devel October 2019

devel@lists.centos.org

67 participants
59 discussions

CentOS8 Updates Status
by Leon Fauster 18 Oct '19

18 Oct '19

Hi, I'm just curious about some CentOS8 updates. For example: https://access.redhat.com/errata/RHSA-2019:2663 https://koji.mbox.centos.org/koji/buildinfo?buildID=4627 https://access.redhat.com/errata/RHSA-2019:2774 https://git.centos.org/rpms/thunderbird/releases Any hints in general about the updates? Thanks! Leon

2 1

insights-client: upstream vendor tag
by Leon Fauster 18 Oct '19

18 Oct '19

JFYI: a system integrity check shows a upstream vendor tag. https://git.centos.org/rpms/insights-client has Vendor: Red Hat, Inc. hardcoded in the spec file. Not sure if this is intentional ... -- Leon

1 0

RPM-GPG-KEY-CentOS-8
by Leon Fauster 17 Oct '19

17 Oct '19

Hi All! Congratulations to the CentOS Team! Great handcraft! I am impressed! While trying to the verify the downloaded stuff - my mental questions got answered by my self. So, no need to ask the list but this introspection shows a hidden workflow that is not so streamlined, but very crucial. So, I let it go ... As mentioned I wanted to verify the downloaded stuff and wonder where to find a trusted source for the RPM-GPG-KEY-CentOS-8 key file (yes, -8)? Okay its here https://www.centos.org/keys/ and and the trust-level is based on TLS. But I still have some questions marks: - We all use gpg2, right? So the/my first check will go through gnupg, but GPG keyservers are not the first choice because everyone can upload keys but there are some efforts to have the identities at least verified https://keys.openpgp.org/about/news#2019-06-12-launch . Maybe a good idea to have full key informations (verified) for all CENTOS-Keys also there? so I switched to - http://mirror.centos.org/centos/ via HTTP without TLS upgrade. So, also not a source. Is it planned to lift this up to https-only? BTW, no RPM-GPG-KEY-CentOS-8 under http://mirror.centos.org/centos/ Ah, its RPM-GPG-KEY-CentOS-Official (another flow break). I ended up here - WWW via TLS as mentioned above https://www.centos.org/keys/ and https://wiki.centos.org/Download/Verify while the latter suggest wget over http:// (I known the fingerprint is https://wiki...-TLS protected). the wiki is still CentOS7 specific. From the usability point of view there is a forced translation needed from the user (my/users goal has CentOS8 as target). So the only trusted source is https://www.centos.org/keys/ with https://www.centos.org/keys/RPM-GPG-KEY-CentOS-Official for CentOS8. Finally, this would speed up this crucial part of verifying to new distro stuff (ISO etc.): Suggestions: Generalized https://wiki.centos.org/Download/Verify content and a included link to https://www.centos.org/keys/ (actually missing), and the same URI could be added to the CHECKSUM.asc file. Maybe its also a good best practice to have the fingerprints and the key files in two different realms too? BTW, the wiki search result for gpg, pgp or keys does not bring "Download/Verify" as the first entry. Can this be upvoted or tagged? Just thinking loud. Thanks, Leon

4 4

Patch Propagation
by MF Ghani 17 Oct '19

17 Oct '19

Hi, Does CentOS monitor the linux mainline to backport bug fixes? or does it monitor RedHat patch releases? or both? Incase it only monitors RedHat patch releases, does redhat make all their security bug fixes publicly available for the CentOS community to adopt or does it selectively release patches? Best, - Ghani

3 2

CentOS stream meeting - update
by Rich Bowen 17 Oct '19

17 Oct '19

Last week a group of Red Hat engineers, management, and members of the CentOS and Fedora communities, met at the Red Hat office in Boston to discuss how to implement CentOS Stream and formally kick-off the project, which, as you are aware, was announced the week before. Many details that were omitted in the original announcement were debated, and we came to an agreement on much, but not all, of these things. First of all, I want to ask that you be patient with us. Changing the way that the hundreds of people on the RHEL team do their work is going to take time. Developing the tooling to make everything work perfectly, and in an automated fashion, is also going to take time. And some of the things that were proposed to the Board will end up changing, based on what doesn’t work, and on the feedback from you, the CentOS community, as well as Red Hat’s customers and partners. A central point of discussion was ensuring transparency. We want to move the RHEL development more into the public, and CentOS Stream is the cornerstone of that. CentOS Stream will be a rolling preview of what is happening in RHEL development. This will allow you to experiment with the next version before it releases, and ensure that what you are working on will work, day one, when the next minor release of RHEL is announced. SIGs, too, will be able to build and test against this preview, so that when the next minor release comes out, there will be no surprises. We are working on a FAQ to answer what we anticipate will be at the top of everyone’s mind, but I’ll address a few questions that we’re already receiving. Q: How many streams will there be? Will there be a stream for 8 and another for 9? A: When the development for RHEL 9 begins, the stream for 8 will end. We plan to have a one-year overlap, to allow for transition from one stream to the other. But we do not intend to keep the 8 Stream going for the entirety of the RHEL 8 support window. Q: How can I contribute changes? A: This is still being worked on, and we ask for your patience as we work towards this. This is indeed a goal, but getting the stream itself working perfectly must happen first. Meanwhile, we’re working with the RHEL engineering team on a process where contributions from the community can be considered as part of their regular development workflow. The last thing we want is to set an expectation that we cannot meet, so we want to ensure that we have a workable process before we start asking you for contributions. We encourage your further questions, and look forward to figuring out with you how to make CentOS Stream successful for all constituents. -- Rich Bowen: CentOS Community Manager rbowen(a)redhat.com @rbowen // @CentOSProject 1 859 351 9166

10 14

The Weekly Email Updates from CPE - Reason Unmasked :)
by Aoife Moloney 17 Oct '19

17 Oct '19

Hi Everyone, By now you are probably wondering why there have been a few weekly emails to the devel list updating you with CPE projects, and who is the person sending them! So ahead of tomorrow's update, I'd like to introduce myself :) My name is Aoife Moloney and I recently started with the Community Platform Engineering (CPE) team in September. I'm based out of the Waterford office in Ireland have been with Red Hat since 2017. When the opportunity came along to work closer to the culture of Red Hat by working with a team that is at a more community level, I jumped at it! My role with the CPE team is going to be a hybrid role of a Product Owner / Project Manager and for one of my roles responsibilities, I wanted to give a weekly update to the lists as an insight into what the CPE team have worked on over the past week or so. We as a team wanted to give more visibility on our work in the community and in Red Hat, and also have an opportunity to engage with more contributors for requests like call to arms, app retirement notices, freezes, success stories we have, and anything else relevant :) These updates are currently being mirrored at a much higher level in the Fedora Project weekly blog <https://communityblog.fedoraproject.org/fpgm-report-2019-38/> and I hope to do the same for the CentOS side give maximum visibility soon. As this is a new initiative, the format may evolve and be tailored as we go, so please feel free to send comments/suggestions to let us know how we can improve this information segment! The CPE team looks after interests in both CentOS and Fedora, so this update is also going to include work done on areas that are not your Community, but for transparency, we are including it :) I hope you are finding them informative/useful and thanks for reading! Kindest regards, Aoife -- Aoife Moloney Feature Driver Community Platform Engineering Team Red Hat EMEA <https://www.redhat.com> Communications House Cork Road Waterford <https://www.redhat.com>

1 0

Call for presentations: CentOS Dojo at FOSDEM, Jan 31, 2020
by Rich Bowen 16 Oct '19

16 Oct '19

We'll be holding our annual CentOS Dojo in Brussels on the Friday before FOSDEM - January 31, 2020. We're looking for content relating to any aspect of CentOS, from either the user or developer perspective. The audience tends to be looking for fairly deep technical content, but also of interest is introductory content about new technology or software. Sessions will be 45 minutes. Look at https://wiki.centos.org/Events/Dojo/Brussels2019 for inspiration as to the kind of content that has been selected in past years. The CFP will close on November 18th, midnight Pacific US time. More details about this event are available at https://wiki.centos.org/Events/Dojo/Brussels2020 Submit your presentation proposal at https://forms.gle/96d6sYZtxJxBywA99 -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

1 0

mock config file for i686
by Priya, Nupur 16 Oct '19

16 Oct '19

Hi All, I need to build i686 packages for CentOS 8 through mock. Is there a repo setup for i686 build dependencies to be used by mock, and where could I find config file for i686 for mock build. Regards, Nupur

2 1

CentOS Stream enabled in Copr
by Miroslav Suchý 15 Oct '19

15 Oct '19

Hi. FYI - I just added centos-stream-x86_64 centos-stream-aarch64 centos-stream-ppc64le to https://copr.fedorainfracloud.org/ You can build your packages for these chroots now. -- Miroslav Suchy, RHCA Red Hat, Associate Manager ABRT/Copr, #brno, #fedora-buildsys

1 0

Mock config for CentOS Stream
by Miroslav Suchý 14 Oct '19

14 Oct '19

Mock already ships config for CentOS Stream https://github.com/rpm-software-management/mock/blob/devel/mock-core-config… Thou, it does not contains Epel as oposed to epel-8-* configs: https://github.com/rpm-software-management/mock/blob/devel/mock-core-config… I am not sure what should be relation between Epel and Stream. It is intended to work together? Or not? I will appreciate any comments to those Mock's configs. -- Miroslav Suchy, RHCA Red Hat, Associate Manager ABRT/Copr, #brno, #fedora-buildsys

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel October 2019