June 2021 - openSUSE Factory - openSUSE Mailing Lists

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 02 Jun '21

02 Jun '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-django-dynamic-fixture - python-django-extra-views - python-django-parler - python-django-picklefield - python-django-registration - python-django-rosetta - python-django-threadedcomments Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

BEWARE: OBS may allow source change after review
by Ludwig Nussel 02 Jun '21

02 Jun '21

Hi, tl;dr if you rely on package reviews for your development process in OBS make sure requests have a revision. Only osc shows the information you are looking for. Turns out submit request in OBS do not necessarily refer to a specific revision in the originating package. Means the sources can change after a review passed. Unfortunately changing the sources does not reset reviews and reviews do not record the revision they were done for. That obviously defeats the purpose of source reviews. Accepting a request without revision may therefore lead to accepting something different from what was reviewed (resp staged). AFAIK this feature has been in OBS since the very beginning, it's just well hidden as the official interfaces osc and the webui do add a revision when creating requests. There is no way to turn that off either. Also tools such as bots that use osc as python module automatically generate submit request with revision. This is not because the server enforces it but because the client code does it. So anyone who wants to fool reviewers just has to use a custom client. According to the OBS team this hidden behavior is actually considered a feature. The security team doesn't treat it as security issue as it's kind of documented¹, even though osc doesn't behave in the documented way. There are plans to add a special attribute to disallow unversioned requests per project². IMHO a global setting to require revisions by default with the option for exceptions would have been more sensible. Anyway, apparently the fix needs some time to ripe still. Meanwhile the factory-auto bot was enhanced to decline unversioned requests to Factory (thanks Fabian). If you are using reviews in eg your devel project or run your own OBS you need to create your own bot or watch out manually. The webui does not seem to display any revision at all, so not helpful. In osc it looks like this: Request: #12345 submit: foo:bar/baz@42 -> blah Absence of the @number means no revision. cu Ludwig [1] https://openbuildservice.org/help/manuals/obs-user-guide/cha.obs.request_an… [2] https://github.com/openSUSE/open-build-service/pull/10992 -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.com/ SUSE Software Solutions Germany GmbH, GF: Felix Imendörffer HRB 36809 (AG Nürnberg)

6 6

Unable to set os-based dependencies on Debian-based builds
by Nicolas FORMICHELLA 02 Jun '21

02 Jun '21

Repost from buildservice ML : Hello, Currently doing a official upstream packaging for nnn [1] on OBS [2], I built a Debian file tree (with .rules, .control...), but I encountered a problem : The nnn package has two dependencies, which has totally different name depending on the OS version Adding an override for the debian.control variables in debian.rules like i would do on any Debian-based system : derives_from_ubuntu := $(shell (dpkg-vendor --derives-from Ubuntu && echo "yes") || echo "no") override_dh_gencontrol: ifeq ($(derives_from_ubuntu),yes) dh_gencontrol -- '-Vdist:Depends = libncursesw6 | libreadline8' else dh_gencontrol -- '-Vdist:Depends = libncursesw6 | readline-common' endif Would make osc yell a dpkg-deb: error: failed to open package info file 'debian/nnn/DEBIAN/control' for reading: No such file or directory (full log: [3]) But it does build fine with only one OS in mind Is there a way to fix this? [1] https://github.com/jarun/nnn [2] https://build.opensuse.org/package/show/home:stig124:nnn/nnn [3] https://paste.opensuse.org/94498057

2 1

openSUSE Release Engineering Meeting 02.06.2021
by Lubos Kocman 02 Jun '21

02 Jun '21

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Participants guillaumeg, ddemaio, lkocman, skriesch, rbrown, dleuenberger, wengel, dirk, gp,maxlin ## Leap Leap 15.3 GA is going to be today! Please join us after the official announcement at meet.opensuse.org/bar for the 24x7 celebration! Issue with zypper patch and few older nvrs in SLE maint channel. https://bugzilla.opensuse.org/show_bug.cgi?id=1186642 we do not recommend to run zypper patch until the bug is fixed. We've covered migration details in https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.3/ Documentation will be published during today at https://doc.opensuse.org/ there is currently more issues than expected. Thinking about the early feature gathering (I do really like the wiki/bugzilla idea). Where I'd transfer issues into jiras on the Monday feature review meetings. Alternative currently proposed by Neal is to use pagure issue tracking. Seems like openSUSE release team prefers wiki to track usecases based on initial feedback. Worked on software-o-o deployment https://bugzilla.opensuse.org/show_bug.cgi?id=1186702 and also had to do local build && commit of devel-o-o. The local build part was not done since November. ## openSUSE Tumbleweed * only one snapshot released since last wednesday: UsrMerge enabled and GCC11 rebuilt There are various reports of 'no problem' during upgrade (same as openQA saw), but unfortunatley also a bunch of people WITH issues on this upgrade (me included) It's not entirely clear (yet) what causes some of the issues ## Richard (Kubic/TW MicroOS) Important fixes to Kubernetes 1.21 to fix the problematic [boo#1186125] have finally be properly released. Kubernetes 1.21.1 and 1.20.7 released Experiments started on a MicroOS build optimised for Rancher use cases. Experimenting with casync as an image delivery method. MicroOS Desktop (GNOME) Beta has been released, some pattern tuning identified before it can be considered production ready. Improvements to firstboot wizard otw to make it more resiliant to complex network arrangements. Talks about MicroOS Desktop (GNOME) and Rancher-optimised Kubic submitted to oSC Unrelated to MicroOS/Kubic: Been helping with the migration to Libera.Chat - feel free to ping me if you have issues with channel registration/op access to channels. ## Max * https://bugzilla.opensuse.org/show_bug.cgi?id=1184326 missing libzypp/zypper support lkocman: Michael Andres is on it, we might also need to supply ReleaseNotes entry (I have a WIP RN entry for this) * Add 15.3 external links to download.o.o https://github.com/openSUSE/download.o.o/pull/33 * Found out maintenance is expecting 3 update repos for Leap 15.3, official main update repo, backports update and sle update, howver we only had the Leap official one defiend in skelcd-control, we have a emergency call with crew to find a option rather than respin the media, https://bugzilla.suse.com/show_bug.cgi?id=1186593 * Fix setup_online_repos after Leap 15.3 added additional update repos for Backports and SLE Worked on various release-notes entries for Migration and KMPs. Fixes for release notes publishing script. ## Guillaume - Arm Tumbleweed: * First (unpublished) snapshot with gcc11/UsrMerge update was broken on aarch64 openQA. Fix available: https://build.opensuse.org/request/show/896735 Next snapshot should be fine. Leap 15.3: * aarch64: * Still not able to build locally (osc build --vm-type=kvm) for aarch64 with a Tumbleweed host. https://bugzilla.opensuse.org/show_bug.cgi?id=1183653 * Armv7: * Still not able to perform the NET installation, but last fixes are on the way. https://bugzilla.opensuse.org/show_bug.cgi?id=1183795#c15 (armv7 Leap and TW are affected)(still work in progress) Regarding the issue above: freezing of Leap:15.3, Step and Arm. We could freeze Step project, and have a subproject that contains only the fix for yast2-installer, which would