Re: soname bump for hiredis

2024-05-11 Thread Kevin Fenzi
On Wed, May 01, 2024 at 02:15:20PM GMT, Kevin Fenzi wrote: > Hey folks. > > hiredis 1.2.0 has been out a long while now, and with some prodding I am > finally looking at updating rawhide to it. > > A interested user ran a mass prebuild: > https://copr.fedorainfracloud.org

Re: Mass Package Change: Turn deprecated %patchN syntax into %patch -PN

2024-05-11 Thread Kevin Kofler via devel
ora} version), cannot specify a -b backup file extension for each patch. So it is not a fair comparison. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fed

Re: Mass Package Change: Turn deprecated %patchN syntax into %patch -PN

2024-05-10 Thread Kevin Kofler via devel
y the choice between a backwards-incompatible syntax (added only in RPM 4.18) and an ugly and redundantly verbose syntax (the -P syntax). And even the modern syntax is 1 character (space) longer for every patch. The shortest syntax was the one being dropped. Kevin Kofler --

3 outages next week (2024-05-13,14,15)

2024-05-09 Thread Kevin Fenzi
, 21:00 UTC Anticipated End: May 16 2024, 02:00 UTC As always, follow https://www.fedorastatus.org and/or the above tickets for up to date outage information. kevin signature.asc Description: PGP signature -- ___ devel-announce mailing list -- devel-annou

3 outages next week (2024-05-13,14,15)

2024-05-09 Thread Kevin Fenzi
, 21:00 UTC Anticipated End: May 16 2024, 02:00 UTC As always, follow https://www.fedorastatus.org and/or the above tickets for up to date outage information. kevin signature.asc Description: PGP signature -- ___ devel-announce mailing list -- devel

Re: Mass Package Change: Turn deprecated %patchN syntax into %patch -PN

2024-05-07 Thread Kevin Kofler via devel
EPEL8/9 builds)? >> > > Yes. It's been supported for a very long time. %patch -P is already documented in the 1997 First Edition of Maximum RPM. Here is the link in the 2000 online edition: https://ftp.osuosl.org/pub/rpm/max-rpm/s1-rpm-inside-macros.html#S3-RPM-INSIDE-WHICH-PATCH-TAG Kevi

Re: Ownership request for retired packages libtsm and kmscon

2024-05-07 Thread Kevin Fenzi
them for review. Since they are using a different upstream and the buildsystem and other things have changed anyhow, a review is probibly a good idea. Then, as part of that you can find a sponsor... https://docs.fedoraproject.org/en-US/package-maintainers/Joi

Re: Unresponsive packagers: suanand and vponcova

2024-05-07 Thread Kevin Fenzi
ccount with the same email as your fas account (or your bugzilla account field setting) should do the trick. kevin -- > > Jens > > On Tue, May 7, 2024 at 2:11 PM Emmanuel Seyman wrote: > > > * Sundeep Anand [07/05/2024 05:50] : > > > > > > (not su

Re: Feedback wanted: Testing side-tag for switching dnf5 in Rawhide

2024-05-06 Thread Kevin Fenzi
ade download; dnf offline-upgrade reboot` or so. It's a > footgun as it stands. Perhaps the dnf5 version could be just: dnf offline-upgrade (and it automatically does --refresh and it downloads and then says "packages downloaded, ok to reboot into the upgrade now? y/n)" ?

Re: calendar.fp.o pointing to obsolete IRC for meetings

2024-05-06 Thread Kevin Fenzi
On Sat, May 04, 2024 at 11:32:21AM GMT, Dominik Wombacher wrote: > On 5/3/24 8:00 PM, Kevin Fenzi wrote: > > > > So, help would definitely be welcome fixing the matrix/irc issues in the > > code, and then we could look at mass updating it. > > > > I briefly look

Re: calendar.fp.o pointing to obsolete IRC for meetings

2024-05-03 Thread Kevin Fenzi
e other more important things we have going on. :( So, help would definitely be welcome fixing the matrix/irc issues in the code, and then we could look at mass updating it. Or perhaps we should be looking at retiring fedocal, but would probibly want an open source alternative we could use or dep

Re: F41 Change Proposal: Drop Mandatory Requires on JRE (system-wide)

2024-05-02 Thread Kevin Kofler via devel
e oldest possible Java as I suggest, it will have to get fixed anyway.) As is, you may need to explicitly: BuildConflicts: java-1.8.0-devel BuildConflicts: java-11-devel Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org T

Re: F41 Change Proposal: Drop Mandatory Requires on JRE (system-wide)

2024-05-02 Thread Kevin Kofler via devel
cause subtle misbehavior that is a pain to debug is just too high, especially if we have the actual older JDK available and could just BuildRequire the correct version. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To

Re: F41 Change Proposal: Drop Mandatory Requires on JRE (system-wide)

2024-05-02 Thread Kevin Kofler via devel
a version (the oldest JDK branch that we still ship if the library supports that, otherwise the oldest the library supports). And IMHO, if the library is built against a higher version than the lowest we ship, it needs a versioned Requires on the JRE.

soname bump for hiredis

2024-05-01 Thread Kevin Fenzi
know if I missed anything. kevin signature.asc Description: PGP signature -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org

Re: pipenv removal in F40

2024-04-30 Thread Kevin Kofler via devel
Miro Hrončok wrote: > If you wish to help, I guess you can send a pull request to the release > notes... Or Mattia could simply unretire and adopt the package. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproje

Re: isomd5sum 1.2.4-1 checksum bug

2024-04-29 Thread Kevin Fenzi
ji, so it should pick that up in tomorrow's rawhide automatically. I don't think anything needs manually updating, but if I am missing something let me know. kevin -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email

Re: how to do minor bump using %autorelease?

2024-04-29 Thread Kevin Kofler via devel
d users to break? All this just so that lazy packagers do not have to increment a number (in most cases a single-character change, in some cases (such as a minor bump or every 10 major bumps) a two-character change, rarely more) when doing a new build. Kevin Kofler -- __

Re: how to do minor bump using %autorelease?

2024-04-29 Thread Kevin Kofler via devel
the upgrade path. > But as others have pointed out, in the light of distrosync and > macro-determined differences etc. we may just as well give up the > illusion that "-5" means the same in different branches, and > consequently lift the sorting policy between different bran

Re: how to do minor bump using %autorelease?

2024-04-28 Thread Kevin Kofler via devel
t replace %autorelease with a correctly manually bumped Release in the specfile as part of doing the rebuild. Just letting %autorelease do its thing and ending up with a full bump would be incorrect, so it should not even be considered as an option. Kev

Re: systemd 256~rc1 in rawhide

2024-04-28 Thread Kevin Kofler via devel
Adam Williamson wrote: > Well, it really wants to write to /lib , not to /usr. But of course, on > Fedora, /lib is /usr/lib . Sigh… Time for a UsrUnmerge? :-) Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproje

Re: Is there a policy for branches being merged or not

2024-04-28 Thread Kevin Kofler via devel
ast-forwarded again. But a clean linear history is no longer possible after someone did an unwanted cherry pick instead of a fast-forward merge. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send a

Re: Feedback wanted: Testing side-tag for switching dnf5 in Rawhide

2024-04-26 Thread Kevin Fenzi
On Fri, Apr 26, 2024 at 11:16:28AM GMT, Adam Williamson wrote: > On Fri, 2024-04-26 at 08:56 +0200, Jan Kolarik wrote: > > Hi Kevin, > > > > Personally, I think this is a beta requirement. > > > > > > > IIUC the Fedora 41 Beta requirement is to succe

Re: Feedback wanted: Testing side-tag for switching dnf5 in Rawhide

2024-04-25 Thread Kevin Fenzi
ng the system-upgrade, users are > anyway > advised to ensure that all installed packages are fully updated. So, how do you rate the chances of having something ready by beta freeze? kevin signature.asc Description: PGP signature -- ___ devel mailing

Re: F41 Change Proposal: Fedora Miracle Spin (self-contained)

2024-04-25 Thread Kevin Fenzi
ore, and I wish there was a better way to avoid duplication between all the spins. kevin signature.asc Description: PGP signature -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora

Re: Fedora RISC-V port needs to put shared objects into /usr/lib64/lp64d

2024-04-20 Thread Kevin Kofler via devel
nk having /usr/lib64/lp64d be a symlink to /usr/lib64 is in violation of any standard. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduc

Re: F40 Change: Privacy-preserving Telemetry for Fedora Workstation (System-Wide)

2024-04-19 Thread Kevin Fenzi
mitted for consideration again, but that has not yet happened. kevin signature.asc Description: PGP signature -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct:

Re: F41 Change Proposal: Replace Redis with Valkey (system-wide)

2024-04-18 Thread Kevin Kofler via devel
with the compat package, to > complete the transition away from Redis). I do not see why we need a separate compat subpackage at all. Valkey should just Obsolete/Provide redis and include all the compat symlinks in the main package. Kevin Kofler -- __

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-18 Thread Kevin Kofler via devel
security", LOL… Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-condu

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-17 Thread Kevin Kofler via devel
view, the fact that, in those implementations, there is no Treacherous Computing hardware preventing me from doing what I want with my own private key (e.g., just copying the same key to all my devices, as I can also do with TOTP) is actually a feature, even if it goes against the "security&qu

Re: F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-16 Thread Kevin Kofler via devel
lso some hardcoded if (optimize_size) peppered throughout various GCC optimizations and even target files (to choose between faster or smaller instructions). Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-13 Thread Kevin Fenzi
would be affected, etc. So, sure, it's possible, but would be a lot of new code needing written. kevin signature.asc Description: PGP signature -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to de

Re: F41 Change Proposal - Python Built with gcc -03 (self-contained)

2024-04-12 Thread Kevin Kofler via devel
arger is Python at -O3 compared to -O2? And other packages? I would like to see -Os as the default. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Kevin Kofler via devel
ith, you can just SFTP your ~/.config/org.kde.keysmith/Keysmith.conf from/to all your GNU/Linux computers including the PinePhone or equivalent, and they will all be able to generate the same TOTP keys with the same master key. Kevin Kofler -- _

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Kevin Fenzi
u should, of > course, keep somewhere safe and ideally encrypted). Google > Authenticator can backup To The Cloud. yeah, I'll put in a plug for the one I use: https://github.com/beemdevelopment/Aegis It's open source, available on f-droid and play store, can to encrypted backups, pretty acti

[EPEL-devel] Re: RFC: Django latest vs LTS maintenance plan

2024-04-12 Thread Kevin Fenzi
se. Also, there might be cases where the dependent package does have to change... ie, foo-1.0 works with django-3.2, but when 4.2 lands you have to upgrade to foo-2.0 to work with it? Anyhow, I think this is a pretty reasonable process, but we should make sure and communicate it

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Kevin Fenzi
someone, but if thats manually it could be missed. I think in any case it might be good to find all the {proven}packager members without otp and perhaps email them a note about how to set things up, etc. kevin signature.asc Description: PGP signature --

Re: Looking for people to be stewards of rpminspect-data-fedora

2024-04-09 Thread Kevin Fenzi
ask here. I wonder if this isn't something we should have the QE or releng teams manage... ie, adding new branch info (releng), adjusting tests (qe)? kevin signature.asc Description: PGP signature -- ___ devel mailing list -- devel@lists.fedoraproject.org T

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-08 Thread Kevin Kofler via devel
thon executable, but there are plenty of other cases where autotools and Meson also do automagic, which is why building outside of a chroot is such a bad idea. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an em

Re: convert everything to rpmautospec?

2024-04-08 Thread Kevin Kofler via devel
ort. So for me there is a clear consensus to NOT implement your proposal at all, not even with an opt-out option. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedorapro

Re: Schedule for Monday's FESCo Meeting (2024-04-08)

2024-04-08 Thread Kevin Fenzi
On Mon, Apr 08, 2024 at 06:19:31PM +, Zbigniew Jędrzejewski-Szmek wrote: > On Sat, Apr 06, 2024 at 10:45:52AM -0700, Kevin Fenzi wrote: > > = Discussed and Voted in the Ticket = > > > > Change: GNU Toolchain F41 > > https://pagure.io/fesco/issue/3

Re: convert everything to rpmautospec?

2024-04-07 Thread Kevin Kofler via devel
t just makes my life harder for no benefit whatsoever. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org

Re: convert everything to rpmautospec?

2024-04-07 Thread Kevin Kofler via devel
. > Perhaps it's time to discuss imposing financial and/or legal penalties > when the opt-in nature of the change goes away. Who would impose those? And from whom to whom would the money flow? I do not think this can work. Kevin Kofler -- ___

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-07 Thread Kevin Kofler via devel
o always build in a mock chroot with only the expected BuildRequires installed, as I have written. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code o

Re: EPEL9 updates obsoleted

2024-04-07 Thread Kevin Fenzi
eted update, edit the update to refresh the list of > builds, and save an "empty" update. Not sure if that will work though > ... Then it would be possible to tag the builds into a fresh side-tag. You cannot remove the last build from an update, so you would have to rebuild the one thing any

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-07 Thread Kevin Kofler via devel
That's why you should never build packages outside of mock. Kevin Kofler On Sun, Apr 7 2024 at 13:52:26 +00:00:00, Zbigniew Jędrzejewski-Szmek wrote: On Sat, Mar 30, 2024 at 10:15:47PM +, Zbigniew Jędrzejewski-Szmek wrote: One particular issue I have with CMake as a downstream

Schedule for Monday's FESCo Meeting (2024-04-08)

2024-04-06 Thread Kevin Fenzi
Following is the list of topics that will be discussed in the FESCo meeting Monday at 19:30 UTC in #meeting:fedoraproject.org on Matrix. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2024-04-08 19:30 UTC' Links to all issues to be

Re: Introduction and Application for Sponsorship

2024-04-06 Thread Kevin Fenzi
rn more and give back by adopting this package. > > I've submitted a sponsorship ticket here: > https://pagure.io/packager-sponsors/issue/643 Welcome Sean! Feel free to ask here or in the #devel:fedoraproject.org matrix channel if you run into any problems/questions. kevin

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-05 Thread Kevin Kofler via devel
the Plasma Edition be a Scientific Edition) from non-scientific KDE users who understandably did not want to have to install a Scientific Edition and then uninstall lots of niche apps they will never use from it. But that discussion became moot because the Edition application was rejec

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-05 Thread Kevin Kofler via devel
p as described above is probably a better fit for traditional desktop/notebook computers. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of C

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-05 Thread Kevin Kofler via devel
Tomasz Torcz wrote: > GNOME (Mutter) maximizes windows if they initially take 80% of more > screen space. And I believe that that, too, was a refinement added in later releases. IIRC, GNOME 3.0 just maximized everything. Kevin

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-05 Thread Kevin Kofler via devel
kstation might be declining because people are installing other desktop Spins, or a custom selection from Everything, instead. :-) None of those will have fedora-release-workstation installed. Kevin Kofler -- ___ devel mailing list -- devel@lists.

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-05 Thread Kevin Kofler via devel
pretty good post summarizing the issues with autotools, both generally and in the context of the xz vulnerability: https://felipec.wordpress.com/2024/04/04/xz-backdoor-and-autotools-insanity/ Kevin Kofler -- ___ devel mailing l

Re: Switching XZ for ZSTD?

2024-04-04 Thread Kevin Fenzi
r packages, they likely already just know this from interacting with the upstream project already. I don't think we can or should use that for things like deciding if we allow packages into the collection or the like, there's a lot of ways a low score there could not matter or be non rep

Re: F41 Change Proposal: Switch to DNF5 (system-wide)

2024-04-04 Thread Kevin Fenzi
en/latest/changes.html>. Yeah, on digging more into the docs it looks like this should be fine. Just needs adjustment of the config and enabling the timer you want. kevin signature.asc Description: PGP signature -- ___ devel mailing list -- deve

Re: Switching XZ for ZSTD?

2024-04-04 Thread Kevin Fenzi
f right now) that affects Fedora. There are changes coming in systemd, openssh and other places that would make this particular vector harder/impossible also. kevin signature.asc Description: PGP signature -- ___ devel mailing list -- devel@lists.fedo

Re: Switching XZ for ZSTD?

2024-04-04 Thread Kevin Fenzi
of it where we keep the upstream sources in a branch always and apply packaging on top of that and build from there. > 3] Under-resourced development creates risk; 'Many eyes' bench depth in > development is needed. Yep. I think also visibility of changes can be improved. So, maintainers kn

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-04 Thread Kevin Kofler via devel
ad >> key, etc.)" this is also not the case for ages, or at least not in its >> completeness. > > Yes, this did change a few GNOME releases ago. Of course, having only tried GNOME 3 once, I could not know this. Kevin Kofler -- __

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-04 Thread Kevin Kofler via devel
h less open than RHL, and Caldera eventually became the infamous SCO) with the at the time brand new KDE 1 (version 1.1.1). Having used DOS, the bash CLI was not that bad to work with, but the distros at the time already came with GUI environments (FVWM95,

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-04 Thread Kevin Kofler via devel
his proposal). Interesting point. And there I thought it was only because the answer is always 42. ;-) Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-04 Thread Kevin Kofler via devel
equires on the dependencies where it matters. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/e

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-04 Thread Kevin Kofler via devel
oper Linux” isn’t." > > https://www.linuxfoundation.org/legal/the-linux-mark Kinda the same recommendation that also applies to the Fedora trademark, by the way. But everyone only cares about their own trademark. Kevin Kofler -- ___

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Kofler via devel
lly good options" as Adam Williamson wrote (in the post to which you were replying). Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Kofler via devel
rience felt pretty much unusable to me personally. KDE Plasma not only has more familiar defaults (actually looking and feeling much more similar to GNOME 1 than GNOME 3 does), but also lets you easily change those defaults that you do not like. Kevin Kofler -- __

Re: F41 Change Proposal: Switch to DNF5 (system-wide)

2024-04-03 Thread Kevin Fenzi
es are scheduled > > for off-hours. > > > > My experience is that even |WakeSystem=true does not make them reliable, > > but I am not sure how to debug this (because the system is suspended, heh). > > > > We do use dnf-automatic quite extensively within infra,

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Kofler via devel
is pointless to feature that particular Edition prominently on fedoraproject.org. That is why I was asking for download statistics specifically. And is there a statistical evaluation of that data somewhere? Downloading 350 MiB (!) of raw CSV data does not sound to me like a convenient way to work with

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Kofler via devel
bout as much as Kubuntu is Ubuntu. > (Though, I don't know about 'Kedora' as it has absolutely no meaning XD) > Though I feel like we should really only go this route if the other ideas > get completely exhausted... That is what I tried with Kannolo. Success was… limited, to say the

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Kofler via devel
to a desktop widget or similar) developed for one of the Fedora desktop deliverables (Workstation Edition, desktop Spins) is also going to work on any of the others. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubs

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Kofler via devel
Kevin Fenzi wrote: > to you? They are quite relevent to others... I would really like to see what the proportion of users downloading the Server, IoT, Cloud, and CoreOS Editions is compared to Workstation or the Spins. I would not expect it to be very high. Most Fedora users are desktop us

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Kofler via devel
11 rather than Wayland, if even SDDM does not work properly under Wayland for you.) Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora C

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Kofler via devel
ot;Edition") and second-class ("Spin" or "Lab") spins, for no benefit whatsoever. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-03 Thread Kevin Kofler via devel
entionally limited and there are strict rules on what packages are allowed to depend on it.) It should NEVER be considered reasonable to break other people's work. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscrib

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Kofler via devel
obably be needed, and a lot of testing on different hardware will definitely be needed, to make the multiboot generator work (reliably) again. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-03 Thread Kevin Kofler via devel
not include that warning. And this also makes "--force" pretty much useless as it stands. We and Debian both need to patch aclocal downstream immediately to make --force actually work. And then of course Fedora needs to actually always run autoreconf -i -f as Debian already does,

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Fenzi
On Wed, Apr 03, 2024 at 04:24:08AM +0200, Kevin Kofler via devel wrote: > Kevin Fenzi wrote: > > Why not the opposite: > > > > Download Workstation > > > > [I'm a linux user and know what I want, just show me the full list of > > downloads, click here

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Kevin Fenzi
posals can be, and frequently are, rejected. > > > Sorry, for not knowing the process right but where to vote up/down for such > proposal? You can provide your feedback here or in the discussion thread. The actual voting on proposals happens with FESCo members once the propos

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-03 Thread Kevin Fenzi
On Wed, Apr 03, 2024 at 07:27:12AM -0400, Stephen Gallagher wrote: > On Tue, Apr 2, 2024 at 7:41 PM Kevin Fenzi wrote: > > > > On Tue, Apr 02, 2024 at 04:38:25PM -0400, Stephen Gallagher wrote: > > > On Tue, Apr 2, 2024 at 3:55 PM Steve Cossette wrote: > > >

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Kevin Kofler via devel
Kevin Fenzi wrote: > Why not the opposite: > > Download Workstation > > [I'm a linux user and know what I want, just show me the full list of > downloads, click here]? Because that still leads people to click that "Download Workstation" link before even seeing

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Kevin Kofler via devel
xpect that we will get lots of media coverage and another bump in downloads from that. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: htt

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Kevin Kofler via devel
t least visibly state somewhere what desktop environment they are based on, an information which some Labs now put in their description, requiring an extra click to see it, and some not even there.) Kevin Kofler -- ___ devel mailing list -

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Kevin Fenzi
On Wed, Apr 03, 2024 at 02:36:07AM +0200, Kevin Kofler via devel wrote: > Kevin Fenzi wrote: > > Ok, thats obvously somewhat tounge in cheek, but if we promote multiple > > things, we need some way to describe them to uses who might not know the > > history of things and do

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Kevin Kofler via devel
Kevin Fenzi wrote: > Ok, thats obvously somewhat tounge in cheek, but if we promote multiple > things, we need some way to describe them to uses who might not know the > history of things and do it in a quick enough way that they won't decide > it's all confusing and go do so

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Kevin Fenzi
, but if we promote multiple things, we need some way to describe them to uses who might not know the history of things and do it in a quick enough way that they won't decide it's all confusing and go do something else. kevin signature.asc Description: PGP signature -- __

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-02 Thread Kevin Fenzi
rompts might be nice, but why does having 2fa seperate make things any better? I mean, it's one more return you get to hit. ;) And... I am not sure about moving the handling of passwords to a bash script from a kinit prompt. kevin signature.asc Description: PGP signature -- _

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Kevin Kofler via devel
ted that "'Download' means 'Download'" and that a button with a verb must trigger an immediate action. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fe

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Kevin Kofler via devel
gma of defaulting to GNOME everywhere, they are likely to be rejected. (Been there, done that.) Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora C

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-02 Thread Kevin Kofler via devel
; option in autoreconf. Is that not what -f is supposed to do? At least, the documentation claims so, but the implementation does not actually do what is documented. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe

Re: What we mean when we talk about "supply chains" [was Re: Three steps we could take to make supply chain attacks a bit harder]

2024-04-02 Thread Kevin Kofler via devel
led "Free Software" and not "Open Source". :-) Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproj

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-02 Thread Kevin Kofler via devel
sition here in any way. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-02 Thread Kevin Kofler via devel
analyzed the individual targeted distributions, the distributions whose packaging tools the build script attempts to detect were not just picked because they are known to link OpenSSH to liblzma, but also individually tested and targeted. Kev

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Kevin Kofler via devel
ity). Now they are refloating it as their own, without even citing my original proposal. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduc

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-02 Thread Kevin Kofler via devel
nsense. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines:

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-02 Thread Kevin Kofler via devel
y uses it. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guid

Re: xz backdoor

2024-04-02 Thread Kevin Kofler via devel
that can also write to regular files, without checking that "$NOTIFY_SOCKET" is really a socket (or checking it with a TOCTOU vulnerability), introducing an arbitrary file overwrite vulnerability. Kevin Kofler -- __

Re: Fedora Linux 40 Final Freeze

2024-04-02 Thread Kevin Fenzi
was told there would be one more stable push at the releng channel on > matrix. Yeah, there's a final stable push right before freezing. Thats been done, so check now if you still are looking to get anything in. If so, it will need a approved freeze exception or blocker. kevin sign

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-01 Thread Kevin Kofler via devel
regenerate all files that can be regenerated, which is not happening. But if you explicitly delete the files before running autoreconf, then it has to regenerate them no matter what. Kevin Kofler -- ___ devel mailing list -- devel@lists.fedor

Re: xz backdoor

2024-04-01 Thread Kevin Fenzi
On Mon, Apr 01, 2024 at 05:07:13PM +, Christopher Klooz wrote: > > On 31/03/2024 23.08, Kevin Fenzi wrote: > > On Sun, Mar 31, 2024 at 10:30:23PM +0200, Leon Fauster via devel wrote: > > > Not sure, if it was already mentioned -> containers. I had here a toolbox &g

Re: xz backdoor

2024-03-31 Thread Kevin Fenzi
d pull the latest that doesn't have the affected build and rerun. Yes, there are f40 containers available. kevin signature.asc Description: PGP signature -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel

Re: xz backdoor

2024-03-31 Thread Kevin Fenzi
t; if the previous release was also installed ... You should pull the latest version and restart any containers you were running. kevin signature.asc Description: PGP signature -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send

Re: xz backdoor

2024-03-31 Thread Kevin Fenzi
On Sun, Mar 31, 2024 at 03:52:12PM -0500, Alex Thomas wrote: > Just to be clear, as I was getting ready to put 40 Beta on a test > machine, this has been fixed. I do the install and run updates and the > compromised version of xz is never installed? Correct. kevin signature.asc De

  1   2   3   4   5   6   7   8   9   10   >