On Thu, 2018-03-15 at 10:59 -0400, Rob Crittenden via FreeIPA-devel
wrote:
Christian Heimes wrote:
> On 2018-03-15 14:19, Rob Crittenden via FreeIPA-devel wrote:
> > freeIPA in Fedora 28 is currently broken for a number of reasons:
> >
> > - The NSS switch to sqlite
> > - 389-ds now provides a default security entry
> > - many changes in dogtag
> >
> > FESCO has given us and dogtag a reprieve on the beta deadline but we
> > need to get something working ASAP.
> >
> > The dogtag team has their code in mostly working shape now.
> >
> > For IPA we need to decide what to release. I see the choices as:
> >
> > 1. Use 4.6.3 + NSS and other patches
> > 2. Release 4.7.0 now even though it doesn't have everything we planned
> > and ship that with F-28
> > 3. Do a 4.7.0 pre-release (set IPA_VERSION_PRE_RELEASE in VERSION and
> > release a tarball).
> > 4. Use a git pull from master for F-28 and name it something that will
> > be upgradable (this is the tricky bit).
>
> I'm for option (3) or option (2) in that order. We need to get some
> working release out ASAP. Dogtag won't release 10.6 to F28 until we have
> confirmed that 10.6 works with FreeIPA. It doesn't have to be a final
> version and it doesn't have to support migration for now.
>
> Perhaps we should replace ipa-server-upgrade with a dummy so people
> cannot update a production system until we have ironed out all kinks.
>
> Authselect and ntpd to chrony port are mostly done. I'm confident that
> Lex and Tibor will be able to deliver the improvements in time for
> Fedora 28.
I also prefer 3 or 2, in that order.
If we do a pre-release do we want to crank up the full Release engine
including release notes, etc? Or just tag it, generate a tarball and
release into F28?
release notes == release :-)
Simo.
--
Simo Sorce
Sr. Principal Software Engineer
Red Hat, Inc