Re: [Freeipa-devel] FreeIPA 4.1 release preparations
On 8.11.2014 14:43, Lukas Slebodnik wrote: On (20/10/14 16:08), Martin Kosek wrote: On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). And RHEL 7 / CentOS 7? For now, I would only maintain RHEL/CentOS 7.0 compatibility for main mkosek/freeipa repo. It is almost 3 weeks from this mail and freeipa-server cannot be installed from mkosek/freeipa repo on RHEL/CentOS 7.0. bash-4.2# yum install freeipa-server //snip --- Package pki-base.noarch 0:10.2.0-3.el7.centos will be installed -- Processing Dependency: jackson-jaxrs-json-provider for package: pki-base-10.2.0-3.el7.centos.noarch -- Finished Dependency Resolution Error: Package: pki-base-10.2.0-3.el7.centos.noarch (mkosek-freeipa) Requires: jackson-jaxrs-json-provider You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest There were some promises on freeipa-users but nothing has changed. Is somebody working on this problem? BTW I tried to build few missing packages but I gave it up, the dependency tree is pretty long. Anyway, nothing prevents you from grabbing SRPMs from Koji, editing them as appropriate and rebuilding them in mkosek's COPR :-) Maybe it is another candidate for inegtation tests. -- Petr^2 Spacek ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA 4.1 release preparations
On 11/11/2014 10:48 AM, Petr Spacek wrote: On 8.11.2014 14:43, Lukas Slebodnik wrote: On (20/10/14 16:08), Martin Kosek wrote: On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). And RHEL 7 / CentOS 7? For now, I would only maintain RHEL/CentOS 7.0 compatibility for main mkosek/freeipa repo. It is almost 3 weeks from this mail and freeipa-server cannot be installed from mkosek/freeipa repo on RHEL/CentOS 7.0. bash-4.2# yum install freeipa-server //snip --- Package pki-base.noarch 0:10.2.0-3.el7.centos will be installed -- Processing Dependency: jackson-jaxrs-json-provider for package: pki-base-10.2.0-3.el7.centos.noarch -- Finished Dependency Resolution Error: Package: pki-base-10.2.0-3.el7.centos.noarch (mkosek-freeipa) Requires: jackson-jaxrs-json-provider You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest There were some promises on freeipa-users but nothing has changed. Is somebody working on this problem? BTW I tried to build few missing packages but I gave it up, the dependency tree is pretty long. Anyway, nothing prevents you from grabbing SRPMs from Koji, editing them as appropriate and rebuilding them in mkosek's COPR :-) Right. I tried to follow up on Petr's attempts, did some progress but stopped with this dependency: http://copr-be.cloud.fedoraproject.org/results/mkosek/freeipa/epel-7-x86_64/jackson-dataformat-smile-2.2.2-2.fc20/build.log I asked Dogtag team to help with the packaging as this Java dependency hell is outside of our reach. Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA 4.1 release preparations
On (09/11/14 10:09), Martin Kosek wrote: On 11/08/2014 02:43 PM, Lukas Slebodnik wrote: On (20/10/14 16:08), Martin Kosek wrote: On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). And RHEL 7 / CentOS 7? For now, I would only maintain RHEL/CentOS 7.0 compatibility for main mkosek/freeipa repo. It is almost 3 weeks from this mail and freeipa-server cannot be installed from mkosek/freeipa repo on RHEL/CentOS 7.0. bash-4.2# yum install freeipa-server //snip --- Package pki-base.noarch 0:10.2.0-3.el7.centos will be installed -- Processing Dependency: jackson-jaxrs-json-provider for package: pki-base-10.2.0-3.el7.centos.noarch -- Finished Dependency Resolution Error: Package: pki-base-10.2.0-3.el7.centos.noarch (mkosek-freeipa) Requires: jackson-jaxrs-json-provider You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest There were some promises on freeipa-users but nothing has changed. Is somebody working on this problem? Maybe it is another candidate for inegtation tests. LS This problem is known, but it is not simple one to solve. jackson-jaxrs-json-provider is a new dogtag Java dependency which broke the package set on EL 7.0 which however brings a lot of and other build/runtime dependencies. Agree. I just want to find solution and help desperate users on CentOS 7. Question is how to solve this properly, this still needs some work and discussion to happen as current approach obviously do not scale, as you noticed. IMHO, the best solution would be to separate dogtag from freeipa yum repo. Pros: * It would reduce dependency in freeipa repo * dogtag team would maintain separate COPR repo for older distributions. (they know better about new dependencies and java packaging) Cons: Two COPR repositories would need to be enabled for installing latest freeipa. LS ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA 4.1 release preparations
On 11/10/2014 10:09 AM, Lukas Slebodnik wrote: On (09/11/14 10:09), Martin Kosek wrote: On 11/08/2014 02:43 PM, Lukas Slebodnik wrote: On (20/10/14 16:08), Martin Kosek wrote: On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). And RHEL 7 / CentOS 7? For now, I would only maintain RHEL/CentOS 7.0 compatibility for main mkosek/freeipa repo. It is almost 3 weeks from this mail and freeipa-server cannot be installed from mkosek/freeipa repo on RHEL/CentOS 7.0. bash-4.2# yum install freeipa-server //snip --- Package pki-base.noarch 0:10.2.0-3.el7.centos will be installed -- Processing Dependency: jackson-jaxrs-json-provider for package: pki-base-10.2.0-3.el7.centos.noarch -- Finished Dependency Resolution Error: Package: pki-base-10.2.0-3.el7.centos.noarch (mkosek-freeipa) Requires: jackson-jaxrs-json-provider You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest There were some promises on freeipa-users but nothing has changed. Is somebody working on this problem? Maybe it is another candidate for inegtation tests. LS This problem is known, but it is not simple one to solve. jackson-jaxrs-json-provider is a new dogtag Java dependency which broke the package set on EL 7.0 which however brings a lot of and other build/runtime dependencies. Agree. I just want to find solution and help desperate users on CentOS 7. +1, me too. Question is how to solve this properly, this still needs some work and discussion to happen as current approach obviously do not scale, as you noticed. IMHO, the best solution would be to separate dogtag from freeipa yum repo. Pros: * It would reduce dependency in freeipa repo * dogtag team would maintain separate COPR repo for older distributions. (they know better about new dependencies and java packaging) That makes sense, yes. I was thinking along these lines yesterday too. Cons: Two COPR repositories would need to be enabled for installing latest freeipa. Exactly. With multiple required repos, those may quickly get out of sync with regards to suppoted architectures or expectations about these repos. However, if we agree on the expectations with the PKI team, could IPA own cronjob that would watch PKI Copr repo on specified arches and rebuild it for the common one using PKI team SRPMs? Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA 4.1 release preparations
On 11/08/2014 02:43 PM, Lukas Slebodnik wrote: On (20/10/14 16:08), Martin Kosek wrote: On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). And RHEL 7 / CentOS 7? For now, I would only maintain RHEL/CentOS 7.0 compatibility for main mkosek/freeipa repo. It is almost 3 weeks from this mail and freeipa-server cannot be installed from mkosek/freeipa repo on RHEL/CentOS 7.0. bash-4.2# yum install freeipa-server //snip --- Package pki-base.noarch 0:10.2.0-3.el7.centos will be installed -- Processing Dependency: jackson-jaxrs-json-provider for package: pki-base-10.2.0-3.el7.centos.noarch -- Finished Dependency Resolution Error: Package: pki-base-10.2.0-3.el7.centos.noarch (mkosek-freeipa) Requires: jackson-jaxrs-json-provider You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest There were some promises on freeipa-users but nothing has changed. Is somebody working on this problem? Maybe it is another candidate for inegtation tests. LS This problem is known, but it is not simple one to solve. jackson-jaxrs-json-provider is a new dogtag Java dependency which broke the package set on EL 7.0 which however brings a lot of and other build/runtime dependencies. Question is how to solve this properly, this still needs some work and discussion to happen as current approach obviously do not scale, as you noticed. For now, the biggest priority for the team is to work on FreeIPA 4.1.x stabilization release and fix any remaining issues for Fedora 21. Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA 4.1 release preparations
On (20/10/14 16:08), Martin Kosek wrote: On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). And RHEL 7 / CentOS 7? For now, I would only maintain RHEL/CentOS 7.0 compatibility for main mkosek/freeipa repo. It is almost 3 weeks from this mail and freeipa-server cannot be installed from mkosek/freeipa repo on RHEL/CentOS 7.0. bash-4.2# yum install freeipa-server //snip --- Package pki-base.noarch 0:10.2.0-3.el7.centos will be installed -- Processing Dependency: jackson-jaxrs-json-provider for package: pki-base-10.2.0-3.el7.centos.noarch -- Finished Dependency Resolution Error: Package: pki-base-10.2.0-3.el7.centos.noarch (mkosek-freeipa) Requires: jackson-jaxrs-json-provider You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest There were some promises on freeipa-users but nothing has changed. Is somebody working on this problem? Maybe it is another candidate for inegtation tests. LS ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
[Freeipa-devel] FreeIPA 4.1 release preparations
Gentlemen, We are getting very close to FreeIPA 4.1 release, so let us follow the usual drill :-) 1) Here is the WIP release notes, updates welcome: http://www.freeipa.org/page/Releases/4.1.0 2) I am looking for tickets /patches that are a must for 4.1 and that are not yet tracked in Trac FreeIPA 4.1 milestone. 3) I am looking for a Release Man for this release. -- Martin Kosek mko...@redhat.com Supervisor, Software Engineering - Identity Management Team Red Hat Inc. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA 4.1 release preparations
On 20.10.2014 13:59, Martin Kosek wrote: Gentlemen, We are getting very close to FreeIPA 4.1 release, so let us follow the usual drill :-) 1) Here is the WIP release notes, updates welcome: http://www.freeipa.org/page/Releases/4.1.0 2) I am looking for tickets /patches that are a must for 4.1 and that are not yet tracked in Trac FreeIPA 4.1 milestone. 3) I am looking for a Release Man for this release. That would be also me. The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). 4.0.4 will not land in Fedora and will be available only in new copr repo. Proposed name: mkosek/freeipa-4-0 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA 4.1 release preparations
On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). And RHEL 7 / CentOS 7? -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA 4.1 release preparations
On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). And RHEL 7 / CentOS 7? For now, I would only maintain RHEL/CentOS 7.0 compatibility for main mkosek/freeipa repo. Maintaining all the requirements is a burden I would prefer not to also introduce for all the freeipa-x-y Copr repos mostly useful for people porting to other distros or for our Jenkins CI runs. Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA 4.1 release preparations
On 10/20/2014 01:59 PM, Martin Kosek wrote: Gentlemen, We are getting very close to FreeIPA 4.1 release, so let us follow the usual drill :-) 1) Here is the WIP release notes, updates welcome: http://www.freeipa.org/page/Releases/4.1.0 2) I am looking for tickets /patches that are a must for 4.1 and that are not yet tracked in Trac FreeIPA 4.1 milestone. 3) I am looking for a Release Man for this release. SSSD is almost released, DNSSEC patches are also very close to be finalized. So please yell if you see other blockers for 4.1 release we can fix before tomorrow deadline. Otherwise we will get the ball rolling! Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
