Re: [Freeipa-devel] Releasing FreeIPA 4.1.2

2014-11-25 Thread Martin Kosek
On 11/20/2014 01:09 PM, Martin Kosek wrote:
 Hello,
 
 We seem to have enough content to release 4.1.2 that will be required to fix
 some of the Fedora 21 blockers:
 
 https://bugzilla.redhat.com/show_bug.cgi?id=1165856
 https://bugzilla.redhat.com/show_bug.cgi?id=1165261
 
 and Freeze exception:
 https://bugzilla.redhat.com/show_bug.cgi?id=1165674
 
 Current plan is to release stabilization release 4.1.2 with what we have as it
 contains the important installation and upgrade fixes.
 
 The only problem there is that some patches require components that are not in
 Fedora stable repos, more specifically commits:
 
 7aa855a3  - requiring new certmonger
 4e119311  - requiring new pki-core
 
 We can release 4.1.2 with them, but they would need to be removed from Fedora
 21 downstream release and added back in normal 0day Fedora 21 update.
 Alternative way would be to just include selected patches for existing Fedora
 21 build.
 
 Any comments, what else are missing in 4.1.2? I only know about
 https://fedorahosted.org/freeipa/ticket/4718
 https://fedorahosted.org/freeipa/ticket/4728
 which is ACKed at the moment, AFAIK.

We will need to release 4.1.2 today to make sure that the 4.1.2 release can be
picked up in CentOS FreeIPA container.

Petr1, I assume you will do the build now :-) We just need to make sure that
any pending acked patches are pushed. We also need to make sure that our new
dependencies (like the POODLE ones) that were built for Fedora are also in our
CentOS repo so that FreeIPA 4.1.2 is still well installlable there.

Thanks,
Martin

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] Releasing FreeIPA 4.1.2

2014-11-25 Thread Alexander Bokovoy

On Tue, 25 Nov 2014, Martin Kosek wrote:

On 11/20/2014 01:09 PM, Martin Kosek wrote:

Hello,

We seem to have enough content to release 4.1.2 that will be required to fix
some of the Fedora 21 blockers:

https://bugzilla.redhat.com/show_bug.cgi?id=1165856
https://bugzilla.redhat.com/show_bug.cgi?id=1165261

and Freeze exception:
https://bugzilla.redhat.com/show_bug.cgi?id=1165674

Current plan is to release stabilization release 4.1.2 with what we have as it
contains the important installation and upgrade fixes.

The only problem there is that some patches require components that are not in
Fedora stable repos, more specifically commits:

7aa855a3  - requiring new certmonger
4e119311  - requiring new pki-core

We can release 4.1.2 with them, but they would need to be removed from Fedora
21 downstream release and added back in normal 0day Fedora 21 update.
Alternative way would be to just include selected patches for existing Fedora
21 build.

Any comments, what else are missing in 4.1.2? I only know about
https://fedorahosted.org/freeipa/ticket/4718
https://fedorahosted.org/freeipa/ticket/4728
which is ACKed at the moment, AFAIK.


We will need to release 4.1.2 today to make sure that the 4.1.2 release can be
picked up in CentOS FreeIPA container.

Petr1, I assume you will do the build now :-) We just need to make sure that
any pending acked patches are pushed. We also need to make sure that our new
dependencies (like the POODLE ones) that were built for Fedora are also in our
CentOS repo so that FreeIPA 4.1.2 is still well installlable there.

My patch 0170 is needed for trusts to ease debugging in a typical case
of firewall/replication issues.
--
/ Alexander Bokovoy

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] Releasing FreeIPA 4.1.2

2014-11-25 Thread Martin Kosek
On 11/25/2014 09:36 AM, Alexander Bokovoy wrote:
 On Tue, 25 Nov 2014, Martin Kosek wrote:
 On 11/20/2014 01:09 PM, Martin Kosek wrote:
 Hello,

 We seem to have enough content to release 4.1.2 that will be required to fix
 some of the Fedora 21 blockers:

 https://bugzilla.redhat.com/show_bug.cgi?id=1165856
 https://bugzilla.redhat.com/show_bug.cgi?id=1165261

 and Freeze exception:
 https://bugzilla.redhat.com/show_bug.cgi?id=1165674

 Current plan is to release stabilization release 4.1.2 with what we have as 
 it
 contains the important installation and upgrade fixes.

 The only problem there is that some patches require components that are not 
 in
 Fedora stable repos, more specifically commits:

 7aa855a3  - requiring new certmonger
 4e119311  - requiring new pki-core

 We can release 4.1.2 with them, but they would need to be removed from 
 Fedora
 21 downstream release and added back in normal 0day Fedora 21 update.
 Alternative way would be to just include selected patches for existing 
 Fedora
 21 build.

 Any comments, what else are missing in 4.1.2? I only know about
 https://fedorahosted.org/freeipa/ticket/4718
 https://fedorahosted.org/freeipa/ticket/4728
 which is ACKed at the moment, AFAIK.

 We will need to release 4.1.2 today to make sure that the 4.1.2 release can 
 be
 picked up in CentOS FreeIPA container.

 Petr1, I assume you will do the build now :-) We just need to make sure that
 any pending acked patches are pushed. We also need to make sure that our new
 dependencies (like the POODLE ones) that were built for Fedora are also in 
 our
 CentOS repo so that FreeIPA 4.1.2 is still well installlable there.
 My patch 0170 is needed for trusts to ease debugging in a typical case
 of firewall/replication issues.

I see patch 0170 as a useful patch, but not as blocking for 4.1.2 which we need
for the CentOS containers. IMO it can wait for 4.1.3.

Martin

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] Releasing FreeIPA 4.1.2

2014-11-25 Thread Martin Kosek
On 11/25/2014 10:56 AM, Martin Kosek wrote:
 On 11/25/2014 09:36 AM, Alexander Bokovoy wrote:
 On Tue, 25 Nov 2014, Martin Kosek wrote:
 On 11/20/2014 01:09 PM, Martin Kosek wrote:
 Hello,

 We seem to have enough content to release 4.1.2 that will be required to 
 fix
 some of the Fedora 21 blockers:

 https://bugzilla.redhat.com/show_bug.cgi?id=1165856
 https://bugzilla.redhat.com/show_bug.cgi?id=1165261

 and Freeze exception:
 https://bugzilla.redhat.com/show_bug.cgi?id=1165674

 Current plan is to release stabilization release 4.1.2 with what we have 
 as it
 contains the important installation and upgrade fixes.

 The only problem there is that some patches require components that are 
 not in
 Fedora stable repos, more specifically commits:

 7aa855a3  - requiring new certmonger
 4e119311  - requiring new pki-core

 We can release 4.1.2 with them, but they would need to be removed from 
 Fedora
 21 downstream release and added back in normal 0day Fedora 21 update.
 Alternative way would be to just include selected patches for existing 
 Fedora
 21 build.

 Any comments, what else are missing in 4.1.2? I only know about
 https://fedorahosted.org/freeipa/ticket/4718
 https://fedorahosted.org/freeipa/ticket/4728
 which is ACKed at the moment, AFAIK.

 We will need to release 4.1.2 today to make sure that the 4.1.2 release can 
 be
 picked up in CentOS FreeIPA container.

 Petr1, I assume you will do the build now :-) We just need to make sure that
 any pending acked patches are pushed. We also need to make sure that our new
 dependencies (like the POODLE ones) that were built for Fedora are also in 
 our
 CentOS repo so that FreeIPA 4.1.2 is still well installlable there.
 My patch 0170 is needed for trusts to ease debugging in a typical case
 of firewall/replication issues.
 
 I see patch 0170 as a useful patch, but not as blocking for 4.1.2 which we 
 need
 for the CentOS containers. IMO it can wait for 4.1.3.
 
 Martin

Ok, you won - the patch was reviewed fast enough so it ends up in 4.1.2 :-)

We can go ahead with 4.1.2 tagging then.

Martin

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


Re: [Freeipa-devel] Releasing FreeIPA 4.1.2

2014-11-21 Thread Petr Vobornik

On 20.11.2014 15:49, Alexander Bokovoy wrote:

On Thu, 20 Nov 2014, Alexander Bokovoy wrote:

On Thu, 20 Nov 2014, Martin Kosek wrote:

Hello,

We seem to have enough content to release 4.1.2 that will be required
to fix
some of the Fedora 21 blockers:

https://bugzilla.redhat.com/show_bug.cgi?id=1165856
https://bugzilla.redhat.com/show_bug.cgi?id=1165261

and Freeze exception:
https://bugzilla.redhat.com/show_bug.cgi?id=1165674

Current plan is to release stabilization release 4.1.2 with what we
have as it
contains the important installation and upgrade fixes.

The only problem there is that some patches require components that
are not in
Fedora stable repos, more specifically commits:

7aa855a3  - requiring new certmonger
4e119311  - requiring new pki-core

We can release 4.1.2 with them, but they would need to be removed
from Fedora
21 downstream release and added back in normal 0day Fedora 21 update.
Alternative way would be to just include selected patches for
existing Fedora
21 build.

Any comments, what else are missing in 4.1.2? I only know about
https://fedorahosted.org/freeipa/ticket/4718
https://fedorahosted.org/freeipa/ticket/4728
which is ACKed at the moment, AFAIK.


certmonger and pki-core parts can be backed out in the F21 build, they
don't create issues for install time -- by definition we are not
renewing certs at that point and we are not supporting becoming MS CA
subordinate in the FreeIPA Server Role.

Thus, we can do the release without them to Fedora 21 (and with them to
rawhide) and have 0day update.

It looks like we'll have to pick up required fixes and do a build with
just them for Fedora 21 final to make sure we don't violate release
rules.

We can do the full release after it and push it to updates-testing once
stable updates consumed the fixed build for the Fedora 21 release.


Fedora 21 build and update with fixes for blockers created:

https://admin.fedoraproject.org/updates/freeipa-4.1.1-2.fc21
--
Petr Vobornik

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel


[Freeipa-devel] Releasing FreeIPA 4.1.2

2014-11-20 Thread Martin Kosek
Hello,

We seem to have enough content to release 4.1.2 that will be required to fix
some of the Fedora 21 blockers:

https://bugzilla.redhat.com/show_bug.cgi?id=1165856
https://bugzilla.redhat.com/show_bug.cgi?id=1165261

and Freeze exception:
https://bugzilla.redhat.com/show_bug.cgi?id=1165674

Current plan is to release stabilization release 4.1.2 with what we have as it
contains the important installation and upgrade fixes.

The only problem there is that some patches require components that are not in
Fedora stable repos, more specifically commits:

7aa855a3  - requiring new certmonger
4e119311  - requiring new pki-core

We can release 4.1.2 with them, but they would need to be removed from Fedora
21 downstream release and added back in normal 0day Fedora 21 update.
Alternative way would be to just include selected patches for existing Fedora
21 build.

Any comments, what else are missing in 4.1.2? I only know about
https://fedorahosted.org/freeipa/ticket/4718
https://fedorahosted.org/freeipa/ticket/4728
which is ACKed at the moment, AFAIK.

-- 
Martin Kosek mko...@redhat.com
Supervisor, Software Engineering - Identity Management Team
Red Hat Inc.

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel