Koji build adds extra cflags [was: Re: [ANNOUNCE] kexec-tools 2.0.10]

2015-06-30 Thread Dave Young
Change the subject a bit.. On 07/01/15 at 08:36am, Dave Young wrote: > Pratyush, > > Thanks for the effort, let's cc Fedora devel list, see if we can get help > from Fedora experts. > > Summary the problem: > Latest kexec-tools koji build in rawhide results in a wrong kexec binary, > kexec load

Re: [ANNOUNCE] kexec-tools 2.0.10

2015-06-30 Thread Dave Young
Pratyush, Thanks for the effort, let's cc Fedora devel list, see if we can get help from Fedora experts. Summary the problem: Latest kexec-tools koji build in rawhide results in a wrong kexec binary, kexec load fails with something like below: R_X86_64_29 Unhandled rela relocation: R_X86_64_29

Re: DNSSEC/unbound -> boingboing.net failures

2015-06-30 Thread Jan Včelák
Hi Matt, the SERVFAIL is probably not caused by DNSSEC because the zone is not signed. The problem is that the zone is broken. There is a CNAME record in the zone apex, which is a violation of the DNS specification (https://tools.ietf.org/html/rfc2181#section-10.1). Random resolution failures are

[Test-Announce] Call for Fedora 23 Test Days

2015-06-30 Thread Mike Ruckman
F23 is about to branch [0] and it's time we started thinking about what we'd want to have a test day for. There are several changes accepted already for F23, and more that have yet to be decided [1]. You can find the list here: http://fedoraproject.org/wiki/Releases/23/ChangeSet Please take some

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Stef Walter
On 30.06.2015 16:50, Tomas Hozza wrote: > > > On 30.06.2015 16:07, Michael Catanzaro wrote: >> On Tue, 2015-06-30 at 14:23 +0200, Tomas Hozza wrote: >>> Except that this is exactly what we DON'T want to do. DNSSEC is an >>> extension of DNS and it can be used even without the need for the >>> wh

Re: DNSSEC/unbound -> boingboing.net failures

2015-06-30 Thread Florian Weimer
On 06/30/2015 07:01 PM, Paul Wouters wrote: > With that many CNAMEs requiring validation and intermittent failure, my guess > is your wifi is dropping a significant amount of queries. It could also be NAT state table overflow. > This is a case where shorter negative cache lifetimes should help a

Re: DNSSEC/unbound -> boingboing.net failures

2015-06-30 Thread Matthew Miller
On Tue, Jun 30, 2015 at 02:01:19PM -0300, Paul Wouters wrote: > With that many CNAMEs requiring validation and intermittent failure, > my guess is your wifi is dropping a significant amount of queries. > This is a case where shorter negative cache lifetimes should help a > lot. This should come int

Re: DNSSEC/unbound -> boingboing.net failures

2015-06-30 Thread Paul Wouters
With that many CNAMEs requiring validation and intermittent failure, my guess is your wifi is dropping a significant amount of queries. This is a case where shorter negative cache lifetimes should help a lot. This should come into dnssec-trigger very soon. What will also help is once edns-query

Re: DNSSEC/unbound -> boingboing.net failures

2015-06-30 Thread Matthew Miller
On Tue, Jun 30, 2015 at 06:44:41PM +0200, Tomas Hozza wrote: > Please file a bug against dnssec-trigger. It will be better for > getting additional information. Also please see the reply by Paul > Wouters to your previous email. Oh hey. I forgot that I posted this already, and didn't see the reply

Re: DNSSEC/unbound -> boingboing.net failures

2015-06-30 Thread Tomas Hozza
On 30.06.2015 17:07, Matthew Miller wrote: > With the DNSSEC feature enabled as per the testing instructions, I'm > sometimes (but not always) getting failures for popular geek blog Boing > Boing, when public DNS still works: > > $ host boingboing.net > Host boingboing.net not found: 2(SERVFAIL

Re: Thunderbird-38.0.1 integrates lightning? Very disturbing!!

2015-06-30 Thread Ahmad Samir
On 30 June 2015 at 17:22, Reindl Harald wrote: > > > Am 30.06.2015 um 17:02 schrieb Ahmad Samir: >> >> IIUC, what's happening here is that they bundle the extension with >> Thunderbird 38 so it's installed and enabled by default; so when you >> create a new Thunderbird profile, >> >> /usr/lib*/thu

Re: Thunderbird-38.0.1 integrates lightning? Very disturbing!!

2015-06-30 Thread Reindl Harald
Am 30.06.2015 um 17:02 schrieb Ahmad Samir: IIUC, what's happening here is that they bundle the extension with Thunderbird 38 so it's installed and enabled by default; so when you create a new Thunderbird profile, /usr/lib*/thunderbird/distribution/extensions/{e2fda1a4-762b-4020-b5ad-a41df19331

DNSSEC/unbound -> boingboing.net failures

2015-06-30 Thread Matthew Miller
With the DNSSEC feature enabled as per the testing instructions, I'm sometimes (but not always) getting failures for popular geek blog Boing Boing, when public DNS still works: $ host boingboing.net Host boingboing.net not found: 2(SERVFAIL) $ host boingboing.net 8.8.8.8 Using domain serv

Re: Thunderbird-38.0.1 integrates lightning? Very disturbing!!

2015-06-30 Thread Ahmad Samir
On 30 June 2015 at 15:16, Joachim Backes wrote: > Hi dear developers, > > after upgrading to tb-38.0.1, thunderbird-lightning-3.3-5.fc22.x86_64 > has been obsoleted (as the formus are telling), but still the addons > manager of tb shows lightning as installed extension which can be > activated and

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 16:07, Michael Catanzaro wrote: > On Tue, 2015-06-30 at 11:24 +0200, Tomas Hozza wrote: >> The thing is that some information are unrelated to NM. There is no >> reason to push all information back to NetworkManager, since its role >> is >> explicitly defined - manage network connect

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 16:07, Michael Catanzaro wrote: > On Tue, 2015-06-30 at 14:23 +0200, Tomas Hozza wrote: >> Except that this is exactly what we DON'T want to do. DNSSEC is an >> extension of DNS and it can be used even without the need for the >> whole >> Internet to be signed. We want to use it ev

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Michael Catanzaro
On Tue, 2015-06-30 at 14:23 +0200, Tomas Hozza wrote: > Except that this is exactly what we DON'T want to do. DNSSEC is an > extension of DNS and it can be used even without the need for the > whole > Internet to be signed. We want to use it even if the network-provided > DNS resolvers don't suppo

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Michael Catanzaro
On Tue, 2015-06-30 at 11:24 +0200, Tomas Hozza wrote: > The thing is that some information are unrelated to NM. There is no > reason to push all information back to NetworkManager, since its role > is > explicitly defined - manage network connections and leave the DNS > resolution and configuratio

Re: Best practice for latest package in COPR?

2015-06-30 Thread Dave Johansen
On Jun 28, 2015 11:39 PM, "Miroslav Suchý" wrote: > > Dne 29.6.2015 v 06:13 Dave Johansen napsal(a): > > I would like to start providing the latest version of ODB in a COPR for stable releases of Fedora and RHEL. Is there a > > "best practice" for this sort of thing? > > > > The main question I ha

Re: F23 Self Contained Change: Standardized Passphrase Policy

2015-06-30 Thread Michael Catanzaro
> I understand that as a request to write some simple how-to-use > document > for libpwquality and not a request to drop it altogether and use > instead ... what? > > Note also that libpwquality is highly configurable and for things > that > can not be configured currently a configuration can be

Re: Attn rawhide users: 4.2.0-0.rc0.git1.1.fc23.x86_64 causes problems

2015-06-30 Thread Richard W.M. Jones
On Tue, Jun 30, 2015 at 02:21:47PM +0100, Richard W.M. Jones wrote: > On Tue, Jun 30, 2015 at 08:47:34AM -0400, Josh Boyer wrote: > > On Tue, Jun 30, 2015 at 5:58 AM, Richard W.M. Jones > > wrote: > > > > > > With host kernel 4.2.0-0.rc0.git1.1.fc23.x86_64: > > > > > > - KVM is broken (RHBZ#12367

Re: Attn rawhide users: 4.2.0-0.rc0.git1.1.fc23.x86_64 causes problems

2015-06-30 Thread Richard W.M. Jones
On Tue, Jun 30, 2015 at 08:47:34AM -0400, Josh Boyer wrote: > On Tue, Jun 30, 2015 at 5:58 AM, Richard W.M. Jones wrote: > > > > With host kernel 4.2.0-0.rc0.git1.1.fc23.x86_64: > > > > - KVM is broken (RHBZ#1236753) > > > > - gnome-shell segfaults all the time (RHBZ#1237060) > > > > Reverting bac

Thunderbird-38.0.1 integrates lightning? Very disturbing!!

2015-06-30 Thread Joachim Backes
Hi dear developers, after upgrading to tb-38.0.1, thunderbird-lightning-3.3-5.fc22.x86_64 has been obsoleted (as the formus are telling), but still the addons manager of tb shows lightning as installed extension which can be activated and removed. Because I thougt that tb-lighning is now obsolete

rawhide report: 20150630 changes

2015-06-30 Thread Fedora Rawhide Report
Compose started at Tue Jun 30 05:15:04 UTC 2015 Broken deps for i386 -- [airsched] airsched-1.00.0-12.fc23.i686 requires libzmq.so.4 [apache-scout] apache-scout-1.2.6-11.fc21.noarch requires mvn(org.apache.juddi:uddi-ws)

Re: Attn rawhide users: 4.2.0-0.rc0.git1.1.fc23.x86_64 causes problems

2015-06-30 Thread Richard W.M. Jones
On Tue, Jun 30, 2015 at 08:47:34AM -0400, Josh Boyer wrote: > On Tue, Jun 30, 2015 at 5:58 AM, Richard W.M. Jones wrote: > > > > With host kernel 4.2.0-0.rc0.git1.1.fc23.x86_64: > > > > - KVM is broken (RHBZ#1236753) > > > > - gnome-shell segfaults all the time (RHBZ#1237060) > > > > Reverting bac

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 14:37, Bastien Nocera wrote: > > > - Original Message - > >> No, it is not. It is opt-in now, we want it by default. Please read the >> change. Thank you. > > I don't see any options about it in GNOME's Network panel. I'm not interested > in integration as an after-thoug

Re: Attn rawhide users: 4.2.0-0.rc0.git1.1.fc23.x86_64 causes problems

2015-06-30 Thread Josh Boyer
On Tue, Jun 30, 2015 at 5:58 AM, Richard W.M. Jones wrote: > > With host kernel 4.2.0-0.rc0.git1.1.fc23.x86_64: > > - KVM is broken (RHBZ#1236753) > > - gnome-shell segfaults all the time (RHBZ#1237060) > > Reverting back to 4.1.0-1.fc23 fixes both problems. Please try 4.2.0-0.rc0.git2.1.fc23 tha

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 14:11, Bastien Nocera wrote: > > > - Original Message - >> On 30.06.2015 13:53, Bastien Nocera wrote: >>> >>> >>> - Original Message - On 30.06.2015 11:24, Tomas Hozza wrote: >>> > It means that the site of your bank you are on may not be provided the >>>

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Bastien Nocera
- Original Message - > No, it is not. It is opt-in now, we want it by default. Please read the > change. Thank you. I don't see any options about it in GNOME's Network panel. I'm not interested in integration as an after-thought. I think it best to stop this dead-end discussion until y

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 13:53, Bastien Nocera wrote: > > > - Original Message - >> On 30.06.2015 11:24, Tomas Hozza wrote: > >>> It means that the site of your bank you are on may not be provided the >>> actual host you should be connected to, but instead by some attacker's. >>> The insecure mode

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 13:58, Stef Walter wrote: > On 30.06.2015 13:53, Bastien Nocera wrote: >> >> >> - Original Message - >>> On 30.06.2015 11:24, Tomas Hozza wrote: >> It means that the site of your bank you are on may not be provided the actual host you should be connected to, but i

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Bastien Nocera
- Original Message - > On 30.06.2015 13:53, Bastien Nocera wrote: > > > > > > - Original Message - > >> On 30.06.2015 11:24, Tomas Hozza wrote: > > > >>> It means that the site of your bank you are on may not be provided the > >>> actual host you should be connected to, but ins

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 13:46, Stef Walter wrote: > On 30.06.2015 11:24, Tomas Hozza wrote: >> On 26.06.2015 17:13, Matthias Clasen wrote: >>> On Tue, 2015-06-23 at 18:43 +0200, Tomas Hozza wrote: >>> >>> Hey, I was out for a week, so this may be a bit of a late reply. >>> >>> As Michael and Bastien alread

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Bastien Nocera
- Original Message - > On 30.6.2015 13:53, Bastien Nocera wrote: > > > > > > - Original Message - > >> On 30.06.2015 11:24, Tomas Hozza wrote: > > > >>> It means that the site of your bank you are on may not be provided the > >>> actual host you should be connected to, but inst

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Petr Spacek
On 30.6.2015 13:53, Bastien Nocera wrote: > > > - Original Message - >> On 30.06.2015 11:24, Tomas Hozza wrote: > >>> It means that the site of your bank you are on may not be provided the >>> actual host you should be connected to, but instead by some attacker's. >>> The insecure mode m

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Stef Walter
On 30.06.2015 13:53, Bastien Nocera wrote: > > > - Original Message - >> On 30.06.2015 11:24, Tomas Hozza wrote: > >>> It means that the site of your bank you are on may not be provided the >>> actual host you should be connected to, but instead by some attacker's. >>> The insecure mode

Re: F23 Self Contained Change: Standardized Passphrase Policy

2015-06-30 Thread Tomas Mraz
On Pá, 2015-06-26 at 14:53 -0600, Kevin Fenzi wrote: > On Fri, 26 Jun 2015 16:21:02 -0400 > Matthias Clasen wrote: > > > But passwords and passphrases are not all the same shape or color - > > the requirements for a password you want to use for ssh login over the > > internet are quite different

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Bastien Nocera
- Original Message - > On 30.06.2015 11:24, Tomas Hozza wrote: > > It means that the site of your bank you are on may not be provided the > > actual host you should be connected to, but instead by some attacker's. > > The insecure mode means that you are vulnerable in the same way as the

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Stef Walter
On 30.06.2015 11:24, Tomas Hozza wrote: > On 26.06.2015 17:13, Matthias Clasen wrote: >> On Tue, 2015-06-23 at 18:43 +0200, Tomas Hozza wrote: >> >> Hey, I was out for a week, so this may be a bit of a late reply. >> >> As Michael and Bastien already stated, all the GNOME networking UI >> relies on

Re: F23 Self Contained Change: Standardized Passphrase Policy

2015-06-30 Thread Stef Walter
On 26.06.2015 22:53, Kevin Fenzi wrote: > On Fri, 26 Jun 2015 16:21:02 -0400 > Matthias Clasen wrote: > >> But passwords and passphrases are not all the same shape or color - >> the requirements for a password you want to use for ssh login over the >> internet are quite different from ones for a

Re: Orphaned Packages in rawhide (2015-06-30)

2015-06-30 Thread Mat Booth
On 30 June 2015 at 09:17, Mikolaj Izdebski wrote: > On 06/30/2015 09:12 AM, opensou...@till.name wrote: > > netty31 orphan 2 weeks ago > > As far as I can tell only one package directly depended on netty31: > gradle. That dependency was actually a bu

Re: Driver 'mmcblk' needs updating - please use bus_type methods

2015-06-30 Thread Bastien Nocera
It doesn't need updating, the error you're seeing is: "DMA: Out of SW-IOMMU space for 65536 bytes at device :09:00.1" Which I reported upstream here: http://thread.gmane.org/gmane.linux.kernel.mmc/32629 but which didn't get any answers. You can test the work-around there though. Cheers

Schedule for Wednesday's FESCo Meeting (2015-07-01)

2015-06-30 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2015-07-01 18:00 UTC' Links to all tickets belo

Attn rawhide users: 4.2.0-0.rc0.git1.1.fc23.x86_64 causes problems

2015-06-30 Thread Richard W.M. Jones
With host kernel 4.2.0-0.rc0.git1.1.fc23.x86_64: - KVM is broken (RHBZ#1236753) - gnome-shell segfaults all the time (RHBZ#1237060) Reverting back to 4.1.0-1.fc23 fixes both problems. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming a

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 26.06.2015 17:13, Matthias Clasen wrote: > On Tue, 2015-06-23 at 18:43 +0200, Tomas Hozza wrote: > > Hey, I was out for a week, so this may be a bit of a late reply. > > As Michael and Bastien already stated, all the GNOME networking UI > relies on information gotten from NetworkManager, and w

Re: DNF and regular expressions

2015-06-30 Thread Michael Schwendt
On Mon, 29 Jun 2015 20:32:46 +0200, Reindl Harald wrote: > > I've read the rest of the thread, but note that "rpm -qa" based queries > > piped > > to "xargs rpm -e" still work fine for a package removal task like this > > that may be true but you hardly can sell DNF as improvement if you need >

Re: FESCO Elections - June 2015 - Results

2015-06-30 Thread Jan Kurik
- Original Message - > From: "Richard W.M. Jones" > To: "Development discussions related to Fedora" > > Sent: Tuesday, June 30, 2015 10:19:46 AM > Subject: Re: FESCO Elections - June 2015 - Results > > On Tue, Jun 30, 2015 at 10:15:09AM +0200, Germano Massullo wrote: > > Il 30/06/2015 1

Re: FESCO Elections - June 2015 - Results

2015-06-30 Thread Richard W.M. Jones
On Tue, Jun 30, 2015 at 10:15:09AM +0200, Germano Massullo wrote: > Il 30/06/2015 10:13, Richard W.M. Jones ha scritto: > > Didn't even know it was happening. Where was it announced? Rich. > On > devel-annou...@lists.fedoraproject.org > and > annou...@lists.fedoraproject.org I don't read those th

Re: FESCO Elections - June 2015 - Results

2015-06-30 Thread Emmanuel Seyman
* Richard W.M. Jones [30/06/2015 09:13] : > > Didn't even know it was happening. Where was it announced? The devel-announce mailing list, Fedora Magazine, the planet, ... Emmanuel -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora C

Re: F23 System Wide Change: jQuery

2015-06-30 Thread Richard W.M. Jones
On Mon, Jun 29, 2015 at 04:20:11PM +0200, Reindl Harald wrote: > a web client is not allowed to say "hey, i have a /jquery.js in the > cache from application A and re-use it for application B" because > that would be *easy* attack vector If only this was possible ... https://rwmj.wordpress.com/20

Re: Orphaned Packages in rawhide (2015-06-30)

2015-06-30 Thread Mikolaj Izdebski
On 06/30/2015 09:12 AM, opensou...@till.name wrote: > netty31 orphan 2 weeks ago As far as I can tell only one package directly depended on netty31: gradle. That dependency was actually a bug (gradle should build-require netty3 instead of netty31)

Re: FESCO Elections - June 2015 - Results

2015-06-30 Thread Germano Massullo
Il 30/06/2015 10:13, Richard W.M. Jones ha scritto: > Didn't even know it was happening. Where was it announced? Rich. On devel-annou...@lists.fedoraproject.org and annou...@lists.fedoraproject.org -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinf

Re: DNF and regular expressions

2015-06-30 Thread Germano Massullo
Il 29/06/2015 20:32, Reindl Harald ha scritto: > > that may be true but you hardly can sell DNF as improvement if you > need such workarounds while YUM worked perfectly for many years while > working around the package manager in general should be avoided > because no longs, no dependency solving a

ppisar changed ppisar's 'watchcommits' permission on perl-Dist-Metadata (master) to 'Obsolete'

2015-06-30 Thread notifications
ppisar changed ppisar's 'watchcommits' permission on perl-Dist-Metadata (master) to 'Obsolete' https://admin.fedoraproject.org/pkgdb/package/perl-Dist-Metadata/ -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproje

Re: FESCO Elections - June 2015 - Results

2015-06-30 Thread Richard W.M. Jones
On Mon, Jun 29, 2015 at 07:00:05AM -0400, Josh Boyer wrote: > On Mon, Jun 29, 2015 at 3:50 AM, Jan Kurik wrote: > > Greetings, all! > > > > The elections for FESCo - June 2015 have concluded, and the results > > are shown below. > > > > FESCo is electing 4 seats this time. > > A total of 90 ballot

ppisar changed ppisar's 'watchbugzilla' permission on perl-Dist-Metadata (f22) to 'Obsolete'

2015-06-30 Thread notifications
ppisar changed ppisar's 'watchbugzilla' permission on perl-Dist-Metadata (f22) to 'Obsolete' https://admin.fedoraproject.org/pkgdb/package/perl-Dist-Metadata/ -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject