2016-11-30 21:00 UTC

2016-11-28 Thread Stephen John Smoogen
There will be an outage starting at 2016-11-30 21:00 UTC, which will last
approximately 4 hours.

To convert UTC to your local time, take a look at
https://fedoraproject.org/wiki/UTCHowto
or run:

date -d '2016-11-30 21:00 UTC'

Reason for outage:

We have been in a freeze for the release of Fedora 25 and have
multiple updates across the systems needed to occur. Part of these are
to bring RHEL-7 systems to 7.3 and others are to bring some systems to
Fedora 25.

Affected Services:

Bodhi - https://admin.fedoraproject.org/updates/
Buildsystem - http://koji.fedoraproject.org/
Package Database - https://admin.fedoraproject.org/pkgdb/

BFO - https://boot.fedoraproject.org/
GIT / Source Control
DNS - ns1.fedoraproject.org, ns2.fedoraproject.org
Docs - https://docs.fedoraproject.org/
Email system
Fedora Account System - https://admin.fedoraproject.org/accounts/
Fedora Community - https://admin.fedoraproject.org/community/
Fedora Hosted - https://fedorahosted.org/
Fedora Insight - https://insight.fedoraproject.org/
Fedora People - https://fedorapeople.org/
Main Website - https://fedoraproject.org/
Mirror List - https://mirrors.fedoraproject.org/
Mirror Manager - https://admin.fedoraproject.org/mirrormanager/
QA Services
Secondary Architectures
Spins - https://spins.fedoraproject.org/
Start - https://start.fedoraproject.org/
Torrent - https://torrent.fedoraproject.org/
Translation Services - https://translate.fedoraproject.org/
Wiki - https://fedoraproject.org/wiki/

Unaffected Services:

Staging - .stg.fedoraproject.org, .stg.phx2.fedoraproject.org

Ticket Link: TBA

Contact Information: infrastructure @lists.fedoraproject.org

Please join #fedora-admin in irc.freenode.net or add comments to the
ticket for this outage above.

-- 
Stephen J Smoogen.
___
devel-announce mailing list -- devel-annou...@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-le...@lists.fedoraproject.org
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Planned Outage: 2016-11-29 21:00 UTC Build Environment

2016-11-28 Thread Stephen John Smoogen
There will be an outage starting at 2016-11-29 21:00 UTC, which will last
approximately 4 hours.

To convert UTC to your local time, take a look at
https://fedoraproject.org/wiki/UTCHowto
or run:

date -d '2016-11-29 21:00 UTC'

Reason for outage:

We have been in a freeze for the release of Fedora 25 and have
multiple updates across the systems needed to occur. Part of these are
to bring RHEL-7 systems to 7.3 and others are to bring some systems to
Fedora 25.

Affected Services:

Bodhi - https://admin.fedoraproject.org/updates/
Buildsystem - http://koji.fedoraproject.org/
Package Database - https://admin.fedoraproject.org/pkgdb/

Unaffected Services:

BFO - https://boot.fedoraproject.org/
GIT / Source Control
DNS - ns1.fedoraproject.org, ns2.fedoraproject.org
Docs - https://docs.fedoraproject.org/
Email system
Fedora Account System - https://admin.fedoraproject.org/accounts/
Fedora Community - https://admin.fedoraproject.org/community/
Fedora Hosted - https://fedorahosted.org/
Fedora Insight - https://insight.fedoraproject.org/
Fedora People - https://fedorapeople.org/
Main Website - https://fedoraproject.org/
Mirror List - https://mirrors.fedoraproject.org/
Mirror Manager - https://admin.fedoraproject.org/mirrormanager/
QA Services
Secondary Architectures
Spins - https://spins.fedoraproject.org/
Start - https://start.fedoraproject.org/
Torrent - https://torrent.fedoraproject.org/
Translation Services - https://translate.fedoraproject.org/
Wiki - https://fedoraproject.org/wiki/
Staging - .stg.fedoraproject.org, .stg.phx2.fedoraproject.org

Ticket Link: https://pagure.io/fedora-infrastructure/issue/5579

Contact Information: infrastructure @lists.fedoraproject.org

Please join #fedora-admin in irc.freenode.net or add comments to the
ticket for this outage above.

-- 
Stephen J Smoogen.
___
devel-announce mailing list -- devel-annou...@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-le...@lists.fedoraproject.org
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Planned Outage: Staging Environment - 2016-11-28 21:00 UTC

2016-11-28 Thread Stephen John Smoogen
There will be an outage starting at 2016-11-28 21:00 UTC, which will last
approximately 4 hours.

To convert UTC to your local time, take a look at
https://fedoraproject.org/wiki/UTCHowto
or run:

date -d '2016-11-28 21:00 UTC'

Reason for outage:

We have been in a freeze for the release of Fedora 25 and have
multiple updates across the systems needed to occur. Part of these are
to bring RHEL-7 systems to 7.3 and others are to bring some systems to
Fedora 25.

Affected Services:

Staging - .stg.fedoraproject.org, .stg.phx2.fedoraproject.org

Unaffected Services:

BFO - https://boot.fedoraproject.org/
Bodhi - https://admin.fedoraproject.org/updates/
Buildsystem - http://koji.fedoraproject.org/
GIT / Source Control
DNS - ns1.fedoraproject.org, ns2.fedoraproject.org
Docs - https://docs.fedoraproject.org/
Email system
Fedora Account System - https://admin.fedoraproject.org/accounts/
Fedora Community - https://admin.fedoraproject.org/community/
Fedora Hosted - https://fedorahosted.org/
Fedora Insight - https://insight.fedoraproject.org/
Fedora People - https://fedorapeople.org/
Main Website - https://fedoraproject.org/
Mirror List - https://mirrors.fedoraproject.org/
Mirror Manager - https://admin.fedoraproject.org/mirrormanager/
Package Database - https://admin.fedoraproject.org/pkgdb/
QA Services
Secondary Architectures
Spins - https://spins.fedoraproject.org/
Start - https://start.fedoraproject.org/
Torrent - https://torrent.fedoraproject.org/
Translation Services - https://translate.fedoraproject.org/
Wiki - https://fedoraproject.org/wiki/

Ticket Link: TBA

Contact Information: infrastructure @lists.fedoraproject.org

Please join #fedora-admin in irc.freenode.net or add comments to the
ticket for this outage above.

-- 
Stephen J Smoogen.
___
devel-announce mailing list -- devel-annou...@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-le...@lists.fedoraproject.org
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: upcoming build and release developer flag day December 12 2016

2016-11-28 Thread Nathaniel McCallum
On Mon, Nov 28, 2016 at 3:10 AM, Alexander Bokovoy  wrote:
> On su, 27 marras 2016, Ken Dreyer wrote:
>>
>> On Wed, Nov 23, 2016 at 7:17 AM, Alexander Bokovoy 
>> wrote:
>>>
>>> Heimdal does not support MS-KKDCP spec, so you are left with direct
>>> Kerberos communication over port 88/tcp or 88/udp, but these are enabled
>>> in Fedora infrastructure, yes.
>>
>>
>> I thought direct Kerberos service was going to be disabled, to prevent
>> attackers sniffing and brute-forcing the encrypted preauth timestamp?
>
> This is really a question to Fedora Infra people but last time we
> discussed, RHEL 6-based clients and alike were not getting MS-KKDCP
> features backported to older MIT Kerberos versions so to support them,
> direct access is required.

Correct. The Fedora Infrastructure team needs to balance the risk of
MitM offline dictionary attacks with the need for RHEL6 client access.

IMHO, there should already be a plan to sunset RHEL6 instances. But I
can't judge this based upon Fedora's internal needs.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: upcoming build and release developer flag day December 12 2016

2016-11-28 Thread Nathaniel McCallum
On Mon, Nov 21, 2016 at 10:03 AM, Alexander Bokovoy  wrote:
> On ma, 21 marras 2016, Florian Weimer wrote:
>>
>> On 11/21/2016 01:31 PM, Stephen Gallagher wrote:
>>
>> Thanks for your explanation.
>>
>>> So yes, we have protection against that. FreeIPA (which is backing this
>>> solution) requires preauthentication for all user accounts.
>>
>>
>> “That” meaning offline attacks without intercepted packets.  With
>> intercepted packets, offline attacks are still feasible, right?
>
> Right -- if you get initial exchange in the traditional Kerberos 5.
> We have been working for several years already to reduce these
> possibilities via different means:
> - enablement for HTTPS-based tunnel for Kerberos flows based on
>   MS-KKDCP specification;
>
> - DNS-based announcement of Kerberos MS-KKDCP proxy using DNS URI;
>
> - SPAKE exchange support in MIT Kerberos (slated for 1.15-1.16)
>
> Fedora infrastructure uses MS-KKDCP proxy with Fedora certificate to
> tunnel Kerberos 5 traffic. If you have recent Fedora, you'll get it used
> automatically with the help of DNS URI. For older clients which don't
> support DNS-based discovery you can configure MS-KKDCP proxy access
> manually by stating 'kdc=https://id.fedoraproject.org/KdcProxy' for
> FEDORAPROJECT.ORG realm. For very old clients that don't support
> MS-KKDCP (RHEL 6, for example), you are back to use naked Kerberos 5
> traffic.
>
> Our effort is to get to SPAKE sooner than later.

I'll be working with Robbie Harwood to implement SPAKE in the coming
months. So let me add some clarification here.

1. Like Stephen said, preauth now prevents offline dictionary attack
without interception. This has been true for years.

2. Offline dictionary attack is theoretically possible with MitM
(though is somewhat mitigated by the added timestamp entropy). This
can be further mitigated by using the HTTPS proxy as stated by
Alexander. I am not aware of any successful attacks using this method.

3. SPAKE is a new technique to make this whole problem irrelevant (as
well as provide an implicitly trusted tunnel for 2FA without
additional trust anchors). The draft is available here:
https://tools.ietf.org/html/draft-mccallum-kitten-krb-spake-preauth-00.
A new draft is forthcoming shortly. SPAKE works like a normal
Password-Authenticated Key Exchange, and thus is entirely protected
from offline attacks the same way Diffie-Hellman is. There is already
a 1FA implementation in an upstream branch which we are going to
expand to support 2FA and then merge. The server-side will only land
in newer Fedoras. However, should need arise, we might be able to
backport the client-side as a plugin.  I'm hoping to land this in F26.

Nathaniel
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: License of perl-Test-Prereq changed from (GPL+ or Artistic) to Artistic 2.0

2016-11-28 Thread Matthew Miller
On Mon, Nov 28, 2016 at 04:19:19PM +, Paul Howarth wrote:
> The license of perl-Test-Prereq changed from (GPL+ or Artistic) to
> Artistic 2.0.

Note that FSF considers Artistic 2.0 to be GPL-compatible.
https://www.gnu.org/licenses/license-list.en.html#ArtisticLicense2


-- 
Matthew Miller

Fedora Project Leader
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


License of perl-Test-Prereq changed from (GPL+ or Artistic) to Artistic 2.0

2016-11-28 Thread Paul Howarth
The license of perl-Test-Prereq changed from (GPL+ or Artistic) to 
Artistic 2.0.

___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Reminder: Fedora 23 End Of Life on 2016-Dec-20

2016-11-28 Thread Jaroslav Reznik
Also I have historical data -
http://borntobeopen.blogspot.cz/2014/02/end-of-not-my-life.html till
Fedora 20 (not in this blog post, I can share it) before EOL
resolution was established as I was running the script.

Jaroslav

On Mon, Nov 28, 2016 at 4:46 PM, Matthew Miller
 wrote:
> On Mon, Nov 28, 2016 at 08:57:45AM -0500, Josh Boyer wrote:
>> >> Fedora 23 support is going to be EOL on Tuesday, December 20th, 2016.
>> >> At this day we are going to close all the Fedora 23 bugs which will
>> >> remain open [1].
>> > I'd love to see some statistics on number of bugs closed as EOL (vs
>> > other resolutions) per release (since we started using the EOL
>> > resolution).
>> That should be something anyone with bugzilla access can gather
>
> Yes, and I'll do it if no one else does. :)
>
> --
> Matthew Miller
> 
> Fedora Project Leader
> ___
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-le...@lists.fedoraproject.org



-- 
Jaroslav Řezník 
Engineering Program Manager

Office: +420 532 294 645
Mobile: +420 602 797 774
Red Hat, Inc.   http://www.redhat.com/
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Trying not call elfutils functions in ABRT under root

2016-11-28 Thread Petr Spacek
On 28.11.2016 09:47, xmine...@seznam.cz wrote:
> Hello,
> 
> im using elfutils in ABRT program specifically when generating 
> core_backtrace. According to this https://github.com/abrt/abrt/issues/890 
> post, it is not a good idea using elfutils under root. So I have tried moving 
> as much elfutils function calls to non-root process as possible. That means 
> the parent process is forked and in child process there are opened necessary 
> files:
> 
> https://github.com/xsulca00/abrt/blob/iss%23890/src/hooks/abrt-hook-ccpp.c#L1321
> https://github.com/xsulca00/satyr/blob/iss%23890/lib/core_unwind_elfutils.c#L242
> 
> and then UID and GID of child is changed and then I can call elfutils:
> 
> https://github.com/xsulca00/abrt/blob/iss%23890/src/hooks/abrt-hook-ccpp.c#L1361
> https://github.com/xsulca00/satyr/blob/iss%23890/lib/core_unwind_elfutils.c#L392
> 
> Is there any way how I can pass the opened files to elfutils functions? 
> Especially for "/etc/[tid]/mem" which is needed in dwfl_linux_proc_find_elf 
> that is part of Dwfl_Callbacks proc_cb ?

I think that this should work:
(while being root)
1. open file descriptor
2. call seteuid()
3. pass the file descriptor to the new process

I'm not saying that you need to do exactly this in case of elfutils but it
should work in the general case.

-- 
Petr Spacek  @  Red Hat
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Fedora Rawhide-20161128.n.0 compose check report

2016-11-28 Thread Fedora compose checker
Missing expected images:

Workstation live i386
Kde live x86_64
Kde raw-xz armhfp
Workstation live x86_64
Kde live i386

Failed openQA tests: 9/79 (x86_64), 3/15 (i386), 1/2 (arm)

New failures (same test did not fail in Rawhide-20161127.n.0):

ID: 50051   Test: i386 Workstation-boot-iso install_default
URL: https://openqa.fedoraproject.org/tests/50051

Old failures (same test failed in Rawhide-20161127.n.0):

ID: 50049   Test: x86_64 Workstation-boot-iso install_default
URL: https://openqa.fedoraproject.org/tests/50049
ID: 50050   Test: x86_64 Workstation-boot-iso install_default@uefi
URL: https://openqa.fedoraproject.org/tests/50050
ID: 50052   Test: arm Minimal-raw_xz-raw.xz 
install_arm_image_deployment_upload
URL: https://openqa.fedoraproject.org/tests/50052
ID: 50065   Test: x86_64 Server-dvd-iso server_role_deploy_domain_controller
URL: https://openqa.fedoraproject.org/tests/50065
ID: 50078   Test: x86_64 universal install_anaconda_text
URL: https://openqa.fedoraproject.org/tests/50078
ID: 50113   Test: x86_64 universal upgrade_desktop_64bit
URL: https://openqa.fedoraproject.org/tests/50113
ID: 50116   Test: x86_64 universal upgrade_desktop_encrypted_64bit
URL: https://openqa.fedoraproject.org/tests/50116
ID: 50118   Test: x86_64 universal upgrade_2_desktop_64bit
URL: https://openqa.fedoraproject.org/tests/50118
ID: 50121   Test: x86_64 universal upgrade_2_desktop_encrypted_64bit
URL: https://openqa.fedoraproject.org/tests/50121
ID: 50130   Test: x86_64 universal install_rescue_encrypted
URL: https://openqa.fedoraproject.org/tests/50130
ID: 50139   Test: i386 universal upgrade_desktop_32bit
URL: https://openqa.fedoraproject.org/tests/50139
ID: 50140   Test: i386 universal upgrade_2_desktop_32bit
URL: https://openqa.fedoraproject.org/tests/50140

Passed openQA tests: 67/79 (x86_64), 12/15 (i386)

New passes (same test did not pass in Rawhide-20161127.n.0):

ID: 50092   Test: x86_64 universal install_software_raid
URL: https://openqa.fedoraproject.org/tests/50092
ID: 50096   Test: x86_64 universal install_xfs
URL: https://openqa.fedoraproject.org/tests/50096

Skipped openQA tests: 1 of 96
-- 
Mail generated by check-compose:
https://pagure.io/fedora-qa/check-compose
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Reminder: Fedora 23 End Of Life on 2016-Dec-20

2016-11-28 Thread Matthew Miller
On Mon, Nov 28, 2016 at 08:57:45AM -0500, Josh Boyer wrote:
> >> Fedora 23 support is going to be EOL on Tuesday, December 20th, 2016.
> >> At this day we are going to close all the Fedora 23 bugs which will
> >> remain open [1].
> > I'd love to see some statistics on number of bugs closed as EOL (vs
> > other resolutions) per release (since we started using the EOL
> > resolution).
> That should be something anyone with bugzilla access can gather

Yes, and I'll do it if no one else does. :)

-- 
Matthew Miller

Fedora Project Leader
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Reviews Weekly

2016-11-28 Thread nobody
Start Date: 2016-11-21 10:08:02.016221
End Date: 2016-11-28 10:08:02.016221

Rex Dieter : 6

https://bugzilla.redhat.com/show_bug.cgi?id=1360255 qt5-qtcharts
https://bugzilla.redhat.com/show_bug.cgi?id=1397778 qt5-qtgamepad
https://bugzilla.redhat.com/show_bug.cgi?id=1360284 
qt5-qtdeclarative-render2d
https://bugzilla.redhat.com/show_bug.cgi?id=1397784 qt5-qtwebview
https://bugzilla.redhat.com/show_bug.cgi?id=1397800 qt5-qtdatavis3d
https://bugzilla.redhat.com/show_bug.cgi?id=1382681 qt5-qtscxml


