May 2011 - openSUSE Build Service - openSUSE Mailing Lists

[opensuse-buildservice] Very basic osc question
by Greg Freemyer 13 May '11

13 May '11

All, I've messed up my local working directory. How can I "rm -rf" it and re-create it from build.o.o? Note: I tried once, but they are still not in sync, so I just want to do a forced reset. Thanks Greg -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-buildservice+help(a)opensuse.org

3 5

[opensuse-buildservice] The next step, OBS 2.3 Beta 1 is released
by Adrian Schröter 13 May '11

13 May '11

OBS 2.3 Beta 1 is out! ====================== The main features of this release are * Full distribution maintenance support. This includes support for the workflow in OBS and also the patch channel generation. This functionality can be used at full glance with coordination and review teams or just in parts. * Read access protection for projects (as planned for OBS 2.2) Apart from that we have many smaller improvements, esp. in the area of request handling and the webui integration. Download it =========== As usual, you find current packages or an appliance in openSUSE:Tools:Unstable project. OBS 2.3 Beta 1 is tagged as version 2.2.80. Please read here for usage details for the appliance: http://en.opensuse.org/openSUSE:Build_Service_Appliance Current State ============= The Beta 1 release means that currently no new feature should be commited to git master without asking. Open tasks for next weeks are: * Get webui usable for the maintenance coordination. * Get documentation in a better shape so that we can switch openSUSE maintenance using the new mechanisms. * source service generate files may get committed in a different way * There are absolute zero known regressions known atm. So really everything should be at least as good as in OBS 2.1.x :) Feel free to run it on your production system, we do it also on build.opensuse.org :) The call for help ================= There are still a number of areas where some clean up is needed. For example we have * 17 FIXME2.2 lines in the code (means that read access handling code needs checking) * 8 FIXME2.3 lines in the code (maintenance code needs a revisit here) * Unknown state of Cross architecture builds. It would be nice if someone can help so that the OBS Appliance can build for arm architectures out of the box. Please find the full Release Notes below: ========================================= # # openSUSE Build Service 2.3 # Please read the README.SETUP file for initial installation instructions or use the OBS Appliance from http://en.opensuse.org/Build_Service/OBS-Appliance There is also an install medium with installs OBS on hard disc now. README.UPDATERS file has informations for updaters. OBS Appliance users who have setup their LVM can just replace their appliance image without data loss. The migration will happen automatically. Main Features ============= The main topic of OBS 2.3 is to deliver a number of features to allow product maintenance handling with OBS. No external build or tracking tool is needed to do the typical maintenance workflow of a distribution team. The usage of these features are documented in the OBS book: http://doc.opensuse.org/products/draft/OBS/obs-reference-guide_draft/ OBS 2.3 comes also with a feature which was planned for the not released OBS 2.2 version. New created projects can set to hidden. That means no source or binary read access is possible. Please read the following for details: To be considered regarding read access checks ============================================= * "access" flag is hiding and protecting entire project. This includes binaries and sources. It can only be used at project creation time and can just be globally enabled (aka make it public again) afterwards. This flag can only be used on projects. * "sourceaccess" flag is hiding the sources to non maintainers, this includes also debug packages in case the distribution is supporting this correctly. This flag can also only be used at package creation time. There is no code yet which is checking for possible references to this package. This flag can be used on projects or packages. * "downloadbinary" permission still exists like before. However, unlike "access" and "sourceaccess" this is not a security feature. It is just a convinience feature, which makes it impossible to get the binaries via the API directly. But it still possible to get the binaries via build time in any case. Security aspects ================ Former OBS releases lack protection against XSS attacks. Esp. public instances should update to OBS 2.3, which is using rails plugins to protect against XSS attempts. This fixes (CVE-2011-0462). Apache & mod_rails switch ========================= Former OBS versions used lighttpd as default web server. We have switched to apache with mod_rails (known as passenger) as default web server. We have also added an mod_xforward apache module to allow unloading the rails stack with long running requests to the backend. Please note that current apache2 versions have a known bug which cuts the http headers regardless to it's configuration. Please use apache2 from openSUSE:Tools project to get this fixed for now. Also the patched version of rubygem-passenger from openSUSE:Tools project is recommended. Known Regressions to 2.1: ========================= * none yet Features: ========= * web interface improvements: - package filtering - Generic authentification proxy support - delete request dialogs - request and review handling improvements - social features, i.e. show other user's projects and requests * api - review of requests by project or package maintainers is possible now (FATE #310806) - better Cross-Site Scripting (XSS) protection - larger number of request handling improvements * backend: Changes: ======== * web interface - bug reporting for projects/packages is only possible if a bugowner is set - XSS protection plugins are used now (CVE-2011-0462) * api - It was not possible so far to create submit requests from packages where no write access exists. This is possible now, but the source package maintainer will get asked for review the request. - the route /group/$GROUP is showing correct xml description and no directory anymore Deprecated: =========== The following calls have been marked as deprecated, they will get removed in OBS 3.0 * api - /person/$LOGIN/group -> use /group?login=$LOGIN instead Requirements: ============= * The OBS server should not run on a system with less than 2GB memory. 4GB is recommended, esp. when the same system is also building packages. * Use osc 0.131 or later to get access to the new features. * Usage of Ruby on Rails version 2.3.11 is recommended. -- Adrian Schroeter SUSE Linux Products GmbH email: adrian(a)suse.de -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-buildservice+help(a)opensuse.org

1 0

[opensuse-buildservice] OBS is using new login auth proxy
by Adrian Schröter 12 May '11

12 May '11

JFYI, we switched to a new login proxy mechanism today: http://news.opensuse.org/2011/04/19/infrastructure-updates/ please report if you see unexpected changes. Let's hope that eastern is safe ;) adrian -- Adrian Schroeter SUSE Linux Products GmbH email: adrian(a)suse.de -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-buildservice+help(a)opensuse.org

5 14

[opensuse-buildservice] OBS 2.1.9 released
by Adrian Schröter 12 May '11

12 May '11

Yet another really small OBS maintenance release. This release is basically fixing one thing: linking to remote source links/branches of packages. This was broken since a long time (but api.opensuse.org was not affected for some reason). Packages are as usual in openSUSE:Tools project, the appliances have been updated. Release Notes: ============== Feature backports: ================== * none Changes: ======== * Removed openSUSE 11.2 from default list since it runs out-of-maintenance Bugfixes: ========= * api: fix handling of source linking/branching packages on a remote server, which are a link/branch there as well. -- Adrian Schroeter SUSE Linux Products GmbH email: adrian(a)suse.de -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-buildservice+help(a)opensuse.org

1 0

[opensuse-buildservice] Can't update sources via Source Service
by Daniel Z. 12 May '11

12 May '11

Hi all, these days I'm trying to build a few packages with the build service. I login at build.opensuse.org, but when I try to edit the source services settings I'm getting this error: OBS Web Interface Error:Permission denied The account that is logged into the system lacks proper permissions to perform the operation. Please contact the openSUSE admin to get proper permissions for the user account. Error Details: Errorcode: 403 Message: service still running at /root/bs//bs_srcserver line 123. The build is blocked because of "source update running", but I waited for two days and none of the source services update the sources of my package. I get this error with two packages in two different subprojects. I also created other packages to see if it was a problem of that two specific packages but I get this error on any new package I created. Can anyone help me? Thanks in advance, Daniel Z. -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-buildservice+help(a)opensuse.org

2 2

[opensuse-buildservice] version info in BS package search
by Hans-Peter Jansen 11 May '11

11 May '11

Hi, what I really, really miss frequently is a version and probably last changed info in BS package search. Opinions? Pete -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-buildservice+help(a)opensuse.org

2 1

[opensuse-buildservice] build-compare and KMPs
by Cristian Rodríguez 10 May '11

10 May '11

Hi: build-compare does not discard binary identical KMPs, see example https://build.opensuse.org/package/live_build_log?arch=x86_64&package=virtu… only difference -/bin/sh nvr=virtualbox-guest-kmp-desktop-4.0.6_k2.6.38.0_4-2.6 +/bin/sh nvr=virtualbox-guest-kmp-desktop-4.0.6_k2.6.38.0_4-2.7 I expect kmps to be republished only when there are binary different. Will be cool if someone can take a look at it. Cheers. -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-buildservice+help(a)opensuse.org

2 1

[opensuse-buildservice] Buil failor, cdbs ubuntu
by peer 10 May '11

10 May '11

Hi, The package cdbs keeps failing on me. I try to backport it from Debian and / or Ubuntu 10.10 to Ubuntu 10.04. Was always working, but now it fails or it fails for one architecture (something one sometimes the other arch...). https://build.opensuse.org/package/show?package=cdbs3&project=home%3Aopen-s… I need some help cause pretty some packages depends on a newer version of cdbs. Thanks in advance, ~P -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-buildservice+help(a)opensuse.org

9 41

[opensuse-buildservice] obs package stuck at "signing" stage
by Greg KH 10 May '11

10 May '11

The following package in the openSUSE:Tumbleweed repo has been stuck at the "signing" stage for over 8 hours now: https://build.opensuse.org/package/show?package=libreoffice-l10n&project=op… for the x86-64 arch. I can't seem to 'trigger' a rebuild to try to get it unstuck. Does anyone know how to "kick" this to complete the build properly? thanks, greg k-h -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-buildservice+help(a)opensuse.org

2 2

[opensuse-buildservice] EPEL repositories
by Radoslav Dibarbora 10 May '11

10 May '11

Hi, Would it be possible to add EPEL repositories usable for building purposes? EPEL provides lot of perl or ruby modules needed to build obs for RHEL. Is there any legal problems why it is not possible? Many thanks, Dibo -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-buildservice+help(a)opensuse.org

3 2