Intention to tighten RPM crypto-policy back

2023-09-19 Thread Alexander Sosedkin
Hello,

6 months ago, there's been a F38 blocker: https://pagure.io/fesco/issue/2960
Long story short:
RPM has moved to sequoia,
sequoia has started respecting crypto-policies,
Google repos have been signed with a 1024-bit DSA key,
Google Chrome was not installable => F38 blocker.
Back at the time, it's been hastily "resolved"
by relaxing RPM security through crypto-policies
just enough to tolerate that Google signature:
https://bugzilla.redhat.com/show_bug.cgi?id=2170878
https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/merge_requests/129

Since then it has been brought to my attention that
Google has now added a 4096 bit RSA key
https://www.google.com/linuxrepositories/
(EB4C 1BFD 4F04 2F6D DDCC EC91 7721 F63B D38B 4796)

Because of that, I'd like to revert that RPM policy relaxation
https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/a12f7b20638be8f872ad1995c7d2edce41c227b5
in (f39) rawhide and align RPM security with the rest of the policy.

Thoughts / feedback?
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Automate your Fedora package maintenance using Packit

2023-09-19 Thread Frantisek Lachman
Thank you everyone for your responses!

I have a few updates for you that made it to production this morning
as part of our weekly release cycle:

* Thanks to Ankur Sinha, the pull requests created by Packit now have
a clear list of tasks/reminders to check in the description. (E.g.
https://src.fedoraproject.org/rpms/python-ogr/pull-request/479)
* If you are not comfortable with lookaside uploads before the review,
you can newly set `upload_sources` to `false` and Packit won't do the
upload. The downside is, of course, the reduced benefit of the
automation since you need to do this yourself and the failed CI
builds. The default behaviour is preserved to not break the workflow
of the existing users but it's clearly mentioned in the onboarding
guide 
(https://packit.dev/docs/fedora-releases-guide#upload-archive-to-lookaside-cache).

František

On Fri, Sep 15, 2023 at 7:07 PM Adam Williamson
 wrote:
>
> On Fri, 2023-09-15 at 16:02 +0200, Frantisek Lachman wrote:
> > Thanks Dan and Daniel for the responses. You both are right. For our
> > defence, this is always setup by an existing Fedora user (=human).
> >
> > I can't speak of rel-eng (and honestly don't know) how problematic
> > this "physical removal" on request is.
> > We can at least promote the licence check more
> > and provide instructions on what to do if something does not fulfil the 
> > rules.
> > (E.g. as a part of the issue Ankur created and mentioned
> > (https://github.com/packit/packit/issues/2035))
> >
> > Does anyone have any realistic solution (or an improvement) to this
> > for Packit itself?
> >
> > We can also stop uploading the source to the lookaside cache (or make
> > it configurable),
> > but the benefit of such automation is significantly reduced.
>
> To be honest it seems a little unfair to 'pick on' Packit about this.
>
> practically speaking, we do not somehow enforce that every packager
> does a thorough license review of every new upstream version of
> everything they package before uploading it to the lookaside. We do not
> really have any protections against packagers running scratch builds
> with unredistributable content. Ultimately, we are trusting packagers
> to do this right.
>
> Packit is intended for folks/teams who are both upstream maintainers
> and downstream packagers. Such folks should already be aware of the
> licensing of the upstream and able to address any issues with it. They
> likely already pull new releases of their project downstream as a
> matter of course. Automating it doesn't really seem like it's exposing
> us to any radical increase in potential licensing problems.
> --
> Adam Williamson (he/him/his)
> Fedora QA
> Fedora Chat: @adamwill:fedora.im | Mastodon: @ad...@fosstodon.org
> https://www.happyassassin.net
>
>
>
> ___
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-le...@lists.fedoraproject.org
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
> Do not reply to spam, report it: 
> https://pagure.io/fedora-infrastructure/new_issue
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Intention to tighten RPM crypto-policy back

2023-09-19 Thread Alexander Sosedkin
On Tue, Sep 19, 2023 at 11:19 AM Alexander Sosedkin
 wrote:
>
> Hello,
>
> 6 months ago, there's been a F38 blocker: https://pagure.io/fesco/issue/2960
> Long story short:
> RPM has moved to sequoia,
> sequoia has started respecting crypto-policies,
> Google repos have been signed with a 1024-bit DSA key,
> Google Chrome was not installable => F38 blocker.
> Back at the time, it's been hastily "resolved"
> by relaxing RPM security through crypto-policies
> just enough to tolerate that Google signature:
> https://bugzilla.redhat.com/show_bug.cgi?id=2170878
> https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/merge_requests/129
>
> Since then it has been brought to my attention that
> Google has now added a 4096 bit RSA key
> https://www.google.com/linuxrepositories/
> (EB4C 1BFD 4F04 2F6D DDCC EC91 7721 F63B D38B 4796)
>
> Because of that, I'd like to revert that RPM policy relaxation
> https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/a12f7b20638be8f872ad1995c7d2edce41c227b5
> in (f39) rawhide and align RPM security with the rest of the policy.

Correction, f40 rawhide.

> Thoughts / feedback?
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Automate your Fedora package maintenance using Packit

2023-09-19 Thread Michael J Gruber
Am Di., 19. Sept. 2023 um 11:24 Uhr schrieb Frantisek Lachman
:
>
> Thank you everyone for your responses!
>
> I have a few updates for you that made it to production this morning
> as part of our weekly release cycle:
>
> * Thanks to Ankur Sinha, the pull requests created by Packit now have
> a clear list of tasks/reminders to check in the description. (E.g.
> https://src.fedoraproject.org/rpms/python-ogr/pull-request/479)

Thanks!

Maybe add: "check the autogenerated changelog" ;-)

(I know 479 was not merged, but the diff looks funny.)
Michael
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Intention to tighten RPM crypto-policy back

2023-09-19 Thread Miroslav Suchý

Dne 19. 09. 23 v 11:19 Alexander Sosedkin napsal(a):
Because of that, I'd like to revert that RPM policy relaxation 
https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/a12f7b20638be8f872ad1995c7d2edce41c227b5 in (f39) 
rawhide and align RPM security with the rest of the policy. Thoughts / feedback?


You can try to load the keys from this collection under the tightened policy:

https://github.com/xsuchy/distribution-gpg-keys/

--
Miroslav Suchy, RHCA
Red Hat, Manager, Packit and CPT, #brno, #fedora-buildsys
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Fedora rawhide compose report: 20230919.n.0 changes

2023-09-19 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20230918.n.0
NEW: Fedora-Rawhide-20230919.n.0

= SUMMARY =
Added images:4
Dropped images:  2
Added packages:  1
Dropped packages:0
Upgraded packages:   96
Downgraded packages: 0

Size of added packages:  24.91 KiB
Size of dropped packages:0 B
Size of upgraded packages:   9.24 GiB
Size of downgraded packages: 0 B

Size change of upgraded packages:   9.69 MiB
Size change of downgraded packages: 0 B

= ADDED IMAGES =
Image: Kinoite dvd-ostree ppc64le
Path: Kinoite/ppc64le/iso/Fedora-Kinoite-ostree-ppc64le-Rawhide-20230919.n.0.iso
Image: Kinoite dvd-ostree aarch64
Path: Kinoite/aarch64/iso/Fedora-Kinoite-ostree-aarch64-Rawhide-20230919.n.0.iso
Image: i3 live aarch64
Path: Spins/aarch64/iso/Fedora-i3-Live-aarch64-Rawhide-20230919.n.0.iso
Image: Onyx dvd-ostree x86_64
Path: Onyx/x86_64/iso/Fedora-Onyx-ostree-x86_64-Rawhide-20230919.n.0.iso

= DROPPED IMAGES =
Image: Kinoite dvd-ostree x86_64
Path: Kinoite/x86_64/iso/Fedora-Kinoite-ostree-x86_64-Rawhide-20230918.n.0.iso
Image: Sericea dvd-ostree x86_64
Path: Sericea/x86_64/iso/Fedora-Sericea-ostree-x86_64-Rawhide-20230918.n.0.iso

= ADDED PACKAGES =
Package: rust-libcst_derive-0.1.0-1.fc40
Summary: Proc macro helpers for libcst
RPMs:rust-libcst_derive+default-devel rust-libcst_derive-devel
Size:24.91 KiB


= DROPPED PACKAGES =

= UPGRADED PACKAGES =
Package:  archlinux-keyring-20230918-1.fc40
Old package:  archlinux-keyring-20230821-2.fc40
Summary:  GPG keys used by Arch distribution to sign packages
RPMs: archlinux-keyring
Size: 1.15 MiB
Size change:  1.85 KiB
Changelog:
  * Mon Sep 18 2023 Zbigniew J??drzejewski-Szmek  - 
20230918-1
  - Version 20230918 (rhbz#2239389)


Package:  binaryen-116-1.fc40
Old package:  binaryen-111-1.fc38
Summary:  Compiler and toolchain infrastructure library for WebAssembly
RPMs: binaryen
Size: 13.10 MiB
Size change:  1.49 MiB
Changelog:
  * Wed Jan 18 2023 Fedora Release Engineering  - 
111-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

  * Wed Jul 19 2023 Fedora Release Engineering  - 
111-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

  * Thu Jul 27 2023 Dominik Mierzejewski  116-1
  - update to 116 (#2169040)
  - drop obsolete patches
  - work around/fix test failures


Package:  cargo2rpm-0.1.8-1.fc40
Old package:  cargo2rpm-0.1.7-1.fc39
Summary:  Translation layer between cargo and RPM
RPMs: cargo2rpm
Size: 168.02 KiB
Size change:  1.54 KiB
Changelog:
  * Mon Sep 18 2023 Fabio Valentini  - 0.1.8-1
  - Update to version 0.1.8; Fixes RHBZ#2239513


Package:  chromium-117.0.5938.88-1.fc40
Old package:  chromium-117.0.5938.62-1.fc40
Summary:  A WebKit (Blink) powered web browser that Google doesn't want you 
to use
RPMs: chromedriver chromium chromium-common chromium-headless
Size: 264.18 MiB
Size change:  100.52 KiB
Changelog:
  * Sun Sep 17 2023 Than Ngo  - 117.0.5938.88-1
  - update to 117.0.5938.88


Package:  container-selinux-2:2.222.0-1.fc40
Old package:  container-selinux-2:2.221.1-1.fc40
Summary:  SELinux policies for container runtimes
RPMs: container-selinux
Size: 54.62 KiB
Size change:  -327 B
Changelog:
  * Sun Sep 17 2023 Packit  - 2:2.222.0-1
  - [packit] 2.222.0 upstream release


Package:  dnf5-5.1.4-1.fc40
Old package:  dnf5-5.1.2-1.fc40
Summary:  Command-line package manager
RPMs: dnf5 dnf5-devel dnf5-plugins dnf5daemon-client dnf5daemon-server 
libdnf5 libdnf5-cli libdnf5-cli-devel libdnf5-devel libdnf5-plugin-actions 
perl-libdnf5 perl-libdnf5-cli python3-libdnf5 python3-libdnf5-cli 
python3-libdnf5-python-plugins-loader ruby-libdnf5 ruby-libdnf5-cli
Size: 27.91 MiB
Size change:  384.50 KiB
Changelog:
  * Mon Sep 18 2023 Packit  - 5.1.4-1
  - Fix Builds on i386
  - Print error if unsupported architecture used
  - argument_parser: New error class for invalid value
  - Allow obsoletion of protected packages
  - Add support for repository configuration in /usr


Package:  dnstwist-20230918-1.fc40
Old package:  dnstwist-20230509-2.fc39
Summary:  Domain name permutation engine
RPMs: dnstwist
Size: 36.35 KiB
Size change:  1.29 KiB
Changelog:
  * Mon Sep 18 2023 Artur Frenszek-Iwicki  - 20230918-1
  - Update to v20230918


Package:  dovecot-1:2.3.21-1.fc40
Old package:  dovecot-1:2.3.20-6.fc39
Summary:  Secure imap and pop3 server
RPMs: dovecot dovecot-devel dovecot-mysql dovecot-pgsql 
dovecot-pigeonhole
Size: 30.24 MiB
Size change:  85.79 KiB
Changelog:
  * Mon Sep 18 2023 Michal Hlavinka  - 1:2.3.21-1
  - updated to 2.3.21(2239134)


Package:  electrum-4.3.4-2.fc40
Old package:  electrum-4.3.4-1.fc39
Summary:  A lightweight Bitcoin Client
RPMs: electrum
Size: 8.02 MiB
Size change:  -47.07 KiB
Changelog:
  * Wed Jul 19 2023 Fedora Re

Fedora 39 compose report: 20230919.n.0 changes

2023-09-19 Thread Fedora Branched Report
OLD: Fedora-39-20230918.n.0
NEW: Fedora-39-20230919.n.0

= SUMMARY =
Added images:0
Dropped images:  1
Added packages:  2
Dropped packages:0
Upgraded packages:   10
Downgraded packages: 0

Size of added packages:  701.12 KiB
Size of dropped packages:0 B
Size of upgraded packages:   10.90 MiB
Size of downgraded packages: 0 B

Size change of upgraded packages:   203.51 KiB
Size change of downgraded packages: 0 B

= ADDED IMAGES =

= DROPPED IMAGES =
Image: KDE live aarch64
Path: Spins/aarch64/iso/Fedora-KDE-Live-aarch64-39-20230918.n.0.iso

= ADDED PACKAGES =
Package: rust-linux-raw-sys0.3-0.3.8-1.fc39
Summary: Generated bindings for Linux's userspace API
RPMs:rust-linux-raw-sys0.3+default-devel rust-linux-raw-sys0.3+errno-devel 
rust-linux-raw-sys0.3+general-devel rust-linux-raw-sys0.3+ioctl-devel 
rust-linux-raw-sys0.3+netlink-devel rust-linux-raw-sys0.3+no_std-devel 
rust-linux-raw-sys0.3+std-devel rust-linux-raw-sys0.3-devel
Size:186.33 KiB

Package: rust-rustix0.37-0.37.23-1.fc39
Summary: Safe Rust bindings to POSIX/Unix/Linux/Winsock2-like syscalls
RPMs:rust-rustix0.37+all-apis-devel rust-rustix0.37+all-impls-devel 
rust-rustix0.37+cc-devel rust-rustix0.37+default-devel rust-rustix0.37+fs-devel 
rust-rustix0.37+fs-err-devel rust-rustix0.37+io-lifetimes-devel 
rust-rustix0.37+io_uring-devel rust-rustix0.37+itoa-devel 
rust-rustix0.37+libc-devel rust-rustix0.37+libc_errno-devel 
rust-rustix0.37+linux_4_11-devel rust-rustix0.37+linux_latest-devel 
rust-rustix0.37+mm-devel rust-rustix0.37+net-devel 
rust-rustix0.37+once_cell-devel rust-rustix0.37+os_pipe-devel 
rust-rustix0.37+param-devel rust-rustix0.37+process-devel 
rust-rustix0.37+procfs-devel rust-rustix0.37+pty-devel 
rust-rustix0.37+rand-devel rust-rustix0.37+runtime-devel 
rust-rustix0.37+std-devel rust-rustix0.37+termios-devel 
rust-rustix0.37+thread-devel rust-rustix0.37+time-devel 
rust-rustix0.37+use-libc-auxv-devel rust-rustix0.37+use-libc-devel 
rust-rustix0.37-devel
Size:514.80 KiB


= DROPPED PACKAGES =

= UPGRADED PACKAGES =
Package:  dbus-1:1.14.10-1.fc39
Old package:  dbus-1:1.14.8-2.fc39
Summary:  D-BUS message bus
RPMs: dbus dbus-common dbus-daemon dbus-devel dbus-doc dbus-libs 
dbus-tests dbus-tools dbus-x11
Size: 5.67 MiB
Size change:  21.89 KiB
Changelog:
  * Fri Sep 01 2023 David King  - 1:1.14.10-1
  - Update to 1.14.10


Package:  gnome-session-44.0-4.fc39
Old package:  gnome-session-44.0-2.fc39
Summary:  GNOME session manager
RPMs: gnome-session gnome-session-wayland-session gnome-session-xsession
Size: 1.70 MiB
Size change:  5.14 KiB
Changelog:
  * Wed Sep 06 2023 Ray Strode  - 44.0-3
  - Fix crash is gnome-session is started nested and inner instance is killed

  * Sun Sep 17 2023 Jan Grulich  - 44.0-4
  - Add gnome-portals.conf


Package:  rust-is-terminal-0.4.9-1.fc39
Old package:  rust-is-terminal-0.4.7-2.fc39
Summary:  Test whether a given stream is a terminal
RPMs: rust-is-terminal+default-devel rust-is-terminal-devel
Size: 22.35 KiB
Size change:  177 B
Changelog:
  * Sun Sep 17 2023 Fabio Valentini  - 0.4.9-1
  - Update to version 0.4.9; Fixes RHBZ#2218702


Package:  rust-linux-raw-sys-0.4.7-1.fc39
Old package:  rust-linux-raw-sys-0.3.8-2.fc39
Summary:  Generated bindings for Linux's userspace API
RPMs: rust-linux-raw-sys+default-devel rust-linux-raw-sys+elf-devel 
rust-linux-raw-sys+errno-devel rust-linux-raw-sys+general-devel 
rust-linux-raw-sys+if_ether-devel rust-linux-raw-sys+io_uring-devel 
rust-linux-raw-sys+ioctl-devel rust-linux-raw-sys+net-devel 
rust-linux-raw-sys+netlink-devel rust-linux-raw-sys+no_std-devel 
rust-linux-raw-sys+prctl-devel rust-linux-raw-sys+std-devel 
rust-linux-raw-sys+system-devel rust-linux-raw-sys-devel
Added RPMs:   rust-linux-raw-sys+elf-devel rust-linux-raw-sys+if_ether-devel 
rust-linux-raw-sys+io_uring-devel rust-linux-raw-sys+net-devel 
rust-linux-raw-sys+prctl-devel rust-linux-raw-sys+system-devel
Size: 286.35 KiB
Size change:  88.89 KiB
Changelog:
  * Sun Sep 17 2023 Fabio Valentini  - 0.4.7-1
  - Update to version 0.4.7


Package:  rust-rustix-0.38.13-1.fc39
Old package:  rust-rustix-0.37.23-2.fc39
Summary:  Safe Rust bindings to POSIX/Unix/Linux/Winsock2-like syscalls
RPMs: rust-rustix+all-apis-devel rust-rustix+alloc-devel 
rust-rustix+cc-devel rust-rustix+default-devel rust-rustix+event-devel 
rust-rustix+fs-devel rust-rustix+io_uring-devel rust-rustix+itoa-devel 
rust-rustix+libc-devel rust-rustix+libc_errno-devel 
rust-rustix+linux_4_11-devel rust-rustix+linux_latest-devel 
rust-rustix+mm-devel rust-rustix+mount-devel rust-rustix+net-devel 
rust-rustix+once_cell-devel rust-rustix+param-devel rust-rustix+pipe-devel 
rust-rustix+process-devel rust-rustix+procfs-devel rust-rustix+pty-devel 
rust-rustix+rand-devel rust-rustix+runtime-devel rust-rustix+std-devel 
r

Re: GNOME 45.0 builds for Fedora

2023-09-19 Thread Fabio Valentini
On Fri, Sep 15, 2023 at 10:26 AM Kalev Lember  wrote:
>
>
> Hi all,
>
> GNOME 45.0 upstream tarball date is this weekend and I'm coordinating
> the downstream builds for F39 and rawhide.
>
> A quick note where we are in the release schedule:
>
> Fedora 39 Beta was declared GO yesterday and is going to ship with GNOME
> 45.beta. We have the 45.rc mega-update in Bodhi
> (https://bodhi.fedoraproject.org/updates/FEDORA-2023-d422824191) and it
> is queued to stable and hopefully gets pushed to stable later tonight
> once the floodgates open again after the F39 Beta freeze.
>
> My plan is to collect all F39 builds in the f39-gnome side tag, but for
> rawhide build directly for rawhide. Hopefully there are no soname bumps
> between 45.rc and 45.0 complicating things.
>
> If you are helping with builds, please do the following:
>
> For F39, use 'fedpkg build --target f39-gnome' and I'll take care to
> submit everything to bodhi as a single mega-update.
>
> For rawhide, if you are building just a single package, build directly
> in rawhide. If it's a soname bump or anything else that requires
> multiple packages built together, please use a koji self-service side
> tag ('fedpkg request-side-tag' while the rawhide branch is checked out)
> and build using this. We sadly don't have a good way to do named side
> tags (f40-gnome) for rawhide.
>
> openQA is active in rawhide and gating updates so hopefully it prevents
> any broken updates landing.
>
> I'm going to be following the above myself and kicking off builds as
> soon as they are released upstream.
>
> If you run into any issues (or if there are soname bumps or anything
> else that would complicate things), please let me know - I'm available
> for sorting things out.
>
> Thanks and looking forward to an exciting GNOME 45.0 release!

I just prepared updates for rust-glycin-utils, rust-glycin, and
glycin-loaders (from the current v0.1 pre-releases to the recently
published stable releases), and only just now remembered that you
might want to include them in the GNOME mega-update - I'm currently
building them in side tags for rawhide (f40-build-side-73970) and f39
(f39-build-side-73972), but if you want, we can of course move the f39
builds into the f39-gnome tag instead.

Fabio
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: F40 Change Proposal: KDE Plasma 6 (System Wide)

2023-09-19 Thread Neal Becker
Some apps that are not open source and we are required to use don't
cooperate:  see attached

On Mon, Sep 18, 2023 at 11:58 AM Steven A. Falco 
wrote:

> On 9/18/23 11:33 AM, Neal Gompa wrote:
> > On Mon, Sep 18, 2023 at 11:12 AM Steven A. Falco 
> wrote:
> >>
> >> On 9/17/23 05:48 PM, Kevin Kofler via devel wrote:
> >>> Ian Laurie wrote:
>  I didn't think the greeter used Wayland?  So there may be something
> else
>  going on.  I cannot swear to it, but I don't think I've noticed
> problems
>  in the greeter before.
> 
>  As Adam posted, the offset problem already has a bug for it.  Wayland
> is
>  certainly unusable in VirtualBox, but now even the greeter has issues,
>  and I think that's newish.
> >>>
> >>> SDDM was switched to Wayland for F38 and newer. If you want it to use
> X11,
> >>> you have to edit /etc/sddm.conf and set:
> >>>
> >>> [General]
> >>> DisplayServer=x11
> >>>
> >>> there.
> >>>
> >>>   Kevin Kofler
> >>
> >> Yes - I had to do that because the Wayland version of the SDDM greeter
> apparently doesn't honor xrandr.
> >>
> >> I have the following in my /etc/sddm/Xsetup file:
> >>
> >>  #!/usr/bin/sh
> >>  # Xsetup - run as root before the login dialog appears
> >>  xrandr --output DisplayPort-0 --right-of DisplayPort-1
> >>
> >> If I have the greeter set to x11 that works perfectly, but if I have
> the greeter set to wayland it is ignored.
> >>
> >> I don't know if there is a way to tell wayland the desired screen
> arrangement.  If there is a way I'd like to hear about it.  If there isn't
> a way, then I guess that should be another bug.
> >>
> >
> > kwin can be configured using kscreen-doctor, as long as the kwin
> > wayland socket is up.
>
> Thanks, Neal.  I'll give that a try at some point.
>
> Steve
>
> ___
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-le...@lists.fedoraproject.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>


-- 
*Those who don't understand recursion are doomed to repeat it*
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: GNOME 45.0 builds for Fedora

2023-09-19 Thread Kalev Lember
On Tue, Sep 19, 2023 at 3:49 PM Fabio Valentini 
wrote:

> I just prepared updates for rust-glycin-utils, rust-glycin, and
> glycin-loaders (from the current v0.1 pre-releases to the recently
> published stable releases), and only just now remembered that you
> might want to include them in the GNOME mega-update - I'm currently
> building them in side tags for rawhide (f40-build-side-73970) and f39
> (f39-build-side-73972), but if you want, we can of course move the f39
> builds into the f39-gnome tag instead.
>

Yes, please, let me take care of these. Just out of curiosity, what
prompted you to build the updates for glycin? Not that I'm complaining for
the help :)

-- 
Kalev
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: GNOME 45.0 builds for Fedora

2023-09-19 Thread Fabio Valentini
On Tue, Sep 19, 2023 at 4:00 PM Kalev Lember  wrote:
>
> On Tue, Sep 19, 2023 at 3:49 PM Fabio Valentini  wrote:
>>
>> I just prepared updates for rust-glycin-utils, rust-glycin, and
>> glycin-loaders (from the current v0.1 pre-releases to the recently
>> published stable releases), and only just now remembered that you
>> might want to include them in the GNOME mega-update - I'm currently
>> building them in side tags for rawhide (f40-build-side-73970) and f39
>> (f39-build-side-73972), but if you want, we can of course move the f39
>> builds into the f39-gnome tag instead.
>
>
> Yes, please, let me take care of these. Just out of curiosity, what prompted 
> you to build the updates for glycin? Not that I'm complaining for the help :)

Ok, let me know if there's anything I need to do. Should I submit the
rawhide update, and let you move the f39 builds into f39-gnome?

As for why - I've been going through the pending Rust updates, and
updating things from pre-releases to stable releases is always good in
my experience ... and I thought I could help with something in return
for your help with the gtk-rs updates :)

Fabio
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: F40 Change Proposal: KDE Plasma 6 (System Wide)

2023-09-19 Thread Neal Gompa
On Tue, Sep 19, 2023 at 9:57 AM Neal Becker  wrote:
>
> Some apps that are not open source and we are required to use don't 
> cooperate:  see attached
>

According to this VMware forum post, the warning is annoying, but
harmless? 
https://communities.vmware.com/t5/Horizon-for-Linux/Anyone-know-if-they-re-working-on-Wayland-support-for-the/td-p/2953800




--
真実はいつも一つ!/ Always, there's only one truth!
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: GNOME 45.0 builds for Fedora

2023-09-19 Thread Kalev Lember
On Tue, Sep 19, 2023 at 4:09 PM Fabio Valentini 
wrote:

> On Tue, Sep 19, 2023 at 4:00 PM Kalev Lember 
> wrote:
> >
> > On Tue, Sep 19, 2023 at 3:49 PM Fabio Valentini 
> wrote:
> >>
> >> I just prepared updates for rust-glycin-utils, rust-glycin, and
> >> glycin-loaders (from the current v0.1 pre-releases to the recently
> >> published stable releases), and only just now remembered that you
> >> might want to include them in the GNOME mega-update - I'm currently
> >> building them in side tags for rawhide (f40-build-side-73970) and f39
> >> (f39-build-side-73972), but if you want, we can of course move the f39
> >> builds into the f39-gnome tag instead.
> >
> >
> > Yes, please, let me take care of these. Just out of curiosity, what
> prompted you to build the updates for glycin? Not that I'm complaining for
> the help :)
>
> Ok, let me know if there's anything I need to do. Should I submit the
> rawhide update, and let you move the f39 builds into f39-gnome?
>

Sounds like a good plan - let's do it like that.


As for why - I've been going through the pending Rust updates, and
> updating things from pre-releases to stable releases is always good in
> my experience ... and I thought I could help with something in return
> for your help with the gtk-rs updates :)
>

Ahh, I see. Thanks, I appreciate the help! :)

-- 
Kalev
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: F40 Change Proposal: KDE Plasma 6 (System Wide)

2023-09-19 Thread Neal Becker
On Tue, Sep 19, 2023 at 10:12 AM Neal Gompa  wrote:

> On Tue, Sep 19, 2023 at 9:57 AM Neal Becker  wrote:
> >
> > Some apps that are not open source and we are required to use don't
> cooperate:  see attached
> >
>
> According to this VMware forum post, the warning is annoying, but
> harmless?
> https://communities.vmware.com/t5/Horizon-for-Linux/Anyone-know-if-they-re-working-on-Wayland-support-for-the/td-p/2953800
>
> Thanks!  That does work.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Fedora Linux 39 Beta Released

2023-09-19 Thread Michael Catanzaro
On Tue, Sep 19 2023 at 04:01:59 PM +0200, Tomas Hrcka 
 wrote:

Download the prerelease from our Get Fedora site:
* Get Fedora Linux 39 Beta Workstation:
https://getfedora.org/workstation/download/
* Get Fedora Linux 39 Beta Server: 
https://getfedora.org/server/download/

* Get Fedora Linux 39 Beta IoT: https://getfedora.org/iot/download/
* Get Fedora Linux 39 Beta CoreOS: 
https://fedoraproject.org/coreos/download/
* Get Fedora Linux 39 Beta Cloud: 
https://fedoraproject.org/cloud/download


Uh-oh. I see we can download the beta version of Server and Cloud by 
toggling the "Show Beta Downloads" switch, but there doesn't appear to 
be any way to download the beta for Workstation or IoT.


Michael

___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: GNOME 45.0 builds for Fedora

2023-09-19 Thread Fabio Valentini
On Tue, Sep 19, 2023 at 4:22 PM Kalev Lember  wrote:
>
> On Tue, Sep 19, 2023 at 4:09 PM Fabio Valentini  wrote:
>>
>> On Tue, Sep 19, 2023 at 4:00 PM Kalev Lember  wrote:
>> >
>> > On Tue, Sep 19, 2023 at 3:49 PM Fabio Valentini  
>> > wrote:
>> >>
>> >> I just prepared updates for rust-glycin-utils, rust-glycin, and
>> >> glycin-loaders (from the current v0.1 pre-releases to the recently
>> >> published stable releases), and only just now remembered that you
>> >> might want to include them in the GNOME mega-update - I'm currently
>> >> building them in side tags for rawhide (f40-build-side-73970) and f39
>> >> (f39-build-side-73972), but if you want, we can of course move the f39
>> >> builds into the f39-gnome tag instead.
>> >
>> >
>> > Yes, please, let me take care of these. Just out of curiosity, what 
>> > prompted you to build the updates for glycin? Not that I'm complaining for 
>> > the help :)
>>
>> Ok, let me know if there's anything I need to do. Should I submit the
>> rawhide update, and let you move the f39 builds into f39-gnome?
>
>
> Sounds like a good plan - let's do it like that.

Rawhide update:
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f2c662d6d7

F39 builds:
https://koji.fedoraproject.org/koji/builds?inherited=0&tagID=73972&order=-build_id&latest=1

Fabio
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Fedora CoreOS next stream rebased to Fedora Linux 39

2023-09-19 Thread Jonathan Lebon
Fedora Linux 39 Beta was released today [1]. Our Fedora CoreOS `next` stream
has been migrated to Fedora Linux 39 content. Existing nodes on the `next`
stream will update as normal over the following days.

The Fedora Project accepted changes for Fedora 39 are at [2] and the Fedora
CoreOS analysis of each change is documented in the tracker issue
ticket #1491 [3].

The following changes require special attention:
- The modularity effort in Fedora has been retired. As such, there are
no more modular repos available. If you are currently using modules
(e.g. `cri-o`), manual steps are required in order to avoid rebasing
issues. See [4] for details.
- To enhance security, the AWS AMI now has IMDSv1 disabled by default
in favour of IMDSv2. If you have applications which still require
access via IMDSv1, you may turn it back on when launching new
instances. No change should occur to upgrading systems. For more
information, see [5].
- The AWS AMI now uses the `gp3` volume type by default rather than
`gp2` which provide more flexibility. Note that the minimum IOPS may
be lower than `gp2` for smaller disk sizes. See [6] for a full
comparison.
- The AWS AMI now uses UEFI by default on x86_64 instance types that
support it. This shouldn't have any noticeable effect on the host.
- The `moby-engine` package has been updated from v20.10 to v24.0.
This is an update that skips several major versions. Please test and
report regressions in the Fedora bug tracker [7] and if possible link
back to the Fedora CoreOS tracker issue [8].