Shawn Iwinski : 6

https://bugzilla.redhat.com/show_bug.cgi?id=1358165 
php-zendframework-zend-xml2json
https://bugzilla.redhat.com/show_bug.cgi?id=1358155 
php-zendframework-zend-mvc-i18n
https://bugzilla.redhat.com/show_bug.cgi?id=1393934 
php-http-interop-http-middleware
https://bugzilla.redhat.com/show_bug.cgi?id=1358153 
php-zendframework-zend-mvc-form
https://bugzilla.redhat.com/show_bug.cgi?id=1358164 
php-zendframework-zend-mvc-plugins
https://bugzilla.redhat.com/show_bug.cgi?id=1358149 
php-zendframework-zend-json-server


gil cattaneo : 4

https://bugzilla.redhat.com/show_bug.cgi?id=1398340 python-trezor
https://bugzilla.redhat.com/show_bug.cgi?id=1397051 caffeine
https://bugzilla.redhat.com/show_bug.cgi?id=1374899 quassel-irssi
https://bugzilla.redhat.com/show_bug.cgi?id=1396636 
golang-github-knieriem-markdown


Ben Rosser : 3

https://bugzilla.redhat.com/show_bug.cgi?id=1396216 aalto-xml
https://bugzilla.redhat.com/show_bug.cgi?id=1395726 
apache-commons-configuration2
https://bugzilla.redhat.com/show_bug.cgi?id=1155793 hyperrogue


Igor Gnatenko : 3

https://bugzilla.redhat.com/show_bug.cgi?id=1396232 libkeepalive
https://bugzilla.redhat.com/show_bug.cgi?id=1397317 graphene
https://bugzilla.redhat.com/show_bug.cgi?id=1398929 brightnessctl


Jitka Plesnikova : 3

https://bugzilla.redhat.com/show_bug.cgi?id=1394242 perl-Net-DAVTalk
https://bugzilla.redhat.com/show_bug.cgi?id=1394252 
perl-Net-CalDAVTalk
https://bugzilla.redhat.com/show_bug.cgi?id=1394262 
perl-Net-CardDAVTalk


Tim Orling : 3

https://bugzilla.redhat.com/show_bug.cgi?id=1396273 
python3-netifaces
https://bugzilla.redhat.com/show_bug.cgi?id=1384130 
python3-sqlalchemy
https://bugzilla.redhat.com/show_bug.cgi?id=1384249 python3-ply


Antonio Trande : 2

https://bugzilla.redhat.com/show_bug.cgi?id=1397140 mrrescue
https://bugzilla.redhat.com/show_bug.cgi?id=1391334 freeorion


Athos Ribeiro : 2

https://bugzilla.redhat.com/show_bug.cgi?id=1395554 python-astral
https://bugzilla.redhat.com/show_bug.cgi?id=1395396 
python-sphinx-gallery


François Kooman : 2

https://bugzilla.redhat.com/show_bug.cgi?id=1391951 php-cs-fixer
https://bugzilla.redhat.com/show_bug.cgi?id=1398355 php-ast


Iryna Shcherbina : 2

https://bugzilla.redhat.com/show_bug.cgi?id=1395804 python-batinfo
https://bugzilla.redhat.com/show_bug.cgi?id=1383416 python-influxdb


Jakub Hrozek : 2

https://bugzilla.redhat.com/show_bug.cgi?id=1394788 lua-mpack
https://bugzilla.redhat.com/show_bug.cgi?id=1394785 lua-bitop


Martin Bříza : 2

https://bugzilla.redhat.com/show_bug.cgi?id=1370792 python-premailer
https://bugzilla.redhat.com/show_bug.cgi?id=1370735 
python-sampledata


Daiki Ueno : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1397030 mingw-libidn2


Fabio Alessandro Locati : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1373641 setBfree


Jakub Jelen : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1394275 librdkafka


Johan Cwiklinski : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1398799 php-phpiredis


Jonny Heggheim : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1325672 jmxutils


Julien Enselme : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1365839 
python-django-notifications-hq


MartinKG : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1379798 pcsxr


Neal Gompa : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1395955 fatresize


Nick Bebout : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1391487 nextcloud-client


Raphael Groner : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1309909 python3-tornado


Stephen Gallagher : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1394952 python-avocado


Tomas Orsava : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1398432 playitagainsam


Tomas Repik : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1290342 ecc-25519-java


Yaakov Selkowitz : 1

https://bugzilla.redhat.com/show_bug.

[POC-change] Fedora packages point of contact updates

2016-11-28 Thread nobody
Change in package status over the last 168 hours


5 packages were orphaned

kompose [el5] was orphaned by orion
 Tool to move from `docker-compose` to Kubernetes
 https://admin.fedoraproject.org/pkgdb/package/kompose
libdnf [f23] was orphaned by ignatenkobrain
 Library providing simplified C and Python API to libsolv
 https://admin.fedoraproject.org/pkgdb/package/libdnf
python-dingus [f23, master, f25, f24] was orphaned by cstratak
 A record-then-assert mocking library
 https://admin.fedoraproject.org/pkgdb/package/python-dingus
python-django-sorting [f23, master, f25, f24] was orphaned by cstratak
 A Django application for easy sorting
 https://admin.fedoraproject.org/pkgdb/package/python-django-sorting
python-keyring [el5] was orphaned by ctubbsii
 Store and access your passwords safely
 https://admin.fedoraproject.org/pkgdb/package/python-keyring

5 packages were retired

fourterm [master] was retired by lzap
 Lightweight split-screen terminal emulator with vim key mappings
 https://admin.fedoraproject.org/pkgdb/package/fourterm
konkretcmpi [master] was retired by rnovacek
 Tool for rapid CMPI providers development
 https://admin.fedoraproject.org/pkgdb/package/konkretcmpi
mono [el5] was retired by tpokorra
 Cross-platform, Open Source, .NET development framework
 https://admin.fedoraproject.org/pkgdb/package/mono
perl-SOAP-Lite [el6] was retired by eseyman
 Client and server side SOAP implementation
 https://admin.fedoraproject.org/pkgdb/package/perl-SOAP-Lite
python-sphinx_gallery [master] was retired by orion
 Sphinx extension to automatically generate an examples gallery
 https://admin.fedoraproject.org/pkgdb/package/python-sphinx_gallery

3 packages unorphaned
-
exonerate [master] was unorphaned by marcusk
 A generic tool for sequence alignment
 https://admin.fedoraproject.org/pkgdb/package/exonerate
rubygem-heroku [f23, master, f25, f24] was unorphaned by marcusk
 Client library and CLI to deploy apps on Heroku
 https://admin.fedoraproject.org/pkgdb/package/rubygem-heroku
rubygem-heroku-api [f23, master, f25, f24] was unorphaned by marcusk
 Ruby Client for the Heroku API
 https://admin.fedoraproject.org/pkgdb/package/rubygem-heroku-api

0 packages were unretired


11 packages were given
-
gphoto2 [f23, master, f25, f24] was given by twaugh to ignatenkobrain
 Software for accessing digital cameras
 https://admin.fedoraproject.org/pkgdb/package/gphoto2
http-parser [el6, epel7] was given by sgallagh to ignatenkobrain
 HTTP request/response parser for C
 https://admin.fedoraproject.org/pkgdb/package/http-parser
k3b [f23, master, f25, f24] was given by rnovacek to group::kde-sig
 CD/DVD/Blu-ray burning application
 https://admin.fedoraproject.org/pkgdb/package/k3b
kdevplatform [f23, master, f25, f24] was given by rnovacek to group::kde-sig
 Libraries for use by KDE development tools
 https://admin.fedoraproject.org/pkgdb/package/kdevplatform
krazy2 [f23, master, f25, f24] was given by rnovacek to group::kde-sig
 Krazy is a tool for checking code against the KDE coding guidelines
 https://admin.fedoraproject.org/pkgdb/package/krazy2
libgphoto2 [f23, master, f25, f24] was given by twaugh to ignatenkobrain
 Library for accessing digital cameras
 https://admin.fedoraproject.org/pkgdb/package/libgphoto2
python-enchant [f23, master, f25, f24] was given by rnovacek to cstratak
 Python bindings for Enchant spellchecking library
 https://admin.fedoraproject.org/pkgdb/package/python-enchant
python-keyring [f23, master, f25, f24] was given by rtnpro to ctubbsii
 Store and access your passwords safely
 https://admin.fedoraproject.org/pkgdb/package/python-keyring
python-pynlpl [master, f25] was given by limb to ishcherb
 A Python library for Natural Language Processing
 https://admin.fedoraproject.org/pkgdb/package/python-pynlpl
quassel-irssi [master, epel7, f24] was given by limb to tc01
 An irssi plugin to connect to quassel core
 https://admin.fedoraproject.org/pkgdb/package/quassel-irssi
tweepy [f23, master, f25, f24] was given by rtnpro to echevemaster
 An easy-to-use Python library for accessing the Twitter API
 https://admin.fedoraproject.org/pkgdb/package/tweepy

2 packages had new branches

python-pynlpl had a new branch: f24 for ishcherb by limb
 A Python library for Natural Language Processing
 https://admin.fedoraproject.org/pkgdb/package/python-pynlpl
quassel-irssi had a new branch: f25 for tc01 by limb
 An irssi plugin to connect to quassel core
 https://admin.fedoraproject.org/pkgdb/package/quassel-irssi


Sources: https://github.com/pypingou/fedora-owner-change
___
d

Fedora rawhide compose report: 20161128.n.0 changes

2016-11-28 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20161127.n.0
NEW: Fedora-Rawhide-20161128.n.0

= SUMMARY =
Added images:0
Dropped images:  0
Added packages:  0
Dropped packages:0
Upgraded packages:   25
Downgraded packages: 0

Size of added packages:  0.00 B
Size of dropped packages:0.00 B
Size of upgraded packages:   417.55 MiB
Size of downgraded packages: 0.00 B

Size change of upgraded packages:   -39.62 MiB
Size change of downgraded packages: 0.00 B

= ADDED IMAGES =

= DROPPED IMAGES =

= ADDED PACKAGES =

= DROPPED PACKAGES =

= UPGRADED PACKAGES =
Package:  bugzilla-5.0.3-3.fc26
Old package:  bugzilla-5.0.3-2.fc25
Summary:  Bug tracking system
RPMs: bugzilla bugzilla-contrib bugzilla-doc bugzilla-doc-build
Size: 3219956 bytes
Size change:  -416 bytes
Changelog:
  * Sun Nov 27 2016 Emmanuel Seyman  - 5.0.3-3
  - Check for perl(JSON::RPC::Legacy::Server::CGI) instead of perl(JSON::RPC)


Package:  devscripts-2.16.10-1.fc26
Old package:  devscripts-2.16.9-1.fc26
Summary:  Scripts for Debian Package maintainers
RPMs: devscripts devscripts-checkbashisms devscripts-compat
Size: 3237608 bytes
Size change:  4252 bytes

Package:  docker-2:1.12.3-24.git7b5044b.fc26
Old package:  docker-2:1.12.3-22.git7b5044b.fc26
Summary:  Automates deployment of containerized applications
RPMs: container-selinux docker docker-common docker-devel 
docker-fish-completion docker-logrotate docker-lvm-plugin 
docker-novolume-plugin docker-rhel-push-plugin docker-rhsubscription 
docker-unit-test docker-v1.10-migrator docker-vim docker-zsh-completion
Size: 313956540 bytes
Size change:  58688 bytes
Changelog:
  * Sun Nov 27 2016 Antonio Murdaca  - 
2:1.12.3-23.git7b5044b
  - built docker @projectatomic/docker-1.12 commit 7b5044b
  - built docker-selinux commit 51001dd
  - built d-s-s commit c9faba1
  - built docker-novolume-plugin commit c521254
  - built docker-runc @projectatomic/runc-1.12 commit b8dbc3b
  - built docker-utils commit 
  - built docker-containerd commit 9f45393
  - built docker-v1.10-migrator commit 994c35c

  * Sun Nov 27 2016 Antonio Murdaca  - 
2:1.12.3-24.git7b5044b
  - built docker @projectatomic/docker-1.12 commit 7b5044b
  - built docker-selinux commit 9de0085
  - built d-s-s commit c9faba1
  - built docker-novolume-plugin commit c521254
  - built docker-runc @projectatomic/runc-1.12 commit b8dbc3b
  - built docker-utils commit 
  - built docker-containerd commit 9f45393
  - built docker-v1.10-migrator commit 994c35c


Package:  dpkg-1.18.15-1.fc26
Old package:  dpkg-1.17.27-1.fc26
Summary:  Package maintenance system for Debian Linux
RPMs: dpkg dpkg-dev dpkg-devel dpkg-perl dselect
Size: 12290320 bytes
Size change:  -567328 bytes
Changelog:
  * Sat Nov 26 2016 S??rgio Basto  - 1.18.15-1
  - New major release, 1.18.15, adaptations based on files of debian directory 
in
debian package.


