Re: F411 Change Proposal: KDE Plasma Mobile Spin and Fedora Kinoite Mobile (Self-Contained)

2024-06-19 Thread Kevin Kofler via devel
Aoife Moloney wrote: > This change is for Fedora Linux 41, and not 411 as the typo in the heading > suggests :) Glad that we do not have to wait 185 years ((411-41)/2=185) for this feature. ;-) Kevin Kofler -- ___ devel mailing list -- devel@li

Re: [Fedora-legal-list] Re: [SPDX] Mass license change GPLv2 to GPL-2.0-only

2024-06-19 Thread Richard Fontana
On Wed, Jun 19, 2024 at 11:58 AM Miro Hrončok wrote: > > On 18. 06. 24 18:46, Miroslav Suchý wrote: > > Hi. > > > > I am going to do the mass change of the license from GPLv2 to GPL-2.0-only > > Hi. > > How do you know the License tag is not supposed to be e.g. "GPL-2.0-only AND > MIT" or similar?

Re: [SPDX] Mass license change GPLv2 to GPL-2.0-only

2024-06-19 Thread Miro Hrončok
On 19. 06. 24 23:32, Miroslav Suchý wrote: Dne 19. 06. 24 v 5:58 odp. Miro Hrončok napsal(a): How do you know the License tag is not supposed to be e.g. "GPL-2.0-only AND MIT" or similar? Converting "GPLv2" (which could mean any number of "weaker" licenses are hidden under the "stronger" GP

Re: [SPDX] Mass license change GPLv2 to GPL-2.0-only

2024-06-19 Thread Miroslav Suchý
Dne 19. 06. 24 v 5:58 odp. Miro Hrončok napsal(a): How do you know the License tag is not supposed to be e.g. "GPL-2.0-only AND MIT" or similar? Converting "GPLv2" (which could mean any number of "weaker" licenses are hidden under the "stronger" GPL in the old notation) to "GPL-2.0-only" (whi

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Leigh Scott
> Another option is to package the nvidia-kmod-open module into Fedora and > sign it with Fedora key. > > Starting with version 555, nvidia-kmod-open will be the default option. Fedora doesn't allow any out-of-tree modules, so that idea is a non-starter. --

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Jonathan Steffan
On Wed, Jun 19, 2024 at 2:55 PM Gary Buhrmaster wrote: > On Wed, Jun 19, 2024, 11:33 Vitaly Zaitsev via devel < > devel@lists.fedoraproject.org> wrote: > > Another option is to package the nvidia-kmod-open module into Fedora and >> sign it with Fedora key. >> >> Starting with version 555, nvidia-

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Gary Buhrmaster
On Wed, Jun 19, 2024, 11:33 Vitaly Zaitsev via devel < devel@lists.fedoraproject.org> wrote: Another option is to package the nvidia-kmod-open module into Fedora and > sign it with Fedora key. > > Starting with version 555, nvidia-kmod-open will be the default option. > As I recall, only the defa

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Fabio Valentini
On Wed, Jun 19, 2024 at 8:40 PM Peter Robinson wrote: > > On Wed, 19 Jun 2024 at 19:13, Dominik 'Rathann' Mierzejewski > wrote: > > > > On Wednesday, 19 June 2024 at 17:17, drago01 wrote: > > > [...] at some point we need to do the cut and not being held back by old > > > / ancient hardware forev

Re: A second OCaml 5.2 rebuild in Rawhide (today)

2024-06-19 Thread Richard W.M. Jones
On Wed, Jun 19, 2024 at 08:13:39AM +0100, Richard W.M. Jones wrote: > Jerry James discovered a code gen bug in the latest OCaml 5.2 on > Rawhide: > > https://github.com/ocaml/ocaml/issues/13220 > > Luckily this only affects ppc64le and is obvious when you hit it, > producing an error rather than

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Peter Robinson
On Wed, 19 Jun 2024 at 19:13, Dominik 'Rathann' Mierzejewski wrote: > > On Wednesday, 19 June 2024 at 17:17, drago01 wrote: > > [...] at some point we need to do the cut and not being held back by old > > / ancient hardware forever. > > What do you mean by "being held back"? What's being prevented

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Vitaly Zaitsev via devel
On 19/06/2024 19:45, Jonathan Steffan wrote: Unless the private key is off-system, anything will be able to be loaded without much fuss. Maybe akmods can be updated to use the private key stored in TPM 2.0 if the system has one? While it does *feel* better, both options effectively remove a

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Peter Robinson
On Thu, 13 Jun 2024 at 13:58, Chris Adams wrote: > > Once upon a time, Ben Cotton said: > > For myself, I think it's reasonable to conclude there's a non-trivial > > amount of people using QEMU on that hardware in some fashion. Much of > > that is probably from podman as opposed to running large

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Dominik 'Rathann' Mierzejewski
On Wednesday, 19 June 2024 at 17:17, drago01 wrote: > [...] at some point we need to do the cut and not being held back by old > / ancient hardware forever. What do you mean by "being held back"? What's being prevented by not requiring x86-64-v2 for all packages while allowing few select ones to h

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Ben Beasley
Please note that switching to x86_64-v2 does *not* give you access to AVX2 or even AVX. It stops at SSE4.2 with POPCNT. AVX2 means x86_64-v3, which both excludes a lot more hardware and allows (in some cases) much more significant performance gains. On 6/19/24 3:29 AM, Vitaly Zaitsev via deve

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Jonathan Steffan
On Wed, Jun 19, 2024 at 11:33 AM Vitaly Zaitsev via devel < devel@lists.fedoraproject.org> wrote: > On 19/06/2024 17:49, Daniel P. Berrangé wrote: > > This allows > > any privileged process to sign any future kmods, from any source. > > Yes. That's why it is preferable to ship built and signed in

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Vitaly Zaitsev via devel
On 19/06/2024 17:49, Daniel P. Berrangé wrote: This allows any privileged process to sign any future kmods, from any source. Yes. That's why it is preferable to ship built and signed in Koji kmod packages, but nobody want to do this: neither Fedora nor RPM Fusion. Without a signature, the ke

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Milan Crha
On Wed, 2024-06-19 at 17:38 +0200, Leigh Scott wrote: > I don't see the security issue, gnome-software does require admin > rights to install packages? Hi, gnome-software currently uses PackageKit to install packages. The PackageKit has some polkit rules when to ask for the admin password

Re: [SPDX] Mass license change GPLv2 to GPL-2.0-only

2024-06-19 Thread Miro Hrončok
On 18. 06. 24 18:46, Miroslav Suchý wrote: Hi. I am going to do the mass change of the license from GPLv2 to GPL-2.0-only Hi. How do you know the License tag is not supposed to be e.g. "GPL-2.0-only AND MIT" or similar? Converting "GPLv2" (which could mean any number of "weaker" licenses a

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Daniel P . Berrangé
On Wed, Jun 19, 2024 at 02:45:33PM +, Zbigniew Jędrzejewski-Szmek wrote: > On Mon, Jun 17, 2024 at 12:44:53PM +0100, Aoife Moloney wrote: > > What we're doing this time is using mokutil to create a key for the > > user to self-sign the drivers. When installing the drivers, the user > > is asked

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Leigh Scott
> Once /etc/pki/akmods/certs/public_key.der is generated, it is used to sign > any akmod-* > package installed or updated. > > > https://src.fedoraproject.org/rpms/kmodtool/c/1900f33c17ff4bc1011be4279ff... The user (with admin rights) is free to install akmod-rootkit and kmodtool will sign it

Re: Orphaned NVML

2024-06-19 Thread Daniel P . Berrangé
On Wed, Jun 19, 2024 at 12:23:51PM -0300, Emanuel Lima wrote: > I orphaned NVML as Intel discontinued Optane ( > https://pmem.io/announcements/2023/customer-letter-march-2023/) and I'm > having trouble finding the time to maintain the package. The question that > remains is whether QEMU still depen

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Leigh Scott
Once /etc/pki/akmods/certs/public_key.der is generated, it is used to sign any akmod-* package installed or updated. https://src.fedoraproject.org/rpms/kmodtool/c/1900f33c17ff4bc1011be4279ff13a7eb6a046b1?branch=rawhide -- ___ devel mailing list -- dev

Orphaned NVML

2024-06-19 Thread Emanuel Lima
I orphaned NVML as Intel discontinued Optane ( https://pmem.io/announcements/2023/customer-letter-march-2023/) and I'm having trouble finding the time to maintain the package. The question that remains is whether QEMU still depends on NVML or not. I got conflicting information about that. Does anyo

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread drago01
On Wednesday, June 19, 2024, Dominik 'Rathann' Mierzejewski < domi...@greysector.net> wrote: > On Wednesday, 19 June 2024 at 10:39, Neal Gompa wrote: > > On Wed, Jun 19, 2024 at 9:29 AM Vitaly Zaitsev via devel > > wrote: > > > > > > On 19/06/2024 09:13, Daniel P. Berrangé wrote: > > > > If Fedor

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Jun 17, 2024 at 12:44:53PM +0100, Aoife Moloney wrote: > What we're doing this time is using mokutil to create a key for the > user to self-sign the drivers. When installing the drivers, the user > is asked to provide a password for the key. On the next reboot the > user is presented with t

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Milan Crha
On Wed, 2024-06-19 at 14:39 +0200, Daniel P. Berrangé wrote: > the default software installation tool promoting this is a > recommended solution to users. The latter is blessing this is a > preferred feature of the distro. Hi, does there exist any other way to make the drivers work, withou

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Vitaly Zaitsev via devel
On 17/06/2024 13:44, Aoife Moloney wrote: The goal is this change is to provide an easy way to install Nvidia drivers in Fedora Workstation. Someone should fix this issue first: https://bugzilla.redhat.com/show_bug.cgi?id=2011120 It breaks offline updates. I think the system-upgrade plugin sh

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Daniel P . Berrangé
On Wed, Jun 19, 2024 at 02:30:20PM +0200, Vitaly Zaitsev via devel wrote: > On 19/06/2024 13:10, Daniel P. Berrangé wrote: > > Should this be a system-wide change, rather than self-contained > > change ? While the implementation is in gnome-software, since this > > is semi-automating enrollment of

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Vitaly Zaitsev via devel
On 19/06/2024 13:10, Daniel P. Berrangé wrote: Should this be a system-wide change, rather than self-contained change ? While the implementation is in gnome-software, since this is semi-automating enrollment of a new SecureBoot MOK, with the private key strored locally, it has security impact on

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Dominik 'Rathann' Mierzejewski
On Wednesday, 19 June 2024 at 10:39, Neal Gompa wrote: > On Wed, Jun 19, 2024 at 9:29 AM Vitaly Zaitsev via devel > wrote: > > > > On 19/06/2024 09:13, Daniel P. Berrangé wrote: > > > If Fedora cares > > > about optimal performance it should just declare we're going to stop > > > being held back b

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Milan Crha
On Wed, 2024-06-19 at 13:10 +0200, Daniel P. Berrangé wrote: > While the implementation is in gnome-software, since this > is semi-automating enrollment of a new SecureBoot MOK, with the > private key strored locally, it has security impact on the distro > as a whole. Hi, you are right, it

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Daniel P . Berrangé
On Mon, Jun 17, 2024 at 12:44:53PM +0100, Aoife Moloney wrote: > Wiki - https://fedoraproject.org/wiki/Changes/NvidiaInstallationWithSecureboot > Discussion Thread - > https://discussion.fedoraproject.org/t/f41-change-proposal-nvidia-driver-installation-with-secure-boot-support-self-contained/12033

Re: Does ccache ever help with kernel mock build?

2024-06-19 Thread Julian Sikorski
Am 13.02.24 um 18:52 schrieb Julian Sikorski: Am 13.02.24 um 16:16 schrieb Gary Buhrmaster: On Tue, Feb 13, 2024 at 9:52 AM Miroslav Suchý wrote: Dne 13. 02. 24 v 9:08 Julian Sikorski napsal(a): Could this be the reason for ccache not working? I wonder whether it is Mock problem, Ccache is

bin-sbin merge planned for next week

2024-06-19 Thread Zbigniew Jędrzejewski-Szmek
Hi folks, it's this time of the year, we should do some major filesystem surgery! The preparations for https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin have been put in place and I want to do the rebuild of filesystem.rpm rpm.rpm, and other packages that will effectuate the merge. What

Re: GRUB2 rebase (from 2.06 to 2.12) landing soon on rawhide

2024-06-19 Thread Andrea Bolognani
On Tue, May 21, 2024 at 10:57:42AM GMT, Leo Sandoval wrote: > Hi team, > > We (the Red Hat bootloader team) are completing the work of > rebasing/reviewing/testing current rawhide patches, from GRUB2 2.06 to > 2.12, so at > some point in the near future these would land finally into rawhide. Once

Re: F41 Change Proposal: Nvidia Driver Installation with Secure Boot Support (self-contained)

2024-06-19 Thread Milan Crha
On Mon, 2024-06-17 at 17:44 +0200, Leigh Scott wrote: > I wont be re-adding the AppStream metadata into the Nvidia driver > repo until someone files a proper request  at rpmfusion. Hi, here you are: https://bugzilla.rpmfusion.org/show_bug.cgi?id=6976 If there's anything I can help with, j

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Neal Gompa
On Wed, Jun 19, 2024 at 9:29 AM Vitaly Zaitsev via devel wrote: > > On 19/06/2024 09:13, Daniel P. Berrangé wrote: > > If Fedora cares > > about optimal performance it should just declare we're going to stop > > being held back by compat with ancient hardware and use -v2 baseline > > for everythin

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Vitaly Zaitsev via devel
On 19/06/2024 09:13, Daniel P. Berrangé wrote: If Fedora cares about optimal performance it should just declare we're going to stop being held back by compat with ancient hardware and use -v2 baseline for everything, but obviously that's been rejected previously. Maybe it's a good time for the

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-19 Thread Daniel P . Berrangé
On Mon, Jun 17, 2024 at 07:37:15AM -0500, Chris Adams wrote: > Once upon a time, Daniel P. Berrangé said: > > I think I've convinced upstream to change their approach to make their > > recent changes a compile-time opt-in, to allow build time choice of the > > non-optimized code, rather than forci

A second OCaml 5.2 rebuild in Rawhide (today)

2024-06-19 Thread Richard W.M. Jones
Jerry James discovered a code gen bug in the latest OCaml 5.2 on Rawhide: https://github.com/ocaml/ocaml/issues/13220 Luckily this only affects ppc64le and is obvious when you hit it, producing an error rather than silently miscompiling code. Nevertheless I'm going to fix it today. Unfortunatel