Re: F24 GStreamer zero day

2016-11-23 Thread Florian Weimer
On 11/23/2016 02:15 AM, Sérgio Basto wrote: On Ter, 2016-11-22 at 18:57 -0600, Michael Catanzaro wrote: Hi, Is anybody working on fixing [1]? The exploit is a little impractical in that it only works if you have not updated any F24 base packages except GStreamer, but we should still fix it. I

Re: F24 GStreamer zero day

2016-11-23 Thread Peter Robinson
>>> Hi, >>> >>> Is anybody working on fixing [1]? >>> >>> The exploit is a little impractical in that it only works if you have >>> not updated any F24 base packages except GStreamer, but we should >>> still >>> fix it. I don't see any GStreamer updates in bodhi yet. >> >> >> for gstreamer >> https

Re: F24 GStreamer zero day

2016-11-23 Thread Michael Stahl
On 23.11.2016 01:57, Michael Catanzaro wrote: > Hi, > > Is anybody working on fixing [1]? > > The exploit is a little impractical in that it only works if you have > not updated any F24 base packages except GStreamer, but we should still > fix it. I don't see any GStreamer updates in bodhi yet.

Re: upcoming build and release developer flag day December 12 2016

2016-11-23 Thread Dave Love
Is this going to work for those of us who use RHEL, not Fedora (and are only actually interested in EPEL)? Also, will it work with Heimdal clients? (The Fedora packager stuff is rather hit and miss under EPEL at the best of times.) ___ devel mailing lis

Re: upcoming build and release developer flag day December 12 2016

2016-11-23 Thread Patrick マルタインアンドレアス Uiterwijk
> On 11/21/2016 03:51 PM, Patrick マルタインアンドレアス Uiterwijk wrote: > > > Exactly like that, yes. It isn't present (yet?) on Fedora 25, though I see now > it's been added to Rawhide. Right, I dropped the ball there for a bit while testing. However, I'm building for epel6,epel7,f23,f24,f25 today, so

Re: Recommended upgrade procedure for >1 release upgrades

2016-11-23 Thread Stephen Gallagher
On 11/22/2016 06:41 PM, Kalev Lember wrote: > On 11/22/2016 04:44 PM, Kamil Paral wrote: >>> OK, so we have two cases here: >>> >>> 1) gnome-software as is currently in F23 and F24 >>> >>> 2) gnome-software future releases >>> >>> For (1), the version of gnome-software in F23 and F24 currently does

Re: Modifying container storage for Fedora 26.

2016-11-23 Thread Daniel J Walsh
On 11/22/2016 06:24 PM, Josh Berkus wrote: > Vivek, Dan, > >> - Now when docker users overlay2 graph driver, all the images, containers >> and associated metadata will be stored outside the root filesystem and >> onto /dev/docker-vg/foo logical volume. > This is a change from current storage

Re: F24 GStreamer zero day

2016-11-23 Thread Matthew Miller
On Tue, Nov 22, 2016 at 06:57:45PM -0600, Michael Catanzaro wrote: > Is anybody working on fixing [1]? > The exploit is a little impractical in that it only works if you have > not updated any F24 base packages except GStreamer, but we should still > fix it. I don't see any GStreamer updates in bod

Re: upcoming build and release developer flag day December 12 2016

2016-11-23 Thread Kevin Fenzi
On Wed, 23 Nov 2016 11:44:14 + Dave Love wrote: > Is this going to work for those of us who use RHEL, not Fedora (and > are only actually interested in EPEL)? Yes, it should. > Also, will it work with > Heimdal clients? (The Fedora packager stuff is rather hit and miss > under EPEL at t

F25 Server cloud image

2016-11-23 Thread Miroslav Suchý
I just wanted to download F25 Cloud image for OpenStack and was surprised that there is none. There is just Atomic image. But Atomic use rpm-ostree for installing packages. There is no DNF. However I cannot find any module for rpm-ostree for Ansible. Am I missing something? What should I install

ppisar changed perl-sig's 'watchcommits' permission on perl-Net-CalDAVTalk (master) to 'Approved'

2016-11-23 Thread notifications
ppisar changed perl-sig's 'watchcommits' permission on perl-Net-CalDAVTalk (master) to 'Approved' https://admin.fedoraproject.org/pkgdb/package/perl-Net-CalDAVTalk/ ___ perl-devel mailing list -- perl-de...@lists.fedoraproject.org To unsubscribe

Re: F25 Server cloud image

2016-11-23 Thread Stephen Gallagher
On 11/23/2016 08:49 AM, Miroslav Suchý wrote: > I just wanted to download F25 Cloud image for OpenStack and was surprised > that there is none. There is just Atomic image. > But Atomic use rpm-ostree for installing packages. There is no DNF. However I > cannot find any module for rpm-ostree for >

Re: F25 Server cloud image

2016-11-23 Thread Colin Walters
On Wed, Nov 23, 2016, at 08:49 AM, Miroslav Suchý wrote: > I just wanted to download F25 Cloud image for OpenStack and was surprised > that there is none. There is just Atomic image. > But Atomic use rpm-ostree for installing packages. There is no DNF. On the host, yes. But the intent is to mov

Missing kubernetes files in f25 atomic?

2016-11-23 Thread Mario Ceresa
Hi, I've just rebased an existing f24 atom to f25 and now I'm unable to find some kubernetes related files: * /usr/bin/etcd * /usr/lib/systemd/system/etcd.service * /usr/bin/kubectl * /usr/bin/hyperkube Those files are installed by packages such as (etcd, kubernetes-client, kubernetes-master) in f

Re: upcoming build and release developer flag day December 12 2016

2016-11-23 Thread Alexander Bokovoy
On ke, 23 marras 2016, Dave Love wrote: Is this going to work for those of us who use RHEL, not Fedora (and are only actually interested in EPEL)? Also, will it work with Heimdal clients? (The Fedora packager stuff is rather hit and miss under EPEL at the best of times.) EPEL builds are coming

Re: F25 Server cloud image

2016-11-23 Thread Miroslav Suchý
Dne 23.11.2016 v 15:09 Colin Walters napsal(a): > All of that said, as far as I know we are still producing > dnf based OpenStack images: > > https://kojipkgs.fedoraproject.org/compose//branched/Fedora-25-20161117.n.0/compose/CloudImages/x86_64/images/ > > It might be that we're just not linking

Re: F24 GStreamer zero day

2016-11-23 Thread Michael Catanzaro
On Wed, 2016-11-23 at 09:39 +0100, Florian Weimer wrote: > > What about the larger picture?  Can tracker be made optional again > for  > the GNOME desktop? > > Thanks, > Florian No, many of our core applications depend on tracker to be able to see files, and others (e.g. nautilus) use tracker to

Re: F25 Server cloud image

2016-11-23 Thread Matthew Miller
On Wed, Nov 23, 2016 at 03:23:36PM +0100, Miroslav Suchý wrote: > Right they are available at > > https://download.fedoraproject.org/pub/fedora/linux/releases/25/CloudImages/x86_64/images/ > and yes - they are not announced at > https://getfedora.org/en/server/download/ Robyduck is working on

Re: Review swaps

2016-11-23 Thread gil
hi Ben Takes all Your requests have time for these: https://bugzilla.redhat.com/show_bug.cgi?id=1395726 https://bugzilla.redhat.com/show_bug.cgi?id=1396216 https://bugzilla.redhat.com/show_bug.cgi?id=1396492 https://bugzilla.redhat.com/show_bug.cgi?id=1397620 ? thanks in advance regards .g Il 2

Re: Missing kubernetes files in f25 atomic?

2016-11-23 Thread Daniel J Walsh
We are working on this in https://github.com/projectatomic/atomic-system-containers I think giuseppe has some experimental system containers available for this. We need to build them as official Fedora 25 container images though. On 11/23/2016 09:12 AM, Mario Ceresa wrote: > Hi, > I've just

Re: Missing kubernetes files in f25 atomic?

2016-11-23 Thread Matthew Miller
On Wed, Nov 23, 2016 at 10:15:29AM -0500, Daniel J Walsh wrote: > We are working on this in > https://github.com/projectatomic/atomic-system-containers > > > I think giuseppe has some experimental system containers available for > this. We need to build them as official > Fedora 25 container ima

Re: Missing kubernetes files in f25 atomic?