Package:  ejabberd-16.09-3.fc26
Old package:  ejabberd-16.09-2.fc26
Summary:  A distributed, fault-tolerant Jabber/XMPP server
RPMs: ejabberd
Size: 23716290 bytes
Size change:  1836 bytes
Changelog:
  * Sun Nov 27 2016 Randy Barlow  - 16.09-3
  - Use -set-cookie in ejabberdctl so root can attach to the node (#1163812).
  - Mark ejabberdctl as executable.
  - Dropped unnecessary gcc-g++ BuildRequires.


Package:  ethtool-2:4.8-1.fc26
Old package:  ethtool-2:4.2-2.fc24
Summary:  Settings tool for Ethernet NICs
RPMs: ethtool
Size: 798940 bytes
Size change:  44652 bytes
Changelog:
  * Mon Nov 28 2016 Robert Scheck  - 2:4.8-1
  - Update to 4.8 (#1317497)


Package:  gnote-3.22.1-1.fc26
Old package:  gnote-3.21.1-1.fc26
Summary:  Note-taking application
RPMs: gnote
Size: 23128524 bytes
Size change:  -162120 bytes
Changelog:
  * Mon Sep 26 2016 Kalev Lember  - 3.22.0-1
  - Update to 3.22.0

  * Sun Nov 27 2016 Kalev Lember  - 3.22.1-1
  - Update to 3.22.1


Package:  gnu-smalltalk-3.2.5-12.fc26
Old package:  gnu-smalltalk-3.2.5-11.fc26
Summary:  GNU Smalltalk
RPMs: gnu-smalltalk gnu-smalltalk-devel
Size: 12630552 bytes
Size change:  60 bytes
Changelog:
  * Sun Nov 27 2016 Marcus Karlsson  - 3.2.5-12
  - Build with --disable-relocatable


Package:  icaro-1.0.7-1.fc26
Old package:  icaro-1.0.6-1.fc26
Summary:  Robotic Educational Project
RPMs: icaro
Size: 336974 bytes
Size change:  5852 bytes
Changelog:
  * Sat Nov 12 2016 Omar Berroteran  - 1.0.7
  - Bump to the new upstream version


Package:  kexec-tools-2.0.13-9.fc26
Old package:  kexec-tools-2.0.13-8.fc26
Summary:  The kexec/kdump userspace component
RPMs: kexec-tools kexec-tools-anaconda-addon
Size: 2613420 bytes
Size change:  -964 bytes
Changelog:
  * Mon Nov 28 2016 Dave Young  - 2.0.13-9
  - rename function kdump_to_udev_name
  - Raw dump: use by-id as persistent policy in 2nd kernel

Re: Nautilus usability

2016-11-28 Thread Jiri Eischmann
Michael Schwendt píše v Ne 27. 11. 2016 v 00:53 +0100:
> This is about F25 and F24, but likely applies to older releases, too,
> since I haven't noticed any improvements about it.
> 
> Have you ever made Nautilus copy/move a huge directory tree and then
> started a similar task for other directories while Nautilus was still
> working on the first task?
> 
> What happens here is that there is this small progress icon, and if
> you
> click on it, a tiny window pops up showing the progress of each
> Nautilus
> task. It's tiny window that cannot be made larger. Try to scroll
> down, but
> Nautilus interferes and jumps to the top again frequently. Have you
> ever... No, probably not the developers of Nautilus. That should
> answer
> the question raised above.
> 
> And how to remove completed tasks or empty that window? Impossible
> while
> Nautilus is busy working on tasks. There only is a 'X' button to
> cancel
> running tasks and a non-clickable icon for completed and cancelled
> tasks. Not helpful. Worse, cancelled tasks remain in the list, too.
> 
> What am I missing?

I'm missing a link to a bug report here.

JE

signature.asc
Description: This is a digitally signed message part
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Reminder: Fedora 23 End Of Life on 2016-Dec-20

2016-11-28 Thread Jan Kurik
On Mon, Nov 28, 2016 at 2:57 PM, Josh Boyer  wrote:
> On Mon, Nov 28, 2016 at 8:41 AM, Matthew Miller
>  wrote:
>> On Mon, Nov 28, 2016 at 11:25:50AM +0100, Jan Kurik wrote:
>>> Fedora 23 support is going to be EOL on Tuesday, December 20th, 2016.
>>> At this day we are going to close all the Fedora 23 bugs which will
>>> remain open [1].
>>
>> I'd love to see some statistics on number of bugs closed as EOL (vs
>> other resolutions) per release (since we started using the EOL
>> resolution).
>
> That should be something anyone with bugzilla access can gather

I am going to publish these statistics as a blogpost on the Community
Blog, once F23 is EOL.

Regards,
Jan

> josh
> ___
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-le...@lists.fedoraproject.org



-- 
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Reminder: Fedora 23 End Of Life on 2016-Dec-20

2016-11-28 Thread Josh Boyer
On Mon, Nov 28, 2016 at 8:41 AM, Matthew Miller
 wrote:
> On Mon, Nov 28, 2016 at 11:25:50AM +0100, Jan Kurik wrote:
>> Fedora 23 support is going to be EOL on Tuesday, December 20th, 2016.
>> At this day we are going to close all the Fedora 23 bugs which will
>> remain open [1].
>
> I'd love to see some statistics on number of bugs closed as EOL (vs
> other resolutions) per release (since we started using the EOL
> resolution).

That should be something anyone with bugzilla access can gather

josh
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Reminder: Fedora 23 End Of Life on 2016-Dec-20

2016-11-28 Thread Matthew Miller
On Mon, Nov 28, 2016 at 11:25:50AM +0100, Jan Kurik wrote:
> Fedora 23 support is going to be EOL on Tuesday, December 20th, 2016.
> At this day we are going to close all the Fedora 23 bugs which will
> remain open [1].

I'd love to see some statistics on number of bugs closed as EOL (vs
other resolutions) per release (since we started using the EOL
resolution).

-- 
Matthew Miller

Fedora Project Leader
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


State of LuaTeX in F25/rawhide

2016-11-28 Thread Michael J Gruber
Hi there,

I have some strange doc-build failures in F25 and rawhide. The
pertaining TeX-files work nicely with both pdfTeX and LuaTeX in F24 as
well as with pdfTeX in F25. Upstream builds the doc with LuaTeX.

Is LuaTeX in F25 known in to be in a working state?

More specifically, I'm trying to build pdf output, the doc uses hyperref
(and other packages) with the pdftex driver loaded automatically on F24
and hluatex driver loaded automatically on F25 - lualatex aborts at
\begin{document}:

Package hyperref Message: Driver (autodetected): hluatex.

(/usr/share/texlive/texmf-dist/tex/latex/hyperref/hluatex.def
(/usr/share/texlive/texmf-dist/tex/latex/oberdiek/rerunfilecheck.sty)))
(./config.tex)
Writing index file bibtool.idx
(/usr/share/texlive/texmf-dist/tex/latex/listings/listings.sty
(/usr/share/texlive/texmf-dist/tex/latex/listings/lstmisc.sty)
(/usr/share/texlive/texmf-dist/tex/latex/listings/listings.cfg))
(./bibtool.aux
)
! Missing number, treated as zero.

p
l.160 \begin{document}

%%%...


Forcing the pdftex driver gives an error about missing pdf primitives,
so this is most probably related to the removed pdf primitives in LuaTeX
0.85 and later.

Michael
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: OpenMPI binary only created on 64bit not on 32bit

2016-11-28 Thread Johannes Lips
> Am 28.11.2016 09:51, schrieb Johannes Lips:
> 
> The pregenerated configure-script looks for libmpi.so in "/usr/lib 
> /usr/lib/openmpi /usr/lib64/openmpi/lib", but on i686 it's in 
> "/usr/lib/openmpi/lib".
> Regenerating the configure-script might work.
> Something like "autoreconf --force --install" in %prep after %setup.
> I can not test it at the moment (just windows-machines around me at 
> work).
Thanks a lot. I will try to regenerate the configure script, once I am back 
home. I also reported it back to upstream, since I am not sure if that's fedora 
specific.

Johannes
> 
> Jens
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Nautilus usability

2016-11-28 Thread Michael Schwendt
On Sun, 27 Nov 2016 20:23:31 -0800, Samuel Sieb wrote:

> An SSD drive might not have this problem, but a spinning disk definitely 
> will.  You should never try running multiple copies on the same disk if 
> you want it to finish in a reasonable time.  With one copy, you can do 
> long contiguous reads and writes, but if you have multiple copies 
> happening, the read and write head will be bouncing all over the disk.

And what does that have to do with the progress window issue?
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Nautilus usability

2016-11-28 Thread Michael Schwendt
On Sun, 27 Nov 2016 20:58:45 -0700, Chris Murphy wrote:

> On Sun, Nov 27, 2016 at 8:29 PM, Nico Kadel-Garcia  wrote:
> > On Sun, Nov 27, 2016 at 5:20 PM, Chris Murphy  
> > wrote:  
> >> On Sun, Nov 27, 2016 at 3:12 PM, Michael Schwendt  
> >> wrote:  
> >>> On Sun, 27 Nov 2016 15:07:20 +, Chris Murphy wrote:
> >>>  
>  A directory containing 10,000 1MiB files moved to another directory
>  completes immediately.  
> >>>
> >>> The target directory may be a different partition or a network mount.  
> >>
> >> In that case it's a copy followed by deletion of the original.  
> >
> > And in that case, it's not "completed immediately", is it?  
> 
> Nope, and in that case it's not completely a move either, is it?

And your point is what?

"Move" is just another term for cut'n'paste. Any file operation
that takes some time is enough to reproduce the problem in Nautilus.
Add a couple of tasks that are completed quickly, and they add to
cluttering up the progress window further.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: Nautilus usability

2016-11-28 Thread Michael Stahl
On 11/28/2016 07:53 AM, Samuel Sieb wrote:
> On 11/27/2016 10:40 PM, drago01 wrote:
>> On Monday, November 28, 2016, Py mailto:p...@luyten.fr>> 
>> wrote:
>> >An SSD drive might not have this problem, but a spinning disk
>> >definitely
>> >will.  You should never try running multiple copies on the same disk if
>> >
>> >you want it to finish in a reasonable time.  With one copy, you can do
>> >long contiguous reads and writes, but if you have multiple copies
>> >happening, the read and write head will be bouncing all over the disk.
>>
>> So ideally this is the file manager job to queue copy operations.
>> This allows to do right even when the user is wrong, or wants to
>> launch big copy before coffee.
>>
>>
>> No. The kernel (io scheduler) is supposed to order requests to avoid
>> this scenario. Also sequential reads / writes only happen for large
>> files if there is no fragmentation.
>>
> How could the kernel ever schedule this nicely?  Is it going to hold up 
> one process until the other one is finished?

one thing the kernel knows reasonably well but user-space has to work
out with some effort is which of the multiple copy operations the user
has started are actually working on completely independent storage
devices, in which case there is no penalty to doing them in parallel.

is there an implementation of an heuristic to determine that from
user-space?  i'm quite sure it's more complicated than it appears at
first glance, what with DM, MD, eCryptFS, FUSE, iSCSI, NFS etc.
complicating things, not to mention you could be running in a VM where
you have no idea where your "sda" and "sdb" actually are.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Reminder: Fedora 23 End Of Life on 2016-Dec-20

2016-11-28 Thread Jan Kurik
Fedora 23 support is going to be EOL on Tuesday, December 20th, 2016.
At this day we are going to close all the Fedora 23 bugs which will
remain open [1].
You have last few weeks to submit  your updates to the Fedora 23, if
you have any, before the Fedora 23 release becomes unsupported.

[1] 
https://fedoraproject.org/wiki/Fedora_Program_Management/HouseKeeping/Fedora25#Fedora_23_EOL_Closure

Regards,
Jan
-- 
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: OpenMPI binary only created on 64bit not on 32bit

2016-11-28 Thread jenslody

Am 28.11.2016 09:51, schrieb Johannes Lips:

Hi all,

I've been trying to build gretl with mpi support and I followed the
guidelines in the wiki [1]. It apparently works, since I was able to
build it on 64bit, which worked every time, but the 32bit build always
fails to find the openmpi libraries, as can be seen from the build.log
from the build in [2].
I would like to know if someone could check the spec file, if it's
correct and tell me what's the issue with openmpi and why it can't be
found on 32bit.
The spec file I've been using can be found on my github.[3]

Thanks,
johannes

[1] https://fedoraproject.org/wiki/Packaging:MPI
[2] http://koji.fedoraproject.org/koji/taskinfo?taskID=16646986
[3] https://github.com/hannes101/gretl/blob/master/gretl.spec


The pregenerated configure-script looks for libmpi.so in "/usr/lib 
/usr/lib/openmpi /usr/lib64/openmpi/lib", but on i686 it's in 
"/usr/lib/openmpi/lib".

Regenerating the configure-script might work.
Something like "autoreconf --force --install" in %prep after %setup.
I can not test it at the moment (just windows-machines around me at 
work).


Jens
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


ABI changes analysis for the Linux kernel

2016-11-28 Thread Ponomarenko Andrey
Hello,

This is a tracker of ABI changes in the new upstream releases of the Linux 
kernel (defconfig, x86_64): https://abi-laboratory.pro/tracker/timeline/linux/

The tracker performs backward binary compatibility analysis of all public 
exported symbols and data types (declared in the ".ksymtab" and  ".ksymtab_gpl" 
sections of the vmlinux binary + system calls) and lists all added/removed 
symbols.

The source code of the tool is published on github: 
https://github.com/lvc/kernel-abi-tracker

The tool can be used to analyze downstream kernels as well. See README of the 
project. It's better to use ABICC 2.0 Beta or newer to improve performance of 
the analysis.

Enjoy!
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


OpenMPI binary only created on 64bit not on 32bit

2016-11-28 Thread Johannes Lips
Hi all,

I've been trying to build gretl with mpi support and I followed the guidelines 
in the wiki [1]. It apparently works, since I was able to build it on 64bit, 
which worked every time, but the 32bit build always fails to find the openmpi 
libraries, as can be seen from the build.log from the build in [2].
I would like to know if someone could check the spec file, if it's correct and 
tell me what's the issue with openmpi and why it can't be found on 32bit. 
The spec file I've been using can be found on my github.[3]

Thanks,
johannes

[1] https://fedoraproject.org/wiki/Packaging:MPI
[2] http://koji.fedoraproject.org/koji/taskinfo?taskID=16646986
[3] https://github.com/hannes101/gretl/blob/master/gretl.spec
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Trying not call elfutils functions in ABRT under root

2016-11-28 Thread xmineral
Hello,

im using elfutils in ABRT program specifically when generating core_backtrace. 
According to this https://github.com/abrt/abrt/issues/890 post, it is not a 
good idea using elfutils under root. So I have tried moving as much elfutils 
function calls to non-root process as possible. That means the parent process 
is forked and in child process there are opened necessary files:

https://github.com/xsulca00/abrt/blob/iss%23890/src/hooks/abrt-hook-ccpp.c#L1321
https://github.com/xsulca00/satyr/blob/iss%23890/lib/core_unwind_elfutils.c#L242

and then UID and GID of child is changed and then I can call elfutils:

https://github.com/xsulca00/abrt/blob/iss%23890/src/hooks/abrt-hook-ccpp.c#L1361
https://github.com/xsulca00/satyr/blob/iss%23890/lib/core_unwind_elfutils.c#L392

Is there any way how I can pass the opened files to elfutils functions? 
Especially for "/etc/[tid]/mem" which is needed in dwfl_linux_proc_find_elf 
that is part of Dwfl_Callbacks proc_cb ?

Thank you
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: F26 Self Contained Change: Java/OpenJDK enforces the system-wide crypto policy

2016-11-28 Thread Jan Kurik
On Tue, Nov 22, 2016 at 9:36 AM, Nikos Mavrogiannopoulos
 wrote:
> On Mon, 2016-11-21 at 12:07 -0600, Michael Catanzaro wrote:
>> On Mon, 2016-11-21 at 18:13 +0100, Jan Kurik wrote:
>> >
>> > As it is now, the System-wide crypto policy in F25 is enforced by
>> > the
>> > OpenSSL, GnuTLS and NSS TLS libraries. To harmonize crypto across
>> > all
>> > applications in Fedora, including the Java ones, OpenJDK is
>> > enhanced
>> > to respect the settings of the system-wide crypto policy as well.
>>
>> This is no longer true. I just got a questionable F24 stable release
>> update that implemented this change, so I presume F25 will have it
>> soon
>> enough. We probably don't want an F26 change proposal for a feature
>> that's implemented in a zero-day F25 update.
>
> That wasn't the plan, but it could have been a mistake. Could you add
> more info at:
> https://bugzilla.redhat.com/show_bug.cgi?id=1249083

Hi,

as required by the Change process, after a week since the proposal was
announced, I have put this on the FESCo meeting agenda for the
upcoming Friday. However, reading the discussion in this email thread
and in the tracking bug [2] I am puzzled what the current state is. Is
it already delivered, or is it delivered but disabled, or is it in any
other state ? May I ask the maintainer, or any engineer who is working
on this to clarify the current state of implementation before the
FESCo meeting, so the FESCo has clear information they can use to make
a decision ?

[1] https://pagure.io/fesco/issue/1635#comment-43494
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1249083

Thanks and Best Regards,
Jan
__
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-le...@lists.fedoraproject.org



-- 
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org


Re: upcoming build and release developer flag day December 12 2016

2016-11-28 Thread Alexander Bokovoy

On su, 27 marras 2016, Ken Dreyer wrote:

On Wed, Nov 23, 2016 at 7:17 AM, Alexander Bokovoy  wrote:

Heimdal does not support MS-KKDCP spec, so you are left with direct
Kerberos communication over port 88/tcp or 88/udp, but these are enabled
in Fedora infrastructure, yes.


I thought direct Kerberos service was going to be disabled, to prevent
attackers sniffing and brute-forcing the encrypted preauth timestamp?

This is really a question to Fedora Infra people but last time we
discussed, RHEL 6-based clients and alike were not getting MS-KKDCP
features backported to older MIT Kerberos versions so to support them,
direct access is required.


--
/ Alexander Bokovoy
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org