Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-12-18 Thread Sérgio Basto
On Tue, 2018-12-18 at 15:16 -0500, Neal Gompa wrote: > On Tue, Dec 18, 2018 at 3:10 PM Sérgio Basto > wrote: > > > > Hi, (sorry for duplicates I sent from wrong email before) > > > > Nothing happened last week . > > > > Can you add me to https://pagure.io/FedoraReview/ and to > > https://src.fe

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-12-18 Thread Neal Gompa
On Tue, Dec 18, 2018 at 3:10 PM Sérgio Basto wrote: > > Hi, (sorry for duplicates I sent from wrong email before) > > Nothing happened last week . > > Can you add me to https://pagure.io/FedoraReview/ and to > https://src.fedoraproject.org/rpms/fedora-review please . > > My fas user is sergiomb ,

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-12-18 Thread Sérgio Basto
Hi, (sorry for duplicates I sent from wrong email before) Nothing happened last week . Can you add me to https://pagure.io/FedoraReview/ and to https://src.fedoraproject.org/rpms/fedora-review please . My fas user is sergiomb , people want revert mock configurations of RPMFusion because is not

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-12-11 Thread Sérgio Basto
On Tue, 2018-12-11 at 16:36 -0500, Neal Gompa wrote: > On Tue, Dec 11, 2018 at 10:30 AM Sérgio Basto > wrote: > > > > Hi, > > > > Any news ? > > > > "But I guess nothing's getting released, for some reason? fedora- > > review has been on version 0.6.1 since May 2016; all package > > activity si

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-12-11 Thread Neal Gompa
On Tue, Dec 11, 2018 at 10:30 AM Sérgio Basto wrote: > > Hi, > > Any news ? > > "But I guess nothing's getting released, for some reason? fedora-review has > been on version 0.6.1 since May 2016; all package activity since then has > been housekeeping rebuilds. " > > may you add me as admin to F

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-12-11 Thread Sérgio Basto
Hi, Any news ? "But I guess nothing's getting released, for some reason? fedora-review has been on version 0.6.1 since May 2016; all package activity since then has been housekeeping rebuilds. " may you add me as admin to Fedora-review package ? to release a new version . Thanks On Sat, 2018-08-

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-08-18 Thread Jeff Johnson
To answer your question solely because I don't like FUD driven phears monger int discussions RPM based depsolvers select packages based on heuristics, including what is already installed. Any malicious package that had Provides: glibc would most likely be ignored because glibc is already insta

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-08-18 Thread Stephen Gallagher
On Fri, Aug 17, 2018 at 2:08 PM Richard W.M. Jones wrote: > > While I agree that this is a good idea, I have one note of caution: > What's to stop someone adding a malicious package which did something > like ‘Provides: glibc’ and subsequently infects everyone's machine? > I think we'd want to co

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-08-17 Thread Fabio Valentini
On Fri, Aug 17, 2018, 20:53 Richard W.M. Jones wrote: > > While I agree that this is a good idea, I have one note of caution: > What's to stop someone adding a malicious package which did something > like ‘Provides: glibc’ and subsequently infects everyone's machine? > I think we'd want to consid

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-08-17 Thread Richard W.M. Jones
While I agree that this is a good idea, I have one note of caution: What's to stop someone adding a malicious package which did something like ‘Provides: glibc’ and subsequently infects everyone's machine? I think we'd want to consider the security implications of accepting packages after only aut

Re: fedora-review — do we have a maintainer?

2018-08-16 Thread Miro Hrončok
On 16.8.2018 21:16, Alec Leamas wrote: On 16/08/18 14:54, Fabio Valentini wrote: Thanks for your help! You are listed as the main admin for the fedora-review project on pagure [0] - can you give me (decathorpe), Miro (churchyard), and Neal (ngompa) access to the project? Done. Welcome tto

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-08-16 Thread Ben Rosser
On Thu, Aug 16, 2018 at 4:09 PM, Stephen Gallagher wrote: > I'd *really* like to see us get to a point where package review is > fully-automated. Basically we could just have a web-service that you pass a > URL to an SRPM plus authenticate with your FAS account and it will perform > all of the val

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-08-16 Thread Michal Novotny
On Thu, Aug 16, 2018 at 11:09 PM Neal Gompa wrote: > On Thu, Aug 16, 2018 at 5:04 PM Stephen Gallagher > wrote: > > > > > > > > On Thu, Aug 16, 2018 at 8:30 AM Michal Novotny wrote: > >> > >> On Thu, Aug 16, 2018 at 10:49 AM Zbigniew Jędrzejewski-Szmek < > zbys...@in.waw.pl> wrote: > >>> > >>>

Re: Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-08-16 Thread Neal Gompa
On Thu, Aug 16, 2018 at 5:04 PM Stephen Gallagher wrote: > > > > On Thu, Aug 16, 2018 at 8:30 AM Michal Novotny wrote: >> >> On Thu, Aug 16, 2018 at 10:49 AM Zbigniew Jędrzejewski-Szmek >> wrote: >>> >>> f-r currently fails to build (#1603956), it has a bunch of bugs open [1] >>> and many issue

Automating Package Review (Was: fedora-review -- do we have a maintainer?)

2018-08-16 Thread Stephen Gallagher
On Thu, Aug 16, 2018 at 8:30 AM Michal Novotny wrote: > On Thu, Aug 16, 2018 at 10:49 AM Zbigniew Jędrzejewski-Szmek < > zbys...@in.waw.pl> wrote: > >> f-r currently fails to build (#1603956), it has a bunch of bugs open [1] >> and many issues and unhandled pull requests in the upstream repo [2,

Re: fedora-review — do we have a maintainer?

2018-08-16 Thread Alec Leamas
On 16/08/18 14:54, Fabio Valentini wrote: > Thanks for your help! You are listed as the main admin for the > fedora-review project on pagure [0] - can you give me (decathorpe), > Miro (churchyard), and Neal (ngompa) access to the project? > Done. Welcome tto the project, you are all admins! T

Re: fedora-review — do we have a maintainer?

2018-08-16 Thread Michal Novotny
On Thu, Aug 16, 2018 at 3:47 PM Miro Hrončok wrote: > > I was actually thinking about this some time ago. If there's a > > responsive fedora-review maintainer who can respond to people's > > questions and complains (because if we start running it for every > > package build and show it in Bodhi,

Re: fedora-review — do we have a maintainer?

2018-08-16 Thread Miro Hrončok
I was actually thinking about this some time ago. If there's a responsive fedora-review maintainer who can respond to people's questions and complains (because if we start running it for every package build and show it in Bodhi, there will be some), I can help to make it run as a Taskotron task

Re: fedora-review — do we have a maintainer?

2018-08-16 Thread Kamil Paral
On Thu, Aug 16, 2018 at 2:31 PM Michal Novotny wrote: > On Thu, Aug 16, 2018 at 10:49 AM Zbigniew Jędrzejewski-Szmek < > zbys...@in.waw.pl> wrote: > >> f-r currently fails to build (#1603956), it has a bunch of bugs open [1] >> and many issues and unhandled pull requests in the upstream repo [2,

Re: fedora-review — do we have a maintainer?

2018-08-16 Thread Neal Gompa
On Thu, Aug 16, 2018 at 8:34 AM Miro Hrončok wrote: > > On 16.8.2018 13:38, Fabio Valentini wrote: > > On Thu, Aug 16, 2018 at 11:34 AM Zbigniew Jędrzejewski-Szmek > > wrote: > >> > >> f-r currently fails to build (#1603956), it has a bunch of bugs open [1] > >> and many issues and unhandled pull

Re: fedora-review — do we have a maintainer?

2018-08-16 Thread Robert-André Mauchin
On jeudi 16 août 2018 10:47:05 CEST Zbigniew Jędrzejewski-Szmek wrote: > f-r currently fails to build (#1603956), it has a bunch of bugs open [1] > and many issues and unhandled pull requests in the upstream repo [2, 3]. > The last upstream commit was 2 years ago. > > f-r has is annoyingly outdate

Re: fedora-review — do we have a maintainer?

2018-08-16 Thread Michal Novotny
On Thu, Aug 16, 2018 at 10:49 AM Zbigniew Jędrzejewski-Szmek < zbys...@in.waw.pl> wrote: > f-r currently fails to build (#1603956), it has a bunch of bugs open [1] > and many issues and unhandled pull requests in the upstream repo [2, 3]. > The last upstream commit was 2 years ago. > > f-r has is

Re: fedora-review — do we have a maintainer?

2018-08-16 Thread Miro Hrončok
On 16.8.2018 13:38, Fabio Valentini wrote: On Thu, Aug 16, 2018 at 11:34 AM Zbigniew Jędrzejewski-Szmek wrote: f-r currently fails to build (#1603956), it has a bunch of bugs open [1] and many issues and unhandled pull requests in the upstream repo [2, 3]. The last upstream commit was 2 years

Re: fedora-review — do we have a maintainer?

2018-08-16 Thread Fabio Valentini
On Thu, Aug 16, 2018 at 11:34 AM Zbigniew Jędrzejewski-Szmek wrote: > > f-r currently fails to build (#1603956), it has a bunch of bugs open [1] > and many issues and unhandled pull requests in the upstream repo [2, 3]. > The last upstream commit was 2 years ago. > > f-r has is annoyingly outdated

fedora-review — do we have a maintainer?

2018-08-16 Thread Zbigniew Jędrzejewski-Szmek
f-r currently fails to build (#1603956), it has a bunch of bugs open [1] and many issues and unhandled pull requests in the upstream repo [2, 3]. The last upstream commit was 2 years ago. f-r has is annoyingly outdated and gives often outright bad advice (for example about BR:gcc or BR:g++). The s