Re: F38 proposal: Ostree Native Container (Phase 2, stable) (System-Wide Change proposal)

2022-10-15 Thread Daniel Walsh

On 10/14/22 18:09, Colin Walters wrote:


On Thu, Oct 13, 2022, at 3:08 PM, Ben Cotton wrote:

https://fedoraproject.org/wiki/Changes/OstreeNativeContainerStable

I know there's a lot going on here, so I put together
https://github.com/cgwalters/dnfimage-config
as a demonstration system to show this all works today.  (Though there's a lot 
left to do)

To say this another way...I really, really wish I had a time machine to go back and 
announce *this* instead of doing Fedora Atomic Host way back in the day.  If when Docker 
had come out (before Kubernetes, before podman, before CoreOS) I wish I'd said "hey 
this container stuff is cool, why don't we make bootable host operating systems 
configurable via containers too").  Oh well, better late than never!

(And yes, we're not the first to this nowadays, but...first, this path gives a seamless 
upgrade for all the existing ostree-based systems out there, and second, you absolutely 
can continue to do "dnf install cowsay" or whatever client side on standalone 
systems like desktops and homelab servers, you aren't obligated to tie your an installed 
OS to external build infrastructure)





___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


I just wanted to throw in my two cents on this, that I absolutely love 
the idea. We all wish we had Way Back machines.

___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Fedora rawhide compose report: 20221015.n.0 changes

2022-10-15 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20221014.n.1
NEW: Fedora-Rawhide-20221015.n.0

= SUMMARY =
Added images:1
Dropped images:  2
Added packages:  2
Dropped packages:52
Upgraded packages:   38
Downgraded packages: 0

Size of added packages:  1.42 MiB
Size of dropped packages:1.24 GiB
Size of upgraded packages:   320.30 MiB
Size of downgraded packages: 0 B

Size change of upgraded packages:   3.83 MiB
Size change of downgraded packages: 0 B

= ADDED IMAGES =
Image: Server_KVM qcow2 ppc64le
Path: Server/ppc64le/images/Fedora-Server-KVM-Rawhide-20221015.n.0.ppc64le.qcow2

= DROPPED IMAGES =
Image: Python_Classroom raw-xz aarch64
Path: 
Labs/aarch64/images/Fedora-Python-Classroom-Rawhide-20221014.n.1.aarch64.raw.xz
Image: Server raw-xz aarch64
Path: Server/aarch64/images/Fedora-Server-Rawhide-20221014.n.1.aarch64.raw.xz

= ADDED PACKAGES =
Package: packetdrill-2.0~20220927gitc556afb-2.fc38
Summary: Quick, precise tests for entire TCP/UDP/IPv4/IPv6 network stacks
RPMs:packetdrill packetdrill-data
Size:524.25 KiB

Package: ruby-build-20221004-1.fc38
Summary: Compile and install Ruby
RPMs:ruby-build ruby-build-rbenv
Size:928.45 KiB


= DROPPED PACKAGES =
Package: drush-8.1.16-11.fc37
Summary: Command line shell and scripting interface for Drupal
RPMs:drush
Size:476.59 KiB

Package: origin-3.11.2-8.fc37
Summary: OpenShift Open Source Container Management by Red Hat
RPMs:origin origin-clients origin-cluster-capacity origin-docker-excluder 
origin-dockerregistry origin-excluder origin-hyperkube origin-hypershift 
origin-master origin-node origin-pod origin-sdn-ovs origin-service-catalog 
origin-template-service-broker origin-tests origin-web-console
Size:1.24 GiB

Package: php-JsonSchema-1.6.1-19.fc37
Summary: PHP implementation of JSON schema
RPMs:php-JsonSchema
Size:34.38 KiB

Package: php-SymfonyCmfRouting-1.4.1-11.fc37
Summary: Extends the Symfony2 routing component for dynamic routes and chaining
RPMs:php-SymfonyCmfRouting
Size:41.51 KiB

Package: php-akamai-open-edgegrid-auth-1.0.1-11.fc37
Summary: Implements the Akamai {OPEN} EdgeGrid Authentication
RPMs:php-akamai-open-edgegrid-auth
Size:20.80 KiB

Package: php-akamai-open-edgegrid-client-1.0.0-11.fc37
Summary: Implements the Akamai {OPEN} EdgeGrid Authentication
RPMs:php-akamai-open-edgegrid-client
Size:24.66 KiB

Package: php-asm89-stack-cors-1.2.0-10.fc37
Summary: Cross-origin resource sharing library and stack middleware
RPMs:php-asm89-stack-cors
Size:12.82 KiB

Package: php-channel-digitalsandwich-1.3-20.fc37
Summary: Adds digitalsandwich channel to PEAR
RPMs:php-channel-digitalsandwich
Size:8.31 KiB

Package: php-channel-dropbox-php-1.3-19.fc37
Summary: Adds the Dropbox-PHP channel to PEAR
RPMs:php-channel-dropbox-php
Size:8.30 KiB

Package: php-channel-phpdoc-1.3-21.fc37
Summary: Adds phpdoc channel to PEAR
RPMs:php-channel-phpdoc
Size:8.18 KiB

Package: php-channel-phpqatools-1.3-21.fc37
Summary: Adds phpqatools channel to PEAR
RPMs:php-channel-phpqatools
Size:8.27 KiB

Package: php-channel-pirum-1.3-18.fc37
Summary: Adds pear.pirum-project.org channel to PEAR
RPMs:php-channel-pirum
Size:8.26 KiB

Package: php-channel-symfony-1.3-21.fc37
Summary: Adds symfony project channel to PEAR
RPMs:php-channel-symfony
Size:8.28 KiB

Package: php-codeception-specify-1.1.0-9.fc37
Summary: BDD code blocks for PHPUnit and Codeception
RPMs:php-codeception-specify
Size:15.79 KiB

Package: php-codeception-verify-1.0.0-8.fc37
Summary: BDD assertion library for PHPUnit
RPMs:php-codeception-verify
Size:12.49 KiB

Package: php-consolidation-config-2.0.1-5.fc37
Summary: Provide configuration services for a command-line tool
RPMs:php-consolidation-config
Size:33.01 KiB

Package: php-consolidation-log-2.0.2-5.fc37
Summary: Improved PSR-3 / Psr\\Log logger based on Symfony Console components
RPMs:php-consolidation-log
Size:19.42 KiB

Package: php-di-6.3.4-2.fc36
Summary: The dependency injection container for humans
RPMs:php-di
Size:64.13 KiB

Package: php-di-invoker-2.3.2-3.fc37
Summary: Generic and extensible callable invoker
RPMs:php-di-invoker
Size:23.00 KiB

Package: php-di-phpdoc-reader-2.2.1-4.fc37
Summary: Parses @var and @param values in PHP docblocks
RPMs:php-di-phpdoc-reader
Size:14.60 KiB

Package: php-di-symfony2-bridge-3.0.0-8.fc37
Summary: PHP-DI integration with Symfony
RPMs:php-di-symfony2-bridge
Size:12.10 KiB

Package: php-digitalsandwich-Phake-1.0.2-20.fc37
Summary: Phake is a PHP mocking framework that is based on Mockito
RPMs:php-digitalsandwich-Phake
Size:48.80 KiB

Package: php-dnoegel-php-xdg-base-dir-0.1-14.fc37
Summary: Implementation of the XDG Base Directory Specification for PHP
RPMs:php-dnoegel-php-xdg-base-dir
Size:10.70 KiB

Package: php-dropbox-php-Dropbox-1.0.0-20.fc37
Summary: Library for

Fedora 37 compose report: 20221015.n.0 changes

2022-10-15 Thread Fedora Rawhide Report
OLD: Fedora-37-20221014.n.0
NEW: Fedora-37-20221015.n.0

= SUMMARY =
Added images:0
Dropped images:  2
Added packages:  0
Dropped packages:0
Upgraded packages:   0
Downgraded packages: 0

Size of added packages:  0 B
Size of dropped packages:0 B
Size of upgraded packages:   0 B
Size of downgraded packages: 0 B

Size change of upgraded packages:   0 B
Size change of downgraded packages: 0 B

= ADDED IMAGES =

= DROPPED IMAGES =
Image: Cloud_Base qcow2 ppc64le
Path: Cloud/ppc64le/images/Fedora-Cloud-Base-37-20221014.n.0.ppc64le.qcow2
Image: Cloud_Base raw-xz ppc64le
Path: Cloud/ppc64le/images/Fedora-Cloud-Base-37-20221014.n.0.ppc64le.raw.xz

= ADDED PACKAGES =

= DROPPED PACKAGES =

= UPGRADED PACKAGES =

= DOWNGRADED PACKAGES =
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Review Swaps

2022-10-15 Thread Mark E. Fuller

Hi all,

I have two packages for which I'd like to offer to swap reviews:

1) Bug 2135036 - Review Request: golang-github-sajari-fuzzy
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=2135036

This is a new dependency blocking an update to one of my existing (Go) 
packages. Autogenerated spec, should be a trivial review.


2) Bug 2126785 - Review Request: usbrelay
https://bugzilla.redhat.com/show_bug.cgi?id=2126785

USB-connected electrical relay control, based on hidapi


Thank you

--
Mark E. Fuller, Ph.D.
ful...@fedoraproject.org
ful...@mefuller.dev
@fuller:fedora.im
@fuller:one.ems.host
https://mefuller.dev
PGP Fingerprint: 73F1 A30C BDF4 DB4B C75F FD0F D599 E76C FFCA BF60
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: F38 proposal: Deprecate python-toml (Self-Contained Change proposal)

2022-10-15 Thread Ben Beasley
This is perhaps straying from the topic of python-toml, but this message 
prompted me to remove[1] the python-tomli dependency from the hatch package.


[1] 
https://src.fedoraproject.org/rpms/hatch/c/7a40576697ae9b58231efcfdcf9c869394d52f72?branch=rawhide


On 10/14/22 15:36, Maxwell G via devel wrote:

On 22/10/06, Ben Cotton wrote:

https://fedoraproject.org/wiki/Changes/DeprecatePythonToml

This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.


== Summary ==
The {{package|python-toml}} (`python3-toml`) package will be
[https://docs.fedoraproject.org/en-US/packaging-guidelines/deprecating-packages/
deprecated] in [[Releases/38|Fedora 38]]. The
[https://pypi.org/project/toml/ upstream toml package] is considered
unmaintained (see [[#Detailed_Description|description]]) and Python
3.11 contains [https://peps.python.org/pep-0680/ a TOML-reading
library in the standard library]. Existing Fedora packages depend on
{{package|python-toml}}, so we cannot remove it yet. Packagers are
encouraged to work with upstreams to switch to
[https://peps.python.org/pep-0680/
tomllib]/[https://pypi.org/project/tomli/ tomli] for reading toml or
[https://pypi.org/project/tomli/ tomli-w] for writing it. But
{{package|python-toml}} remains available until it is a leaf package,
it will be removed then (possibly not yet in Fedora 38).

 From the table of contents:

1.4 Detailed Description

 1.4.1 List of components still (Build)Requiring python3-toml
 1.4.2 Migrating to tomllib
 1.4.3 Migrating to tomli
 1.4.4 Migrating to tomllib on Python 3.11+ and falling back to tomli
 1.4.5 Migrating to tomllib on Python 3.11+ and falling back to toml
 1.4.6 Migrating to tomli-w

Perhaps the "Migrating to tomllib on Python 3.11+ and falling back to
tomli" approach should be more strongly recommended? tomllib is based
off of tomli's code and is yet another thing that has to be bootstrapped
during Python rebuilds. python-toml AND python-tomli have been removed
from ELN/RHEL 10, as they're both made redundant by tomllib.

I wonder if it would make sense to also phase out python-tomli at some
point. FWIW, the list of packages that directly require tomli is
relatively small.

$ ./python_toml_deps.py python3-tomli
Runtime dependents of python3-tomli:
1. pyp2spec
2. python3-check-manifest
3. python3-flit
4. python3-flit-core
5. python3-pep517
6. python3-pytest
7. python3-setuptools_scm
8. python3-sphinx-theme-builder
9. python3-towncrier
10. python3-versioningit

Buildtime dependents of python3-tomli:
1. bst-external
2. hatch
3. pyp2spec
4. pytest
5. python-diff-cover
6. python-flit
7. python-pep517
8. python-pyproject-metadata
9. python-setuptools_scm
10. python-sphinx-theme-builder
11. python-towncrier
12. python-versioningit
13. python3-mypy
14. sagemath

Source RPM names:
1. bst-external
2. hatch
3. pyp2spec
4. pytest
5. python-check-manifest
6. python-diff-cover
7. python-flit
8. python-pep517
9. python-pyproject-metadata
10. python-setuptools_scm
11. python-sphinx-theme-builder
12. python-towncrier
13. python-versioningit
14. python3-mypy
15. sagemath

(This list was generated with [0]. Unlike dnf repoquery[1], this script
accounts for conditional dependencies on "python3 < 3.11".)

[0]: 
https://git.sr.ht/~gotmax23/fedora-scripts/tree/main/item/python_toml_deps.py
[1]: https://bugzilla.redhat.com/show_bug.cgi?id=2132462


___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[Test-Announce] Proposal to CANCEL: 2022-10-17 Fedora QA Meeting

2022-10-15 Thread Adam Williamson
Hi folks! I'm proposing we cancel the QA meeting on Monday. I know we've
canceled a few weeks in a row, but there isn't much going on except for
F37 validation at present. There will be a blocker review meeting.

If you're aware of anything it would be useful to discuss this week,
please do reply to this mail and we can run the meeting.

Thanks folks!
-- 
Adam Williamson
Fedora QA
IRC: adamw | Twitter: adamw_ha
https://www.happyassassin.net

___
test-announce mailing list -- test-annou...@lists.fedoraproject.org
To unsubscribe send an email to test-announce-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/test-annou...@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[Test-Announce] 2022-10-17 @ 16:00 UTC - Fedora 37 Blocker Review Meeting

2022-10-15 Thread Adam Williamson
# F36 Blocker Review meeting
# Date: 2022-10-17
# Time: 16:00 UTC
# Location: #fedora-blocker-review on irc.libera.chat

Hi folks! We have 5 proposed Final freeze exceptions to review, and
there's a chance blockers will be proposed over the weekend, so let's
have a review meeting.

If you have time this weekend, you can take a look at the proposed or
accepted blockers before the meeting -  the full lists can be found
here: https://qa.fedoraproject.org/blockerbugs/ .

Remember, you can also now vote on bugs outside of review meetings! If
you look at the bug list in the blockerbugs app, you'll see links
labeled "Vote!" next to all proposed blockers and freeze exceptions.
Those links take you to tickets where you can vote.
https://pagure.io/fedora-qa/blocker-review has instructions on how
exactly you do it. We usually go through the tickets shortly before the
meeting and apply any clear votes, so the meeting will just cover bugs
where there wasn't a clear outcome in the ticket voting yet. **THIS
MEANS IF YOU VOTE NOW, THE MEETING WILL BE SHORTER!**

We'll be evaluating these bugs to see if they violate any of the 
Release Criteria and warrant the blocking of a release if they're not 
fixed. Information on the release criteria for F36 can be found on the 
wiki [0].

For more information about the Blocker and Freeze exception process, 
check out these links:
 - https://fedoraproject.org/wiki/QA:SOP_blocker_bug_process
 - https://fedoraproject.org/wiki/QA:SOP_freeze_exception_bug_process

And for those of you who are curious how a Blocker Review Meeting 
works - or how it's supposed to go and you want to run one - check out 
the SOP on the wiki:
 - https://fedoraproject.org/wiki/QA:SOP_Blocker_Bug_Meeting

Have a good weekend and see you on Monday!

[0] https://fedoraproject.org/wiki/Fedora_Release_Criteria
-- 
Adam Williamson
Fedora QA
IRC: adamw | Twitter: adamw_ha
https://www.happyassassin.net

___
test-announce mailing list -- test-annou...@lists.fedoraproject.org
To unsubscribe send an email to test-announce-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/test-annou...@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Current test branch: Error message systemd-gpt-auto-generator[1169]: Failed to dissect: Permission denied

2022-10-15 Thread Peter Boy
With branch 20221012 as well as 20221014 I get with Fedora Server on BIOS boot 
Hardware several AVC events like

type=AVC msg=audit(1665848517.93:288): avc: denied { sys_admin } for pid=1635 
comm="systemd-gpt-aut" capability=21 
scontext=system_u:system_r:systemd_gpt_generator_t:s0 
tcontext=system_u:system_r:systemd_gpt_generator_t:s0 tclass=capability 
permissive=0

I can’t find any impairments from it so far. 

I couldn’t find anything about it besides an old bug report: 
https://bugzilla.redhat.com/show_bug.cgi?id=1499479


Does anyone have information on whether this can be safely ignored? 



Some Details:

Deploying the ServerKVM immediately after completing the first boot 
configuration I get 2 times the message

systemd-gpt-auto-generator[1169]: Failed to dissect: Permission denied

The system proceeds with any problem and finally shows the login prompt. 

Accordingly I find in audit.log:

type=AVC msg=audit(1665836956.540:288): avc: denied { sys_admin } for pid=1249 
comm="systemd-gpt-aut" capability=21 
scontext=system_u:system_r:systemd_gpt_generator_t:s0 
tcontext=system_u:system_r:systemd_gpt_generator_t:s0 tclass=capability 
permissive=0 


The same happens with a standard installation of Fedora Server on hardware. The 
system boots to login without issues. But as soon as I perform a file 
operation, e.g. creating log. volume and a filesystem I get the same AVC event.

type=AVC msg=audit(1665848517.93:288): avc: denied { sys_admin } for pid=1635 
comm="systemd-gpt-aut" capability=21 
scontext=system_u:system_r:systemd_gpt_generator_t:s0 
tcontext=system_u:system_r:systemd_gpt_generator_t:s0 tclass=capability 
permissive=0




___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Current F37 test branch: probably new SELinux AVCs with libvirt / KVM

2022-10-15 Thread Peter Boy
When creating a new VM on Fedora Server I get 2 AVCs, which I didn’t noticed in 
F36:

SELinux is preventing virtlogd from using the execmem access on a process.
type=AVC msg=audit(1665815361.392:451): avc: denied { execmem } for pid=2086 
comm="virtlogd" scontext=system_u:system_r:virtlogd_t:s0-s0:c0.c1023 
tcontext=system_u:system_r:virtlogd_t:s0-s0:c0.c1023 tclass=process permissive=0


SELinux is preventing libvirt_leasesh from using the execmem access on a 
process.
type=AVC msg=audit(1665851006.673:774): avc: denied { execmem } for pid=6252 
comm="libvirt_leasesh" scontext=system_u:system_r:dnsmasq_t:s0-s0:c0.c1023 
tcontext=system_u:system_r:dnsmasq_t:s0-s0:c0.c1023 tclass=process permissive=0


These execmem access violations were virulent a few years ago, but at least on 
my F36 servers I haven't seen any of them anymore.

Am I the only one where they are back?
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: F38 proposal: Deprecate python-toml (Self-Contained Change proposal)

2022-10-15 Thread Miro Hrončok

On 14. 10. 22 21:36, Maxwell G via devel wrote:

On 22/10/06, Ben Cotton wrote:

https://fedoraproject.org/wiki/Changes/DeprecatePythonToml

This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.


== Summary ==
The {{package|python-toml}} (`python3-toml`) package will be
[https://docs.fedoraproject.org/en-US/packaging-guidelines/deprecating-packages/
deprecated] in [[Releases/38|Fedora 38]]. The
[https://pypi.org/project/toml/ upstream toml package] is considered
unmaintained (see [[#Detailed_Description|description]]) and Python
3.11 contains [https://peps.python.org/pep-0680/ a TOML-reading
library in the standard library]. Existing Fedora packages depend on
{{package|python-toml}}, so we cannot remove it yet. Packagers are
encouraged to work with upstreams to switch to
[https://peps.python.org/pep-0680/
tomllib]/[https://pypi.org/project/tomli/ tomli] for reading toml or
[https://pypi.org/project/tomli/ tomli-w] for writing it. But
{{package|python-toml}} remains available until it is a leaf package,
it will be removed then (possibly not yet in Fedora 38).


 From the table of contents:

1.4 Detailed Description

 1.4.1 List of components still (Build)Requiring python3-toml
 1.4.2 Migrating to tomllib
 1.4.3 Migrating to tomli
 1.4.4 Migrating to tomllib on Python 3.11+ and falling back to tomli
 1.4.5 Migrating to tomllib on Python 3.11+ and falling back to toml
 1.4.6 Migrating to tomli-w


Perhaps the "Migrating to tomllib on Python 3.11+ and falling back to
tomli" approach should be more strongly recommended? tomllib is based
off of tomli's code and is yet another thing that has to be bootstrapped
during Python rebuilds. python-toml AND python-tomli have been removed
from ELN/RHEL 10, as they're both made redundant by tomllib.


Sure, "Migrating to tomllib on Python 3.11+ and falling back to tomli" is the 
recommended approach. How do I make that more visible?


I've removed the "fallback to toml" option entirely now when toml is in EPEL 8 
(thanks for that).



I wonder if it would make sense to also phase out python-tomli at some
point.


I was thinking about deprecating that one as well, but I thought perhaps it's 
too soon for some upstreams. When we deal with RHEL 10, patching tomli imports 
to make them tomllib imports seems "trivial" (unlike migrating from toml).


One slight correction: Neither python-tomli nor python-toml has not been 
removed from ELN, they will only be removed once not depended upon by other ELN 
pacakges.


https://tiny.distro.builders/view-rpm--view-eln--python3-tomli.html
https://tiny.distro.builders/view-rpm--view-eln--python3-toml.html


FWIW, the list of packages that directly require tomli is
relatively small.

$ ./python_toml_deps.py python3-tomli
Runtime dependents of python3-tomli:
1. pyp2spec


I can deal with that one.


2. python3-check-manifest
3. python3-flit
4. python3-flit-core


Flit has been dealt with upstream:

https://github.com/pypa/flit/commit/dba0f317c52


5. python3-pep517
6. python3-pytest


https://github.com/pytest-dev/pytest/commit/2e8a319828


7. python3-setuptools_scm
8. python3-sphinx-theme-builder
9. python3-towncrier
10. python3-versioningit

Buildtime dependents of python3-tomli:
1. bst-external
2. hatch
3. pyp2spec
4. pytest
5. python-diff-cover
6. python-flit
7. python-pep517
8. python-pyproject-metadata
9. python-setuptools_scm
10. python-sphinx-theme-builder
11. python-towncrier
12. python-versioningit
13. python3-mypy
14. sagemath

Source RPM names:
1. bst-external
2. hatch
3. pyp2spec
4. pytest
5. python-check-manifest
6. python-diff-cover
7. python-flit
8. python-pep517
9. python-pyproject-metadata
10. python-setuptools_scm
11. python-sphinx-theme-builder
12. python-towncrier
13. python-versioningit
14. python3-mypy
15. sagemath


I am slowly walking trough upstream projects and dealing with the tomli 
dependency. Chances are, we might get rid of it naturally without deprecation.


--
Miro Hrončok
--
Phone: +420777974800
IRC: mhroncok
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: F38 proposal: Deprecate python-toml (Self-Contained Change proposal)

2022-10-15 Thread Miro Hrončok

On 15. 10. 22 19:23, Miro Hrončok wrote:

7. python3-setuptools_scm


https://github.com/pypa/setuptools_scm/commit/ca52f3e86f

--
Miro Hrončok
--
Phone: +420777974800
IRC: mhroncok
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: F38 proposal: Deprecate python-toml (Self-Contained Change proposal)

2022-10-15 Thread Miro Hrončok

On 15. 10. 22 19:23, Miro Hrončok wrote:


Perhaps the "Migrating to tomllib on Python 3.11+ and falling back to
tomli" approach should be more strongly recommended? tomllib is based
off of tomli's code and is yet another thing that has to be bootstrapped
during Python rebuilds. python-toml AND python-tomli have been removed
from ELN/RHEL 10, as they're both made redundant by tomllib.


Sure, "Migrating to tomllib on Python 3.11+ and falling back to tomli" is the 
recommended approach. How do I make that more visible?


I've removed the "fallback to toml" option entirely now when toml is in EPEL 8 
(thanks for that).


I've added big warning boxes in the "easy but not ideal" migration sections. 
WDYT?

--
Miro Hrončok
--
Phone: +420777974800
IRC: mhroncok
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: F38 proposal: Deprecate python-toml (Self-Contained Change proposal)

2022-10-15 Thread Miro Hrončok

On 15. 10. 22 19:23, Miro Hrončok wrote:

Runtime dependents of python3-tomli:
1. pyp2spec


I can deal with that one.


https://github.com/befeleme/pyp2spec/pull/28

--
Miro Hrončok
--
Phone: +420777974800
IRC: mhroncok
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: F38 proposal: Deprecate python-toml (Self-Contained Change proposal)

2022-10-15 Thread Maxwell G via devel
On Sat Oct 15, 2022 at 19:23 +0200, Miro Hrončok wrote:
> > Perhaps the "Migrating to tomllib on Python 3.11+ and falling back to
> > tomli" approach should be more strongly recommended? tomllib is based
> > off of tomli's code and is yet another thing that has to be bootstrapped
> > during Python rebuilds. python-toml AND python-tomli have been removed
> > from ELN/RHEL 10, as they're both made redundant by tomllib.
>
> Sure, "Migrating to tomllib on Python 3.11+ and falling back to tomli" is the 
> recommended approach. How do I make that more visible?

