Re: [gentoo-dev] [RFC] Removing separate "security supported" arch list

2021-10-22 Thread Thomas Deutschmann
feedback and is accepted by users and didn't cause any problems (can't remember that we ever got GLSA feedback for other architectures than amd64 or x86). -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description

Re: [gentoo-dev] [RFC] Moving more architectures to ~arch only

2021-10-19 Thread Thomas Deutschmann
entoo.org/gentoo-dev/message/a3c7a6cb7596a5ff9102e4d819a52d9c -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [RFC] Moving more architectures to ~arch only

2021-10-18 Thread Thomas Deutschmann
hat Gentoo Vulnerability Treatment Policy and HPPA isn't listed in supported architectures. That problem was resolved in 2018 [1]. [1] https://archives.gentoo.org/gentoo-announce/message/196e45cde209d1ed25bd42e679739cf5 -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713

Re: [gentoo-dev] [RFC] Moving more architectures to ~arch only

2021-10-17 Thread Thomas Deutschmann
to expect to change by this keyword change and why you want to change current status at all (motivation). -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [PATCH] metadata/install-qa-check.d: add 60tmpfiles-path QA check

2021-08-09 Thread Thomas Deutschmann
;. I am pretty sure that as a ComRel member you will abstain from this case as you seem to be superior. I mean you are publicly attacking me for 10+ months, rejected any attempt from my side when I tried to speak with you to get things sorted and now you showed how biased your are... -- Regards

Re: [gentoo-dev] [PATCH] metadata/install-qa-check.d: add 60tmpfiles-path QA check

2021-08-04 Thread Thomas Deutschmann
the idea of having such a check: To notice something like that, just in case ;-) -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [PATCH] metadata/install-qa-check.d: add 60tmpfiles-path QA check

2021-08-03 Thread Thomas Deutschmann
should install below /usr. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [PATCH] 2021-08-01-tcpd-disabled: Remove USE=tcpd from make.defaults

2021-07-28 Thread Thomas Deutschmann
/news/2021-07-23-libxcrypt-migration/2021-07-23-libxcrypt-migration.en.txt # emerge -p mail-mta/postfix [...] > * IMPORTANT: 1 news items need reading for repository 'gentoo'. > * Use eselect news read to view new items. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4D

Re: [gentoo-dev] [RFC] Removing SHA512 hash from Manifests

2021-07-26 Thread Thomas Deutschmann
On 2021-07-25 08:27, Michał Górny wrote: On Sun, 2021-07-25 at 01:12 +0200, Thomas Deutschmann wrote: I don't understand. Isn't it the same motion we put down just 2 months ago [1]? Or is this something new? If this isn't something new, what has changed since May [2]? Apparently it has

Re: [gentoo-dev] [RFC] Removing SHA512 hash from Manifests

2021-07-24 Thread Thomas Deutschmann
[2] https://projects.gentoo.org/council/meeting-logs/20210509.txt -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [RFC] Changes to EAPI ban workflow

2021-07-12 Thread Thomas Deutschmann
is more likely to cause more stale packages/ignored bugs assuming these maintainer didn't do that for fun or wilful ignorance. At the moment, the whole idea of creating a policy for that problem sounds like shooting sparrows with cannons. But maybe I am missing something... -- Regards, Thomas

Re: [gentoo-dev] [PATCH] 2021-07-09-systemd-tmpfiles: re-add news item

2021-07-11 Thread Thomas Deutschmann
w.gentoo.org/support/security/vulnerability-treatment-policy.html [3] https://devmanual.gentoo.org/function-reference/install-functions/ [4] https://bugs.gentoo.org/704914 -- Regards, Thomas Deutschmann / Gentoo Security Team fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_s

Re: [gentoo-dev] 'pax_kernel' USE flag

2021-07-07 Thread Thomas Deutschmann
On 2021-07-07 05:05, Matt Turner wrote: On Tue, Jul 6, 2021 at 7:41 PM Thomas Deutschmann wrote: As you probably know, I am not a Linux desktop user (yet). My complete experience with that PaX stuff is limited to servers. Maybe I've misunderstood what you meant. You don't use Linux

Re: [gentoo-dev] 'pax_kernel' USE flag

2021-07-06 Thread Thomas Deutschmann
On 2021-06-23 08:43, Matt Turner wrote: On Tue, Jun 22, 2021 at 3:19 PM Thomas Deutschmann wrote: The PaX community in Gentoo is still big and active. Many Gentoo users received free access to upstream sources or became paying customers. It's just not available for everyone for free/without

Re: [gentoo-dev] 'pax_kernel' USE flag

2021-06-22 Thread Thomas Deutschmann
of PaX support in the packages listed above? I can only speak for icedtea and nodejs which are working fine. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [RFC] Should we switch IRC client defaults off Freenode?

2021-06-16 Thread Thomas Deutschmann
ay. There is no need for us take additional actions against freenode. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [RFC] Should we switch IRC client defaults off Freenode?

2021-06-16 Thread Thomas Deutschmann
. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

[gentoo-dev] Last rites: app-emulation/xen-pvgrub

2021-06-11 Thread Thomas Deutschmann
# Tomáš Mózes (2021-06-10) # Based on unsupported grub-legacy, replaced by # pvgrub2. # Removal on 2021-07-08. Bug #790668. app-emulation/xen-pvgrub -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description

Re: [gentoo-dev] News item: sys-libs/db old SLOT removal

2021-05-28 Thread Thomas Deutschmann
, such as the removal of the client-server architecture and the SQL API between 18.1.32 and 18.1.40. This paragraph doesn't belong into a news item. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP

Re: [gentoo-dev] timezone configuration - why copying, not symlinking /etc/localtime ?

2021-03-21 Thread Thomas Deutschmann
PS: Even Debian is mentioning "to follow systemd" when they updated their tzdata package end of 2015, https://bugs.debian.org/803144. OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] timezone configuration - why copying, not symlinking /etc/localtime ?

2021-03-21 Thread Thomas Deutschmann
? I doubt that systemd will even think about removing what I believe to be a false warning when systemd detects that /etc/localtime is a regular file. So let's focus on dealing with the fallout... -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7

Re: [gentoo-dev] timezone configuration - why copying, not symlinking /etc/localtime ?

2021-03-21 Thread Thomas Deutschmann
without mentioning a reason. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [News item review] V2 Chromium access to Google services

2021-03-08 Thread Thomas Deutschmann
if you are going to support that) or add reference to [2] again.> -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [News item review v2] Python preference to follow PYTHON_TARGETS

2021-01-24 Thread Thomas Deutschmann
retain old, well established behavior across all slotable packages anymore. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] Packages up for grabs: dev-db/percona-xtrabackup

2021-01-20 Thread Thomas Deutschmann
Hi, mysql project will take this package. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

[gentoo-dev] [PATCH v3] acct-user.eclass: allow opt-out of user modification

2021-01-08 Thread Thomas Deutschmann
administrator to disable modification of any existing user. Note: Lock/unlock when acct-* package will be installed/removed will still happen. Signed-off-by: Thomas Deutschmann --- v3: - Fixed eclass documentation - Honor 80 chars limit - Prefixed internal variable

Re: [gentoo-dev] [PATCH v2] acct-user.eclass: allow opt-out of user modification

2021-01-08 Thread Thomas Deutschmann
to _ACCT_USER_ALREADY_EXISTS? Then _ACCT_USER_ALREADY_EXISTS would deviate from ACCT_USER_NAME which has no underscore prefix and is also marked as internal variable. Or should I fix both? -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5

[gentoo-dev] [PATCH v2] acct-user.eclass: allow opt-out of user modification

2021-01-08 Thread Thomas Deutschmann
administrator to disable modification of any existing user. Note: Lock/unlock when acct-* package will be installed/removed will still happen. Signed-off-by: Thomas Deutschmann --- v2: Keep current behavior; Add opt-out eclass/acct-user.eclass | 25 + 1 file changed

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-08 Thread Thomas Deutschmann
lts on this implementation detail. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-08 Thread Thomas Deutschmann
ething new just because a group believes there is no flaw and everyone else having problems are doing things wrong so this group is rejecting any attempts to address the problem? -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5

Re: [gentoo-dev] Suggestion: Trying to locate and remove unused dev- & media-libs?

2021-01-08 Thread Thomas Deutschmann
Hi, please forget my previous mail. I was informed that I misread your mail, sorry about that! -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-08 Thread Thomas Deutschmann
. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-08 Thread Thomas Deutschmann
implementing the idea outlined by Robin or what Michael said about /etc/users.d and user-update tool, this is highly appreciated but will probably not happen anytime soon. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5

Re: [gentoo-dev] Suggestion: Trying to locate and remove unused dev- & media-libs?

2021-01-08 Thread Thomas Deutschmann
Hi, I wonder how you composed this list. If you just checked if there is any revdep, the check was probably useless: For example, dev-libs/cyberjack is up-to-date, has an active dev as maintainer and is required for any ReinerSCT chipcard reader. -- Regards, Thomas Deutschmann

Re: [gentoo-dev] [PATCH 1/2] acct-user.eclass: Support ACCT_USER_ID override

2021-01-06 Thread Thomas Deutschmann
it. And it doesn't matter if I apply the role to a Gentoo, Debian, Ubuntu or RHEL box... ;) So I am not blocking ACCT_USER_$foo if anyone really believe it would help them. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5

Re: [gentoo-dev] [PATCH 1/2] acct-user.eclass: Support ACCT_USER_ID override

2021-01-06 Thread Thomas Deutschmann
variable and be able to detect the override to have them logged. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5

Re: [gentoo-dev] [PATCH 1/2] acct-user.eclass: Support ACCT_USER_ID override

2021-01-06 Thread Thomas Deutschmann
to differentiate between values set by acct-* ebuild and user override)? Of course this won't allow something like `ACCT_USER_ID=42 emerge ` but I am not sure if this is an implementation goal. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849

Re: [gentoo-dev] Re: [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-04 Thread Thomas Deutschmann
concerns. But I still wonder if building such a system is worth it... I mean, it would be nice to have. Maybe we could build upon such a system to do same for (changed) file permissions... -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5

Re: [gentoo-dev] Re: [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-04 Thread Thomas Deutschmann
un said users-update command or make use of INSTALL_MASK. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [PATCH] acct-user.eclass: Support var overrides for user properties

2021-01-04 Thread Thomas Deutschmann
. This will improve the overlay situation and can be seen as overall improvement but it doesn't address any shared concerns nor is it a replacement for the proposed 'acct-user.eclass: don't modify existing user by default' patch. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-04 Thread Thomas Deutschmann
in my memcached/redis example. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-04 Thread Thomas Deutschmann
On 2021-01-04 17:30, Thomas Deutschmann wrote: On 2021-01-04 17:28, Michał Górny wrote: It must be a bug in your version of the eclass.  I've just reemerged acct-group/wheel and to*my great surprise*  I'm still there.  How unexpected! That's why I wrote >  (luckily groups like wheel do

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-04 Thread Thomas Deutschmann
ser/wheel because otherwise this group would get cleaned (reset), too. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-04 Thread Thomas Deutschmann
On 2021-01-04 17:14, Michał Górny wrote: as long as it spews a big fat ewarn that the user loses the right to support. Could you please elaborate this a little bit more? I cannot agree with the way I understand this at the moment but I might miss your point. -- Regards, Thomas Deutschmann

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-04 Thread Thomas Deutschmann
slap stick to the whole idea. That's why I am saying that we don't just need an opt-out option, that's why I am argue that all this stuff has to be opt-in by default. It's something special and unique in Gentoo. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-04 Thread Thomas Deutschmann
aintainers are pushing their vision of how to run the package, it's not. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5

Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-04 Thread Thomas Deutschmann
mes users are making changes we wouldn't do, not recommend or just don't understand at first. That all doesn't matter: We have to keep in mind that these aren't our systems and we have to respect whatever the user did on their system. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr:

[gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-03 Thread Thomas Deutschmann
opt-in by setting ACCT_USER_ALLOW_EXISTING_USER_TO_BE_MODIFIED to a non-zero value in their make.conf. Signed-off-by: Thomas Deutschmann --- eclass/acct-user.eclass | 40 ++-- 1 file changed, 38 insertions(+), 2 deletions(-) diff --git a/eclass/acct-user.eclass

Re: [gentoo-dev] possible additional tag for GLEP66: Pending

2020-12-23 Thread Thomas Deutschmann
that you have to spend the same amount of time again before you can finally merge. -- Regards, Thomas Deutschmann / Gentoo Security Team fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5

RE: [gentoo-dev] Packages up for grabs due to rafaelmartins' retirement

2020-12-21 Thread Thomas Deutschmann
Hi, I took > app-backup/tarsnap -- Regards, Thomas openpgp-digital-signature.asc Description: PGP signature

Re: [gentoo-dev] [PATCH v2] glep-0063: Add section about the Gentoo keyserver

2020-12-17 Thread Thomas Deutschmann
_to_the_keyserver) That's all I would do to keep as many details out of the specs. But maybe I am the only one who is so strict about the spec... I am just saying and asking for comments. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5

Re: [gentoo-dev] [PATCH v2] glep-0063: Add section about the Gentoo keyserver

2020-12-17 Thread Thomas Deutschmann
into 'specs'. We maybe can talk about adding just a reference link to the Wiki guide but I don't believe we should add this to GLEP. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital

RE: [gentoo-dev] GPG key refresh

2020-12-15 Thread Thomas Deutschmann
Hi, glad it's now working for you. In the meanwhile we are looking into issues with the European Gentoo server  > And FWIW this sentence is a little misleading if the SKS refresh > frequency is zero =) > >The SKS keyserver pool can take much longer to replicate over the >keyserver

RE: [gentoo-dev] GPG key refresh

2020-12-15 Thread Thomas Deutschmann
Hi, what exactly did you do already? Did you uploaded to our internal key server? You can only upload through dev.gentoo.org, see https://wiki.gentoo.org/wiki/Project:Infrastructure/Generating_GLEP_63_based_OpenPGP_keys#Submit_your_new_key_to_the_keyserver However, you can pull from this

Re: [gentoo-dev] PSA: switching default tmpfiles virtual provider

2020-11-26 Thread Thomas Deutschmann
systemd's implementation is more secure than OpenTmpfiles' implementation when you are still able to escalate privileges is very misleading. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

Re: [gentoo-dev] PSA: switching default tmpfiles virtual provider

2020-11-26 Thread Thomas Deutschmann
this directory). PS: Just to avoid any misunderstandings: OpenTmpfiles should of course try to fix/avoid this problem if possible. Security is a layered process (like an onion) and having multiple safe-guards is always a good thing. -- Regards, Thomas Deutschmann / Gentoo Security Team fpr: C4DD 695F

Re: [gentoo-dev] Pushing to distfiles?

2020-11-14 Thread Thomas Deutschmann
, you have to get upstream's attention to implement this. And it's not just GitHub, don't forget about GitLab and those self-hosted GitLab instances which often don't support to upload arbitrary assets... -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638

Re: [gentoo-dev] A feedback about the CI bug reporting system

2020-11-07 Thread Thomas Deutschmann
opinion they were useful I do not agree with this conclusion. Just because developers didn't ignore you and spent additional time to understand and try to help like we normally do when we get reports from inexperienced users, doesn't mean it was a pleasure... -- Regards, Thomas Deutschmann

[gentoo-dev] RE: anongit.gentoo.org/repo/sync/gentoo.git not syncing any more?

2020-10-28 Thread Thomas Deutschmann
Hi, we are aware and are currently look into this. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 openpgp-digital-signature.asc Description: PGP signature

[gentoo-dev] Last-rites: dev-perl/ZMQ-LibZMQ3

2020-10-25 Thread Thomas Deutschmann
# Thomas Deutschmann (2020-10-26) # Depends on net-libs/zeromq-3 which is scheduled for removal. # Removal in 30 days. Bug #741454. dev-perl/ZMQ-LibZMQ3 -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description

[gentoo-dev] Last-rites: dev-perl/ZMQ-LibZMQ2

2020-10-25 Thread Thomas Deutschmann
# Thomas Deutschmann (2020-10-26) # Depends on net-libs/zeromq-2 which is scheduled for removal. # Removal in 30 days. Bug #741454. dev-perl/ZMQ-LibZMQ2 -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description

Re: [gentoo-dev] [PATCH 1/5] verify-sig.eclass: New eclass to verify OpenPGP sigs

2020-10-11 Thread Thomas Deutschmann
On 2020-10-10 22:36, Michał Górny wrote: On Sat, 2020-10-10 at 22:10 +0200, Thomas Deutschmann wrote: Another example for something that was not thought to the end and which was rushed and pushed to our users. You start this mail with an insult to me. Why do you keep doing this? Do you feel

Re: [gentoo-dev] [PATCH 1/5] verify-sig.eclass: New eclass to verify OpenPGP sigs

2020-10-10 Thread Thomas Deutschmann
anything it cannot do. -- Regards, Thomas Deutschmann / Gentoo Security Team fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature

[gentoo-dev] [RFC] Services and software which is critical for Gentoo should be developed/run in Gentoo namespace

2020-09-13 Thread Thomas Deutschmann
-- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] rfc: switching default udev provider for new systems to udev

2020-08-10 Thread Thomas Deutschmann
On 2020-08-10 14:07, Michał Górny wrote: > ...or a revert of a change made for change's sake. That's a bold statement for an unambiguous 7-0 decision as seen in https://bugs.gentoo.org/575718. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1

Re: [gentoo-dev] rfc: switching default udev provider for new systems to udev

2020-08-10 Thread Thomas Deutschmann
lk about ditching eudev in general... So for me it still looks like change for change's sake without a real reason. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] rfc: switching default udev provider for new systems to udev

2020-08-09 Thread Thomas Deutschmann
-fs/udev? -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] News item: Multiple root kernel command-line arguments

2020-08-06 Thread Thomas Deutschmann
should teach kexec runscript to return persistent name instead (utilizing lsblk for example) but this will raises question like what to do if tools aren't available and maybe user's start environment can't even handle root=UUID=... value :/ -- Regards, Thomas Deutschmann / Gentoo Linux Developer C

Re: [gentoo-dev] News item: Multiple root kernel command-line arguments

2020-08-06 Thread Thomas Deutschmann
d believe that avoiding that has much more value than avoid a problem like an unbootable system for just a few people (and for headless/servers this is a major problem in case you cannot trigger remote reboot)... ¯\_(ツ)_/¯ -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24

Re: [gentoo-dev] News item: Multiple root kernel command-line arguments

2020-08-06 Thread Thomas Deutschmann
ommon) you maybe also appending additional root argument which has the potential to cause boot failures in case you are using non-permanent device names and something will be different in start environment. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7

Re: [gentoo-dev] News item: Multiple root kernel command-line arguments

2020-08-06 Thread Thomas Deutschmann
ng that only for people who have genkernel installed would miss a bunch of users. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] News item: Multiple root kernel command-line arguments

2020-08-06 Thread Thomas Deutschmann
ll help someone who didn't read documentation before or just didn't realize the obvious risk he/she is taking when using non-persistent names ("It worked that way for me past 15 years!") I believe it has served its purpose. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F

[gentoo-dev] News item v2: Multiple root kernel command-line arguments

2020-08-06 Thread Thomas Deutschmann
Hi, here's v2 based on some IRC feedback (grammar- and punctuation-related) I am planning to add for tomorrow. --- Title: Multiple root kernel command-line arguments Author: Thomas Deutschmann Posted: 2020-08-05 Revision: 1 News-Item-Format: 2.0 Due to genkernel-4.1 development which

[gentoo-dev] News item: Multiple root kernel command-line arguments

2020-08-05 Thread Thomas Deutschmann
://gitweb.gentoo.org/repo/gentoo.git/tree/sys-apps/kexec-tools/kexec-tools-2.0.20-r3.ebuild?id=61c03ffab76740c0420e3c8a3185d047d461f7a7#n111 --- Title: Multiple root kernel command-line arguments Author: Thomas Deutschmann Posted: 2020-08-05 Revision: 1 News-Item-Format: 2.0 Due to genkernel-4.1 development

Re: [gentoo-dev] Last rites: */*: More Py2 stuff

2020-07-29 Thread Thomas Deutschmann
ot even what happened. And yes, I probably wouldn't have notice this and wouldn't care if only <3 were masked. But again, that's not what has happened. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] Last rites: */*: More Py2 stuff

2020-07-29 Thread Thomas Deutschmann
ptop. Thanks for > nothing. ...and not just because of net-nntp/sabnzbd like this thread has shown. I followed Gentoo policy when I reverted a broken commit. If can only urge you to revise pkg list and pay more attention for your next commit. -- Regards, Thomas Deutschmann / Gentoo Linux Developer

Re: [gentoo-dev] Last rites: */*: More Py2 stuff

2020-07-29 Thread Thomas Deutschmann
ork. C'mon. You even added net-nntp/sabnzbd to that list again which created a lot of drama beginning of this year. Please don't try to say you reviewed anything... -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Desc

Re: [gentoo-dev] Last rites: */*: More Py2 stuff

2020-07-29 Thread Thomas Deutschmann
FYI: I reverted the entire commit like this thread and bugs clearly show that this list wasn't even reviewed/checked: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b76ee2f3e20b55d268ec291a1a1328cc047f5a04 -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1

Re: [gentoo-dev] */*: Mask Py2 only packages

2020-06-24 Thread Thomas Deutschmann
ll their packages because you want to. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] */*: Mask Py2 only packages

2020-06-20 Thread Thomas Deutschmann
not user-friendly. It doesn't even has deps on other Python packages blocking your cleanup delusion. -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

RE: [gentoo-dev] Value of Continuous integration vs Code Review / Pull Requests

2020-05-27 Thread Thomas Deutschmann
happened). It would be cool if our solution would be aware of this and could handle this somehow. But I guess we would have to create our own solution for this... -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 openpgp-digital

Re: [gentoo-dev] [RFC] Should NATTkA reject keywordreqs for packages with -arch (-*) keywords?

2020-05-05 Thread Thomas Deutschmann
ituation changing. -arch is so rare that I don't recall ever seeing > it. In either case, restoring an arch should be an explicit action. +1 -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] [RFC] Ideas for gentoostats implementation

2020-05-04 Thread Thomas Deutschmann
On 2020-04-26 15:46, Kent Fredric wrote: > On Sun, 26 Apr 2020 14:38:54 +0200 > Thomas Deutschmann wrote: > >> Let's assume we will get reports that app-misc/foo is only installed 20 >> times. If you are going to judge based on this data, "Obviously, nobody >> i

Re: [gentoo-dev] [RFC] Ideas for gentoostats implementation

2020-05-04 Thread Thomas Deutschmann
ould have data for distfiles.gentoo.org this won't help us. See how Gentoo works: If you follow handbook you will pick a local/regional mirror. Now all these users are suddenly 'disconnected' from the download stats... -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713

Re: [gentoo-dev] Cleaning up the installation handbook (Legacy boot / MBR / ...)

2020-05-03 Thread Thomas Deutschmann
share why you believe this has to be removed. I assume you are talking about https://wiki.gentoo.org/wiki/Handbook:AMD64/Installation/Disks and for me it's not a *mess*. Maybe move it to a 'legacy' sub page but it's too early for complete removal from my P.O.V. -- Regards, Thomas Deutschmann / Gen

Re: [gentoo-dev] [RFC] Ideas for gentoostats implementation

2020-04-26 Thread Thomas Deutschmann
r* point in their current situation. :/ -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

[gentoo-dev] Re: [PATCH] rpm.eclass: use BDEPEND for EAPI 7

2020-04-20 Thread Thomas Deutschmann
Hi, merged, thanks: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=606c745e611c216df15568bc8655e2781dc11095 -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] Stabilizations and src_test

2020-04-12 Thread Thomas Deutschmann
of effort/work. Really, if you call for stabilization and haven't tested your own package you are offloading work to others which is not nice. I also dislike maintainers who simply restrict tests on first failure. But in the end it's at least a strong signal about package quality and state in Gentoo. :) --

Re: [gentoo-dev] [RFC] KEYWORDREQ and STABLEREQ keywords

2020-04-11 Thread Thomas Deutschmann
-- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] [PATCH 00/10] GLEP 72 (arches.desc) revival

2020-04-11 Thread Thomas Deutschmann
don't forget to check on your own if this is also true for your architecture because in theory the maintainer could have decided to make use of arch-depending eapply for some reason..." => Keep it simple: Stable should mean the same across all architectures -- Regards, Thomas Deutsc

Re: [gentoo-dev] zoom concerns

2020-04-07 Thread Thomas Deutschmann
you don't have when you do proper ACLs). Regarding bin/non-bin: Software has bugs. Some software tends to have more issues. Just because we have the source code and compile software on user's system doesn't make the application itself more secure than the provided binary package. -- Regards, T

Re: [gentoo-dev] zoom concerns

2020-04-07 Thread Thomas Deutschmann
sons like "No one audited the Linux version yet". But in security you don't issue warnings if you aren't sure. Because if you make false statements people will no longer trust you. But trust is everything. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1

Re: [gentoo-dev] zoom concerns

2020-04-02 Thread Thomas Deutschmann
on severity of reported vulnerabilities) we maybe decide to last-rite or apply a mask to force user awareness through forced unmask action in case they need that software. But again, this software isn't special and doesn't require further discussion from our P.O.V. -- Regards, Thomas Deutschmann

Re: [gentoo-dev] rfc: noarch keyword

2020-03-19 Thread Thomas Deutschmann
On 2020-03-19 04:03, Kent Fredric wrote: > Because that experiment basically failed. > > Bugs with that flag, basically were treated (repeatedly) like that flag > wasn't there. Hehe, maybe because of missing tooling. Common tools like tatt don't understand "ALLARCHES" :)

Re: [gentoo-dev] rfc: noarch keyword

2020-03-18 Thread Thomas Deutschmann
thing math related (no SSE2, -mfpmath=387...). So as long as we want that a package keyworded for x86 really works on old x86 hardware, we have to go the long route an test it. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 sig

Re: [gentoo-dev] Last rites: dev-python/*, python-maintained, py3.6-only, no-revdep

2020-03-07 Thread Thomas Deutschmann
ism like setting a mask to get attention), you have to deal with the fact that this is disruptive and that not everyone like that. But please, nobody is publicly shaming anyone. If you play that card, don't wonder that people will stop talking. Don't read too much into everything. -- Regards, Th

Re: [gentoo-dev] Changes made by acct-* ebuilds

2020-02-14 Thread Thomas Deutschmann
ng log and even the mail discussion before you will read that I always shared concerns about touching existing user. I was only fine because I was told "We are aware, what you described won't happen" and I didn't make a secret that I didn't had the time to fully review and test myse

Re: [gentoo-dev] Changes made by acct-* ebuilds

2020-02-14 Thread Thomas Deutschmann
ht happen with the current implementation which tries to keep user/group state like described in package. Something you will only see in Gentoo and no other distribution. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description

Re: [gentoo-dev] Changes made by acct-* ebuilds

2020-02-14 Thread Thomas Deutschmann
lly a bad default and it's breaking with existing principles you can find in most distributions: Don't touch stuff which were changed by the user. -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPG

Re: [gentoo-dev] Changes made by acct-* ebuilds

2020-02-12 Thread Thomas Deutschmann
too-dev/message/05c9b211eb18012d16302194a7bc37e6 -- Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 signature.asc Description: OpenPGP digital signature

  1   2   3   >