devel April 2024

devel@lists.centos.org

11 participants
15 discussions

ksplice and CentOS
by Karanbir Singh 25 Sep '25

25 Sep '25

hi guys, lots of people on this list are keen on contributing to the CentOS effort - and one place where we could, as a group of people, make a massive difference is being able to deliver a ksplice upgrade model. A couple of people have started in silo's to try and get something together but I feel it might be a good time to try and see if we can do somethng as a group. Do we have people on the list who find the idea of rebootless kernel upgrades interesting ? Is there some desire to try and make that happen within the CentOS Ecosystem ? - KB

24 47

anaconda dependency calculation?
by Nicholas Byrne 04 Aug '25

04 Aug '25

Hi all, I'm trying to find a tool that calculates all dependencies for a specific package or group of packages for use with CentOS 5 (beta) with the intention of putting together a custom single CD build of CentOS 5. With CentOS 4 i used a python script that used the hdrlist module to find all dependencies which borrowed code from a number of sources. I've looked at yumdownloader and how it checks dependencies (using the --resolve option) but if i pass it the list of packages defined in say the Base and the Core yum groups which generally form an absolute minimal install i end up with about 200 packages. If i do a custom install (using beta 1 disks) and deselect everything i end up with over 300 packages. So i'm guessing anaconda calculates dependencies in a slightly different way, can anyone point me to files/code where i should be looking to find out? Thanks very much in advance for help Nick This e-mail is the property of Quadriga Worldwide Ltd, intended for the addressee only and confidential. Any dissemination, copying or distribution of this message or any attachments is strictly prohibited. If you have received this message in error, please notify us immediately by replying to the message and deleting it from your computer. Messages sent to and from Quadriga may be monitored. Quadriga cannot guarantee any message delivery method is secure or error-free. Information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. We do not accept responsibility for any errors or omissions in this message and/or attachment that arise as a result of transmission. You should carry out your own virus checks before opening any attachment. Any views or opinions presented are solely those of the author and do not necessarily represent those of Quadriga.

6 11

AltImages SIG: Announcing new images
by Troy Dawson 14 Apr '25

14 Apr '25

The CentOS Alternative Images SIG[1] has updated their CentOS Stream 9 Live images this quarter. We also added 4 new Live desktop images.[2] We now have * CINNAMON * GNOME * KDE * MATE * XFCE * MAX MAX has all the desktops listed above, plus a few others like IceWM and Lumina. All of these live images can be installed on your system. If there are bugs that are specific to the live images (not just general CentOS Stream bugs) please file an issue in our spins bug tracker.[3] Troy [1] - https://sigs.centos.org/altimages/ [2] - https://mirror.stream.centos.org/SIGs/9-stream/altimages/images/live/ [3] - https://pagure.io/centos-sig-alt-images/spin-bugs/issues

3 2

[Feedback request] CentOS website theme readability
by Alain Reguera Delgado 17 Aug '24

17 Aug '24

Hi, The website theme is being updated to improve content responsiveness and readability, on both large and small screen devices. Your feedback would be very helpful to detect usability issues and consolidate a design that works well for you. Here is an example page you can use for testing: https://www.dev.centos.org/about/governance/sigs/#functional-sig-responsibi… Is the content of this page readable for you? If possible, provide feedback from both large and small screen devices. Thanks! -- Alain Reguera Delgado <alain.reguera(a)gmail.com>

3 5

forums + portal for {lang}.centos.org sites
by Karanbir Singh 16 Aug '24

16 Aug '24

Hi, Earlier in the evening today Ralph, Fabian and I had a chat about the present state of the language subsites. This email sort of summarises the main issue ( s/w ). We seem to have run into a slight technical hitch with punbb/fluxbb. They dont support LDAP as a backend. And we had decided a few months back that all new rollouts must have ldap backend so we can rollin CentOS-DS / openldap based backend. So we need to look at alternatives, and since the primary focus of these international sites is going be forums : Here is a shortlist ( if there is anything else that people are aware of, please add to this list ) - phpBB - SMF - Fudforum - phorum - fluxbb Requirements: - Must be able to scale ( couple of hundred thousand msgs ) - Must be able to handle ldap auth ( if it cant, whats involved in writing the ldap-auth portion ) - Must address the specific requirements raised by the present www.centos.org forum users ( Can you please fill this section in ? ) - Must support all languages we need ( pure utf8 support would be good ) - Secure - Skin'able Nice to have: - Capable of running multiple instances from a single deployment - responsive community :D Things we will need to do: - Decide on what s/w to use. - Give the ArtWork people enough time to get the look & feel sorted. - Migrate newbb forums from www.centos.org to $system ( hey, english is a language too :D ). - Migrate fr.centos.org into the final s/w - setup {de/es/ja/it/pt_br}.centos.org Actions: Ralph and Fabian are going to work on setting up a test ldap server, once that is online we will then start by installing into our test-vm-farm the various s/w to eval them. If anyone would like to help, please feel free to jump right in. I'll setup a wiki page for this issue, which might be a good place to track progress. -- Karanbir Singh : http://www.karan.org/ : 2522219@icq

22 81

Missing openjdk CentOS 7 packages for RHSA-2024:1817
by Chris Schanzle 26 Apr '24

26 Apr '24

With regards to RHSA-2024:1817 <https://access.redhat.com/errata/RHSA-2024:1817>, will there be CentOS 7 packages for the openjdk update released? That is, packages built from java-1.8.0-openjdk-1.8.0.412.b08-1.el7_9.src.rpm I do see https://git.centos.org/rpms/java-1.8.0-openjdk/releases Where it states "import java-1.8.0-openjdk-1.8.0.412.b08-1.el7_9 • 9 days ago". No packages at https://mirror.centos.org/centos-7/7.9.2009/updates/x86_64/Packages/ Thanks, Chris

1 0

RDO Caracal 2024.1 Released
by Amy Marrich 24 Apr '24

24 Apr '24

RDO Caracal 2024.1 Released The RDO community is pleased to announce the general availability of the RDO build for OpenStack 2024.1 Caracal for RPM-based distributions, CentOS Stream and Red Hat Enterprise Linux. RDO is suitable for building private, public, and hybrid clouds. Caracal is the 29th release from the OpenStack project, which is the work of more than 1,000 contributors from around the world. The release is already available for CentOS Stream 9 on the CentOS mirror network in: http://mirror.stream.centos.org/SIGs/9-stream/cloud/x86_64/openstack-caraca… The RDO community project curates, packages, builds, tests and maintains a complete OpenStack component set for RHEL and CentOS Stream and is a member of the CentOS Cloud SIG. The Cloud SIG focuses on delivering a great user experience for CentOS users looking to build and maintain their own on-premise, public or hybrid clouds. All work on RDO and on the downstream release, Red Hat OpenStack Platform, is 100% open source, with all code changes going upstream first. The highlights of the broader upstream OpenStack project may be read via https://releases.openstack.org/caracal/highlights.html but here are some highlights: - Drivers with inactive CI were marked unsupported including Windows iSCSI Driver, Windows SMB Driver, Dell SC Series Storage Driver (iSCSI, FC), Dell VNX Storage Driver (FC, iSCSI) and Dell XtremeIO Storage Driver (iSCSI, FC). - New driver features were added, notably, Fujitsu ETERNUS DX extend volume on RAID group, Pure Storage synchronous replication, NetApp iSCSI LUN space allocation, Dell PowerFlex Active-Active support, Dell PowerMax configurable SRDF snapshots. - Designate now supports Catalog Zones (RFC 9432). This can improve the scalability of Designate pools managing a large number of zones and significantly reduce the provisioning time when adding additional DNS servers to a Designate pool. - Horizon now uses Django 4.2 as default and dropped Django 3.2 support. - Ironic has enabled RBAC support by default by changing the default values of [oslo_policy]enforce_scope and [oslo_policy]enforce_new_defaults to True. Additionally, we added [DEFAULT]rbac_service_project_name to define a project where users in that project are treated as having a service role. Please see Ironic release notes for full details. - Ironic has added the ability to drain active tasks from a conductor before shutdown. Sending a SIGUSR2 signal to an ironic-conductor will now attempt to complete running tasks with a timeout of [DEFAULT]drain_shutdown_timeout. No new tasks will be started on the conductor while it’s draining. - Support was added for the external-gateway-multihoming API extension. The L3 service plugins supporting it can now create multiple gateway ports per router. It is currently limited to the L3 OVN plugin. OpenStack Caracal is marked as Skip Level Upgrade Release Process or SLURP. According to this model ( https://governance.openstack.org/tc/resolutions/20220210-release-cadence-ad…) this means that upgrades will only be supported from the Antelope 2023.1 release. RDO Caracal 2024.1 has been built and tested with the recently released Ceph 18.2.0 Reef version (https://docs.ceph.com/en/latest/releases/reef/) which has been published by the CentOS Storage SIG in the official CentOS repositories. *Note:* Follow the instructions in [RDO documentation]( https://www.rdoproject.org/install/install-with-ceph/) to install OpenStack and Ceph services in the same host. During Caracal cycle, some projects have been retired or declared inactive upstream. As such, the following packages for some projects are not present in the RDO Caracal 2024.1 release: - cinderlib - dib-utils - ec2api-tempest-plugin - ec2api - murano - murano-agent - muranoclient - murano-dashboard - murano-tempest-plugin - sahara - sahara-dashboard - sahara-image-elements - sahara-plugin-ambari - sahara-plugin-cdh - sahara-plugin-mapr - sahara-plugin-spark - sahara-plugin-storm - sahara-plugin-vanilla - sahara-tests - senlin - senlinclient - puppet-ec2api - puppet-etcd - puppet-haproxy - puppet-module-data - puppet-murano - puppet-qdr - puppet-rsyslog - puppet-sahara During the next release we will continue working on retiring inactive packages in order to ensure RDO content quality and security. Contributors: - During the Caracal cycle, we saw the following new RDO contributors: - Marihan Girgis - Balazs Gibizer - Fiorella Yanac Welcome to all of you and Thank You So Much for participating! But we wouldn’t want to overlook anyone. A super massive Thank You to all 47 contributors who participated in producing this release. This list includes commits to rdo-packages, rdo-infra, and rdo-website repositories: - Ade Lee - Alfredo Moralejo Alonso - Amy Marrich (spotz) - Arx Cruz - Balazs Gibizer - Bernard Cafarelli - Bohdan Dobrelia - Chandan Kumar - Cyril Roelandt - Daniel Pawlik - Douglas Viroel - Emma Foley - Fabricio Aguiar - Fiorella Yanac - Gregory Thiemonge - Grzegorz Grasza - Harald Jensås - Jiří Podivín - Joan Francesc Gilabert - Joel Capitao - Karolina Kula - Lewis Denny - Lon Hohberger - Luigi Toscano - Luis Tomas Bolivar - Lukáš Piwowarski - Maor Blaustein - Marihan Girgis - Marios Andreou - Martin Kopec - Martin Magr - Mathieu Bultel - Michael Johnson - Nate Johnston - Pablo Rodríguez Nava - Priscila Gutierres - Rabi Mishra - Roberto Alfieri - Ronelle Landy - Shreshtha Joshi - Soniya Vyas - Szymon Datko - Takashi Kajinami - Tobias Urdin - Tristan De Cacqueray - Yatin Karel - Zane Bitter The Next Release Cycle At the end of one release, focus shifts immediately to the next release i.e Dalmatian. Get Started To spin up a proof of concept cloud, quickly, and on limited hardware, try an All-In-One Packstack installation. You can run RDO on a single node to get a feel for how it works. For those that do not have any hardware or physical resources, there is the OpenStack Global Passport Program. This is a collaborative effort between OpenStack public cloud providers to let you experience the freedom, performance and interoperability of open source infrastructure. You can quickly and easily gain access to OpenStack infrastructure via trial programs from participating OpenStack public cloud providers around the world. Get Help The RDO Project has our users(a)lists.rdoproject.org for RDO-specific users and operators. For more developer-oriented content we recommend joining the dev(a)lists.rdoproject.org mailing list. Remember to post a brief introduction about yourself and your RDO story. The mailing lists archives are all available at https://mail.rdoproject.org. You can also find extensive documentation on RDOproject.org. The #rdo channel on OFTC IRC is also an excellent place to find and give help. We also welcome comments and requests on the CentOS devel mailing list and the CentOS IRC channels (#centos, #centos-cloud, #centos-devel in Libera.Chat network), however we have a more focused audience within the RDO venues. Get Involved To get involved in the OpenStack RPM packaging effort, check out the RDO contribute pages, peruse the CentOS Cloud SIG page, and inhale the RDO packaging documentation. Join us in #rdo and on the OFTC IRC network and follow us on Twitter @RDOCommunity. You can also find us on Facebook and YouTube. *Amy Marrich* She/Her/Hers Principal Technical Marketing Manager - Cloud Platforms Red Hat, Inc <https://www.redhat.com/> amy(a)redhat.com Mobile: 954-818-0514 Slack: amarrich IRC: spotz

1 0

CentOS Stream 8 - end of life plan - end of May 2024
by Adam Samalik 23 Apr '24

23 Apr '24

Hey everyone, I'd like to share our (CentOS Stream Team at Red Hat & CentOS Infrastructure SIG) plan for the CentOS Stream 8 end of life at the end of May 2024. [1] This is the first time a CentOS Stream release reaches its end of life. So this is new to us. But we'll follow some of the established practices from previous CentOS Linux releases where we can. Timeline: The end of life is at the end of May. We'll give all builds time to finish and get to the last release. So everything I'm describing below will happen at the beginning of June. There are five major parts: 1. Released content — repositories, images, etc. 2. Builds in Koji 3. Websites 4. Buildroots in CBS 5. Sources - this part is weird, because sources will keep being updated for the life of RHEL 8, that means even after the CentOS Stream 8 end of life. Released content will get moved to vault.centos.org. Builds in Koji will remain accessible the same way. We'll just internally move them to a less highly available storage as we won't need that anymore for c8s. We'll disable c8s builds entirely in Koji. However, since only RHEL engineers can build CentOS Stream, this will be invisible from a CentOS perspective. Websites will get updated to no longer reference CentOS Stream 8 as available for download, etc. CentOS Stream 8 buildroots in CBS will be disabled. However, SIGs are able to build against RHEL 8 instead. Sources will keep being updated as mentioned. And that's it. That will be the end of CentOS Stream 8. The first CentOS Stream that reaches its end. And from its ashes CentOS Stream 10 is gonna rise. Except it's software, so hopefully no ashes, and the timing might be a little out of sync on those as well. Anyway! Thanks to everyone who used or even contributed to CentOS Stream 8! Cheers, Adam Samalik [1] Original announcement: https://blog.centos.org/2023/04/end-dates-are-coming-for-centos-stream-8-an… -- Adam Samalik --------------------------- Principal Software Engineer Red Hat

2 1

CentOS 7/8s EOL : infrastructure impacts (please read)
by Fabian Arrotin 16 Apr '24

16 Apr '24

Hi all, As you're all aware (we sent multiple mails in the last year about this), CentOS 7 and Stream 8 will go EOL soon : https://blog.centos.org/2023/04/end-dates-are-coming-for-centos-stream-8-an… Let's lists some things that will happen on the CentOS Infrastructure as we'll be approching (or passed) these dates : # CentOS 7/8s content itself Usual process : content will be archived to https://vault.centos.org and removed from mirror.centos.org completely, with just a simple readme file dropped here (for example http://mirror.centos.org/centos/8/readme for already EOL'ed version). Worth knowing that some SIGs are still building for RHEL8, still supported for SIGs through https://cbs.centos.org so such kind of content will continue to be available there as long as SIGs can build against/for it # CBS/koji (https://cbs.centos.org) No impact on CBS env itself ( not running centos 7 nor 8s for a long time now) but the various build tag reflecting centos 7 and 8s will be locked so that nobody would be able to build content anymore : that would even be impossible as content itself will have been removed from mirror.centos.org (internally used for cbs build tags) # CentOS Forums (https://forums.centos.org) : still running on centos 7 and even if that's easy to migrate to newer/supported EL version, it was decided to just shutdown the service (based on discussion with the actual moderation team). An option (to be announced on forums.centos.org ?) is to eventually start moving thread/discussions on Fedora discourse (There is already a CentOS category there : https://discussion.fedoraproject.org/c/neighbors/centos/71) So the plan is just to shutdown forums.centos.org and remove A/AAAA records from DNS # mirrorlist.centos.org service : Starting from Stream 9 (and above), deployed CentOS instance ares using Fedora infra mirrormanager instance for metalink= instead of mirrorlist= in .repo files. We'll just decommission our mirror crawler (also running with a mix of perl/python2 code), so not validating any mirror for legacy/EOL releases. mirrorlist.centos.org A/AAAA records will be removed in the following weeks after c7 will be EOL'ed. That means that people still running CentOS 7 or 8-stream will not have functional yum/dnf stack, except if they point to either vault or have internal mirror but at least people would be aware that distro itself is EOL and that they shouldn't expect to receive any update anymore # CentOS mailing-lists Currently running on mailman2 stack, on top of CentOS 7 linux : there is WIP to port everything to up2date mailman3 stack, actually packaged for EPEL9. We have successfully imported archives into mailman3 and same for lists config but let's start a different/separate thread to discuss changes (like renaming lists, see next coming thread) Kind Regards, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | @arrfab[@fosstodon.org]

2 7

Re: Making the redhat selinux-policy repository publicly available
by Daan De Meyer 15 Apr '24

15 Apr '24

Thanks for implementing this! Daan On Mon, 15 Apr 2024 at 16:39, Zdenek Pytela <zpytela(a)redhat.com> wrote: > > > > On Fri, Jul 14, 2023 at 11:48 AM Daan De Meyer <daan.j.demeyer(a)gmail.com> wrote: >> >> > To get just the latest repository content, steps described by Troy should work. Additionally, most of the upstream work is done in Fedora and anyway every new commit should go to Fedora first, RHEL content is mostly a subset of Fedora, there are very few differences. >> >> Yes, but the differences might be crucial so it'd be great if we could >> look at the repository containing the actual policy used in centos as >> well. > > I did not oppose the arguments, just commented on the current state and what was possible that time. > > Anyway, the change eventually happened and there is the c9s branch in the fedora-selinux/selinux-policy repository now. > Thanks everybody for your patience. > > https://github.com/fedora-selinux/selinux-policy/tree/c9s > > >> >> >> Cheers, >> >> Daan >> >> On Wed, 12 Jul 2023 at 16:16, Zdenek Pytela <zpytela(a)redhat.com> wrote: >> > >> > >> > >> > On Tue, Jul 11, 2023 at 10:37 PM Troy Dawson <tdawson(a)redhat.com> wrote: >> >> >> >> On Tue, Jul 11, 2023 at 12:50 PM Neal Gompa <ngompa13(a)gmail.com> wrote: >> >>> >> >>> On Tue, Jul 11, 2023 at 9:31 AM Troy Dawson <tdawson(a)redhat.com> wrote: >> >>> > >> >>> > On Tue, Jul 11, 2023 at 4:28 AM Daan De Meyer <daan.j.demeyer(a)gmail.com> wrote: >> >>> >> >> >>> >> Hi, >> >>> >> >> >>> >> It seems that the selinux-policy rpm is built from >> >>> >> git@gitlab.cee.redhat.com:SELinux/selinux-policy.git which seems to be >> >>> >> a redhat internal repository. More specifically, if I try to checkout >> >>> >> the commit listed in the selinux-policy spec >> >>> >> (https://gitlab.com/redhat/centos-stream/rpms/selinux-policy/-/blob/c9s/seli…) >> >>> >> in the fedora-selinux repository cloned from github, I get an error >> >>> >> saying that the commit does not exist. It would be great if the >> >>> >> repository containing this commit was publicly available and open for >> >>> >> external contributors just like all the other packages in CentOS >> >>> >> Stream. Is it possible to make this happen? >> >>> > >> >>> > >> >>> > I'm not the selinux-policy maintainer, so I can't comment on where they work on the selinux-policy source code. >> >>> > >> >>> > But this is how I get the sources, if that is what you are ultimately looking for. >> >>> > >> >>> > centpkg clone selinux-policy >> >>> > cd selinux-policy >> >>> > centpkg sources >> >>> > or if you want to know where they really are >> >>> > centpkg -v sources >> >>> > This shows it to be coming from >> >>> > https://sources.stream.centos.org/sources/rpms/selinux-policy/selinux-polic… >> >>> > >> >>> > The sources information is found in the sources file >> >>> > https://gitlab.com/redhat/centos-stream/rpms/selinux-policy/-/blob/c9s/sour… >> >>> > >> >>> > I know this isn't exactly what you asked for, but I hope it still helps. >> >>> > >> >>> >> >>> I think the idea is that having the Git repository in a public >> >>> location would allow the CentOS Hyperscale SIG to contribute to the >> >>> SELinux policy in a meaningful way. >> >> >> >> >> >> Ah, ok. That makes sense. >> >> As I said, I'm not the maintainer so I don't know why it's where it is. So I'll step out of the conversation. >> > >> > >> > Hi, >> > >> > I am one of the selinux-policy maintainers. Currently, repository for Fedora is at github.com and RHEL sources are in an internal repo. We have already discussed moving centos stream sources to some of the public repositories, but it did not happen. Currently we are discussing it again, there are a few options how to do so. >> > >> > To get just the latest repository content, steps described by Troy should work. Additionally, most of the upstream work is done in Fedora and anyway every new commit should go to Fedora first, RHEL content is mostly a subset of Fedora, there are very few differences. >> > >> > -- >> > >> > Zdenek Pytela >> > Security SELinux team >> > _______________________________________________ >> > selinux mailing list -- selinux(a)lists.fedoraproject.org >> > To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org >> > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ >> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >> > List Archives: https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject.o… >> > Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue >> > > > -- > > Zdenek Pytela > Security SELinux team

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel April 2024