devel April 2021

devel@lists.centos.org

47 participants
32 discussions

CentOS Stream Feature Request SIG Proposal
by Aoife Moloney 14 Apr '21

14 Apr '21

Hi everyone, I would like to share with you all a proposal I have submitted on creating a SIG dedicated to reviewing and triaging feature requests that come from CentOS Stream development intended for future RHEL releases. The full proposal can be read on the CentOS wiki [0] and an issue has been opened on the CentOS board tracker [1] for review and decision. Here is the proposal summary and I welcome any thoughts, feedback and discussion: Purpose The purpose of this SIG will be to serve as a gate for feature requests that are first developed in CentOS Stream from contributors who wish to request these features to be included in future RHEL releases and are then filed in bugzilla. The SIGs overall goal is to make sure that features which have been filed and have technical merit are triaged internally to the correct venue for further review and development. The SIG will take ownership of regular bugzilla reviews filed under Stream and map feature requests from these bugzillas against the formal RHEL Feature Request criteria to identify and file qualifying requests inside Red Hat to achieve this. I hope you all have a lovely weekend! Kindest regards, Aoife, [0] - https://wiki.centos.org/SpecialInterestGroup/StreamFeatureRequest [1] - https://git.centos.org/centos/board/issue/33 -- Aoife Moloney Product Owner Community Platform Engineering Team Red Hat EMEA Communications House Cork Road Waterford

12 16

yum module info squid
by Markus Falb 13 Apr '21

13 Apr '21

Hi, There are 2 versions of squid module available for CentOS 8 http://mirror.centos.org/centos-8/8.3.2011/AppStream/x86_64/os/Packages/ squid-4.4-8.module_el8.3.0+623+2bb85980.2.x86_64.rpm squid-4.11-3.module_el8.3.0+558+7bf80f5f.x86_64.rpm But the output of yum module info does not give corresponding information [root@127162ed7c15 /]# yum module info squid Last metadata expiration check: 0:00:12 ago on Tue Apr 13 18:15:31 2021. Name : squid Stream : 4 [d][a] Version : 8030020201223011621 Context : 30b713e6 Architecture : x86_64 Profiles : common [d] Default profiles : common Repo : appstream Summary : Squid - Optimising Web Delivery Description : an initial version of the squid caching proxy module Requires : platform:[el8] Artifacts : libecap-0:1.0.1-2.module_el8.3.0+395+6cb406eb.src : libecap-0:1.0.1-2.module_el8.3.0+395+6cb406eb.x86_64 : libecap-debuginfo-0:1.0.1-2.module_el8.3.0+395+6cb406eb.x86_64 : libecap-debugsource-0:1.0.1-2.module_el8.3.0+395+6cb406eb.x86_64 : libecap-devel-0:1.0.1-2.module_el8.3.0+395+6cb406eb.x86_64 : squid-7:4.4-8.module_el8.3.0+623+2bb85980.2.src : squid-7:4.4-8.module_el8.3.0+623+2bb85980.2.x86_64 : squid-debuginfo-7:4.4-8.module_el8.3.0+623+2bb85980.2.x86_64 : squid-debugsource-7:4.4-8.module_el8.3.0+623+2bb85980.2.x86_64 One thing is, I would have expected both versions of squid listed. But CentOS repodata seems to generally list one version of the module? The other thing is that squid 4.4-8 has a modification date 2020-12-23 02:14, while squid 4.11-3 dates from 2020-11-04 02:43. The newer package is older, so only the older package is made available? kind regards, markus

2 1

Help Clair Support CentOS
by Louis DeLosSantos 12 Apr '21

12 Apr '21

Hello, My name is Louis and I'm the core maintainer of Clar: https://github.com/quay/clair Clair is a project for scanning containers for vulnerabilities. We'd like to support CentOS but we need a little help in the form of information gathering. For Clair to properly support a distribution we typically require it to have an official upstream vulnerability database. For example, RHEL has their own Oval 2 feeds as does Ubuntu, Suse, etc... What we are trying to determine is how we can extract packages from CentOS containers and match against known vulnerabilities. We have the first half worked out already, we have generic RPM database scanners which extract package names and versions. The second half is where we need some more information. A few questions: * Does CentOS maintain its own security database for packages in its downstream repositories ? * If not, can we reliably treat any CentOS packages (name, versions) identical to the way we treat RHEL packages. (For instance if we find package A with version B can we attempt to match this against RHEL's Oval v2 stream?) * Can you provide any information on package naming, versioning, and packaging that creates a difference between RHEL packages and CentOS? Thank you for your time, I look forward to hearing back.

2 3

screen CVE-2021-26937 for x86_64
by Ben 09 Apr '21

09 Apr '21

Hello, The screen package that fixes the recent CVE-2021-26937 (https://vault.centos.org/7.9.2009/updates/Source/SPackages/screen-4.1.0-0.2…) has been built and populated for all altarches, but does not exist in x86_64. This build for x86_64 appears to have slipped through the cracks? I've raised https://bugs.centos.org/view.php?id=18147 to track this issue. Cheers, Ben

2 2

CentOS Stream 9 web browser default page
by Alain Reguera Delgado 08 Apr '21

08 Apr '21

Rich, everyone! I've been re-designing the web browser's default page and am wondering what content you think it should have in order to be great? I would like to make a collaborative effort of it and am looking for the correct way to do it in our community. This is a welcome page. The first we'll see when the web browser is opened. It also would be visible in the screenshot section the wiki has on the front page (following Akemi's tradition here :) https://gitlab.com/areguera/centos-indexhtml Best regards, -- Alain Reguera Delgado <alain.reguera(a)gmail.com>

3 4

NFV SIG meeting minutes 07 April 2021
by Dominik Holler 07 Apr '21

07 Apr '21

To CentOS community, here are meeting minutes for 07-Apr-2021: readable html version of minutes are here: https://www.centos.org/minutes/2021/April/centos-meeting.2021-04-07-15.03.h… Meeting started by dholler at 15:03:05 UTC. The full logs are available at https://www.centos.org/minutes/2021/April/centos-meeting.2021-04-07-15.03.l… . Meeting summary --------------- * Release RPM for CentOS 8 Stream (dholler, 15:06:23) * no progress on new release-rpm for centos-8 stream (amoralej, 15:07:28) * Status of automation and CI (dholler, 15:08:31) * big thanks to amoralej and ykarel for the automation! (dholler, 15:09:00) * automation is working fine for 2.11, 2.13 and 2.15, including 2.15 for centos8 stream (dholler, 15:10:33) * thanks msantana for that work! (amoralej, 15:10:48) * automated release process of ovs2.11 works for oVirt (dholler, 15:15:36) * Introduction of Ales (dholler, 15:16:27) * LINK: https://accounts.centos.org/ (amoralej, 15:18:55) * LINK: https://docs.fedoraproject.org/en-US/fedora-accounts/user/#addingmembers (Arrfab, 15:20:25) * LINK: https://accounts.centos.org/group/sig-nfv/ => so you're sponsor :) (Arrfab, 15:21:32) * amusil has been added as member to the NFV SIG (amoralej, 15:23:51) * LINK: https://review.rdoproject.org/login (amoralej, 15:26:25) Meeting ended at 15:36:26 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * amoralej (47) * dholler (41) * amusil (11) * Arrfab (4) * centbot (3) * ykarel (1)

1 0

Facebook administration
by Ljubomir Ljubojevic 07 Apr '21

07 Apr '21

Hi everyone. I have been main admin on official Facebook Group since 2011, but I am planing to slowly pass down that duty. With AlmaLinux stable appearing and me soon switching my laptop and internet facing servers to AL8 and Samba+KVM servers to TrueNAS, and my much diminished going online on Facebook (every several days at most), it would be good if CentOS board started asking around for Facebook group admins and moderators who are willing to offer newbies clues and links to solve their problems, so they can be properly acclimated to Facebook environment. Best choice would be forum moderators if they use Facebook regularly. Based on log of approving new members, Ralph Angenendt and few other admins also only come intermittently, every few days, so new blood would be welcome. -- Ljubomir Ljubojevic (Love is in the Air) PL Computers Serbia, Europe StarOS, Mikrotik and CentOS/RHEL/Linux consultant

5 5

Minutes of the monthly Storage SIG meeting (April 2021)
by Niels de Vos 06 Apr '21

06 Apr '21

Agenda: https://hackmd.io/Epc35JIESaeotoGzwu5R5w?view#2021-04-06 Minutes: https://www.centos.org/minutes/2021/April/centos-meeting2.2021-04-06-10.02.… Minutes (text): https://www.centos.org/minutes/2021/April/centos-meeting2.2021-04-06-10.02.… Log: https://www.centos.org/minutes/2021/April/centos-meeting2.2021-04-06-10.02.… =========================================== #centos-meeting2: Aprils Storage SIG meetup =========================================== Meeting started by ndevos at 10:02:37 UTC. The full logs are available at https://www.centos.org/minutes/2021/April/centos-meeting2.2021-04-06-10.02.… . Meeting summary --------------- * Roll Call (ndevos, 10:02:46) * Agenda (ndevos, 10:04:18) * LINK: https://hackmd.io/Epc35JIESaeotoGzwu5R5w?both#2021-04-06 (ndevos, 10:04:33) * CentOS / Fedora Account merging (ndevos, 10:05:46) * cephadm -pacific builds (ndevos, 10:11:52) * Open Floor (ndevos, 10:27:14) * Building for CentOS Stream (ndevos, 10:28:29) * LINK: http://mirror.centos.org/centos/8-stream/ contains packages for some sigs, so I guess we can publish builds for c8s now too (ndevos, 10:49:50) Meeting ended at 10:55:10 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * ndevos (54) * fmount (46) * kkeithley (30) * centbot (3) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 0

auth switch status update : git.centos.org is using new auth source
by Fabian Arrotin 06 Apr '21

06 Apr '21

Just a quick mail to mention that https://git.centos.org was also switched to new auth system and there was just a httpd service restart to reload pagure with new settings. Cheers, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

auth switch status update : cbs.centos.org is back online
by Fabian Arrotin 06 Apr '21

06 Apr '21

Hi all, As announced, we started today the centos infra switch to new authentication source (merged with Fedora) So https://accounts.centos.org is now live and using same auth backend (IPA) than https://accounts.fedoraproject.org This morning at 6:00am utc, I kicked the ansible roles to reflect new TLS/CA for https://cbs.centos.org koji systems and took it offline for sanity tests. - kojihub/web were converted - tested authentication with new TLS cert - tested remote authentication with personal TLS cert - tested to submit koji tasks - verified that all builders were back on the hub and enabled - tested a tag-build/untag-build to test the signing process - tested the new sync script to fetch users/groups from IPA (through https://fasjson.fedoraproject.org , IPA API endpoint using kerberos auth) As all was working, https://cbs.centos.org was then back online around 6:30am UTC What do you need to do : Get your new TLS cert that will be used for cert authentication (new TLS cert as new CA, coming from IPA backend) The SIGGuide (https://wiki.centos.org/SIGGuide) was updated to reflect the new way to retrieve your cert (anchor link : https://wiki.centos.org/SIGGuide#SIGGuide.2FSIGProcess.Community_Buildsystem) PS : worth knowing that if you just had your account imported in new IPA backend, you have *first* to reset your own password (password salt/hash from ACO isn't compatible with the one from IPA, so just reset your password on portal https://accounts.centos.org) PS2: as some users were skipped during import process , it can be that you're in a situation where you either don't exist, or your group membership wasn't reflected (and so you currently don't have build rights anymore in koji/cbs). If that's the case, just ask your SIG chair to get in touch Now moving to other services to be converted -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel April 2021