Re: Any package using systemd service for upgrade tasks?

2025-07-29 Thread Vitaly Zaitsev via devel
On 29/07/2025 09:46, Zdenek Dohnal wrote: Does anyone use such systemd service for upgrade tasks in their packages? Such services are extremely fragile and often fail if the system is rebooted immediately after a dnf transaction. Check this RHBZ issue as an example (still not fixed): https:/

Re: F43 Change Proposal: Use update-alternatives for managing NodeJS symlinks (self contained)

2025-07-11 Thread Vitaly Zaitsev via devel
On 10/07/2025 13:14, Aoife Moloney via devel-announce wrote: We aim to move away from manual management of /usr/bin/node, /usr/bin/npm, and similar symlinks to leveraging update-alternatives system. AFAIK, the alternatives system doesn't work reliably on immutable (ostree) Fedora versions. I

Re: Orphaned packages looking for new maintainers

2025-06-17 Thread Vitaly Zaitsev via devel
On 17/06/2025 10:36, Cristian Le via devel wrote: Why not retire and obsolute them with the psi-plus package? I don't want to obsolete it by the psi-plus package because users won't be happy if all their accounts/messages suddenly disappear. Psi-plus has its own profiles and settings and can

Re: Orphaned packages looking for new maintainers

2025-06-17 Thread Vitaly Zaitsev via devel
On 17/06/2025 09:38, Benson Muite wrote: Ok. Orphaned. jdns is also no longer needed, since psi-plus doesn't use it anymore. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscr

Re: Orphaned packages looking for new maintainers

2025-06-17 Thread Vitaly Zaitsev via devel
On 17/06/2025 09:10, Benson Muite wrote: psi orphan, slankes 0 weeks ago Taken I orphaned it because it's not maintained. Psi-plus is now the primary upstream from the same authors. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) --

Re: F43 Change Proposal: Deprecate RPM Macros for setup.py-based Python Builds (self-contained)

2025-06-09 Thread Vitaly Zaitsev via devel
On 08/06/2025 22:06, Miro Hrončok wrote: See https://src.fedoraproject.org/rpms/qr-code-generator/pull-request/2 instead. Thank you. But this is a temporary solution until Python removes setup.py support from setuptools, right? -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- _

Re: F43 Change Proposal: Deprecate RPM Macros for setup.py-based Python Builds (self-contained)

2025-06-09 Thread Vitaly Zaitsev via devel
On 08/06/2025 21:10, Miro Hrončok wrote: For projects with setup.py, the macros fallback to setuptools backend and pyproject.toml is not required. What happens when Python removes setup.py support from setuptools? Why? The upstream is extremely hostile and refuse to merge any pull requests.

Re: F43 Change Proposal: Deprecate RPM Macros for setup.py-based Python Builds (self-contained)

2025-06-08 Thread Vitaly Zaitsev via devel
On 07/06/2025 14:49, Aoife Moloney wrote: The modern pyproject.toml-based build system and corresponding `%pyproject` macros should be used instead, which provide a more flexible and standardized approach to building and installing Python packages. Only if the upstream provides pyproject.toml.

Re: speed-dreams-2.4.2: How to determine the cause of a SIGSEGV signal

2025-06-03 Thread Vitaly Zaitsev via devel
On 02/06/2025 12:09, Martin Gansser wrote: I have installed speed-dreams-2.4.2 and noticed that a SIGSEGV, segmentation fault Can you try building without LTO optimizations? %global _lto_cflags %{nil} -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- _

Re: speed-dreams-2.4.2: How to determine the cause of a SIGSEGV signal

2025-06-03 Thread Vitaly Zaitsev via devel
On 03/06/2025 11:13, Florian Weimer wrote: If you use RelWithDebInfo instead, as Martin suggested, you'll get a better debugging experience. On Fedora, you won't notice any difference between the Release and RelWithDebInfo build configurations, since Fedora's build flags already include the -

Re: Remove openh264?

2025-05-29 Thread Vitaly Zaitsev via devel
On 29/05/2025 21:16, Leigh Scott wrote: Rpmfusion ffmpeg is built against nopenh264 nopenh264 is just a shim. It has no codec implementation inside. I think ffmpeg need to be rebuilt without openh264 to drop the dependency. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- __

Re: Remove openh264?

2025-05-29 Thread Vitaly Zaitsev via devel
On 29/05/2025 20:34, Chuck Anderson wrote: Swap to noopenh264 instead: Since noopenh264 is just a shim, it can cause segfaults when playing H.264 videos, because ffmpeg was built with openh264 support. First, RPM Fusion's ffmpeg need to be rebuilt without openh264. Second, Firefox needs to d

Re: Remove openh264?

2025-05-29 Thread Vitaly Zaitsev via devel
On 29/05/2025 16:52, Michael Catanzaro wrote: If the user has RPM Fusion enabled, then openh264 is not necessary or desirable. RPM Fusion has better video decoders available. If you have figured out how to install video decoders from RPM Fusion, then disabling the Cisco repo would make sense.

Re: Remove openh264?

2025-05-29 Thread Vitaly Zaitsev via devel
On 28/05/2025 22:19, Chris Adams wrote: So it's been another month and this still isn't resolved. I know people on the Fedora side have been trying (don't want to complain about effort). But if Fedora can't reliably get timely updates to a package that has high security implications, it should

Re: F42 Change Proposal: CMake drop non-standard variables (system-wide)

2025-04-17 Thread Vitaly Zaitsev via devel
On 16/04/2025 13:47, Aoife Moloney wrote: == Benefit to Fedora == * Avoid packaging issue due to the current assumption that the the paths used are meant to be absolute paths. * Encourage upstream build system modernization and standardization. Sorry, but I'm still skeptical about this change.

Re: Is 'sharutils' still needed in Fedora?

2025-04-08 Thread Vitaly Zaitsev via devel
On 08/04/2025 10:55, Lukas Javorsky wrote: if there is still a need for this package uuencode is still useful for getting binary data from Fedora Koji (coredumps or preprocessed TU files after the compiler ICEs). -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- _

Re: [Help needed] Build openvdb with nanobind requirement

2025-04-05 Thread Vitaly Zaitsev via devel
On 05/04/2025 00:45, Luya Tshimbalanga wrote: Trying to set "nanobind_DIR" does nothing. Can someone look at the issue? Just add -DCMAKE_PREFIX_PATH='%{python3_sitelib}/nanobind/cmake' to %cmake macros. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___

Systemd dbus activation

2025-03-31 Thread Vitaly Zaitsev via devel
Hello. DBus activation of systemd units is broken on Fedora 41+ after latest systemd updates. This breaks some applications that rely on these methods. Trying to use the /org/freedesktop/systemd1/org.freedesktop.systemd1.Manager.StartUnit method throws an error "Interactive authentication re

Re: packaging: prefer git archives to upstream archives for Source

2025-03-31 Thread Vitaly Zaitsev via devel
On 31/03/2025 13:44, Cristian Le via devel wrote: In the case of submodules I have had good experience using `%forgemeta`. You'll still have to manually track all those submodules commits. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___

Re: packaging: prefer git archives to upstream archives for Source

2025-03-31 Thread Vitaly Zaitsev via devel
On 31/03/2025 12:53, Zbigniew Jędrzejewski-Szmek wrote: This is inspired by the discussion in "Reproducible Builds" mailing list, in particular [1]. But auto-generated Git archives are not reproducible. GitHub uses a dirty hack: on the first download, it caches the tarball on their resource s

Re: packaging: prefer git archives to upstream archives for Source

2025-03-31 Thread Vitaly Zaitsev via devel
On 31/03/2025 13:32, Leigh Scott wrote: Using github/gitlab sources is non-starter IMO as they rarely include the submodules. They never include submodules. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___ devel mailing list -- devel@li

Non-standard options removal from %cmake

2025-03-12 Thread Vitaly Zaitsev via devel
Hello. Non-standard options removal[1] from %cmake macros broke various packages in Rawhide[2]. Some projects still use LIB_SUFFIX and LIB_INSTALL_DIR. They are all FTBFS now. This change was done without proper announcement. Please revert or make it a system-wide change. [1]: https://s

Re: F43 change Proposal: Disabling support of building OpenSSL engines (system-wide)

2025-02-25 Thread Vitaly Zaitsev via devel
On 24/02/2025 18:53, Aoife Moloney via devel-announce wrote: We disable support of building engines in OpenSSL and remove the deprecated openssl-devel-engine subpackage. What happens if a third-party application (such as Steam) tries to import and use ENGINE_ symbols from the shared library pr

Announcing libzim and libkiwix soversion bumps

2025-01-31 Thread Vitaly Zaitsev via devel
Hello all. zimlib 9.2.3 will include a soversion bump from .8 to .9. libkiwix 14.0.0 will include a soversion bump from .12 to .14. I will rebuild all dependent packages in Rawhide. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___ devel m

Re: F42 Change Proposal: Switch to EROFS for Live Media (self-contained)

2025-01-16 Thread Vitaly Zaitsev via devel
On 15/01/2025 23:53, Aoife Moloney via devel-announce wrote: There should be no visible impact to users. Live installations continue to work as expected, and live environments may be slightly faster. Is it true that new ISO images will take up 2x more disk space due to weak compression? -- S

Re: F42 Change Proposal: Optimized Binaries for the AMD64 / x86_64 Architecture (v2) (self-contained)

2025-01-14 Thread Vitaly Zaitsev via devel
On 13/01/2025 09:25, David Bold wrote: No, 0.1 to 1 ms or 0.0001 to 0.001 seconds Yeah, there's a font problem. I thought it was milli, not micro. After changing the default font it now looks better. Thanks. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- __

Re: F42 Change Proposal: Optimized Binaries for the AMD64 / x86_64 Architecture (v2) (self-contained)

2025-01-14 Thread Vitaly Zaitsev via devel
On 13/01/2025 10:11, Zbigniew Jędrzejewski-Szmek wrote: First, this would require setting up the infrastructure to build and store and distribute multiple builds of a single version of a package. This is something that Fedora currently doesn't do, so it'd require changes to operations in mock, ko

Re: zswap: should we use zsmalloc as default allocator?

2025-01-13 Thread Vitaly Zaitsev via devel
On 13/01/2025 01:39, Chris Murphy wrote: Reported compression ratio is 4.22. Documentation says zbud compression ratio is fixed at 2:1. From my laptop using the default zswap-cli.conf: Pool: 363.71 MiB (3.1% of MemTotal). Stored: 727.34 MiB (78.9% of SwapUsed). Compression ratio: 2.00. Previ

Re: F42 Change Proposal: Optimized Binaries for the AMD64 / x86_64 Architecture (v2) (self-contained)

2025-01-13 Thread Vitaly Zaitsev via devel
On 12/01/2025 20:36, Zbigniew Jędrzejewski-Szmek wrote: I think any massive use of this scheme is unlikely. Note that we'd want to this only for packages where the optimized code yields noticeable benefits. There just aren't that many packages which do significant number crunching_and_ don't alre

Re: F42 Change Proposal: Optimized Binaries for the AMD64 / x86_64 Architecture (v2) (self-contained)

2025-01-12 Thread Vitaly Zaitsev via devel
On 12/01/2025 13:02, Christoph Erhardt wrote: 1. Not all packages but only those whose maintainers explicitly opt in. Yes, at the first stage. But over time the number of packages can increase significantly. 2. The duplication will affect only the executable ELFs - i.e. the contents of `/us

Re: F42 Change Proposal: Optimized Binaries for the AMD64 / x86_64 Architecture (v2) (self-contained)

2025-01-12 Thread Vitaly Zaitsev via devel
On 10/01/2025 20:28, Aoife Moloney via devel-announce wrote: Individual packages can provide already optimized libraries via the glibc-hwcaps mechanism. This approach will be extended to executables. The package provides an optimized variant of a binary in a different directory. So all Fedora p

Re: zswap: should we use zsmalloc as default allocator?

2025-01-10 Thread Vitaly Zaitsev via devel
On 09/01/2025 23:42, Chris Murphy wrote: Do I still need to enable zswap with the kernel param? Or can it all be done by the service unit? No. It will be enabled automatically since the zswap-cli.conf configuration file already has the enabled=Y option by default, and zswap can be enabled or

Re: zswap: should we use zsmalloc as default allocator?

2025-01-08 Thread Vitaly Zaitsev via devel
On 02/01/2025 15:00, Dmitry Konishchev wrote: Should this default be changed? I know this is not you're looking for, but you can use the zswap-cli package to manage zswap kernel module. You can edit the /etc/zswap-cli/zswap-cli.conf configuration file to set any supported kernel module opti

Re: Revocation of provenpackager access from pbrobinson

2024-12-19 Thread Vitaly Zaitsev via devel
On 19/12/2024 09:55, Daniel P. Berrangé wrote: For these situations IMHO it would be better if we did not need to have provenpackagers trigger the rebuilds. We should have a fully automatable way for*any* package to trigger a rebuild of dependent things. Fully agree. For example, OBS can automa

Re: Revocation of provenpackager access from pbrobinson

2024-12-19 Thread Vitaly Zaitsev via devel
On 18/12/2024 22:59, Simon de Vlieger wrote: What I'd like to see is to remove provenpackagers, do everything through PRs and have a separate SIG/group that can fast-track and merge any PR. Not an option because when we update some important libraries, we need to rebuild more than 50 packages.

Re: F42 Change Proposal: Intel Compute Runtime - Upgrade with HW cut-off (self-contained)

2024-12-17 Thread Vitaly Zaitsev via devel
On 16/12/2024 21:43, Aoife Moloney via devel-announce wrote: removed support for GPU Generations prior to the 12th Gen GPUs. This effectively means that any hardware released before 2020 is no longer supported for OpenCL and oneAPI workloads. If it removes such a huge list of hardware, a compat

Re: HEADS UP: icu 76 coming to rawhide

2024-12-14 Thread Vitaly Zaitsev via devel
On 05/12/2024 19:22, Pete Walter wrote: I am in the process of updating icu from 74.2 to 76.1 in rawhide. Can you apply this patch in downstream? --- a/icu4c/source/common/unicode/char16ptr.h +++ b/icu4c/source/common/unicode/char16ptr.h @@ -13,6 +13,7 @@ #include #include +#include /*

Re: flamethrower vs. http-parser

2024-12-11 Thread Vitaly Zaitsev via devel
On 11/12/2024 15:07, Petr Menšík wrote: Or we could use libcurl-url(3) for parsing URL Or better https://github.com/ada-url/ada. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsu

Re: HEADS UP: icu 76 coming to rawhide

2024-12-11 Thread Vitaly Zaitsev via devel
On 05/12/2024 19:22, Pete Walter wrote: I am in the process of updating icu from 74.2 to 76.1 in rawhide It looks like there were some API changes in version 76.1. From the libkiwix package build log: In file included from /usr/include/unicode/unistr.h:37, from /usr/include/u

Re: HEADS UP: icu 76 coming to rawhide

2024-12-11 Thread Vitaly Zaitsev via devel
On 11/12/2024 09:23, Tom Hughes wrote: ikely there is just a #include missing - it was probably being included by accident before as a side effect of something else. Yes, /usr/include/unicode/char16ptr.h (line 317[1]) explicitly uses std::is_convertible_v but doesn't have #include in this p

Re: Unannounced soname bump in libre2

2024-08-15 Thread Vitaly Zaitsev via devel
On 14/08/2024 09:37, Denis Arnaud wrote: Thanks for the heads up (!)... and sorry for the unannounced bump. Please fix your tooling. You broke %autochangelog: https://src.fedoraproject.org/rpms/mtxclient/c/1749847d56c99c064f8eda14a2ef1e83d3f822e5?branch=rawhide You must use git commit --allow-

Re: Fedora rawhide (to be f41) and openssl engines

2024-07-22 Thread Vitaly Zaitsev via devel
On 22/07/2024 13:34, Dmitry Belyavskiy wrote: So I wonder if it's worth changing the engine deprecation mechanism in Fedora to the one we have in CentOS and if yes, what is the mechanism for such a change. It's too late for F41. The mass rebuild is completed and the package maintainers have ma

Re: Announcing fmt library soversion bump

2024-07-19 Thread Vitaly Zaitsev via devel
On 19/07/2024 15:25, Stephen Gallagher wrote: I guess we need to investigate why this didn't work in this situation. The absence of the fmtX compatibility package in the buildroot makes it impossible to rebuild dnf5. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) --

Re: Announcing fmt library soversion bump

2024-07-18 Thread Vitaly Zaitsev via devel
On 18/07/2024 08:27, Adam Williamson wrote: I guess the fmt10 compat package needs to be imported to ELN (or everything patched/rebuilt to so.11). You're right, a compatibility version is required to unbreak Koji/dnf5 there, but Fedora maintainers can't do anything with it since ELN is a sepa

Re: Announcing fmt library soversion bump

2024-07-18 Thread Vitaly Zaitsev via devel
On 18/07/2024 08:27, Adam Williamson wrote: I guess the fmt10 compat package needs to be imported to ELN (or everything patched/rebuilt to so.11). dnf5 builds without issues against version 11: https://koji.fedoraproject.org/koji/buildinfo?buildID=2490335 Someone should just trigger an ELN reb

Re: Announcing fmt library soversion bump

2024-07-18 Thread Vitaly Zaitsev via devel
On 18/07/2024 07:58, Alexander Sosedkin wrote: This broke dnf5 in ELN: fmt-11.0.1-2.eln141 is in ELN. After rebuilding dnf5 by mass rebuild, it should be fixed automatically. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___ devel mail

Re: Announcing fmt library soversion bump

2024-07-16 Thread Vitaly Zaitsev via devel
On 16/07/2024 11:10, Frantisek Zatloukal wrote: At this point, I'd probably say go ahead and build a new fmt 11 and fmt 10 compat in rawhide proper. There is a mass rebuild starting tomorrow which will take care of the rebuilds, and since you've introduced the compat package, there is no much h

Re: sbin-merge: what to do?

2024-07-15 Thread Vitaly Zaitsev via devel
This change also appears to affect /usr/local[1]. This commit[2] introduced a regression with missing directories in /usr/local. Configuration from F40: /usr/local/bin (missing in F41) /usr/local/etc /usr/local/games /usr/local/include /usr/local/lib /usr/local/lib64 /usr/local/libexec (missin

Re: *****SPAM***** Enabling GOPROXY and GOSUMDB in Fedora

2024-07-12 Thread Vitaly Zaitsev via devel
On 11/07/2024 13:16, Chris Suszynski wrote: Fedora does not patch out calls to sites vcpkg package has telemetry disabled by default. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___ devel mailing list -- devel@lists.fedoraproject.org T

Re: F41 Change Proposal: Self Encrypting Drives Support in the Installer (self-contained)

2024-07-12 Thread Vitaly Zaitsev via devel
On 12/07/2024 17:54, Aoife Moloney wrote: Add optional support for using native hardware encryption on TCG OPAL2 compliant drives when configuring disk encryption in the installer. The hardware encryption implementation can't be verified and can't be trusted[1]. Even Microsoft has switched Bit

Re: how to build a %check section for qt5 and qt6

2024-07-10 Thread Vitaly Zaitsev via devel
On 10/07/2024 10:34, Martin Gansser wrote: Should I include these two binaries in the %files section, and if so, in which directory should I copy them ? I doubt these examples need to be installed. Just skip them. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) --

Re: how to build a %check section for qt5 and qt6

2024-07-10 Thread Vitaly Zaitsev via devel
On 10/07/2024 09:16, Martin Gansser wrote: can someone take a look at the spec file [1], I think there is something wrong with the %check section. HotkeyTest is not a test, but an application. You can enable its build by passing `-DQHOTKEY_EXAMPLES:BOOL=ON`. Remove everything from the %chec

Re: how to build a %check section for qt5 and qt6

2024-07-09 Thread Vitaly Zaitsev via devel
On 09/07/2024 15:13, Martin Gansser wrote: i want to build a %check section for qt5 and qt6 for qhotkey Just use different directories for Qt 5 and Qt 6 builds. You can use this SPEC as an example: https://src.fedoraproject.org/rpms/qcoro/blob/rawhide/f/qcoro.spec -- Sincerely, Vitaly Zaits

Re: F42 Change Proposal: Opt-In Metrics for Fedora Workstation (system-wide)

2024-07-08 Thread Vitaly Zaitsev via devel
On 08/07/2024 19:51, Przemek Klosowski via devel wrote: So, I ask the questioners what is the exact scenario they are contesting? why is the data on distribution of memory sizes privacy-relevant? Most GNU/Linux users are privacy conscious. This was the main reason for choosing this OS. All th

Re: F41 Change Proposal: Anaconda as native Wayland application (System Wide)

2024-07-06 Thread Vitaly Zaitsev via devel
On 06/07/2024 14:06, Neal Gompa wrote: For KDE Plasma, you need to enable 3D acceleration (which is not on by default). What about KVM/qemu? AFAIK, 3D acceleration is still not supported without forwarding a physical GPU into a VM. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- _

Re: F42 Change Proposal: Opt-In Metrics for Fedora Workstation (system-wide)

2024-07-03 Thread Vitaly Zaitsev via devel
On 02/07/2024 20:21, Michael Catanzaro wrote: But it's a library that applications will link to, so this won't work. The apps should dlopen() it and if this library is not installed they will be able to disable all telemetry functionality. dlopen is the best option for this. -- Sincerely,

Re: F42 Change Proposal: Opt-In Metrics for Fedora Workstation (system-wide)

2024-07-02 Thread Vitaly Zaitsev via devel
On 01/07/2024 21:47, Aoife Moloney wrote: Packages wanting to collect metrics data will need to depend on eos-metrics. For example, to collect statistics about Settings usage, the gnome-control-center package would need to depend on eos-metrics in order to send a metric to eos-event-recorder-daem

Re: F42 Change Proposal: Opt-In Metrics for Fedora Workstation (system-wide)

2024-07-02 Thread Vitaly Zaitsev via devel
On 02/07/2024 12:52, Michael Catanzaro wrote: Please remember the data collected will be anonymous and the data points will not be aggregated together with other data points. The government can ask "How many users are there from the $country_name", and if the number is greater than N, they can

Re: F42 Change Proposal: Opt-In Metrics for Fedora Workstation (system-wide)

2024-07-02 Thread Vitaly Zaitsev via devel
On 02/07/2024 10:53, Neal Gompa wrote: Why? It can be useful for determining where to boost investment in l10n and i18n efforts. Because Red Hat is based in the US. It can be used against users from countries and regions that the US does not like (e.g. sanctions, export policies, etc.). --

Re: F42 Change Proposal: Opt-In Metrics for Fedora Workstation (system-wide)

2024-07-02 Thread Vitaly Zaitsev via devel
On 01/07/2024 21:47, Aoife Moloney wrote: As a result of this feedback, we have changed the proposal: we now propose that initial setup will show an explicit yes/no prompt which has no default value. What about existing systems? Which metrics will be collected Country where device is physical

Re: F42 Change Proposal: Unprivileged Disk Management (system-wide)

2024-07-02 Thread Vitaly Zaitsev via devel
On 01/07/2024 22:52, Aoife Moloney wrote: This proposal adds a new dedicated `diskadmin` group, allowing users to manage external drives without needing to be in the `wheel` group. Users with this permission can easily mount an external drive with suid binary and gain root access to entire sys

CPack breakage with RPM 4.20

2024-06-27 Thread Vitaly Zaitsev via devel
Hello. RPM 4.20 broke CPack, which is commonly used by many developers to produce RPM packages: https://gitlab.kitware.com/cmake/cmake/-/issues/26021 -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___ devel mailing list -- devel@lists.fedo

Re: 2FA policy for provenpackagers is now active

2024-06-25 Thread Vitaly Zaitsev via devel
On 25/06/2024 15:06, Stephen Gallagher wrote: I am not a lawyer, but I would assume that if Fedora offered to provide such a token, it would be reviewed by Legal and provide some form of legally-binding assertion that we weren't sending out malicious devices. Who can guarantee that these device

Re: 2FA policy for provenpackagers is now active

2024-06-25 Thread Vitaly Zaitsev via devel
On 24/06/2024 23:38, Gary Buhrmaster wrote: As I recall from a previous query, there are (around) 90 active proven packagers (and ~250 total who were in the PP group). I think most privacy/security focused developers/maintainers won't plug USB tokens they get from random people on the Internet

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Vitaly Zaitsev via devel
On 24/06/2024 19:47, Matthew Miller wrote: If we decide that this is a good idea, we might be able to get funding to distribute these to all proven packagers (and perhaps more). Even to those countries that the US does not like? :-) -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Vitaly Zaitsev via devel
On 24/06/2024 15:27, Michael J Gruber wrote: Or else, all cloneable OTP apps would need to be disallowed as 2nd factors, and only physical tokens should count. FIDO2 is even worse than OTP since most (or even all) implementations are proprietary (for example, Android requires proprietary GMS t

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Vitaly Zaitsev via devel
On 24/06/2024 10:45, Alexander Bokovoy wrote: Can you point me to a discussion where it says it is impossible to implement that in GOA? FAS (kinit) should request the OTP code in a separate prompt. If kinit asks for a password and OTP codes in separate prompts, GOA will be able to parse it, s

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Vitaly Zaitsev via devel
On 24/06/2024 03:42, Kevin Fenzi wrote: You can enroll as many tokens as you like, so you can enroll one in a backup device or system in case you loose your primary token. Backup codes must be generated when the user enables 2FA. They can later use these one-time codes to log in if they lose a

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Vitaly Zaitsev via devel
On 19/06/2024 19:45, Jonathan Steffan wrote: Unless the private key is off-system, anything will be able to be loaded without much fuss. Maybe akmods can be updated to use the private key stored in TPM 2.0 if the system has one? While it does *feel* better, both options effectively remove a

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Vitaly Zaitsev via devel
On 19/06/2024 17:49, Daniel P. Berrangé wrote: This allows any privileged process to sign any future kmods, from any source. Yes. That's why it is preferable to ship built and signed in Koji kmod packages, but nobody want to do this: neither Fedora nor RPM Fusion. Without a signature, the ke

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Vitaly Zaitsev via devel
On 17/06/2024 13:44, Aoife Moloney wrote: The goal is this change is to provide an easy way to install Nvidia drivers in Fedora Workstation. Someone should fix this issue first: https://bugzilla.redhat.com/show_bug.cgi?id=2011120 It breaks offline updates. I think the system-upgrade plugin sh

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Vitaly Zaitsev via devel
On 19/06/2024 13:10, Daniel P. Berrangé wrote: Should this be a system-wide change, rather than self-contained change ? While the implementation is in gnome-software, since this is semi-automating enrollment of a new SecureBoot MOK, with the private key strored locally, it has security impact on

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Vitaly Zaitsev via devel
On 19/06/2024 09:13, Daniel P. Berrangé wrote: If Fedora cares about optimal performance it should just declare we're going to stop being held back by compat with ancient hardware and use -v2 baseline for everything, but obviously that's been rejected previously. Maybe it's a good time for the

Re: F41 Change Proposal: GIMP Version 3 (self-contained)

2024-06-16 Thread Vitaly Zaitsev via devel
On 16/06/2024 18:24, Aoife Moloney wrote: This release of Fedora Linux ships version 3 of the GNU Image Manipulation Program, with many new features and improved user experience. The package is called gimp3, the old version will still be available under the old name, gimp for users who need it fo

Fedora build flags prefix

2024-06-16 Thread Vitaly Zaitsev via devel
Hello. I have a question about Fedora's default build flags: -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS Why do we use undocumented -Wp prefix? From manpage: The preprocessor’s direct interface is undocumented and subject to change, so whenever possible you should avo

Announcing libscn soversion bump

2024-06-16 Thread Vitaly Zaitsev via devel
Hello all. libscn 3.0.1 will include a soversion bump from 0 to 3. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fed

Re: F41 Change Proposal: Make OpenSSL distrust SHA-1 signatures by default (system-wide)

2024-06-09 Thread Vitaly Zaitsev via devel
On 08/06/2024 00:43, Aoife Moloney wrote: OpenSSL will no longer trust cryptographic signatures using SHA-1 by default, starting from Fedora 41. What about Git? AFAIK, AFAIK, Git heavily uses both SHA-1 and SHA-2 to validate objects and commits. -- Sincerely, Vitaly Zaitsev (vit...@easycod

Re: 41 Change Proposal: Make Tuned the Default Power Profile Management Daemon (System-Wide)

2024-05-31 Thread Vitaly Zaitsev via devel
Just a note. Users of DEs other than KDE and GNOME can use the Tuned Switcher app. Available both in the main Fedora repository and as a Flatpak: - sudo dnf install tuned-switcher - flatpak install org.easycoding.TunedSwitcher -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- _

Re: Adding additional flag in cmake-rpm-macros to disallow the use of the FetchContent module

2024-05-27 Thread Vitaly Zaitsev via devel
On 27/05/2024 02:22, Byoungchan Lee via devel wrote: In well-maintained Fedora packages, the use of the FetchContent module is generally discouraged because dependencies are already available in the Fedora repositories. FetchContent never worked on Fedora because the builders have no network

Re: Adding additional flag in cmake-rpm-macros to disallow the use of the FetchContent module

2024-05-27 Thread Vitaly Zaitsev via devel
On 27/05/2024 02:46, Kan-Ru Chen wrote: It is documented that FIND_PACKAGE_ARGS argument in FetchContent_Declare should instruct it to find system packages first. This only works as expected in very rare cases. The library name in FetchContent() must match the name in find_package(). This

Re: [Test-Announce] Kernel 6.9 Test Week 2024-05-26 to 2024-06-02

2024-05-27 Thread Vitaly Zaitsev via devel
On 26/05/2024 12:36, Alicja Brook wrote: As usual, the Fedora QA team will hangout at #fedora-test-day(a)libera.chat The LiberaChat Matrix gate has been closed and all chats are now only available in Matrix. You should replace all links with #fedora-test-day:fedoraproject.org. -- Sincerely,

Re: oneapi-level-zero requires cloned spdlog-populate

2024-05-23 Thread Vitaly Zaitsev via devel
On 23/05/2024 02:02, Luya Tshimbalanga wrote: Upstream made a change that requires cloning a sub-directory spdlog-populate leading to a failure to build. What will be an alternative to address that issue? You need to patch it and submit a pull request to upstream. Check this example: https:

Re: Schedule for Monday's FESCo Meeting (2024-05-20)

2024-05-22 Thread Vitaly Zaitsev via devel
On 21/05/2024 22:59, Miro Hrončok wrote: I am a tad sad that this was approved by FESCo without being first discussed with the wider community. We have another similar issue: https://pagure.io/fesco/issue/3205 This was also not discussed. Intel wants to include pre-built blobs to the reposito

Re: Announcing spdlog soversion bump

2024-05-22 Thread Vitaly Zaitsev via devel
On 21/05/2024 15:30, Vitaly Zaitsev wrote: spdlog 1.14.1 will include a soversion bump from .1.12 to .1.14. Completed and pushed to Rawhide. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___ devel mailing list -- devel@lists.fedoraproject

Re: F41 Change Proposal - Reproducible Package Builds (System-Wide)

2024-05-22 Thread Vitaly Zaitsev via devel
On 17/04/2024 09:20, Zbigniew Jędrzejewski-Szmek wrote: In some ways, that'd be nice, because we wouldn't have to install additional tools in the buildroot. But OTOH, those tools are rather small and bash/find/etc probably need to be installed anyway. It doesn't seem to work properly without th

Re: LLVM Packaging Ideas for Fedora 41

2024-05-21 Thread Vitaly Zaitsev via devel
On 22/05/2024 01:45, Tom Stellard wrote: I looked in the iwyu source, and it's not using ${LLVM_LIBRARY_DIR} correctly. That variable points to where the libraries are installed, but iwyu is using it to look up the resource directory.  iwyu should be using `clang -print-resource-dir` instead.

Re: LLVM Packaging Ideas for Fedora 41

2024-05-21 Thread Vitaly Zaitsev via devel
On 27/04/2024 06:34, Tom Stellard wrote: If anyone has any feedback on these ideas we'd like to hear it and are happy to discuss these more. Can you fix the ${LLVM_LIBRARY_DIR} variable in LLVM's CMake config? It broke after switching LLVM to use /usr/lib. It still points to /usr/lib64 and w

Announcing spdlog soversion bump

2024-05-21 Thread Vitaly Zaitsev via devel
Hello all. spdlog 1.14.1 will include a soversion bump from .1.12 to .1.14. Affected packages (including spdlog-devel and virtual cmake(spdlog) and pkgconfig(spdlog)): - bear - coeurl - corectrl - cryfs - CuraEngine - freeopcua - gerbera - gnuradio - gqrx - gr-air-modes - gr-funcube - gr-hpsd

Re: Firefox 126.0 with DBus service

2024-05-17 Thread Vitaly Zaitsev via devel
On 17/05/2024 11:04, Martin Stransky wrote: I see. I don't think it's useful for gnome search as it uses live data (also from recently visited URL) and also sorts results for popularity. It should give you the same results as writing directly to Firefox URL bar. This is not a problem because *

Re: Firefox 126.0 with DBus service

2024-05-17 Thread Vitaly Zaitsev via devel
On 17/05/2024 10:38, Martin Stransky wrote: Hm, does really KDE Plasma access Firefox profile and searches it for anything? That's interesting. Can you point me to any info about it? It looks like it copies Firefox's *.sqlite databases to ~/.cache/bookmarksrunner on every user login and then u

Re: Firefox 126.0 with DBus service

2024-05-17 Thread Vitaly Zaitsev via devel
On 17/05/2024 08:05, Martin Stransky wrote: Gnome search service is provided by running Firefox application itself. It's because it searches and publishes results from recent live user profile. Why can't GNOME Search engine just parse Firefox's *.sqlite databases like everyone else does (like

Re: Firefox 126.0 with DBus service

2024-05-15 Thread Vitaly Zaitsev via devel
On 15/05/2024 10:52, Ian McInerney via devel wrote: What if I don't use GNOME search? I don't use the GNOME desktop, so I don't want to have a random Firefox process running on my machine that is doing absolutely nothing and just hogging resources. Is this process only created when something t

Re: GIMP 3.0 in F41?

2024-05-13 Thread Vitaly Zaitsev via devel
On 13/05/2024 13:24, Nils Philippsen wrote: If I’m not off track, renaming the existing version to “gimp2” would at least make people install it as an update to “gimp-2.10.x” without any real benefit to them. And it would make ”gimp” jump to version 3 which is wildly different Fedora is a bleed

Re: GIMP 3.0 in F41?

2024-05-13 Thread Vitaly Zaitsev via devel
On 13/05/2024 00:58, Sérgio Basto wrote: https://src.fedoraproject.org/rpms/gimp3 The gimp package should be updated to 3.0, and the existing 2.x version should move to the gimp2 compatibility package. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) --

Re: LLVM Packaging Ideas for Fedora 41

2024-05-13 Thread Vitaly Zaitsev via devel
On 13/05/2024 15:41, Vít Ondruch wrote: we can spent time adjusting upstream projects to be compatible with the latest llvm Feel free to start with pocl. It still doesn't support LLVM 18. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___

Re: LLVM Packaging Ideas for Fedora 41

2024-04-29 Thread Vitaly Zaitsev via devel
On 29/04/2024 16:41, Gary Buhrmaster wrote: Do we have any idea how many code bases are actually sensitive to the specific llvm version? Both of my LLVM dependent packages: iwyu and pocl. On every LLVM major release they break and I have to wait for the upstream to release a new version. --

Re: F39 Change Proposal: Enable fwupd-refresh.timer by default on IoT, CoreOS & Server Editions (Self-Contained)

2023-07-26 Thread Vitaly Zaitsev via devel
On 26/07/2023 11:24, Alexander Ploumistos wrote: What Dominik wrote would apply e.g. for an NVMe replacement drive from Kingston or Samsung (proprietary hardware too, it's a shocker). None of my 5 Samsung SSDs are supported (3 NVMe and 2 SATA). But they can be updated from MS Windows. I gues

Re: F39 Change Proposal: Enable fwupd-refresh.timer by default on IoT, CoreOS & Server Editions (Self-Contained)

2023-07-26 Thread Vitaly Zaitsev via devel
On 26/07/2023 11:04, Dominik 'Rathann' Mierzejewski wrote: You could, for example, buy a supported Logitech Receiver I don't recommend anyone to buy this proprietary hardware: The vulnerabilities allow attackers to sniff on keyboard traffic, but also inject keystrokes (even into dongles not

Re: F39 Change Proposal: Enable fwupd-refresh.timer by default on IoT, CoreOS & Server Editions (Self-Contained)

2023-07-26 Thread Vitaly Zaitsev via devel
On 26/07/2023 10:32, Daniel P. Berrangé wrote: Those devices which do support fwupd have a large enough market share that it is justifiable to enable it, even if there are many machines which can't support it. Maybe Anaconda should only enable it if the device is supported? This information ca

Re: F39 Change Proposal: Enable fwupd-refresh.timer by default on IoT, CoreOS & Server Editions (Self-Contained)

2023-07-26 Thread Vitaly Zaitsev via devel
On 26/07/2023 08:48, Dominik 'Rathann' Mierzejewski wrote: Define small. 😄 Only Dell, HP and Lenovo laptops are fully supported: https://fwupd.org/lvfs/devices/ fwupd is a great tool on laptops but completely useless on desktops since no motherboard vendors support it. Maybe fwupd should st

  1   2   3   4   5   6   7   8   9   10   >