April 2022 - openSUSE Build Service - openSUSE Mailing Lists

How to change my e-mail address for build.o.o
by Martin Winter 08 Apr '24

08 Apr '24

There are several threads asking this very same question. The latest I found was this one: https://lists.opensuse.org/archives/list/buildservice@lists.opensuse.org/th…. However I still do not find an answer to that question. What I tried: - Going to my profile on build.o.o and edit my profile: The e-mail address is not editable. - Change the user meta via `osc meta user -e letsfindaway`: Does not change anything. - Login to Micro Focus and try to edit my profile there: The e-mail address is not editable. So what is the way to change the e-mail address listed on my profile in build.o.o and used to send e-mail notifications? Thanks for any insights and pointers! Martin

8 15

[opensuse-buildservice] Add external source to a package?
by Carsten Ziepke 12 Sep '23

12 Sep '23

Hello, I want to update the package ja2-stracciatella in the games repository to version 0.17.0. https://build.opensuse.org/package/show/home:Kieltux:branches:games/ja2-str… The new version needs the library string_theory which is not available for openSUSE. The build process wants to download string_theory from github, because it is not found. [ 36s] Scanning dependencies of target string_theory [ 36s] [ 12%] Creating directories for 'string_theory' [ 37s] [ 25%] Performing download step (download, verify and extract) for 'string_theory' [ 37s] -- Downloading... [ 37s] dst='/home/abuild/rpmbuild/BUILD/ja2-stracciatella-0.17.0/build/dependencies/lib-string_theory/builder/string_theory-prefix/src/3.1.tar.gz' [ 37s] timeout='none' [ 37s] -- Using src='https://github.com/zrax/string_theory/archive/3.1.tar.gz' [ 37s] -- Retrying... Can I add string_theory (string_theory-3.1.tar.gz) manually to the package and patch the build process? Thank you, Carsten -- Well, since MS cant be sure of the username of someone downloading things, they are going to play it safe and have everything dowloaded and executed by Explorer as suid root. That way, it will run on ANY system anywhere. :) -- George Bonser <grep(a)cris.com>

3 4

adding a debian repository from open build service
by Michael Behrisch 19 Jul '22

19 Jul '22

Hi, I try to add my home project's repo to a debian installation and did: sudo add-apt-repository https://download.opensuse.org/repositories/home:/behrisch/Debian_11/ sudo apt update and got the following error: apt update Hit:1 http://deb.debian.org/debian bullseye InRelease Hit:2 http://security.debian.org/debian-security bullseye-security InRelease Hit:3 http://deb.debian.org/debian bullseye-updates InRelease Ign:4 https://download.opensuse.org/repositories/home:/behrisch/Debian_11 bullseye InRelease Err:5 https://download.opensuse.org/repositories/home:/behrisch/Debian_11 bullseye Release 404 Not Found [IP: 195.135.221.134 443] Reading package lists... Done E: The repository 'https://download.opensuse.org/repositories/home:/behrisch/Debian_11 bullseye Release' does not have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. The repository has a Release file and I can also retrieve it (using wget for instance). Reading the apt-secure manpage I thought it might be an issue with authentication but "apt update --allow-unauthenticated" gives the same error. I also tried it with ubuntu with the same results. Adding ubuntu ppas from launchpad works however. Thanks for any hints! Best regards, Michael

5 10

Ubuntu 22.04
by Mark Olesen 29 Apr '22

29 Apr '22

I guess the next Ubuntu stable will be coming in the next couple of weeks. Is it too early to hope for an OBS build image for it? (ie, build packages for Ubuntu on the build service, not running osc on Ubuntu). Cheers, /mark

5 5

Open Build Service 2.10.14 released
by Adrian Schröter 27 Apr '22

27 Apr '22

Open Build Service 2.10.14 got released ======================================== The main driver for this release was the requested support for zstd compressed preinstallimages as introduced by latest build script. Apart from that there is now also a repository for 15.4 (Leap or SLE 15 SP4) systems. Full release notes ================== Please read the README.md file for initial installation instructions or use the OBS Appliance from http://openbuildservice.org/download/ The dist/README.UPDATERS file has information for people updating from a previous OBS release. Bugfixes ======== * Backend: - Support zstd compressed preinstallimages as produced by new build script release by default -- Adrian Schroeter <adrian(a)suse.de> Build Infrastructure Project Manager SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany (HRB 36809, AG Nürnberg) Geschäftsführer: Ivo Totev

2 2

Anyway to publish container image tarball directly?
by Kai Liu 27 Apr '22

27 Apr '22

Hello, When I build kiwi container image on my instance, the result is always published as a txt file with the docker command to pull the image from OBS. Is there anyway to simply publish the image as a tarball that can be downloaded from the OBS repo? Thanks, Kai

1 0

🚨 Open Build Service 2.10.13 Released
by Henne Vogelsang 27 Apr '22

27 Apr '22

Hey People, this release is fixing 4 security problems with 2.10 and you should update your installations as fast as possible. ## Fixed Issues 1. Fix XML external entity (XXE) injection with xmlhash gem (CVE-2022-21949) One of the Ruby gems we are using to parse XML was susceptible to this kind of attack. https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_P… This attack may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspective of the machine where the parser is located, and other system impacts. 2. Fix a privilege escalation issue in ProjectDoProjectReleaseJob. https://github.com/openSUSE/open-build-service/pull/12407 This has only minor impact as an attacker would have to time job scheduling, which is next to impossible. 3. Fix heap memory corruption in the yajl-ruby gem For details see https://github.com/brianmario/yajl-ruby/security/advisories/GHSA-jj47-x69x-… 4. Fix excessive backtracking in the nokogiri gem For details see https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-crjr-9rc… ## Ruby 2.7 We have changed the ruby interpreter which requires a manual step when updating from a previous OBS version via packages: 1) Change Passenger to use ruby2.7 edit /etc/apache2/conf.d/mod_passenger.conf: PassengerRuby "/usr/bin/ruby.ruby2.7" 2) Setup the rake alternative if you have multiple rake versions installed update-alternatives --set rake /usr/bin/rake.ruby.ruby2.7 3) Restart apache2 service systemctl restart apache2 ## How to Update Package updates are available from the 2.10 repositories https://build.opensuse.org/project/show/OBS:Server:2.10 Fixed appliances can be downloaded from http://openbuildservice.org/download Henne -- Henne Vogelsang http://www.opensuse.org Everybody has a plan, until they get hit. - Mike Tyson

4 6

Passenger doesn't start
by Mathias Radtke 25 Apr '22

25 Apr '22

Hi Folks, we are currently having a problem with our local obs instance. We cannot access the webinterface anymore "We're sorry, but something went wrong. The issue has been logged for investigation. Please try again later." Searching through the logs I found WARNING: PassengerPreStart cannot occur within <VirtualHost> section The /etc/apache2/vhosts.d/obs.conf hasn't been touched since 2020. Any suggestion what to do or where to look to make it work again? Regards Mathias -- opsi - Open PC-Server-Integration das Open Source Client-Management-System von uib gmbh Mathias Radtke Entwicklung eMail: m.radtke(a)uib.de Tel. +49 6131 / 27561-0 Fax +49 6131 / 27561-22 uib gmbh Bonifaziusplatz 1B 55118 Mainz Internet: https://uib.de https://opsi.org Geschäftsführer: Dr. Detlef Oertel, Erol Ülükmen Handelsregister: Amtsgericht Mainz HRB 6942

2 1

minimal OBS version that can use zstd compressed preinstallimages?
by Stefan Seyfried 22 Apr '22

22 Apr '22

Hi, $SUBJECT says it all: what is the minimum OBS version that's able to consume zstd compressed preinstallimages? I have the feeling that released versions are not able to use that. But as soon as zstd is installed on the worker, it compresses preinstallimages with zstd. Background: I'm providing aarch64 workers to pmbs. In order to tune the rebuild times, I have configured preinstallimage-base (only with bash in it) for aarch64 and armv7l. Everything worked well. Today, I see that preinstallimages are no longer used. Investigating, I found that they are compressed with zstd now instead of gzip as they were before. Thus I guess that this is the reason for the regression. I have now uninstalled (rpm -e --nodeps) zstd and locked it in zypper, preinstallimage rebuild is triggered, and.... .... the next package is using the preinstallimage again. If this was my OBS instance, I'd just patch zstd out of obs-build, but I do not have access to the OBS server. So please make sure that the preinstallimage stay compatible to older OBS installations :-) Thanks, seife -- Stefan Seyfried "For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." -- Richard Feynman

2 3

minimal OBS version that can use zstd compressed preinstallimages?
by Stefan Seyfried 22 Apr '22

22 Apr '22

Hi, $SUBJECT says it all: what is the minimum OBS version that's able to consume zstd compressed preinstallimages? I have the feeling that released versions are not able to use that. But as soon as zstd is installed on the worker, it compresses preinstallimages with zstd. Background: I'm providing aarch64 workers to pmbs. In order to tune the rebuild times, I have configured preinstallimage-base (only with bash in it) for aarch64 and armv7l. Everything worked well. Today, I see that preinstallimages are no longer used. Investigating, I found that they are compressed with zstd now instead of gzip as they were before. Thus I guess that this is the reason for the regression. I have now uninstalled (rpm -e --nodeps) zstd and locked it in zypper, preinstallimage rebuild is triggered, and.... .... the next package is using the preinstallimage again. If this was my OBS instance, I'd just patch zstd out of obs-build, but I do not have access to the OBS server. So please make sure that the preinstallimage stay compatible to older OBS installations :-) Thanks, seife -- Stefan Seyfried "For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." -- Richard Feynman

1 0