Re: Self introduction: David Carlos - Gsoc Student

2017-05-15 Thread Athos Ribeiro 
Welcome, David

On Mon, May 15, 2017 at 11:05:43PM +0200, Dridi Boukelmoune wrote:
> > The main ideia is to monitor repositories, and when a new package or
> > a new version of an existent package is released, we download the package 
> > source code,
> > and run several static analyzers on it. Each monitored distribution will be 
> > a kiskadee
> > plugin, that implements an interface that we will define.  The result of 
> > these
> > analyses, which is parsed using the Fedora Firehose project, will be
> > stored in a relational database (this idea has been discussed a while ago 
> > in the
> > devel mailing lists, by the guys in the Static Analysis SIG [2]). With this
> > database several analyses can be made, and by using several static 
> > analyzers we
> > want to find heuristics to identify false positives (this is not part of 
> > GSoC
> > though).
> 
> Having myself recently found a bug in zlib thanks to static analysis I
> was a bit surprised that such a critical library wouldn't get more
> "static" eyes on it.
> 
> > A similar tool exists in the Debian distribution, but it is way
> > dependent on their infrastructure, and one of our objetives is to keep 
> > kiskadee
> > simple, and extensible.
> 
> Naive question, but wouldn't it be interesting to piggyback on
> release-monitoring.org and fedmsg for the monitoring part? And start
> static analysis when notified of new upstream releases?

That is a great idea which we haven't considered yet. We will definitely
consider doing so (the idea is to have an extensible tool which we could
point to different software repositories). Thank you for the input!

I Cc'd the summer-coding mailing list here :)

-- 
Athos Ribeiro

http://www.ime.usp.br/~athoscr
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: mp3 encoding now ok

2017-05-15 Thread Peter Robinson 
On Mon, May 15, 2017 at 10:35 PM, James Hogarth  wrote:
>
>
> On 15 May 2017 5:15 pm, "Tom Callaway"  wrote:
>
> On 05/04/2017 09:09 AM, Jon Ciesla wrote:
>>
>>
>> On Thu, May 4, 2017 at 8:07 AM, Christian Schaller > > wrote:
>>
>> Hi, not sure why Spot hasn't chimed in, but yes this
>> has been run through legal. Tom and I where on the same
>> email thread with the laywers.
>>
>> I'm assuming it's because he's at RH Summit.  He looked blissfully busy
>> in the pic I saw, and I assume this has contributed. :)
>
> Yes. I've been traveling almost non-stop for a month, so I'm behind on a
> lot of things. I was involved here, though, much credit is due to
> Christian and his team for a lot of hard work behind the scenes.
>
>
> The reddit thread and the comments on the Fedora Magazine discussing this
> had quite a few people highlighting AC3 as no longer being encumbered as
> well.
>
> Is there anything you can share with us on that area too?

a52dec has been packaged in mainline Fedora since late March:
https://koji.fedoraproject.org/koji/packageinfo?packageID=23992
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: mp3 encoding now ok

2017-05-15 Thread Yaakov Selkowitz 

On 2017-05-15 16:35, James Hogarth wrote:

The reddit thread and the comments on the Fedora Magazine discussing
this had quite a few people highlighting AC3 as no longer being
encumbered as well.

Is there anything you can share with us on that area too?


https://lists.fedoraproject.org/archives/list/le...@lists.fedoraproject.org/message/PBHKI2U5MKMWMWELKKH5NQ5FMFP4LCSM/

--
Yaakov Selkowitz
Software Engineer - Platform Enablement Group
Red Hat, Inc.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

[Fedocal] Reminder meeting : Modularity WG (once every two weeks)

2017-05-15 Thread jkurik 
Dear all,

You are kindly invited to the meeting:
   Modularity WG (once every two weeks) on 2017-05-16 from 10:00:00 to 11:00:00 
US/Eastern
   At fedora-meetin...@irc.freenode.net

The meeting will be about:
Meeting of the Modularity Working Group.

More information available at: [Modularity Working Group wiki 
page](https://fedoraproject.org/wiki/Modularity_Working_Group)

The agenda for the meeting is available at [modularity-wg-agendas 
pad](https://board.net/p/modularity-wg-agendas).



Source: https://apps.fedoraproject.org/calendar/meeting/5249/

___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: mp3 encoding now ok

2017-05-15 Thread James Hogarth 
On 15 May 2017 5:15 pm, "Tom Callaway"  wrote:

On 05/04/2017 09:09 AM, Jon Ciesla wrote:
>
>
> On Thu, May 4, 2017 at 8:07 AM, Christian Schaller  > wrote:
>
> Hi, not sure why Spot hasn't chimed in, but yes this
> has been run through legal. Tom and I where on the same
> email thread with the laywers.
>
> I'm assuming it's because he's at RH Summit.  He looked blissfully busy
> in the pic I saw, and I assume this has contributed. :)

Yes. I've been traveling almost non-stop for a month, so I'm behind on a
lot of things. I was involved here, though, much credit is due to
Christian and his team for a lot of hard work behind the scenes.


The reddit thread and the comments on the Fedora Magazine discussing this
had quite a few people highlighting AC3 as no longer being encumbered as
well.

Is there anything you can share with us on that area too?
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Self introduction: David Carlos - Gsoc Student

2017-05-15 Thread Dridi Boukelmoune 
> The main ideia is to monitor repositories, and when a new package or
> a new version of an existent package is released, we download the package 
> source code,
> and run several static analyzers on it. Each monitored distribution will be a 
> kiskadee
> plugin, that implements an interface that we will define.  The result of these
> analyses, which is parsed using the Fedora Firehose project, will be
> stored in a relational database (this idea has been discussed a while ago in 
> the
> devel mailing lists, by the guys in the Static Analysis SIG [2]). With this
> database several analyses can be made, and by using several static analyzers 
> we
> want to find heuristics to identify false positives (this is not part of GSoC
> though).

Having myself recently found a bug in zlib thanks to static analysis I
was a bit surprised that such a critical library wouldn't get more
"static" eyes on it.

> A similar tool exists in the Debian distribution, but it is way
> dependent on their infrastructure, and one of our objetives is to keep 
> kiskadee
> simple, and extensible.

Naive question, but wouldn't it be interesting to piggyback on
release-monitoring.org and fedmsg for the monitoring part? And start
static analysis when notified of new upstream releases?

Interesting project all the same!

Dridi
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Announce: Fedora Layered Image Release

2017-05-15 Thread Adam Miller 
On Mon, May 15, 2017 at 8:16 AM, Jan Pazdziora  wrote:
> On Thu, May 11, 2017 at 10:04:19AM -0500, Dennis Gilmore wrote:
>> El mié, 10-05-2017 a las 22:47 -0500, Adam Miller escribió:
>> > On Tue, May 9, 2017 at 7:22 AM, Jan Pazdziora 
>> > wrote:
>> > >
>> > > One problem with the current Fedora 26 image is that it enables
>> > > rawhide repo and not the 26 development repo. So anybody using that
>> > > image to build something which installs additional packages will
>> > > get
>> > > Fedora 27, not Fedora 26 packages installed.
>> > >
>> > > Could the registry.fedoraproject.org/fedora:26 be respun to point
>> > > to
>> > > the correct Fedora 26 package source?
>> >
>> > Absolutely. I went to look into that today but the koji builder tasks
>> > were having an issue for the last few weeks. It turns out that there
>> > was a bug in oz (which is used in image builds in koji). This has
>> > been
>> > fixed and we should be able to get updates out tomorrow.
>>
>> the bug was not in oz. I suspect it was a regression in nss, all the
>> gory details are in
>> https://pagure.io/releng/issue/6776https://pagure.io/releng/issue/6776
>
> Is the infrastructure now ready for the respin?
>

It appears the builds are still failing because of
https://bugzilla.redhat.com/show_bug.cgi?id=144

-AdamM

> --
> Jan Pazdziora
> Senior Principal Software Engineer, Identity Management Engineering, Red Hat
> ___
> cloud mailing list -- cl...@lists.fedoraproject.org
> To unsubscribe send an email to cloud-le...@lists.fedoraproject.org
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Self introduction: David Carlos - Gsoc Student

2017-05-15 Thread David Carlos 
Hey guys,

My name is David Carlos, and I am a GSoC student, working with Fedora.

This email is to present myself, and what I pretend to do during the
GSoC period.  I am a student from University of Brasilia, in Brazil, 
and in the middle of the year I get my software engineering bachelor degree.

I have contributed to some open source projects, and with this
experience I realized how a good QA environment can help developing better 
software.
With this in mind Athos and I idealized the kiskadee system [1].  kiskadee
will be a tool to help Linux distributions (and other software repositories) to
continuously measure the quality of packages source code. 

The main ideia is to monitor repositories, and when a new package or 
a new version of an existent package is released, we download the package 
source code, 
and run several static analyzers on it. Each monitored distribution will be a 
kiskadee
plugin, that implements an interface that we will define.  The result of these
analyses, which is parsed using the Fedora Firehose project, will be
stored in a relational database (this idea has been discussed a while ago in the
devel mailing lists, by the guys in the Static Analysis SIG [2]). With this
database several analyses can be made, and by using several static analyzers we
want to find heuristics to identify false positives (this is not part of GSoC
though).

A similar tool exists in the Debian distribution, but it is way
dependent on their infrastructure, and one of our objetives is to keep kiskadee
simple, and extensible. 

I am very happy that I was acepted in GSoC to work with Fedora. I have
some rpm packing experience, and hope to keep contributing with Fedora after the
GSoC period ends.

[1] the great kiskadee is a bird that watches its prey (usually bugs)
and catch
them in flight.
[2] https://fedoraproject.org/wiki/StaticAnalysis

-- 
David Carlos
http://davidcarlos.github.io/


signature.asc
Description: PGP signature
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Wild changes in nsswitch.conf

2017-05-15 Thread Jakub Hrozek 
On Mon, May 15, 2017 at 05:57:50PM +0200, Tomasz Kłoczko wrote:
> On 15 May 2017 at 17:35, Stephen Gallagher  wrote:
> > Tomasz, your tone is needlessly hostile. If you have a question, ask it. If 
> > you want to make a suggestion, make it. But casting aspersions on people 
> > doing work is unacceptable.
> 
> Just please read my question straight. What I've wrote it is very
> simple technical question as glibc NSS code *ALWAYS* is trying to
> communicate with nscd ov. socket before calling any routine from any
> nss_ modules even if nscd is not running.
> In this context implementing in sssd any caching infrastructure is
> more like idiotic than well justified (technically) move.
> Did anyone tested what happens in the system authenticated ov (for
> example) LDAP where ncsd and sssd are running on the same system? 

This has been strongly discouraged for years as Stephen said and sssd
would warn you loudly to syslog if it was running together with nscd and
nscd was caching the maps that sssd handles as well (so, caching hosts
would be fine for example)

> As I
> was in the past few years shadow-utils source code maintainer I know
> that after each modifications files used by NSS (like passwd, shadow,
> group, passwd, group, sgroup, networks and few other in /etc) is
> necessary to communicate with nscd to do do cache clean.
> I would be not surprised if in case enabled caching by sssd and modify
> for example /etc/passwd nothing from shadow-utils will be trying to
> communicate with sssd to clear its passwd map cache.

Right, in this case we try to detect the inconsistency in SSSD and fall
back to nss_files (which is still in nsswitch, just not on the first
place anymore) by just flushing the caches when SSSD detects the files
have changed.

But you are right that in order to be on the safe side, we also need to
invalidate the sssd caches from shadow-utils. And we have a sssd ticket
to track this (admittedly we should have a bugzilla as well, I took a
note to file one)
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Unhelpful message about noarch packages differing between arches...

2017-05-15 Thread Dennis Gilmore 
El sáb, 13-05-2017 a las 08:22 -0700, Adam Williamson escribió:
> On Sat, 2017-05-13 at 07:22 -0500, Richard Shaw wrote:
> > Ok, I was just doing a simple rebuilt of root as OCE was updated to
> > a new
> > version in rawhide...
> > 
> > The F26 rebuild worked fine but on rawhide I'm getting:
> > 
> > BuildError: The following noarch package built differently on
> > different architectures: root-doc-6.08.06-4.fc27.noarch.rpm
> > rpmdiff output was:
> > error: cannot open Packages index using db5 - Permission denied
> > (13)
> > error: cannot open Packages database in /var/lib/rpm
> > error: cannot open Packages database in /var/lib/rpm
> > removed /usr/share/doc/root/html/pict1_rs701_BayesianCalculator
> > .C.png
> > removed /usr/share/doc/root/html/pict1_zdemo.py.png
> > 
> > 
> > Why would the output be different on rawhide and not other
> > releases?
> > 
> > It would be REALLY helpful if the error message also included which
> > arch
> > was different...
> 
> +1 - that's always bugged me about that message too. I guess back
> when
> it was introduced there were only one or two arches built in each
> Koji
> instance, but this is no longer the case, and it's a bit silly to
> have
> to go poking through seven to find the one that's wrong.
> 
> Last time I saw this happen it was due to arch issues in matplotlib,
> btw - images from the docs failing to render or rendering
> differently.
the script that does the rpmdiff, does not really know what arch the
noarch build was built on, it just gtes pointed the the rpms.

Dennis

signature.asc
Description: This is a digitally signed message part
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Koji: List of recent builds for a particular user

2017-05-15 Thread Dennis Gilmore 
El sáb, 13-05-2017 a las 12:38 +0100, Richard W.M. Jones escribió:
> On Sat, May 13, 2017 at 08:24:25PM +0900, Mamoru TASAKA wrote:
> > Richard W.M. Jones wrote on 05/13/2017 07:39 PM:
> > > I can list my most recent builds here:
> > > 
> > > https://koji.fedoraproject.org/koji/userinfo?userID=458
> > > 
> > > but, it's very slow (I assume it's doing some complex database
> > > query)
> > > and it only shows 10 builds at a time.
> > > 
> > > Is there a way to show more builds, and a bit faster?
> > > 
> > > I could even work out how to do it from the ‘koji’ command line
> > > tool.
> > > ‘koji list-pkgs --owner=rjones’ and ‘koji list-history --
> > > user=rjones’
> > > seem likely candidates, but they don't do what I want.
> > > 
> > 
> > Maybe you want the list like below?
> > https://koji.fedoraproject.org/koji/builds?order=-completion_time&u
> > serID=458
> 
https://koji.fedoraproject.org/koji/tasks?owner=rjones&state=active&vie
w=tree&method=all&order=-id would give you all your tasks. though it is
a bit slow to load.

Dennis

signature.asc
Description: This is a digitally signed message part
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Wild changes in nsswitch.conf

2017-05-15 Thread Matthew Miller 
On Mon, May 15, 2017 at 05:57:50PM +0200, Tomasz Kłoczko wrote:
> In this context implementing in sssd any caching infrastructure is
> more like idiotic than well justified (technically) move.

Ok, look. You've been warned on this before. You are now on moderation
on this list. You're welcome to contribute to Fedora in a positive way,
but this is *not* how we work together as friends in this community.


-- 
Matthew Miller

Fedora Project Leader
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Reviews Weekly

2017-05-15 Thread nobody 
Start Date: 2017-05-08 10:08:01.574291
End Date: 2017-05-15 10:08:01.574291

Parag AN(पराग) : 5

https://bugzilla.redhat.com/show_bug.cgi?id=1448660 
nodejs-is-text-path
https://bugzilla.redhat.com/show_bug.cgi?id=1364232 nodejs-meow
https://bugzilla.redhat.com/show_bug.cgi?id=1448871 
nodejs-parse-github-repo-url
https://bugzilla.redhat.com/show_bug.cgi?id=1448658 
nodejs-text-extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1448876 
nodejs-get-pkg-repo


Neal Gompa : 2

https://bugzilla.redhat.com/show_bug.cgi?id=1449467 lame
https://bugzilla.redhat.com/show_bug.cgi?id=1397261 
gstreamer1-plugins-ugly-free


Remi Collet : 2

https://bugzilla.redhat.com/show_bug.cgi?id=1442471 
php-cache-integration-tests
https://bugzilla.redhat.com/show_bug.cgi?id=1442472 
php-cache-adapter-common


Charles R. Anderson : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1448997 lua-bit32


Christian Dersch : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1450688 kf5-kdav


František Dvořák : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1448298 
rubygem-webkit2-gtk


Göran Uddeborg : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1450149 python-minidb


Jared Smith : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1446571 
nodejs-http-proxy


Mamoru TASAKA : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1448694 
rubygem-json-schema


Michel Alexandre Salim : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1445412 python-fpylll


Miro Hrončok : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1444615 python2-ipython


Paulo Andrade : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1447741 sedutil


Rex Dieter : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1448451 qt5-doc


Richard Marko : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1440500 p11-remote


leigh scott : 1

https://bugzilla.redhat.com/show_bug.cgi?id=1450482 pix



Completed Review Requests: 21
This report was generated by bz-review-report.py.
The original source is available at: 
https://git.fedorahosted.org/cgit/triage.git/tree/scripts/bzReviewReport.py
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: mp3 encoding now ok

2017-05-15 Thread Tom Callaway 
On 05/04/2017 09:09 AM, Jon Ciesla wrote:
> 
> 
> On Thu, May 4, 2017 at 8:07 AM, Christian Schaller  > wrote:
> 
> Hi, not sure why Spot hasn't chimed in, but yes this
> has been run through legal. Tom and I where on the same
> email thread with the laywers.
> 
> I'm assuming it's because he's at RH Summit.  He looked blissfully busy
> in the pic I saw, and I assume this has contributed. :)

Yes. I've been traveling almost non-stop for a month, so I'm behind on a
lot of things. I was involved here, though, much credit is due to
Christian and his team for a lot of hard work behind the scenes.

~tom
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Wild changes in nsswitch.conf

2017-05-15 Thread Tomasz Kłoczko 
On 15 May 2017 at 17:35, Stephen Gallagher  wrote:
> Tomasz, your tone is needlessly hostile. If you have a question, ask it. If 
> you want to make a suggestion, make it. But casting aspersions on people 
> doing work is unacceptable.

Just please read my question straight. What I've wrote it is very
simple technical question as glibc NSS code *ALWAYS* is trying to
communicate with nscd ov. socket before calling any routine from any
nss_ modules even if nscd is not running.
In this context implementing in sssd any caching infrastructure is
more like idiotic than well justified (technically) move.
Did anyone tested what happens in the system authenticated ov (for
example) LDAP where ncsd and sssd are running on the same system? As I
was in the past few years shadow-utils source code maintainer I know
that after each modifications files used by NSS (like passwd, shadow,
group, passwd, group, sgroup, networks and few other in /etc) is
necessary to communicate with nscd to do do cache clean.
I would be not surprised if in case enabled caching by sssd and modify
for example /etc/passwd nothing from shadow-utils will be trying to
communicate with sssd to clear its passwd map cache.

kloczek
-- 
Tomasz Kłoczko | LinkedIn: http://lnkd.in/FXPWxH
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Wild changes in nsswitch.conf

2017-05-15 Thread Stephen Gallagher 


On 05/15/2017 11:30 AM, Jakub Hrozek wrote:
> On Mon, May 15, 2017 at 05:22:14PM +0200, Tomas Mraz wrote:
>> On Mon, 2017-05-15 at 17:15 +0200, Jakub Hrozek wrote:
>>> On Mon, May 15, 2017 at 04:35:56PM +0200, Tomas Mraz wrote:
 My current Fedora 26 default nsswitch.conf contains these lines:

 passwd:  sss files systemd
 shadow: files sss
 group:   sss files systemd

 Not sure which package created this configuration, but:

  * Where is the consistency?
  * Where is the Fedora Change page that talks about these
 modifications
 of fairly critical systemwide configuration file?
  * From which time systemd started to manage user accounts of the
 machine, again where is the Fedora Change page for such change?
>>> Is this what you are looking for?
>>> https://fedoraproject.org/wiki/Changes/SSSDCacheForLocalUsers
>>>
>>> That page says:
>>> """
>>> This change proposes leveraging a new "files" provider SSSD will ship
>>> in
>>> the next version in order to resolve also users from the local files.
>>> That way, the "sss" NSS module can be configured before the files
>>> module
>>> in nsswitch.conf and the system could leverage sss_nss caching for
>>> both
>>> local and remote users. 
>>> """
>> The questions still hold for the consistency between passwd and shadow
>> and also for the systemd module present.
> Since sssd doesn't handle the password map, being consistent there in
> the ordering sense (sss before files) wouldn't make much sense, because
> the nss module functions for the shadow map are not even implemented in
> nss_sss. We could even omit the sss module from that map altogether.

The only historical reason it is there is because authconfig didn't
differentiate them; it made all changes to shadow identically to passwd.
I don't know if that's still the case, but I'm pretty sure it was when
we first added SSSD support to authconfig. It's not harmful, since the
SSSD client just immediately returns with an appropriate NSS error code
if it's asked for any shadow map function.



signature.asc
Description: OpenPGP digital signature
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Wild changes in nsswitch.conf

2017-05-15 Thread Stephen Gallagher 


On 05/15/2017 11:28 AM, Tomasz Kłoczko wrote:
> On 15 May 2017 at 17:15, Jakub Hrozek  wrote:
>> This change proposes leveraging a new "files" provider SSSD will ship in
>> the next version in order to resolve also users from the local files.
>> That way, the "sss" NSS module can be configured before the files module
>> in nsswitch.conf and the system could leverage sss_nss caching for both
>> local and remote users.
> So someone reinvented the wheel/nscd?


Tomasz, your tone is needlessly hostile. If you have a question, ask it. If you 
want to make a suggestion, make it. But casting aspersions on people doing work 
is unacceptable.

Frankly, nearly all of your posts to this list have been hostile to the rest of 
the community and have not added to the discussion in any way. You can do 
better than this, and we expect you to do so if you don't want people to just 
start blocking your messages and ignoring you entirely.


Now, in this particular case, what happened is that SSSD was developed which is 
a significant improvement over NSCD when used with central identity stores like 
LDAP, FreeIPA, etc. However, one down-side to this is that it can't coexist 
with nscd because nscd is too greedy and doesn't allow requests to always pass 
to the SSSD service. So when using SSSD for central identities, we take a 
performance hit on local lookups (they need to go to I/O against the disk). A 
recent enhancement to SSSD allows the performance to be restored to nscd levels 
when dealing with the local accounts. So we enabled that and made SSSD the 
primary source for lookups.




signature.asc
Description: OpenPGP digital signature
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Wild changes in nsswitch.conf

2017-05-15 Thread Jakub Hrozek 
On Mon, May 15, 2017 at 05:22:14PM +0200, Tomas Mraz wrote:
> On Mon, 2017-05-15 at 17:15 +0200, Jakub Hrozek wrote:
> > On Mon, May 15, 2017 at 04:35:56PM +0200, Tomas Mraz wrote:
> > > My current Fedora 26 default nsswitch.conf contains these lines:
> > > 
> > > passwd:  sss files systemd
> > > shadow: files sss
> > > group:   sss files systemd
> > > 
> > > Not sure which package created this configuration, but:
> > > 
> > >  * Where is the consistency?
> > >  * Where is the Fedora Change page that talks about these
> > > modifications
> > > of fairly critical systemwide configuration file?
> > >  * From which time systemd started to manage user accounts of the
> > > machine, again where is the Fedora Change page for such change?
> > 
> > Is this what you are looking for?
> > https://fedoraproject.org/wiki/Changes/SSSDCacheForLocalUsers
> > 
> > That page says:
> > """
> > This change proposes leveraging a new "files" provider SSSD will ship
> > in
> > the next version in order to resolve also users from the local files.
> > That way, the "sss" NSS module can be configured before the files
> > module
> > in nsswitch.conf and the system could leverage sss_nss caching for
> > both
> > local and remote users. 
> > """
> 
> The questions still hold for the consistency between passwd and shadow
> and also for the systemd module present.

Since sssd doesn't handle the password map, being consistent there in
the ordering sense (sss before files) wouldn't make much sense, because
the nss module functions for the shadow map are not even implemented in
nss_sss. We could even omit the sss module from that map altogether.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Wild changes in nsswitch.conf

2017-05-15 Thread Tomasz Kłoczko 
On 15 May 2017 at 17:15, Jakub Hrozek  wrote:
> This change proposes leveraging a new "files" provider SSSD will ship in
> the next version in order to resolve also users from the local files.
> That way, the "sss" NSS module can be configured before the files module
> in nsswitch.conf and the system could leverage sss_nss caching for both
> local and remote users.

So someone reinvented the wheel/nscd?

kloczek
-- 
Tomasz Kłoczko | LinkedIn: http://lnkd.in/FXPWxH
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Wild changes in nsswitch.conf

2017-05-15 Thread Tomasz Torcz 
On Mon, May 15, 2017 at 04:35:56PM +0200, Tomas Mraz wrote:
> My current Fedora 26 default nsswitch.conf contains these lines:
> 
> passwd:  sss files systemd
> shadow: files sss
> group:   sss files systemd
> 
>  * Where is the consistency?
>  * Where is the Fedora Change page that talks about these modifications
> of fairly critical systemwide configuration file?
>  * From which time systemd started to manage user accounts of the
> machine, again where is the Fedora Change page for such change?

 systemd does not manage user accounts, this is for resolving DynamicUsers
for services;
 
https://github.com/systemd/systemd/commit/4ffe24797cc881f1dc95f39badf6facd8061117e

-- 
Tomasz TorczOnly gods can safely risk perfection,
xmpp: zdzich...@chrome.pl it's a dangerous thing for a man.  -- Alia
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Wild changes in nsswitch.conf

2017-05-15 Thread Tomas Mraz 
On Mon, 2017-05-15 at 17:15 +0200, Jakub Hrozek wrote:
> On Mon, May 15, 2017 at 04:35:56PM +0200, Tomas Mraz wrote:
> > My current Fedora 26 default nsswitch.conf contains these lines:
> > 
> > passwd:  sss files systemd
> > shadow: files sss
> > group:   sss files systemd
> > 
> > Not sure which package created this configuration, but:
> > 
> >  * Where is the consistency?
> >  * Where is the Fedora Change page that talks about these
> > modifications
> > of fairly critical systemwide configuration file?
> >  * From which time systemd started to manage user accounts of the
> > machine, again where is the Fedora Change page for such change?
> 
> Is this what you are looking for?
> https://fedoraproject.org/wiki/Changes/SSSDCacheForLocalUsers
> 
> That page says:
> """
> This change proposes leveraging a new "files" provider SSSD will ship
> in
> the next version in order to resolve also users from the local files.
> That way, the "sss" NSS module can be configured before the files
> module
> in nsswitch.conf and the system could leverage sss_nss caching for
> both
> local and remote users. 
> """

The questions still hold for the consistency between passwd and shadow
and also for the systemd module present.

-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
  Turkish proverb
(You'll never know whether the road is wrong though.)
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: [Test-Announce] 2017-05-15 ** Blocker Review Proposal to CANCEL

2017-05-15 Thread Adam Williamson 
On Mon, 2017-05-15 at 15:04 +0200, Silvia Sanchez wrote:
> Hello,
> 
> Yes, I would like to discuss two issues I found on installation.
> They're somewhat vague, that's why I didn't open a bug yet but they're
> serious.
> 
> 
> Cheers,
> Silvia/Lailah

Roger - Mike and I at least will be in #fedora-blocker-review at the
normal time to talk them over, then. Thanks!
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Wild changes in nsswitch.conf

2017-05-15 Thread Jakub Hrozek 
On Mon, May 15, 2017 at 04:35:56PM +0200, Tomas Mraz wrote:
> My current Fedora 26 default nsswitch.conf contains these lines:
> 
> passwd:  sss files systemd
> shadow: files sss
> group:   sss files systemd
> 
> Not sure which package created this configuration, but:
> 
>  * Where is the consistency?
>  * Where is the Fedora Change page that talks about these modifications
> of fairly critical systemwide configuration file?
>  * From which time systemd started to manage user accounts of the
> machine, again where is the Fedora Change page for such change?

Is this what you are looking for?
https://fedoraproject.org/wiki/Changes/SSSDCacheForLocalUsers

That page says:
"""
This change proposes leveraging a new "files" provider SSSD will ship in
the next version in order to resolve also users from the local files.
That way, the "sss" NSS module can be configured before the files module
in nsswitch.conf and the system could leverage sss_nss caching for both
local and remote users. 
"""
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Wild changes in nsswitch.conf

2017-05-15 Thread Tomas Mraz 
My current Fedora 26 default nsswitch.conf contains these lines:

passwd:  sss files systemd
shadow: files sss
group:   sss files systemd

Not sure which package created this configuration, but:

 * Where is the consistency?
 * Where is the Fedora Change page that talks about these modifications
of fairly critical systemwide configuration file?
 * From which time systemd started to manage user accounts of the
machine, again where is the Fedora Change page for such change?

Regards,
-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
  Turkish proverb
(You'll never know whether the road is wrong though.)
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: IDNA2008 change impact on installation size

2017-05-15 Thread Matthew Miller 
On Fri, May 12, 2017 at 04:05:50PM +, Zbigniew Jędrzejewski-Szmek wrote:
> has any consideration been give to the size increase required by the
> change from libidn (678k) to libidn2 + libunistring (228k + 1246k)?
> That's not *too* bad, since currently none of the things which depend
> on idn end up in the initramfs, but still, it's noticeable.

Thanks for considering this angle. Is there a way to reduce that? Looks
like libunistring is just... large.


-- 
Matthew Miller

Fedora Project Leader
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Announce: Fedora Layered Image Release

2017-05-15 Thread Jan Pazdziora 
On Thu, May 11, 2017 at 10:04:19AM -0500, Dennis Gilmore wrote:
> El mié, 10-05-2017 a las 22:47 -0500, Adam Miller escribió:
> > On Tue, May 9, 2017 at 7:22 AM, Jan Pazdziora 
> > wrote:
> > > 
> > > One problem with the current Fedora 26 image is that it enables
> > > rawhide repo and not the 26 development repo. So anybody using that
> > > image to build something which installs additional packages will
> > > get
> > > Fedora 27, not Fedora 26 packages installed.
> > > 
> > > Could the registry.fedoraproject.org/fedora:26 be respun to point
> > > to
> > > the correct Fedora 26 package source?
> > 
> > Absolutely. I went to look into that today but the koji builder tasks
> > were having an issue for the last few weeks. It turns out that there
> > was a bug in oz (which is used in image builds in koji). This has
> > been
> > fixed and we should be able to get updates out tomorrow.
> 
> the bug was not in oz. I suspect it was a regression in nss, all the
> gory details are in 
> https://pagure.io/releng/issue/6776https://pagure.io/releng/issue/6776

Is the infrastructure now ready for the respin?

-- 
Jan Pazdziora
Senior Principal Software Engineer, Identity Management Engineering, Red Hat
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: [Test-Announce] 2017-05-15 ** Blocker Review Proposal to CANCEL

2017-05-15 Thread Silvia Sanchez 

Hello,

Yes, I would like to discuss two issues I found on installation.
They're somewhat vague, that's why I didn't open a bug yet but they're
serious.


Cheers,
Silvia/Lailah


On Sun, 2017-05-14 at 20:15 -0400, Mike Ruckman wrote:
> Greetings testers! We don't have any proposed blockers for Beta or
> Final right now, so I propose that we cancel tomorrows meeting.
> 
> If you find a blocker or want to discuss something, please reply to this
> thread and we'll have the meeting! 
> 
> Thanks!
> 
> // Mike
> --
> Fedora QA
> ___
> test-announce mailing list -- test-annou...@lists.fedoraproject.org
> To unsubscribe send an email to test-announce-le...@lists.fedoraproject.org
> ___
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-le...@lists.fedoraproject.org___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: OCaml 4.04.1 rebuild in Rawhide

2017-05-15 Thread Richard W.M. Jones 
On Mon, May 15, 2017 at 12:36:08PM +0100, Richard W.M. Jones wrote:
> brltty
> 
> - This package was rebuilt, but for unclear reasons there are
>   still dependency problems.

Oh I see, the build failed, but not related to OCaml:

https://koji.fedoraproject.org/koji/taskinfo?taskID=19512315

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
virt-builder quickly builds VMs from scratch
http://libguestfs.org/virt-builder.1.html
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: OCaml 4.04.1 rebuild in Rawhide

2017-05-15 Thread Richard W.M. Jones 

So there were some problems:

nbdkit
why
xen

- I omitted to rebuild these.  Rebuilds are happening now.

brltty

- This package was rebuilt, but for unclear reasons there are
  still dependency problems.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
virt-builder quickly builds VMs from scratch
http://libguestfs.org/virt-builder.1.html
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Review swap: keepassxc - Cross-platform password manager

2017-05-15 Thread Germano Massullo 
‎Hello, I am looking for a review swap: here is mine:
keepassxc - Cross-platform password manager   
https://bugzilla.redhat.com/show_bug.cgi?id=1450633
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: OCaml 4.04.1 rebuild in Rawhide

2017-05-15 Thread Richard W.M. Jones 
On Wed, May 10, 2017 at 12:57:46PM +0100, Richard W.M. Jones wrote:
> OCaml 4.04.1 was released last month.  It is a simple bugfix update
> which shouldn't bring any surprises.
> 
> I'm planning to rebuild the OCaml packages in Rawhide into a side tag
> today (https://pagure.io/releng/issue/6782).
> 
> The other change is that since fedorahosted was closed a few months
> ago, the fedora-ocaml git repository was homeless.  I have now moved
> the project to pagure.io: https://pagure.io/fedora-ocaml
> You should consult this repository if you want to see what downstream
> features/patches we include.

This is complete.  If you are running Rawhide and notice any
problems with OCaml 4.04.1 please let me know.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
libguestfs lets you edit virtual machines.  Supports shell scripting,
bindings from many languages.  http://libguestfs.org
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org