We are looking at the possibility of providing signed repomd.xml.asc
files for all CentOS controlled repos for CentOS-6 and CentOS-7.
I have created an update repository for CentOS-6 and CentOS-7 for
testing. They are not going to be maintained current (and are already a
couple of updates behind) and should *NOT* be used in production ... but
if we can get some people to test these on some testing platforms that
would be great:
http://dev.centos.org/centos/6/updates/x86_64/http://dev.centos.org/centos/7/updates/x86_64/
Basically, to use signed metadata for these testing repos, you would
need to modify the /etc/yum.repos.d/CentOS-Base.repo and do the
following to the 'updates' section:
1. Remark out the current mirrorlist and/or baseurl statements.
2 Add the following:
For CentOS-6:
repo_gpgcheck=1
baseurl=http://dev.centos.org/centos/6/updates/x86_64/
For CentOS-7:
repo_gpgcheck=1
baseurl=http://dev.centos.org/centos/7/updates/x86_64/
================================
*DO NOT USE THESE REPOS FOR UPDATES LONG TERM, THEY ARE FOR TESTING ONLY*
================================
One thing we would like to figure out (and then tes)t is the ability to
somehow get this key to be added automatically via a kick start so that
one can use signed metadata for unattended installs.
Without testing and feedback, and possibly key auto import capability,
this proposal will likely go nowhere .. so if this is a feature that you
want, please test and provide feedback and help us find a solution for
auto import of the yum key.
Thanks,
Johnny Hughes
Hi,
One of the things that the Atomic SIG will attempt to do is build a
downstream CentOS Atomic host, that is modelled on the RHEL Atomic host.
Most code and info needed for this is now available, and its a good
point to think about the build, release process. I've attached a map of
what that might look like. Think of it as a proposal.
Some of the things that are marked with red stars are things that we
will try and help, from the Core SIG, to get this process onramped - but
largely we are looking at community and SIG involvement here with the
aim that the entire process can be offload ( taken over ? ) but the
community.
This process proposed here very closely maps to the Core CentOS Linux
process.
I would very much like to hear comments and thoughts around this from
everyone on centos-devel, specially around areas where people can help.
Regards
--
Karanbir Singh, Project Lead, The CentOS Project
+44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS
GnuPG Key : http://www.karan.org/publickey.asc
Hi guys,
I am Kunal Jain from India doing my undergraduate studies in Computer
Science from Indian Institute of Technology Guwahati (IITG).
I and Lei will be creating a new toolchain that will lower the barrier for
contributing new content under the mentor-ship of Karsten this summer.
I look forward working with you guys.
More details :
http://lists.centos.org/pipermail/centos-docs/2015-May/005647.html
Regards,
Kunal Jain
Hi,
We have some of our content currently hosted on gitorious.org that we
mirror from git.centos.org - the intention being that git.centos.org is
still the authority, but people can use the easier contribution path at
gitorious to build karma and then get direct git commit access at
git.centos.org
since gitorious is going away, what are everyone's thoughts to
consolidating all of this external contribution path on
github.com/CentOS - we already host a bunch of content there.
Regards
--
Karanbir Singh, Project Lead, The CentOS Project
+44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS
GnuPG Key : http://www.karan.org/publickey.asc
SCLo SIG meeting will be at 15:00 UTC (11:00 EST, 17:00 Brno, 11:00
Boston, 0:00+1d Tokyo, 1:00+1d Brisbane) in #centos-devel on Freenode.
= Topics =
* sync-up on current status
* propose some other topics :)
Honza
Hello list,
I've been in contact with Anders F Björklund (afb) earlier this week
regarding the state of Xfce on CentOS 7 and in general in any supported
EPEL release.
What we discussed was what he has done in the past for his personal use and
what are the things we would both agree on that should get some attention
to make the experience better.
Here are some initial things that we think are critical (give or take,
Anders has his own list):
1. Packaging issues
- comp group @xfce-desktop doesn't depend on @X Window System so it
doesn't really work and has some wrong packages and some missing
- @xfce-desktop depends on gdm instead of lightdm, we think it should do
that instead
- dejavu sans fonts are not a dependency and fonts are broken because of
that
- gtk-xfce-engine package is missing (EPEL7)
2. Branding issues
- "Default" appearance theme is missing (requires gtk-xfce-engine,
request sent to EPEL)
- default background is blank (broken Fedora branding, patch submitted)
- default icon set is wrong and broken (should be GNOME because "Fedora"
doesn't exist on RHEL, patch submitted)
There are more, but these are one of the first usability issues that you
would hit when installing Xfce from EPEL 7.
I have submitted bug reports with proposed fixes for the background issue,
default theming issue and missing gtk-xfce-engine package:
https://bugzilla.redhat.com/show_bug.cgi?id=1200988https://bugzilla.redhat.com/show_bug.cgi?id=1200992https://bugzilla.redhat.com/show_bug.cgi?id=1201124
Now, getting EPEL fixed up would be in general a good effort since it's
shared between all derivatives of RHEL/CentOS and more people will get the
base benefits. That said, there are two ways this SIG could be constructed:
a) shim wrapper around EPEL to create a spin and possibly add some CentOS
specific branding, give EPEL maintainer all the help we can to get the
packages working, try push most if not all packaging work to EPEL
b) completely replace EPEL by our own repo which has all the Xfce packages
and anything we would want
The A option depends on if the maintainer is willing to let us help as much
as we want and would accept some of the changes we'd need. It would also
imply the current EPEL maintainer(s) would continue maintaining and be our
upstream or someone would join the EPEL folks as co-maintainers. The amount
of initial work would be minimal compared to doing everything custom and as
I said before, it benefits every RHEL derivative, including RHEL itself. We
still need some SIG specific packages like CentOS specific branding and
possibly our own default panel layout so it's not all upstream work. This
approach might also be tad slower because we have an upstream and all
packaging stuff except barnding would go through them.
The B option gives us more power and could speed up the process a lot. We
can select and backport the set of Xfce packages as fast as we can.Karanbin
Singh was kind enough to provide some info about how CentOS SIGs work and
what resources would be available (automatic builds, official SIG repos
etc.) so all the backend stuff is there waiting to be untilized for this
kind of SIG. However, this approach would be very CentOS specific and would
require the SIG to be fairly active in maintaining the packages when our
upstream (the Xfce project) makes point releases. I can say upfront that
person wouldn't be me, so if someone is up to this after the initial sprint
of work has ended, that would be something to consider.
One more very important thing to note is that EPEL 7 is set to Xfce 4.10
and 4.12 just came fresh out of the oven. If we do A, I'm fairly sure we
would need to stick with 4.10 unless the maintainer feels 4.12 upgrade
would be possible, then it's a win for option A. The maintainer (or one of
them) also maintains a 4.12 copr for F20 so I strongly believe he knows
much more about Xfce packaging than me for one. If we do option B we could
scrap 4.10 immediately and package 4.12. There is no reason to use 4.10 as
a SIG would be the perfect place to get more up-to-date experience on top
of stable core.
I'm up for either one, it's up to what you other people would see as being
more useful. Maybe both if there is enough interest? Fix EPEL for the
greater good and still have our own SIG 4.12 stuff on top of it for CentOS
only.
Anyone into this except me and Anders? Ideas, suggestions?
--
Toni Spets
hi,
All the GSoC stuff going through should map to a SIG ( or in some cases
multiple ones ) - it would be great to see the GSoC students come along
and interface with the SIG's, and maybe do updates on progress at the
SIG Meetings.
- KB
--
Karanbir Singh
+44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh
GnuPG Key : http://www.karan.org/publickey.asc
I'm hoping to reach a decision on how we handle docker rpms (vanilla +/- rh
patches)
There's the default docker that CentOS gets in extras from RHEL which comes
with RH patches (of course). But this kinda comes quite a bit after upstream
docker releases.
Next up is 'docker' in virt SIG which usually tracks upstream releases. Would
people prefer this build be vanilla upstream or with RH patches included.
Then there is 'docker-master' in virt SIG which is a daily rebuild of docker
upstream master branch + redhat patches.
We could either:
a) ship 'docker' in virt SIG with RH patches and also provide a
'docker-upstream' which is a vanilla upstream package
b) ship 'docker' in virt SIG without any RH patches and provide a
'docker-redhat' with RH patches
c) ...anything else??
Comments?
--
Lokesh
Freenode, OFTC: lsm5
GPG: 0xC7C3A0DD
My personal project goal is to work on scripts and Puppet content to meet
STIG requirements. I'm not really talented enough to putz around with the
kernel stuff but don't object if others do.
Leam
--
Mind on a Mission <http://leamhall.blogspot.com/>
For those that are interested in the progress of the RDO OpenStack
packaging effort, we'll be having an RDO test day May 5th and 6th (48
hours, so that folks from every timezone have a chance to participate at
some point).
We'll be testing the RDO packages of the Kilo release. We'd appreciate
it if you can find an hour or two some time in that window to come help
us out.
Links:
Main info: https://www.rdoproject.org/RDO_test_day_Kilo
Test scenarios:
https://www.rdoproject.org/RDO_test_day_Kilo_RC_milestone_test_cases
Live discussion on #rdo (Freenode IRC). Async discussion on rdo-list
http://www.redhat.com/mailman/listinfo/rdo-list
--
Rich Bowen - rbowen(a)redhat.com
OpenStack Community Liaison
http://rdoproject.org/