2016-11-23 Thread Daniel J Walsh
On 11/23/2016 10:19 AM, Matthew Miller wrote: > On Wed, Nov 23, 2016 at 10:15:29AM -0500, Daniel J Walsh wrote: >> We are working on this in >> https://github.com/projectatomic/atomic-system-containers >> >> >> I think giuseppe has some experimental system containers available for >> this. We ne

Re: F24 GStreamer zero day

2016-11-23 Thread Hans de Goede
Hi, On 23-11-16 15:36, Michael Catanzaro wrote: On Wed, 2016-11-23 at 09:39 +0100, Florian Weimer wrote: What about the larger picture? Can tracker be made optional again for the GNOME desktop? Thanks, Florian No, many of our core applications depend on tracker to be able to see files, and

installing RPMs on NFS filesystems

2016-11-23 Thread Chuck Anderson
Is it supposed to be supported to install RPMs onto NFS filesystems? Apparently NFSv3 doesn't support capabilities, so I'm not sure what to do with this bug which happens because cap_net_raw is used for the fping binaries: https://bugzilla.redhat.com/show_bug.cgi?id=1350476 Thanks. __

Re: F24 GStreamer zero day

2016-11-23 Thread Andrew Lutomirski
On Nov 23, 2016 6:37 AM, "Michael Catanzaro" wrote: > > or sandboxing tracker miners (e.g. maybe with > SELinux?) that would be a more practical way forward. This seems like it would be a fantastic use of the infrastructure behind xdg-app. ___ devel mai

Re: F24 GStreamer zero day

2016-11-23 Thread Stephen John Smoogen
On 23 November 2016 at 09:36, Michael Catanzaro wrote: > On Wed, 2016-11-23 at 09:39 +0100, Florian Weimer wrote: >> >> What about the larger picture? Can tracker be made optional again >> for >> the GNOME desktop? >> >> Thanks, >> Florian > > No, many of our core applications depend on tracker t

Re: Missing kubernetes files in f25 atomic?

2016-11-23 Thread Mario Ceresa
Thanks for the hints! It seems a nice idea indeed. I found the original post from Giuseppe: http://www.projectatomic.io/blog/2016/09/intro-to-system-containers/ Do you think that I could use it to setup a small test cluster or it is still in progress? Best, Mario On Wed, 23 Nov 2016 at 16:30 Da

Re: Missing kubernetes files in f25 atomic?

2016-11-23 Thread Daniel J Walsh
Yes I think that would be cool and figure out whether or not his containers work. I am not sure if the is a kublet container yet. We are working on a docker container also, but docker exists on the atomic host. On 11/23/2016 11:19 AM, Mario Ceresa wrote: > Thanks for the hints! It seems a nice

Re: F24 GStreamer zero day

2016-11-23 Thread Andrew Lutomirski
On Nov 23, 2016 8:11 AM, "Stephen John Smoogen" wrote: > > On 23 November 2016 at 09:36, Michael Catanzaro wrote: > > On Wed, 2016-11-23 at 09:39 +0100, Florian Weimer wrote: > >> > >> What about the larger picture? Can tracker be made optional again > >> for > >> the GNOME desktop? > >> > >> Th

texlive is broken in rawhide ...?

2016-11-23 Thread gil
Hi from https://apps.fedoraproject.org/koschei/package/metrics?collection=f26 " Package resolution failedpackage texlive-latex-bin-bin-6:svn14050.0-19.20160520.fc26.1.noarch requires texlive-latex-bin, but none of the providers can be installed" any ideas? thanks in advance regards .g

[FOSDEM] [CFP] FOSDEM 2017 - Distributions Devroom - Extended

2016-11-23 Thread Brian Exelbierd
FOSDEM 2017 - Distributions Devroom Call for Participation (new deadline) The Distributions devroom will take place 4 February, 2017 at FOSDEM, in room K.4.601 at Université Libre de Bruxelles, in Brussels, Belgium. Distributions are more than just hosted collections of software from various upst

Re: texlive is broken in rawhide ...?

2016-11-23 Thread Orion Poplawski
On 11/23/2016 10:05 AM, gil wrote: > Hi > > from https://apps.fedoraproject.org/koschei/package/metrics?collection=f26 > > " Package resolution failedpackage > texlive-latex-bin-bin-6:svn14050.0-19.20160520.fc26.1.noarch requires > texlive-latex-bin, but none of the providers can be installed

Re: F24 GStreamer zero day

2016-11-23 Thread Michael Catanzaro
On Wed, 2016-11-23 at 16:36 +0100, Hans de Goede wrote: > I don't think that is entirely true. I've recently been trying > to get gnome3 to run on under-powered machines like cheap ARM > tablets, and I can do "dnf remove tracker" more or less just > fine, I loose totem due to some weird dependency

Re: F24 GStreamer zero day

2016-11-23 Thread Andrew Lutomirski
On Nov 23, 2016 10:12 AM, "Michael Catanzaro" wrote: > > On Wed, 2016-11-23 at 16:36 +0100, Hans de Goede wrote: > > I don't think that is entirely true. I've recently been trying > > to get gnome3 to run on under-powered machines like cheap ARM > > tablets, and I can do "dnf remove tracker" more

Re: F24 GStreamer zero day

2016-11-23 Thread Adam Williamson
On Wed, 2016-11-23 at 10:33 -0800, Andrew Lutomirski wrote: > On Nov 23, 2016 10:12 AM, "Michael Catanzaro" wrote: > > > > On Wed, 2016-11-23 at 16:36 +0100, Hans de Goede wrote: > > > I don't think that is entirely true. I've recently been trying > > > to get gnome3 to run on under-powered machi

Re: F24 GStreamer zero day

2016-11-23 Thread Chris Murphy
On Wed, Nov 23, 2016 at 10:36 AM, Adam Williamson wrote: > On Wed, 2016-11-23 at 10:33 -0800, Andrew Lutomirski wrote: >> On Nov 23, 2016 10:12 AM, "Michael Catanzaro" wrote: >> > >> > On Wed, 2016-11-23 at 16:36 +0100, Hans de Goede wrote: >> > > I don't think that is entirely true. I've recentl

Re: F24 GStreamer zero day

2016-11-23 Thread Stephen John Smoogen
On 23 November 2016 at 14:03, Chris Murphy wrote: > On Wed, Nov 23, 2016 at 10:36 AM, Adam Williamson > wrote: >> On Wed, 2016-11-23 at 10:33 -0800, Andrew Lutomirski wrote: >>> On Nov 23, 2016 10:12 AM, "Michael Catanzaro" wrote: >>> > >>> > On Wed, 2016-11-23 at 16:36 +0100, Hans de Goede wrot

Re: Modifying container storage for Fedora 26.

2016-11-23 Thread Vivek Goyal
On Tue, Nov 22, 2016 at 11:24:04PM -, Josh Berkus wrote: > Vivek, Dan, > > > - Now when docker users overlay2 graph driver, all the images, containers > > and associated metadata will be stored outside the root filesystem and > > onto /dev/docker-vg/foo logical volume. > [ Please don't r

Re: F24 GStreamer zero day

2016-11-23 Thread carlosg
Hi Hans, (Talking with my Tracker maintainer hat) > Hi, > > On 23-11-16 15:36, Michael Catanzaro wrote: > > I don't think that is entirely true. I've recently been trying > to get gnome3 to run on under-powered machines like cheap ARM > tablets, and I can do "dnf remove tracker" more or less ju

Re: Modifying container storage for Fedora 26.

2016-11-23 Thread Vivek Goyal
On Wed, Nov 16, 2016 at 02:56:35PM -0500, Colin Walters wrote: > On Wed, Nov 16, 2016, at 02:49 PM, Stephen Gallagher wrote: > > > Today, Fedora Server relies on whatever is the default for > > docker-storage-setup. > > We just tell Anaconda to reserve up to 15GiB by default for the / partition

Re: Missing kubernetes files in f25 atomic?

2016-11-23 Thread Jason Brooks
On Wed, Nov 23, 2016 at 6:12 AM, Mario Ceresa wrote: > Hi, > I've just rebased an existing f24 atom to f25 and now I'm unable to find > some kubernetes related files: > * /usr/bin/etcd > * /usr/lib/systemd/system/etcd.service > * /usr/bin/kubectl > * /usr/bin/hyperkube You can install most packag

HEADS UP: eigen-3.3.0 update

2016-11-23 Thread Sandro Mani
Hi eigen-3.3.0 was released a a couple of weeks ago, and I've investigated the consequences of updating in rawhide in this [1] COPR repo. The detailed analysis is below, the summary is: - five dependent packages fail to build due to the eigen3 update: avogadro, ceres-solver, kalzium, shogun

Re: F24 GStreamer zero day

2016-11-23 Thread carlosg
Hi, > On Nov 23, 2016 8:11 AM, "Stephen John Smoogen" wrote: > > Can we leave tracker enabled but disable literally every miner? AFAIK the That is literally, overreacting. Of all tracker processes, only tracker-extract may be expected to open() potentially untrusted files, tracker-miner-fs me

Re: F24 GStreamer zero day

2016-11-23 Thread Carlos Garnacho
Hi, > > This seems like it would be a fantastic use of the infrastructure behind > xdg-app. Fwiw, better flatpak integration was already on the top of the goal list for Tracker. Ideally ready for 1.12 if time allows. Cheers, Carlos ___ devel mailing

Re: F24 GStreamer zero day

2016-11-23 Thread Andrew Lutomirski
On Nov 23, 2016 2:21 PM, wrote: > > Hi, > > > On Nov 23, 2016 8:11 AM, "Stephen John Smoogen" > wrote: > > > > Can we leave tracker enabled but disable literally every miner? AFAIK the > > That is literally, overreacting. Of all tracker processes, only tracker-extract may be expected to open() p

Re: F24 GStreamer zero day

2016-11-23 Thread Andrew Lutomirski
On Wed, Nov 23, 2016 at 2:58 PM, Andrew Lutomirski wrote: > >> >> > >> > I would go even farther and argue that Fedora should not, by default, >> > ever >> > enable a miner that isn't running in *strict* seccomp mode. If that >> > means >> > that cat pictures aren't identified as such, so be it.

Re: installing RPMs on NFS filesystems

2016-11-23 Thread Samuel Sieb
On 11/23/2016 07:39 AM, Chuck Anderson wrote: Is it supposed to be supported to install RPMs onto NFS filesystems? Apparently NFSv3 doesn't support capabilities, so I'm not sure what to do with this bug which happens because cap_net_raw is used for the fping binaries: I would expect that isn't s

Re: installing RPMs on NFS filesystems

2016-11-23 Thread Subhendu Ghosh
Not really. A number of environments I know deploy nfsroot and stateless systems. On Nov 23, 2016 19:37, "Samuel Sieb" wrote: > On 11/23/2016 07:39 AM, Chuck Anderson wrote: > >> Is it supposed to be supported to install RPMs onto NFS filesystems? >> Apparently NFSv3 doesn't support capabilities

Fedora Rawhide-20161123.n.1 compose check report

2016-11-23 Thread Fedora compose checker
Missing expected images: Cloud_base qcow2 x86_64 Atomic qcow2 x86_64 Cloud_base raw-xz x86_64 Atomic raw-xz x86_64 Failed openQA tests: 58/101 (x86_64), 15/17 (i386), 1/2 (arm) New failures (same test did not fail in Rawhide-20161122.n.0): ID: 49537 Test: x86_64 Workstation-live-iso insta

Re: F24 GStreamer zero day

2016-11-23 Thread Carlos Garnacho
> On Nov 23, 2016 2:21 PM, wrote: > the > tracker-extract may > be expected to open() potentially untrusted files, > tracker-miner-fs merely opens private tracker files, and all basic > filesystem data extraction is performed through the > opendir/stat/inotify_add_watch syscalls, what is exactly i

Re: installing RPMs on NFS filesystems

2016-11-23 Thread Stephen John Smoogen
On 23 November 2016 at 19:36, Samuel Sieb wrote: > On 11/23/2016 07:39 AM, Chuck Anderson wrote: >> >> Is it supposed to be supported to install RPMs onto NFS filesystems? >> Apparently NFSv3 doesn't support capabilities, so I'm not sure what to >> do with this bug which happens because cap_net_ra

Re: installing RPMs on NFS filesystems

2016-11-23 Thread Samuel Sieb
On 11/23/2016 04:56 PM, Subhendu Ghosh wrote: Not really. A number of environments I know deploy nfsroot and stateless systems. Ok, but even in that case, you are unlikely to be installing rpms from the client instead of the server side. ___ devel ma

Re: F24 GStreamer zero day

2016-11-23 Thread Andrew Lutomirski
On Wed, Nov 23, 2016 at 5:03 PM, Carlos Garnacho wrote: > There is nothing specific in Tracker *design* about opening files, at all. > Tracker is a semantic database with a focus on local access/content, period. > Your gripe happens to be against a certain implementation of these "miners" > pop

Re: installing RPMs on NFS filesystems

2016-11-23 Thread Stephen John Smoogen
On 23 November 2016 at 20:31, Samuel Sieb wrote: > On 11/23/2016 04:56 PM, Subhendu Ghosh wrote: >> >> Not really. A number of environments I know deploy nfsroot and stateless >> systems. >> > Ok, but even in that case, you are unlikely to be installing rpms from the > client instead of the server