Please test out the `next` stream over the coming month and report any issues
in our issue tracker [9].

Thank you to everyone helping find issues by running the `next` stream!

The Fedora CoreOS Team

[1] https://fedoramagazine.org/announcing-fedora-39-beta/
[2] https://fedoraproject.org/wiki/Releases/39/ChangeSet
[3] https://github.com/coreos/fedora-coreos-tracker/issues/1491
[4] 
https://github.com/coreos/fedora-coreos-tracker/issues/1513#issuecomment-1724299918
[5] 
https://github.com/coreos/fedora-coreos-tracker/issues/1502#issuecomment-1724336977
[6] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/general-purpose.html
[7] 
https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&component=moby-engine&version=39
[8] https://github.com/coreos/fedora-coreos-tracker/issues/1476
[9] https://github.com/coreos/fedora-coreos-tracker/issues
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Fedora Linux 39 Beta Released

2023-09-19 Thread Kevin Fenzi
On Tue, Sep 19, 2023 at 09:57:35AM -0500, Michael Catanzaro wrote:
> On Tue, Sep 19 2023 at 04:01:59 PM +0200, Tomas Hrcka 
> wrote:
> > Download the prerelease from our Get Fedora site:
> > * Get Fedora Linux 39 Beta Workstation:
> > https://getfedora.org/workstation/download/
> > * Get Fedora Linux 39 Beta Server:
> > https://getfedora.org/server/download/
> > * Get Fedora Linux 39 Beta IoT: https://getfedora.org/iot/download/
> > * Get Fedora Linux 39 Beta CoreOS:
> > https://fedoraproject.org/coreos/download/
> > * Get Fedora Linux 39 Beta Cloud:
> > https://fedoraproject.org/cloud/download
> 
> Uh-oh. I see we can download the beta version of Server and Cloud by
> toggling the "Show Beta Downloads" switch, but there doesn't appear to be
> any way to download the beta for Workstation or IoT.

Odd. It shows fine here. 

Caching issue?

kevin


signature.asc
Description: PGP signature
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Fedora Linux 39 Beta Released

2023-09-19 Thread Michael Catanzaro
On Tue, Sep 19 2023 at 08:14:04 AM -0700, Kevin Fenzi  
wrote:

Caching issue?


Nope, I've used Ctrl+F5 to "reload bypassing cache."

I actually now notice that a toggle (presumably the "show beta 
releases" toggle) briefly appears when loading the page with Ctrl+F5, 
but then it immediately disappears.


___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Fedora Linux 39 Beta Released

2023-09-19 Thread Adam Williamson
On Tue, 2023-09-19 at 08:14 -0700, Kevin Fenzi wrote:
> On Tue, Sep 19, 2023 at 09:57:35AM -0500, Michael Catanzaro wrote:
> > On Tue, Sep 19 2023 at 04:01:59 PM +0200, Tomas Hrcka 
> > wrote:
> > > Download the prerelease from our Get Fedora site:
> > > * Get Fedora Linux 39 Beta Workstation:
> > > https://getfedora.org/workstation/download/
> > > * Get Fedora Linux 39 Beta Server:
> > > https://getfedora.org/server/download/
> > > * Get Fedora Linux 39 Beta IoT: https://getfedora.org/iot/download/
> > > * Get Fedora Linux 39 Beta CoreOS:
> > > https://fedoraproject.org/coreos/download/
> > > * Get Fedora Linux 39 Beta Cloud:
> > > https://fedoraproject.org/cloud/download
> > 
> > Uh-oh. I see we can download the beta version of Server and Cloud by
> > toggling the "Show Beta Downloads" switch, but there doesn't appear to be
> > any way to download the beta for Workstation or IoT.
> 
> Odd. It shows fine here. 
> 
> Caching issue?

Workstation is fine, IoT is not.

I kept trying to ping people to ensure IoT was prepared for Beta, but
nobody really replied. If 'informal chat pinging for a week' isn't
going to get things done, we need a better process here.
-- 
Adam Williamson (he/him/his)
Fedora QA
Fedora Chat: @adamwill:fedora.im | Mastodon: @ad...@fosstodon.org
https://www.happyassassin.net



___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Fedora Linux 39 Beta Released

2023-09-19 Thread Michael Catanzaro


Um, sorry, actually yes it is a cache control issue. My browser's 
shortcut to "reload bypassing cache" is actually Shift+F5, not Ctrl+F5. 
Well, drat, that would have been good to know a long time ago. Now 
after trying the correct shortcut I see the beta downloads toggle.




___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: zlib-ng as a compat replacement for zlib

2023-09-19 Thread Daniel Alley
Will this be posted soon?
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Automate your Fedora package maintenance using Packit

2023-09-19 Thread Frantisek Lachman
Good point, Michael https://github.com/packit/packit/pull/2089..;)
(Will be in production next week.)

There are multiple ways to tweak the format:
* https://packit.dev/docs/configuration#copy_upstream_release_description
* https://packit.dev/docs/configuration#sync_changelog
* Or a custom `changelog-entry` action:
https://packit.dev/docs/configuration/actions#syncing-the-release

If you are not happy with any wording, suggestions and ideally pull
requests are always more than welcome!

František

On Tue, Sep 19, 2023 at 11:33 AM Michael J Gruber  
wrote:
>
> Am Di., 19. Sept. 2023 um 11:24 Uhr schrieb Frantisek Lachman
> :
> >
> > Thank you everyone for your responses!
> >
> > I have a few updates for you that made it to production this morning
> > as part of our weekly release cycle:
> >
> > * Thanks to Ankur Sinha, the pull requests created by Packit now have
> > a clear list of tasks/reminders to check in the description. (E.g.
> > https://src.fedoraproject.org/rpms/python-ogr/pull-request/479)
>
> Thanks!
>
> Maybe add: "check the autogenerated changelog" ;-)
>
> (I know 479 was not merged, but the diff looks funny.)
> Michael
> ___
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-le...@lists.fedoraproject.org
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
> Do not reply to spam, report it: 
> https://pagure.io/fedora-infrastructure/new_issue
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: Intention to tighten RPM crypto-policy back

2023-09-19 Thread Kevin Fenzi
On Tue, Sep 19, 2023 at 11:19:18AM +0200, Alexander Sosedkin wrote:
> Hello,
> 
> 6 months ago, there's been a F38 blocker: https://pagure.io/fesco/issue/2960
> Long story short:
> RPM has moved to sequoia,
> sequoia has started respecting crypto-policies,
> Google repos have been signed with a 1024-bit DSA key,
> Google Chrome was not installable => F38 blocker.
> Back at the time, it's been hastily "resolved"
> by relaxing RPM security through crypto-policies
> just enough to tolerate that Google signature:
> https://bugzilla.redhat.com/show_bug.cgi?id=2170878
> https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/merge_requests/129
> 
> Since then it has been brought to my attention that
> Google has now added a 4096 bit RSA key
> https://www.google.com/linuxrepositories/
> (EB4C 1BFD 4F04 2F6D DDCC EC91 7721 F63B D38B 4796)
> 
> Because of that, I'd like to revert that RPM policy relaxation
> https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/a12f7b20638be8f872ad1995c7d2edce41c227b5
> in (f39) rawhide and align RPM security with the rest of the policy.
> 
> Thoughts / feedback?

It might be good to go through all the ones that were hit by this (it
wasn't just chrome) and indicate if they are now fixed.
You can see a partial list in the common bug: 

https://discussion.fedoraproject.org/t/popular-third-party-rpms-fail-to-install-update-remove-due-to-security-policies-verification/70498

and in the discussion off it. 

The list from there:

Google Chrome (RPM signature rejected, repo key rejected)
Microsoft Edge (repo key rejected)
Dropbox (repo key rejected)
Skype (repo key rejected)
Visual Studio Code (repo key rejected)
Sublime Text (repo key rejected)
Microsoft Teams (repo key rejected)
TeamViewer (repo key rejected)

kevin


signature.asc
Description: PGP signature
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[Test-Announce] [IoT] Announcing Fedora IoT Test Week | Sept 24-30

2023-09-19 Thread Geoffrey Marr
Hello testers!

The Fedora 39 IoT test week starts this Sunday, September 24th and ends the
following Saturday, September 30th. You can find more info and how to test
on the wiki page [0].

Your testing is much appreciated and helps us ensure the quality of Fedora
IoT. See you at the test week!

Geoff Marr
IRC: coremodule

[0] https://fedoraproject.org/wiki/Test_Day:2023-09-24_Fedora_39_IoT_Edition
___
test-announce mailing list -- test-annou...@lists.fedoraproject.org
To unsubscribe send an email to test-announce-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/test-annou...@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Fedora Linux 39 Beta Released

2023-09-19 Thread Tomas Hrcka
Fedora Linux 39 Beta Released
--

The Fedora Project is pleased to announce the immediate availability of
Fedora Linux 39 Beta, the next step towards our planned Fedora Linux 39
release at the end of October.

Download the prerelease from our Get Fedora site:
* Get Fedora Linux 39 Beta Workstation:
https://getfedora.org/workstation/download/
* Get Fedora Linux 39 Beta Server: https://getfedora.org/server/download/
* Get Fedora Linux 39 Beta IoT: https://getfedora.org/iot/download/
* Get Fedora Linux 39 Beta CoreOS: https://fedoraproject.org/coreos/download/
* Get Fedora Linux 39 Beta Cloud: https://fedoraproject.org/cloud/download

Or, check out one of our popular variants, including KDE Plasma, Xfce,
and other desktop environments:

* Get Fedora Linux 39 Beta Spins: https://spins.fedoraproject.org/prerelease
* Get Fedora Linux 39 Beta Labs: https://labs.fedoraproject.org/prerelease

For more details about the release, read the full announcement at

* https://fedoramagazine.org/announcing-fedora-39-beta/

or look for the prerelease pages in the download sections at

* https://getfedora.org/

Since this is a Beta release, we expect that you may encounter bugs or
missing features. To report issues encountered during testing, contact
the Fedora QA team via the t...@lists.fedoraproject.org mailing list or
in #fedora-qa on Libera Chat or the #qa:fedoraproject.org Matrix room.

Regards,
Tomas Hrcka
Fedora Release Engineering


-- 
Tomas Hrcka
fas: humaton
libera.CHAT: jednorozec
___
devel-announce mailing list -- devel-annou...@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel-annou...@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue