Re: Summary/Minutes from today's FESCo Meeting (2019-05-17)

2019-05-17 Thread stan via devel
On Fri, 17 May 2019 22:56:37 +0200 Omar Diaa wrote: > PLEASE I DO NOT WANT THESE MAILS BLOCK ME FEDORA I AM NOT IN GSoC > ANYMORE, I UNSUBSCRIBEd +10 TIMES PLEASE UNSUBSCRIBE MY GMAIL FROM > THIS PLEASE PLEASE PLEASE To unsubscribe send an email to devel-le...@lists.fedoraproject.org __

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Chris Adams
Once upon a time, Stephen John Smoogen said: > Look its Friday. I don't drink, I don't smoke, and I am trying to cut > swearing. All that leaves me is a nice can of hyperbole. :) Sorry, didn't mean to pick on you, though yeah, that's what it sounded like. I guess I'm in favor of this because I'

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Chris Adams
Once upon a time, Kevin Fenzi said: > Some may notice this has already happened in Fedora 22: > > https://pykickstart.readthedocs.io/en/latest/kickstart-docs.html?highlight=ssh#sshkey Ahh, good to know. I admit, I mostly do kickstart installs on CentOS, so I hadn't seen this. Guess I will soon

Re: Self Introduction: Jordan Ogas

2019-05-17 Thread Stephen John Smoogen
This person has been unsubscribed. On Fri, 17 May 2019 at 16:47, Omar Diaa wrote: > PLEASE I AM NOT SUBSCRIBING THIS THREAD AND ALL FEDORA ANYMORE IAM NOT IN > GSOC I DO NOT WANT THESE MAILS PLASE !!! > > On Fri, May 17, 2019 at 10:00 PM Daniel Walsh wrote: > >> On 5/17/

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Nico Kadel-Garcia
On Thu, May 16, 2019 at 2:54 PM Ben Cotton wrote: > > https://fedoraproject.org/wiki/Changes/DisableRootPasswordLoginInSshd > > == Summary == > The upstream OpenSSH disabled password logins for root back in 2015. > The Fedora should follow to keep security expectation and avoid users > surprises w

Re: Summary/Minutes from today's FESCo Meeting (2019-05-17)

2019-05-17 Thread Omar Diaa
PLEASE I DO NOT WANT THESE MAILS BLOCK ME FEDORA I AM NOT IN GSoC ANYMORE, I UNSUBSCRIBEd +10 TIMES PLEASE UNSUBSCRIBE MY GMAIL FROM THIS PLEASE PLEASE PLEASE On Fri, May 17, 2019 at 10:54 PM Miro Hrončok wrote: > On 17. 05. 19 22:47, Omar Diaa wrote: > > PLEASE I AM NOT SUBSCRIBING THIS TH

Re: Summary/Minutes from today's FESCo Meeting (2019-05-17)

2019-05-17 Thread Samuel Sieb
On 5/17/19 1:47 PM, Omar Diaa wrote: PLEASE I AM NOT SUBSCRIBING THIS THREAD AND ALL FEDORA ANYMORE IAM NOT IN GSOC I DO NOT WANT THESE MAILS PLASE !!! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send

Re: Summary/Minutes from today's FESCo Meeting (2019-05-17)

2019-05-17 Thread Miro Hrončok
On 17. 05. 19 22:47, Omar Diaa wrote: PLEASE I AM NOT SUBSCRIBING THIS THREAD AND ALL FEDORA ANYMORE IAM NOT IN GSOC I DO NOT WANT THESE MAILS PLASE !!! Sorry to hear that Omar, but no need for Caps Lock. All these e-mails have a header called List-Unsubscribe - it inf

Re: arm03-packager00: wrong Rawhide mock config

2019-05-17 Thread Omar Diaa
PLEASE I AM NOT SUBSCRIBING THIS THREAD AND ALL FEDORA ANYMORE IAM NOT IN GSOC I DO NOT WANT THESE MAILS PLASE, FEDORA UNSUBSCRIBE ME FROM THIS!!! !!! On Fri, May 17, 2019 at 11:08 AM Mikolaj Izdebski wrote: > On Fri, May 17, 2019 at 5:22 AM Jerry James wrote: > > >

Re: Summary/Minutes from today's FESCo Meeting (2019-05-17)

2019-05-17 Thread Omar Diaa
PLEASE I AM NOT SUBSCRIBING THIS THREAD AND ALL FEDORA ANYMORE IAM NOT IN GSOC I DO NOT WANT THESE MAILS PLASE !!! On Fri, May 17, 2019 at 6:14 PM Petr Šabata wrote: > === > #fedora-meeting: FESCO (2019-05-17) > ===

Re: Self Introduction: Jordan Ogas

2019-05-17 Thread Omar Diaa
PLEASE I AM NOT SUBSCRIBING THIS THREAD AND ALL FEDORA ANYMORE IAM NOT IN GSOC I DO NOT WANT THESE MAILS PLASE !!! On Fri, May 17, 2019 at 10:00 PM Daniel Walsh wrote: > On 5/17/19 3:50 PM, Ogas, Jordan Andrew wrote: > > > I am really interested in rootless podman as an a

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Omar Diaa
؛/ٍُِ On Fri, May 17, 2019 at 10:35 PM Kevin Fenzi wrote: > On 5/17/19 5:23 AM, Stephen Gallagher wrote: > > ...snip... > PLEASE I AM NOT SUBSCRIBING THIS THREAD AND ALL FEDORA ANYMORE IAM NOT IN GSOC I DO NOT WANT THESE MAILS PLASE !!! > > > 3) Force Anaconda to requi

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Kevin Fenzi
On 5/17/19 5:23 AM, Stephen Gallagher wrote: ...snip... > 3) Force Anaconda to require the creation of a non-root user that is a > member of the `wheel` group, so that this user can be used to SSH in > and administer the system. Essentially, remove the root user creation > spoke as an option from

Re: Self Introduction: Jordan Ogas

2019-05-17 Thread Daniel Walsh
On 5/17/19 3:50 PM, Ogas, Jordan Andrew wrote: > > > I am really interested in rootless podman as an alternative to > Singularity, > > > And if there are any shortcomings. > >   > > One of the limitations we need to work around in our production > environments > > is the inability to use setuid hel

Re: Self Introduction: Jordan Ogas

2019-05-17 Thread Daniel Walsh
On 5/17/19 2:34 PM, Jonathan Billings wrote: > On Fri, May 17, 2019 at 01:56:20PM -0400, Daniel Walsh wrote: >> On 5/17/19 11:15 AM, Ogas, Jordan Andrew wrote: >>> Not personally but my team are experimenting with Buildah/Podman. >>> >> I am really interested in rootless podman as an alternative to

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Kevin Fenzi
On 5/17/19 11:34 AM, Stephen John Smoogen wrote: > On Fri, 17 May 2019 at 14:02, Chris Adams wrote: ...snip... >>> Make it a predefined kickstart thing they can do so all they have to do >> is >>> add a line in it that says >>> >>> ssh_remote --user= --keyfile= --yesIwantrootandIknowitsbad >> >> I

Re: Self Introduction: Jordan Ogas

2019-05-17 Thread Jonathan Billings
On Fri, May 17, 2019 at 01:56:20PM -0400, Daniel Walsh wrote: > On 5/17/19 11:15 AM, Ogas, Jordan Andrew wrote: > > Not personally but my team are experimenting with Buildah/Podman. > > > I am really interested in rootless podman as an alternative to > Singularity, And if there are any shortcomings

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Stephen John Smoogen
On Fri, 17 May 2019 at 14:02, Chris Adams wrote: > Once upon a time, Stephen John Smoogen said: > > So a lot of sites have set up that you remotely kickstart a system and > then > > ansible in as root with the rest of the configurations. It is the biggest > > reason we have been keeping this as

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Christopher
On Fri, May 17, 2019 at 8:24 AM Stephen Gallagher wrote: > > On Thu, May 16, 2019 at 2:54 PM Ben Cotton wrote: > > > > https://fedoraproject.org/wiki/Changes/DisableRootPasswordLoginInSshd > > > > == Summary == > > The upstream OpenSSH disabled password logins for root back in 2015. > > The Fedor

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Chris Adams
Once upon a time, Stephen John Smoogen said: > So a lot of sites have set up that you remotely kickstart a system and then > ansible in as root with the rest of the configurations. It is the biggest > reason we have been keeping this as active for a long time. You are > breaking all those configs

Re: Self Introduction: Jordan Ogas

2019-05-17 Thread Daniel Walsh
On 5/17/19 11:15 AM, Ogas, Jordan Andrew wrote: > > Not personally but my team are experimenting with Buildah/Podman. > I am really interested in rootless podman as an alternative to Singularity, And if there are any shortcomings. > >   > > *From: *Daniel Walsh > *Organization: *Red Hat > *Reply-T

Fedora rawhide compose report: 20190517.n.0 changes

2019-05-17 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20190515.n.1 NEW: Fedora-Rawhide-20190517.n.0 = SUMMARY = Added images:7 Dropped images: 3 Added packages: 11 Dropped packages:1 Upgraded packages: 86 Downgraded packages: 0 Size of added packages: 14.54 MiB Size of dropped packages

Summary/Minutes from today's FESCo Meeting (2019-05-17)

2019-05-17 Thread Petr Šabata
=== #fedora-meeting: FESCO (2019-05-17) === Meeting started by contyk at 15:00:00 UTC. The full logs are available at https://meetbot.fedoraproject.org/fedora-meeting/2019-05-17/fesco.2019-05-17-15.00.log.html Meeting summary --

Fedora Rawhide-20190517.n.0 compose check report

2019-05-17 Thread Fedora compose checker
Missing expected images: Atomichost raw-xz x86_64 Atomichost qcow2 x86_64 Compose FAILS proposed Rawhide gating check! 6 of 47 required tests failed, 4 results missing openQA tests matching unsatisfied gating requirements shown with **GATING** below Unsatisfied gating requirements that could not

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Julen Landa Alustiza
If someone is remotely installing with kickstart on a non interactive way I assume they have enough knownledge to modify that ks to either add a pubkey to root or modify sshd_config Anyhow yeah, would be great to help making this easy with a ks default, or macros Stephen John Smoogen igorleak ha

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Stephen John Smoogen
On Fri, 17 May 2019 at 10:41, Julen Landa Alustiza wrote: > We are not disabling root access entirely, you can log on local console or > use su after loging with a normal user. > > So a lot of sites have set up that you remotely kickstart a system and then ansible in as root with the rest of the

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Julen Landa Alustiza
Sorry, I'm in mobile and I miss send the draft :S I'm not sure if it's clear: we don't really need so many constraints on anaconda. (active root with pass and regular user) or regular user on wheel group would be enough to elevate privileges on a just installed box remotely Julen Landa Alustiza

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Julen Landa Alustiza
We are not disabling root access entirely, you can log on local console or use su after loging with a normal user. After installing server without the proposed changes (that could be great, but not needed) you can log in with the normal user and use su to scalate privileges and either change sshd_

[Test-Announce] Fedora 31 Rawhide 20190517.n.0 nightly compose nominated for testing

2019-05-17 Thread rawhide
Announcing the creation of a new nightly release validation test event for Fedora 31 Rawhide 20190517.n.0. Please help run some tests for this nightly compose if you have time. For more information on nightly release validation testing, see: https://fedoraproject.org/wiki

Re: Fedora Atomic Host Two Week Release Announcement: 29.20190516.0

2019-05-17 Thread Dusty Mabe
On 5/16/19 6:27 PM, nore...@fedoraproject.org wrote: > > A new Fedora Atomic Host update is available via an OSTree update: > > Version: 29.20190516.0 > Commit(x86_64): > 7f719bf60b865ca96aacd0e8ae3e6074c7eb5783d8ceb9003dbba5dfd5a29ba3 > Commit(aarch64): > 3930a03b8ffcce1aa66f17b8811e2a4da80a

Schedule for Friday's FESCo Meeting (2019-05-17)

2019-05-17 Thread Petr Šabata
Following is the list of topics that will be discussed in the FESCo meeting Friday at 15:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2019-05-17 15:00 UTC' Links to all issues to be dis

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Stephen Gallagher
On Fri, May 17, 2019 at 8:37 AM Martin Kolman wrote: > > On Fri, 2019-05-17 at 08:23 -0400, Stephen Gallagher wrote: > > 3) Force Anaconda to require the creation of a non-root user that is a > > member of the `wheel` group, so that this user can be used to SSH in > > and administer the system. Es

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Stephen Gallagher
On Fri, May 17, 2019 at 9:09 AM Mauricio Tavares wrote: > > On Fri, May 17, 2019 at 8:24 AM Stephen Gallagher wrote: > > 3) Force Anaconda to require the creation of a non-root user that is a > > member of the `wheel` group, so that this user can be used to SSH in > > and administer the system. E

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Mauricio Tavares
On Fri, May 17, 2019 at 8:24 AM Stephen Gallagher wrote: > > On Thu, May 16, 2019 at 2:54 PM Ben Cotton wrote: > > > > https://fedoraproject.org/wiki/Changes/DisableRootPasswordLoginInSshd > > > > == Summary == > > The upstream OpenSSH disabled password logins for root back in 2015. > > The Fedor

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Martin Kolman
On Fri, 2019-05-17 at 08:23 -0400, Stephen Gallagher wrote: > On Thu, May 16, 2019 at 2:54 PM Ben Cotton wrote: > > https://fedoraproject.org/wiki/Changes/DisableRootPasswordLoginInSshd > > > > == Summary == > > The upstream OpenSSH disabled password logins for root back in 2015. > > The Fedora s

Re: Fedora 31 System-Wide Change proposal: Disable Root Password Login in SSH

2019-05-17 Thread Stephen Gallagher
On Thu, May 16, 2019 at 2:54 PM Ben Cotton wrote: > > https://fedoraproject.org/wiki/Changes/DisableRootPasswordLoginInSshd > > == Summary == > The upstream OpenSSH disabled password logins for root back in 2015. > The Fedora should follow to keep security expectation and avoid users > surprises w

Announcing Fedora CI SIG

2019-05-17 Thread Aleksandra Fedorova
Hi, all, I'd like to announce a Fedora Special Interest Group dedicated to the topics of Continuous Integration, Continuous Delivery, Gating and everything. I've created a wiki page with the initial data: https://fedoraproject.org/wiki/SIGs/CI Please join, add yourself to member list, bring you

Re: xindy, texlive, and concurrency

2019-05-17 Thread Miro Hrončok
On 17. 05. 19 3:54, Jerry James wrote: And, going off on a really steep tangent, I was just reading about Flock and wishing I could go. I've been hanging around the Fedora community for something on the order of 14 years now, believe it or not, and I have yet to meet a single other Fedora contri

Re: arm03-packager00: wrong Rawhide mock config

2019-05-17 Thread Mikolaj Izdebski
On Fri, May 17, 2019 at 5:22 AM Jerry James wrote: > > Where should problem reports with the test machines be directed? I > can't build for Rawhide in mock on arm03-packager00 because > /etc/mock/fedora-rawhide-armhfp.cfg refers to Fedora 30. The correct > config is in /etc/mock/fedora-rawhide-a

Re: sign_and_send_pubkey: signing failed: agent refused operation

2019-05-17 Thread Jakub Jelen
On Thu, 2019-05-16 at 10:09 -0700, Brian C. Lane wrote: > On Wed, May 15, 2019 at 05:09:41PM -0400, Steve Dickson wrote: > > Hello, > > > > I'm getting the following error when I'm access the fedora git > > trees. > > > > sign_and_send_pubkey: signing failed: agent refused operation > > ste...@pk

Re: Removal of krb5-devel from "stable" F29 buidroot broke my package

2019-05-17 Thread Tomas Mraz
On Thu, 2019-05-16 at 07:50 +0200, Vít Ondruch wrote: > Dne 15. 05. 19 v 17:29 Dominique Martinet napsal(a): > > Michal Schorm wrote on Wed, May 15, 2019 at 05:14:23PM +0200: > > > Another possible cause came up my mind. > > > > > > Another package in the buildroot could have brought it as a > > >