Re: [Freeipa-devel] Ready to release?

2014-07-07 Thread Jan Cholasta

Hi,

On 4.7.2014 17:34, Petr Spacek wrote:

On 4.7.2014 17:20, Petr Viktorin wrote:

On 07/04/2014 04:57 PM, Martin Kosek wrote:

Hello developers!

I would like to thank everyone for the hard work during the last weeks,
when finishing the FreeIPA 4.0 release, I saw many last stabilization
fixes in DNS, OTP, ACIs, upgrade and Web UI areas.

The last major work that is still not pushed is the CA management tool.
Unfortunately, the final development and review did not go so well and
we still do not have final patches.

Given that this is a major piece of work (50 patches) and given that
the reviewer is on a leave, I am considering moving the feature to next
release - FreeIPA 4.1 which is short and would still make it to Fedora
21. I would not like to stall 4.0 any more, I would like to offer all
the work we have done for wider testing as soon as possible.

Thoughts? Any other last patches you would like to add to add to 4.0 GA?
There is still little time, but remember, git tag hammer is ready to
fire.


I'm testing these two:
- mbasti-0098-100, DNS tests
- mkosek-478, Spec bump

Then there's pvoborni-695 with only a functional ACK

The CA management is still up for discussion, but it's more and more
likely


We have deferred 'full' DNSSEC support already so it is not unprecedented.

I have one proposal (valid only if we decide to defer CA management):

Maybe we could release 4.1 in few weeks when DNSSEC and CA management
are done  properly reviewed.

That would allow us to follow 'release early, release often' lore. In my
opinion, smaller release = safer.

Of course, it would mean shifting current version numbers from 4.x to
4.(x+1), sorry Martin! :-)



I'm fine with deferring CA management. I could fix the remaining issues 
in time, but Rob, who is reviewing the patches, is on PTO and IMO the 
code could use some more testing before releasing it into the wild.


Honza

--
Jan Cholasta

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] Ready to release?

2014-07-07 Thread Nathaniel McCallum
On Fri, 2014-07-04 at 17:34 +0200, Petr Spacek wrote:
 On 4.7.2014 17:20, Petr Viktorin wrote:
  On 07/04/2014 04:57 PM, Martin Kosek wrote:
  Hello developers!
 
  I would like to thank everyone for the hard work during the last weeks,
  when finishing the FreeIPA 4.0 release, I saw many last stabilization
  fixes in DNS, OTP, ACIs, upgrade and Web UI areas.
 
  The last major work that is still not pushed is the CA management tool.
  Unfortunately, the final development and review did not go so well and
  we still do not have final patches.
 
  Given that this is a major piece of work (50 patches) and given that
  the reviewer is on a leave, I am considering moving the feature to next
  release - FreeIPA 4.1 which is short and would still make it to Fedora
  21. I would not like to stall 4.0 any more, I would like to offer all
  the work we have done for wider testing as soon as possible.
 
  Thoughts? Any other last patches you would like to add to add to 4.0 GA?
  There is still little time, but remember, git tag hammer is ready to fire.
 
  I'm testing these two:
  - mbasti-0098-100, DNS tests
  - mkosek-478, Spec bump
 
  Then there's pvoborni-695 with only a functional ACK
 
  The CA management is still up for discussion, but it's more and more likely
 
 We have deferred 'full' DNSSEC support already so it is not unprecedented.
 
 I have one proposal (valid only if we decide to defer CA management):
 
 Maybe we could release 4.1 in few weeks when DNSSEC and CA management are 
 done 
  properly reviewed.
 
 That would allow us to follow 'release early, release often' lore. In my 
 opinion, smaller release = safer.
 
 Of course, it would mean shifting current version numbers from 4.x to 
 4.(x+1), 
 sorry Martin! :-)

I like this plan. 4.1 could cover just DNSSEC, CA management and 4.0
fixes. The original plan for 4.1 could become 4.2. I don't think the
change in version numbers would imply a change in overall timing.

I completely agree that smaller releases are better. :)

Nathaniel


___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


[Freeipa-devel] Ready to release

2014-07-07 Thread Petr Viktorin

On 07/04/2014 04:57 PM, Martin Kosek wrote:

Hello developers!

I would like to thank everyone for the hard work during the last weeks,
when finishing the FreeIPA 4.0 release, I saw many last stabilization
fixes in DNS, OTP, ACIs, upgrade and Web UI areas.


[...]


Thoughts? Any other last patches you would like to add to add to 4.0 GA?
There is still little time, but remember, git tag hammer is ready to fire.



The tag hammer came down, FreeIPA 4.0.0 is ready to be released. It's 
getting late today, and the ARM build looks like it'll need another few 
hours, so I'll send the announcement and update the remaining Wiki pages 
tomorrow morning (CET).

But you can already go ahead and try 4.0 out or check the release notes.


Release notes: http://www.freeipa.org/page/Releases/4.0.0
Download page: http://www.freeipa.org/page/Downloads
SHA1: 0021d15a0ec38276916014c85acc0009f3b0e279
MD5: 84ee2352f153074e2ace1d04ba4c2efb

Packages for Fedora Rawhide (f21) are waiting for the ARM build: 
http://koji.fedoraproject.org/koji/taskinfo?taskID=7113930


Fedora 20 COPR repository: 
https://copr.fedoraproject.org/coprs/pviktori/freeipa/
This is under my name, since COPR is tied to Fedora accounts. If you 
have git commit rights, I'll be glad to give you build/admin rights for 
the COPR -- you just need to request them in the Permissions tab.



--
PetrĀ³

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


[Freeipa-devel] Ready to release?

2014-07-04 Thread Martin Kosek

Hello developers!

I would like to thank everyone for the hard work during the last weeks, when 
finishing the FreeIPA 4.0 release, I saw many last stabilization fixes in DNS, 
OTP, ACIs, upgrade and Web UI areas.


The last major work that is still not pushed is the CA management tool. 
Unfortunately, the final development and review did not go so well and we still 
do not have final patches.


Given that this is a major piece of work (50 patches) and given that the 
reviewer is on a leave, I am considering moving the feature to next release - 
FreeIPA 4.1 which is short and would still make it to Fedora 21. I would not 
like to stall 4.0 any more, I would like to offer all the work we have done for 
wider testing as soon as possible.


Thoughts? Any other last patches you would like to add to add to 4.0 GA? There 
is still little time, but remember, git tag hammer is ready to fire.


Thanks.

--
Martin Kosek mko...@redhat.com
Supervisor, Software Engineering - Identity Management Team
Red Hat Inc.

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] Ready to release?

2014-07-04 Thread Petr Viktorin

On 07/04/2014 04:57 PM, Martin Kosek wrote:

Hello developers!

I would like to thank everyone for the hard work during the last weeks,
when finishing the FreeIPA 4.0 release, I saw many last stabilization
fixes in DNS, OTP, ACIs, upgrade and Web UI areas.

The last major work that is still not pushed is the CA management tool.
Unfortunately, the final development and review did not go so well and
we still do not have final patches.

Given that this is a major piece of work (50 patches) and given that
the reviewer is on a leave, I am considering moving the feature to next
release - FreeIPA 4.1 which is short and would still make it to Fedora
21. I would not like to stall 4.0 any more, I would like to offer all
the work we have done for wider testing as soon as possible.

Thoughts? Any other last patches you would like to add to add to 4.0 GA?
There is still little time, but remember, git tag hammer is ready to fire.


I'm testing these two:
- mbasti-0098-100, DNS tests
- mkosek-478, Spec bump

Then there's pvoborni-695 with only a functional ACK

The CA management is still up for discussion, but it's more and more 
likely that it'll slip. If you have an opinion, let it be heard.


Finally, I'd like to update translations one more time, since we made 
quite a large change very late.



That should be it. If you'd like to include a patch that you don't see 
here, shout now.


--
PetrĀ³

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] Ready to release?

2014-07-04 Thread Petr Spacek

On 4.7.2014 17:20, Petr Viktorin wrote:

On 07/04/2014 04:57 PM, Martin Kosek wrote:

Hello developers!

I would like to thank everyone for the hard work during the last weeks,
when finishing the FreeIPA 4.0 release, I saw many last stabilization
fixes in DNS, OTP, ACIs, upgrade and Web UI areas.

The last major work that is still not pushed is the CA management tool.
Unfortunately, the final development and review did not go so well and
we still do not have final patches.

Given that this is a major piece of work (50 patches) and given that
the reviewer is on a leave, I am considering moving the feature to next
release - FreeIPA 4.1 which is short and would still make it to Fedora
21. I would not like to stall 4.0 any more, I would like to offer all
the work we have done for wider testing as soon as possible.

Thoughts? Any other last patches you would like to add to add to 4.0 GA?
There is still little time, but remember, git tag hammer is ready to fire.


I'm testing these two:
- mbasti-0098-100, DNS tests
- mkosek-478, Spec bump

Then there's pvoborni-695 with only a functional ACK

The CA management is still up for discussion, but it's more and more likely


We have deferred 'full' DNSSEC support already so it is not unprecedented.

I have one proposal (valid only if we decide to defer CA management):

Maybe we could release 4.1 in few weeks when DNSSEC and CA management are done 
 properly reviewed.


That would allow us to follow 'release early, release often' lore. In my 
opinion, smaller release = safer.


Of course, it would mean shifting current version numbers from 4.x to 4.(x+1), 
sorry Martin! :-)


--
Petr^2 Spacek

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel