April 2020 - openSUSE Build Service - openSUSE Mailing Lists

[opensuse-buildservice] linked grub2 package - secure boot failure
by Damian Ivanov 20 Apr '20

20 Apr '20

I am working on a grub2 patch and build a branched grub2 from Base:System / grub2 in my home project. It compiles/publishes and works fine but secure boot does not work when this grub2 package is installed. I understand that each rpm is signed with a specific key for the corresponding project, but I do not understand how this causes secure boot to fail. I would like to understand what causes this. Thanks in advance, Damian -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

2 2

[opensuse-buildservice] Building Uyuni VMs with Kiwi
by Pau Garcia Quiles 17 Apr '20

17 Apr '20

Hi I am hitting a problem when trying to build Uyuni VMs with Kiwi because I cannot add an OBS URL as a repository in OBS (only projects or distributions are allowed). This is how the docs (https://www.uyuni-project.org/pages/stable-version.html#serversetup) tell you to install Uyuni: 1. Install Leap 15.1 2. Add the "images" package repository: https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Stable… 3. zypper ref & zypper in patterns-uyuni_server When I want to build my VM images with Kiwi, I cannot add that URL in https://build.opensuse.org/projects/home:pagarcia:Uyuni:2020.04/meta The workaround I have been using so far is adding two OBS projects: * Snapshot of Uyuni: systemsmanagement:Uyuni:Snapshots:2020.04 OBS project (fine, that's a snapshop and does not change) * systemsmanagement:Uyuni:Master:Other => This is a problem because this repository changes over time. This is a problem because the VMs get rebuilt when new packages are available in systemsmanagement:Uyuni:Master:Other and therefore do not contain exactly the same as https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Stable… Is there a way to solve this? Ideally, I should be able to add a URL as a repository (at least one that comes from OBS itself, so it should not require downloading anything). AFAIK this is not possible today. Alternatively, I could also take snapshots of systemsmanagement:Uyuni:Master:Other for each release of Uyuni. This is currently possible but it will take some disk space. Thank you Pau Garcia Quiles SUSE Manager Product Owner & Technical Project Manager SUSE Software Solutions Spain -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

3 2

[opensuse-buildservice] nice ./bs_worker permission denied
by Mathias Radtke 17 Apr '20

17 Apr '20

Hi @all I installed obs-worker on debian 8 and did add the address of the obs-server into /etc/default/obsworker along iwht the numer of worker instances. However when I start the service it starts and runs but when I enter the screen I get the following message: nice: ./bs_worker: permission denied Any way to debug it? Rergards Mathias -- Mathias Radtke opsi - Open PC-Server-Integration das Open Source Client-Management-System von uib gmbh Birgit Hubal Vertrieb / Projektkoordination eMail: b.hubal(a)uib.de Tel. +49 6131 / 27561-18 Fax +49 6131 / 27561-22 uib gmbh Bonifaziusplatz 1B 55118 Mainz Internet: https://uib.de https://opsi.org Geschäftsführer: Dr. Detlef Oertel, Erol Ülükmen Handelsregister: Amtsgericht Mainz HRB 6942 -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

5 4

[opensuse-buildservice] Manually trigger publish of package
by Kyle Edwards 14 Apr '20

14 Apr '20

Hello, I'm writing a publish hook, and want to make sure it works when integrated with my OBS instance. I have already built the package that I want to publish. Is there a way I can make OBS re-run the publish hook without triggering a rebuild? (I don't want to run the publish hook directly.) Kyle -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

5 9

[opensuse-buildservice] ldconfig macro
by Damian Ivanov 13 Apr '20

13 Apr '20

Hello, Shouldn't the ldconfig macros for post and postun be uneeded on Tumbleweed? I thought that the ldconfig is handled by rpm file triggers, yet for tumbleweed build I still get a warning in rpmlint report. Br, D -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

2 4

[opensuse-buildservice] how to copy foreign noarch packages into target repository?
by Olaf Hering 08 Apr '20

08 Apr '20

Following the example of Virtualization/qemu-aggregate, I added this to prjconf: ExportFilter: ^grub.*\.noarch\.rpm$ . i586 armv7l aarch64 ppc ppc64 ppc64le s390x x86_64 This home:olh:ai/grub2-aggregate/_aggregate exists: <aggregatelist> <aggregate project="SUSE:SLE-15-SP1:Update"> <package>grub2.14406</package> <binary>grub2-powerpc-ieee1275</binary> <binary>grub2-arm64-efi</binary> <repository source="standard" target="grub2_mknetdir" /> </aggregate> </aggregatelist> This repository exists: <repository name="grub2_mknetdir"> <path project="SUSE:SLE-15-SP1:Update" repository="standard"/> <arch>x86_64</arch> </repository> The result is: no binaries in the 'grub2-aggregate' pkg. I tried various variants, like temporary adding <arch>ppc64le</arch> to the repository. This did apparently trigger the creation of "::import::ppc64le::grub2-powerpc-ieee1275.noarch.rpm", the rpm remains even with arch removed. However, where is the arm binary package? Are the steps above enough import foreign packages for further processing? Olaf

3 2

[opensuse-buildservice] OBS goes Ruby On Rails 6!
by Saray Cabrera Padrón 08 Apr '20

08 Apr '20

Hello! We are glad to announce that OBS is now running on Ruby on Rails 6! It is a big milestone to ensure that the project stays future-proof and reliable. You can read more about this and other achievements in our blog post: https://openbuildservice.org/2020/04/06/rails6 <https://openbuildservice.org/2020/04/06/rails6/> Regards, The OBS Team -- Saray A. Cabrera Padrón | scabrerapadron(a)suse.de | scabrerapadron(a)suse.com Full Stack Web Developer - Open Build Service SUSE Linux GmbH, Maxfeldstr. 5, D-90409 Nürnberg Tel: +49-911-74053-0; Fax: +49-911-7417755; https://www.suse.com/ SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)

1 0

[opensuse-buildservice] Package signing keys
by Marcus Klein 08 Apr '20

08 Apr '20

Hi all, we're using on own deployment of the Open Build Service to package our software. Unfortunately we used a very weak key in the past, to sign our packages. This key is stored within GPG of the root user of the deployment. We like to increase now the security with this package signing key. Currently we're using a 1024 bit RSA key and we would like to use a 4096 bit RSA key as other mechanisms do not be seem to be supported on the Linux distributions we want to build packages for. Is there a possibility to store two package signing keys in the root user of the deployment and select then for some project one of both keys? This would allow us to still maintain old releases of our software with patches - built always in separate projects - with the old package signing key while we can sign packages of a new release with a 4096 bit RSA key. I read about the possibility to create a key for a project but we need a key for several projects. Is this possible somehow? -- kind regards, Marcus Klein Release Management Cell: +49 151 64908963 Phone: +49 2761 75252 00 Fax: +49 2761 75252 30 Email: marcus.klein(a)open-xchange.com ------------------------------------------------------------------------------------- Open-Xchange AG, Rollnerstr. 14, 90408 Nuremberg, District Court Nuremberg HRB 24738 Managing Board: Rafael Laguna de la Vera, Carsten Dirks, Michael Knapstein, Stephan Martin Chairman of the Board: Richard Seibt European Office: Open-Xchange GmbH, Olper Huette 5f, D-57462 Olpe, Germany, District Court Siegen, HRB 8718 Managing Director: Frank Hoberg US Office: Open-Xchange. Inc., 530 Lytton Avenue, Palo Alto, CA 94301, USA -------------------------------------------------------------------------------------

2 1

[opensuse-buildservice] Need help with a strange obs access problem
by Dave Plater 08 Apr '20

08 Apr '20

Hi, I normally use 4G through a wifi router connected to a range extender with an Ethernet connection to my main Leap:15.1 computer. During lock down Rain my 4G data provider has been down to 56K modem speeds so I connected to vodacom my cell phone provider via wifi hotspot. First problem I saw was: > osc build x86_64 Run source service: /usr/lib/obs/service/format_spec_file --outdir /dave/davepl/osc/home:plater/carla/tmpktzip7ha.format_spec_file.service Run source service: /usr/lib/obs/service/source_validator --outdir /dave/davepl/osc/home:plater/carla/tmpsup_294z.source_validator.service Building carla.spec for openSUSE_Factory/x86_64 Getting buildinfo from server and store to /dave/davepl/osc/home:plater/carla/.osc/_buildinfo-openSUSE_Factory-x86_64.xml Getting buildconfig from server and store to /dave/davepl/osc/home:plater/carla/.osc/_buildconfig-openSUSE_Factory-x86_64 unknown keyword in config: publishflags: Updating cache of required packages 7.3% cache miss. 710/766 dependencies cached. 1/56 (openSUSE:Factory) kernel-obs-build-5.6.2-1.1.x86_64.rpm /tmp/osc_buildlmiz989n: unsupported package type. magic: 'b'<html><'' I can osc co etc with no problem I just have a problem with local builds. Next problem was when I attempted to refresh my repositories: Skipping repository 'openSUSE-Leap-15.1-Update' because of the above error. Problem retrieving files from 'openSUSE-Leap-15.1-Update-Non-Oss'. Download (curl) error for 'http://download.opensuse.org/update/leap/15.1/non-oss/media.1/media': Error code: Unsupported protocol or redirect (Location: http://flex.vodacom.co.za/err/?err=404) Error message: Received HTTP/0.9 when not allowed With all of my opensuse.org repos, Packman works. When I saw flex.vodacom.co.za I contacted vodacom my service provider but then I noticed that my Tumbleweed laptop worked when connecting to the phone's wifi hotspot. Any suggestions? Thanks Dave P -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

2 3

[opensuse-buildservice] OBS 2.10.2 released
by Eduardo Navarro 06 Apr '20

06 Apr '20

OBS 2.10.2 released =================== This release is fixing in first place a XSS vulnerability, tracked in CVE-2020-5267. Updaters from OBS 2.10.1 release can just ugrade the packages and restart all services. Updaters from former releases should read the README.UPDATERS file. OBS update are available from the following projects: https://build.opensuse.org/project/show/OBS:Server:2.10 The appliance can be downloaded from http://openbuildservice.org/download Details from ReleaseNotes file ============================== Features ======== Backend: * Support for zstd compressed Arch Linux packages Bugfixes ======== Frontend: * Security update for gem rails (CVE-2020-5267) Backend: * support container architecture armv6 and armv7 variants * speed up nativeonly handling in dispatcher * fix package lock check on wipe * follow upstream container registry rename of "token" to "access_token" * KiwiProduct: take all src rpms if we want one binary * fix file descriptor leak leading to bs_dodup crashes * support xz compressed Packages files in bs_dodup -- Eduardo Navarro <enavarro(a)suse.com> Open Build Service Frontend Developer SUSE Software Solutions Germany GmbH Maxfeldstr. 5 90409 Nürnberg Germany (HRB 36809, AG Nürnberg) Geschäftsführer: Felix Imendörffer -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

1 0