devel January 2022

devel@lists.centos.org

30 participants
27 discussions

SIGs / cbs.centos.org change proposal
by Fabian Arrotin 27 Jan '22

27 Jan '22

Recently, the Hyperscale SIG created an infra ticket about a proposal to change the rpm 'vendor' macro to be more specific than 'CentOS' for pgks built on https://cbs.centos.org . For details, you can read https://pagure.io/centos-infra/issue/621 I think it's a very good idea as we also started to show a difference between distro (/9-stream) vs SIGs (on mirror.stream.centos.org) so also doing that at the rpm level (already using a different gpg key anyway) would be easy enough to modify. Here is our proposal : define the default value for that rpm macro to 'CentOS Community Build Service' instead of 'CentOS'. It's also possible to request a specific override (what we tested with Hyperscale tags) and I'd even think it would be better to create directly each new tag with a common pattern like 'CentOS <sig_name> SIG' , which would be easy to automate when we have to create new tags. This is just a Request for change, that we intent to implement next week, so if we don't have any negative feedback (we don't think people are actually parsing that field - yet - ) about this change, it will go live next week. -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

4 3

[infra] : Planned outage : cbs.centos.org/koji
by Fabian Arrotin 26 Jan '22

26 Jan '22

Due to a storage migration (see https://pagure.io/centos-infra/issue/618), we'll have to shutdown and restart the koji instance on cbs.centos.org Migration is scheduled for """"Thursday January 27th, 07:30 am UTC time"""". You can convert to local time with $(date -d '2022-01-27 07:30 UTC') The expected "downtime" is estimated to ~15 minutes , time needed to : - shutdown kojihub (and kojid/builders) using that nfs host - last data sync between old and new nfs storage node - restart kojihub and kojid/builders nodes Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

CPE Feedback Survey Q3-Q4 2021
by Ant Carroll 24 Jan '22

24 Jan '22

Hey folks, We have been doing the Community Platform Engineering feedback survey for a while now, and we still use the feedback collected to adjust our communications and processes. We would like to hear your thoughts again through a short survey we've put together to learn how your experiences have been with us since July 2021. If you could take the time (5mins max) to complete it, it would be hugely valuable as we work on this continuous improvement - https://fedoraproject.limequery.com/6 The survey will remain open until Feb 07th (23:59 UTC). Know more about the team at: https://docs.fedoraproject.org/en-US/cpe/ Cheers, Ant -- Ant Carroll Associate Manager, Software Engineering Red Hat Waterford <http://www.redhat.com> Communications House Cork Road, Waterford City ancarrol(a)redhat.com M: +353876213163 IM: ancarrol @redhatjobs <https://twitter.com/redhatjobs> redhatjobs <https://www.facebook.com/redhatjobs> @redhatjobs <https://instagram.com/redhatjobs> <https://www.redhat.com/>

1 0

rseq in glibc coming to CentOS Stream 9
by Florian Weimer 19 Jan '22

19 Jan '22

The only way to implement sched_getcpu efficiently on AArch64 is to use rseq and the per-thread CPU field in the rseq area. Unlike other architectures, there is no vDSO acceleration for sched_getcpu or getcpu on AArch64, and there does not seem to be a special register available that could be used for this. (E.g., on x86-64, the kernel uses otherwise-unused segment limits; access is not particularly fast, but at least there is no system call involved.) No application changes are needed to benefit from this optimization, and even architectures with existing vDSO acceleration benefit (slightly). Upstream glibc will enable rseq in the upcoming 2.35 release, and while we are not putting that glibc version into CentOS anytime soon, we have backported the rseq acceleration for sched_getcpu to CentOS Stream 9, glibc-2.34-19.el9 to be precise: glibc: Optional sched_getcpu acceleration using rseq <https://bugzilla.redhat.com/show_bug.cgi?id=2024347> However, Fedora rawhide testing revealed an integration issue with CRIU: Implement rseq support, as required by glibc 2.35 <https://github.com/checkpoint-restore/criu/issues/1696> criu: Implement rseq support <https://bugzilla.redhat.com/show_bug.cgi?id=2033397> Therefore, we currently do not enable rseq acceleration by default, but we plan to do so in the future, once CRIU fixes are available in relevant places. Therefore, applications need to be launched with the GLIBC_TUNABLES=glibc.pthread.rseq=1 environment variable for the time being to benefit from rseq-based sched_getcpu acceleration. This time, no bad seccomp interactions are expected because we leaned on browsers a while back to fix their sandboxes. Container engines should not be impacted because the glibc integration treats an initial EPERM failure of the rseq system call as an indicator that rseq is not available. (Only success for the first rseq system call followed by failure for rseq system calls on newly created threads is problematic; this part needed fixing in browser sandboxes.) A few applications which currently use rseq will need integration with the new glibc way of doing things if they want to keep benefiting from rseq. Mathieu Desnoyers is enhancing librseq; direct consumers such as tcmalloc will need to be updated separately. I do not know yet how the interaction between CentOS Stream 9 glibc and these applications will look like because we have not backported the public rseq symbols that glibc is adding in glibc 2.35 (__rseq_offset, __rseq_size, __rseq_flags). The current downstream glibc default (without GLIBC_TUNABLES=glibc.pthread.rseq=1) is not to use rseq at all, leaving it available for application use, so we have some time to figure out the details. Thanks, Florian

1 0

Board office hours
by Shaun McCance 18 Jan '22

18 Jan '22

Last week was a board meeting, so this week we'll have board office hours. Join the board tomorrow, January 19, at 15:00 UTC. https://meet.google.com/atj-vfsm-emk If you need dial-in details instead, just email me off-list. Thanks, Shaun

1 0

FOSDEM Dojo, February 3-4
by Shaun McCance 18 Jan '22

18 Jan '22

I've just published the schedule for the FOSDEM Dojo. Like FOSDEM, the Dojo will again be virtual this year. Registration is free, but please do register. See the wiki for details. https://wiki.centos.org/Events/Dojo/FOSDEM2022 Thanks, Shaun

1 0

Re: [CentOS-devel] [CentOS-announce] CESA-2022:0063 Moderate CentOS 7 kernel Security Update
by Chris Schanzle 18 Jan '22

18 Jan '22

Hi Johnny, It looks like this kernel update did not land in the right directories on the servers. I found them in https://mirror.interserver.net/centos/7/updates/ instead of https://mirror.interserver.net/centos/7/updates/x86_64/Packages/ And thus, are not found by yum. As always, thank you for your efforts! On 1/18/22 8:57 AM, Johnny Hughes wrote: > CentOS Errata and Security Advisory 2022:0063 Moderate > > Upstream details at : https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Faccess.re… > > The following updated files have been uploaded and are currently > syncing to the mirrors: ( sha256sum Filename ) > > > Source: > 0ccd3b419ddb59738ad345ec66203a38f2d42df2f1fb1051807145f2459dbf91 kernel-3.10.0-1160.53.1.el7.src.rpm > > >

1 0

Welcome to Shaun McCance, our new community manager
by Rich Bowen 16 Jan '22

16 Jan '22

As many of you are aware, I have been serving as the Community Manager for the CentOS project for the past 3 years, having been appointed to this position by the Board in the April 2018 board meeting. Over the coming weeks, I will be moving to a different position (still within the Open Source Programs Office at Red Hat, but doing something different) and Shaun McCance will be moving into this role. Shaun has extensive experience in open source projects, including decades with the Gnome Foundation. He works for the Red Hat OSPO, and is based in Ohio, USA. The past 3 years have been challenging, interesting, difficult, and rewarding. And although the past year has been very, very hard, I am very proud of what we have accomplished together as a community: * Community-nominated board (see my next email for more about this!) * Public/Open board meetings * New SIGs! (Automotive, Infrastructure, kmods, Hyperscale, Feature Request) * Contribution path via CentOS Stream * Code of conduct * etc So, thank you all for your support and encouragement over the past 3 years, and for participating in all of the above initiatives and so much more. And please welcome Shaun, and give him just as much (or more!) encouragement as he takes on this important role and helps guide the community. --Rich

5 4

Welcome to our new Board members!
by Rich Bowen 14 Jan '22

14 Jan '22

It is my enormous pleasure to introduce our two new board members, elected by the sitting board at yesterday's Board meeting. (Full minutes coming in a day or two.) Amy Marrich Celeste Lyn Paul I will allow them to introduce themselves more thoroughly over the coming days, but please do join me in welcoming them to our board! As you are already aware, Jim Perrin and Karanbir Singh both have stepped down from the board at the end of the most recent term, after many years of service, and we thank them for all of their hard work over the past 17 years. --Rich

2 1

Possible openssl-1.0.2k-23.el7_9 issue
by Johnny Hughes 14 Jan '22

14 Jan '22

I am working to release an update set for CentOS Linux 7, it contains openssl-1.0.2k-23.el7_9, which has this bug reported: https://bugzilla.redhat.com/show_bug.cgi?id=2039993 There is also this article: https://access.redhat.com/solutions/6637201 (requires an access.redhat.com subscription) The current update set is currently in QA testing. It may fail and not be able to be released .. in which case we wouuld remove openssl and try again to get it to pass tests. I just wanted to get this out there in case anyone has issues. Thanks, Johnny Hughes

1 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel January 2022