Re: New Fedora Planet

2024-05-20 Thread Alexander Bokovoy
two projects. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le

Re: F41 Change Proposal: Pytest 8 (self-contained)

2024-04-08 Thread Alexander Bokovoy
plugins (multihost, sourceorder), also add our own extensions. I filed an upstream issue to track Pytest 8: https://pagure.io/freeipa/issue/9571 -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

Re: Three steps we could take to make supply chain attacks a bit harder

2024-03-31 Thread Alexander Bokovoy
n a proper way, we might reuse those to improve Fedora user experience. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland -- ___ devel mailing list -- devel@lists.fedorap

Re: F41 Change Proposal: Disable openSSL Engine Support (system-wide)

2024-03-20 Thread Alexander Bokovoy
(submit support for provider vs engine to Linux kernel upstream). - signing of shim, grub2, fwupd, and the kernel in the build system - mokutil mokutil does not use ENGINE_* APIs at all. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red

Re: F40 Change Proposal: 389_Directory_Server_3.0.0 (System-Wide)

2023-11-27 Thread Alexander Bokovoy
ist Archives: https://lists.fedoraproject.org/archives/list/devel-annou...@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red

Re: How to handle updates with large python dependency chains?

2023-05-02 Thread Alexander Bokovoy
/ -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code

Re: Orphaning despite having maintainers?

2023-04-27 Thread Alexander Bokovoy
On to, 27 huhti 2023, Alexander Bokovoy wrote: On ke, 26 huhti 2023, Gary Buhrmaster wrote: On Wed, Apr 26, 2023 at 9:04 AM Alexander Bokovoy wrote: Hi, This morning I woke up to find that packages I maintain were orphaned out of blue. Nobody contacted the maintainers, nobody raised any

Re: Orphaning despite having maintainers?

2023-04-27 Thread Alexander Bokovoy
On to, 27 huhti 2023, Miro Hrončok wrote: On 27. 04. 23 12:19, Alexander Bokovoy wrote: The graph in the packager dashboard is showing that resteasy directly depends on java-1.8.0-openjdk which is not true. resteasy (maintained by: cfu, cipherboy, ckelley, edewata, jmagne, mfargett, mharmsen

Re: Orphaning despite having maintainers?

2023-04-27 Thread Alexander Bokovoy
On to, 27 huhti 2023, Stephen Smoogen wrote: On Wed, 26 Apr 2023 at 22:32, Alexander Bokovoy wrote: On ke, 26 huhti 2023, Kevin Fenzi wrote: >On Wed, Apr 26, 2023 at 07:23:10PM +0100, Chris Kelley wrote: >> One thing I still don't understand is why all of our java packages are

Re: Orphaning despite having maintainers?

2023-04-26 Thread Alexander Bokovoy
19 Packages Total download size: 1.6 M Installed size: 2.4 M Is this ok [y/N]: -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel

Re: Orphaning despite having maintainers?

2023-04-26 Thread Alexander Bokovoy
On ke, 26 huhti 2023, Gary Buhrmaster wrote: On Wed, Apr 26, 2023 at 9:04 AM Alexander Bokovoy wrote: Hi, This morning I woke up to find that packages I maintain were orphaned out of blue. Nobody contacted the maintainers, nobody raised any tickets to releng, as far as I can see. Yet, releng

Orphaning despite having maintainers?

2023-04-26 Thread Alexander Bokovoy
raised the issue https://pagure.io/releng/issue/11406 -- if you also experienced a similar orphaning, please add your data. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

Re: It’s time to transform the Fedora devel list into something new

2023-04-21 Thread Alexander Bokovoy
ppen or never got any follow-up on the thread to my comments. This is an experience I want to avoid. If this is what Matthew is proposing a Fedora development discussions to be, then sorry, this is not an improvement. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Managem

Re: Certbot 2.2.0 Update

2023-03-21 Thread Alexander Bokovoy
will behave against 2.2.0. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le

Re: Regular crash of the internal DirectoryServer389 replication

2022-11-18 Thread Alexander Bokovoy
ct.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue -- /

Re: FontAwesome 6

2022-11-05 Thread Alexander Bokovoy
/acme/css/assets/fonts/webfonts/fa-solid-900.woff dogtag-pki-acme-11.1.0-1.fc36.noarch # rpm -qf /usr/share/pki/common-ui/fonts/fontawesome-webfont.woff dogtag-pki-theme-11.1.0-1.fc36.noarch -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat

Re: Inactive packagers to be removed after the F37 release

2022-10-28 Thread Alexander Bokovoy
here are now two articles: Part 1, where I am talking about Fedora infrastructure aspects: https://vda.li/en/posts/2022/10/28/FreeIPA-Authentication-Improvements-and-Fedora-Infra/ Part 2, where FreeIPA-specific improvements and details discussed: https://vda.li/en/posts/2022/10/28/FreeIPA-Authenticat

Re: Inactive packagers to be removed after the F37 release

2022-09-16 Thread Alexander Bokovoy
On to, 15 syys 2022, Kevin Fenzi wrote: On Thu, Sep 15, 2022 at 09:26:36AM +0300, Alexander Bokovoy wrote: Proven packagers seem to be a fair category to address. Also packagers responsible for security-related bits of the distribution. Compilers? Well, as others noted in this thread, any

Re: Inactive packagers to be removed after the F37 release

2022-09-15 Thread Alexander Bokovoy
On ke, 14 syys 2022, Kevin Fenzi wrote: On Wed, Sep 14, 2022 at 05:47:46PM +0300, Alexander Bokovoy wrote: On ke, 14 syys 2022, Stephen Smoogen wrote: > On Wed, 14 Sept 2022 at 05:28, Alexander Bokovoy > wrote: > > > > > Sadly, it cannot be just 'any' certificate

Re: Inactive packagers to be removed after the F37 release

2022-09-14 Thread Alexander Bokovoy
On ke, 14 syys 2022, Stephen Smoogen wrote: On Wed, 14 Sept 2022 at 05:28, Alexander Bokovoy wrote: Sadly, it cannot be just 'any' certificate, it has to be issued by a certificate authority that is trusted by the KDC as well. For example, by FreeIPA CA which is already ran by the Fedora

Re: Inactive packagers to be removed after the F37 release

2022-09-14 Thread Alexander Bokovoy
to spam, report it: https://pagure.io/fedora-infrastructure/new_issue -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org

Re: Inactive packagers to be removed after the F37 release

2022-09-06 Thread Alexander Bokovoy
e of integrating with QEMU. This is far from being complete and user-friendly. [1] https://www.token2.eu/shop/product/token2-t2f2-fido2-and-u2f-security-key [2] https://github.com/google/OpenSK/issues/485 -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identi

Re: Inactive packagers to be removed after the F37 release

2022-09-05 Thread Alexander Bokovoy
On ma, 05 syys 2022, Vitaly Zaitsev via devel wrote: On 05/09/2022 17:05, Alexander Bokovoy wrote: The site blocks access from outside of Russia. Yes, you need RU proxy to read the original documents. But you can use your favorite search engine to find "FSB notification" articles i

Re: Inactive packagers to be removed after the F37 release

2022-09-05 Thread Alexander Bokovoy
): - http://clsz.fsb.ru/clsz/in-out.htm - http://clsz.fsb.ru/clsz/notif.htm The site blocks access from outside of Russia. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel

Re: Inactive packagers to be removed after the F37 release

2022-09-04 Thread Alexander Bokovoy
deployed in a containerized way, then probably focusing on another feature rich open source IdP could be a better option. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel

Re: Thoughts welcome: interface between automated test gating and the "critical path"

2022-08-31 Thread Alexander Bokovoy
On ti, 30 elo 2022, Adam Williamson wrote: On Tue, 2022-08-30 at 09:39 +0300, Alexander Bokovoy wrote: On ma, 29 elo 2022, Adam Williamson wrote: > On Tue, 2022-08-30 at 00:32 -0400, DJ Delorie wrote: > > It sounds to me like the problem is "how do we best use the available >

Re: Thoughts welcome: interface between automated test gating and the "critical path"

2022-08-30 Thread Alexander Bokovoy
ipating in a joint development. Perhaps, The Fedora Packager Dashboard could be extended to pick up results of tests relevant to your packages and display them together? This way FreeIPA maintainers can see an overview of all tests related to FreeIPA in one place and see if any help is needed to res

Re: Users with commit rights in src.fp.o but no more in packager group

2022-08-25 Thread Alexander Bokovoy
*not* require the account to be listed in maintainers or to have commit rights. Same for ipa-maint account. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list

Re: liburing update

2022-08-23 Thread Alexander Bokovoy
call __io_uring_get_cqe() either. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to deve

slapi-nis license change

2022-08-20 Thread Alexander Bokovoy
server which moved to GPLv3-or-later already for some years. The relicensing was agreed with Red Hat legal for quite some time already, since Red Hat is the only copyright owner. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited

Re: F37 proposal: BIND 9.18 (Self-Contained Change proposal)

2022-07-16 Thread Alexander Bokovoy
evel@lists.fedoraproject.org > Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure > -- -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland _

Re: Landing a larger-than-release change (distrusting SHA-1 signatures)

2022-03-09 Thread Alexander Bokovoy
On ke, 09 maalis 2022, Daniel P. Berrangé wrote: On Wed, Mar 09, 2022 at 02:32:48PM +0200, Alexander Bokovoy wrote: On ke, 09 maalis 2022, Daniel P. Berrangé wrote: > On Wed, Mar 09, 2022 at 10:46:21AM +0100, Alexander Sosedkin wrote: > > On Wed, Mar 9, 2022 at 10:20 AM Daniel P.

Re: Landing a larger-than-release change (distrusting SHA-1 signatures)

2022-03-09 Thread Alexander Bokovoy
s is one of those implementations which currently forced to use SHA-1 due to interoperability issues and also due to compliance with RFCs. In the context of Fedora development, for example, use of Anonymous PKINIT requires usage of SHA-1 in PKINIT pre-authentication module in MIT Kerberos. We have to su

Re: Preventing account takeovers through expired domains

2022-02-21 Thread Alexander Bokovoy
ing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Manage

Re: Package notes issues with python wheel building

2022-02-02 Thread Alexander Bokovoy
://bugzilla.redhat.com/show_bug.cgi?id=2048909 I guess we need to fix krb5 this way too. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org

Re: Orphaned packages looking for new maintainers​​​

2021-12-22 Thread Alexander Bokovoy
On ke, 22 joulu 2021, Alexander Bokovoy wrote: On ke, 22 joulu 2021, Mat Booth wrote: On Tue, 21 Dec 2021 at 14:35, Alexander Bokovoy wrote: I picked up wsdl4j to prevent actions which would lead to tomcat, Dogtag, and FreeIPA being orphaned over Christmas break. Have you tried building

Re: Orphaned packages looking for new maintainers​​​

2021-12-22 Thread Alexander Bokovoy
On ke, 22 joulu 2021, Mat Booth wrote: On Tue, 21 Dec 2021 at 14:35, Alexander Bokovoy wrote: I picked up wsdl4j to prevent actions which would lead to tomcat, Dogtag, and FreeIPA being orphaned over Christmas break. Have you tried building tomcat without wsdl? I can't see where

Re: Orphaned packages looking for new maintainers​​​

2021-12-21 Thread Alexander Bokovoy
On ti, 21 joulu 2021, Miro Hrončok wrote: On 21. 12. 21 15:33, Alexander Bokovoy wrote: wsdl4j   akurtakov, mizdebsk, orphan   2 weeks ago I picked up wsdl4j to prevent actions which would lead to tomcat, Dogtag, and FreeIPA being orphaned over Christmas break

Re: Orphaned packages looking for new maintainers​​​

2021-12-21 Thread Alexander Bokovoy
/find_unblocked_orphans.py -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le

Re: F36 Change: Make Rescue Mode Work With Locked Root (System-Wide Change proposal)

2021-12-08 Thread Alexander Bokovoy
g in effect in glibc, please do not treat a user present in wheel group but missing in /etc/shadow as something extra-ordinary. It is a normal situation when you have users in the centralized identity store like FreeIPA or Samba AD. -- / Alexander Bokovoy Sr. Principal Software Engineer Security /

Re: F36 Change: Retire the NIS(+) user-space utility programs (System-Wide Change proposal)

2021-10-21 Thread Alexander Bokovoy
: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure -- / Alexander Bokovoy Sr. Principal Software Engineer Security

Re: [RFC] Remove supoort for NIS(+) from PAM

2021-10-08 Thread Alexander Bokovoy
we don't have any client-side integration (sssd, gdm/sddm, etc.) We are working on that part for SSSD and FreeIPA. Not production ready yet but aim to have something testable later this year. In a prototype we have it is possible to authenticate against a thing like Github or Keycloak. -- / Alexa

Re: [RFC] Remove supoort for NIS(+) from PAM

2021-10-08 Thread Alexander Bokovoy
secure than relying on NTLM in SMB protocol. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email

Re: [RFC] Remove supoort for NIS(+) from PAM

2021-10-06 Thread Alexander Bokovoy
HEL 9 and I'd like to keep NIS part supported in Fedora as well for some time. This only requires existence of libnsl2. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel ma

Re: Fedora-Rawhide-20211001.n.0 compose check report

2021-10-02 Thread Alexander Bokovoy
understanding is that this is an intermediate step which should have better be done in a sidetag. So we can expect broken FreeIPA in Rawhide until this issue is solved by Dogtag team. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited

Re: [RFC] Remove supoort for NIS(+) from PAM

2021-10-01 Thread Alexander Bokovoy
it completely in future as well. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le

Re: [Heads-up] Introduction of OpenSSL 3.0.0 in F36

2021-09-17 Thread Alexander Bokovoy
/issues """ How on earth are we supposed to figure out what annocheck doesn't like? There's 185328 bytes of "Standard Output" that follows… Zbyszek ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le..

Re: Python libraries problem with F34

2021-07-05 Thread Alexander Bokovoy
e sure you are doing so within a virtual environment, e.g. with venv or similar constructs. This ensures whatever was installed is self-consistent with regards to the source where it came from. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering R

Re: F35 Change: Python Packaging Guidelines overhaul (System-Wide Change proposal)

2021-06-15 Thread Alexander Bokovoy
On ti, 15 kesä 2021, Petr Viktorin wrote: On 14. 06. 21 20:09, Alexander Bokovoy wrote: On ma, 14 kesä 2021, Ben Cotton wrote: [...] PyPI Parity Machine-readable metadata (''distribution'' names in dist-info directories on disk and the corresponding python3.Xdist(foo) RPM provides

Re: [HEADS UP] Fedora 35 Python 3.10 rebuilds have started in a side tag

2021-06-15 Thread Alexander Bokovoy
On ma, 14 kesä 2021, Adam Williamson wrote: On Mon, 2021-06-14 at 15:40 +0300, Alexander Bokovoy wrote: > > The fact that this blocks FreeIPA was indeed only discovered by chance > while the side tag rebuild was already in progress (and about to be > merged). I wonder haw ca

Re: F35 Change: Python Packaging Guidelines overhaul (System-Wide Change proposal)

2021-06-14 Thread Alexander Bokovoy
oraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure -

Re: F35 Change: Python Packaging Guidelines overhaul (System-Wide Change proposal)

2021-06-14 Thread Alexander Bokovoy
g at the Bodhi update time for a reason. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le

Re: [HEADS UP] Fedora 35 Python 3.10 rebuilds have started in a side tag

2021-06-14 Thread Alexander Bokovoy
On ma, 14 kesä 2021, Miro Hrončok wrote: On 14. 06. 21 13:40, Alexander Bokovoy wrote: On ma, 14 kesä 2021, Victor Stinner wrote: Congrats, that's amazing! :-) Let's fix remaining broken packages! Right now the biggest broken package to us (FreeIPA) is mod_wsgi which relied on Python C API

Re: [HEADS UP] Fedora 35 Python 3.10 rebuilds have started in a side tag

2021-06-14 Thread Alexander Bokovoy
ject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@

Re: Tomcat Package Changes in Rawhide

2021-06-07 Thread Alexander Bokovoy
whide compose, that test should succeed. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an emai

Re: The Javapocalypse is Monday

2021-06-05 Thread Alexander Bokovoy
approach prioritized and any deviations are much harder to handle. [1] https://github.com/dogtagpki/pki/issues/3553 [2] https://fedoraproject.org/wiki/KojiMavenSupport [3] https://fedoraproject.org/wiki/Talk:KojiMavenSupport -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity

Re: Kerberos and Fedora's 2FA UX

2021-04-25 Thread Alexander Bokovoy
On la, 24 huhti 2021, Kevin Fenzi wrote: On Sat, Apr 24, 2021 at 12:12:19PM +0300, Alexander Bokovoy wrote: On Пт, 23 апр 2021, Kevin Fenzi wrote: > On Fri, Apr 23, 2021 at 07:40:14AM +0200, Miroslav Suchý wrote: > > I have been using 2FA with the new Fedora Account system a

Re: Kerberos and Fedora's 2FA UX

2021-04-24 Thread Alexander Bokovoy
am typically issuing Fedora tickets for a week-long period, so I only need to run the kinit sequence once a week and then SSSD/GNOME Accounts tools are refreshing it every 8 hours automatically. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red

Re: Fedora Account Migration & Production Deployment Update: COMPLETE!

2021-04-02 Thread Alexander Bokovoy
On to, 01 huhti 2021, Kevin Fenzi wrote: On Thu, Apr 01, 2021 at 01:50:40PM +0300, Alexander Bokovoy wrote: This split of fields in FreeIPA Web UI exists since FreeIPA 4.0 which was part of early RHEL 7 deliveries (the code for separate OTP field was added in 2014). There is nothing specific

Re: Fedora Account Migration & Production Deployment Update: COMPLETE!

2021-04-01 Thread Alexander Bokovoy
On ti, 30 maalis 2021, Kevin Fenzi wrote: On Tue, Mar 30, 2021 at 09:30:33AM +0300, Alexander Bokovoy wrote: Could you please explain where you want to do it? Noggin (Fedora Accounts app) does handle the login itself, not FreeIPA. In the context of what Fedora contributors interact

Re: Disable bodhi auto-update creation on rawhide?

2021-03-30 Thread Alexander Bokovoy
need to create a bodhi update yourself for this side-tag. This gives you back all the control but with an overhead of a side-tag. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

Re: Fedora Account Migration & Production Deployment Update: COMPLETE!

2021-03-30 Thread Alexander Bokovoy
dy, including administrators, is able to discover the user's password from a hashed form. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedo

Re: Proposal to fail builds if RPATH is found in Fedora 35

2021-03-26 Thread Alexander Bokovoy
edoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Re: Is Pagure openid login broken?

2021-03-25 Thread Alexander Bokovoy
a bug so thanks for filing one. If I understand it correctly, you caught a state in the middle of upgrades. Ipsilon IdP was actually reconfigured to use FreeIPA-provided data and some of attribute mappings did change which required modifications. -- / Alexander Bokovoy Sr. Principal Software E

Re: Non-responsive maintainer: kir

2021-03-16 Thread Alexander Bokovoy
account is mandatory per: https://fedoraproject.org/wiki/Join_the_package_collection_maintainers#Create_a_Bugzilla_Account kir is maintainer of rpms/runc Does anyone know how to contact kir? Yes, I asked Kir to respond. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity

Re: systemd-resolved fallback DNS servers: usability vs. GDPR

2021-03-02 Thread Alexander Bokovoy
On ti, 02 maalis 2021, Zbigniew Jędrzejewski-Szmek wrote: On Tue, Mar 02, 2021 at 11:29:21AM +0200, Alexander Bokovoy wrote: On ma, 01 maalis 2021, Lennart Poettering wrote: >On Fr, 26.02.21 21:01, Alexander Bokovoy (aboko...@redhat.com) wrote: > >>> 1. Dots (".") fo

Re: systemd-resolved fallback DNS servers: usability vs. GDPR

2021-03-02 Thread Alexander Bokovoy
On ti, 02 maalis 2021, Ed Greshko wrote: On 02/03/2021 06:03, Lennart Poettering wrote: On Fr, 26.02.21 21:01, Alexander Bokovoy (aboko...@redhat.com) wrote: Digital Ocean updates pushed with cloud-init use. Cloud-init does not have any native support for systemd-resolved. It means it writes

Re: systemd-resolved fallback DNS servers: usability vs. GDPR

2021-03-02 Thread Alexander Bokovoy
On ma, 01 maalis 2021, Lennart Poettering wrote: On Fr, 26.02.21 21:01, Alexander Bokovoy (aboko...@redhat.com) wrote: > 1. Dots (".") for separating IPV4 address bytes > 2. Colons (":") for separating IPv6 address parts, as well as separating > port numbers fro

Re: systemd-resolved fallback DNS servers: usability vs. GDPR

2021-02-26 Thread Alexander Bokovoy
On pe, 26 helmi 2021, Lennart Poettering wrote: On Mi, 24.02.21 22:08, Alexander Bokovoy (aboko...@redhat.com) wrote: I think one of the issues reported in the discussion you mention was that systemd-resolved considered invalid a DNS= line where addresses were separated by a comma rather than

Re: systemd-resolved fallback DNS servers: usability vs. GDPR

2021-02-24 Thread Alexander Bokovoy
was that systemd-resolved considered invalid a DNS= line where addresses were separated by a comma rather than space. Can systemd-resolved be improved to allow common separators like both space and comma? -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management

Re: Orphaned packages looking for new maintainers

2021-02-22 Thread Alexander Bokovoy
Library implementation is rather solid, I don't think it would need any changes, just timely rebuilds until it is retired upstream. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

Re: Fedora 34 Change: Scale ZRAM to Full Memory Size — arbitrary scaling

2021-01-28 Thread Alexander Bokovoy
Jan 27th. Something did allocate ~120MB of RAM more than it did previously on Fedora Server but also the kernel reports ~600MB less RAM available even though in both cases QEMU was configured with 2048MB RAM. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Eng

Re: Fedora 34 Change: Scale ZRAM to Full Memory Size — arbitrary scaling

2021-01-28 Thread Alexander Bokovoy
On to, 28 tammi 2021, Chris Murphy wrote: On Thu, Jan 28, 2021, 6:21 AM Alexander Bokovoy <[1]aboko...@redhat.com>

Re: Fedora 34 Change: Scale ZRAM to Full Memory Size — arbitrary scaling

2021-01-28 Thread Alexander Bokovoy
On to, 28 tammi 2021, Tomasz Torcz wrote: On Thu, Jan 28, 2021 at 11:04:34AM -0500, Rob Crittenden wrote: Zbigniew Jędrzejewski-Szmek wrote: > On Thu, Jan 28, 2021 at 03:20:38PM +0200, Alexander Bokovoy wrote: >> With today's OpenQA tests I can point out that using zram on 2048MB R

Re: Fedora 34 Change: Scale ZRAM to Full Memory Size — arbitrary scaling

2021-01-28 Thread Alexander Bokovoy
/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

Re: Future of Fedora Server Edition [was: Re: Fedora 34 Change: Make Fedora CoreOS a Fedora Edition (System-Wide Change)]

2020-12-03 Thread Alexander Bokovoy
of Fedora Server. Right now, our marketing materials at https://getfedora.org/en/server/ highlight: * modularity * cockpit * FreeIPA -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

Re: Fedora 34 Change: Route all Audio to PipeWire (System-Wide Change)

2020-12-01 Thread Alexander Bokovoy
On to, 26 marras 2020, Alexander Bokovoy wrote: On to, 26 marras 2020, Zbigniew Jędrzejewski-Szmek wrote: On Wed, Nov 25, 2020 at 04:41:56PM +0200, Alexander Bokovoy wrote: On ke, 25 marras 2020, Tomáš Popela wrote: On Wed, Nov 25, 2020 at 1:51 PM Alexander Bokovoy wrote: Screencasting

Re: Fedora 34 Change: Route all Audio to PipeWire (System-Wide Change)

2020-11-26 Thread Alexander Bokovoy
On to, 26 marras 2020, Zbigniew Jędrzejewski-Szmek wrote: On Wed, Nov 25, 2020 at 04:41:56PM +0200, Alexander Bokovoy wrote: On ke, 25 marras 2020, Tomáš Popela wrote: >On Wed, Nov 25, 2020 at 1:51 PM Alexander Bokovoy >wrote: > >>Screencasting still does not work in Fedora

Re: Fedora 34 Change: Route all Audio to PipeWire (System-Wide Change)

2020-11-25 Thread Alexander Bokovoy
On ke, 25 marras 2020, Tomáš Popela wrote: On Wed, Nov 25, 2020 at 1:51 PM Alexander Bokovoy wrote: Screencasting still does not work in Fedora 33. It pretends to work as in claiming through the applications and GNOME indicators that the screen / application window / browser tabs are shared

Re: Fedora 34 Change: Route all Audio to PipeWire (System-Wide Change)

2020-11-25 Thread Alexander Bokovoy
of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org -- / Alexander Bokovoy Sr. Principal Software Engineer

Re: Fedora 34, faccessat, and containers (was: Re: Fedora 34 Change: GNU Toolchain update (gcc 11, glibc 2.33) (System-Wide Change))

2020-11-24 Thread Alexander Bokovoy
et/~abbra/+archive/ubuntu/freeipa-libseccomp should help -- you also need to add 'faccessat2' to the Docker profile. Example use in FreeIPA is https://pagure.io/freeipa/c/1bf0d628281f33693a1f6c6e156b0c258eee929e?branch=master -- / Alexander Bokovoy Sr. Principal Software Engineer Security / I

Re: Fedora 34 Change: Route all Audio to PipeWire (System-Wide Change)

2020-11-21 Thread Alexander Bokovoy
uts. This is just one evidence point, of course, and highly personal, but I do not see how pipewire could become a default with the current quality. Shipped in parallel, with easy to switch ways, sure. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management

Re: systemd-resolved in a container

2020-11-19 Thread Alexander Bokovoy
On to, 19 marras 2020, Nikos Mavrogiannopoulos wrote: On Wed, Nov 18, 2020 at 2:23 PM Alexander Bokovoy wrote: On ke, 18 marras 2020, Nikos Mavrogiannopoulos wrote: >Hi, > I realized my fedora-based containers have an /etc/resolv.conf which >claims it is managed by resolved, and nssw

Re: systemd-resolved in a container

2020-11-18 Thread Alexander Bokovoy
On ke, 18 marras 2020, Paul Wouters wrote: On Wed, 18 Nov 2020, Alexander Bokovoy wrote: Is there a way to use systemd resolved in a container? I figured this out yesterday -- at least in Rawhide, dbus-daemon is now replaced by dbus-broker which is not active by default. So you need

Re: systemd-resolved in a container

2020-11-18 Thread Alexander Bokovoy
I figured this out yesterday -- at least in Rawhide, dbus-daemon is now replaced by dbus-broker which is not active by default. So you need systemctl enable --now dbus-broker Without it even hostnamectl doesn't work, not just systemd-resolve. -- / Alexander Bokovoy Sr. Principal Software Enginee

Re: Non-responsive maintainer johnp for python-ldap package request

2020-10-24 Thread Alexander Bokovoy
On la, 24 loka 2020, Miro Hrončok wrote: On 10/24/20 5:48 AM, John Palmieri wrote: On Fri, Oct 23, 2020 at 5:43 PM Miro Hrončok <mailto:mhron...@redhat.com>> wrote: On 10/23/20 6:13 PM, Alexander Bokovoy wrote: > On pe, 23 loka 2020, John Palmieri wrote: >> I ha

Re: Non-responsive maintainer johnp for python-ldap package request

2020-10-23 Thread Alexander Bokovoy
would be able to switch the maintainership to me? On Fri, Oct 23, 2020 at 9:24 AM Alexander Bokovoy wrote: Hi, I am trying to initiate a non-responsive maintainer process for johnp for package python-ldap. Following the process defined at[1], I filed the following bugzilla: https

Non-responsive maintainer johnp for python-ldap package request

2020-10-23 Thread Alexander Bokovoy
. Date: Wed, 21 Oct 2020 10:34:54 +0300 From: Alexander Bokovoy To: python-ldap-maintain...@fedoraproject.org Cc: chei...@redhat.com Subject: Please give abbra and cheimes rights to python-ldap Hi, I am a maintainer of FreeIPA -- upstream

Re: This is bad, was Re: Fedora 33 System-Wide Change proposal:?? systemd-resolved

2020-10-01 Thread Alexander Bokovoy
snippet in /etc/systemd/resolved.conf.d/ to contain FallbackDNS= This will disable global DNS servers for any case. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel

Re: Lenovo P1G2 and P53 web sales updates

2020-09-24 Thread Alexander Bokovoy
happen? So far, the Linux portal is only on US website... -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send

Re: Fedora 32: samba 4.12.2: Problem with access from win10b to win10a via remote desktop

2020-05-16 Thread Alexander Bokovoy
for the check that is being done here. For MIT Kerberos, it doesn't see them as aliases as it does explicit compare of the principals and requested service principal does not match the principal in the evidence (2nd) ticket. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity

Re: Many packages unnecessarily link to libpython

2020-05-16 Thread Alexander Bokovoy
-and-finalizing-the-interpreter List of possibly affected packages, provided through $ repoquery --repo=rawhide --source --whatrequires 'libpython3.8.so.1.0()(64bit)' Samba does use Py_Initialize and thus link correctly. -- / Alexander Bokovoy Sr. Principal Software Engineer Security

Re: Orphaned uglify-js

2020-04-29 Thread Alexander Bokovoy
On ke, 29 huhti 2020, Alexander Bokovoy wrote: On ke, 29 huhti 2020, Jun Aruga wrote: Hi, I orphaned the package. https://src.fedoraproject.org/rpms/uglify-js because * I removed the uglify-js dependency from rubygem-uglifier. * When I asked the co-maintainers, there was no response

Re: Orphaned uglify-js

2020-04-29 Thread Alexander Bokovoy
? -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora

Re: python2-dns without DNSSEC support in rawhide

2020-04-29 Thread Alexander Bokovoy
and would make the spec file ugly. Second solution is kinda lot of work for nothing. So I hope nobody will be affected by missing DNSSEC in python2-dns :) Could you please add a sentence like 'Note this library has no DNSSEC support' to python2-dns subpackage description? -- / Alexander

Re: How to fix a dependency to the version at build time?

2020-03-17 Thread Alexander Bokovoy
-generated requires are not enough for that. For some of the history see the thread at https://lists.samba.org/archive/samba-technical/2019-April/133281.html -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

Re: Intent to request a FESCo exception for python2 for ardour5

2020-03-15 Thread Alexander Bokovoy
in the last 2 years, so we are stuck with ardour 5.12, which still uses python2 to build. What do you think about that? Just package git master in Rawhide. It has been migrated to waf 2.0.19 two months ago and builds just fine in Fedora 32 environments with Python 3 only. -- / Alexander Bokovoy Sr

Re: RFC: entering luks password on grub level for devices without keyboards

2020-03-15 Thread Alexander Bokovoy
wouldn't need to use any keyboard to enter your passkey as TPM2 is always present. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel

Re: Samba 4.12.0 on Fedora32: bind DNS say "named: client @...: update 'fedora.loc/IN' denied"

2020-03-09 Thread Alexander Bokovoy
On ma, 09 maalis 2020, Dario Lesca wrote: Il giorno lun, 09/03/2020 alle 13.17 +0200, Alexander Bokovoy ha scritto: It is independent of Kerberos implementation, so affects both types of deployment. Ok, it's a generic samba problem. It's right if I fill a bug on samba bugzilla? Yes. I tried

Re: Samba 4.12.0 on Fedora32: bind DNS say "named: client @...: update 'fedora.loc/IN' denied"

2020-03-09 Thread Alexander Bokovoy
can add rules in the named.conf but they would be static, effectively. They are typically static anyway, so this is not a big loss. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

  1   2   3   >