August 2016 - openSUSE Build Service - openSUSE Mailing Lists

[opensuse-buildservice] [admin@opensuse.org: Build failure of graphics/transfig in openSUSE_Tumbleweed/x86_64]
by Dr. Werner Fink 19 Aug '16

19 Aug '16

----- Forwarded message from OBS Notification <admin(a)opensuse.org> ----- Subject: Build failure of graphics/transfig in openSUSE_Tumbleweed/x86_64 Visit https://build.opensuse.org/package/live_build_log/graphics/transfig/openSUS… Package graphics/transfig failed to build in openSUSE_Tumbleweed/x86_64 Check out the package for editing: osc checkout graphics transfig Last lines of build log: getbinaries: missing packages: libvpx3 ----- End forwarded message ----- What exactly could I do? IMHO it is useless to checkout the package transfig. The question I have is: What is requesting libvpx3 and why it is missed? Or is there an update of the so major version of libvpx<major> and the build system is not able to expand the dependency chains, that is to discard the old so major version and trigger a rebuild with the new so major version? Werner -- "Having a smoking section in a restaurant is like having a peeing section in a swimming pool." -- Edward Burr

3 3

[opensuse-buildservice] Hardware problem on OBS?
by Axel Braun 18 Aug '16

18 Aug '16

I wonder why a build is stuck, unless I took a look into the log: [ 1262s] [ 1218.415781] loop: Write error at byte offset 1622589440, length 4096. [ 1262s] [ 1218.417471] loop: Write error at byte offset 1622589440, length 4096. [ 1262s] [ 1218.419488] blk_update_request: I/O error, dev loop0, sector 3169120 [ 1262s] [ 1218.421184] Buffer I/O error on dev loop0, logical block 396140, lost async page write [ 1262s] [ 1218.423379] Buffer I/O error on dev loop0, logical block 396141, lost async page write [ 1262s] [ 1218.425496] Buffer I/O error on dev loop0, logical block 396142, lost async page write -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

2 1

[opensuse-buildservice] Open Build Service (OBS) 2.6.10 released
by Christian Bruckmayer 17 Aug '16

17 Aug '16

OBS 2.6.10 released =================== This release fixes CVE-2016-6316 in an OBS related dependency (rails, actionview). You can read about the details in the rails security group: https://groups.google.com/forum/#!topic/ruby-security-ann/8B2iV2tPRSE. Furthermore it includes several bugfixes which are stated in the Release Notes. Updaters from any OBS 2.6 release can just upgrade the packages and restart all services. Updaters from former releases should read the README.UPDATERS file. OBS update are available from the following projects: https://build.opensuse.org/project/show/OBS:Server:2.6 The appliance can be downloaded from http://openbuildservice.org/download Details from the Release Notes of 2.6.10: ========================================= Feature backports: ================== * [backend] hook to add scripts on un-publishing Changes: ======== * none Bugfixes: ========= * [webui] fixing redirection after login * [webui] fixes for monitor page * [webui][api] Fixes CVE-2016-6316 in rubygem-actionview * [api] support handling of no_proxy settings * [backend] support handling of no_proxy settings * [backend] fixing servicemark collisions if projects gets deleted and recreated with the same name * [backend] avoid rebuild after project copy with binaries * [backend] worker do support jobs from OBS 2.8 servers -- Christian Bruckmayer SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

1 0

[opensuse-buildservice] OBS 2.7.1 released
by Christian Bruckmayer 16 Aug '16

16 Aug '16

OBS 2.7.1 released ================== This release fixes two important CVEs in OBS related dependencies (rails, actionview, activerecord). The related CVEs are stated in the Release Notes. For more information, please see this blog article from the official rails website: http://weblog.rubyonrails.org/2016/8/11/Rails-5-0-0-1-4-2-7-2-and-3-2-22-3-… Previous OBS releases are also affected, but not yet fixed. We plan to release a fix for 2.6 in the next few days. Updaters from any OBS 2.7.0 release can just upgrade the packages and restart all services. Updaters from former releases should read the README.UPDATERS file. OBS update are available from the following projects: https://build.opensuse.org/project/show/OBS:Server:2.7 The appliance can be downloaded from http://openbuildservice.org/download Details from the Release Notes of 2.7.1: ======================================== Feature backports: ================== * none Changes: ======== * none Bugfixes: ========= * [webui][api] Update rails to version 4.2.7.1 to fix CVE-2016-6316 and CVE-2016-6317 * [webui] Users in not 'confirmed' state were allowed to login * [api] Users in not 'confirmed' state were allowed to run services via former created token * [backend] Fixing project copy which includes binaries * [backend] worker supports jobs from OBS 2.8 scheduler * [backend] support publishing of .vdi (VirtualBox image) files -- Christian Bruckmayer SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

1 0

[opensuse-buildservice] A staging area with 2 week old superseded SRs?
by Greg Freemyer 15 Aug '16

15 Aug '16

All, Is there something I need to do to make this old staging area go away: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:adi:92 Both of the SRs in there were superseded a couple weeks ago, so there is no reason for the staging area to still be hanging around. Thanks Greg -- Greg Freemyer www.IntelligentAvatar.net -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

2 1

[opensuse-buildservice] spec File für Centos
by Günther J. Niederwimmer 15 Aug '16

15 Aug '16

Hallo Liste, Eine Anfänger Frage. ich würde gerne ein Test File Bauen für CentOS 7 Das funktioniert auch soweit aber ;-)..... Da es für Cento 7 ist würde ich gerne das "el7" im rpm file haben, etwa so mod_nss-1.0.14.el7_xx.x86_64.rpm damit man es leichter zuordnen kann ich bekomme aber nur ein mod_nss-1.0.14-6.1.x86_64.rpm wo ist da der Hund begraben, ich hänge mal das spec File an. // Name: mod_nss Version: 1.0.14 Release: 1%{?dist} Summary: SSL/TLS module for the Apache HTTP server Group: System Environment/Daemons License: ASL 2.0 URL: https://fedorahosted.org/mod_nss/ Source: http://fedorahosted.org/released/mod_nss/%{name}-%{version}.tar.gz BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: nspr-devel >= 4.9.2, nss-devel >= 3.14.0.0 BuildRequires: httpd-devel, apr-devel, apr-util-devel BuildRequires: pkgconfig BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool # Needed for make check BuildRequires: openssl BuildRequires: python-nose BuildRequires: python-requests # BuildRequires: python-ndg_httpsclient Requires: httpd-mmn = %{_httpd_mmn} Requires(post): httpd, nss-tools Requires: nss%{?_isa} >= 3.14.0.0 # Although the following change reverses the desire of Bugzilla Bug #601939, it # was provided to suppress the dangling symlink warning of Bugzilla Bug #906089 # as exposed via 'rpmlint'. Requires: %{_libdir}/libnssckbi.so # Change configuration to not conflict with mod_ssl Patch1: mod_nss-conf.patch # Generate a password-less NSS database Patch2: mod_nss-gencert.patch %description The mod_nss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols using the Network Security Services (NSS) security library. %prep %setup -q %patch1 -p1 -b .conf %patch2 -p1 -b .gencert # Touch expression parser sources to prevent regenerating it touch nss_expr_*.[chyl] %build CFLAGS="$RPM_OPT_FLAGS" APXS=%{_httpd_apxs} export CFLAGS APXS NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --variable=includedir nspr` NSPR_LIB_DIR=`/usr/bin/pkg-config --variable=libdir nspr` NSS_INCLUDE_DIR=`/usr/bin/pkg-config --variable=includedir nss` NSS_LIB_DIR=`/usr/bin/pkg-config --variable=libdir nss` NSS_BIN=`/usr/bin/pkg-config --variable=exec_prefix nss` autoreconf -i -f %configure \ --with-nss-lib=$NSS_LIB_DIR \ --with-nss-inc=$NSS_INCLUDE_DIR \ --with-nspr-lib=$NSPR_LIB_DIR \ --with-nspr-inc=$NSPR_INCLUDE_DIR \ --with-apr-config --enable-ecc make %{?_smp_mflags} all %install # The install target of the Makefile isn't used because that uses apxs # which tries to enable the module in the build host httpd instead of in # the build root. rm -rf $RPM_BUILD_ROOT mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf mkdir -p $RPM_BUILD_ROOT%{_httpd_confdir} mkdir -p $RPM_BUILD_ROOT%{_libdir}/httpd/modules mkdir -p $RPM_BUILD_ROOT%{_libexecdir} mkdir -p $RPM_BUILD_ROOT%{_sbindir} mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/httpd/alias mkdir -p $RPM_BUILD_ROOT%{_mandir}/man8 %if "%{_httpd_modconfdir}" != "%{_httpd_confdir}" # httpd >= 2.4.x mkdir -p $RPM_BUILD_ROOT%{_httpd_modconfdir} sed -n /^LoadModule/p nss.conf > 10-nss.conf sed -i /^LoadModule/d nss.conf install -m 644 10-nss.conf $RPM_BUILD_ROOT%{_httpd_modconfdir} %endif install -m 644 gencert.8 $RPM_BUILD_ROOT%{_mandir}/man8/ install -m 644 nss_pcache.8 $RPM_BUILD_ROOT%{_mandir}/man8/ install -m 644 nss.conf $RPM_BUILD_ROOT%{_httpd_confdir} install -m 755 .libs/libmodnss.so $RPM_BUILD_ROOT%{_libdir}/httpd/modules/ install -m 755 nss_pcache $RPM_BUILD_ROOT%{_libexecdir}/ # Provide a compatibility link to prevent disruption of customized deployments. # # NOTE: This link may be deprecated in a future release of 'mod_nss'. # ln -s %{_libexecdir}/nss_pcache $RPM_BUILD_ROOT%{_sbindir}/nss_pcache install -m 755 gencert $RPM_BUILD_ROOT%{_sbindir}/ ln -s ../../../%{_libdir}/libnssckbi.so $RPM_BUILD_ROOT%{_sysconfdir}/httpd/alias/ touch $RPM_BUILD_ROOT%{_sysconfdir}/httpd/alias/secmod.db touch $RPM_BUILD_ROOT%{_sysconfdir}/httpd/alias/cert8.db touch $RPM_BUILD_ROOT%{_sysconfdir}/httpd/alias/key3.db touch $RPM_BUILD_ROOT%{_sysconfdir}/httpd/alias/install.log perl -pi -e "s:$NSS_LIB_DIR:$NSS_BIN:" $RPM_BUILD_ROOT%{_sbindir}/gencert %check make check %clean rm -rf $RPM_BUILD_ROOT %post umask 077 if [ "$1" -eq 1 ] ; then if [ ! -e %{_sysconfdir}/httpd/alias/key3.db ]; then %{_sbindir}/gencert %{_sysconfdir}/httpd/alias > %{_sysconfdir}/httpd/alias/install.log 2>&1 echo "" echo "%{name} certificate database generated." echo "" fi # Make sure that the database ownership is setup properly. /bin/find %{_sysconfdir}/httpd/alias -user root -name "*.db" - exec /bin/chgrp apache {} \; /bin/find %{_sysconfdir}/httpd/alias -user root -name "*.db" - exec /bin/chmod g+r {} \; fi %files %defattr(-,root,root,-) %doc README LICENSE docs/mod_nss.html %{_mandir}/man8/* %config(noreplace) %{_httpd_confdir}/nss.conf %if "%{_httpd_modconfdir}" != "%{_httpd_confdir}" %config(noreplace) %{_httpd_modconfdir}/10-nss.conf %endif %{_libdir}/httpd/modules/libmodnss.so %dir %{_sysconfdir}/httpd/alias/ %ghost %attr(0640,root,apache) %config(noreplace) %{_sysconfdir}/httpd/alias/secmod.db %ghost %attr(0640,root,apache) %config(noreplace) %{_sysconfdir}/httpd/alias/cert8.db %ghost %attr(0640,root,apache) %config(noreplace) %{_sysconfdir}/httpd/alias/key3.db %ghost %config(noreplace) %{_sysconfdir}/httpd/alias/install.log %{_sysconfdir}/httpd/alias/libnssckbi.so %{_libexecdir}/nss_pcache %{_sbindir}/nss_pcache %{_sbindir}/gencert // Danke für die Hilfe, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

4 3

[opensuse-buildservice] dependency problems in OBS:/Server:/2.6/SLE_12
by Christian 15 Aug '16

15 Aug '16

Trying to migrate my OBS instance from SLE_11 to SLE_12. As of OBS 2.6 is the latest possible version for SLE_11 I setup a new box with SLE_12 and added: http://download.opensuse.org/repositories/OBS:/Server:/2.6/SLE_12 now I am running into the following problem: while trying to install 'obs-utils' I get: osc benötigt von obs-utils-2.6.9-2.2.noarch wird nirgends zur Verfügung gestellt where to get osc if not from the OBS repo? seem that osc is missing there seem to be more files missing: on my SLE_11 I have SIT obs:~ # rpm -qa | grep obs obs-productconverter-2.6.9-2.1 obs-service-download_src_package-0.2-2.1 obs-service-download_files-0.5.1.git.1455712026.9c0a4a0-4.1 obs-service-extract_file-0.1-2.1 obs-service-format_spec_file-20160202-3.1 obs-server-2.6.9-2.1 obs-worker-2.6.9-2.1 obs-service-download_url-0.1-2.1 obs-api-2.6.9-2.1 obs-service-source_validator-0.6+git20160707.a6ff89d-3.1 obs-signd-2.2.1-2.3 obs-utils-2.6.9-2.1 obs-source_service-2.6.9-2.1 where to get all these missing 'obs-service-*' files ? For SLE_11 I can find them in OBS 2.4/2.5 repo, but these do not build for SLE_12 Any help or 'repo fixes' would be wonderful. Thanks in Advance -- Christian ---------------------------------------------------- - Please do not 'CC' me on list mails. Just reply to the list :) ---------------------------------------------------- Der ultimative shop für Sportbekleidung und Zubehör http://www.sc24.de ----------------------------------------------------

2 8

[opensuse-buildservice] Downloading (signing keys at least) from OBS via HTTPS?
by Archie Cobbs 12 Aug '16

12 Aug '16

Although OBS provides signing keys, I'm pretty certain that the majority of users do not actually verify their fingerprints before selecting "Trust Always". Oh well it's not a perfect world. However, we could improve things a lot without requiring changing any behavior if the download site supported HTTPS access instead of only HTTP. Normal use of HTTPS is becoming standard practice these days - google, github, etc. For example, this HTTPS URL does NOT work: https://download.opensuse.org/repositories/Apache/openSUSE_Leap_42.1/repoda… instead you have to use insecure HTTP: http://download.opensuse.org/repositories/Apache/openSUSE_Leap_42.1/repodat… Any reason we can't secure OBS access? If not, can we at least do it for the signing key files themselves? With what we have now, and users tendency to "Trust Always" without thinking, the signing keys are not really doing what they could. -Archie -- Archie L. Cobbs -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

6 9

[opensuse-buildservice] 404 on repository change of package
by Hans-Peter Jansen 12 Aug '16

12 Aug '16

here: https://build.opensuse.org/repositories/home:frispete:Kernel-stable/virtual… I tried to disable the "all i586 build flag", but harvest a 404 only... Cheers, Pete -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

4 3

[opensuse-buildservice] refreshed key is not published
by Olaf Hering 11 Aug '16

11 Aug '16

The key below 'home:olh' expired a few day ago. I ran 'osc signkey --extend' to fix it, and 'osc signkey home:olh | gpp' shows that it appearently worked fine. But still zypper reports an expired key in my TW installation. Neither 'zypper clean -a' nor 'find /var/cache/zypp -type f -delete' help. Is ther anything else that needs to be done to use and/or publish the updated key? Olaf

7 8