December 2022 - openSUSE Build Service

How to change my e-mail address for build.o.o
by Martin Winter 08 Apr '24

08 Apr '24

There are several threads asking this very same question. The latest I found was this one: https://lists.opensuse.org/archives/list/buildservice@lists.opensuse.org/th…. However I still do not find an answer to that question. What I tried: - Going to my profile on build.o.o and edit my profile: The e-mail address is not editable. - Change the user meta via `osc meta user -e letsfindaway`: Does not change anything. - Login to Micro Focus and try to edit my profile there: The e-mail address is not editable. So what is the way to change the e-mail address listed on my profile in build.o.o and used to send e-mail notifications? Thanks for any insights and pointers! Martin

8 15

[opensuse-buildservice] Add external source to a package?
by Carsten Ziepke 12 Sep '23

12 Sep '23

Hello, I want to update the package ja2-stracciatella in the games repository to version 0.17.0. https://build.opensuse.org/package/show/home:Kieltux:branches:games/ja2-str… The new version needs the library string_theory which is not available for openSUSE. The build process wants to download string_theory from github, because it is not found. [ 36s] Scanning dependencies of target string_theory [ 36s] [ 12%] Creating directories for 'string_theory' [ 37s] [ 25%] Performing download step (download, verify and extract) for 'string_theory' [ 37s] -- Downloading... [ 37s] dst='/home/abuild/rpmbuild/BUILD/ja2-stracciatella-0.17.0/build/dependencies/lib-string_theory/builder/string_theory-prefix/src/3.1.tar.gz' [ 37s] timeout='none' [ 37s] -- Using src='https://github.com/zrax/string_theory/archive/3.1.tar.gz' [ 37s] -- Retrying... Can I add string_theory (string_theory-3.1.tar.gz) manually to the package and patch the build process? Thank you, Carsten -- Well, since MS cant be sure of the username of someone downloading things, they are going to play it safe and have everything dowloaded and executed by Explorer as suid root. That way, it will run on ANY system anywhere. :) -- George Bonser <grep(a)cris.com>

3 4

Oracle Instant Client
by David Nichols 10 Aug '23

10 Aug '23

Hi, I got notices for deletion requests against the oracle-instantclient packages in two OBS projects. This is a binary package from Oracle - there is no source, but it may be freely distributed: https://www.oracle.com/cz/database/technologies/faq-instant-client.html This package has been listed as blacklisted in OpenSUSE since 2010: https://en.opensuse.org/openSUSE:Build_Service_application_blacklist#Packag… However, in the meantime, Oracle changed their redistribution policy to allow free redistribution of this package in binary format. I was not involved in the discussions, but back in 2010 my colleague got the oracle-instantclient binary packages accepted into OBS; he told me at the time that an exception was made (IIRC - in any cases the packages have been there for a long time despite being on the blacklist). My question to anyone who can help - can this package get accepted into the NonFree project and removed from the blacklist? If not, I believe that forbidding the oracle-instantclient package from OBS and OpenSUSE will adversely impact professionals that work with Oracle DBs - particularly due to the domino effect on dependent packages. There is no legal reason for this restriction - just a philosophical one from my understanding. Example project (now with a deletion request): https://build.opensuse.org/package/show/home:davidnichols/oracle-instantcli… Thanks in advance for any feedback from anyone who has insight into this situation. thx David -- *David Nichols*Qore Technologies, s.r.o. Karolinská 654/2, 186 00 Prague - CZ mobile: +420 777 279 144, +1 858 306 1002 1312 17th Street Suite 776, Denver, CO 80202 - USA tel: +1 303 833-9201 book a meeting with me: https://info.qoretechnologies.com/meetings/david-nichols <https://qoretechnologies.com> https://qoretechnologies.com [image: Review Qorus on Capterra and earn a $10 gift card!] <https://review.capterra.com/Feedback-Qorus-Integration-Engine-182971-333718…>

5 13

Cannot get tag-release working properly with obs workflows
by Neal Gompa 11 Jan '23

11 Jan '23

Hey all, I was trying to get a tag-release workflow working with the new OBS workflows feature for one of my projects: obsctl[1], but the tag-push hook returns errors and GitLab winds up disabling the hook. When it *does* run, it branches the package and doesn't put anything in there, making it kind of useless. The workflow definition is here: https://gitlab.com/datto/engineering/DevOps/obsctl/-/blob/main/.obs/workflo… I don't understand what I'm doing wrong, and the documentation is no help. :( Can someone please help? [1]: https://gitlab.com/datto/engineering/DevOps/obsctl -- 真実はいつも一つ！/ Always, there's only one truth!

2 4

project stuck in release event
by Ludwig Nussel 10 Jan '23

10 Jan '23

Hi, My project devel:microos:systemd-boot is apparently stuck in a release event. I guess I used "osc release" the wrong way at some point. No package builds anymore. How can I unblock this? cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.com/ SUSE Software Solutions Germany GmbH, GF: Ivo Totev HRB 36809 (AG Nürnberg)

3 6

How to enable a non-admin user to create a project outside home:?
by Carsten Höger 30 Dec '22

30 Dec '22

Hi, since I did a new deployment of obs (2.10.19), only users flagged with admin rights seem to be able to create projects outside home: Is there a way to let them create projects outside home: without assigning them admin rights? -- kind regards, Carsten Hoeger Engineering Services Phone: +49 2761 75252 00 Fax: +49 2761 75252 30 Email: carsten.hoeger(a)open-xchange.com ------------------------------------------------------------------------------------- Open-Xchange AG, Hohenzollernring 72, 50672 Cologne, District Court Cologne HRB 95366 Managing Board: Andreas Gauger, Dirk Valbert, Frank Hoberg, Stephan Martin Chairman of the Board: Richard Seibt European Office: Open-Xchange GmbH, Olper Huette 5f, D-57462 Olpe, Germany, District Court Siegen, HRB 8718 Managing Director: Manuel Engel US Office: Open-Xchange. Inc., 530 Lytton Avenue, Palo Alto, CA 94301, USA -------------------------------------------------------------------------------------

2 3

Cannot find obs-service-set_version on CentOS_7 even though it's installed
by Edward Baudrez 23 Dec '22

23 Dec '22

I'm trying to build a package on a private OBS server for CentOS_7. (I've built it successfully for openSUSE 42.2-15.4.) This package build has a _service file that contains <service name="set_version" mode="buildtime"/> I have linked obs-service-set_version into my project, and enabled it for CentOS_7. The build seems to succeed. In fact, when I inspect the build log for my package, I'm seeing: [ 13s] processing recipe /.build-srcdir/_service:tar_scm:rslib.spec ... [ 13s] init_buildsystem --configdir /.build/configs --cachedir /var/cache/build /.build-srcdir/_service:tar_scm:rslib.spec build ... [ 13s] initializing rpm db... [ 13s] querying package ids... [ 14s] [1/362] installing adobe-mappings-cmap-20171205-3.el7 (other intervening packages...) [ 16s] [10/362] installing obs-service-set_version-0.5.14-1.1 But then, at the end, I'm seeing [ 81s] Running build time source services... [ 81s] Can't exec "/usr/lib/obs/service/set_version": No such file or directory at /.build/runservices line 87. [ 81s] /usr/lib/obs/service/set_version: No such file or directory [ 81s] service run failed for service 'set_version' The build stops after that. I've checked the RPM created for obs-service-set_version (obs-service-set_version-0.5.14-1.1.noarch.rpm) and it does contain "/usr/lib/obs/service/set_version", so I'm a bit puzzled now. Could anybody give me a hint?

2 3

Cannot perform local builds for CentOS_7
by Edward Baudrez 21 Dec '22

21 Dec '22

Hello list, I'm trying to perform a local build of a package for CentOS_7. I can successfully execute "osc build openSUSE_Leap_15.3" for the package. It runs inside a qemu-kvm virtual machine and works as expected. However, I cannot run "osc build CentOS_7" for the same package. This is what I'm observing: The beginning of the log looks normal: Building nccmp.spec for CentOS_7/x86_64 Getting buildconfig from server and store to /home/***/nccmp/.osc/_buildconfig-CentOS_7-x86_64 Getting buildinfo from server and store to /home/***/nccmp/.osc/_buildinfo-CentOS_7-x86_64.xml Updating cache of required packages 0.0% cache miss. 253/253 dependencies cached. Skipping verification of package signatures due to secure VM build Writing build configuration Running build VM_ROOT: /var/tmp/build-root/CentOS_7-x86_64/img, VM_SWAP: /var/tmp/build-root/CentOS_7-x86_64/swap 0+0 records in 0+0 records out 0 bytes copied, 1.5748e-05 s, 0.0 kB/s logging output to /var/tmp/build-root/CentOS_7-x86_64/.build.log... [ 0s] Using BUILD_ROOT=/var/tmp/build-root/CentOS_7-x86_64/.mount [ 0s] Using BUILD_ARCH=x86_64:i686:i586:i486:i386 [ 0s] Doing kvm build in /var/tmp/build-root/CentOS_7-x86_64/img [ 0s] [ 0s] [ 0s] rain started "build nccmp.spec" at Fri Sep 30 07:44:19 UTC 2022. [ 0s] [ 0s] [ 0s] processing recipe /home/***/nccmp/nccmp.spec ... [ 0s] running changelog2spec --target rpm --file /home/***/nccmp/nccmp.spec [ 0s] init_buildsystem --configdir /usr/lib/build/configs --cachedir /var/cache/build --prepare --rpmlist /tmp/rpmlist.y2fk5wwg /home/***/nccmp/nccmp.spec ... [ 1s] copying packages... [ 1s] reordering...cycle: glibc -> basesystem -> setup -> filesystem -> bash [ 1s] breaking dependency glibc -> basesystem ... and then there are plenty of cycle resolutions. After that, the log has: [ 1s] done [ 1s] objdump: /boot/vmlinuz: warning: ignoring section flag IMAGE_SCN_MEM_NOT_PAGED in section .bss [ 1s] booting kvm... [ 1s] /usr/bin/qemu-kvm -nodefaults -no-reboot -nographic -vga none -cpu host -object rng-random,filename=/dev/random,id=rng0 -device virtio-rng-pci,rng=rng0 -runas qemu -net none -kernel /boot/vmlinuz -initrd /boot/initrd -append root=/dev/sda rootfstype=ext3 rootflags=data=writeback,nobarrier,commit=150,noatime ext4.allow_unsupported=1 kpti=off pti=off spectre_v2=off panic=1 quiet no-kvmclock elevator=noop nmi_watchdog=0 rw rd.driver.pre=binfmt_misc console=ttyS0 init=/.build/build -m 512 -drive file=/var/tmp/build-root/CentOS_7-x86_64/img,format=raw,if=none,id=disk,cache=unsafe -device ide-hd,drive=disk,serial=0 -drive file=/var/tmp/build-root/CentOS_7-x86_64/swap,format=raw,if=none,id=swap,cache=unsafe -device ide-hd,drive=swap,serial=1 -serial stdio -chardev socket,id=monitor,server,nowait,path=/var/tmp/build-root/CentOS_7-x86_64/img.qemu/monitor -mon chardev=monitor,mode=readline -smp 12 [ 2s] SeaBIOS (version rel-1.12.0-0-ga698c89-rebuilt.opensuse.org) [ 5s] Booting from ROM..[ OK ] Started Show Plymouth Boot Screen. [ 5s] [ OK ] Started Forward Password Requests to Plymouth Directory Watch. [ 5s] [ OK ] Reached target Paths. [ 5s] [ OK ] Found device QEMU_HARDDISK. [ 5s] [ OK ] Reached target Initrd Root Device. [ 139s] [ 136.097593] dracut-initqueue[354]: Warning: dracut-initqueue timeout - starting timeout scripts and many repetitions of the last line until the boot finally gives up and drops to emergency mode: [ 204s] [ 201.761983] dracut-initqueue[354]: Warning: Could not boot. [ 204s] Starting Setup Virtual Console... [ 204s] [ OK ] Started Setup Virtual Console. [ 204s] Starting Dracut Emergency Shell... [ 204s] Warning: /dev/disk/by-uuid/EC2D-A5DA does not exist [ 204s] [ 204s] [ 204s] Generating "/run/initramfs/rdsosreport.txt" [ 204s] [ 204s] [ 204s] Entering emergency mode. Exit the shell to continue. [ 204s] Type "journalctl" to view system logs. [ 204s] You might want to save "/run/initramfs/rdsosreport.txt" to a USB stick or /boot [ 204s] Give root password for maintenance I aborted at that point. It seems the root file system is missing. Could anyone give me a hint as to what components are missing, and how I could install them? Many thanks, Edward

1 1

More Flexibility for Workflows in the OBS and SCM Integration
by Dany Marcoux 20 Dec '22

20 Dec '22

Hey everyone, Right in time for the holiday season, we have prepared you a gift for the continuous integration between OBS and SCMs. We are introducing placeholder variables and for your workflows configuration files, a customizable location. Learn how this works in our latest blog post: https://openbuildservice.org/2022/12/20/scm-integration-workflows-file/ The OBS Team -- Dany Marcoux Full Stack Web Developer - Open Build Service SUSE Software Solutions Germany GmbH dmarcoux(a)suse.com Frankenstraße 146 90461 Nürnberg Germany Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman (HRB 36809, AG Nürnberg) www.suse.com

1 0

Open Build Service 2.10.19
by Daniel Donisa ＠ SusE 16 Dec '22

16 Dec '22

Good afternoon, another small bugfix release for 2.10, just in time for Christmas! # Fixed Issues: Frontend: - CVE-2022-32209: Rails::Html::Sanitizer vulnerable to Cross-site Scripting - Fix support for qemu system emulated builds via bs_worker # How to Update Package updates are available from the OBS:Server:2.10 repository https://build.opensuse.org/project/show/OBS:Server:2.10 The appliance can be downloaded from http://openbuildservice.org/download Happy building, Dani, -- Daniel Donisa daniel.donisa(a)suse.com Build Solutions Team SUSE Software Solutions Germany GmbH

1 0

Need Help with Architecture Diagram
by Ayo Ogunfeitimi 15 Dec '22

15 Dec '22

Good morning, Please do you happen to have any architectural diagram to depict how OBS could be hosted on EC2(with all my questions pictured in the diagram) >1st question: Does OBS have an authentication mechanism? yes >2nd question: Does OBS use TLS/SSL encryption? yes >3rd Question: Can we run OBS behind CloudFront or AWS ALB? OBS does not know or care (like any sufficiently good system should) >4th Question: Does OBS support ssl directly? see #2 Looking forward to your prompt reply. Thank you Ayo

1 0

Notifications in OBS - Build Failure Notifications for the Web
by Lukas Krause 07 Dec '22

07 Dec '22

Hey there, Some news regarding notifications in OBS. We now support to receive notifications about Build Failures through the webui. On top of that we stopped to notify you about user and group role changes triggered by yourself. Checkout the new blog post for more: https://openbuildservice.org/2022/12/07/build-failures-for-web-notification… Regards, Your Build Solutions Team -- Lukas Krause, Build Solutions SUSE Software Solutions Germany GmbH Maxfeldstrasse 5 90409 Nürnberg (HRB 36809, AG Nürnberg) Geschäftsführer: Ivo Totev

1 0

nothing provides cmake-filesystem(x86-64) = 3.20.2-4.el8 needed by cmake when trying to compile for CentOS Stream 8
by Luciano Santos 05 Dec '22

05 Dec '22

It took a bit of a discussion in #opensuse-buildservice and some digging up. So let's see what's going on. In security:zeek project we can see this message for CentOS 8 Stream repository: > unresolvable: nothing provides glibc(x86-64) = 2.28-203.el8 needed by glibc-gconv-extra, (got version 2.28-214.el8 provided by glibc), nothing provides glibc-common = 2.28-203.el8 needed by glibc-gconv-extra, (got version 2.28-214.el8) Please remember that our CentOS 8 Stream repository uses http://mirror.centos.org/centos/8-stream/ for package download, and that the AppStream repo takes precedence over BaseOS. First, let's check the version 2.28-203 for glibc, because that's the latest release that AppStream got: > $ curl -sLI http://mirror.centos.org/centos/8-stream/AppStream/x86_64/os/Packages/glibc… | head -1 > HTTP/1.1 404 Not Found > curl -sLI http://mirror.centos.org/centos/8-stream/AppStream/x86_64/os/Packages/glibc… | head -1 > HTTP/1.1 200 OK > > $ curl -sLI http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/glibc-2.… | head -1 > HTTP/1.1 200 OK > $ curl -sLI http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/glibc-gc… | head -1 > HTTP/1.1 404 Not Found Here we can see that glibc-gconv-extra, a sub-package ofglibc, found in BaseOS, got split and is found in Appstream instead. OBS/openSUSE/many-other-RPM-based-distros(I believe) doesn't support a Package A being required by its Sub-Package B when A comes from Vendor/repo X and B, from Vendor/repo Y. DNF doesn't seem to share such restrictions, though, as seen here [1] in this bug report. And those missing glib (and possibly others) RPMs from mirror.centos.org are a result of an official decision to move certain packages from one repository to another (as stated in that bug report), but it seems that the move wasn't completed/successful, at least from my perspective of having Package A living in repo X being required by its Sub-Package B living in repo Y. Now, if the BaseOS repo takes precedence over AppStream we can find both 2.28-214 glibc and glibc-gconv-extra packages there: > $ fc > curl -sLI http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/glibc-2.… | head -1 > curl -sLI http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/glibc-gc… | head -1 > HTTP/1.1 200 OK > HTTP/1.1 200 OK Nonetheless, with BaseOS being above AppStream we get the unresolvable reported in this thread: > unresolvable: nothing provides cmake-filesystem(x86-64) = 3.20.2-4.el8 needed by cmake, (got version 3.20.2-1.el8 provided by cmake-filesystem) That's because in BaseOS we can find another Package/Sub-Package missing: > $ curl -sLI http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/cmake-3.… | head -1 > HTTP/1.1 404 Not Found > curl -sLI http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/cmake-fi… | head -1 > HTTP/1.1 200 OK A cmake-filesystem-3.20.2-1 that wants a not found cmake-3.20.2-1. And in AppStream: > $ curl -sLI http://mirror.centos.org/centos/8-stream/AppStream/x86_64/os/Packages/cmake… | head -1 > HTTP/1.1 200 OK > $ curl -sLI http://mirror.centos.org/centos/8-stream/AppStream/x86_64/os/Packages/cmake… | head -1 > HTTP/1.1 200 OK Both packages are there, but since we're prioritizing BaseOS and one of them was already found, we end up with an unresolvable. In BaseOS we don't have a 3.20.2-4 CMake release (which would take precedence over 3.20.2-1), only in Appstream: > $ curl -sLI http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/cmake-3.… | head -1 > HTTP/1.1 404 Not Found > $ curl -sLI http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/cmake-fi… | head -1 > HTTP/1.1 404 Not Found > > $ curl -sLI http://mirror.centos.org/centos/8-stream/AppStream/x86_64/os/Packages/cmake… | head -1 > HTTP/1.1 200 OK > $ curl -sLI http://mirror.centos.org/centos/8-stream/AppStream/x86_64/os/Packages/cmake… | head -1 > HTTP/1.1 200 OK But, again, since we're prioritizing BaseOS and one of them was already found, we end up with an unresolvable. The right way forward, I'd say, is to file bugs for those missing packages and/or add comments to existing bugs, like the one for glibc. Cheers, Luciano [1] https://bugzilla.redhat.com/show_bug.cgi?id=2102548

3 4

Regression: OBS does not install gzip when building Arch Linux packages, which breaks builds
by - - 02 Dec '22

02 Dec '22

Please refer to https://github.com/openSUSE/open-build-service/issues/13403 for details. The maintainer of Arch:Core has been pinged on GitHub, but there is no response from him. Hopefully OBS admins / mods can look into this issue and introduce a fix.

1 0

EL9 debuginfo generation broken on build.opensuse.org
by Jan Engelhardt 01 Dec '22

01 Dec '22

In build.opensuse.org / home:jengelh:EL / nginx-module-brotli-EL, the EL9.x86_64 (AlmaLinux9) build produces an error because rpm apparently can't figure out its own debuginfo mess. [ 111s] error: File not found: /home/abuild/rpmbuild/BUILDROOT/nginx-module-brotli-1.0.0rc+g1-1.1.x86_64/usr/src/debug/nginx-module-brotli-1.0.0rc+g1-1.1.x86_64 [ 111s] [ 111s] [ 111s] RPM build errors: [ 111s] File not found: /home/abuild/rpmbuild/BUILDROOT/nginx-module-brotli-1.0.0rc+g1-1.1.x8 6_64/usr/src/debug/nginx-module-brotli-1.0.0rc+g1-1.1.x86_64 What exists: /home/abuild/rpmbuild/BUILDROOT/nginx-module-brotli-1.0.0rc+g1-1.1.x8 6_64/usr/src/debug/.dwz/nginx-module-brotli-1.0.0rc+g1-1.1.x86_64 What can we do?

1 0

What is the mean of <param name="submodules">master</param>
by liuxueping.snow＠bytedance.com 01 Dec '22

01 Dec '22

here is a <param name="submodules">master</param> configuration in tar_scm.service, but I don't know what the specific meaning of this parameter is.And i kown the difference is git submodule update --init --recursive and git submodule update --init --recursive --remote in TarSCM/scm/git.py. But I don't know why this distinction is made.

3 4