devel

devel@lists.centos.org

4 participants
4640 discussions

grub2 sources and build available for Stream
by Josh Boyer 03 Mar '21

03 Mar '21

Yesterday Red Hat released an updated grub2 errata to resolve a CVE. You can find more details about this here: https://access.redhat.com/security/vulnerabilities/RHSB-2021-003 While we have no CVE SLAs for CentOS, I thought it would be worthwhile to point to this given that grub and boothole have been hot topics recently. The sources for this fix are available in git.centos.org for CentOS Stream 8, and a new build has been completed. https://git.centos.org/rpms/grub2/commits/c8s https://koji.mbox.centos.org/koji/buildinfo?buildID=16717 For those of you that also use RHEL, the CentOS Stream changes will land in a future RHEL minor release. Testing and feedback in any case is always welcome. Thanks to the CentOS team for getting this turned around very quickly. josh

1 0

Announcing ROSI - RHEL for Open Source Infrastructure
by Mike McGrath 03 Mar '21

03 Mar '21

Hi all, as I did last month I thought I'd keep the list up to date with today's free RHEL announcement: https://www.redhat.com/en/blog/extending-no-cost-red-hat-enterprise-linux-o… This one is targeted at Open Source projects and organizations. I know some of you, in particular, are interested in academic or non-profit uses. Today's announcement is *not* the one you're looking for so stay tuned, we're still evaluating some of the feedback and more announcements are planned. -- Mike McGrath Linux Engineering - Chicago Red Hat mmcgrath(a)redhat.com T: (312)-660-3547

12 21

Re: [CentOS-devel] re CVE errata in CentOS Stream
by redbaronbrowser 02 Mar '21

02 Mar '21

On Friday, February 19, 2021 5:47 PM, Josh Boyer <jwboyer(a)redhat.com> wrote: > On Fri, Feb 19, 2021 at 5:47 PM redbaronbrowser > redbaronbrowser(a)protonmail.com wrote: > > > I'm not asking for anything ahead of RHEL customers getting it. All I am asking for is pre-approval from management to get access as an Upstream once a problem with RHEL is confirmed. > > If you mean "get access to the fixed code" or "get access to a fixed > build", in a situation like the post-Boot Hole scenario there is no > pre-approval necessary. We will do our best to resolve the issue in > Stream as quickly as possible. You keep coming back to the Fix for the Broken-Fix. I believe you when you say Red Hat has always been working as quickly as possible to Fix any Broken-Fixes. However, once they have the fix the lifecycle of the bug is over. Stream isn't interesting from the perspective of completed bug lifecycles. The interesting aspect to closing the openness gap is the mid-lifecycle of the bug. I am trying to focus on how quickly will Stream users be able to contribute to the fixing of a Broken-Fix. I am sorry if I am parsing too much into Mike's response, but it read to me like it is possible for the code to a Broken-Fix to, by policy, be withheld to only the "entitled" RHEL subscribers to access. I'm asking to what degree Red Hat expects to be able to take advantage us while an active Bugzilla entry exist because a CVE "fix" had unintended side-effects. Can we get quick transparency into accessing broken packages and code even if that broken build is a CVE "fix" related? Or is the policy that we will sit on the sidelines for Red Hat by itself to fix broken security patches much like CentOS has always operated before Stream?

9 32

Meeting minutes of the Storage SIG Monthly, March Edition
by Niels de Vos 02 Mar '21

02 Mar '21

Agenda: https://hackmd.io/Epc35JIESaeotoGzwu5R5w?both#2021-03-02 Minutes: https://www.centos.org/minutes/2021/March/centos-meeting2.2021-03-02-10.00.… Minutes (text): https://www.centos.org/minutes/2021/March/centos-meeting2.2021-03-02-10.00.… Log: https://www.centos.org/minutes/2021/March/centos-meeting2.2021-03-02-10.00.… =========================================================== #centos-meeting2: CentOS Storage SIG monthly, March Edition =========================================================== Meeting started by ndevos at 10:00:58 UTC. The full logs are available at https://www.centos.org/minutes/2021/March/centos-meeting2.2021-03-02-10.00.… . Meeting summary --------------- * Roll Call (ndevos, 10:01:14) * Agenda (ndevos, 10:03:24) * LINK: https://hackmd.io/Epc35JIESaeotoGzwu5R5w?both#2021-03-02 (ndevos, 10:03:29) * centos-release-gluster packages (ndevos, 10:04:34) * Open Floor (ndevos, 10:11:27) * ceph packages update (fmount, 10:13:12) * Any Other Bussiness (ndevos, 10:27:07) Meeting ended at 10:32:11 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * ndevos (58) * fmount (45) * centbot (3) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 0

CPE Weekly Report: 2021-02-26
by Aoife Moloney 26 Feb '21

26 Feb '21

Hi Everyone, If you would like to see this report and toggle to the section you are most interested in, I would suggest visiting this link https://hackmd.io/8iV7PilARSG68Tqv8CzKOQ?view and use the header bar on your left to skip to where you want to go! ## Initiative FYI Links Initiatives repo here: https://pagure.io/cpe/initiatives-proposal 2021 Quarterly Planning timetable here: https://docs.fedoraproject.org/en-US/cpe/time_tables/ so you know when I need it in by to review it. Details on initiative requesting/how to work with us on new projects here: https://docs.fedoraproject.org/en-US/cpe/initiatives/ ### Misc I hope you all enjoyed DevConf.cz last week! There were some great talks and I am looking forward to catching up on the ones I unfortunately missed when they are posted in a few weeks! Also if you missed the CentOS Dojo at FOSDEM, you can watch all talks on the CentOS YouTube channel here https://www.youtube.com/playlist?list=PLuRtbOXpVDjC7RkMYSy-gk47s5vZyKPbt ## Project Updates *The below updates are pulled directly from our CPE team call we have every week.* ## CentOS Updates ### CentOS * CentOS CI updated OCP to 4.6.17 * Rolled out security fixes to ci.centos.org Jenkins and cert update ### CentOS Stream * Documentation updated on the shortened CentOS Linux -> CentOS Stream conversion, see the demo here https://asciinema.org/a/393875 * CentOS Extras is now separately delivered for Stream and Linux * CentOS Stream 8 container images are published now to quay.io ### Fedora * We are now in F34 freeze! All changes to frozen hosts take 2 +1s * Bodhi updates-testing activated for F34 * Fedscm-admin work started on default branches * Openh264 repos are hosted on Cisco CDN ### Noggin/AAA * User migration script has been successfully re-run * Lots of docs updates - check out the docs section for more information https://noggin-aaa.readthedocs.io/en/latest/ * PR opened for changes to docs to add pkinit to docs to allow applicable certs be shipped for packages but it seems fedora-packager Fedora package has to be built with the change applied https://pagure.io/fedora-packager/pull-request/166 * If you are experiencing any issues with your application authenticating with Noggin, please reach out to the team on IRC channel #fedora-aaa * The work tracker for this project can be found here https://github.com/orgs/fedora-infra/projects/6 * And please report any issues you find in the repo https://github.com/fedora-infra/noggin ## Team Info ### Background: The Community Platform Engineering group, or CPE for short, is the Red Hat team combining IT and release engineering from Fedora and CentOS. Our goal is to keep core servers and services running and maintained, build releases, and other strategic tasks that need more dedicated time than volunteers can give. See our wiki page here for more information:https://docs.fedoraproject.org/en-US/cpe/ As always, feedback is welcome, and we will continue to look at ways to improve the delivery and readability of this weekly report. Have a great weekend! Aoife Source: https://hackmd.io/8iV7PilARSG68Tqv8CzKOQ?view -- Aoife Moloney Product Owner Community Platform Engineering Team Red Hat EMEA Communications House Cork Road Waterford

1 0

[CloudSiG] Meeting notes from 2021-02-25
by Amy Marrich 25 Feb '21

25 Feb '21

Congratulations to new co-chairs Alfredo Moralejo Alonso and Paul B. Isaacs. Also, please note the SiG will be moving to a bi-weekly meeting cadence on even weeks. And lastly, but not least importantly! Welcome to our new SiG members - davdunc, hrw, and konkan Thanks, Amy ====================================================== #centos-meeting: CentOS Cloud SIG meeting (2021-02-25) ====================================================== Meeting started by spotz at 15:00:31 UTC. The full logs are available athttps://www.centos.org/minutes/2021/February/centos-meeting.2021-02-25-15… . Meeting summary --------------- * Roll Call (spotz, 15:00:52) * LINK: https://etherpad.opendev.org/p/centos-cloud-sig (spotz, 15:01:50) * Close Nominaations (spotz, 15:13:43) Meeting ended at 16:00:09 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * spotz (40) * amoralej (32) * paulbisaacs (19) * apevec (9) * centbot (7) * ykarel (4) * jcapitao (2) * jpena (2) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot *Amy Marrich* She/Her/Hers Principal Technical Marketing Manager - Cloud Platforms Red Hat, Inc <https://www.redhat.com/> amy(a)redhat.com Mobile: 954-818-0514 Slack: amarrich IRC: spotz <https://www.redhat.com/>

1 0

[NFVSIG] NFV SIG meeting minutes - 2021-02-24
by Alfredo Moralejo Alonso 24 Feb '21

24 Feb '21

============================================== #centos-meeting: NFV SIG meeting - 2021-02-24 ============================================== Meeting started by tfherbert at 15:00:35 UTC. The full logs are available athttps://www.centos.org/minutes/2021/February/centos-meeting.2021-02-24-15… . Meeting summary --------------- * agenda bashing (tfherbert, 15:01:00) * current topic is agenda bashing -- by for now. (tfherbert, 15:03:20) * FDP 21.A followup (amoralej, 15:06:52) * builds for openvswitch 2.11 and 2.13, ovn 2.13 and openvswitch-selinux-extra-policy for 21.A were pushed to CentOS mirrors (amoralej, 15:08:08) * https://access.redhat.com/errata/RHSA-2021:0497 was published with CVE (amoralej, 15:10:44) * openvswitch2.13-2.13.0-79.5.1.el8 and ovn2.13-20.12.0-17.el8 have been built and pushed to -testing (amoralej, 15:11:49) * promotion to -release is currently in CI https://review.rdoproject.org/r/#/c/32083/ (amoralej, 15:12:09) * CentOS 8 Stream status (amoralej, 15:13:23) * LINK: https://cbs.centos.org/koji/buildinfo?buildID=32074 (amoralej, 15:13:57) * AGREED: to use disttag el8s in nfv8s-openvswitch-2-el8 build root (amoralej, 15:27:08) * AGREED: to create and promote separated builds for C8 and C8S in nfv sig tags (amoralej, 15:27:36) * Status of automation and CI (amoralej, 15:29:39) * it was agreed to use gerrit based approach for automation in tag and test using gerrit reviews (amoralej, 15:30:19) * automation is implemented and functional for 2.13 stream (amoralej, 15:37:21) * ACTION: NFVSIG members willing to review and approve promotions, please create your account in https://review.rdoproject.org (amoralej, 15:38:22) * LINK: https://cbs.centos.org/koji/buildinfo?buildID=31847 (amoralej, 15:56:34) * LINK: https://access.redhat.com/solutions/3358 (santana, 15:58:03) Meeting ended at 16:01:03 UTC. Action Items ------------ * NFVSIG members willing to review and approve promotions, please create your account in https://review.rdoproject.org Action Items, by person ----------------------- * **UNASSIGNED** * NFVSIG members willing to review and approve promotions, please create your account in https://review.rdoproject.org People Present (lines said) --------------------------- * amoralej (123) * santana (24) * ykarel (12) * tfherbert (10) * centbot (6) * dholler (5) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 0

[Cloud] Cloud SiG Meeting Reminder and Chair/Co-Chair Nominations and Elections
by Amy Marrich 24 Feb '21

24 Feb '21

Just a reminder that the Cloud SiG will meet this Thursday (fourth Thursday of the month) at 15:00 UTC in the #centos-meeting room on Freenode. With the SiG membership[0] cleanup completed, we would like to take nominations for the chair and co-chair roles. Please reply to this email with your self-nominations and nominations for other members of the SiG. If you are nominated by another member of the SiG please re[;y to this mail as well with your acceptance. Nominations will conclude during this week's meeting. If we have a quorum, we will hold elections during this week's meeting. If a quorum is not met, we will ask for 1-2 volunteers and hold an election outside our regular meetings in the next week. Any questions please reach out. Thanks, Amy (spotz) 0 - https://accounts.centos.org/group/members/sig-cloud/ *Amy Marrich* She/Her/Hers Principal Technical Marketing Manager - Cloud Platforms Red Hat, Inc <https://www.redhat.com/> amy(a)redhat.com Mobile: 954-818-0514 Slack: amarrich IRC: spotz <https://www.redhat.com/>

3 2

Simplified CS8 upgrade steps
by Carl George 24 Feb '21

24 Feb '21

Howdy everyone, Previously it was a three step process to upgrade from CentOS Linux 8 (CL8) to CentOS Stream 8 (CS8). We have reduced it to a two step process by adding the centos-stream-repos package to the Extras repo in CL8. You can now upgrade from CL8 to CS8 by running just these two commands. [root@centos ~]# dnf swap centos-linux-repos centos-stream-repos [root@centos ~]# dnf distro-sync The instructions have been updated on the main website. I recorded a short screencast to demonstrate the process. https://asciinema.org/a/393875 -- Carl George

2 1

[Promo] Call for content: March newsletter
by Rich Bowen 22 Feb '21

22 Feb '21

Hi, folks, If there is something that you would like to highlight in the March newsletter - or, indeed, if there's something that you think that *I* should highlight - please speak up here, or even better, over on the centos-promo mailing list - https://lists.centos.org/mailman/listinfo/centos-promo Thanks! --Rich

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel