February 2022 - openSUSE Build Service

Open Build Service 2.10.12 released
by Eduardo Navarro 18 Feb '22

18 Feb '22

Hi, OBS 2.10.12 is released. This minor release fixes a security issue detected in Action Pack, a framework for handling and responding to web requests, part of the OBS frontend. Details from the Release Notes of 2.10.12: ========================================== * Frontend: - CVE-2022-23633: Possible exposure of information vulnerability in Action Pack - Allow kiwi versions not strictly x.y.z scheme Package updates are available from the OBS:Server:2.10 repository https://build.opensuse.org/project/show/OBS:Server:2.10 The appliance can be downloaded from http://openbuildservice.org/download Greetings, Eduardo J., from the OBS Team.

4 8

CentOS 8 EOL and OBS
by Oliver Smith 18 Feb '22

18 Feb '22

Hi, with CentOS 8 being EOL, and the binary repositories now gone: * will building packages for CentOS 8 keep working in the public OBS? * will building packages for CentOS 8 keep working in private instances for OBS? Right now, both are still working. I guess this is because of cached packages, that will expire at some point and then it starts failing? Or is the public OBS possibly building all of the CentOS packages and that gets used instead of the official repositories, and it will keep on working for some years? If that assumption is true, is that also where the private OBS instances download packages from? Thanks! Best, Oliver -- - Oliver Smith <osmith(a)sysmocom.de> https://www.sysmocom.de/ ======================================================================= * sysmocom - systems for mobile communications GmbH * Alt-Moabit 93 * 10559 Berlin, Germany * Sitz / Registered office: Berlin, HRB 134158 B * Geschaeftsfuehrer / Managing Director: Harald Welte

1 0

Open Build Service 2.10.12 released
by Eduardo Navarro 17 Feb '22

17 Feb '22

Hi, OBS 2.10.12 is released. This minor release fixes a security issue detected in Action Pack, a framework for handling and responding to web requests, part of the OBS frontend. Details from the Release Notes of 2.10.12: ========================================== * Frontend: - CVE-2022-23633: Possible exposure of information vulnerability in Action Pack - Allow kiwi versions not strictly x.y.z scheme Package updates are available from the OBS:Server:2.10 repository https://build.opensuse.org/project/show/OBS:Server:2.10 The appliance can be downloaded from http://openbuildservice.org/download Greetings, Eduardo J., from the OBS Team.

1 0

API endpoint for _service sources
by Marcus Schäfer 16 Feb '22

16 Feb '22

Hi, I'm using a source service in one of my projects. The following API request lists the sources: https://api.opensuse.org/source/Virtualization:Appliances:Images:Testing_x8… b'<directory name="test-image-luks" rev="12" vrev="12" srcmd5="ce38832ce2fae353397f3f0682704f64">\n <serviceinfo code="succeeded" xsrcmd5="d06180ee167908b06321b653fb2e8f3f"/>\n <entry name="_service" md5="dd99151953bf37f5d40e6ca0bb874293" size="805" mtime="1613060070"/>\n</directory>\n' On the backend the result files of the _service call are stored and on the web interface I can also see which files were stored there. My question is, is there an API endpoint I can use to actually list and download the files stored by the _service call ? Thanks Regards, Marcus -- Public Key available via: https://keybase.io/marcus_schaefer/key.asc keybase search marcus_schaefer ------------------------------------------------------- Marcus Schäfer Am Unterösch 9 Tel: +49 7562 905437 D-88316 Isny / Rohrdorf Germany -------------------------------------------------------

2 2

problem using _service in a local install OBS
by kcchen722＠gmail.com 15 Feb '22

15 Feb '22

Hello, I have a local install OBS running. Everything works accordingly thanks to the well written documentation. Recently, I have started testing _service. I have added the _service by using the command osc add https://github.com/FreeCAD/FreeCAD.git . When I have run the commit command: osc commit -m "test", I get the following output. Sending _service Transmitting file data Committed revision 20. Waiting for server side source service run ................................................ The waiting goes forever. From my understanding, I know source server (bs_srcserver) needs to connect to source service server (bs_service) in order to run _service. However, I do not see anything happening using strace on bs_service. Also, I have checked the logs in /srv/obs/log, /srv/www/obs/api/log and /srv/obs/service/log and they are no error messages. Also, I have tried to add token using the command osc token --create and triggering it using osc token --trigger <TOKEN> <PROJECT> <PACKAGE>, the result is still the same (Waiting for server side source service run). If anyone has any good suggestions, please let me know. Thanks!

3 2

Forcibly ignoring module dependencies in OBS?
by Neal Gompa 15 Feb '22

15 Feb '22

Hey all, Is there a way to forcibly ignore module dependencies like you can for package dependencies? Since OBS still doesn't support resolving unversioned module dependencies (e.g. php modules depend on "nginx" module, satisfied by any version of the nginx modules), is it possible to make it pretend that dependency doesn't exist so the content can still be accessed? Thanks in advance and best regards! -- 真実はいつも一つ！/ Always, there's only one truth!

1 0

Cannot build packages for Leap 15.3 on ARMv7
by Wojciech Kazubski 12 Feb '22

12 Feb '22

Recently I tried to configure OBS to build a binary package for Cubietruck SBC runing openSUSE Leap 15.3. By default, the 15.3 has configured the repository path containing openSUSE:Leap:15.3/standard. Since there is no arm7l architecture enabled for standard, the package status is unresolvable. If I add (or change to) the repository path openSUSE:Leap:15.3/ports, I get nothing more, the build is still in unresolvable state and a red triangle with white excamation mark show up in repository status. Is something misconfigured in OBS? Or am I doing something wrong?

2 2

Is there any release plan for 2.11?
by Lukáš Jirkovský 09 Feb '22

09 Feb '22

Hello, is there any plan to release 2.11? We have installed 2.10 as it's the latest version suggested for production environments. However, it turns out 2.10 has several bugs which are supposed to be fixed in 2.11 that make obs pretty much impossible to use after initial configuration. The most problematic bugs being: * open-build-service #8683 - archlinux repositories doesn't work * obs-sign #25 - SHA-1 signatures are no longer accepted by Debian and Ubuntu * Gitlab Tag Push Hooks doesn't work All of these have been fixed, with some of the fixes being done more than two years ago. Applying the fixes manually solves the problems, but any update on the server means the fixes need to be applied again. I think the fixes for bugs that make repositories unusable should be either backported to 2.10, or 2.11 should be released with these fixes. Is there any chance this will happen? Open Build Service is an amazing piece of software, but these bugs make it unnecessarily painful to use. Lukas Jirkovsky

1 0

OBS Active Directory Integration
by Fabiano Teixeira 08 Feb '22

08 Feb '22

Hello, I've just started using OBS and I'm having trouble integrating it with AD/LDAP. I've created a service account, OBS users and Admin Groups in Active directory then I've followed the example provided in the obs-admin-guide/User Guide to configure the "options.yml" configuration file. I keep receiving "Authentication Failed" messages when trying to login into OBS using an Active Directory user. I've tested my svc account/user and password (for the ldap bind) via ldapsearch and it works fine. Verified logs under /srv/www/obs/api/logs. production.log - only shows INFO. I can see the moment I try to login, but nothing else. Any tips or any other logs/tools I could check at this point? Sincerely, Fabiano T.

3 8

OBS went offline?
by Andreas Vetter 08 Feb '22

08 Feb '22

HI, I cant reach https://build.opensuse.org/ While I can reach the wiki https://en.opensuse.org -- Mit freundlichen Gruessen, Andreas Vetter

2 2