[EPEL-devel] Fedora EPEL 7 updates-testing report
The following Fedora EPEL 7 Security updates need testing:
Age URL
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879
debmirror-2.35-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-2f9b2cf4af
ckeditor-4.16.2-1.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-d179a438bc
libspf2-1.2.11-1.20210922git4915c308.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-37f81a6244
golang-github-prometheus-2.26.1-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
openbgpd-7.2-1.el7
rpki-client-7.3-1.el7
Details about builds:
openbgpd-7.2-1.el7 (FEDORA-EPEL-2021-d380aed307)
OpenBGPD Routing Daemon
Update Information:
OpenBGPD 7.2 This release includes the following changes to the
previous release:* Support for RFC 9072 - Extended Optional Parameters
Length for `BGP OPEN` Message* Support for RFC 8050 - MRT Format with BGP
Additional Path Extensions* Implement receive side of RFC 7911 -
Advertisement of Multiple Paths in BGP. OpenBGPD is currently not able to send
multiple paths out.* Improve checks of VRPs loaded via RTR or from the roa-
set table.* Allow to optionally specify an expiry time for `roa-set` entries
to mitigate BGP route decision making based on outdated RPKI data. OpenBGPD's
companion `rpki-client` produces `roa-set`s with the new `expires` property.
ChangeLog:
* Thu Sep 23 2021 Robert Scheck 7.2-1
- Upgrade to 7.2 (#2007210)
* Thu Jul 22 2021 Fedora Release Engineering - 7.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
References:
[ 1 ] Bug #2007210 - openbgpd-7.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2007210
rpki-client-7.3-1.el7 (FEDORA-EPEL-2021-dab7665591)
RPKI validator to support BGP Origin Validation
Update Information:
rpki-client 7.3 ===* Improve the HTTP client code (status code
handling, http proxy support, keep-alive). * In RRDP, do not access URI with
userinfo (`@`-sign). * Improve RRDP syncing by considering a notification file
serial jumping backwards as synced repository. * Make `-R` (`rsync` only) also
apply to the fetching of TA files. * Only sync `*.{cer,crl,gbr,mft,roa}` files
via `rsync` and exclude all others. * When producing output for OpenBGPd, make
use of the `roa-set expires` attribute to prevent machines from loading outdated
`roa-set`s. * In RRDP, limit the number of deltas to 300 per repo. If more
deltas exist, downloading a full snapshot is faster. * Limit the validation
depth of X509 certificate chains to 12, double the current depth seen in RPKI.
ChangeLog:
* Thu Sep 23 2021 Robert Scheck 7.3-1
- Upgrade to 7.3 (#2007447)
* Tue Sep 14 2021 Sahana Prasad - 7.2-2
- Rebuilt with OpenSSL 3.0.0
References:
[ 1 ] Bug #2007447 - rpki-client-7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2007447
___
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
[EPEL-devel] Re: python-gevent and pytest-cov in el9
On Fri, Sep 24, 2021 at 3:59 PM Josh Boyer wrote: > > https://odcs.stream.centos.org/production/CentOS-Stream-9-20210924.0/compose/CRB/x86_64/os/Packages/libuv-devel-1.42.0-1.el9.x86_64.rpm On the one hand, thank you for pointing out that this build is now available. That's good to know. On the other hand, this points at the bigger issue that dealing with the entire problem of missing packages requires a level of scripting and bookkeeping that is very difficult to keep up when building layered projects. > You could request libev-devel in the composes. The reason I did not do that in this case is that pytest-cov is an optional dependency, and we can just remove it from the Python packages instead. I'd rather reduce the dependencies on gevent to make everything faster. When I looked at gevent in EPEL 8 a month or so ago, it did not look like many packages depended on it. > I remain confused why > it has to be in the compose though, because libev and it's devel > package are accessible in the CentOS Stream 9 buildroots today. We could point at https://kojihub.stream.centos.org/kojifiles/repos/c9s-build/latest/ , but that location will not have GPG-signed builds, and the repo is not currently in https://github.com/rpm-software-management/mock/blob/main/mock-core-configs/etc/mock/templates/centos-stream-9.tpl - Ken ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[EPEL-devel] Re: python-gevent and pytest-cov in el9
On Fri, Sep 24, 2021 at 3:05 PM Josh Boyer wrote: > > On Fri, Sep 24, 2021 at 4:02 PM Neal Gompa wrote: > > > > On Fri, Sep 24, 2021 at 3:59 PM Josh Boyer wrote: > > > > > > On Fri, Sep 24, 2021 at 3:46 PM Ken Dreyer wrote: > > > > > > > > Hi folks, > > > > > > > > The RHEL 9 composes do not have libev-devel and libuv-devel, so we > > > > cannot build python-gevent on EPEL 9 easily. > > > > > > https://odcs.stream.centos.org/production/CentOS-Stream-9-20210924.0/compose/CRB/x86_64/os/Packages/libuv-devel-1.42.0-1.el9.x86_64.rpm > > > > > > You could request libev-devel in the composes. I remain confused why > > > it has to be in the compose though, because libev and it's devel > > > package are accessible in the CentOS Stream 9 buildroots today. > > > > > > > We can't use them in EPEL if they're not in CRB. > > Yes, that's what everyone keeps telling me. I don't understand why. EPEL builds against published RHEL content, not the CentOS Stream buildroot. Having a package available in the CentOS Stream buildroot doesn't make it accessible to EPEL builds. We can't change EPEL to use the CentOS Stream buildroot because that will cause some EPEL packages to not be installable on RHEL. On a related note, EPEL 9 Next _is_ being set up to build against the CentOS Stream 9 buildroot. This works for EPEL Next because it explicitly targets the next minor release of RHEL (i.e. CentOS Stream). This will allow more packages to be built, at the cost of potentially confusing packagers when their package builds successfully for EPEL 9 Next but not for EPEL 9. EPEL 8 Next currently builds against published CentOS Stream 8 content. If things go well with EPEL 9 Next using the CentOS Stream 9 buildroot, EPEL 8 Next may switch to using the CentOS Stream 8 buildroot in the future. > > josh > ___ > epel-devel mailing list -- epel-devel@lists.fedoraproject.org > To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[EPEL-devel] Re: python-gevent and pytest-cov in el9
On Fri, Sep 24, 2021 at 1:03 PM Josh Boyer wrote: > On Fri, Sep 24, 2021 at 4:02 PM Neal Gompa wrote: > > > > On Fri, Sep 24, 2021 at 3:59 PM Josh Boyer wrote: > > > > > > On Fri, Sep 24, 2021 at 3:46 PM Ken Dreyer > wrote: > > > > > > > > Hi folks, > > > > > > > > The RHEL 9 composes do not have libev-devel and libuv-devel, so we > > > > cannot build python-gevent on EPEL 9 easily. > > > > > > > https://odcs.stream.centos.org/production/CentOS-Stream-9-20210924.0/compose/CRB/x86_64/os/Packages/libuv-devel-1.42.0-1.el9.x86_64.rpm > > > > > > You could request libev-devel in the composes. I remain confused why > > > it has to be in the compose though, because libev and it's devel > > > package are accessible in the CentOS Stream 9 buildroots today. > > > > > > > We can't use them in EPEL if they're not in CRB. > > Yes, that's what everyone keeps telling me. I don't understand why. > EPEL9 will not be built again CentOS Stream 9, it will be built off RHEL 9. That is the EPEL policy. Thus, if something is not in RHEL 9, it is not available to be built in EPEL 9. It seems pretty straightforward. Troy ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[EPEL-devel] Re: python-gevent and pytest-cov in el9
On Fri, Sep 24, 2021 at 4:09 PM Neal Gompa wrote: > > On Fri, Sep 24, 2021 at 4:03 PM Josh Boyer wrote: > > > > On Fri, Sep 24, 2021 at 4:02 PM Neal Gompa wrote: > > > > > > On Fri, Sep 24, 2021 at 3:59 PM Josh Boyer wrote: > > > > > > > > On Fri, Sep 24, 2021 at 3:46 PM Ken Dreyer > > > > wrote: > > > > > > > > > > Hi folks, > > > > > > > > > > The RHEL 9 composes do not have libev-devel and libuv-devel, so we > > > > > cannot build python-gevent on EPEL 9 easily. > > > > > > > > https://odcs.stream.centos.org/production/CentOS-Stream-9-20210924.0/compose/CRB/x86_64/os/Packages/libuv-devel-1.42.0-1.el9.x86_64.rpm > > > > > > > > You could request libev-devel in the composes. I remain confused why > > > > it has to be in the compose though, because libev and it's devel > > > > package are accessible in the CentOS Stream 9 buildroots today. > > > > > > > > > > We can't use them in EPEL if they're not in CRB. > > > > Yes, that's what everyone keeps telling me. I don't understand why. > > > > Well, because outside of RHEL, everyone wants remote and local builds > to have access to the same resources and not crush the servers. Since > buildroot stuff isn't going out on the mirror network (otherwise, why > would it be separate from CRB?), it's obvious we shouldn't rely on it > for packages that people should expect to be able to build and rebuild > for RHEL. So you have access to what you want, you have a way to pull it down and get it locally, but you can't depend on it because... you're worried a multi-billion dollar company can't pay it's server and CDN bills? As to why it's separate from CRB, that's because CRB is a reflection of what is provided as part of the product. It's that simple. > And again, by Red Hat's own sword (policy), RHEL doesn't want to ship > everything needed to build stuff, so if EPEL is intended to provide > the requisite community guarantees (reproducibly buildable), we have > to work with what RHEL gives us. I think that is also EPEL falling on EPEL's own sword a bit. I think it fails to recognize that building and distributing software can be separate things. I can see the need for a developer community to be able to build, update, and rebuild software it distributes. Access to the buildroots facilitates this. We could even point mock configs at it, or propose a buildroot repo for it if people are really worried about "servers". However, in the context of something like python-gevent, an EPEL *end user* isn't going to want libuv-devel or libev-devel to be installed on their system at runtime. They have no need for it to be available in a compose. They only need python-gevent and the requisite runtime libraries, which are already provided. I think separating the personas and thinking about the requirements for each might be worth doing. I understand this is a different approach and something that looks different from the past. It's been 2+ years since the OS EPEL8 is based on has shipped and it is taking a different approach than previous releases. Every indication we have shows the next major version will continue this. I'm worried that sticking with past policies precludes EPEL from making progress on a project that we all want to see succeed. josh ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[EPEL-devel] Re: python-gevent and pytest-cov in el9
On Fri, Sep 24, 2021 at 4:03 PM Josh Boyer wrote: > > On Fri, Sep 24, 2021 at 4:02 PM Neal Gompa wrote: > > > > On Fri, Sep 24, 2021 at 3:59 PM Josh Boyer wrote: > > > > > > On Fri, Sep 24, 2021 at 3:46 PM Ken Dreyer wrote: > > > > > > > > Hi folks, > > > > > > > > The RHEL 9 composes do not have libev-devel and libuv-devel, so we > > > > cannot build python-gevent on EPEL 9 easily. > > > > > > https://odcs.stream.centos.org/production/CentOS-Stream-9-20210924.0/compose/CRB/x86_64/os/Packages/libuv-devel-1.42.0-1.el9.x86_64.rpm > > > > > > You could request libev-devel in the composes. I remain confused why > > > it has to be in the compose though, because libev and it's devel > > > package are accessible in the CentOS Stream 9 buildroots today. > > > > > > > We can't use them in EPEL if they're not in CRB. > > Yes, that's what everyone keeps telling me. I don't understand why. > Well, because outside of RHEL, everyone wants remote and local builds to have access to the same resources and not crush the servers. Since buildroot stuff isn't going out on the mirror network (otherwise, why would it be separate from CRB?), it's obvious we shouldn't rely on it for packages that people should expect to be able to build and rebuild for RHEL. And again, by Red Hat's own sword (policy), RHEL doesn't want to ship everything needed to build stuff, so if EPEL is intended to provide the requisite community guarantees (reproducibly buildable), we have to work with what RHEL gives us. -- 真実はいつも一つ！/ Always, there's only one truth! ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[EPEL-devel] Re: python-gevent and pytest-cov in el9
On Fri, Sep 24, 2021 at 4:02 PM Neal Gompa wrote: > > On Fri, Sep 24, 2021 at 3:59 PM Josh Boyer wrote: > > > > On Fri, Sep 24, 2021 at 3:46 PM Ken Dreyer wrote: > > > > > > Hi folks, > > > > > > The RHEL 9 composes do not have libev-devel and libuv-devel, so we > > > cannot build python-gevent on EPEL 9 easily. > > > > https://odcs.stream.centos.org/production/CentOS-Stream-9-20210924.0/compose/CRB/x86_64/os/Packages/libuv-devel-1.42.0-1.el9.x86_64.rpm > > > > You could request libev-devel in the composes. I remain confused why > > it has to be in the compose though, because libev and it's devel > > package are accessible in the CentOS Stream 9 buildroots today. > > > > We can't use them in EPEL if they're not in CRB. Yes, that's what everyone keeps telling me. I don't understand why. josh ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[EPEL-devel] Re: python-gevent and pytest-cov in el9
On Fri, Sep 24, 2021 at 3:59 PM Josh Boyer wrote: > > On Fri, Sep 24, 2021 at 3:46 PM Ken Dreyer wrote: > > > > Hi folks, > > > > The RHEL 9 composes do not have libev-devel and libuv-devel, so we > > cannot build python-gevent on EPEL 9 easily. > > https://odcs.stream.centos.org/production/CentOS-Stream-9-20210924.0/compose/CRB/x86_64/os/Packages/libuv-devel-1.42.0-1.el9.x86_64.rpm > > You could request libev-devel in the composes. I remain confused why > it has to be in the compose though, because libev and it's devel > package are accessible in the CentOS Stream 9 buildroots today. > We can't use them in EPEL if they're not in CRB. -- 真実はいつも一つ！/ Always, there's only one truth! ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[EPEL-devel] Re: python-gevent and pytest-cov in el9
On Fri, Sep 24, 2021 at 3:46 PM Ken Dreyer wrote: > > Hi folks, > > The RHEL 9 composes do not have libev-devel and libuv-devel, so we > cannot build python-gevent on EPEL 9 easily. https://odcs.stream.centos.org/production/CentOS-Stream-9-20210924.0/compose/CRB/x86_64/os/Packages/libuv-devel-1.42.0-1.el9.x86_64.rpm You could request libev-devel in the composes. I remain confused why it has to be in the compose though, because libev and it's devel package are accessible in the CentOS Stream 9 buildroots today. josh > (It's possible to package the missing -devel packages separately, and > I've been doing this by automatically following the NVR changes in > Stream 9's Koji for several weeks with scripts at > https://github.com/ktdreyer/ceph-el9. My conclusion is that it is so > painful that it's not sustainable to do this for years.) > > This means that python-pytest-cov and python-pytest-xdist won't be > available on epel9, since those require gevent. > > Several Python packages require python-pytest-cov because upstream > lists it in requirements.txt or tests-requirements.txt. I think we > should just patch these out in Fedora. Even apart from RHEL's > restrictions, it's not a good use of resources to run pytest-cov when > no one reviews coverage reports in the Koji logs, and we'll speed up > builds when mock doesn't have to install this spurious BuildRequires. > > Here are a list of packages where I've removed pytest-cov: > > https://src.fedoraproject.org/rpms/python-watchdog/pull-request/4 > https://src.fedoraproject.org/rpms/python-cheroot/pull-request/15 > https://src.fedoraproject.org/rpms/python-portend/pull-request/5 > https://src.fedoraproject.org/rpms/python-typing-extensions/pull-request/3 > > - Ken > ___ > epel-devel mailing list -- epel-devel@lists.fedoraproject.org > To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[EPEL-devel] python-gevent and pytest-cov in el9
Hi folks, The RHEL 9 composes do not have libev-devel and libuv-devel, so we cannot build python-gevent on EPEL 9 easily. (It's possible to package the missing -devel packages separately, and I've been doing this by automatically following the NVR changes in Stream 9's Koji for several weeks with scripts at https://github.com/ktdreyer/ceph-el9. My conclusion is that it is so painful that it's not sustainable to do this for years.) This means that python-pytest-cov and python-pytest-xdist won't be available on epel9, since those require gevent. Several Python packages require python-pytest-cov because upstream lists it in requirements.txt or tests-requirements.txt. I think we should just patch these out in Fedora. Even apart from RHEL's restrictions, it's not a good use of resources to run pytest-cov when no one reviews coverage reports in the Koji logs, and we'll speed up builds when mock doesn't have to install this spurious BuildRequires. Here are a list of packages where I've removed pytest-cov: https://src.fedoraproject.org/rpms/python-watchdog/pull-request/4 https://src.fedoraproject.org/rpms/python-cheroot/pull-request/15 https://src.fedoraproject.org/rpms/python-portend/pull-request/5 https://src.fedoraproject.org/rpms/python-typing-extensions/pull-request/3 - Ken ___ epel-devel mailing list -- epel-devel@lists.fedoraproject.org To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
