September 2020 - openSUSE Build Service

[opensuse-buildservice] Add external source to a package?
by Carsten Ziepke 12 Sep '23

12 Sep '23

Hello, I want to update the package ja2-stracciatella in the games repository to version 0.17.0. https://build.opensuse.org/package/show/home:Kieltux:branches:games/ja2-str… The new version needs the library string_theory which is not available for openSUSE. The build process wants to download string_theory from github, because it is not found. [ 36s] Scanning dependencies of target string_theory [ 36s] [ 12%] Creating directories for 'string_theory' [ 37s] [ 25%] Performing download step (download, verify and extract) for 'string_theory' [ 37s] -- Downloading... [ 37s] dst='/home/abuild/rpmbuild/BUILD/ja2-stracciatella-0.17.0/build/dependencies/lib-string_theory/builder/string_theory-prefix/src/3.1.tar.gz' [ 37s] timeout='none' [ 37s] -- Using src='https://github.com/zrax/string_theory/archive/3.1.tar.gz' [ 37s] -- Retrying... Can I add string_theory (string_theory-3.1.tar.gz) manually to the package and patch the build process? Thank you, Carsten -- Well, since MS cant be sure of the username of someone downloading things, they are going to play it safe and have everything dowloaded and executed by Explorer as suid root. That way, it will run on ANY system anywhere. :) -- George Bonser <grep(a)cris.com>

3 4

[opensuse-buildservice] Compiler Cache (Ccache) support in Open Build Service
by Sumit Jamgade 20 Apr '21

20 Apr '21

Hello, Long running compilation can now leverage ccache[1] to speed up the build process. This feature can be enabled per package in the project config: BuildFlags: useccahe:<packagename> example: https://build.opensuse.org/projects/home:sjamgade:branches:science:machinel… Once enabled per package, it will be enabled for all architectures and repositories. https://openbuildservice.org/help/manuals/obs-user-guide/cha.obs.prjconfig.… (grep ccache) --- The ccache tar file is collected only on *successful builds with changed result*. It is extracted for every build at /.ccache/ if enabled. This build artifact is not versioned and only the latest tar is stored. It can be downloaded from the webui or osc. https://build.opensuse.org/package/binaries/home:sjamgade:branches:science:… osc getbinaries --ccache -M standard home:sjamgade:branches:science:machinelearning tensorflow openSUSE_Tumbleweed x86_64 _ccache.tar osc getbinaries --ccache $prj $pkg $repo $arch _ccache.tar This archive can be further used for local builds too. osc build --pkg-ccache /full/path/to/_ccache. (please use the latest osc) --- Ccache config file is stored in /.ccache/ccache.conf and is writable by the build user. So, it could also be disabled (or configured as per package requirements) echo "disable = true" >> /.ccache/ccache.conf For possible build time comparisons: https://build.opensuse.org/packages/tensorflow:standard/job_history/home:sj… https://w3.nue.suse.com/~sjamgade/ccachereport.html Thank you, Sumit Jamgade and OBS Team [1] - https://ccache.dev/ PS: Some packages (eg: tensorflow) need extra plumbing in spec file to enable access to /.ccache and use of ccache cmd: export CC_PREFIX=ccache; ln -s /.ccache/ ~/.ccache -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

6 14

[opensuse-buildservice] Short OBS downtime this Saturday
by Michael Schroeder 20 Apr '21

20 Apr '21

Hi OBS users, we need to do a little database maintenance on Saturday at 21:00 UTC. The buildservice will not be available for about 30 minutes. The build service will still schedule and finish builds in that time, but the API and the Web UI will not be available. Thanks for your understanding and have a nice weekend, Michael. -- Michael Schroeder SUSE Software Solutions Germany GmbH mls(a)suse.de GF: Felix Imendoerffer HRB 36809, AG Nuernberg main(_){while(_=~getchar())putchar(~_-1/(~(_|32)/13*2-11)*13);} -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

2 1

[opensuse-buildservice] handling one thousand source tarballs in one package
by Ludwig Nussel 22 Jan '21

22 Jan '21

Hi, I'm trying to build a package from source that uses npm modules. Doing so involves more than one thousand(!) upstream tarballs. In the hope to make that more manageable I wrote a PoC script¹ to produuce a file includable from the spec and to also download the tarballs. Uploading them to OBS as part of the source is rather annoying though as you can't see the forest for all the trees anymore then. So would be convenient if a service like download_files or download_url could do that on server side so the files would be hidden as _service:* AFAICS services do not have access to previously generated results² though so would have to download those files on every source change which seems rather wasteful and also takes time. OTOH there's a hack in OBS to have a cache directory for tar_scm³ only. So would it be possible to either let services access the previous results or have a cache dir for all? Any other ideas how to handle one thousand source tarballs? cu Ludwig [1] https://github.com/lnussel/nodejs-tarballs [2] https://github.com/openSUSE/osc/blob/7b5d10552352295ebdd21193b6dfbf830e7d23… [3] https://github.com/openSUSE/open-build-service/blob/master/src/backend/run-… -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.com/ SUSE Software Solutions Germany GmbH, GF: Felix Imendörffer HRB 36809 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

3 10

[opensuse-buildservice] Issue with RSA signing in openSUSE:Factory:RISCV
by Andreas Schwab 12 Oct '20

12 Oct '20

At least since 2020-08-09 RSA signing of kernel modules is broken in openSUSE:Factory:RISCV, producing bad signatures that cannot be verified against the included certificate: $ modsign-verify -v -v --cert-dir etc/uefi/certs sunrpc.ko Signature type: pkcs#7 Signed by: cn=openSUSE Secure Boot CA,serial=1 Hash algorithm: sha256 Trying etc/uefi/certs/188EA6FA.crt Found matching certificate etc/uefi/certs/188EA6FA.crt RSA operation error 140060768991040:error:0407008A:rsa routines:RSA_padding_check_PKCS1_type_1:invalid padding:crypto/rsa/rsa_pk1.c:67: 140060768991040:error:04067072:rsa routines:rsa_ossl_public_decrypt:padding check failed:crypto/rsa/rsa_ossl.c:648: sunrpc.ko: signature validation failed for etc/uefi/certs/188EA6FA.crt sunrpc.ko: bad signature IIUC the signature appears to be created with a private key that doesn't match the public key in etc/uefi/certs/188EA6FA.crt. Since the problem does not occur if the same kernel is built in a different project, there is no fundamental problem with signature creation or verification. The last working kernel was built on 2020-08-01 in o:F:RISCV (which verifies properly using the same certificate). I note that the certificate has a serial number of 1. Isn't that serial number supposed to be unique? Andreas. -- Andreas Schwab, SUSE Labs, schwab(a)suse.de GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE 1748 E4D4 88E3 0EEA B9D7 "And now for something completely different." -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

2 6

[opensuse-buildservice] CentOS 8 and CentOS 8 Stream unresolvable state with requiring centos-repos(8)
by Neal Gompa 02 Oct '20

02 Oct '20

Hey all, It looks like CentOS 8 builds are broken now with a "have choice" dependency error for providers of "centos-repos(8)". Please add the following to CentOS-8: Ignore: centos-release:centos-repos Ignore: centos-linux-release:centos-repos(8) For CentOS-8:Stream, add the following: Ignore: centos-release:centos-repos Ignore: centos-stream-release:centos-repos(8) Thanks in advance! -- 真実はいつも一つ！/ Always, there's only one truth! -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

2 7

[opensuse-buildservice] Something drags all OBS workers down ATM..
by Hans-Peter Jansen 24 Sep '20

24 Sep '20

Anybody an idea? Pete -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

2 1

[opensuse-buildservice] Re: Creating initrds with no good reason WAS: Questions about osc
by Hans-Peter Jansen 18 Sep '20

18 Sep '20

Am Freitag, 18. September 2020, 13:19:09 CEST schrieb Franck Bui: > On 9/18/20 12:48 PM, Hans-Peter Jansen wrote: > > -export DISABLE_RESTART_ON_UPDATE=yes > > -%service_del_postun vboxautostart.service > > -%service_del_postun vboxdrv.service > > +%service_del_postun_without_restart vboxautostart.service > > +%service_del_postun_without_restart vboxdrv.service > > > > Franck, while this is a pretty important fix, these macros aren't > > available on Leap. Would you add them for Leap builds, please? > > Yes it's underway now, see https://build.suse.de/request/show/226290. Not accessible from here. Does this fix permeated into openSUSE somewhere? > The request has been accepted so it shouldn't take long but if this can't > wait feel free to revert my changes, I'll resubmit them later. Hey, we are here at work and not on the run, aren't we? > Sorry for the inconvenience. To the contrary, thanks for the fix, Franck. Much appreciated. Have a nice weekend guys, Pete -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

2 1

Re: [opensuse-buildservice] Re: [opensuse-factory] Questions about osc
by Larry Finger 18 Sep '20

18 Sep '20

On 9/11/20 3:24 AM, Michal Kubecek wrote: >> That's part of the kmp packaging macro magic, not much the kmp packager >> can do about it. >> >> There is the possibility of doing crazy ugly hacks like >> >> %define regenerate_initrd_posttrans /bin/true\ >> %{nil} >> >> but a bug / feature request against kernel-macros package to give kmp >> packagers an easy and documented way to say "this module will not end up >> on initrd" would be better:-) > But can you ever be sure that it definitely cannot end up in initrd? > How do you e.g. prevent user from putting it into INITRD_MODULES > explicitly? I'm afraid the only safe way would be a dracut feature that > would let you check if it would put a module into initrd based on > current configuration and dependencies. In the VB case, the kmp install section had the following statements: export INITRD_IN_POSTTRANS=1 export KMP_NEEDS_MKINITRD=0 My tests show that inclusion in initrd stopped when these were removed. We will see what results Pete gets when the new version reaches TW. Larry -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

3 4

[opensuse-buildservice] Change realname
by Perry Naseck 18 Sep '20

18 Sep '20

Hello, I have attempted to change my realname with "osc meta user -e <username>" but the changes do not persist. I also cannot find a way to change it from the web interface. Is this functionality possible? Thanks, Perry -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner(a)opensuse.org

4 7