July 2022 - openSUSE Build Service - openSUSE Mailing Lists

[opensuse-buildservice] Add external source to a package?
by Carsten Ziepke 12 Sep '23

12 Sep '23

Hello, I want to update the package ja2-stracciatella in the games repository to version 0.17.0. https://build.opensuse.org/package/show/home:Kieltux:branches:games/ja2-str… The new version needs the library string_theory which is not available for openSUSE. The build process wants to download string_theory from github, because it is not found. [ 36s] Scanning dependencies of target string_theory [ 36s] [ 12%] Creating directories for 'string_theory' [ 37s] [ 25%] Performing download step (download, verify and extract) for 'string_theory' [ 37s] -- Downloading... [ 37s] dst='/home/abuild/rpmbuild/BUILD/ja2-stracciatella-0.17.0/build/dependencies/lib-string_theory/builder/string_theory-prefix/src/3.1.tar.gz' [ 37s] timeout='none' [ 37s] -- Using src='https://github.com/zrax/string_theory/archive/3.1.tar.gz' [ 37s] -- Retrying... Can I add string_theory (string_theory-3.1.tar.gz) manually to the package and patch the build process? Thank you, Carsten -- Well, since MS cant be sure of the username of someone downloading things, they are going to play it safe and have everything dowloaded and executed by Explorer as suid root. That way, it will run on ANY system anywhere. :) -- George Bonser <grep(a)cris.com>

3 4

Ubuntu 22.04 Build Failing
by Kyle Edwards 15 Sep '22

15 Sep '22

Hello, I'm currently attempting to build a package on Ubuntu 22.04, but am seeing the following error in the log: [ 1s] /srv/obs/worker/root_15/.init_b_cache/rpms/base-files.deb: control.tar is not second ar entry [ 1s] bad binary: base-files.deb Any idea what this is about? Kyle

4 7

Please add AlmaLinux9 to OBS
by Julio Gonzalez 19 Aug '22

19 Aug '22

Title says it all :-D I need it for my Hack Week project (if you can add openEuler as Raul requested, that would be great) The list of repositories is different from what AlmaLinux8 had. Feel free to use my PR for Uyuni as reference (ignore the uyuni client tools): https://github.com/uyuni-project/uyuni/pull/5609/files (see spacewalk-common-channels.ini) Thanks! -- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez(a)suse.com

4 8

Re: Please add AlmaLinux9 to OBS
by Adrian Schröter 19 Aug '22

19 Aug '22

On Mittwoch, 29. Juni 2022, 09:15:18 CEST Victor Zhestkov wrote: > Morning Adrian. > > Could you please also add the devel repos to AlmaLinux:9 ? done > Here is the root of devel repos: > https://repo.almalinux.org/almalinux/9/devel/ > It's not a repo itself, for x86_64 the repo is > https://repo.almalinux.org/almalinux/9/devel/x86_64/os/ > > There are no devel packages in the repos we have now in OBS and it's > not possible to build some of the packages we need. > > > Victor > > On Tue, 2022-06-28 at 14:52 +0200, Adrian Schröter wrote: > > On Dienstag, 28. Juni 2022, 12:56:14 CEST Julio Gonzalez wrote: > > > Title says it all :-D > > > > > > I need it for my Hack Week project (if you can add openEuler as > > > Raul > > > requested, that would be great) > > > > some setup is there, but not much tested. > > > > -- Adrian Schroeter <adrian(a)suse.de> Build Infrastructure Project Manager SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nürnberg, Germany (HRB 36809, AG Nürnberg) Geschäftsführer: Ivo Totev

2 2

user experiance report about openSUSE buildservice, when updating packages but sources are unchanged
by lehrig＠t-online.de 27 Jul '22

27 Jul '22

Hi, here is a status report about building our https://build.opensuse.org/project/show/home:pvbrowser:pvbrowser5 today (27 July 2022) Background: The last change was long ago and most of the development has been frozen by me, since i'm now a pensioneer. Now i ordered a refurbished Notebook with Windows 10 and installed openSUSE Leap 15.4. Everything went fine. I only added community repository packman and installed and ran opi for TV support. I tried to install our own project but could not find a package for openSUSE Leap 15.4. Thus i added the new Repositories withn OBS (openSUSE buildservice). Currently not everything is through, but i can observe the following issues: * Some repositories say "nothing provides qt5-default" For example this is told by the new Ubuntu repositories but not only Ubuntu. * Some repositories complain "libqt5-qtwebenginedevel" as not beeing possible to find. Comment: in principle i can set building with webkit or google blink by a parameter or make a fallback to the qt html widget. * Some repositories tell me that i have to decide which compiler to use (libclang 13 ...) In the old days i used g++ on Unix style computers and MinGW on Windows. A new Windows build using MSVCP complains about missing *140.dll from microsoft, where the MinGW version does not complain. (I made this test before overwriting the Windows 10 on my new refurbished notebook) After finishing this TXT the OBS is still not finisched with all work, but there are green lorrie icons on the left of all the repositories and some new repositories i added today say "success". Others are of state "finished 1". In principle everything looks good. Best regards: Rainer L. https://lug-sauerland.de/

1 0

OBS signd and GnuPG with Thales HSM
by George Kraft 26 Jul '22

26 Jul '22

I have GnuPG with Thales HSM installed on a system to be my dedicated signing server. I can "rpm -addsign PACKAGE.rpm" and it is signed as expected. I believe that I need to copy the OBS /usr/sbin/signd and /etc/systemd/system/multi-user.target.wants/obssignd.service to this system. I'm not sure how to configure obssignd.service or /etc/signd.conf to simply use my enhanced rpm without it trying to do its own private key management/configuration. Am I on the right track?

1 1

CentOS 8 Unresolvable today?
by Cory McIntire 25 Jul '22

25 Jul '22

We are seeing the following issues with our local OBS that pulls from openSUSE.org servers: nothing provides glibc(x86-64) = 2.28-189.1.el8 needed by glibc-gconv-extra, (got version 2.28-189.5.el8_6 provided by glibc), nothing provides glibc-common = 2.28-189.1.el8 needed by glibc-gconv-extra, (got version 2.28-189.5.el8_6) It appears the problem is that glibc now has el8_6 in the new updated RPM and that might be causing the issues? Is anyone else seeing this? Regards, Cory McIntire | Lead – cPanel Security Team | Release Manager – EasyApache M +1 281.777.2705 | cory.mcintire(a)webpros.com<mailto:cory.mcintire@webpros.com> | cPanel – a webpros company

8 11

Re: Rocky / Alma / CentOS 8 Stream builds unresolvable
by Will Furnell - STFC UKRI 25 Jul '22

25 Jul '22

Hi, I can confirm I am also seeing the same issues. I have tried to replicate this on my local OBS instance, and I'm getting an issue where the 8 repositories have the red triangles next to them - which is showing the following in the logs, which may help the developers debug this issue? Even on the public OBS instance only some of the repos are OK for Alma/Rocky - but not AppStream - and AppStream is where this package is located, so that may be why things are failing? AppStream itself is breaking on my instance for the following reason: 2022-07-25 10:52:35: [2331] looking at low prio RockyLinux:8/appstream (0/0/6/0/33) - RockyLinux:8/appstream scanning repo RockyLinux:8/appstream... unresolvable preinstalls: nothing provides rpm And then standard and a project which is a combination of all repos... 2022-07-25 10:52:35: [2331] looking at low prio RockyLinux:8/standard (0/0/2/0/33) - RockyLinux:8/standard scanning repo RockyLinux:8/standard... scanning repo RockyLinux:8/baseos... scanning repo RockyLinux:8/appstream... scanning repo RockyLinux:8/powertools... scanning repo RockyLinux:8/extras... unresolvable preinstalls: nothing provides perl(:MODULE_COMPAT_5.32.1) needed by perl-Digest-MD5 2022-07-25 10:52:35: [2331] looking at low prio monitoring/Rocky_8 (0/0/0/0/33) - monitoring/Rocky_8 scanning repo monitoring/Rocky_8... scanning repo RockyLinux:8/standard... scanning repo RockyLinux:8/baseos... scanning repo RockyLinux:8/appstream... scanning repo RockyLinux:8/powertools... scanning repo RockyLinux:8/extras... unresolvable preinstalls: nothing provides perl(:MODULE_COMPAT_5.32.1) needed by perl-Digest-MD5 Thanks, Will. This email and any attachments are intended solely for the use of the named recipients. If you are not the intended recipient you must not use, disclose, copy or distribute this email or any of its attachments and should notify the sender immediately and delete this email from your system. UK Research and Innovation (UKRI) has taken every reasonable precaution to minimise risk of this email or any attachments containing viruses or malware but the recipient should carry out its own virus and malware checks before opening the attachments. UKRI does not accept any liability for any losses or damages which the recipient may sustain due to presence of any viruses.

1 0

Open Build Service 2.10.17
by Lukas Krause 25 Jul '22

25 Jul '22

Hello People, We have just released Open Build Service 2.10.17 which fixes security vulnerabilities. You should update your installations as soon as possible. ## Fixed Issues Frontend: 1. Bug fix session leaking during BsRequest auto accept - See https://github.com/openSUSE/open-build-service/pull/12821 2. Update rails to 5.2.8.1 - CVE-2022-32224 Possible RCE escalation bug with Serialized Columns in Active Record 3. Update tzinfo from 1.2.9 to 1.2.10 - CVE-2022-31163 TZInfo relative path traversal vulnerability allows loading of arbitrary file ## How to Update Package updates are available from the 2.10 repositories https://build.opensuse.org/project/show/OBS:Server:2.10 Fixed appliances can be downloaded from http://openbuildservice.org/download Kind regards, Lukas -- Lukas Krause, Build Solutions SUSE Software Solutions Germany GmbH Maxfeldstrasse 5 90409 Nürnberg (HRB 36809, AG Nürnberg) Geschäftsführer: Ivo Totev

1 0

obssigner gpg key question
by Stefan Seyfried 25 Jul '22

25 Jul '22

Hi, I'm in the process of moving an existing installation to a new machine, with the possibility that the hostname will change. I also noted that my "master gpg key" of the buildservice is old and small (1024bit RSA), so I thought it would be a good idea to replace this with an new, larger one that's also issued to the proper address "obsrun(a)new.host.name". I tried this in a test instance and it has given me a profound amount of trouble (it only worked after creating the new key and then additionally importing the old privkey). Today I read https://openbuildservice.org/help/manuals/obs-admin-guide/obs.cha.security_… and this states that the gpg key is only used by signd to encrypt / decrypt the project keys and thus it should be of absolutely no concern (for my users) what email account etc. is used in that key. Am I correct with that assumption? In that case creating a new key would be indeed a useless endeavor from my side and I'd just skip that ;-) Thanks for any insight seife P.S.: the OBS admin documentation has greatly improved since I last looked (which was some time ago I have to admit) which is great and another Thank You! for that. -- Stefan Seyfried "For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." -- Richard Feynman

1 0