be the actual difference. As Adrian mentioned it's basically additional workarounds. More AArch64 hardware for OBS have been ordered. They will support 32- bit but only for user-space, so no 32-bit kernel in qemu which needs some updates/tests in OBS. (OBS team is on it already). ETA: ~1 weeks. WSL: Stalled: WIP to have WSL on aarch64 on https://build.opensuse.org/project/show/home:Guillaume_G:WSL The goal is to have WSL-DistroLauncher package built for aarch64. Help welcomed. Doing more integration testing for WSL with kiwibuilds ## Sarah - s390x Tumbleweed: * Tumbleweed broken because of broken base packages as glibc and perl * LLVM bug with different jit data layout has prevented Postgres installations. Workaround is integrated. https://bugzilla.suse.com/show_bug.cgi?id=1185952 -> waiting for next successful build * Planning of openSUSE Kubic topics incl. containers as next additional steps ## Doug * openSUSE Leap 15.3 * Will publish release announcement at 12:00 UTC * Release party in https://meet.opensuse.org/bar at 12:00 UTC * metrics.o.o. needs to be updated for Leap 15.3 (tracking) * FrontRunner release scheduled for June 8 * openSUSE Leap 15.3 Beta T-Shirts arrived this week. Shipments have started * openSUSE Conference (June 18 - 19) * Had meeting last night (every Tuesday at 18:00 UTC on meet.o.o. & discord) * Working on welcome page * Network connection is unresolved (may need LTE) service * Need to create schedule in platform from https://events.opensuse.org/conferences/oSVC21/schedule * Registrations 148 * Setup starts in events area on June 14 survey.opensource.org - Leap 15.3 retro is already available. I'd like to ask people to capture issues while they're still fresh in their memory. ## Dirk Back from vacation. Focus on gcc 11 issues related to aarch64/armv7 on Tumbleweed Worked on openSUSE:Factory:ARM:Rings:* - have PRs to enable pending review ## Gerald No update (just holding off updating his Tumbleweed notebook for now ;- ) ). lkocman: discussing initial planning for 15.4 feature requests outside jira (wiki, pagure, redmine ...) lkocman: Could we ask Collabora online? Dirk: 1) we can use bugzilla for small enhancements (bugzilla component enhancement) 2) wiki could work for larger theme requests (why and what needs to be done) Lubos would then check it periodically (on Monday feature review meetings) and create issue in jira/redmine/bugzilla whatever matches the request. Seems like nobody on the call is against. Let's see what project@ and factory@ things. ## Wolfgang (Package Hub), Scott Bahling - we still have some missing runtime dependencies which will be handled through subpackages repository TODO: Lubos will reference a bug with packages that have newer nvr in Leap than in SLE maint (few forked SLE packages in Backports) https://bugzilla.opensuse.org/show_bug.cgi?id=1186642 -- not open to public ## Adrian - CtLG or openSUSE Step Initial SLE 15.4 setup is already in IBS and OBS. Lubos will requests 15.4 setup probably next week, in case that Wolfgang and Max won't be faster. It was clarified that there is no NDA on source code (WHAT). The actual NDA part on requests is (WHY). This is good news as we can start with builds early. Fixed misconfiguration of Leap sync OBS->ftp-stage zypper patch is expected to be working at this point of time Lubos will test this this week (especially for SLE updates repo, rest required no change) ftp-publishing for armv7/ports, could be set up today. Guillaume and Dirk agree to release the build. However we want to wait for announcement until we have a working ARMv7 build. Discussions about OpenSUSE 15.2 Leap (Boothole 2 Respin). Lubos: let's use respin as part of the subproject name. Lubos to create subproject, and will update the existing mailing list thread. This needs to be ready with first maint. update for Leap (origin SLE updates). Lubos will sync with Maintenance on this. Otherwise deadline would be something like week prior GA (scheduled for 2nd of June)

1 0

openSUSE Leap 15.3 GM has not arrived in the repo yet
by dieter 02 Jun '21

02 Jun '21

Hi, openSUSE Leap 15.3 Build 160.3 seems not to be available in the online repo yet: https://download.opensuse.org/distribution/leap/15.3/repo/oss/ Regards, Dieter

5 6

New Tumbleweed snapshot 20210527 released!
by Dominique Leuenberger 01 Jun '21

01 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dhcp (4.4.2 -> 4.4.2.P1) exiv2 farstream gcc (10 -> 11) gcc11 (11.0.0+git183291 -> 11.1.1+git121) libreoffice patterns-base presage qemu === Details === ==== dhcp ==== Version update (4.4.2 -> 4.4.2.P1) Subpackages: dhcp-client dhcp-doc dhcp-relay dhcp-server - Add -fno-strict-aliasing to CFLAGS to avoid a segfault in dhcpd (boo#1186631). - Update to 4.4.2-P1: * CVE-2021-25217, bsc#1186382: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient. - Error out, if %version and %isc_version are not in sync. ==== exiv2 ==== - Add 1271.patch: Fix build using GCC 11 (boo#1185218). - Drop the sed hack to remove -fcf-protection: this is properly solved with the above patch. - -fcf-protection doesn't work on i586 with gcc11 either (boo#1185218) ==== farstream ==== Subpackages: farstream-data gstreamer-plugins-farstream libfarstream-0_2-5 - Add farstream-glib-non-volatile.patch: Fix build againat GCC11 with glib no longer misusing 'volatile' (boo#1185220). ==== gcc ==== Version update (10 -> 11) Subpackages: cpp gcc-info libstdc++-devel - Switch gcc to default 11. - Adjust liblto_plugin.so naming for GCC 11. ==== gcc11 ==== Version update (11.0.0+git183291 -> 11.1.1+git121) Subpackages: libasan6 libatomic1 libgcc_s1 libgcc_s1-32bit libgfortran5 libgomp1 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp-gcc11 libstdc++6-pp-gcc11-32bit libtsan0 libubsan1 - Update to gcc-11 branch head (23855a176609fe8dda6abaf2b2), git121 - Disable build-id generation on non-glibc targeting cross compilers. - Update to gcc-11 branch head (cd0a059bd384da58d43674496a7), git67 * Includes GCC 11.1 release - Drop upstreamed gcc11-no-offload.patch. - Update to gcc-11 branch head (7a7fc01b9d20afb1a2b805d93cb), git31 * Includes GCC 11.1 RC2 - Add gcc11-no-offload.patch and gcc11-amdgcn-disable-hot-cold-partitioning.patch. - Enable gfortran for offload compilers. - BuildRequire procps from gcc11-testresults if we test go. - Force using llvm11 for amdgcn offloading since llvm12 doesn't yet work. Package expanded symlinks so concurrent installs do not pull in another llvm-mc. - Add gcc11-gdwarf-4-default.patch to default to DWARF4 generation in SLES15 and older. - Update to gcc-11 branch head (27350b77a92062667427100afb4), git10 * Includes GCC 11.1 RC1 - Bump to 49813aad3292f7f2bef69206274da78a9a7116ed. - Disable nvptx offloading on aarch64 since it doesn't work. - Bump to a87d3f964df31d4fbceb822c6d293e85c117d992. - Remove gcc48-remove-mpfr-2.4.0-requirement.patch which does no longer apply. - Arrange for a C++ 11 capable host compiler to be available. - Do not require ISL for cross compiler builds on old distros. - Bump to 123b3e03c911a43054c1f88f5d3110e1d084dd4e. - Update embedded newlib version from 3.3.0 to 4.1.0. - Pack %{GCCDIST}-gcc%{binsuffix}. - Add a new dependency for libgccjit. - New package, inherits from gcc10 * gcc-add-defaultsspec.diff, add the ability to provide a specs file that is read by default * tls-no-direct.diff, avoid direct %fs references on x86 to not slow down Xen * gcc43-no-unwind-tables.diff, do not produce unwind tables for CRT files * gcc41-ppc32-retaddr.patch, fix expansion of __builtin_return_addr for ppc, just a testcase * gcc44-textdomain.patch, make translation files version specific and adjust textdomain to find them * gcc44-rename-info-files.patch, fix cross-references in info files when renaming them to be version specific * gcc48-libstdc++-api-reference.patch, fix link in the installed libstdc++ html documentation * gcc48-remove-mpfr-2.4.0-requirement.patch, make GCC work with earlier mpfr versions on old products * gcc5-no-return-gcc43-workaround.patch, make build work with host gcc 4.3 * gcc7-remove-Wexpansion-to-defined-from-Wextra.patch, removes new warning from -Wextra * gcc7-avoid-fixinc-error.diff * gcc9-reproducible-builds-buildid-for-checksum.patch * gcc9-reproducible-builds.patch * gcc10-amdgcn-llvm-as.patch * gcc10-foffload-default.patch - libgccjit subpackage is added. - HWASAN is built for aarch64 target. ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Recommend libreoffice-qt5 only when it is actually created - Add gcc11-fix-error.patch as fix for boo#1186110. - libreoffice requires at least java 1.8.0 to run properly - mention some forgotten issues in the changelog ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-documentation patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - Suggest openssl from patterns-base-base: in case something requires /usr/bin/openssl or openssl(cli), we want to declare openssl as our default. ==== presage ==== Subpackages: libpresage1 presage-data - Fix one more GCC 11 warning. ==== qemu ==== Subpackages: qemu-arm qemu-audio-spice qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-chardev-baum qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-ppc qemu-s390x qemu-seabios qemu-sgabios qemu-skiboot qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-vhost-user-gpu qemu-x86 - Fix CVE-2021-3527 in usb/redir: usb-redir-avoid-dynamic-stack-allocation.patch - Fix issues found upstream: hw-block-nvme-consider-metadata-read-aio.patch sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch vfio-ccw-Permit-missing-IRQs.patch vhost-user-blk-Check-that-num-queues-is-.patch vhost-user-blk-Don-t-reconnect-during-in.patch vhost-user-blk-Fail-gracefully-on-too-la.patch vhost-user-blk-Get-more-feature-flags-fr.patch vhost-user-blk-Make-sure-to-set-Error-on.patch virtio-blk-Fix-rollback-path-in-virtio_b.patch virtio-Fail-if-iommu_platform-is-request.patch virtiofsd-Fix-side-effect-in-assert.patch monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch - Brotli VLA error was already fixed in v5.2 but the patches wasn't included in v6.0. This change fixed that - Patches added: brotli-fix-actual-variable-array-paramet.patch hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch - For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)

1 0

Passing Rust source root to obs-service-cargo_audit
by John Paul Adrian Glaubitz 01 Jun '21

01 Jun '21

Hi! I'm currently working on my first Rust package called aws-sdk-rust [1][2]. I have followed the guide in [3] and created a rough template for the spec file. I copied the _service file and adapted it for my needs, then tried to create the source tarball with: $ osc service ra which fails with: glaubitz@suse-laptop:~/suse/home:glaubitz:branches:Cloud:Tools/aws-sdk-rust> osc service ra Cloning into '/home/glaubitz/suse/home:glaubitz:branches:Cloud:Tools/aws-sdk-rust/aws-sdk-rust'... 00c6d6f350cf45e2cdd8e3a9fdec6e24bbb63142 merge: origin/v0.0.5-alpha - not something we can merge Already up to date. 00c6d6f350cf45e2cdd8e3a9fdec6e24bbb63142 Compressed aws-sdk-rust-0.0.5-alpha.tar to aws-sdk-rust-0.0.5-alpha.tar.xz INFO:obs-service-cargo_audit:Running OBS Source Service 🛒: obs-service-cargo_audit INFO:obs-service-cargo_audit:Current working dir: /home/glaubitz/suse/home:glaubitz:branches:Cloud:Tools/aws-sdk-rust INFO:obs-service-cargo_audit:Searching for Cargo.lock in: aws-sdk-rust INFO:obs-service-cargo_audit:No Rust Cargo.lock found under aws-sdk-rust INFO:obs-service-cargo_audit:Searching for Cargo.toml in: aws-sdk-rust ERROR:obs-service-cargo_audit:Could not generate Cargo.lock under aws-sdk-rust Aborting: service call failed: /usr/lib/obs/service/cargo_audit --srcdir aws-sdk-rust --outdir /home/glaubitz/suse/home:glaubitz:branches:Cloud:Tools/aws-sdk-rust/tmpx9gjoadi.cargo_audit.service glaubitz@suse-laptop:~/suse/home:glaubitz:branches:Cloud:Tools/aws-sdk-rust> The problem here seems to be that Cargo.toml and Cargo.lock are not in the root directory of the aws-sdk-rust sources but rather in the "sdk" subdirectory. Is there any way to tell the OBS service to search for these files in the "sdk" directory? Thanks, Adrian > [1] https://build.opensuse.org/package/show/home:glaubitz:branches:Cloud:Tools/… > [2] https://github.com/awslabs/aws-sdk-rust > [3] https://en.opensuse.org/Packaging_Rust_Software

2 2

YaST: highlights of development sprint 124
by Ancor Gonzalez Sosa 01 Jun '21

01 Jun '21

As the release of openSUSE Leap 15.3 approaches (tomorrow if the great day) the YaST Team at SUSE keeps working with an eye in the future, setting the foundations for some mid-term goals. That includes: - Progress in the rewrite of yast2-users, including AutoYaST - Better tools to track memory consumption during installation - A new YaST module to assist those working in the YaST look & feel - Improved logging of products information See the full report at https://yast.opensuse.org/blog/2021-06-01/sprint-124 Cheers. -- Ancor González Sosa YaST Team at SUSE Linux GmbH

1 0