I think the admonitions you added convey that well. I would also
rearrange the suggestions so the recommended approach is the first thing that
people see. Something like:

1.4 Detailed Description
1.4.1 List of components still (Build)Requiring python3-toml
1.4.2 Migrating to tomllib on Python 3.11+ and falling back to tomli
1.4.3 Migrating to tomllib
1.4.4 Migrating to tomli
1.4.5 Migrating to tomli-w

> I've removed the "fallback to toml" option entirely now when toml is in EPEL 
> 8 
> (thanks for that).

Sure! I started working on tomli for EPEL 7, so that should be covered
as well.

> > I wonder if it would make sense to also phase out python-tomli at some
> > point.
>
> I was thinking about deprecating that one as well, but I thought perhaps it's 
> too soon for some upstreams.

> I am slowly walking trough upstream projects and dealing with the tomli 
> dependency. Chances are, we might get rid of it naturally without deprecation.


I think that's a good approach. It makes sense to avoid deprecating
packages when a gentler approach would work.

> When we deal with RHEL 10, patching tomli imports 
> to make them tomllib imports seems "trivial" (unlike migrating from toml).

Yeah, you still have to change the imports, but you don't have to deal
with TOMLDecodeError or opening files in bytes mode.


> One slight correction: Neither python-tomli nor python-toml has not been 
> removed from ELN, they will only be removed once not depended upon by other 
> ELN 
> pacakges.
>
> https://tiny.distro.builders/view-rpm--view-eln--python3-tomli.html
> https://tiny.distro.builders/view-rpm--view-eln--python3-toml.html

Ah, I see; they've been marked as unwanted but not yet removed.

> > FWIW, the list of packages that directly require tomli is
> > relatively small.
> > 
> > $ ./python_toml_deps.py python3-tomli
> > Runtime dependents of python3-tomli:

> > 3. python3-flit
> > 4. python3-flit-core
>
> Flit has been dealt with upstream:
>
> https://github.com/pypa/flit/commit/dba0f317c52

It's been dealt with upstream, but the python-flit package needs to be
changed to not pull it in unconditionally.

--
Maxwell G (@gotmax23)
Pronouns: He/Him/His


signature.asc
Description: PGP signature
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Ridiculous new Red Hat Bugzilla password security requirements

2022-10-15 Thread Kevin Kofler via devel
Marcin Juszkiewicz wrote:
> 9 characters password in 2022 is considered 'easy breakable' thanks to
> power of GPUs.

To "break" the password offline with a GPU, you need a hashed password to 
begin with. If I log in securely over HTTPS and if the server is not 
compromised (and neither is my computer), you do not get my password, 
neither hashed nor unhashed. So then you need to actually brute-force the 
password by logging in to the server, the GPU will not help you a bit, and 
you will likely get blacklisted pretty quickly. So I see this as an absolute 
non-issue.

> Maybe start using some password manager to generate and store long
> enough passwords?

Well, yes, I store the password in KWallet, so it was not a major 
inconvenience to have to generate and store a new one. It was just an 
entirely unnecessary inconvenience.

Kevin Kofler
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Ridiculous new Red Hat Bugzilla password security requirements

2022-10-15 Thread Kevin Kofler via devel
Sérgio Basto wrote:
> please try `pwgen -s 20 1 -cny`

Good idea, though it actually accepted the 20-character alphanumeric 
password without symbols just fine. I believe there used to be a requirement 
for a symbol, but this does not seem to be a hard requirement anymore, there 
is a more complex strength check now.

Kevin Kofler
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Heads up! OpenImageIO 2.4 series coming to rawhide

2022-10-15 Thread Richard Shaw
Update for Fedora 37 submitted, feel free to update the release notes if
you like.

https://bodhi.fedoraproject.org/updates/FEDORA-2022-45e8ca7d85

Thanks,
Richard

>
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue