Self-introduction: Tommy Nguyen

2022-08-29 Thread Tommy Nguyen
Hello all, I've been using Fedora for many years and recently became interesting in QA testing. My interest developed when I wanted to test programs before they reached stable so that I could ensure that I wouldn't be surprised by an update. But I find the QA process to be kind of find and

Re: Inactive packagers to be removed after the F37 release

2022-09-06 Thread Tommy Nguyen
On Tue, 2022-09-06 at 18:18 +0200, Vitaly Zaitsev via devel wrote: > On 06/09/2022 17:00, Gary Buhrmaster wrote: > > mobile device > > Requires proprietary Google services. > > > computer > > Requires proprietary TPM 2.0 chip. Hi, Neither of this is true. For example, I use Raivo on my iOS

Re: Inactive packagers to be removed after the F37 release

2022-09-07 Thread Tommy Nguyen
On Wed, 2022-09-07 at 14:26 +0200, Petr Pisar wrote: > > So I am going to say I am in agreement with Vitaly that FIDO2 is > > not a > > solution we could support at this time. At most we could support > > HOTP via > > yubikey but we would need to be able to make sure > > 1. That we have some sort

Re: hardened malloc is big and slow

2022-09-06 Thread Tommy Nguyen
On Mon, 2022-09-05 at 22:45 -0400, Daniel Micay via devel wrote: > The comparison is being done incorrectly. Since hardened_malloc > builds > both a lightweight and heavyweight library by default, and since I > already explained this and that the lightweight library still has > optional security

Re: Mesa in F37- vaapi support disabled for h264/h265/vc1

2022-09-28 Thread Tommy Nguyen
On Wed, 2022-09-28 at 15:11 +0800, yanqiy...@gmail.com wrote: > I would be very SAD if this change lands on my computer. While > instead > of arguing with some legal puzzles, I think those parts can be > provided > by seperate package (and maybe packaged in rpmfusion?) like intel- >

Re: Mesa in F37- vaapi support disabled for h264/h265/vc1

2022-09-28 Thread Tommy Nguyen
On Wed, 2022-09-28 at 08:40 +0200, Neal Gompa wrote: > On Wed, Sep 28, 2022 at 8:38 AM Tommy Nguyen > wrote: > > > > On Wed, 2022-09-28 at 08:24 +0200, Neal Gompa wrote: > > > As one of the ffmpeg maintainers, I'm actively working on > > > workarounds &g

Re: Mesa in F37- vaapi support disabled for h264/h265/vc1

2022-09-29 Thread Tommy Nguyen
On Thu, 2022-09-29 at 08:12 +, James bond wrote: > (This is a sad noob user rant, please bear me. And sorry in advance > for 'whataboutism'.) > > IANAL but this is a horrible idea. > > It's like parents turning off the internet entirely WiFi because the > kid can't be able to watch 'bad'

Re: F39 proposal: Replace DNF with DNF5 (System-Wide Change proposal)

2022-09-20 Thread Tommy Nguyen
On Wed, 2022-09-21 at 02:53 +0200, Kevin Kofler via devel wrote: > Tommy Nguyen wrote: > > DNF5 is ridiculously fast. > > It is faster, but "ridiculously"? In the metric that matters (elapsed > wallclock time), your benchmark shows the update taking 30%

Re: Inactive packagers to be removed after the F37 release

2022-09-13 Thread Tommy Nguyen
On Tue, 2022-09-06 at 16:14 -0500, Jonathan Wright via devel wrote: > On Tue, Sep 6, 2022 at 3:52 PM Vitaly Zaitsev via devel < > devel@lists.fedoraproject.org> wrote: > > > On 06/09/2022 19:49, Michael Catanzaro wrote: > > > Of course, hardware authenticators would be even more secure, and > > >

Re: Inactive packagers to be removed after the F37 release

2022-09-14 Thread Tommy Nguyen
On Wed, 2022-09-14 at 02:46 -0400, Demi Marie Obenour wrote: > Because FIDO2 is not phishable.  TOTP and HOTP are.  The only other > non-phishable authentication method is TLS client certificates and > I would be fine with those. I'm not entirely convinced. See this paper:

Re: Donate 1 minute of your time to test upgrades from F36 to F37

2022-09-13 Thread Tommy Nguyen
In a F36 toolbox: Transaction Summary Install 21 Packages Upgrade588 Packages Downgrade1 Package Total download size: 438 M Operation aborted. Wants to downgrade grubby. So no issues. I cannot run this on my actual system because the mirrors I use (which I hard-coded for bandwidth)

Re: Inactive packagers to be removed after the F37 release

2022-09-14 Thread Tommy Nguyen
On Wed, 2022-09-14 at 15:49 -0700, Adam Williamson wrote: > The hardcore way is to say "welp, too bad, your account's gone, > create > a new one and start over, including going through the maintainer > process again", but that might be a bit *too* hardcore. > > This is a perennial issue, though,

Re: F39 proposal: Replace DNF with DNF5 (System-Wide Change proposal)

2022-09-08 Thread Tommy Nguyen
On Thu, 2022-09-08 at 10:13 +0200, Marius Schwarz wrote: > If it's still written in python, it will still be slow on devices > like > Pinephones. I was under the impression, that microdnf + libdnf was > developed to counter this slowness? > > best regards, > Marius Schwarz Though I don't know

Re: Inactive packagers to be removed after the F37 release

2022-09-16 Thread Tommy Nguyen
On Fri, 2022-09-16 at 17:16 +, Dan Čermák wrote: > Hi, > > On September 16, 2022 5:03:03 PM UTC, Kevin Fenzi > wrote: > > On Fri, Sep 16, 2022 at 10:03:35AM +0200, Vít Ondruch wrote: > > > Isn't peer review much better and easier solution over all? We > > > could also > > > require signed

Re: F38 proposal: Strong crypto settings: phase 3, forewarning 2/2 (System-Wide Change proposal)

2022-09-17 Thread Tommy Nguyen
On Sat, 2022-09-17 at 10:40 +0300, Otto Liljalaakso wrote: > Leigh Scott kirjoitti 17.9.2022 klo 10.27: > > > On Thu, 2022-09-15 at 22:42 +0300, Otto Liljalaakso wrote: > > > > > > I found this: > > > https://bugzilla.rpmfusion.org/show_bug.cgi?id=6410#c1 > > > > > > Again, not a very friendly

Re: F38 proposal: Strong crypto settings: phase 3, forewarning 2/2 (System-Wide Change proposal)

2022-09-15 Thread Tommy Nguyen
On Thu, 2022-09-15 at 16:18 +0300, Otto Liljalaakso wrote: > To test this, I did enable TEST-FEDORA39 on my system, first > installed > as Fedora 24, now running 36. For some rpm and dnf operations, I get > the > following kind of errors: > > error: rpmdbNextIterator: skipping h# 740 >

Re: F38 proposal: Strong crypto settings: phase 3, forewarning 2/2 (System-Wide Change proposal)

2022-09-15 Thread Tommy Nguyen
> On Sep 15, 2022, at 10:26 AM, Otto Liljalaakso > wrote: > > Tommy Nguyen kirjoitti 15.9.2022 klo 16.28: >>> On Thu, 2022-09-15 at 16:18 +0300, Otto Liljalaakso wrote: >>> To test this, I did enable TEST-FEDORA39 on my system, first >>> installed >

Re: Donate 1 minute of your time to test upgrades from F36 to F37

2022-09-15 Thread Tommy Nguyen
I'm unable to figure out why, but running the command: sudo dnf system-upgrade download --releasever=37 on my main system (with RPMFusion and some copr repos enabled) consistently causes dnf to segfault. The crashing function appears to be solver_addbestrules. In either case, I'm submitting a

Re: F38 proposal: Strong crypto settings: phase 3, forewarning 2/2 (System-Wide Change proposal)

2022-09-15 Thread Tommy Nguyen
On Thu, 2022-09-15 at 22:42 +0300, Otto Liljalaakso wrote: > Tommy Nguyen kirjoitti 15.9.2022 klo 17.40: > > > > > On Sep 15, 2022, at 10:26 AM, Otto Liljalaakso > > > wrote: > > > > > > So maybe it is just that, for Fedora 36 at least, RPM Fusio

Re: F38 proposal: Strong crypto settings: phase 3, forewarning 2/2 (System-Wide Change proposal)

2022-09-14 Thread Tommy Nguyen
On Wed, 2022-09-07 at 17:47 +, Maxwell G via devel wrote: > I think this is a bad idea. It's quite hostile to packagers. It will > break rawhide for months and make it very difficult to stabilize the > distro before the beta freeze or do any type of rebuild. It very well > may > affect

Re: F38 proposal: Strong crypto settings: phase 3, forewarning 2/2 (System-Wide Change proposal)

2022-09-15 Thread Tommy Nguyen
On Thu, 2022-09-15 at 22:42 +0300, Otto Liljalaakso wrote: > RPM Fusion Fedora 37 repository seems to be all SHA256 already. Thanks for doing the research. I plan on upgrading to the F37 beta soon. Have you done so already and what are your results? ___

Re: F39 proposal: Replace DNF with DNF5 (System-Wide Change proposal)

2022-09-20 Thread Tommy Nguyen
For those who are still not convinced, here is a comparison: $ toolbox create -d fedora -r 37 && toolbox enter $ sudo time dnf upgrade -y 26.79user 3.46system 0:49.09elapsed 61%CPU (0avgtext+0avgdata 489304maxresident)k 47400inputs+1243320outputs (266major+377843minor)pagefaults 0swaps $ toolbox

Re: DNF5 Blockers

2022-10-05 Thread Tommy Nguyen
On Wed, 2022-10-05 at 22:10 -0500, Maxwell G via devel wrote: > On Wed Oct 5, 2022, Maxwell G via devel wrote: > > Hi Fedorians, > > > > I think we should define a more through list of blockers/criteria > > that > > dnf5 needs to meet before it can replace the current dnf. > > > > The DNF

Re: DNF5 Blockers

2022-10-06 Thread Tommy Nguyen
On Thu, 2022-10-06 at 13:53 +0100, Richard W.M. Jones wrote: > On Wed, Oct 05, 2022 at 09:20:47PM -0500, Maxwell G via devel wrote: > > Hi Fedorians, > > > > I think we should define a more through list of blockers/criteria > > that > > dnf5 needs to meet before it can replace the current dnf.

Re: Mesa in F37- vaapi support disabled for h264/h265/vc1

2022-10-09 Thread Tommy Nguyen
On Sun, 2022-10-09 at 10:25 +, Daniel Rusek wrote: > Hello, > > Just a note. If someone from RPM Fusion who is interested in > packaging full mesa-va-drivers package reads this, please, make sure > that the package also contains valid AppStream metadata and is > showing in GNOME Software /

Re: Mesa in F37- vaapi support disabled for h264/h265/vc1

2022-09-29 Thread Tommy Nguyen
> On Sep 29, 2022, at 7:36 AM, Kevin Kofler via devel > wrote: > > Neal Gompa wrote: >> Unfortunately, we have to be very careful to not provide a complete >> codepath to these codecs to avoid legal risks. > > Considering that we have been shipping these hardware codec interfaces for >

Re: Mesa in F37- vaapi support disabled for h264/h265/vc1

2022-09-28 Thread Tommy Nguyen
On Wed, 2022-09-28 at 08:24 +0200, Neal Gompa wrote: > As one of the ffmpeg maintainers, I'm actively working on workarounds > for the problem. And I've talked to my counterparts in RPM Fusion > about the issue as well. We're all trying to figure this out. That seems to contradict this quote from

Re: Inactive packagers to be removed after the F37 release

2022-09-05 Thread Tommy Nguyen
On Mon, 2022-09-05 at 10:13 +0200, Dominik 'Rathann' Mierzejewski wrote: > Wait, what? Which countries are 2FA token illegal in? > > Regards, > Dominik I cannot think of any reason why 2FA would be illegal in any country when TOTP is based on HMAC and by default uses SHA-1. Further if I may