Re: The future of legacy BIOS support in Fedora.

2020-07-06 Thread Christian Stadelmann
Out of the 2 computers I own, 2 only boot through legacy BIOS. One claims to have UEFI support but I haven't managed to get it running with tens of hours of work over the years. In other words: I think it is too early to drop support for this legacy technology. _

Please orphan and retire the package "conduit"

2016-02-02 Thread Christian Stadelmann
The package conduit [1] hasn't seen an update since 2010-01-31 and FTBFS since 6 months ago [2]. There was no build for F22 or F23. Upstream website from spec file has gone. There is another upstream website at gnome.org [3] with links to a download folder [4] with no more releases. Wikipedia do

Re: Copr GPG keys

2016-02-02 Thread Christian Stadelmann
That's a very good idea, thanks! Are there any plans to make dnf work with those? Or do I have to edit repo files for that? `dnf copr enable` could use these GPG keys if it could make sure this package is installed. -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.o

Re: Upstream release monitoring issue

2016-02-02 Thread Christian Stadelmann
Is there any reason why two packages provide tsqllib and tsqllib-devel? See https://apps.fedoraproject.org/packages/s?search=trustedqsl and the related .spec files in git repos? -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraprojec

Re: Proposal: remove insecure WebKitGTK+ packages for F27

2016-06-12 Thread Christian Stadelmann
I like this idea very much, thank you! Independent to whether this proposal is accepted or not, I'd like to point out that it would be very useful to notify all maintainers of this issue, probably by filing a bug to every package that uses one of these packages (webkitgtk, webkitgtk3), adding a

Re: Firefox on Wayland

2016-06-24 Thread Christian Stadelmann
Wow, looks mostly fine, except for this bug: https://bugzilla.redhat.com/show_bug.cgi?id=1349016 Even playing youtube videos works without crashes. -- devel mailing list devel@lists.fedoraproject.org https://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: Firefox on Wayland

2016-06-25 Thread Christian Stadelmann
> I've failed to launch the application properly under X.org and Wayland using > the > launcher icon in GNOME shell. This is not expected to work on gnome x11 sessions (Xorg), according to instructions. Works fine for me on gnome wayland sessions. Do you have a bug report, backtrace, etc.? > B

Re: Fixing /.autorelabel

2016-06-30 Thread Christian Stadelmann
> It should be possible to touch /.autorelabel and have the SELinux > labels on the filesystem fixed at next boot. […] > (a) Configure /etc/selinux/config to set SELinux permissive, and > modify the fedora-autorelabel.service so it edits /etc/selinux/config > to re-enable SELinux next time. This

Re: Too fast karma on Bodhi updates

2016-07-11 Thread Christian Stadelmann
First, have you contacted them? This looks like a misunderstanding between the way you (and probably most fedora packagers + bodhi developers) think "karma" works and the way they understand it. My perspective is being someone who often tests packages but doesn't package them. From my point of

Re: dnf system upgrade has zero progress on text boot (`quiet no rhgb`)

2016-07-11 Thread Christian Stadelmann
I can confirm this issue. I've already reported this as an issue to https://bugzilla.redhat.com/show_bug.cgi?id=1317195 4 months ago, but nothing happened. There is no indication that one should use upstream (github.com) to report bugs instead of RedHat Bugzilla. Please don't expect users to rep

Re: Proposed mass bug filing for webkitgtk/webkitgtk3 package removal

2016-09-05 Thread Christian Stadelmann
1. your link is broken. This should work: https://lists.fedoraproject.org/archives/list/devel%40lists.fedoraproject.org/thread/AKVB363GFCHHJ5MTHGVYHYT6NLLTF5VM/ 2. I like the idea! 3. about the FESCO exceptions: > Question: What if my application doesn't process untrusted input? > > Answer: I

Re: Weak deps in updates

2016-09-06 Thread Christian Stadelmann
I think it is still broken somewhere. I uninstalled fedora-easy-karma, which makes use of weak deps, and tried to reinstall it. I'm not seeing any suggested/weak deps. See https://bodhi.fedoraproject.org/updates/FEDORA-2016-3495b9a120 -- devel mailing list devel@lists.fedoraproject.org https://l

Re: Weak deps in updates

2016-09-08 Thread Christian Stadelmann
Still not working. The only file from updates-testing repo metadata¹ providing "recommends" XML tags is the 2b1dda391308bf7395f9890774b4d2d0692b615c2ad6a73fa378080d32c0c531-primary.xml file, but it just has those tags for 6 packages. ¹ /var/cache/dnf/updates-testing-648243a4cddd356c -- devel m

Re: Weak deps in updates

2016-09-08 Thread Christian Stadelmann
So all packages have to be rebuilt to make their weak dependencies go into repo metadata? This was not obvious from the first posting by Kevin Fenzi and probably should go into a separate post here and on devel-announce too. -- devel mailing list devel@lists.fedoraproject.org https://lists.fedor

Re: Weak deps in updates

2016-09-11 Thread Christian Stadelmann
Still broken. Steps to reproduce: 0. have updates-testing enabled 1. do not have python2-dnf installed 2. try to install fedora-easy-karma 3. have a look at the transaction What happens: Transaction doesn't include python2-dnf What should happen: Transaction should include python2-dnf Addition

Re: Weak deps in updates

2016-09-19 Thread Christian Stadelmann
I think this works now. At least the fedora-easy-karma bug is resolved and `dnf repoquery --recommends fedora-easy-karma` lists python2-dnf. Thank you! I've added a comment in https://bodhi.fedoraproject.org/updates/FEDORA-2016-3495b9a120 too. ___ deve

Re: PROPOSAL: Blocking the release is our only "big hammer" — let's add a softer one.

2016-10-06 Thread Christian Stadelmann
In theory, I like this idea. In practice, Kevin Kofler is probably right. Unless there is a big hammer, bugs don't get fixed in many cases. So I think the solution should be different: gfx team needs more manpower so they can handle bug reports. Right now, for some packages bugzilla serves as

Re: including EOL and vulnerable software in Fedora

2016-10-10 Thread Christian Stadelmann
+1 There is no need to keep broken deprecated stuff in fedora repositories. If somebody really wants to use this, use a COPR. Or use the distro with conservative risky update policy you are developing against (CentOS, RHEL, Debian, Ubuntu, …). ___ deve

Re: Orphaning my packages

2017-03-22 Thread Christian Stadelmann
Hi Tim, thanks for all the great work on yumex and yumex-dnf! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Announcing the release of Fedora 26 Alpha

2017-04-04 Thread Christian Stadelmann
> Issues and Details > -- > > Since this is an alpha release, we expect that you may encounter bugs or > missing features. To report issues encountered during testing, contact > the Fedora QA team via the mailing list or in #fedora-qa on Freenode. As > testing progresses, common is

many debuginfo packages provide /usr/src/debug/tmp

2017-04-19 Thread Christian Stadelmann
Hi folks, I noticed that there is an empty directory /usr/src/debug/tmp on my system, which does not make much sense to me. `dnf provides /usr/src/debug/tmp` reveals, that this folder is provided by 50 (!) different debuginfo (sub-)packages (on Fedora 25). They are provided by these source pack

Re: many debuginfo packages provide /usr/src/debug/tmp

2017-04-20 Thread Christian Stadelmann
Oh, thanks! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: packages not signed in F24 are breaking copr builds

2016-03-09 Thread Christian Stadelmann
> On Ter, 2016-03-08 at 14:49 +0100, Jakub Jelen wrote: > Meanwhile , can't we hack copr , with gpgcheck=0 in Fedora 24 repos. It > will be much less stressful. Please don't. Having unchecked code shipped and installed is a risk we don't need to take. How about signing every package instead, inc

Re: Private Bugzilla bugs

2016-11-01 Thread Christian Stadelmann
Answers from my (user and frequent bug reporter) view: 1. abrt/libreport reports way too much data. There is no need to report my hostname to Fedora/RedHat infrastructure. Same for UID, PID, username, time, environ, … 2. abrt/libreport leaks much sensitive data. This includes paths in my home di

Re: Pondering security update time frames

2016-11-02 Thread Christian Stadelmann
1. and 2.: Yes, it often takes at least 3 days for security critical updates in important packages (e.g. kernel update to 4.8.3) to land. I think the real challenge here is to continue shipping quality software while reducing time to ship. Scratch builds and release-monitoring.org (Anitya) have

Re: DNF and PackageKit background data usage

2016-11-02 Thread Christian Stadelmann
> On 10/30/2016 03:26 AM, Adam Williamson wrote: > > Fedora updates so often that attempts to pre-download anything updates > related are pointless. Chances are you > a) waste gobs of bandwidth downloading that changing data over and over > again without ever using it > b) when you actually *do*

Re: Bodhi For Rawhide?

2016-11-02 Thread Christian Stadelmann
One good thing we would gain from using bodhi for rawhide is having all packages signed, especially in Rawhide. Since rawhide is used by developers, this is a pretty important thing to do. ___ devel mailing list -- devel@lists.fedoraproject.org To unsub

Re: DNF and PackageKit background data usage

2016-11-02 Thread Christian Stadelmann
Yeah, sorry, looks like either hyperkitty or I messed up. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Private Bugzilla bugs

2016-11-05 Thread Christian Stadelmann
> The UID can actually matter. We have a frequently reported non-bug that > graphical KDE applications will not work (and abort with a qFatal, which > fires the SIGABRT signal) if you run them under tools like su or sudo > because they won't find some resources (usually the D-Bus session service

Re: Recommended upgrade procedure for >1 release upgrades

2016-11-18 Thread Christian Stadelmann
I think N+2 updates are barely done pre release by users out there, so issues will rarely be noted before final (F25 final in this case) lands. N+1 updates happen quite often during N+1 alpha and beta phase, thus they'll probably see more testing and should be recommended. OpenQA is fine, but it

Urgent firefox update seems to be stuck in bodhi

2016-12-02 Thread Christian Stadelmann
The firefox update from 50.0.0 to 50.0.2 [1] isn't being pushed to updates-testing or updates in F25 and F24 for more than 24 hours. This update is urgent because it fixes a 0-day remote code execution bug in SVG handling plus another critical bug in same-origin handling [2]. This bug has reache

Re: F25 GNOME Shell notification locked up hard for some time

2016-12-02 Thread Christian Stadelmann
Can you say for sure you're seeing this after clicking on the notification? Because I'm seeing massive freezes (2…5 seconds) when notifications fade in sometimes. I'm 100% sure though, that I didn't click the notification before gnome-shell froze. Same symptoms even about switching to virtual co

Re: Urgent firefox update seems to be stuck in bodhi

2016-12-02 Thread Christian Stadelmann
Thanks! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Call to retire gstreamer-0.10

2017-01-31 Thread Christian Stadelmann
> exaile They are working on a port to Gtk3/GObject including a port to Gtk3WebKit2 a.k.a. gtkwebkit4. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Call to retire gstreamer-0.10

2017-01-31 Thread Christian Stadelmann
How about handling it the same way we handle old GtkWebKit versions? As soon as F26 is branched from Rawhide (expected in 2017-02-21), retire this package? This would give package maintainers enough time to get their packages fixed (about 9 months) until Fedora 27 is released. Any package that h

Re: Call to retire gstreamer-0.10

2017-01-31 Thread Christian Stadelmann
sorry, I meant webkitgtk4 instead of gtkwebkit4. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

`dnf system-upgrade download` throws RuntimeError: TransactionItem not found for key: rtkit

2019-04-16 Thread Christian Stadelmann
I am running in a reproducible traceback which happens during `dnf system-upgrade download` as reported in https://bugzilla.redhat.com/show_bug.cgi?id=1700551. Does anyone know whether this will let me run into upgrade issues? ___ devel mailing list --

Re: `dnf system-upgrade download` throws RuntimeError: TransactionItem not found for key: rtkit

2019-04-16 Thread Christian Stadelmann
This was fallout from an older bug in rtkit's rpm scripts: https://bugzilla.redhat.com/show_bug.cgi?id=1637496. Thanks for the help! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.o

Re: New policy for orphaning/retiring packages with open security bugs

2018-09-04 Thread Christian Stadelmann
How does one mark a bug as CRITICAL or IMPORTANT? ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guideline

Re: Inactive provenpackagers for the F41 cycle

2024-08-16 Thread Christian Stadelmann
Your e-mail is missing the contents. Can you please try again? -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/pr

cquad: Unresponsive package maintainer for josm

2018-03-07 Thread Christian Stadelmann
As per step 4 of Policy for nonresponsive package maintainers [1], I'm asking here whether anyone knows cquad, who is maintainer of the josm package, and has a way of contacting him/her. This package is quite outdated as it has not seen an update in 14 months. There is a bug report requesting an

Re: qt-mobility -> qtwebkit, and qt4 removal (was Re: Heads up: proj 7.2.0 + gdal 3.2.0)

2020-11-06 Thread Christian Stadelmann
Thank you for this proposal! I found a small typo: > fro mother > The following packages will be retired: > arora > […] > rekonq Is there any reasons why they should retired and not also being obsoleted? (Just asking, not suggesting. I don't really know the process but what happens if someone

Re: Finalizing Fedora's Switch to Python 3

2017-07-29 Thread Christian Stadelmann
> Fedora's Python version migration needs to be coordinated with RHEL. The most important step would be to *NOT* change /usr/bin/python to /usr/bin/python3, but have it provided by a separate (non-default) package. For Fedora and RHEL, this would mean the separate package does not get installed

Re: F28 Self Contained Change: Packaging Rust applications/libraries

2017-08-21 Thread Christian Stadelmann
I'd like to see this change land in F28! Anyway, I think there is a showstopper: * Fedora Packaging guidelines demand packages bundle no dependencies (e.g. libraries, or in Rust's case crates). This is a good choice in my opinion. * Rust currently has no ABI definition compatible over different v

Re: F28 Self Contained Change: Packaging Rust applications/libraries

2017-08-21 Thread Christian Stadelmann
> On 08/21/2017 04:20 PM, Christian Stadelmann wrote: > > I think ABI compatibility is achieved by shipping source code only in > the -devel packages (similar to what Perl does). No, you are writing about API stability. Source code may provide API stability, but no ABI stability. A

Re: F28 Self Contained Change: Packaging Rust applications/libraries

2017-08-21 Thread Christian Stadelmann
So for now, there will be no shared rust libraries? ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Gnome-software tells me to dist-uprade to F27, although it isn't even beta yet

2017-09-19 Thread Christian Stadelmann
When I opened gnome-software today, it tells me that Fedora 27 is available (which is wrong) and shows 2 buttons, one, "More information" [1], which is a dead link and the other one to download Fedora 27, which I doubt will work. Is this a bug, or is this expected to happen? Shouldn't this happe

Re: Gnome-software tells me to dist-uprade to F27, although it isn't even beta yet

2017-09-20 Thread Christian Stadelmann
> On 20 September 2017 at 07:37, Christian Stadelmann > > is "gsettings get org.gnome.software show-upgrade-prerelease" set to true? Yes, it is. Thanks for the hint! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubs

Re: Gnome-software tells me to dist-uprade to F27, although it isn't even beta yet

2017-09-20 Thread Christian Stadelmann
> On Wed, Sep 20, 2017 at 08:09:02AM +0100, Richard Hughes wrote: > If this is causing problem, I can easily revert and bring it back at/after > beta. Doesn't look like a problem, thanks anyway! ___ devel mailing list -- devel@lists.fedoraproject.org To

tnef has unfixed CVEs with patches available for some time

2017-10-01 Thread Christian Stadelmann
The package tnef [1][2] has unfixed CVEs [3][4]. A fix has been commited and an update has been released upstream. The fedora version has not seen this update yet. Can someone please step in? [1] https://src.fedoraproject.org/rpms/tnef [2] https://apps.fedoraproject.org/packages/tnef [3] https:/

Re: firefox with

2017-11-16 Thread Christian Stadelmann
After setting "widget.allow-client-side-decoration" to true and restarting firefox, I can see those CSDs even with default Fedora 26 and Fedora 27 builds. See also: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/XXNOQ6GVGGNNTFGSEUIR3IXURMMRMOJK/ __

Re: Call for testing - Firefox CSD/titlebar

2017-11-16 Thread Christian Stadelmann
Did you restart Firefox after setting widget.allow-client-side-decoration ? ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Firefox Hardware acceleration & VA-API how-to

2022-01-19 Thread Christian Stadelmann
Thank you, Martin! I've just updated the wiki page to remove the rdd stuff which should no longer be necessary with Firefox 96. Thanks to the wiki page, one can check whether hardware acceleration is available. Is there any indication (e.g. in about:support) to see whether video hardware acce

Re: Uninitialized variables and F37

2022-01-27 Thread Christian Stadelmann
Hi Mark, > Of course gcc -fsanitize=undefined cannot be used on production code. Why not? Will it find too many errors? Kind regards, Chris ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedora

Re: CVE-2021-4034: why is pkexec still a thing?

2022-01-27 Thread Christian Stadelmann
Hi Adam, thanks for asking this question! Due to similar horrible bugs before, I have uninstalled sudo and friends, but I never managed to uninstall pkexec due to those dependencies. > The issue and some of the comments around it prompted me to wonder - > why is `pkexec` still a thing? Particul

Re: CVE-2021-4034: why is pkexec still a thing?

2022-01-28 Thread Christian Stadelmann
Hi Ondřej, you wrote: > also gvfs uses pkexec currently to start gvfsd-admin backend... The gvfs .spec file does not reflect that so it may fail on a system without polkit installed. Is this by intention? If no, I've created a PR: https://src.fedoraproject.org/rpms/gvfs/pull-request/2 Feel fre

cwickert: Unresponsive package maintainer

2018-05-20 Thread Christian Stadelmann
As per step 4 of Policy for nonresponsive package maintainers [1], I'm asking here whether anyone knows cwickert (Christoph Wickert), who is maintainer of the different packages including gtkhash, and has a way of contacting him/her. This package is quite outdated as it has not seen an update in

Re: F29 System Wide Change: Strong crypto settings: phase 2

2018-06-02 Thread Christian Stadelmann
> On Fri, Jun 01, 2018 at 01:40:58PM +0200, Jan Kurik wrote: > What is the availibility of TLS 1.2 vs 1.1/1.0 on the internet ? > ie how likely is this to break the ability of users to access websites > they care about ? There is quite a lot, sadly. I'd say about 0.1…1% of all internet sites of my

Re: F29 System Wide Change: Strong crypto settings: phase 2

2018-06-02 Thread Christian Stadelmann
I just saw that SSL pulse has data on TLS versions supported under the "Protocol Support" section. It shows that 8.1% of all websites don't have TLS 1.2 support. Surely, this data is not weighted by real-world usage nor by how it will affect people, but it does sort of speak against this radical

Re: F29 System Wide Change: Strong crypto settings: phase 2

2018-06-05 Thread Christian Stadelmann
"Fallback option" always smells like "protocol downgrade attack". This would undermine the idea of a crypto policy. Anyway, implementing it seems way out of scope for the crypto policy. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscr

Re: The future of legacy BIOS support in Fedora.

2021-07-06 Thread Christian Stadelmann
> […] and move to uefi only supported boot which > has been available on any common intel based x86 platform since atleast > 2005. (U)EFI was not available for the general market in 2005 (except on Apple devices maybe). It was introduced around 2011. I own 2 devices which are booting with non-