Michael, you make a very good point at
https://blogs.gnome.org/mcatanzaro/2016/03/13/do-you-trust-this-package/
Our packaging guidelines really ought to mandate that *if* upstream
publishes GPG or PKCS#7/CMS signatures of source tarballs, then the
package *must* verify those signatures as part of %prep.
Do you want to put a draft together for approval by the packaging
committee?
It might be nice to provide some RPM macros to make that easier for
packagers.
I've had a go at doing this for OpenConnect, in
http://pkgs.fedoraproject.org/cgit/rpms/openconnect.git/commit/?id=ca61de3f…
It's a bit pointless there, since the tarballs tend to get uploaded to
Fedora from the same workstation I sign them on, sometimes *before*
they're uploaded to the FTP site. But it's still good practice, as you
rightly point out.
--
David Woodhouse Open Source Technology Centre
David.Woodhouse(a)intel.com Intel Corporation
First and foremost, I would like to point out that we have a modularity
calendar in fedocal[1]. We will schedule meetings there and, likely,
send a note to devel@ for each meeting with an agenda, etc.
I would also like to formally invite the Fedora Base WG and Envs &
Stacks members to the new Modularity WG and hope to see them at the meeting.
I am proposing the following agenda for today, but am happy to take
edits here or during the meeting.
* intros, overview, context setting
* determine the number of voting members of the WG
* proposal to close nominations early as we likely have more than required
* discuss the best time for future, recurring meetings
* discuss "what to deliver" & planned delivery dates
* discuss approach for "doing work"
* assign people to update wiki with decisions
Langdon
Modularity Objective Lead
[1]: https://apps.fedoraproject.org/calendar/modularity/
Following is the list of topics that will be discussed in the FPC
meeting Thursday at 2016-03-31 16:00 UTC in #fedora-meeting-1 on
irc.freenode.net.
Local time information (via. rktime):
2016-03-31 09:00 Thu US/Pacific PDT
2016-03-31 12:00 Thu US/Eastern EDT
2016-03-31 16:00 Thu UTC <-
2016-03-31 17:00 Thu Europe/London BST
2016-03-31 18:00 Thu Europe/Paris CEST
2016-03-31 18:00 Thu Europe/Berlin CEST
2016-03-31 21:30 Thu Asia/Calcutta IST
------------------new day----------------------
2016-04-01 00:00 Fri Asia/Singapore SGT
2016-04-01 00:00 Fri Asia/Hong_Kong HKT
2016-04-01 01:00 Fri Asia/Tokyo JST
2016-04-01 02:00 Fri Australia/Brisbane EST
Links to all tickets below can be found at:
https://fedorahosted.org/fpc/report/13
= Followups =
#topic #558 Application/Library distinction and package splitting
.fpc 558
https://fedorahosted.org/fpc/ticket/558
#topic #566 RPM file triggers
.fpc 566
https://fedorahosted.org/fpc/ticket/566
= New business =
#topic #610 Packaging guidelines: Check upstream tarball signatures
.fpc 610
https://fedorahosted.org/fpc/ticket/610
#topic #612 Python naming convention makes some Python tools unusable
.fpc 612
https://fedorahosted.org/fpc/ticket/612
= Open Floor =
For more complete details, please visit each individual ticket. The
report of the agenda items can be found at:
https://fedorahosted.org/fpc/report/13
If you would like to add something to this agenda, you can reply to
this e-mail, file a new ticket at https://fedorahosted.org/fpc,
e-mail me directly, or bring it up at the end of the meeting, during
the open floor topic. Note that added topics may be deferred until
the following meeting.
Hello, tomorrow I'm going to update wcslib to 5.14, which includes a soname
bump. This change affects the following packages:
cpl
kstars
python-astropy
astrometry
Best regards, Sergio
Somehow, somewhen, I wound up as the main contact for the 'ddclient'
package though I never intended to and know nothing at all about it.
I've noticed this a couple of times before and I guess I looked up why
but I forgot again and I'm sick of it, I don't want this package and I
don't want its bugs. I just orphaned it. Anyone who wants it can pick
it up.
--
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net
Hi,
it has been a while since kubernetes was pushed to f23 stable
repository. This is the first suitable build after more than half a year.
Any help with testing and adding positive karmas is appreciated. Update
is located here [1].
[1]
https://bodhi.fedoraproject.org/updates/kubernetes-1.2.0-0.15.alpha6.gitf0c…
Thanks
Jan