golang September 2015

golang@lists.fedoraproject.org

2 participants
202 discussions

[Bug 1264699] New: kubernetes do not respect tpmfiles.d policu
by Red Hat Bugzilla 29 Jun '16

29 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1264699 Bug ID: 1264699 Summary: kubernetes do not respect tpmfiles.d policu Product: Fedora Version: 22 Component: kubernetes Assignee: jchaloup(a)redhat.com Reporter: mscherer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org, jcajka(a)redhat.com, jchaloup(a)redhat.com, lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com Description of problem: /run/kubernetes is listed as unowned. ] That's against policy: https://fedoraproject.org/wiki/Packaging:Tmpfiles.d Version-Release number of selected component (if applicable): kubernetes-1.1.0-0.5.gite44c8e6.fc22.x86_64 How reproducible: each time Steps to Reproduce: 1. install kubernetes 2. verify with rpm -qf Actual results: # rpm -qf /run/kubernetes/ file /run/kubernetes is not owned by any package Expected results: file is owned, and with the right permission. Additional info: This also mean that something create /run/kubernetes/ owned as root:root, which prevent kubernetes-apiserver from starting: Sep 20 14:01:15 gluster2 kube-apiserver[17759]: E0920 14:01:15.230961 17759 server.go:485] Unable to listen for secure (open /var/run/kubernetes/apiserver.crt: no such file or directory); will try again. And likely linked to http://ask.projectatomic.io/en/question/199/missing-apiservercrt-unable-to-… Here is a trivial patch to add that. -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1210364] New: Embedded kubelet cadvisor fails to enumerate docker containers
by Red Hat Bugzilla 29 Jun '16

29 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1210364 Bug ID: 1210364 Summary: Embedded kubelet cadvisor fails to enumerate docker containers Product: Fedora Version: 22 Component: kubernetes Assignee: jchaloup(a)redhat.com Reporter: stefw(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org, jchaloup(a)redhat.com, lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com Description of problem: The cAdvisor embedded in kubelet fails to enumerate docker containers. It fails with the message: failed to get all Docker containers with error: unable to find data for container /system.slice/docker-....scope Version-Release number of selected component (if applicable): kubernetes-0.13.2-0.5.git8d94c43.fc22.x86_64 How reproducible: Every time. Tried restarting Docker. Steps to Reproduce: 1. http://localhost:4194/api/v1.2/docker 1. Or just go to http://localhost:4194 and click on 'Docker Containers' to see the same thing. Actual results: failed to get all Docker containers with error: unable to find data for container /system.slice/docker-9dade0a01bf0368b6c0dad722f7e85af98593dde00873e6abb2cfd86d2d2b7a9.scope Expected results: Output like this: {"/system.slice/docker-1a0bda816225dc1fcae4e9f0583f982664675f66d523095513ff01694c3311e1.scope":{"name":"/system.slice/docker-1a0bda816225dc1fcae4e9f0583f982664675f66d523095513ff01694c3311e1.scope","aliases":["k8s_ruby-helloworld.8ec853e6_frontend-58wav_default_19192267-d9c8-11e4-b2d6-10c37bdb8410_025ed744","1a0bda816225dc1fcae4e9f0583f982664675f66d523095513ff01694c3311e1"],"namespace":"docker","spec":{"creation_time":"0001-01-01T00:00:00Z","has_c... Additional info: When running standalone cadvisor I get the above expected output. cadvisor-0.10.1-0.1.gitef7dddf.fc22.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

1 18

[Bug 1223445] New: Update flannel to the latest commit to get "mutli-network support and abstract subnet mgr"
by Red Hat Bugzilla 23 Jun '16

23 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1223445 Bug ID: 1223445 Summary: Update flannel to the latest commit to get "mutli-network support and abstract subnet mgr" Product: Fedora Version: rawhide Component: flannel Assignee: jchaloup(a)redhat.com Reporter: jchaloup(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org, jchaloup(a)redhat.com, linville(a)redhat.com, lsm5(a)redhat.com, nhorman(a)redhat.com, vbatts(a)redhat.com Update to at least [1] [1] https://github.com/coreos/flannel/commit/9cbad3b7f08e8e2a803d00dbbeeba3a444… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1038683] New: golang appears to contain an ECC implementation
by Red Hat Bugzilla 17 Jun '16

17 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1038683 Bug ID: 1038683 Summary: golang appears to contain an ECC implementation Product: Fedora Version: 20 Component: golang Assignee: adam(a)spicenitz.org Reporter: notting(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: adam(a)spicenitz.org, admiller(a)redhat.com, golang(a)lists.fedoraproject.org, lemenkov(a)gmail.com, lsm5(a)redhat.com, renich(a)woralelandia.com, skottler(a)redhat.com, vbatts(a)redhat.com Blocks: 182235 (FE-Legal), 1019390 (ecc) Description of problem: At least, I would assume that's what is in go/src/pkg/crypto/elliptic/. In Fedora, we only ship certain reviewed curves. Version-Release number of selected component (if applicable): 1.2-1 How reproducible: 100% Steps to Reproduce: 1. look at golang's crypto code Actual results: Hey, that looks like ECC, and it appears to have been always included. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=182235 [Bug 182235] Fedora Legal Tracker https://bugzilla.redhat.com/show_bug.cgi?id=1019390 [Bug 1019390] [tracking bug] re-enable ECC/ECDHE/EC/ECDSA/elliptic curves in Fedora -- You are receiving this mail because: You are on the CC list for the bug.

1 19

[Bug 1243479] New: RFE: Ship docker with all RHEL patches
by Red Hat Bugzilla 08 Jun '16

08 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1243479 Bug ID: 1243479 Summary: RFE: Ship docker with all RHEL patches Product: Fedora Version: 22 Component: docker-io Assignee: ichavero(a)redhat.com Reporter: riek(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: adimania(a)gmail.com, admiller(a)redhat.com, golang(a)lists.fedoraproject.org, hushan.jia(a)gmail.com, ichavero(a)redhat.com, jchaloup(a)redhat.com, jperrin(a)centos.org, lsm5(a)redhat.com, mgoldman(a)redhat.com, miminar(a)redhat.com, msamia(a)netsuite.com, s(a)shk.io, thrcka(a)redhat.com, vbatts(a)redhat.com, wolfy(a)nobugconsulting.ro In order to ensure that cross-development works for RHEL on Fedora, please ship docker with all the same patches currently shipped or planned to be shipped in RHEL. Specifically please include the secrets patch to allow using RHEL subscriptions to develop RHEL containers on top of a Fedora workstation. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1046469] New: docker privileged mode with cmd /sbin/init - agetty & high cpu
by Red Hat Bugzilla 08 Jun '16

08 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1046469 Bug ID: 1046469 Summary: docker privileged mode with cmd /sbin/init - agetty & high cpu Product: Fedora Version: 20 Component: docker-io Assignee: lsm5(a)redhat.com Reporter: fortuik(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: golang(a)lists.fedoraproject.org, lsm5(a)redhat.com, mattdm(a)redhat.com, mgoldman(a)redhat.com, skottler(a)redhat.com, vbatts(a)redhat.com Description of problem: docker containers in privileged mode mess with the host agetty and produce very hicht cpu load Version-Release number of selected component (if applicable): Fedora 20 Docker 0.7.1, 0.7.2 How reproducible: docker run -privileged -d mattdm/fedora:latest /sbin/init Actual results: docker container runs cpu load is very high - agetty stopping the container & the docker daemon do not free the cpu resources one have to kill the agetty process Expected results: docker container runs Additional info: In my real case i run rhel containers with puppet & ssh daemons for a small puppet lab. The reason i met this bug is that running docker container with /sbin/init cmd under RHEL 6.5 require priviliged mode. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1192081] New: Modify base image Dockerfile to enable systemd to run smoothly
by Red Hat Bugzilla 08 Jun '16

08 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1192081 Bug ID: 1192081 Summary: Modify base image Dockerfile to enable systemd to run smoothly Product: Fedora Version: rawhide Component: docker-io Assignee: lsm5(a)redhat.com Reporter: vpavlin(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: adimania(a)gmail.com, admiller(a)redhat.com, golang(a)lists.fedoraproject.org, hushan.jia(a)gmail.com, jchaloup(a)redhat.com, jperrin(a)centos.org, lsm5(a)redhat.com, mattdm(a)redhat.com, mgoldman(a)redhat.com, miminar(a)redhat.com, s(a)shk.io, thrcka(a)redhat.com, vbatts(a)redhat.com Description of problem: systemd requires container=docker set in env and /run, /tmp to be mountpoints start successfully. In my opinion, we should add ENV container=docker VOLUME ['/run', '/tmp'] to the base image Dockerfile. Command docker run --it --rm -v /sys/fs/cgroup:/sys/fs/cgroup:ro fedora:rawhide /usr/sbin/init would then be all an user would need to "boot" systemd in a container. I've already made some changes in KS file - remove fstab and machine-id, mask mount units... which make the boot sequence smooth. More changes to boot sequence will probably come later (f.e. switch from graphical.target to multi-user target) I'd also like to suggest new Rawhide build to be pushed to registry. This one works for me quite well: http://koji.fedoraproject.org/koji/taskinfo?taskID=8883309 -- You are receiving this mail because: You are on the CC list for the bug.

1 16

[Bug 1250352] New: golang: HTTP request smuggling in net/http library
by Red Hat Bugzilla 07 Jun '16

07 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1250352 Bug ID: 1250352 Summary: golang: HTTP request smuggling in net/http library Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: admiller(a)redhat.com, golang(a)lists.fedoraproject.org, lemenkov(a)gmail.com, renich(a)woralelandia.com, s(a)shk.io, thrcka(a)redhat.com, vbatts(a)redhat.com There have been found potentially exploitable flaws in Golang net/http library affecting versions 1.4.2 and 1.5. Problems: * Double Content-length headers in a request does not generate a 400 error, the second Content-length is ignored. * Invalid headers are parsed as valid headers (like "Content Length:" with a space in the middle) Exploitations: In a situation where the net/http agent HTTP communication with the final http clients is using some reverse proxy (reverse proxy cache, SSL terminators, etc), some requests can be made exploiting the net/http HTTP protocol violations. Attacker could possibly: * bypass security controls on theses previous elements * perform some cache poisoning on these elements * alter the request/response map on these previous elements (for DOS) CVE request: http://seclists.org/oss-sec/2015/q3/237 Upstream patches: https://github.com/golang/go/commit/117ddcb83d7f42d6aa72241240af99ded81118e9 https://github.com/golang/go/commit/300d9a21583e7cf0149a778a0611e76ff7c6680f https://github.com/golang/go/commit/143822585e32449860e624cace9d2e521deee62e -- You are receiving this mail because: You are on the CC list for the bug.

1 28

[Bug 1256978] New: cadvisor-0.16.0.1 is available
by Red Hat Bugzilla 04 Jun '16

04 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1256978 Bug ID: 1256978 Summary: cadvisor-0.16.0.1 is available Product: Fedora Version: rawhide Component: cadvisor Keywords: FutureFeature, Triaged Assignee: jchaloup(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: eparis(a)redhat.com, golang(a)lists.fedoraproject.org, jchaloup(a)redhat.com, lsm5(a)redhat.com, vbatts(a)redhat.com Latest upstream release: 0.16.0.1 Current version/release in rawhide: 0.16.0-1.fc23 URL: https://github.com/google/cadvisor Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. -- You are receiving this mail because: You are on the CC list for the bug.

1 89

[Bug 1250485] New: Tracker for golang-github-influxdb-influxdb
by Red Hat Bugzilla 03 Jun '16

03 Jun '16

https://bugzilla.redhat.com/show_bug.cgi?id=1250485 Bug ID: 1250485 Summary: Tracker for golang-github-influxdb-influxdb Product: Fedora Version: rawhide Component: golang-github-influxdb-influxdb Assignee: fpokorny(a)redhat.com Reporter: fpokorny(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fpokorny(a)redhat.com, golang(a)lists.fedoraproject.org, jchaloup(a)redhat.com, lsm5(a)redhat.com, vbatts(a)redhat.com Tracker for async updates of golang-github-influxdb-influxdb for rawhide and other fedora distribution. As golang devel packages are used only as a build-time dependency at the moment, this tracker keeps updates and other information about this package, e.g. broken dependencies, exceptions, important pieces of information and other issues. -- You are receiving this mail because: You are on the CC list for the bug.

1 25

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

golang September 2015