Re: [Rpm-maint] [rpm-software-management/rpm] Use consistent case in signature and key messages (PR #3426)

2024-11-05 Thread Panu Matilainen

Those other messages don't appear as the first thing on the line, 
they're just out of context here. But thanks for merging, will help 
preserve my sanity going forward :sweat_smile: 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3426#issuecomment-2456497924
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Fix rpmsign --key-id regression (PR #3423)

2024-11-05 Thread Panu Matilainen

All those edits and it was still wrong: just now realized the breakage 
wasn't limited to Sequoia, it occurred with Gpg too, so commit 
summary+message updated.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3423#issuecomment-2456580571
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Query database from my Go source code (Discussion #3308)

2024-11-05 Thread Panu Matilainen
@jerome-diver, all this harping about the C API docs in multiple totally 
unrelated places like the evolution of rpm format blog and whatnot, it doesn't 
fill me with a desire to help you. It does exact the opposite. You may want to 
think about that a bit.

Max-RPM is well over 20 years old now, most of it isn't very relevant today. 
The API documentation linked from https://rpm.org/documentation.html is as 
maintained and as official as it's going to get because it's derived straight 
from the rpm source. Tutorial, we have not. 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/3308#discussioncomment-11150841
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Use consistent case in signature and key messages (PR #3426)

2024-11-05 Thread Florian Festi
Merged #3426 into master.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3426#event-15115396134
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] RFE: add support for multiple OpenPGP signatures per package (Issue #3385)

2024-11-05 Thread Panu Matilainen

One thing the description doesn't currently cover is the verbose level 
verification messages, in particular the enforcing mode where it spews out 
everything it looked at. For example with an unsigned package in enforcing 
mode, you'd get something like (the last two non-prefixed items stand for 
legacy Header+payload signatures):

```
/data/RPMS/hello-2.0-1.x86_64:
Header RSA signature: NOTFOUND
Header DSA signature: NOTFOUND
Header SHA256 digest: OK
Payload SHA256 digest: OK
RSA signature: NOTFOUND
DSA signature: NOTFOUND
```

I think we need to lump all the OpenPGP signatures under one label per range to 
make any sense out of this, ie:
```
/data/RPMS/hello-2.0-1.x86_64:
Header OpenPGP signature: NOTFOUND
Header SHA256 digest: OK
Payload SHA256 digest: OK
Header+payload OpenPGP signature: NOTFOUND
```

I'm tempted to add "Legacy" in front of the last item because 
that's what it is, and multiple signatures wont be supported for those. 
It's a dying breed already in v4, and I'm tempted to drop support for 
creating them at all in 6.0. We'll need to verify them to properly support 
v4 but we probably shouldn't even look for them in v6 packages. rpmsign 
will not create those entries for v6 packages anyhow, but it seems these days 
rpmsign is the last tool anybody uses for signing...

A possible sample output from a package with multiple signatures:
```
/tmp/hello-2.0-1.x86_64.rpm:
Header OpenPGP V4 ECDSA/SHA512 signature, key fingerprint: 
e8a62c0512b06b5d2183ba207f1c21f95f65bbe8: OK
Header OpenPGP V4 RSA/SHA512 signature, key ID 4344591e1964c5fc: NOKEY
Header OpenPGP V4 EdDSA/SHA512 signature, key fingerprint: 
152bb32fd9ca982797e835cfb0645aec757bf69e: OK
Header SHA256 digest: OK
Payload SHA256 digest: OK
```

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/3385#issuecomment-2456718840
You are receiving this because you are subscribed to this thread.

Message ID: 

___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


[Rpm-maint] [rpm-software-management/rpm] Fix build regression with -Wformat-security (PR #3427)

2024-11-05 Thread Panu Matilainen
Commit 547ba089313be46861fe1f5b21fbe887205697c2 broke the build with 
-Wformat-security. Add the trivial fix and ensure it stays that way by adding 
-Wformat-security to our normal build flags.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/3427

-- Commit Summary --

  * Fix build regression with -Wformat-security

-- File Changes --

M CMakeLists.txt (2)
M rpmio/rpmlog.cc (2)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/3427.patch
https://github.com/rpm-software-management/rpm/pull/3427.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3427
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Use consistent case in signature and key messages (PR #3426)

2024-11-05 Thread Florian Festi

Not sure if I like that "only appear as the first word on the line" 
argument when we lower cased the first word everywhere else. Anyway, this is a 
lot better than before and we change change Payload and Header later on.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3426#issuecomment-2456486184
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Fix rpmsign --key-id regression (PR #3423)

2024-11-05 Thread Panu Matilainen
@pmatilai pushed 1 commit.

4c3905c2d9b0a428b113454f66c1db73288d20cd  Fix rpmsign --key-id regression

-- 
View it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3423/files/5118785be7aad7c75b8f6d91690bc998056b59f2..4c3905c2d9b0a428b113454f66c1db73288d20cd
You are receiving this because you are subscribed to this thread.

Message ID: 

___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Query database from my Go source code (Discussion #3308)

2024-11-05 Thread Jérôme Lanteri
"all this rehashing... in totally unrelated places... it doesn't fill me with a 
desire to help you. It does exact the opposite. You may want to think about 
that a bit."
I think we all have the ability to think a little but also to have sympathetic 
wills or not to imagine hard things. These are choices that we made. Maybe you 
will want to accept the fact (since you are not in my head, let me tell you how 
I think, there is nothing negative) that I am just trying to be visible and 
find help. I have tried many times to get by with this API on my own, I have 
not lacked efforts for this for months. Maybe I am too stupid to, in your eyes, 
have the right to ask, to dare to try to be visible. I do not see where is 
wrong in this approach but it would seem that I am at your mercy and that you 
are the only judge here of what is good or bad. You judge me harshly and 
lecture me now... ok, what can I do? I am only reading your answer and I find 
it sad as an answer. You don't want... I don't make you want... I don't ask you 
for a favor, do you? Your answer makes it seem like I should beg for a favor... 
wow, is that really how it is for you?
I'm just trying to find a manual that explains how to use this API (not just a 
quick summary of each function, but how to use them together to get something). 
Please don't give me this show anymore, it's not necessary, you haven't wanted 
to answer for months, ok... but maybe someone else will be nicer, why not? I'm 
often nice to others... it makes me happy and I don't grant it as a favor.
Oh sir, I think I'm not good enough for you as you would like, I feel like I 
did something wrong with you, that I should have asked for nothing... for 
months. What a mentality... my God.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/3308#discussioncomment-11157981
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


[Rpm-maint] [rpm-software-management/rpm] fix rpmdump output (PR #3428)

2024-11-05 Thread Matteo Croce
`rpmdump` prints the OS type fiels as architecture type.  
Print the correct value.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/3428

-- Commit Summary --

  * fix rpmdump output

-- File Changes --

M tools/rpmdump.cc (2)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/3428.patch
https://github.com/rpm-software-management/rpm/pull/3428.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3428
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] RPM 4.20.0 building problem (Discussion #3430)

2024-11-05 Thread iseki
Before I post here, I tried to add `target_link_libraries(elfdeps PRIVATE m)` 
and `target_link_options(elfdeps PRIVATE "LINKER:--copy-dt-needed-entries")`. 
But it doesn't works.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/3430#discussioncomment-11163180
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] RPM 4.20.0 building problem (Discussion #3430)

2024-11-05 Thread Panu Matilainen
> /usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `sinh' 

It's librpmio that's missing linkage to libm, elfdeps is just the messenger. 
Now, librpmio itself doesn't need libm for anything, it's Lua that does, and 
you seem to be statically linking it:
> -DLUA_LIBRARIES=/root/lua-5.4.7/src/liblua.a

We don't generally endorse or support static linkage because it's nothing but a 
headache. As you're witnessing here. It might work if you add -libm to librpmio 
linked libraries but it's equally possible there are further issues.

That /root/... path also suggests you're building as root which you absolutely 
should not be doing, for any software.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/3430#discussioncomment-11163553
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


[Rpm-maint] [rpm-software-management/rpm] RPM 4.20.0 building problem (Discussion #3430)

2024-11-05 Thread iseki
When I trying to build following the `INSTALL` file, a linking problem blocks 
me.
I'm tried modify the `CMakeLists.txt` `tools/CMakeLists.txt`, but it doesn't 
works.

My commands:
```shell
mkdir _build
cd _build
cmake  .. -DLUA_LIBRARIES=/root/lua-5.4.7/src/liblua.a 
-DLUA_INCLUDE_DIR=../../lua-5.4.7/src -DWITH_SEQUOIA=OFF 
-DWITH_LEGACY_OPENPGP=ON
make
```
The lua was compiled with a flag `-fPIC`(I put it to the Makefile).

My problem:
```
[ 64%] Building C object tools/CMakeFiles/elfdeps.dir/elfdeps.c.o
[ 65%] Linking C executable elfdeps 
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `sinh'  
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `log2'  
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `atan2' 
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `tanh'  
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `cosh'  
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `fmod'  
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `acos'  
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `sin'   
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `asin'  
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `exp'   
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `tan'   
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `cos'   
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `log'   
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `pow'   
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `log10' 
/usr/bin/ld: ../rpmio/librpmio.so.10.2.0: undefined reference to `sqrt' 
```

My building environment:
```
PRETTY_NAME="Ubuntu 24.04 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
VERSION="24.04 LTS (Noble Numbat)"
VERSION_CODENAME=noble
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/";
SUPPORT_URL="https://help.ubuntu.com/";
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/";
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy";
UBUNTU_CODENAME=noble
LOGO=ubuntu-logo
```

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/3430
You are receiving this because you are subscribed to this thread.

Message ID: ___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Query database from my Go source code (Discussion #3308)

2024-11-05 Thread Panu Matilainen
It seems you didn't get my message at all. Had it been just [this simple 
question](https://github.com/rpm-software-management/rpm/discussions/3308#discussioncomment-11141929)
 I would've merrily answered it. But you have been making loud demands about 
this on several unrelated topics. Sorry but that's not just how this works.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/3308#discussioncomment-11162734
You are receiving this because you are subscribed to this thread.

Message ID: 
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


[Rpm-maint] [rpm-software-management/rpm] Migrate 'rpm-software-management/rpm' to 'Webhook To Fedora Messaging' (Issue #3429)

2024-11-05 Thread Akashdeep Dhar

This project was listed in the 
[**GitHub2FedMsg**](https://github.com/fedora-infra/github2fedmsg) database and 
we want to you to inform you about the upcoming deprecation of the service. As 
the [**Fedora Infrastructure**](https://docs.fedoraproject.org/en-US/infra/) is 
finishing up with migrating its applications away from 
[**FedMsg**](https://github.com/fedora-infra/fedmsg) to [**Fedora 
Messaging**](https://github.com/fedora-infra/fedora-messaging), we encourage 
you to migrate your repository to the successor of the 
[**GitHub2FedMsg**](https://fedora-arc.readthedocs.io/en/latest/github2fedmsg/index.html)
 project, [**Webhook To Fedora 
Messaging**](https://webhook2fedmsg.apps.ocp.fedoraproject.org/docs).

Please follow [this 
link](https://communityblog.fedoraproject.org/announcing-webhook-to-fedora-messaging/)
 to the official announcement of the project’s release and use the instructions 
there to [migrate](https://pagure.io/fedora-infra/w2fm-migration/issues) to the 
new service. If this notification was a mistake, please close this notification 
ticket. We will not act on the repositories whose migrations have not been 
requested and any related GitHub2FedMsg operations will stop working once the 
service is decommissioned.


-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/3429
You are receiving this because you are subscribed to this thread.

Message ID: ___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint