devel

devel@lists.centos.org

4 participants
4696 discussions

Help Clair Support CentOS
by Louis DeLosSantos 12 Apr '21

12 Apr '21

Hello, My name is Louis and I'm the core maintainer of Clar: https://github.com/quay/clair Clair is a project for scanning containers for vulnerabilities. We'd like to support CentOS but we need a little help in the form of information gathering. For Clair to properly support a distribution we typically require it to have an official upstream vulnerability database. For example, RHEL has their own Oval 2 feeds as does Ubuntu, Suse, etc... What we are trying to determine is how we can extract packages from CentOS containers and match against known vulnerabilities. We have the first half worked out already, we have generic RPM database scanners which extract package names and versions. The second half is where we need some more information. A few questions: * Does CentOS maintain its own security database for packages in its downstream repositories ? * If not, can we reliably treat any CentOS packages (name, versions) identical to the way we treat RHEL packages. (For instance if we find package A with version B can we attempt to match this against RHEL's Oval v2 stream?) * Can you provide any information on package naming, versioning, and packaging that creates a difference between RHEL packages and CentOS? Thank you for your time, I look forward to hearing back.

2 3

screen CVE-2021-26937 for x86_64
by Ben 09 Apr '21

09 Apr '21

Hello, The screen package that fixes the recent CVE-2021-26937 (https://vault.centos.org/7.9.2009/updates/Source/SPackages/screen-4.1.0-0.2…) has been built and populated for all altarches, but does not exist in x86_64. This build for x86_64 appears to have slipped through the cracks? I've raised https://bugs.centos.org/view.php?id=18147 to track this issue. Cheers, Ben

2 2

CentOS Stream 9 web browser default page
by Alain Reguera Delgado 08 Apr '21

08 Apr '21

Rich, everyone! I've been re-designing the web browser's default page and am wondering what content you think it should have in order to be great? I would like to make a collaborative effort of it and am looking for the correct way to do it in our community. This is a welcome page. The first we'll see when the web browser is opened. It also would be visible in the screenshot section the wiki has on the front page (following Akemi's tradition here :) https://gitlab.com/areguera/centos-indexhtml Best regards, -- Alain Reguera Delgado <alain.reguera(a)gmail.com>

3 4

NFV SIG meeting minutes 07 April 2021
by Dominik Holler 07 Apr '21

07 Apr '21

To CentOS community, here are meeting minutes for 07-Apr-2021: readable html version of minutes are here: https://www.centos.org/minutes/2021/April/centos-meeting.2021-04-07-15.03.h… Meeting started by dholler at 15:03:05 UTC. The full logs are available at https://www.centos.org/minutes/2021/April/centos-meeting.2021-04-07-15.03.l… . Meeting summary --------------- * Release RPM for CentOS 8 Stream (dholler, 15:06:23) * no progress on new release-rpm for centos-8 stream (amoralej, 15:07:28) * Status of automation and CI (dholler, 15:08:31) * big thanks to amoralej and ykarel for the automation! (dholler, 15:09:00) * automation is working fine for 2.11, 2.13 and 2.15, including 2.15 for centos8 stream (dholler, 15:10:33) * thanks msantana for that work! (amoralej, 15:10:48) * automated release process of ovs2.11 works for oVirt (dholler, 15:15:36) * Introduction of Ales (dholler, 15:16:27) * LINK: https://accounts.centos.org/ (amoralej, 15:18:55) * LINK: https://docs.fedoraproject.org/en-US/fedora-accounts/user/#addingmembers (Arrfab, 15:20:25) * LINK: https://accounts.centos.org/group/sig-nfv/ => so you're sponsor :) (Arrfab, 15:21:32) * amusil has been added as member to the NFV SIG (amoralej, 15:23:51) * LINK: https://review.rdoproject.org/login (amoralej, 15:26:25) Meeting ended at 15:36:26 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * amoralej (47) * dholler (41) * amusil (11) * Arrfab (4) * centbot (3) * ykarel (1)

1 0

Facebook administration
by Ljubomir Ljubojevic 07 Apr '21

07 Apr '21

Hi everyone. I have been main admin on official Facebook Group since 2011, but I am planing to slowly pass down that duty. With AlmaLinux stable appearing and me soon switching my laptop and internet facing servers to AL8 and Samba+KVM servers to TrueNAS, and my much diminished going online on Facebook (every several days at most), it would be good if CentOS board started asking around for Facebook group admins and moderators who are willing to offer newbies clues and links to solve their problems, so they can be properly acclimated to Facebook environment. Best choice would be forum moderators if they use Facebook regularly. Based on log of approving new members, Ralph Angenendt and few other admins also only come intermittently, every few days, so new blood would be welcome. -- Ljubomir Ljubojevic (Love is in the Air) PL Computers Serbia, Europe StarOS, Mikrotik and CentOS/RHEL/Linux consultant

5 5

Minutes of the monthly Storage SIG meeting (April 2021)
by Niels de Vos 06 Apr '21

06 Apr '21

Agenda: https://hackmd.io/Epc35JIESaeotoGzwu5R5w?view#2021-04-06 Minutes: https://www.centos.org/minutes/2021/April/centos-meeting2.2021-04-06-10.02.… Minutes (text): https://www.centos.org/minutes/2021/April/centos-meeting2.2021-04-06-10.02.… Log: https://www.centos.org/minutes/2021/April/centos-meeting2.2021-04-06-10.02.… =========================================== #centos-meeting2: Aprils Storage SIG meetup =========================================== Meeting started by ndevos at 10:02:37 UTC. The full logs are available at https://www.centos.org/minutes/2021/April/centos-meeting2.2021-04-06-10.02.… . Meeting summary --------------- * Roll Call (ndevos, 10:02:46) * Agenda (ndevos, 10:04:18) * LINK: https://hackmd.io/Epc35JIESaeotoGzwu5R5w?both#2021-04-06 (ndevos, 10:04:33) * CentOS / Fedora Account merging (ndevos, 10:05:46) * cephadm -pacific builds (ndevos, 10:11:52) * Open Floor (ndevos, 10:27:14) * Building for CentOS Stream (ndevos, 10:28:29) * LINK: http://mirror.centos.org/centos/8-stream/ contains packages for some sigs, so I guess we can publish builds for c8s now too (ndevos, 10:49:50) Meeting ended at 10:55:10 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * ndevos (54) * fmount (46) * kkeithley (30) * centbot (3) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 0

auth switch status update : git.centos.org is using new auth source
by Fabian Arrotin 06 Apr '21

06 Apr '21

Just a quick mail to mention that https://git.centos.org was also switched to new auth system and there was just a httpd service restart to reload pagure with new settings. Cheers, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

auth switch status update : cbs.centos.org is back online
by Fabian Arrotin 06 Apr '21

06 Apr '21

Hi all, As announced, we started today the centos infra switch to new authentication source (merged with Fedora) So https://accounts.centos.org is now live and using same auth backend (IPA) than https://accounts.fedoraproject.org This morning at 6:00am utc, I kicked the ansible roles to reflect new TLS/CA for https://cbs.centos.org koji systems and took it offline for sanity tests. - kojihub/web were converted - tested authentication with new TLS cert - tested remote authentication with personal TLS cert - tested to submit koji tasks - verified that all builders were back on the hub and enabled - tested a tag-build/untag-build to test the signing process - tested the new sync script to fetch users/groups from IPA (through https://fasjson.fedoraproject.org , IPA API endpoint using kerberos auth) As all was working, https://cbs.centos.org was then back online around 6:30am UTC What do you need to do : Get your new TLS cert that will be used for cert authentication (new TLS cert as new CA, coming from IPA backend) The SIGGuide (https://wiki.centos.org/SIGGuide) was updated to reflect the new way to retrieve your cert (anchor link : https://wiki.centos.org/SIGGuide#SIGGuide.2FSIGProcess.Community_Buildsystem) PS : worth knowing that if you just had your account imported in new IPA backend, you have *first* to reset your own password (password salt/hash from ACO isn't compatible with the one from IPA, so just reset your password on portal https://accounts.centos.org) PS2: as some users were skipped during import process , it can be that you're in a situation where you either don't exist, or your group membership wasn't reflected (and so you currently don't have build rights anymore in koji/cbs). If that's the case, just ask your SIG chair to get in touch Now moving to other services to be converted -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

Hyperscale SIG Quarterly Report for 2021Q1
by Davide Cavalca 05 Apr '21

05 Apr '21

Hello! I just posted our first activity report for the Hyperscale SIG on the CentOS blog: https://blog.centos.org/2021/04/centos-hyperscale-sig-quarterly-report/ One thing I'll signal boost: we have released a systemd 247 backport in the SIG repository. This backport includes experimental SELinux support via an overlay module; if you use SELinux in your deployments and would like to provide feedback, that would be much appreciated. Cheers Davide

1 0

Fedora/CentOS authentication merge : April 1st status
by Fabian Arrotin 01 Apr '21

01 Apr '21

Let me start this email by saying that it's *not* a joke (despite April 1st date) :-) As announced, we turned today https://accounts.centos.org into Read-Only mode , so that we were sure that nothing would change (frozen state) wrt users status and group membership, while all services continued to be usable (including for example https://cbs.centos.org) Mark O'Brien and myself then kicked the fas2ipa script, to ensure that it would have enough time to parse the CentOS accounts and groups as first sanity check. Number of users: 1097 Number of groups: 31 But we found a particular case for people who were registered in both FAS and ACO , with different nickname *but* same email address, so the script failed to import these users (81 accounts) The taken action was to send a mail to concerned users so that they can decide which solution they want to adopt : Basically, either consolidating centos group membership on their FAS account (and so using their FAS account for both projects) *or* update their email address so that the fas2ipa script would be able to import them (but that would mean two different accounts in same auth platform) . We'll take action on case-by-case through email feedback for these users. All in all it seems that it went ok for the sanity check tests and that means that it's green light for the real infra switch on Tuesday April 6th. PS : quite some users were in SKIPPED state, as they never took action for the "email address match for same nickname" situation, explained in previous email (https://lists.centos.org/pipermail/centos-devel/2021-March/076690.html) Kind Regards, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel