rel-eng October 2015

rel-eng@lists.fedoraproject.org

6 participants
58 discussions

#6210: new build of fedora:{21, 22} docker images needed for CVE-2015-1793
by Fedora Release Engineering 14 Nov '16

14 Nov '16

#6210: new build of fedora:{21,22} docker images needed for CVE-2015-1793 ------------------+------------------------ Reporter: lsm5 | Owner: rel-eng@… Type: task | Status: new Milestone: | Component: koji Keywords: | Blocked By: Blocking: | ------------------+------------------------ The fedora docker images are affected by CVE-2015-1793. Please see: https://github.com/docker-library/official-images/issues/878 and https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-1793 for details. Need new builds of these images to take care of it. (Looks like the rawhide image is affected too) -- Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6210> Fedora Release Engineering <http://fedorahosted.org/rel-eng> Release Engineering for the Fedora Project

1 2

#6219: Need updated cloud images for Fedora 22
by Fedora Release Engineering 14 Nov '16

14 Nov '16

#6219: Need updated cloud images for Fedora 22 -----------------------------+------------------------ Reporter: kushal | Owner: rel-eng@… Type: task | Status: new Milestone: Fedora 22 Final | Component: other Keywords: | Blocked By: Blocking: | -----------------------------+------------------------ Hi, I have tested the following tree with the formal tests. Please do a release of the updated cloud images from this tree. http://alt.fedoraproject.org/pub/alt/stage/22-20150720/Cloud- Images/x86_64/Images/ -- Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6219> Fedora Release Engineering <http://fedorahosted.org/rel-eng> Release Engineering for the Fedora Project

1 3

#6252: please create a rawhide and f23 side tag for llvm updates
by Fedora Release Engineering 14 Nov '16

14 Nov '16

#6252: please create a rawhide and f23 side tag for llvm updates -----------------------------+------------------------ Reporter: airlied | Owner: rel-eng@… Type: task | Status: new Milestone: Fedora 23 Final | Component: git Keywords: | Blocked By: Blocking: | -----------------------------+------------------------ Hi guys, I want to update llvm to 3.7 in rawhide and f23, but I'd like to build all the deps in a side tag first to make sure. Can you create two tags? Dave. -- Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6252> Fedora Release Engineering <http://fedorahosted.org/rel-eng> Release Engineering for the Fedora Project

1 8

#6184: suitesparse can't be installed in ppc64 el6 buildroots
by Fedora Release Engineering 07 Nov '16

07 Nov '16

#6184: suitesparse can't be installed in ppc64 el6 buildroots -----------------------------+------------------------ Reporter: rmattes | Owner: rel-eng@… Type: defect | Status: new Milestone: Fedora 23 Final | Component: epel Keywords: | Blocked By: Blocking: | -----------------------------+------------------------ I'm running into trouble building GeographicLib in epel6. GeographicLib requires octave, which in turn requires suitesparse. It looks like suitesparse was in epel for a while, but got absorbed into rhel at some point and blocked from the buildroots. Since centos doesn't provide ppc64 packages, the ppc64 octave package in epel now has missing dependencies on suitesparse libraries and can't be installed in koji. What's the best way forward for this issue? Is it to: - Unblock the epel6 suitesparse and make it exclusivearch ppc64? - Rebuild all of the dependencies of suitesparse to excludearch ppc64? - Make octave-GeographicLib excludearch ppc64 and ignore the issue entirely? Please advise. -- Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6184> Fedora Release Engineering <http://fedorahosted.org/rel-eng> Release Engineering for the Fedora Project

1 3

#6195: Signed commits for ostree / Project Atomic
by Fedora Release Engineering 03 Oct '16

03 Oct '16

#6195: Signed commits for ostree / Project Atomic -----------------------------+------------------------ Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 23 Alpha | Component: other Keywords: | Blocked By: Blocking: | -----------------------------+------------------------ As Atomic moves from experimental to something users will actually depend on, we need to get this right. It's my understanding that the current workflow doesn't make it easy (the signing needs to happen in a place different from what we're used to). I don't know the specifics, but as Dennis says, "we should figure something out. I just do not know what a good answer is". The same thing might let us also sign RPM repo metadata. -- Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6195> Fedora Release Engineering <http://fedorahosted.org/rel-eng> Release Engineering for the Fedora Project

1 2

#6267: sign ostree commits
by Fedora Release Engineering 03 Oct '16

03 Oct '16

#6267: sign ostree commits -----------------------------+------------------------ Reporter: walters | Owner: rel-eng@… Type: task | Status: new Milestone: Fedora 23 Final | Component: koji Keywords: | Blocked By: Blocking: | -----------------------------+------------------------ This has been discussed several times. AIUI it is blocked on a Fedora policy of not doing detached signatures. As downstream Red Hat Enterprise Linux and its associated PST are OK with detached signatures, I think Fedora should as well. The GPG signature would have helped mitigate https://git.fedorahosted.org/cgit/spin- kickstarts.git/commit/?id=1e408e111008f539c89212a9ca9bb955e2c4f823 for example. -- Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6267> Fedora Release Engineering <http://fedorahosted.org/rel-eng> Release Engineering for the Fedora Project

1 11

#6200: Cannot mirror Fedora drpms using OpenAFS
by Fedora Release Engineering 27 Jun '16

27 Jun '16

#6200: Cannot mirror Fedora drpms using OpenAFS -----------------------------+------------------------ Reporter: tc01 | Owner: rel-eng@… Type: task | Status: new Milestone: Fedora 22 Final | Component: other Keywords: meeting | Blocked By: Blocking: | -----------------------------+------------------------ I had (mistakenly) filed this against infrastructure: https://fedorahosted.org/fedora-infrastructure/ticket/4798 To summarize: we'd like to run a Fedora mirror in an OpenAFS cell, but the drpms/ directory is far larger than the 64K slot limit in OpenAFS and, as a result, cannot mirror them. We are currently just excluding the drpms, which works, but I'd like to be able to mirror them if possible. A couple of possible fixes are mentioned in the discussion on that ticket; keeping fewer drpms, or organizing the drpms into alphabetical subdirectories instead of one giant drpms/ directory. How does rel-eng feel about this? Is this something that could be fixed in some way or should we merely continue to exclude the drpms? Thanks in advance. -- Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6200> Fedora Release Engineering <http://fedorahosted.org/rel-eng> Release Engineering for the Fedora Project

1 6

#6261: Create secondary release staging SOP
by Fedora Release Engineering 27 Jun '16

27 Jun '16

#6261: Create secondary release staging SOP -----------------------------+------------------------ Reporter: till | Owner: rel-eng@… Type: task | Status: new Milestone: Fedora 23 Final | Component: other Keywords: | Blocked By: Blocking: | -----------------------------+------------------------ Should be similar to the one for primary I guess: https://fedoraproject.org/wiki/Stage_final_release_for_mirrors It came up when I noticed that the CHECKSUM files for secondary test releases are not signed: https://dl.fedoraproject.org/pub/fedora- secondary/releases/test/23_Alpha/Server/ppc64le/iso/Fedora-Server-23 -ppc64le-CHECKSUM -- Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6261> Fedora Release Engineering <http://fedorahosted.org/rel-eng> Release Engineering for the Fedora Project

1 1

#6286: Please sign all RC and TC images
by Fedora Release Engineering 19 Mar '16

19 Mar '16

#6286: Please sign all RC and TC images -------------------------+------------------------ Reporter: genodeftest | Owner: rel-eng@… Type: enhancement | Status: new Milestone: | Component: koji Keywords: | Blocked By: Blocking: | -------------------------+------------------------ Current situation: TC and RC images are provided on an server that does not force encryption ( http://dl.fedoraproject.org/pub/alt/stage/ ) and does not provide any signatures (see e.g. http://dl.fedoraproject.org/pub/alt/stage/23_RC10/Workstation/x86_64/iso/ ). Attacker model: * many government intelligence agencies including (but not limited to) NSA and GCHQ * some companies * criminals have an interest to intrude PCs of most people in the world. Especially testers (often software developers themselves) are at risk for being attacked since they are a high-value target for redistributing malware. Having unsigned software to download is one way to make this possible. Please provide Signatures for all RC and TC images in the future. -- Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6286> Fedora Release Engineering <http://fedorahosted.org/rel-eng> Release Engineering for the Fedora Project

1 10

#6262: drop rawhide-stable tag and consider master branch to be always stable
by Fedora Release Engineering 10 Mar '16

10 Mar '16

#6262: drop rawhide-stable tag and consider master branch to be always stable -------------------------+------------------------ Reporter: till | Owner: rel-eng@… Type: enhancement | Status: new Milestone: | Component: other Keywords: meeting | Blocked By: Blocking: | -------------------------+------------------------ Since we require patch reviews for the rel-eng pagure repo and use it for running buildbranched/buildrawhide, we can IMHO drop using the rawhide- stable tag and just consider the master branch to be always stable enough to run the scripts from it directly. AFAICS only ansible needs to be adjusted to change the crontab to not checkout rawhide-stable but master for primary and secondaries systems. -- Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6262> Fedora Release Engineering <http://fedorahosted.org/rel-eng> Release Engineering for the Fedora Project

1 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

rel-eng October 2015