Re: F28 System Wide Change: AArch64 Server Promotion

2018-01-08 Thread Przemek Klosowski
On 01/08/2018 01:06 PM, Andreas Tunek wrote: That link does not work for me and I get some strange redirect to the Fedora download page. There was something odd in the link---this works for me: https://fedoraproject.org/wiki/Architectures/ARM/Raspberry_Pi __

Re: adding display authorization to other accounts is broken

2017-12-22 Thread Przemek Klosowski
On 12/21/2017 04:55 PM, Adam Williamson wrote: Well, no, it's not exactly the same. Using xhost in this way has been a (grudgingly) documented workaround for Wayland's restrictions for some time now: For what it's worth, I also use it for non-root accounts other than my login account, for test

adding display authorization to other accounts is broken

2017-12-20 Thread Przemek Klosowski
The primary logged-in session is of course authorized to access the main X11/wayland display, but it's often useful to add display authorization to other accounts. For instance, looking at disk space with 'baobab' works better as root because some areas of the filesystem are not readable to nor

Re: debug facilities

2017-12-08 Thread Przemek Klosowski
On 12/08/2017 06:29 AM, Mark Wielaard wrote: On Mon, 2017-12-04 at 15:47 -0500, Przemek Klosowski wrote: The bottom line is that it's pretty tricky to figure this out, which is a pity because easy debuggability is one of the important cultural features of Fedora and FOSS. It's a regre

Re: Fedora Modular bikeshed compose report: changes

2017-12-04 Thread Przemek Klosowski
On 12/02/2017 01:15 PM, Fedora Rawhide Report sent this report, quoted in its entirety: ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Could someone associated with Fedora Mo

Re: debug facilities

2017-12-04 Thread Przemek Klosowski
On 12/01/2017 05:36 PM, Tom Hughes wrote: On 01/12/17 22:33, Samuel Sieb wrote: If you do "rpm -qi soundfont-utils" you will find a line like this: Source RPM  : gt-0.4-23.fc26.src.rpm That means that this package is a sub-package of gt.  That's where you'll find it in bugzilla and the package

Re: debug facilities

2017-12-01 Thread Przemek Klosowski
On 12/01/2017 04:39 PM, John Reiser wrote: I ran into a problem with midi-disasm from soundfount-utils. I tried to debug it but installing soundfont-utils-debuginfo only brings in  the symbol tables, not sources. Perhaps the problem is particular to that rpm, or similar ones? Is soundfont-util

debug facilities

2017-12-01 Thread Przemek Klosowski
I ran into a problem with midi-disasm from soundfount-utils. I tried to debug it but installing soundfont-utils-debuginfo only brings in  the symbol tables, not sources. I know that we started splitting the source packages off---but unfortunately there doesn't seem to be soundfont-utils-debugs

Re: Package name conflict

2017-11-28 Thread Przemek Klosowski
On 11/28/2017 10:23 AM, Vitaly Zaitsev wrote: I want to add a new package GSL (header-only C++ library: https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoft%2FGSL&data=02%7C01%7Cprzemek.klosowski%40nist.gov%7C770bea95b2264237725d08d5367429ca%7C2ab5d82fd8fa4797a

Re: Changes Policy & Fedora Release Life Cycle - request for review

2017-11-15 Thread Przemek Klosowski
On 11/14/2017 07:47 PM, Tim Landscheidt wrote: In MediaWiki, revisions compared in a diff do not need to belong to the same article. So for example, to compare the current revision of...(488139) to the current revision of ...(505754), you can use the URL https://fedoraproject.org/w/index.php?dif

Re: Remove old GPG keys?

2017-11-01 Thread Przemek Klosowski
On 11/01/2017 03:14 PM, Kevin Fenzi wrote: The only attack vector I can see is tricking someone into installing a package from an EOL release with a known vulnerablity, but if you can do that you likely can get them to just download it and install it or Is it possible to compromise an old key,

Re: Bug 921430 - Error updating SMART data: sk_disk_smart_status: Input/output error (udisks-error-quark, 0)

2017-09-13 Thread Przemek Klosowski
On 09/09/2017 12:48 PM, Tony Nelson wrote: Could someone apply the patch in this bug[1], languishing since 2013? According to "freedesktop.org Bug 61998 - Fails to read status from WD raptors"[2] the patch is in Debian/Ubuntu.  Lennart Poettering did the last upstream[3] commit 7 years ago, but s

Re: [Modularity]: Service levels and EOL expectations?

2017-08-08 Thread Przemek Klosowski
On 08/07/2017 03:58 PM, Matthew Miller wrote: On Mon, Aug 07, 2017 at 02:10:23PM -0400, Stephen John Smoogen wrote: I still don't see how this is going to work with a tree of Service Levels and Lifetimes. Any module can not give a SL greater than the lowest SL and the shortest lifetime that any

Unified database for DNF

2017-08-04 Thread Przemek Klosowski
I noticed this FESCo topic: #link https://fedoraproject.org/wiki/Changes/Unified_database_for_DNF proposing a unified sqlite database for DNF. Recently there's been a discussion of replacing the RPM database with a custom database layer, where people asked why aren't we using something like sql

BTRFS dropped by RedHat

2017-08-04 Thread Przemek Klosowski
The release notes for RHEL 7.4 announce that RedHat gave up on btrfs: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/chap-Red_Hat_Enterprise_Linux-7.4_Release_Notes-Deprecated_Functionality.html Btrfs has been deprecated The Btrfs file syst

Re: Finalizing Fedora's Switch to Python 3

2017-08-02 Thread Przemek Klosowski
On 07/28/2017 02:21 PM, Miro Hrončok wrote: On 28.7.2017 20:11, Colin Walters wrote: That's actually something I hadn't even considered; is it proposed here to actually have a flag day where all (or even some) of the python3 executables start using /usr/bin/python and everything else is /usr/b

Re: F27 System Wide Change: Graphical Applications as Flatpaks

2017-07-17 Thread Przemek Klosowski
On 07/15/2017 01:43 PM, Matthew Miller wrote: On Fri, Jul 14, 2017 at 02:56:34PM -0700, Andrew Lutomirski wrote: This is only a problem because Flatpak is currently following the IMO rather busted old Android model. With very few, if any, exceptions, I think a much better model would be for an a

Re: No i686 kernel: Can we require SSE2 for i686?

2017-07-12 Thread Przemek Klosowski
On 07/12/2017 07:43 AM, Ralf Corsepius wrote: Currently i686 users are at about 1/6th of x86_64 users, by mirror checkins. I don't have an easy way of knowing how many of those i686 checkins are old releases -- I'll need to ask Smooge to make a custom report -- but I think it's fair to guess that

Re: F27 System Wide Change: Graphical Applications as Flatpaks

2017-07-10 Thread Przemek Klosowski
On 07/06/2017 11:05 AM, Jaroslav Reznik wrote: = System Wide Change: Graphical Applications as Flatpaks = https://fedoraproject.org/wiki/Changes/Graphical_Applications_as_Flatpaks Change owner(s): * Owen Taylor This change is to enable package maintainers to build Flatpaks of their applications

Re: Using ndb in RPM

2017-07-10 Thread Przemek Klosowski
On 07/10/2017 09:16 AM, Jos Vos wrote: On Mon, Jul 10, 2017 at 02:30:59PM +0200, Pierre-Yves Chibon wrote: Oups, that was meant to be: On which side? LDBM was many factors faster than SQLite. No concrete figures, it was a year ago or so when we decided to go for LMDB (still a product in devel

Re: Proposed Mass Bug Filing: Renaming "python-" binary packages to "python2-"

2017-06-19 Thread Przemek Klosowski
On 06/19/2017 10:50 AM, Iryna Shcherbina wrote: The reason behind the second change is that there are a lot of Python 2 only packages having `python-xxx` in Requires, which will start pulling Python 3 dependencies when we switch to Python 3 as default. This will most possibly cause a number of

Re: Finding conflicts in /usr/bin

2017-05-16 Thread Przemek Klosowski
On 05/16/2017 01:14 PM, Przemek Klosowski wrote: This sender failed our fraud detection checks and may not be who they appear to be. Learn about spoofing <http://aka.ms/LearnAboutSpoofing> Feedback <http://aka.ms/SafetyTipsFeedback> On 05/13/2017 02:55 AM, Emmanuel

Re: Finding conflicts in /usr/bin

2017-05-16 Thread Przemek Klosowski
On 05/13/2017 02:55 AM, Emmanuel Seyman wrote: * Przemek Klosowski [12/05/2017 16:27] : The only one I could see that is really provided by multiple packages is /usr/bin/stap* : they seem to be provided by both systemtap-client and systemtap-devel. WHAT'S UP WITH THAT? While this s

Re: Finding conflicts in /usr/bin

2017-05-12 Thread Przemek Klosowski
On 05/12/2017 02:50 PM, Mattia Verga wrote: After a recent bug report I've received [1] I thought to conduct a survey on all packages available in Fedora to find conflicts between binary names under /usr/bin but I don't know how exactly do that. Is there a way to extract the list of all files i

Re: Nested rich-dependencies in rpm

2017-04-12 Thread Przemek Klosowski
On 04/12/2017 01:34 PM, Björn 'besser82' Esser wrote: Libyui is a well tested and since 15 years proven to work toolkit / abstraction-layer written by SUSE, even used in SLES… It's powering their installer and system-configuration tooling. FWIW, dnfdragora currently crashes on startup and it se

Re: Static libraries in Fedora distribution (Was: Re: [Help Wanted] PPC64LE build for thrift)

2017-03-15 Thread Przemek Klosowski
On 03/14/2017 03:46 PM, Tomasz Kłoczko wrote: This problem is wy bigger than you may be thinking. Above it is only tip of the iceberg .. # dnf list | grep -- -static | grep -c x86_64 196 This includes all available packages, but if you look at the actual usage on an average system, i.e. o

Re: F27 System Wide Change: No More Alphas

2017-02-23 Thread Przemek Klosowski
On 02/23/2017 10:25 AM, Gerald B. Cox wrote: There are countless examples in the threads where people resort to "I'm offended" and "You've violated the Code of Conduct" to change the subject and deflect the entire thread. The community in this list is very civil: when people get called out on

Re: F26 Self Contained Change: Anaconda LVM RAID

2017-02-22 Thread Przemek Klosowski
On 02/22/2017 09:37 AM, Vratislav Podzimek wrote: On Tue, 2017-02-21 at 14:29 -0700, Chris Murphy wrote: Tested Fedora 24 and Fedora 23, there's no notification with either one of those. I have no idea if this is a VM thing. Or if it's a regression. Maybe the notification was depending on smart

Re: polymake blocks system updates by strict Perl dependence

2017-01-25 Thread Przemek Klosowski
On 01/25/2017 01:22 PM, Zbigniew Jędrzejewski-Szmek wrote: My question is: is reporting them individually the best approach? I am happy to keep doing it, but there's been more than the usual amount recently, and I am wondering if there's some automation that should be done to detect that in packa

polymake blocks system updates by strict Perl dependence

2017-01-25 Thread Przemek Klosowski
Polymake blocks system updates by strict Perl dependence: polymake-3.0r2-1.fc25.x86_64 requires perl = 4:5.24.0 and the new perl package is tagged 4:5.24.1 This blocks upgrades for dependent packages (perl*, git*, vim*), while polymake can't just be bypassed because it is a dependency o

Re: drop obsolete static uid/gid allocations

2017-01-19 Thread Przemek Klosowski
On 01/14/2017 07:13 PM, Zbigniew Jędrzejewski-Szmek wrote: == No need for static allocation, afaict games, man, slocate, squid, named, postgres, mysql, nscd, rpcuser, rpc, rpm, ntp, mailman, gdm, utempter, apache, smmsp, tomcat, frontpage, nut, beagleindex, avahi, tcpdmp, privoxy, radvd, imap, ma

Re: debuginfo updates: RFE for dnf?

2017-01-13 Thread Przemek Klosowski
On 01/13/2017 12:43 PM, Jan Kratochvil wrote: Also the repos are commonly out of sync so some packages have N+1 binary rpm while other packages have N+1 debuginfo rpm. I think it's reasonable to expect the 'debuginfo-install' plugin to keep them in synch by NOT installing the debuginfo N+1 with

Re: debuginfo updates: RFE for dnf?

2017-01-13 Thread Przemek Klosowski
On 01/13/2017 12:16 PM, Stephen Gallagher wrote: On 01/13/2017 12:03 PM, Przemek Klosowski wrote: On 01/13/2017 11:30 AM, Michael Mraka wrote: /etc/dnf/plugins/debuginfo-install.conf .. autoupdate A boolean option which controls updates of debuginfo packages. If options is enabled

Re: debuginfo updates: RFE for dnf?

2017-01-13 Thread Przemek Klosowski
On 01/13/2017 11:30 AM, Michael Mraka wrote: Przemek Klosowski: Easy access to debug information is very well done in Fedora, and is one of its most empowering features. It's very easy to trace ... Once the debuginfo is installed, however, we have a little bit of a stalemate, becaus

Re: Headsup: Xserver update switching Intel GPUs from xorg-x11-drv-intel to -modesetting by default coming to rawhide

2017-01-13 Thread Przemek Klosowski
On 01/13/2017 10:51 AM, Michael Cronenworth wrote: On 01/11/2017 10:52 AM, Adam Jackson wrote: On a benchmark that doesn't reflect real usage very well, but sure. Can you drill down on this a bit? Which subtests get most worse? I have compiled the results into a spreadsheet. There is not one su

debuginfo updates: RFE for dnf?

2017-01-13 Thread Przemek Klosowski
epo.d got turned on by the above. I believe that 'dnf update' should also update all corresponding .debuginfo packages, or at least provide an option to do so. If disk space and download bandwidth is a concern, perhaps dnf should suggest a way to delete the obsolete files as an altern

Re: Start packaging/maintaining in Fedora

2016-12-13 Thread Przemek Klosowski
On 12/13/2016 03:00 PM, Ms Sanchez wrote: To be honest I looked at wikis and so, but I'm still rather confused, I don't know really where or how to start. Why do I want to start packaging? Well, I want to keep contributing to Fedora but more into development. As I know programming languages

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Przemek Klosowski
On 12/13/2016 02:51 PM, Lennart Poettering wrote: Yeah, this is really what it boils down to: the goal with the systemd directives is to make things easy to grok and easy to change. I can probably explain to most Linux admins who have administered a current Fedora in 5min what ProtectSystem=stric

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Przemek Klosowski
On 12/12/2016 04:02 PM, Lennart Poettering wrote: Hmm, yeah, I should probably blog more about all the nice sandboxing features we have now in systemd. There's quite some stuff now we should enable wherever we can. Specifically ProtectSystem=, ProtectHome=, ProtectKernelTunables=, ProtectKernelMo

Re: Un-retiring QCad

2016-12-12 Thread Przemek Klosowski
On 12/10/2016 07:12 AM, Antonio Trande wrote: On 12/09/2016 08:43 PM, Przemek Klosowski wrote: On 12/06/2016 08:25 AM, Antonio Trande wrote: This is an un-retiring request for QCad on Fedora (https://admin.fedoraproject.org/pkgdb/package/rpms/qcad/). Now upstream provides an open-source

Re: Un-retiring QCad

2016-12-09 Thread Przemek Klosowski
On 12/06/2016 08:25 AM, Antonio Trande wrote: This is an un-retiring request for QCad on Fedora (https://admin.fedoraproject.org/pkgdb/package/rpms/qcad/). Now upstream provides an open-source community edition version of QCad Could you comment on the current relationship of QCad to its fork Lib

Re: a diversion into EPEL [was Re: Two more concrete ideas for what a once-yearly+update schedule would look like]

2016-12-09 Thread Przemek Klosowski
On 12/09/2016 11:17 AM, Matthew Miller wrote: For other software, where users would like the version to match more closely the long lifecycle, maybe there could be a hand-off from Fedora version to CentOS version. Yeah, hand-offs would be a great feature for the users. Right now, it's tricky to

Re: Two more concrete ideas for what a once-yearly+update schedule would look like

2016-12-08 Thread Przemek Klosowski
On 12/08/2016 11:10 AM, Matthew Miller wrote: It's my plan to explore different ideas to continue to make Fedora more successful as measured by user and contributor growth, contributor return on effort, and fulfillment of our mission. Your stated goals are quite high level, so I would like to ste

Re: F26 System Wide Change: Enable coredumpctl by default

2016-12-05 Thread Przemek Klosowski
On 12/05/2016 12:27 PM, Török Edwin wrote: The description here is a bit confusing, and scary: what if I run out of space and I need to rm the coredumps to make room? If the coredumps are stored in the same file as the systemd journal I'd loose my system logs too, so it makes no sense to have t

Re: failure of f24 to f25 upgrade

2016-12-05 Thread Przemek Klosowski
On 12/02/2016 10:34 PM, Kevin Kofler wrote: Przemek Klosowski wrote: Right, that's what I thought. Still, completely blocking the upgrade seems rude. Yum had an option --skip-broken that would just leave such packages alone, I don't think keeping an old version of the filesyst

Re: how does Fedora 24 x86_64 boot on EFI-32?

2016-12-05 Thread Przemek Klosowski
On 12/05/2016 08:51 AM, Matthew Miller wrote: preliminary stats show a big drop in i686 mirror connections over the last year — like, about cut in half. I'm not sure if this is a glitch or representative of a real move — or whether it's because of perceived or actual changes we've made, or just b

Re: failure of f24 to f25 upgrade

2016-12-02 Thread Przemek Klosowski
On 12/01/2016 05:52 PM, Adam Williamson wrote: On Thu, 2016-12-01 at 17:03 -0500, Przemek Klosowski wrote: >This got me thinking if there's a common root cause that could be >checked automatically? I didn't quite understand what exactly happened >in the affected packag

Re: failure of f24 to f25 upgrade

2016-12-01 Thread Przemek Klosowski
On 12/01/2016 04:39 PM, Howard Howell wrote: It looks like probably Dominik's suggestion of the -e cleared the program. So somehow, rpm -e packagename seemed to be the magic bullet. I will start overwith the update to make sure all the packages downloaded, and let you know if success happens.

Re: state of advanced audio in Fedora

2016-11-29 Thread Przemek Klosowski
On 11/29/2016 12:58 PM, J. Bruce Fields wrote: I thought most of those music apps required jack to run--are you running jack or not? If you are, then it's probably just the usual jack/pulseaudio conflicts. Which Fedora seems set up to fix, but for seem reason the fix doesn't work; I filed a bug

state of advanced audio in Fedora

2016-11-29 Thread Przemek Klosowski
I was always impressed with the amount and quality of audio software in Linux. When it all works, and is driven by someone who knows what they're doing, it's essentially a high-end DAW production environment. If it all worked smoothly, I am sure it could be one of Linux and Fedora showcases.

Re: RFC: Change the default hostname for Fedora 26+

2016-11-16 Thread Przemek Klosowski
On 11/15/2016 05:58 PM, Adam Williamson wrote: On Tue, 2016-11-15 at 17:18 -0500, Przemek Klosowski wrote: As an alternative, I wrote a program that takes the distribution of trigrams from an English dictionary, and statistically generates a Markov chain of such overlapping trigrams that look

Re: Fedora on Macs, removing the release criterion

2016-11-15 Thread Przemek Klosowski
On 11/14/2016 05:20 PM, Andreas Tunek wrote: If you are going to remove functionality/hardware support you should at least announce it someway otherwise people (users and contributors) will lose faith in your project. I do not have an agenda here---I am just a Fedora-using grandpa on the sidel

Re: RFC: Change the default hostname for Fedora 26+

2016-11-15 Thread Przemek Klosowski
On 11/15/2016 03:42 PM, Peter Oliver wrote: I like this idea, but I wonder if the potential for confusion or even offence is too high for it to be workable. I'm thinking ofhttps://en.wikipedia.org/wiki/Sudanese_teddy_bear_blasphemy_case. >we can swap these with colors or other words to make

Re: Fedora on Macs, removing the release criterion

2016-11-14 Thread Przemek Klosowski
On 11/10/2016 10:09 PM, Adam Williamson wrote: FWIW, I did not really get the sense at all that people were voting for it as a blocker purely on the grounds that "we can get a fix in at the last minute". A one week slip might feel short to you, I dunno, but I think most release process people t

Re: RFC: Change the default hostname for Fedora 26+

2016-11-09 Thread Przemek Klosowski
On 11/09/2016 08:02 AM, Simo Sorce wrote: Although this is true, one thing we could do is set a default hostname that is static ("fedora" or similar is fine), and teach the utilities used to join an AD/IPA/etc.. domain to generate a new random hostname if they detect the hostname is the generic "

Re: PSA: Do not run 'dnf update' inside GNOME, KDE or any other graphical desktop on Fedora 24

2016-10-05 Thread Przemek Klosowski
On 10/05/2016 05:24 PM, Matthew Miller wrote: On Wed, Oct 05, 2016 at 04:59:57PM -0400, Przemek Klosowski wrote: Now that systemd kills processes on logout, and session timeout is required by security policies in many workplaces including mine, I fear we'll have more of those. I certainl

Re: PSA: Do not run 'dnf update' inside GNOME, KDE or any other graphical desktop on Fedora 24

2016-10-05 Thread Przemek Klosowski
On 10/04/2016 08:12 PM, Chris Murphy wrote: The first is what happens on the other 90% of the world's computers, including Android system updates. Consider that. The second exists, right now, and it works and it's a lot better than what the rest of the world uses. What do you mean by 'system'?

Re: PSA: Do not run 'dnf update' inside GNOME, KDE or any other graphical desktop on Fedora 24

2016-10-05 Thread Przemek Klosowski
On 10/04/2016 12:06 PM, Andrew Lutomirski wrote: How hard would it be to make dnf do the rpm transaction inside a proper system-level service (transient or otherwise)? This would greatly increase robustness against desktop crashes, ssh connection loss, KillUserProcs, and other damaging goofs

Re: Triaging RH Bugzilla and forwarding bugs upstream (Was: F24, small backward steps)

2016-10-01 Thread Przemek Klosowski
On Fri, Sep 16, 2016 at 09:42:07AM -0700, stan wrote: Wouldn't it make more sense to have a way for package maintainers to decide if a bug was local or upstream, and a button they could push to automatically send it upstream? I really like Stan's idea. The root of this problem lies in the histo

Re: Introduction and help with comps.xml

2016-08-10 Thread Przemek Klosowski
On 08/10/2016 10:38 AM, Geoffrey Marr wrote: I have cloned the F25 comps.xml and edited the group for FEL with the required additional packages, but I do not have permissions to push the new comps.xml. Is there a process to getting a change approved that I should go though? Also, how can I go

Re: Packaging FPGA bitstreams

2016-07-26 Thread Przemek Klosowski
On 07/26/2016 10:36 AM, Richard W.M. Jones wrote: RISC-V is an open source instruction set architecture (ISA). I was broadly looking at what it would take to support RISC-V in Fedora, Yay! great idea, and I hope RISC-V will gain broad acceptance, e.g. in the IOT field. ARM is great and ubiquito

Re: Requiring package test instructions

2016-07-13 Thread Przemek Klosowski
On 07/13/2016 01:38 AM, Siddhesh Poyarekar wrote: On Tue, Jul 12, 2016 at 10:26:20PM -0700, Adam Williamson wrote: It would not be 'a lot of work', it would be a gigantic, totally unsustainable burden. I honestly think you're shooting *way* too high here. Even with all the recent volunteers, we

Re: F25 System Wide Change: KillUserProcesses=yes by default

2016-07-12 Thread Przemek Klosowski
On 07/12/2016 06:15 AM, Lennart Poettering wrote: That's hardly useful, as "screen" alone is useless as it's just a frontend to other programs (such as a shell that is run inside the "screen" instance), and if we kill those, then "screen" doesn't need to be around either... Right---the entire pro

Re: Fixing /.autorelabel

2016-07-08 Thread Przemek Klosowski
On 07/07/2016 04:59 PM, Richard W.M. Jones wrote: On Wed, Jul 06, 2016 at 02:52:34PM +, Zbigniew Jędrzejewski-Szmek wrote: That patch is the answer to the (repeated) bug reports that relabelling fails if enforcing=1 and the labels are sufficiently messed up. Doing the relabel in permissive

Re: Fedora development of Snap packages

2016-06-17 Thread Przemek Klosowski
On 06/16/2016 05:57 PM, Gerald Henriksen wrote: On Thu, 16 Jun 2016 15:44:11 -0400, Przemek wrote: I get that, but as I said, RPM can have sandboxing too, and so far it looks like the main vulnerability vector is unpatched software. Flatpack wouldn't have helped with heartbleed, and the right r

Re: Fedora development of Snap packages

2016-06-16 Thread Przemek Klosowski
On 06/16/2016 03:09 PM, Alexander Larsson wrote: On Thu, 2016-06-16 at 14:07 -0400, Przemek Klosowski wrote: I think that once the full sandboxing / portal system is in place, there _will_ be a tangible reason to prefer Flatpak. Definitely true for third party packages that currenly require

Re: Fedora development of Snap packages

2016-06-16 Thread Przemek Klosowski
On 06/16/2016 01:30 PM, Matthew Miller wrote: On Thu, Jun 16, 2016 at 01:12:07PM -0400, Ben Rosser wrote: ship pip, npm, etc? Where I become uncomfortable, and the reason I chimed in on this thread initially, is with the idea that these new containerized packaging systems are in some way *superi

Re: Why GUI software update tool is broken for me

2016-06-15 Thread Przemek Klosowski
On 06/15/2016 09:27 AM, Phil Cameron wrote: On 06/15/2016 05:16 AM, Emmanuel Seyman wrote: Id be interested in the original rationale behind this change, as I say, I I believe the rationale is that there was no sane way to update running applications (firefox, at least, would start not working

Re: Fedora development of Snap packages

2016-06-15 Thread Przemek Klosowski
On 06/15/2016 01:24 AM, Tomasz Torcz wrote: Well, if a packager wants to maintain it, why not? > >As someone who's a bit skeptical about containers as the future of software >distribution, I'd like to continue getting "traditionally packaged" >applications from Fedora where possible. I became a F

Re: Imaginary single quotes in ls ?

2016-06-06 Thread Przemek Klosowski
On 06/06/2016 11:53 AM, Paul Wouters wrote: paul@thinkpad:/tmp/test$ touch "touch and go" paul@thinkpad:/tmp/test$ ls -l .. -rw-rw-r--. 1 paul paul 0 Jun 6 11:49 'touch and go' This is very misleading, as it appears the filename actually contains single quotes. And I tried and failed to fix it

Re: systemd 230 change - KillUserProcesses defaults to yes

2016-06-03 Thread Przemek Klosowski
On 06/03/2016 01:33 AM, Andrew Lutomirski wrote: ISTM there are two things that might be reasonably configured: 1. Is a given user permitted to create processes that persist beyond logout? 2. If a user may create processes that persist beyond logout, *which* processes persist beyond logout? I

Re: systemd 230 change - KillUserProcesses defaults to yes

2016-06-02 Thread Przemek Klosowski
On 06/02/2016 02:19 PM, Paul Wouters wrote: On Jun 1, 2016, at 09:48, Lennart Poettering wrote: Any scheme that relies on unprivileged programs "being nice" doesn't fix the inherent security problem: after logout a user should not be able consume further runtime resources on the system, regardle

Re: systemd 230 change - KillUserProcesses defaults to yes

2016-06-02 Thread Przemek Klosowski
On 06/02/2016 12:37 PM, Tom Rivers wrote: The potential problem I see with changing the default behavior of systemd is that it is non-intuitive and could be potentially harmful if the user is not aware of it. Consider the following example. I routinely use screen when I connect to the systems

Re: jwm

2016-06-01 Thread Przemek Klosowski
On 06/01/2016 05:34 PM, Bernardo Sulzbach wrote: On 06/01/2016 06:21 PM, Przemek Klosowski wrote: So the answer to your question is that the papers say they work 40 hours per week, but in reality they work more. The employment law doesn't prescribe the actual number of hours worked by

Re: jwm

2016-06-01 Thread Przemek Klosowski
On 05/31/2016 01:31 PM, Bernardo Sulzbach wrote: I see you write from an @redhat.com address. Are you saying that all US-based RedHat developers get 45 hour work weeks or less? I'm talking about what the papers say, not the actual amount of work. I am not a labor lawyer so this is just my opi

Re: systemd 230 change - KillUserProcesses defaults to yes

2016-06-01 Thread Przemek Klosowski
On 06/01/2016 09:48 AM, Lennart Poettering wrote: On Wed, 01.06.16 12:19, Howard Chu (h...@symas.com) wrote: This is still looking at the problem back-asswards. The problem isn't that screen and tmux are special cases. The problem is that some handful of programs that got spawned in a GUI deskt

Re: systemd 230 change - KillUserProcesses defaults to yes

2016-06-01 Thread Przemek Klosowski
On 05/27/2016 12:45 PM, Christopher wrote: It seems to me that what's happening is that systemd is now enforcing this "login session" perspective... metaphorically speaking, gluing the transparent overlay onto the map (but don't worry! they also provide a special adhesive remover!). This make

Re: systemd 230 change - KillUserProcesses defaults to yes

2016-05-31 Thread Przemek Klosowski
On 05/27/2016 01:54 PM, Chris Murphy wrote: It seems to me systemd should be able to know the difference between a program that's zombie or unresponsive but isn't doing anything or is unresponsive but is doing something; and if not then some way for programs to say "hey wait just a minute, I nee

Re: Reserved GID for MongoDB

2016-05-18 Thread Przemek Klosowski
On 05/18/2016 03:27 PM, James Hogarth wrote: On 18 May 2016 7:19 p.m., "Przemek Klosowski" mailto:przemek.klosow...@nist.gov>> wrote: > > On 05/18/2016 01:21 PM, James Hogarth wrote: >> >> However MongoDB uses only UID staticaly. It is not &

Re: Reserved GID for MongoDB

2016-05-18 Thread Przemek Klosowski
On 05/18/2016 01:21 PM, James Hogarth wrote: However MongoDB uses only UID staticaly. It is not > using preallocated GID - http://pkgs.fedoraproject.org/cgit/rpms/mongodb.git/tree/mongodb.spec#n327 > > So I would like to ask how to fix this? > Is is OK to simply fix this in Fedora master? In c

Re: freecad: Need help with segfault problem on F24

2016-05-03 Thread Przemek Klosowski
On 05/03/2016 03:54 PM, Richard Shaw wrote: the package that's causing the segfault (Coin3) is not part of the update but it causes a segfault in python-pivy regardless of whether you're running the old 0.15 package or new 0.16 package so I went ahead and pushed to stable so I could update f22/

Re: freecad: Need help with segfault problem on F24

2016-05-03 Thread Przemek Klosowski
On 05/03/2016 02:16 PM, Richard Shaw wrote: On Mon, Apr 25, 2016 at 3:15 PM, Richard Shaw > wrote: On Fri, Apr 22, 2016 at 9:34 AM, Ralf Corsepius mailto:rc040...@freenet.de>> wrote: How about * filing a BZ against Coin3 such that the Coin3

Re: freecad: Need help with segfault problem on F24

2016-04-20 Thread Przemek Klosowski
On 04/19/2016 11:55 PM, Jerry James wrote: On Tue, Apr 19, 2016 at 8:50 PM, Richard Shaw wrote: I'm pretty much stumped on a problem where freecad (really python-pivy) segfaults on F24 but seems to run fine on F23 and I can't find any substantive difference between any of the packages. Strange

Re: introducing curl-minimal and libcurl-minimal RPM packages

2016-03-19 Thread Przemek Klosowski
On 03/16/2016 04:39 PM, Kamil Dudka wrote: ldconfig will always pick /usr/lib64/libcurl.so.4 because there can be only one file with that name installed at a time. OK, but how do you determine which one you have on a particular system someone just handed to you? It seems to me that you are usi

Re: introducing curl-minimal and libcurl-minimal RPM packages

2016-03-19 Thread Przemek Klosowski
On 03/17/2016 12:54 PM, Kamil Dudka wrote: I am also open to discuss other solution to the above problem. The other proposals I have captured in this thread are: - use dlopen() -- already proven wrong (see RHBZ and upstream ML) I looked and didn't see any discussion of dlopen() in 1305701; ar

Re: CVE-2015-7547 fix for Fedora 21

2016-02-19 Thread Przemek Klosowski
On 02/19/2016 02:40 PM, Tomasz Torcz wrote: On Fri, Feb 19, 2016 at 02:05:18PM -0500, DJ Delorie wrote: Igor Gnatenko writes: Why do you want to build such packages for EOLed distro? Because he's a nicy guy and it's an important patch? It's counter productive. It's even dangerous, by int

Re: ntpstat

2016-02-12 Thread Przemek Klosowski
On 02/12/2016 06:10 AM, Miroslav Lichvar wrote: ntpstat is a small utility included in the ntp package, which prints the synchronization status of ntpd, the maximum error of the clock and few other fields. Apparently, there are people who find it useful for monitoring. It has been included in th

Re: DNF pains

2016-02-04 Thread Przemek Klosowski
On 02/04/2016 01:14 PM, Felix Miata wrote: Przemek Klosowski composed on 2016-02-04 12:28 (UTC-0500): for a in {a..z} {A..Z} ; do dnf update $a'*'; done An alternative to what I've been doing. When I can remember, I first change to an empty directory before typing dnf, so b

Re: DNF pains

2016-02-04 Thread Przemek Klosowski
On 02/03/2016 05:28 PM, Felix Miata wrote: I have lots of test installations using identical partition sizes for EXT3 or EXT4 / filesystems. the filesystem space these provided is adequate on all if running Mageia or openSUSE, but quite often not for Fedora. Working around the inadequacy on Fedor

Re: F24 System Wide Change: Change Proposal Name NewRpmDBFormat

2016-01-29 Thread Przemek Klosowski
On 01/29/2016 11:18 AM, Florian Festi wrote: On 01/29/2016 05:02 PM, Richard W.M. Jones wrote: I'm still unclear why you don't just use sqlite 3. Among other things it is about 2 times lower than the current BDB implementation. As a third party in all this, I'd rather talent be applied to speed

Re: DNF could improve messages about package auto-removal

2015-12-04 Thread Przemek Klosowski
On 12/04/2015 02:54 PM, James Antill wrote: > and save considerable percent of time during >subsequent updates. The things removed (correctly) are the smallest leaf nodes, I am confused here---how does dnf distinguish leaf nodes that used to be a dependency, and are no longer needed because

Re: wayland in rawhide

2015-11-25 Thread Przemek Klosowski
On 11/25/2015 03:25 PM, drago01 wrote: On Wed, Nov 25, 2015 at 9:17 PM, Adam Williamson wrote: On Fri, 2015-11-20 at 14:34 +, Ian Malone wrote: [1] Apparently middle mouse buttons are rare. I'm in an office This seems an odd assertion [...] Its not odd ... its plain wrong. I think Ian

Re: On running gui applications as root

2015-11-19 Thread Przemek Klosowski
On 11/19/2015 08:31 AM, Reindl Harald wrote: Am 19.11.2015 um 13:57 schrieb Simon Farnsworth: Put another way: "sudo emacs /etc/hosts" will break under Wayland than wayland is currently not useable and ready to replace X11 as user i don't care if the application needs to be fixed or wayland

Re: Retire a package from Fedora i686 (not x86_64)

2015-11-12 Thread Przemek Klosowski
On 11/11/2015 03:54 PM, Reindl Harald wrote: Am 11.11.2015 um 21:20 schrieb Fred New: On the other hand, my >10 year-old 32-bit system (Fedora 22) is the only place my LaserJet 4L printer works. My 64-bit systems drop control sequences (like they don't flush the output buffer), leaving the las

Re: To distro-sync or not distro-sync?

2015-10-29 Thread Przemek Klosowski
On 10/29/2015 08:33 AM, Reindl Harald wrote: Am 29.10.2015 um 13:24 schrieb Honza Šilhan: dnf has `--allowerasing switch - it will resolve the conflicts by uninstallation of conflicting packages. Installing the packages regardless the dependencies by `--force` is really dangerous and will n

Re: To distro-sync or not distro-sync?

2015-10-29 Thread Przemek Klosowski
On 10/29/2015 05:56 AM, Reindl Harald wrote: the software upgrade just have to mention the conflicting packages and stop until somebody enables a --force switch and in general DNF has to be much more verbose in case of dependency problems instead just saying "can't do anything because broken

Re: python: dropping the .py files [was Re: Fedora 23 cloud image (and, for that matter, minimal anything)] bloat

2015-09-25 Thread Przemek Klosowski
On 09/25/2015 10:04 AM, Matthew Miller wrote: On Thu, Sep 24, 2015 at 10:10:40AM +0200, Vít Ondruch wrote: Also, you might consider to ship the precompiled bytecode just optionally, using recommends. On contrary, if you insist on shipping the bytecode, why you don't drop the .py files? I see a

Re: Proposal to reduce anti-bundling requirements

2015-09-16 Thread Przemek Klosowski
On 09/14/2015 12:04 PM, Adam Williamson wrote: On Mon, 2015-09-14 at 12:45 +0200, Reindl Harald wrote: and much more important: if Fedora changes to more and more recommend "pip", "gem" and "cpan" like installs instead RPM packages it is no longer a distribution over the long because that would

Re: Proposal to reduce anti-bundling requirements

2015-09-10 Thread Przemek Klosowski
On 09/10/2015 09:53 AM, Stephen Gallagher wrote: The point of software is to provide a service to an end-user. Users don't run software because it has good packaging policies, they run software because it meets a need that they have. If they can't get that software from Fedora, they *will* get it

Re: Hosting End-Of-Life Fedora Base images?

2015-07-20 Thread Przemek Klosowski
On 07/20/2015 02:52 PM, Adam Miller wrote: On Mon, Jul 20, 2015 at 1:46 PM, Przemek Klosowski wrote: Modern package-based systems like Fedora achieved a practical "patch early and often" setup with responsive security posture, but they are subject to creeping subsystem incompa

<    1   2   3   4   5   6   7   >