devel September 2022

devel@lists.centos.org

30 participants
25 discussions

Keylime configuration changes
by Anderson Sasaki 27 Sep '22

27 Sep '22

Hello, We would like to announce that the new versions of the keylime and keylime-agent-rust packages will include major changes in their configuration files. These changes were introduced in the upstream Keylime 6.5.0 release [1] and rust-keylime 0.1.0 release [2], and implement the specification from the enhancement proposal [3]. The goal of the changes is to make the configuration process easier, with more intuitive and consistent options. The first and more notable change is the split of the previous single file configuration into multiple per-component configuration files. The old “/etc/keylime.conf” file is replaced with six separate configuration files: - /etc/keylime/agent.conf: the Keylime agent configuration file - /etc/keylime/verifier.conf: the Keylime verifier configuration file - /etc/keylime/registrar.conf: the Keylime registrar configuration file - /etc/keylime/tenant.conf: the Keylime tenant configuration file - /etc/keylime/ca.conf: the shared CA configuration file - /etc/keylime/logging.conf: the shared logging configuration file The “ca.conf” and “logging.conf” are shared configuration files that need to be present regardless of the Keylime component installed. In CentOS Stream they are included in the keylime-base subpackage which is required by the other components. The other configuration files are delivered as part of the respective component subpackage. For example, the keylime-verifier subpackage includes the “verifier.conf” file. Another feature introduced is the ability to override the default configuration options through configuration snippets. For each component configuration file, there is a respective /etc/keylime/*.conf.d directory where the user can place files containing snippets to override previously set options. This is the recommended way of overriding configuration options instead of modifying the default configuration file directly. Keep in mind that the configuration processing applies the snippets files in lexicographic order. The last value set to an option is kept. Finally, various options names were modified, especially those related with the TLS configuration. The goal was to make them consistent and intuitive, using the same option name for similar configurations in all components. For example, the “server_key” option sets the private key file used by the server for each of the components that run a server. For more information, please refer to the enhancement proposal [3] or contact us on upstream Slack channel [4] (#keylime on CNCF Slack instance). Thank you, Keylime development team [1] https://github.com/keylime/keylime/releases/tag/v6.5.0 [2] https://github.com/keylime/rust-keylime/releases/tag/v0.1.0 [3] https://github.com/keylime/enhancements/blob/master/72_config_and_simplify_… [4] https://cloud-native.slack.com/messages/C01ARE2QUTZ

1 0

Fwd: Planned Outage - networking work - 2022-09-26 21:00 UTC and 2022-09-27 21:00 UTC
by Fabian Arrotin 26 Sep '22

26 Sep '22

FYI, as that means also some CentOS Services hosted there too (including - but not limited to - SSO) -------- Forwarded Message -------- Subject: Planned Outage - networking work - 2022-09-26 21:00 UTC and 2022-09-27 21:00 UTC Date: Fri, 23 Sep 2022 14:50:01 -0700 From: Kevin Fenzi <kevin(a)scrye.com> Reply-To: Fedora Infrastructure <infrastructure(a)lists.fedoraproject.org> To: announce(a)lists.fedoraproject.org, infrastructure(a)lists.fedoraproject.org, devel-announce(a)lists.fedoraproject.org

1 0

CS9: current firefox not in compose
by Leon Fauster 23 Sep '22

23 Sep '22

I wonder about the current firefox build 91.13.0-1.el9? Its not on the mirrors (comp 20220829) nor in the last prod compose (20220909) / both lists firefox-91.11.0-2.el9 ... Thanks. -- Leon

6 15

CPE Weekly Update - Week 38 2022
by Michal Konecny 23 Sep '22

23 Sep '22

Hi everyone, This is a weekly report from the CPE (Community Platform Engineering) Team. The report could be found at https://communityblog.fedoraproject.org/cpe-weekly-update---week-38-2022/. If you want to receive weekly reports by emails in the future, please subscribe to either https://communityblog.fedoraproject.org/ or https://discussion.fedoraproject.org/c/news/commblog/61. We will stop sending them in the future. Regards, CPE Team

1 0

[Messaging] RabbitMQ for EPEL 9
by Robby Callicotte 21 Sep '22

21 Sep '22

Hello all, I recently stumbled onto this bugzilla issue[1]. It has gone a couple of months without a response from the assignee. I know that the stalled package request procedures can be started now, but I also see that RabbitMQ was built by the Messaging SIG in the past. So... Where should this get routed? Is the messaging SIG still active? I see some info[2] saying that it is, but the lack of response leads me to think that it may not be. Thanks! [1] https://bugzilla.redhat.com/show_bug.cgi?id=2105791 [2] https://wiki.centos.org/SpecialInterestGroup/Messaging -- Robby Callicotte He/Him/His Timezone: America/Chicago IRC: c4t3l | Twitter: @robbycl2v

3 3

Planned service outage : Stream 9 koji build infra
by Fabian Arrotin 20 Sep '22

20 Sep '22

Due to an underlying storage migration (migrating from local NFS host to centralized Netapp filer), we'll have to freeze the dedicated CentOS Stream koji infrastructure (externally known as https://kojihub.stream.centos.org) At the same time we'll migrate the lookaside cache server (aka https://sources.stream.centos.org), from local iscsi target volume to new iscsi lun served also from new Netapp filer. Impacted services: - kojihub and builders for CentOS Stream (https://kojihub.stream.centos.org) - lookaside cache server (https://sources.stream.centos.org) That also means that external services pointing to kojihub (like for cbs.centos.org for SIGs/tag using directly upstream koji as buildroot[s]) will be impacted , so take that into account. Migration is scheduled for """"Friday September 30th, 11:00 am UTC time"""". You can convert to local time with $(date -d '2022-09-30 11:00 UTC') The expected "downtime" is estimated to (maximum) 4h , time needed to : - freeze koji infra and builders - freeze lookaside cache server - (final) data sync between old and new storage volumes - storage volume swap - validate service[s] and have these available again You can also join us in either #centos-devel or #centos-stream irc channels on irc.libera.chat if you encounter any issue. Thanks for your understanding and patience. on behalf of the CentOS Stream Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

August board meeting recording and office hours
by Shaun McCance 17 Sep '22

17 Sep '22

Hi folks, I've uploaded the recording of last week's board meeting: https://youtu.be/MkB7atd82KU If you'd like to discuss any issues with the board, we'll have an open board office hours this Thursday, September 22, at 14:00 UTC. https://meet.google.com/buz-dvqw-cgk Email me directly if you need dial-in info instead. Thanks, Shaun

1 0

CPE Weekly Update – Week 37 2022
by Lenka Segura 16 Sep '22

16 Sep '22

Hi everyone, You can find this week's CPE (Community Platform Engineering) weekly report here: https://communityblog.fedoraproject.org/cpe-weekly-update-week-37-2022/ If you want to keep receiving weekly reports by email, please subscribe to either https://communityblog.fedoraproject.org/ or https://discussion.fedoraproject.org/c/news/commblog/61. We will stop sending them in the future. Cheers, CPE Team

1 0

libknet1- in more than one repo
by lejeczek 09 Sep '22

09 Sep '22

Hi guys. that most certainly should not be, right? -> $ dnf list libknet1 Last metadata expiration check: 0:00:37 ago on Fri 09 Sep 2022 10:44:07 BST. Installed Packages libknet1.x86_64 1.24-2.el8 @ha Available Packages libknet1.i686 1.24-2.el8 ha libknet1.i686 1.24-2.el8 powertools but in case it should then the problem is: -> $ dnf update ... Error: Problem 1: package libknet1-compress-bzip2-plugin-1.24-3.el8.x86_64 requires libknet1(x86-64) = 1.22-1.el8, but none of the providers can be installed - cannot install both libknet1-1.22-1.el8.x86_64 and libknet1-1.24-2.el8.x86_64 - cannot install the best update candidate for package libknet1-compress-bzip2-plugin-1.24-2.el8.x86_64 - cannot install the best update candidate for package libknet1-1.24-2.el8.x86_64 many thanks, L.

4 5

CPE Weekly Update - Week 36 2022
by Michal Konecny 09 Sep '22

09 Sep '22

Hi everyone, This is a weekly report from the CPE (Community Platform Engineering) Team. The report could be found at https://communityblog.fedoraproject.org/ cpe-weekly-update---week-36-2022/. If you want to receive weekly reports by emails in the future, please subscribe to either https://communityblog.fedoraproject.org/ or https://discussion.fedoraproject.org/c/news/commblog/61. We will stop sending them in the future. Regards, CPE Team

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel September 2022