Re: Rolling out Phase I of rawhide package gating

2019-08-04 Thread Florian Weimer
* Pierre-Yves Chibon: > On Sat, Aug 03, 2019 at 11:20:35AM -0700, Kevin Fenzi wrote: >> On 8/2/19 11:13 AM, Florian Weimer wrote: >> > * Pierre-Yves Chibon: >> > >> >> When you run `fedpkg build` on Rawhide, your package will be built in >> >> a new koji tag (which will be the default target for

Re: Rolling out Phase I of rawhide package gating

2019-08-04 Thread Pierre-Yves Chibon
On Sat, Aug 03, 2019 at 11:20:35AM -0700, Kevin Fenzi wrote: > On 8/2/19 11:13 AM, Florian Weimer wrote: > > * Pierre-Yves Chibon: > > > >> When you run `fedpkg build` on Rawhide, your package will be built in > >> a new koji tag (which will be the default target for Rawhide). The > >> package wil

Re: Rolling out Phase I of rawhide package gating

2019-08-03 Thread Kevin Fenzi
On 8/2/19 11:13 AM, Florian Weimer wrote: > * Pierre-Yves Chibon: > >> When you run `fedpkg build` on Rawhide, your package will be built in >> a new koji tag (which will be the default target for Rawhide). The >> package will be picked up from this koji tag, signed and moved onto a >> second tag.

Re: Rolling out Phase I of rawhide package gating

2019-08-03 Thread Florian Weimer
* Pierre-Yves Chibon: > When you run `fedpkg build` on Rawhide, your package will be built in > a new koji tag (which will be the default target for Rawhide). The > package will be picked up from this koji tag, signed and moved onto a > second tag. Bodhi will be notified by koji once this new buil

Re: Rolling out Phase I of rawhide package gating

2019-08-02 Thread Martin Kolman
On Wed, 2019-07-31 at 13:34 -0700, Kevin Fenzi wrote: > On 7/31/19 12:05 PM, Nicolas Mailhot via devel wrote: > > Le mercredi 31 juillet 2019 à 12:25 -0500, Jason L Tibbitts III a > > écrit : > > > > > > > > "KF" == Kevin Fenzi writes: > > > > > > KF> * If you use metalinks, rpm signatures are ju

Re: Rolling out Phase I of rawhide package gating

2019-08-02 Thread Brian C. Lane
On Thu, Aug 01, 2019 at 08:41:32AM +0200, Nicolas Mailhot via devel wrote: > Le mercredi 31 juillet 2019 à 16:10 -0700, Brian C. Lane a écrit : > > > > It's odd that they would work from an installed system and not > > anaconda. > > Are you using a self-signed cert on them? > > No, a proper publi

Re: Rolling out Phase I of rawhide package gating

2019-08-01 Thread Przemek Klosowski via devel
On 7/31/19 4:34 PM, Kevin Fenzi wrote: On 7/31/19 12:05 PM, Nicolas Mailhot via devel wrote: And, just to provide another data point, we tried this month to make the network install iso talk to https dnf repos (a reposync of fedora devel x86_64, without x86 packages, because we don't have the st

Re: Rolling out Phase I of rawhide package gating

2019-08-01 Thread John Florian
On 2019-07-31 21:35, Jason L Tibbitts III wrote: "NG" == Neal Gompa writes: NG> You just set localpkg_gpgcheck=1 in /etc/dnf/dnf.conf NG> That said, you probably don't want to do that, since most downloaded NG> packages aren't signed... Cool!  I wasn't even aware of this setting.  Can we set

Re: Rolling out Phase I of rawhide package gating

2019-08-01 Thread Nicolas Mailhot via devel
Le jeudi 01 août 2019 à 00:27 -0700, Samuel Sieb a écrit : > On 7/31/19 11:41 PM, Nicolas Mailhot via devel wrote: > > Le mercredi 31 juillet 2019 à 16:10 -0700, Brian C. Lane a écrit : > > > If so you can pass > > > inst.noverifyssl to anaconda to tell it to ignore the error but > > > still > > >

Re: Rolling out Phase I of rawhide package gating

2019-08-01 Thread Samuel Sieb
On 7/31/19 11:41 PM, Nicolas Mailhot via devel wrote: Le mercredi 31 juillet 2019 à 16:10 -0700, Brian C. Lane a écrit : If so you can pass inst.noverifyssl to anaconda to tell it to ignore the error but still use https. Thanks for the suggestion, I had forgotten about it. Is it possible to do

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Nicolas Mailhot via devel
Le mercredi 31 juillet 2019 à 16:10 -0700, Brian C. Lane a écrit : > On Wed, Jul 31, 2019 at 09:05:21PM +0200, Nicolas Mailhot via devel > wrote: > > Le mercredi 31 juillet 2019 à 12:25 -0500, Jason L Tibbitts III a > > écrit : > > > > > > > > "KF" == Kevin Fenzi writes: > > > > > > KF> * If you

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Nicolas Mailhot via devel
Le mercredi 31 juillet 2019 à 13:34 -0700, Kevin Fenzi a écrit : > On 7/31/19 12:05 PM, Nicolas Mailhot via devel wrote: > > Le mercredi 31 juillet 2019 à 12:25 -0500, Jason L Tibbitts III a > > écrit : > > > > > > > > "KF" == Kevin Fenzi writes: > > > > > > KF> * If you use metalinks, rpm signat

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Jason L Tibbitts III
> "NG" == Neal Gompa writes: NG> You just set localpkg_gpgcheck=1 in /etc/dnf/dnf.conf NG> That said, you probably don't want to do that, since most downloaded NG> packages aren't signed... I think that the ideal behavior would be to always check, but warn/prompt for unsigned packages or th

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Neal Gompa
On Wed, Jul 31, 2019 at 2:45 PM Kevin Fenzi wrote: > > On 7/31/19 11:09 AM, Florian Weimer wrote: > > * Jason L. Tibbitts, III: > > > > At one point, RPM wrote unchecked file contents to disk, leading to > > vulnerabilities such as CVE-2013-6435. At the time, it was not possible > > to teach RPM

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Brian C. Lane
On Wed, Jul 31, 2019 at 09:05:21PM +0200, Nicolas Mailhot via devel wrote: > Le mercredi 31 juillet 2019 à 12:25 -0500, Jason L Tibbitts III a > écrit : > > > > > > > "KF" == Kevin Fenzi writes: > > > > KF> * If you use metalinks, rpm signatures are just gravy on top, in > > the > > KF> end you a

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Fabio Valentini
On Wed, Jul 31, 2019, 22:42 Kevin Fenzi wrote: > On 7/31/19 9:29 AM, Richard W.M. Jones wrote: > > On Wed, Jul 31, 2019 at 05:06:17PM +0100, Tom Hughes wrote: > >> On 31/07/2019 16:58, Pierre-Yves Chibon wrote: > >> > >>> My canary ran took 24 minutes, apparently the CI pipeline was slower > than

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Kevin Fenzi
On 7/31/19 9:29 AM, Richard W.M. Jones wrote: > On Wed, Jul 31, 2019 at 05:06:17PM +0100, Tom Hughes wrote: >> On 31/07/2019 16:58, Pierre-Yves Chibon wrote: >> >>> My canary ran took 24 minutes, apparently the CI pipeline was slower than >>> usual >>> but the rest of the workflow seemed fine. >>>

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Kevin Fenzi
On 7/31/19 12:05 PM, Nicolas Mailhot via devel wrote: > Le mercredi 31 juillet 2019 à 12:25 -0500, Jason L Tibbitts III a > écrit : >>> "KF" == Kevin Fenzi writes: >> >> KF> * If you use metalinks, rpm signatures are just gravy on top, in >> the >> KF> end you are still just trusing SSL CA's.

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Nicolas Mailhot via devel
Le mercredi 31 juillet 2019 à 12:25 -0500, Jason L Tibbitts III a écrit : > > > > > > "KF" == Kevin Fenzi writes: > > KF> * If you use metalinks, rpm signatures are just gravy on top, in > the > KF> end you are still just trusing SSL CA's. > > Only if you trust every mirror to always serve authe

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Kevin Fenzi
On 7/31/19 11:09 AM, Florian Weimer wrote: > * Jason L. Tibbitts, III: > >>> "FW" == Florian Weimer writes: >> >> FW> At one point, there was a verified hash chain from the https:// >> FW> metalink service, to the repository metadata, down to individual >> FW> packages. Any tampering was det

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Florian Weimer
* Jason L. Tibbitts, III: >> "FW" == Florian Weimer writes: > > FW> At one point, there was a verified hash chain from the https:// > FW> metalink service, to the repository metadata, down to individual > FW> packages. Any tampering was detected then. > > I understand that the metalink conta

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Jason L Tibbitts III
> "FW" == Florian Weimer writes: FW> At one point, there was a verified hash chain from the https:// FW> metalink service, to the repository metadata, down to individual FW> packages. Any tampering was detected then. I understand that the metalink contains enough information to verify the r

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Florian Weimer
* Jason L. Tibbitts, III: >> "KF" == Kevin Fenzi writes: > > KF> * If you use metalinks, rpm signatures are just gravy on top, in the > KF> end you are still just trusing SSL CA's. > > Only if you trust every mirror to always serve authentic content. At one point, there was a verified hash c

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Jason L Tibbitts III
> "KF" == Kevin Fenzi writes: KF> * If you use metalinks, rpm signatures are just gravy on top, in the KF> end you are still just trusing SSL CA's. Only if you trust every mirror to always serve authentic content. - J< ___ devel mailing list -- d

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Richard W.M. Jones
On Wed, Jul 31, 2019 at 05:06:17PM +0100, Tom Hughes wrote: > On 31/07/2019 16:58, Pierre-Yves Chibon wrote: > > >My canary ran took 24 minutes, apparently the CI pipeline was slower than > >usual > >but the rest of the workflow seemed fine. > > > >$ koji buildinfo ocaml-result-1.2-12.fc31 > >ret

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Kevin Fenzi
On 7/31/19 9:06 AM, Tom Hughes wrote: > On 31/07/2019 16:58, Pierre-Yves Chibon wrote: > >> My canary ran took 24 minutes, apparently the CI pipeline was slower >> than usual >> but the rest of the workflow seemed fine. >> >> $ koji buildinfo ocaml-result-1.2-12.fc31 >> returns: >>    Tags: f31 f3

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Richard W.M. Jones
On Wed, Jul 31, 2019 at 08:52:52AM -0700, Kevin Fenzi wrote: > Do you have an example build for me to look at? I waited 2 hours for ocaml-result-1.2-12.fc31. In fact it's just now become available in the buildroot. I don't know if that helps. The next build I will be waiting for (when it comple

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Tom Hughes
On 31/07/2019 16:58, Pierre-Yves Chibon wrote: My canary ran took 24 minutes, apparently the CI pipeline was slower than usual but the rest of the workflow seemed fine. $ koji buildinfo ocaml-result-1.2-12.fc31 returns: Tags: f31 f31-updates-pending So it should be in the buildroot. Is it n

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Kevin Fenzi
On 7/31/19 7:35 AM, Tomasz Torcz wrote: > On Wed, Jul 31, 2019 at 03:15:32PM +0100, Richard W.M. Jones wrote: >> On Tue, Jul 30, 2019 at 11:11:34AM -0700, Kevin Fenzi wrote: >>> In this case it's koji. >>> >>> For every package in the mass rebuild (f31-pending tag) robosign asks >>> koji "hey, is f

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Pierre-Yves Chibon
On Wed, Jul 31, 2019 at 04:39:09PM +0100, Richard W.M. Jones wrote: > On Wed, Jul 31, 2019 at 04:35:11PM +0100, Tom Hughes wrote: > > On 31/07/2019 16:10, Pierre-Yves Chibon wrote: > > >On Wed, Jul 31, 2019 at 03:15:32PM +0100, Richard W.M. Jones wrote: > > >>On Tue, Jul 30, 2019 at 11:11:34AM -070

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Kevin Fenzi
On 7/31/19 8:07 AM, Richard W.M. Jones wrote: > On Wed, Jul 31, 2019 at 10:22:36AM -0400, Stephen John Smoogen wrote: >> On Wed, 31 Jul 2019 at 10:16, Richard W.M. Jones wrote: >> >>> On Tue, Jul 30, 2019 at 11:11:34AM -0700, Kevin Fenzi wrote: In this case it's koji. For every pack

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Richard W.M. Jones
On Wed, Jul 31, 2019 at 04:35:11PM +0100, Tom Hughes wrote: > On 31/07/2019 16:10, Pierre-Yves Chibon wrote: > >On Wed, Jul 31, 2019 at 03:15:32PM +0100, Richard W.M. Jones wrote: > >>On Tue, Jul 30, 2019 at 11:11:34AM -0700, Kevin Fenzi wrote: > >>>In this case it's koji. > >>> > >>>For every pack

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Tom Hughes
On 31/07/2019 16:10, Pierre-Yves Chibon wrote: On Wed, Jul 31, 2019 at 03:15:32PM +0100, Richard W.M. Jones wrote: On Tue, Jul 30, 2019 at 11:11:34AM -0700, Kevin Fenzi wrote: In this case it's koji. For every package in the mass rebuild (f31-pending tag) robosign asks koji "hey, is foobar-1.0

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Pierre-Yves Chibon
On Wed, Jul 31, 2019 at 03:15:32PM +0100, Richard W.M. Jones wrote: > On Tue, Jul 30, 2019 at 11:11:34AM -0700, Kevin Fenzi wrote: > > In this case it's koji. > > > > For every package in the mass rebuild (f31-pending tag) robosign asks > > koji "hey, is foobar-1.0.1-1.fc31 signed' ? koji checks..

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Richard W.M. Jones
On Wed, Jul 31, 2019 at 10:22:36AM -0400, Stephen John Smoogen wrote: > On Wed, 31 Jul 2019 at 10:16, Richard W.M. Jones wrote: > > > On Tue, Jul 30, 2019 at 11:11:34AM -0700, Kevin Fenzi wrote: > > > In this case it's koji. > > > > > > For every package in the mass rebuild (f31-pending tag) robo

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Tomasz Torcz
On Wed, Jul 31, 2019 at 03:15:32PM +0100, Richard W.M. Jones wrote: > On Tue, Jul 30, 2019 at 11:11:34AM -0700, Kevin Fenzi wrote: > > In this case it's koji. > > > > For every package in the mass rebuild (f31-pending tag) robosign asks > > koji "hey, is foobar-1.0.1-1.fc31 signed' ? koji checks..

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Stephen John Smoogen
On Wed, 31 Jul 2019 at 10:16, Richard W.M. Jones wrote: > On Tue, Jul 30, 2019 at 11:11:34AM -0700, Kevin Fenzi wrote: > > In this case it's koji. > > > > For every package in the mass rebuild (f31-pending tag) robosign asks > > koji "hey, is foobar-1.0.1-1.fc31 signed' ? koji checks... "yes, it

Re: Rolling out Phase I of rawhide package gating

2019-07-31 Thread Richard W.M. Jones
On Tue, Jul 30, 2019 at 11:11:34AM -0700, Kevin Fenzi wrote: > In this case it's koji. > > For every package in the mass rebuild (f31-pending tag) robosign asks > koji "hey, is foobar-1.0.1-1.fc31 signed' ? koji checks... "yes, it is". > robosign: "great, then I ask you to write out the signed rpm

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Kevin Fenzi
On 7/30/19 10:04 AM, Adam Williamson wrote: > On Tue, 2019-07-30 at 18:00 +0100, Richard W.M. Jones wrote: >> On Tue, Jul 30, 2019 at 04:26:30PM +0200, Pierre-Yves Chibon wrote: >>> On Tue, Jul 30, 2019 at 04:15:31PM +0200, Florian Weimer wrote: * Pierre-Yves Chibon: > What does it me

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Kevin Fenzi
Yep. This is due to signing backlog, as the entire mass rebuild was taged into f31-ppending and has to be checked by robosignatory. ;( It seems to be moving a bit faster now... Sorry for this hassle. kevin signature.asc Description: OpenPGP digital signature

Re: robosigning slow again (was: Re: Rolling out Phase I of rawhide package gating)

2019-07-30 Thread Kevin Fenzi
On 7/30/19 9:59 AM, Richard W.M. Jones wrote: > On Sun, Jul 28, 2019 at 11:49:05AM -0700, Kevin Fenzi wrote: >> On 7/27/19 8:26 AM, Richard W.M. Jones wrote: >>> On Fri, Jul 26, 2019 at 04:08:40PM +0200, Pierre-Yves Chibon wrote: Yes and no, robosignatory is swamped signing the builds from the

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Adam Williamson
On Tue, 2019-07-30 at 12:33 -0500, Rex Dieter wrote: > Kevin Fenzi wrote: > > > On 7/27/19 8:26 AM, Richard W.M. Jones wrote: > > > On Fri, Jul 26, 2019 at 04:08:40PM +0200, Pierre-Yves Chibon wrote: > > > > Yes and no, robosignatory is swamped signing the builds from the > > > > mass-rebuild, whi

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Rex Dieter
Kevin Fenzi wrote: > On 7/27/19 8:26 AM, Richard W.M. Jones wrote: >> On Fri, Jul 26, 2019 at 04:08:40PM +0200, Pierre-Yves Chibon wrote: >>> Yes and no, robosignatory is swamped signing the builds from the >>> mass-rebuild, which means they aren't landing in the buildroot :( >> >> This is still

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Adam Williamson
On Tue, 2019-07-30 at 18:00 +0100, Richard W.M. Jones wrote: > On Tue, Jul 30, 2019 at 04:26:30PM +0200, Pierre-Yves Chibon wrote: > > On Tue, Jul 30, 2019 at 04:15:31PM +0200, Florian Weimer wrote: > > > * Pierre-Yves Chibon: > > > > > > > What does it mean for us as packagers? > > > > --

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Richard W.M. Jones
On Tue, Jul 30, 2019 at 04:26:30PM +0200, Pierre-Yves Chibon wrote: > On Tue, Jul 30, 2019 at 04:15:31PM +0200, Florian Weimer wrote: > > * Pierre-Yves Chibon: > > > > > What does it mean for us as packagers? > > > -- > > > > > > When you run `fedpkg build` on R

robosigning slow again (was: Re: Rolling out Phase I of rawhide package gating)

2019-07-30 Thread Richard W.M. Jones
On Sun, Jul 28, 2019 at 11:49:05AM -0700, Kevin Fenzi wrote: > On 7/27/19 8:26 AM, Richard W.M. Jones wrote: > > On Fri, Jul 26, 2019 at 04:08:40PM +0200, Pierre-Yves Chibon wrote: > >> Yes and no, robosignatory is swamped signing the builds from the > >> mass-rebuild, which means they aren't landi

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Florian Weimer
* Pierre-Yves Chibon: > On Tue, Jul 30, 2019 at 04:15:31PM +0200, Florian Weimer wrote: >> What are the actual tag names? I have a glibc build which appears to be >> stuck in f31-updates-candidate: >> >> >> >> I wonder if this is

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Pierre-Yves Chibon
On Tue, Jul 30, 2019 at 04:15:31PM +0200, Florian Weimer wrote: > * Pierre-Yves Chibon: > > > What does it mean for us as packagers? > > -- > > > > When you run `fedpkg build` on Rawhide, your package will be built in > > a new koji tag (which will be the defaul

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Fabio Valentini
On Tue, Jul 30, 2019 at 4:16 PM Florian Weimer wrote: > > * Pierre-Yves Chibon: > > > What does it mean for us as packagers? > > -- > > > > When you run `fedpkg build` on Rawhide, your package will be built in > > a new koji tag (which will be the default target

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Florian Weimer
* Pierre-Yves Chibon: > What does it mean for us as packagers? > -- > > When you run `fedpkg build` on Rawhide, your package will be built in > a new koji tag (which will be the default target for Rawhide). The > package will be picked up from this koji tag, sig

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Kamil Paral
On Tue, Jul 30, 2019 at 10:41 AM Pierre-Yves Chibon wrote: > On Tue, Jul 30, 2019 at 10:11:07AM +0200, Fabio Valentini wrote: > > On Thu, Jul 25, 2019 at 5:25 PM Pierre-Yves Chibon > wrote: > > > > > > Good Morning Everyone, > > > > > > I just wanted to let everyone know that this is now live. >

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Pierre-Yves Chibon
On Tue, Jul 30, 2019 at 10:11:07AM +0200, Fabio Valentini wrote: > On Thu, Jul 25, 2019 at 5:25 PM Pierre-Yves Chibon > wrote: > > > > Good Morning Everyone, > > > > I just wanted to let everyone know that this is now live. > > You can see all the updates going through (or not) to rawhide in: > >

Re: Rolling out Phase I of rawhide package gating

2019-07-30 Thread Fabio Valentini
On Thu, Jul 25, 2019 at 5:25 PM Pierre-Yves Chibon wrote: > > Good Morning Everyone, > > I just wanted to let everyone know that this is now live. > You can see all the updates going through (or not) to rawhide in: > https://bodhi.fedoraproject.org/releases/F31 > > Many many thanks to all the peop

Re: Rolling out Phase I of rawhide package gating

2019-07-29 Thread Tom Hughes
On 29/07/2019 11:31, Pierre-Yves Chibon wrote: On Mon, Jul 29, 2019 at 11:23:32AM +0100, Tom Hughes wrote: On 29/07/2019 11:08, Pierre-Yves Chibon wrote: On Fri, Jul 26, 2019 at 02:19:18PM +0100, Tom Hughes wrote: On 26/07/2019 14:17, Tom Hughes wrote: On 23/07/2019 21:51, Pierre-Yves Chibon

Re: Rolling out Phase I of rawhide package gating

2019-07-29 Thread Pierre-Yves Chibon
On Mon, Jul 29, 2019 at 11:23:32AM +0100, Tom Hughes wrote: > On 29/07/2019 11:08, Pierre-Yves Chibon wrote: > > On Fri, Jul 26, 2019 at 02:19:18PM +0100, Tom Hughes wrote: > > > On 26/07/2019 14:17, Tom Hughes wrote: > > > > On 23/07/2019 21:51, Pierre-Yves Chibon wrote: > > > > > > > > > This is

Re: Rolling out Phase I of rawhide package gating

2019-07-29 Thread Pierre-Yves Chibon
On Mon, Jul 29, 2019 at 12:26:25PM +0200, Miro Hrončok wrote: > On 29. 07. 19 12:08, Pierre-Yves Chibon wrote: > > On Fri, Jul 26, 2019 at 02:19:18PM +0100, Tom Hughes wrote: > > > On 26/07/2019 14:17, Tom Hughes wrote: > > > > On 23/07/2019 21:51, Pierre-Yves Chibon wrote: > > > > > > > > > This

Re: Rolling out Phase I of rawhide package gating

2019-07-29 Thread Miro Hrončok
On 29. 07. 19 12:08, Pierre-Yves Chibon wrote: On Fri, Jul 26, 2019 at 02:19:18PM +0100, Tom Hughes wrote: On 26/07/2019 14:17, Tom Hughes wrote: On 23/07/2019 21:51, Pierre-Yves Chibon wrote: This is the first roll-out of this gating change, and so there may be additional tuning and fixes un

Re: Rolling out Phase I of rawhide package gating

2019-07-29 Thread Tom Hughes
On 29/07/2019 11:08, Pierre-Yves Chibon wrote: On Fri, Jul 26, 2019 at 02:19:18PM +0100, Tom Hughes wrote: On 26/07/2019 14:17, Tom Hughes wrote: On 23/07/2019 21:51, Pierre-Yves Chibon wrote: This is the first roll-out of this gating change, and so there may be additional tuning and fixes un

Re: Rolling out Phase I of rawhide package gating

2019-07-29 Thread Pierre-Yves Chibon
On Fri, Jul 26, 2019 at 02:19:18PM +0100, Tom Hughes wrote: > On 26/07/2019 14:17, Tom Hughes wrote: > > On 23/07/2019 21:51, Pierre-Yves Chibon wrote: > > > > > This is the first roll-out of this gating change, and so there may > > > be additional > > > tuning and fixes until things are as smooth

Re: Rolling out Phase I of rawhide package gating

2019-07-29 Thread Pierre-Yves Chibon
On Sun, Jul 28, 2019 at 11:49:05AM -0700, Kevin Fenzi wrote: > On 7/27/19 8:26 AM, Richard W.M. Jones wrote: > > On Fri, Jul 26, 2019 at 04:08:40PM +0200, Pierre-Yves Chibon wrote: > >> Yes and no, robosignatory is swamped signing the builds from the > >> mass-rebuild, which means they aren't landi

Re: Rolling out Phase I of rawhide package gating

2019-07-28 Thread Kevin Fenzi
On 7/27/19 8:26 AM, Richard W.M. Jones wrote: > On Fri, Jul 26, 2019 at 04:08:40PM +0200, Pierre-Yves Chibon wrote: >> Yes and no, robosignatory is swamped signing the builds from the >> mass-rebuild, which means they aren't landing in the buildroot :( > > This is still taking a really long time.

Re: Rolling out Phase I of rawhide package gating

2019-07-27 Thread Richard W.M. Jones
On Fri, Jul 26, 2019 at 04:08:40PM +0200, Pierre-Yves Chibon wrote: > Yes and no, robosignatory is swamped signing the builds from the > mass-rebuild, which means they aren't landing in the buildroot :( This is still taking a really long time. I built one package early this morning which still ha

Re: Rolling out Phase I of rawhide package gating

2019-07-26 Thread Pierre-Yves Chibon
On Fri, Jul 26, 2019 at 02:41:44PM +0100, Richard W.M. Jones wrote: > > I've been trying to build nbdkit which depends on libnbd >= 0.1.9 > in Fedora Rawhide this morning. > > I built libnbd a few hours ago, but it hasn't turned up in Rawhide. > > I also discovered that you can now submit update

Re: Rolling out Phase I of rawhide package gating

2019-07-26 Thread Richard W.M. Jones
I've been trying to build nbdkit which depends on libnbd >= 0.1.9 in Fedora Rawhide this morning. I built libnbd a few hours ago, but it hasn't turned up in Rawhide. I also discovered that you can now submit updates for Rawhide, so why not: https://bodhi.fedoraproject.org/updates/FEDORA-2019-d3e

Re: Rolling out Phase I of rawhide package gating

2019-07-26 Thread Tom Hughes
On 26/07/2019 14:17, Tom Hughes wrote: On 23/07/2019 21:51, Pierre-Yves Chibon wrote: This is the first roll-out of this gating change, and so there may be additional tuning and fixes until things are as smooth as we want them to be. With this release we are looking for feedback on what can be

Re: Rolling out Phase I of rawhide package gating

2019-07-26 Thread Tom Hughes
On 23/07/2019 21:51, Pierre-Yves Chibon wrote: This is the first roll-out of this gating change, and so there may be additional tuning and fixes until things are as smooth as we want them to be. With this release we are looking for feedback on what can be improved. We have a dedicated team worki

Re: Rolling out Phase I of rawhide package gating

2019-07-25 Thread Pierre-Yves Chibon
Good Morning Everyone, I just wanted to let everyone know that this is now live. You can see all the updates going through (or not) to rawhide in: https://bodhi.fedoraproject.org/releases/F31 Many many thanks to all the people involved, I'm afraid I'll miss some but I'll take the risk, so here it

Re: Rolling out Phase I of rawhide package gating

2019-07-25 Thread Pierre-Yves Chibon
On Thu, Jul 25, 2019 at 11:29:56AM +0200, Miro Hrončok wrote: > On 23. 07. 19 22:51, Pierre-Yves Chibon wrote: > > Good Morning Everyone, > > > > TL;DR: On July 24th we will turn on the first phase of Rawhide package > > gating, > > for single build updates. > > Where at https://bodhi.fedoraproj

Re: Rolling out Phase I of rawhide package gating

2019-07-25 Thread Miro Hrončok
On 23. 07. 19 22:51, Pierre-Yves Chibon wrote: Good Morning Everyone, TL;DR: On July 24th we will turn on the first phase of Rawhide package gating, for single build updates. Where at https://bodhi.fedoraproject.org/ do I find the rawhide updates? -- Miro Hrončok -- Phone: +420777974800 IRC:

Re: Rolling out Phase I of rawhide package gating

2019-07-25 Thread Pierre-Yves Chibon
On Thu, Jul 25, 2019 at 01:38:23AM +0200, Miro Hrončok wrote: > On 24. 07. 19 17:30, Robbie Harwood wrote: > > Pierre-Yves Chibon writes: > > > > > When you run `fedpkg build` on Rawhide, your package will be built in > > > a new koji tag (which will be the default target for Rawhide). The > > >

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Miro Hrončok
On 24. 07. 19 17:30, Robbie Harwood wrote: Pierre-Yves Chibon writes: When you run `fedpkg build` on Rawhide, your package will be built in a new koji tag (which will be the default target for Rawhide). The package will be picked up from this koji tag, signed and moved onto a second tag. Bodhi

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Matthew Miller
On Wed, Jul 24, 2019 at 06:05:50PM +0200, Pierre-Yves Chibon wrote: > I've added an entry in the FAQ for this: > https://pagure.io/cpe/rawhide-gating-docs/pull-request/5 > Maybe we could also expend fedpkg to provide some information on this. Speaking with my occasional-packager hat on, yes please

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 06:31:50PM -, Robbie Harwood wrote: > > On Wed, Jul 24, 2019 at 11:30:45AM -0400, Robbie Harwood wrote: > > > > So we don't have an easy way to do this. I have a script that monitors the > > entire pipeline/workflow in production and in staging. > > I have been querying

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Robbie Harwood
> On Wed, Jul 24, 2019 at 11:30:45AM -0400, Robbie Harwood wrote: > > So we don't have an easy way to do this. I have a script that monitors the > entire pipeline/workflow in production and in staging. > I have been querying datagrepper for messages about the build that I've made > to > see if/wh

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 11:30:45AM -0400, Robbie Harwood wrote: > Pierre-Yves Chibon writes: > > > When you run `fedpkg build` on Rawhide, your package will be built in > > a new koji tag (which will be the default target for Rawhide). The > > package will be picked up from this koji tag, signed

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Robbie Harwood
Pierre-Yves Chibon writes: > When you run `fedpkg build` on Rawhide, your package will be built in > a new koji tag (which will be the default target for Rawhide). The > package will be picked up from this koji tag, signed and moved onto a > second tag. Bodhi will be notified by koji once this ne

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Stephen John Smoogen
On Wed, 24 Jul 2019 at 11:09, Tomasz Torcz wrote: > On Wed, Jul 24, 2019 at 03:36:35PM +0200, Miro Hrončok wrote: > > On 24. 07. 19 14:32, Josh Boyer wrote: > > > On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok > wrote: > > > > > > > > On 24. 07. 19 10:24, Tom Hughes wrote: > > > > > That said, hav

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 04:42:11PM +0200, Miro Hrončok wrote: > On 23. 07. 19 22:51, Pierre-Yves Chibon wrote: > > How do I enroll? > > Great! We’re glad to see such enthusiasm! You can find the instruction in > > the > > docs on how to enable gating:https://docs.fedoraproject.org/en-US/ci/gating/

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Kevin Fenzi
On 7/24/19 7:22 AM, Tomasz Torcz wrote: > On Wed, Jul 24, 2019 at 03:36:35PM +0200, Miro Hrončok wrote: >> On 24. 07. 19 14:32, Josh Boyer wrote: >>> On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok wrote: On 24. 07. 19 10:24, Tom Hughes wrote: > That said, having to go round adding a me

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Miro Hrončok
On 23. 07. 19 22:51, Pierre-Yves Chibon wrote: How do I enroll? Great! We’re glad to see such enthusiasm! You can find the instruction in the docs on how to enable gating:https://docs.fedoraproject.org/en-US/ci/gating/ Assuming I want to gate openssl for python_selftest from here: https://src.

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 04:22:01PM +0200, Tomasz Torcz wrote: > On Wed, Jul 24, 2019 at 03:36:35PM +0200, Miro Hrončok wrote: > > On 24. 07. 19 14:32, Josh Boyer wrote: > > > On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok wrote: > > > > > > > > On 24. 07. 19 10:24, Tom Hughes wrote: > > > > > That

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 04:18:25PM +0200, Kamil Paral wrote: >On Wed, Jul 24, 2019 at 2:33 PM Josh Boyer <[1]jwbo...@fedoraproject.org> >wrote: > > On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok <[2]mhron...@redhat.com> > wrote: > > > > On 24. 07. 19 10:24, Tom Hughes wro

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 03:17:41PM +0100, Tom Hughes wrote: > On 24/07/2019 14:51, Pierre-Yves Chibon wrote: > > On Wed, Jul 24, 2019 at 02:13:02PM +0100, Tom Hughes wrote: > > > > Then there's decision_context which apparently does nothing > > > but has to be there. > > > > It is used! It is wha

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Tomasz Torcz
On Wed, Jul 24, 2019 at 03:36:35PM +0200, Miro Hrončok wrote: > On 24. 07. 19 14:32, Josh Boyer wrote: > > On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok wrote: > > > > > > On 24. 07. 19 10:24, Tom Hughes wrote: > > > > That said, having to go round adding a mega ugly config file > > > > to every p

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Kamil Paral
On Wed, Jul 24, 2019 at 2:33 PM Josh Boyer wrote: > On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok wrote: > > > > On 24. 07. 19 10:24, Tom Hughes wrote: > > > That said, having to go round adding a mega ugly config file > > > to every package that looks an awful lot like an internal braindump > >

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Tom Hughes
On 24/07/2019 14:51, Pierre-Yves Chibon wrote: On Wed, Jul 24, 2019 at 02:13:02PM +0100, Tom Hughes wrote: Then there's decision_context which apparently does nothing but has to be there. It is used! It is what define which tests are used to gate the build/update when entering the -testing r

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Neal Gompa
On Wed, Jul 24, 2019 at 9:57 AM Tom Hughes wrote: > > On 24/07/2019 13:32, Josh Boyer wrote: > > On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok wrote: > >> > >> On 24. 07. 19 10:24, Tom Hughes wrote: > >>> That said, having to go round adding a mega ugly config file > >>> to every package that look

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 02:13:02PM +0100, Tom Hughes wrote: > On 24/07/2019 13:32, Josh Boyer wrote: > > On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok wrote: > > > > > > On 24. 07. 19 10:24, Tom Hughes wrote: > > > > That said, having to go round adding a mega ugly config file > > > > to every pac

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Miro Hrončok
On 24. 07. 19 14:32, Josh Boyer wrote: On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok wrote: On 24. 07. 19 10:24, Tom Hughes wrote: That said, having to go round adding a mega ugly config file to every package that looks an awful lot like an internal braindump from some system doesn't really in

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Tom Hughes
On 24/07/2019 13:32, Josh Boyer wrote: On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok wrote: On 24. 07. 19 10:24, Tom Hughes wrote: That said, having to go round adding a mega ugly config file to every package that looks an awful lot like an internal braindump from some system doesn't really in

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Josh Boyer
On Wed, Jul 24, 2019 at 8:02 AM Miro Hrončok wrote: > > On 24. 07. 19 10:24, Tom Hughes wrote: > > That said, having to go round adding a mega ugly config file > > to every package that looks an awful lot like an internal braindump > > from some system doesn't really inspire confidence, or make fo

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Miro Hrončok
On 24. 07. 19 10:17, Dan Horák wrote: On Tue, 23 Jul 2019 22:51:28 +0200 Pierre-Yves Chibon wrote: Good Morning Everyone, TL;DR: On July 24th we will turn on the first phase of Rawhide package gating, for single build updates. In a later phase, Rawhide updates that contain multiple builds wil

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Miro Hrončok
On 24. 07. 19 10:24, Tom Hughes wrote: That said, having to go round adding a mega ugly config file to every package that looks an awful lot like an internal braindump from some system doesn't really inspire confidence, or make for an easy way of opting in. This. The gating.yaml file is terribl

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 11:41:16AM +0200, Florian Weimer wrote: > * Pierre-Yves Chibon: > > > On Wed, Jul 24, 2019 at 08:29:03AM +0200, Florian Weimer wrote: > >> * Pierre-Yves Chibon: > >> > >> > Good Morning Everyone, > >> > > >> > TL;DR: On July 24th we will turn on the first phase of Rawhide

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 10:27:35AM +0100, Peter Robinson wrote: > > On Wed, Jul 24, 2019 at 09:14:05AM +0100, Peter Robinson wrote: > > > On Wed, Jul 24, 2019 at 9:10 AM Pierre-Yves Chibon > > > wrote: > > > > > > > > On Tue, Jul 23, 2019 at 10:35:13PM +0100, Tom Hughes wrote: > > > > > On 23/07/

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Florian Weimer
* Pierre-Yves Chibon: > On Wed, Jul 24, 2019 at 08:29:03AM +0200, Florian Weimer wrote: >> * Pierre-Yves Chibon: >> >> > Good Morning Everyone, >> > >> > TL;DR: On July 24th we will turn on the first phase of Rawhide package >> > gating, >> > for single build updates. >> >> How does this intera

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Peter Robinson
> On Wed, Jul 24, 2019 at 09:14:05AM +0100, Peter Robinson wrote: > > On Wed, Jul 24, 2019 at 9:10 AM Pierre-Yves Chibon > > wrote: > > > > > > On Tue, Jul 23, 2019 at 10:35:13PM +0100, Tom Hughes wrote: > > > > On 23/07/2019 21:51, Pierre-Yves Chibon wrote: > > > > > > > > > When you run `fedpkg

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 10:17:20AM +0200, Dan Horák wrote: > On Tue, 23 Jul 2019 22:51:28 +0200 > Pierre-Yves Chibon wrote: > > > Good Morning Everyone, > > > > TL;DR: On July 24th we will turn on the first phase of Rawhide > > package gating, for single build updates. > > In a later phase, Rawh

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Tom Hughes
On 24/07/2019 09:14, Peter Robinson wrote: On Wed, Jul 24, 2019 at 9:10 AM Pierre-Yves Chibon wrote: On Tue, Jul 23, 2019 at 10:35:13PM +0100, Tom Hughes wrote: On 23/07/2019 21:51, Pierre-Yves Chibon wrote: When you run `fedpkg build` on Rawhide, your package will be built in a new koji ta

Re: Rolling out Phase I of rawhide package gating

2019-07-24 Thread Pierre-Yves Chibon
On Wed, Jul 24, 2019 at 09:14:05AM +0100, Peter Robinson wrote: > On Wed, Jul 24, 2019 at 9:10 AM Pierre-Yves Chibon > wrote: > > > > On Tue, Jul 23, 2019 at 10:35:13PM +0100, Tom Hughes wrote: > > > On 23/07/2019 21:51, Pierre-Yves Chibon wrote: > > > > > > > When you run `fedpkg build` on Rawhi

  1   2   >