Re: network service removed in Fedora 40 without a Change proposal(?)

2024-04-12 Thread Adam Williamson
On Fri, 2024-04-12 at 19:03 -0500, Neal Gompa wrote: > On Fri, Apr 12, 2024 at 4:41 PM Adam Williamson > wrote: > > > > Michel Lind just prompted me to notice that the 'network' service > > appears to have been removed from initscripts in Fedora 40+. This > > change seems to have landed in

Re: F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-12 Thread Kevin Kofler via devel
Neal Gompa wrote: > I would like for us to consider evaluating a global change to -O3. I > am not convinced that there's a good reason anymore to remain at -O2. > > If we get this kind of benefit from Python, I would be interested in > seeing what we'd get elsewhere. How much larger is Python

Re: F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-12 Thread Neal Gompa
On Fri, Apr 12, 2024 at 4:54 PM Aoife Moloney wrote: > > Wiki - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 > Discussion.fpo - > https://discussion.fedoraproject.org/t/f41-change-proposal-python-built-with-gcc-03-self-contained/112743 > > > This is a proposed Change for Fedora

Re: network service removed in Fedora 40 without a Change proposal(?)

2024-04-12 Thread Neal Gompa
On Fri, Apr 12, 2024 at 4:41 PM Adam Williamson wrote: > > Michel Lind just prompted me to notice that the 'network' service > appears to have been removed from initscripts in Fedora 40+. This > change seems to have landed in February without any fanfare - >

Fedora Linux 40 Final Blocker Bug Report: 2024-04-12

2024-04-12 Thread Aoife Moloney
Hi folks, We are still seeing a few blockers for the Fedora Linux 40 final milestone being filed in the blocker bugs app[1]. Your help in reproducing the bug, suggesting fixes and verifying updates would be greatly appreciated before the next Go/No-Go meeting[2][3] on Thursday April 18th to have

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Kevin Kofler via devel
Adam Williamson wrote: > Also, these days, most authenticator apps support some kind of backup > mechanism. FreeOTP lets you back up to a file (which you should, of > course, keep somewhere safe and ideally encrypted). Google > Authenticator can backup To The Cloud. If you use Keysmith, you can

Re: network service removed in Fedora 40 without a Change proposal(?)

2024-04-12 Thread Ian Pilcher
On 4/12/24 16:46, Adam Williamson wrote: it seems since I last looked at this, NM has grown some level of openvswitch support, but it seems to be limited, and I don't know off- hand if it's sufficient for what openQA needs. I will need to look into that.

[rpms/perl-Task-Catalyst] PR #1: Stop building for 32-bit x86

2024-04-12 Thread Jerry James
jjames commented on the pull-request: `Stop building for 32-bit x86` that you are following: `` I have updated the PR to include the comment above the License tag. The php stack is [dropping its i386 builds](https://fedoraproject.org/wiki/Changes/php_no_32_bit). The flamegraph package

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Carlos Rodriguez Fernandez
The idea is rather to scan the same QR twice, for two yubikeys, and then screenshot it and save it securely in case you lose one yubikey and need to load it into a new one. On Fri, Apr 12, 2024 at 2:39 PM Richard W.M. Jones wrote: > On Fri, Apr 12, 2024 at 09:47:04AM -0700, Adam Williamson

F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-12 Thread Aoife Moloney
Wiki - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 Discussion.fpo - https://discussion.fedoraproject.org/t/f41-change-proposal-python-built-with-gcc-03-self-contained/112743 This is a proposed Change for Fedora Linux. This document represents a proposed Change. As part of the

F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-12 Thread Aoife Moloney
Wiki - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 Discussion.fpo - https://discussion.fedoraproject.org/t/f41-change-proposal-python-built-with-gcc-03-self-contained/112743 This is a proposed Change for Fedora Linux. This document represents a proposed Change. As part of the

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Chris Adams
Once upon a time, Richard W.M. Jones said: > So the problem with github is they don't allow you to have 2FA on a > backup device (or rather, it *is* possible, but the process is > ludicrous[1]). If you have your phone as second FA and lose it then > you have to immediately fall back to the piece

Re: network service removed in Fedora 40 without a Change proposal(?)

2024-04-12 Thread Adam Williamson
On Fri, 2024-04-12 at 14:40 -0700, Adam Williamson wrote: > unnoticed. There *are* still reasons to use the network service; I > still use it on the openQA worker hosts, for instance, because there is > integration between openvswitch and the legacy network service, but no > integration between

F41 Change Proposal - Reproducible Package Builds (System-Wide)

2024-04-12 Thread Aoife Moloney
Wiki - https://fedoraproject.org/wiki/Changes/ReproduciblePackageBuilds Discussion.fpo - https://discussion.fedoraproject.org/t/f41-change-proposal-reproducible-package-builds-system-wide/112740 == Summary == A post-build cleanup is integrated into the RPM build process so that common causes of

F41 Change Proposal - Reproducible Package Builds (System-Wide)

2024-04-12 Thread Aoife Moloney
Wiki - https://fedoraproject.org/wiki/Changes/ReproduciblePackageBuilds Discussion.fpo - https://discussion.fedoraproject.org/t/f41-change-proposal-reproducible-package-builds-system-wide/112740 == Summary == A post-build cleanup is integrated into the RPM build process so that common causes of

Orphaned packages looking for new maintainers

2024-04-12 Thread Maxwell G
Report started at 2024-04-12 13:04:40 UTC The following packages are orphaned and will be retired when they are orphaned for six weeks, unless someone adopts them. If you know for sure that the package should be retired, please do so now with a proper reason:

Fedora Linux 40 Final NO-GO

2024-04-12 Thread Aoife Moloney
Due to outstanding blocker bugs[1], the Fedora Linux 40 Final RC -1.13 was declared NO-GO in today's meeting[2][3]. The next Fedora Linux 40 Final Go/No-Go meeting[4] will be held at 1700 UTC on Thursday 18th April in #meeting:fedoraproject.org on Matrix. The new target date for the F40 Final

network service removed in Fedora 40 without a Change proposal(?)

2024-04-12 Thread Adam Williamson
Michel Lind just prompted me to notice that the 'network' service appears to have been removed from initscripts in Fedora 40+. This change seems to have landed in February without any fanfare - https://src.fedoraproject.org/rpms/initscripts/c/414789841de9247310ebfd37cd043b75963f7cac?branch=rawhide

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Richard W.M. Jones
On Fri, Apr 12, 2024 at 09:47:04AM -0700, Adam Williamson wrote: > On Thu, 2024-04-11 at 19:52 -0700, Carlos Rodriguez-Fernandez wrote: > > I was hesitant to have MFA for a while. Imagine losing a phone with tons > > of tokens. What a hassle to recover from that. I found it less than > > ideal

Obsolete pygobject3-devel usage

2024-04-12 Thread Yaakov Selkowitz
The pygobject3-devel compat provides was recently removed from python3- gobject-devel: https://src.fedoraproject.org/rpms/pygobject3/c/0eda657eab55405bdbebc6eb3112fcf7dcb517ba?branch=rawhide However, a number of packages still use it, and now FTBFS as a result: accerciser.spec:BuildRequires:

Re: Orphaned packages looking for new maintainers

2024-04-12 Thread Michel Lind
On Fri, Apr 12, 2024 at 07:59:46AM -0700, Carlos Rodriguez-Fernandez wrote: > Regarding libteam, the author of the package is the maintainer, email in > bugzilla is different than the one on the project. I wonder if Jiro just > missed the notification that his package is failing to build in F40. >

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Steve Cossette
What about simply blocking access to the git repos/koji/bodhi for those without 2fa? On Fri, Apr 12, 2024 at 12:05 PM Kevin Fenzi wrote: > On Thu, Apr 11, 2024 at 05:49:27PM -0700, Adam Williamson wrote: > > On Fri, 2024-04-12 at 00:09 +, Gary Buhrmaster wrote: > > > > > > What is the best

Re: Orphaned packages looking for new maintainers

2024-04-12 Thread Michel Lind
On Fri, Apr 12, 2024 at 09:09:31AM -0500, Maxwell G wrote: > Report started at 2024-04-12 13:04:40 UTC > libteam orphan 0 weeks > ago > > The following packages require above mentioned packages: > Depending on: libteam (56), status change:

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Adam Williamson
On Fri, 2024-04-12 at 10:10 -0700, Carlos Rodriguez-Fernandez wrote: > Yes that works too. By the time I was setting up MFA everywhere, and > doing the code printing, I recall not all systems giving me that option, Yeah, FreeOTP resisted doing backups for a long time on the basis that it wasn't

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Carlos Rodriguez-Fernandez
Yes that works too. By the time I was setting up MFA everywhere, and doing the code printing, I recall not all systems giving me that option, and finding the paper thing not very good as recovery mechanism for me, so I went with Yubikeys and my own backup-in-the-cloud mechanism. I was just

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Kevin Fenzi
On Fri, Apr 12, 2024 at 09:47:04AM -0700, Adam Williamson wrote: > On Thu, 2024-04-11 at 19:52 -0700, Carlos Rodriguez-Fernandez wrote: > > I was hesitant to have MFA for a while. Imagine losing a phone with tons > > of tokens. What a hassle to recover from that. I found it less than > > ideal

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Adam Williamson
On Thu, 2024-04-11 at 19:52 -0700, Carlos Rodriguez-Fernandez wrote: > I was hesitant to have MFA for a while. Imagine losing a phone with tons > of tokens. What a hassle to recover from that. I found it less than > ideal for practical reasons. This is one reason most systems provide a sheet of

[EPEL-devel] Re: RFC: Django latest vs LTS maintenance plan

2024-04-12 Thread Kevin Fenzi
On Thu, Apr 11, 2024 at 03:41:02PM -0500, Michel Lind wrote: > Hi all, > > With the recent EOL of the Django 3.2 LTS series[^1], and Django being a > key component of our mailing list infra for both Fedora and CentOS, I > would like to propose the following plan to maintain Django in both >

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Kevin Fenzi
On Thu, Apr 11, 2024 at 05:49:27PM -0700, Adam Williamson wrote: > On Fri, 2024-04-12 at 00:09 +, Gary Buhrmaster wrote: > > > > What is the best way to formally propose > > that 2FA is required for packagers after > > some date > > There is already a FESCo ticket.

Fedora 40 compose report: 20240412.n.0 changes

2024-04-12 Thread Fedora Branched Report
OLD: Fedora-40-20240411.n.0 NEW: Fedora-40-20240412.n.0 = SUMMARY = Added images:2 Dropped images: 1 Added packages: 0 Dropped packages:0 Upgraded packages: 5 Downgraded packages: 0 Size of added packages: 0 B Size of dropped packages:0 B Size of upgraded

Re: Merging /usr/sbin to /usr/bin

2024-04-12 Thread Zbigniew Jędrzejewski-Szmek
On Thu, Apr 11, 2024 at 02:03:01PM -0700, Brian C. Lane wrote: > On Thu, Apr 11, 2024 at 01:39:32PM +, Zbigniew Jędrzejewski-Szmek wrote: > >https://src.fedoraproject.org/rpms/filesystem/pull-request/11 > > The commit "Symlink /usr/sbin to /usr/bin if possible" would wipe out > any

Re: Orphaned packages looking for new maintainers

2024-04-12 Thread Carlos Rodriguez-Fernandez
Regarding libteam, the author of the package is the maintainer, email in bugzilla is different than the one on the project. I wonder if Jiro just missed the notification that his package is failing to build in F40. On 4/12/24 07:09, Maxwell G wrote: Report started at 2024-04-12 13:04:40 UTC

Fedora rawhide compose report: 20240412.n.0 changes

2024-04-12 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20240411.n.0 NEW: Fedora-Rawhide-20240412.n.0 = SUMMARY = Added images:3 Dropped images: 0 Added packages: 10 Dropped packages:5 Upgraded packages: 157 Downgraded packages: 0 Size of added packages: 12.07 MiB Size of dropped packages

Orphaned packages looking for new maintainers

2024-04-12 Thread Maxwell G
Report started at 2024-04-12 13:04:40 UTC The following packages are orphaned and will be retired when they are orphaned for six weeks, unless someone adopts them. If you know for sure that the package should be retired, please do so now with a proper reason:

Re: [SPDX] Mass license change AGPLv3+ to AGPL-3.0-or-later

2024-04-12 Thread Miro Hrončok
On 12. 04. 24 11:22, Miroslav Suchý wrote: Hi. I am going to do the mass change of the license from AGPLv3+ to AGPL-3.0-or-later The proposed diff is in attachment. Affected packages: simarrange I had a look at this package of mine and realized I borked the rpmautospec conversion, so I

Re: convert everything to rpmautospec?

2024-04-12 Thread Petr Menšík
I think missing easy to use documentation is the most missing part of current rpmautospec package. Manual page does not exist, readme is in wrong package. I have proposed to be able to include extra section just for changelog. I do not remember which exactly way was merged instead, there

Re: convert everything to rpmautospec?

2024-04-12 Thread Petr Menšík
Before any such ideas continue, I think rpmautospec should have more decent documentation. Unfortunately it does not have even manual page for rpmautospec command, core of its functionality. I find that missing. While I think rpmautospec is great idea, I do not think it is ready universally.

[SPDX] Mass license change AGPLv3+ to AGPL-3.0-or-later

2024-04-12 Thread Miroslav Suchý
Hi. I am going to do the mass change of the license from AGPLv3+ to AGPL-3.0-or-later The proposed diff is in attachment. Affected packages: conspy fastx_toolkit fondo libgtextutils libquvi-scripts netstat-monitor pyhoca-cli pyhoca-gui python-x2go python-surt simarrange Unless somebody stop

Re: [SPDX] Mass license change EUPL 1.2 to EUPL-1.2

2024-04-12 Thread Miroslav Suchý
Dne 05. 04. 24 v 10:49 dop. Miroslav Suchý napsal(a): Hi. I am going to do the mass change of the license from EUPL 1.2 to EUPL-1.2. The proposed diff is in attachment. Affected packages: AusweisApp2 rust-tpm2-policy dbus-parsec Unless somebody stop me, I will do this change directly in

Re: Rust Stack Spring Cleaning - 2024 Edition

2024-04-12 Thread Alessio
On Thu, 2024-04-11 at 15:26 +0200, Fabio Valentini wrote: > > - alciregi (1): rust-backoff > Hello. This is required by a package still under review (waiting for a reviewer actually). https://bugzilla.redhat.com/show_bug.cgi?id=2268499 Thank you, Alessio --

Re: Rust Stack Spring Cleaning - 2024 Edition

2024-04-12 Thread blinxen
> I'm continuously working on reducing unnecessary accumulation of cruft in the Rust package stack in Fedora, and I have been keeping track of unused library packages for almost three years now. Thanks for taking the time and looking into this! > - blinxen (8): rust-btoi,

SPDX Statistics - Human Space Flight edition

2024-04-12 Thread Miroslav Suchý
Hot news: https://docs.fedoraproject.org/en-US/legal/allowed-licenses/ contains usage column for licenses that are allowed for something (documentation, firmware...)    Automated migration of "trivial" conversions have started (see other threads in this mailing list). Two weeks ago we had: