openSUSE Build Service January 2023

buildservice@lists.opensuse.org

17 participants
11 discussions

OBS source services
by Lynn Winebarger 31 Jan '23

31 Jan '23

Hi, I wrote some new source services so I could automate producing spec files for a multibuild of emacs 28+ using different compiler versions for the native-compilation feature, since only one version of libgccjit is allowed to be installed at a time. The source services are sed,pattern-service, and run-services. They are available on github under the MIT license: https://github.com/owinebar/obs-service-sed https://github.com/owinebar/obs-service-pattern-service https://github.com/owinebar/obs-service-run-services They each have the possibility of being used to consume unlimited resources, so I have included system options to restrict the resources consumed using ulimit and (for the latter two) restricting the services that may be generated/invoked and (for pattern-service) output files that may not be generated, e.g. _services, so that recursive invocation is prevented. There is a detailed example in obs-service-pattern-service showing how the 3 can be used together to produce the emacs multibuild specs and file. I wrote a sed script that takes a sed script augmented by the project conf keywords Substitute:, Substitute=: (equivalent to substitute with the name ending in =), and Ignore to transform spec files. I still need to write malicious test cases to verify the restrictions actually work, e.g. a sed script that accumulates an infinite string in the hold space or just loops forever. I'd like these installed on the build server so a webhook trigger can be used to generate the multibuild automatically. Obviously these could be done manually in a shell script, but trying to limit the malicious possibilities of running arbitrary shell scripts is not something I have time for. sed is an inherently restricted language (when run with --sandbox) which is much more amenable to being limited. Thanks, Lynn

2 2

Re: New Project with a RH replica
by Andreas Vögele 30 Jan '23

30 Jan '23

Günther J. Niederwimmer writes: > Am Montag, 30. Jänner 2023, 13:52:26 CET schrieb Andreas Vögele: >> Günther J. Niederwimmer writes: >>> I would like to test a project for a Rehat replica, version 9. I also find >>> entries about Alma-Linux 9, but apparently it is not activated yet or not >>> visible to me? [...] >> You can add AlmaLinux via "Repositories" > "Add from a Project". Search >> for the project AlmaLinux:9 and add the repository "standard" to your >> home project. RockyLinux:9 is also available. > Hi Andreas, > > Thank you for your quick reply and help, > > one more question, is it possible to include the EPEL repository for RH > replica? Because the file requires zb. hyperscan-devel etc. There's a Fedora:EPEL:9 project with a "standard" repository, but I haven't added that repository to my AlmaLinux repository. I use the repository "CentOS" from Fedora:EPEL:7 with CentOS 7, though. You can see the repository configurations at https://build.opensuse.org/projects/AlmaLinux:9/meta and https://build.opensuse.org/projects/Fedora:EPEL:9/meta. Ah, the AlmaLinux "update" repository is not included in "standard". You can add that repository to your existing AlmaLinux repository with the plus button in the web interface. Then move the "update" repository before "standard" with the up button.

1 0

Re: New Project with a RH replica
by Andreas Vögele 30 Jan '23

30 Jan '23

Günther J. Niederwimmer writes: > I would like to test a project for a Rehat replica, version 9. I also find > entries about Alma-Linux 9, but apparently it is not activated yet or not > visible to me? > > Could someone from the SUSE people "say" something about this? > Thanks for an answer, You can add AlmaLinux via "Repositories" > "Add from a Project". Search for the project AlmaLinux:9 and add the repository "standard" to your home project. RockyLinux:9 is also available.

2 1

New Project with a RH replica
by Günther J. Niederwimmer 30 Jan '23

30 Jan '23

hello list I would like to test a project for a Rehat replica, version 9. I also find entries about Alma-Linux 9, but apparently it is not activated yet or not visible to me? Could someone from the SUSE people "say" something about this? Thanks for an answer, -- mit freundlichen Grüßen / best Regards, Günther J. Niederwimmer

1 0

Open Build Service 2.10.20 released
by Lukas Krause 27 Jan '23

27 Jan '23

Hello People, We have just released Open Build Service 2.10.20 which fixes security vulnerabilities. You should update your installations as soon as possible. ## Fixed Issues Frontend: * Update globalid gem from 1.0.0 to 1.0.1 - Fixes CVE-2023-22799 ReDoS based DoS vulnerability in the GlobalID gem * Update rack gem from 2.2.4 to 2.2.6.2 - Fixes CVE-2022-44571 Denial of service vulnerability in the Content-Disposition parsing component of Rack. - Fixes CVE-2022-44572 Denial of service vulnerability in the multipart parsing component of Rack. - Fixes CVE-2022-44570 Possible denial of service vulnerability in the Range header parsing component of Rack. ## How to Update Package updates are available from the 2.10 repositories https://build.opensuse.org/project/show/OBS:Server:2.10 Fixed appliances can be downloaded from https://openbuildservice.org/download <http://openbuildservice.org/download> Kind regards, Lukas -- Lukas Krause, Build Solutions SUSE Software Solutions Germany GmbH Maxfeldstrasse 5 90409 Nürnberg (HRB 36809, AG Nürnberg) Geschäftsführer: Ivo Totev

1 0

New Blog Post! Request Page Redesign - Facilitating the Review Process
by Saray Cabrera Padron 25 Jan '23

25 Jan '23

Hello everyone, The Build Solutions team keeps working on the request page redesign. Our goal this time was to facilitate the review process when dealing with many actions and changes. Please read our latest blog post to learn more: https://openbuildservice.org/2023/01/25/request-workflow-redesign/ Kind regards, The Build Solutions Team -- Saray Cabrera Padrón scabrerapadron(a)suse.com | scabrerapadron(a)suse.de Build Solutions Team SUSE Software Solutions

1 0

Group e-mail address for project maintainers?
by Atri Bhattacharya 23 Jan '23

23 Jan '23

Hi, Is there a way to send an e-mail to all the maintainers of a project (say project FOO) on build.o.o, for instance to escalate a long-pending sr for a pkg whose pkg-maintainer may not be responding, etc.? I see that the web-ui provides a link to e-mail each of the maintainers individually, but no such help to send one to the whole group. Thanks in advance for any suggestions. -- Atri

4 7

Cannot get tag-release working properly with obs workflows
by Neal Gompa 11 Jan '23

11 Jan '23

Hey all, I was trying to get a tag-release workflow working with the new OBS workflows feature for one of my projects: obsctl[1], but the tag-push hook returns errors and GitLab winds up disabling the hook. When it *does* run, it branches the package and doesn't put anything in there, making it kind of useless. The workflow definition is here: https://gitlab.com/datto/engineering/DevOps/obsctl/-/blob/main/.obs/workflo… I don't understand what I'm doing wrong, and the documentation is no help. :( Can someone please help? [1]: https://gitlab.com/datto/engineering/DevOps/obsctl -- 真実はいつも一つ！/ Always, there's only one truth!

2 4

project stuck in release event
by Ludwig Nussel 10 Jan '23

10 Jan '23

Hi, My project devel:microos:systemd-boot is apparently stuck in a release event. I guess I used "osc release" the wrong way at some point. No package builds anymore. How can I unblock this? cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.com/ SUSE Software Solutions Germany GmbH, GF: Ivo Totev HRB 36809 (AG Nürnberg)

3 6

Oracle Instant Client
by David Nichols 09 Jan '23

09 Jan '23

Hi, I got notices for deletion requests against the oracle-instantclient packages in two OBS projects. This is a binary package from Oracle - there is no source, but it may be freely distributed: https://www.oracle.com/cz/database/technologies/faq-instant-client.html This package has been listed as blacklisted in OpenSUSE since 2010: https://en.opensuse.org/openSUSE:Build_Service_application_blacklist#Packag… However, in the meantime, Oracle changed their redistribution policy to allow free redistribution of this package in binary format. I was not involved in the discussions, but back in 2010 my colleague got the oracle-instantclient binary packages accepted into OBS; he told me at the time that an exception was made (IIRC - in any cases the packages have been there for a long time despite being on the blacklist). My question to anyone who can help - can this package get accepted into the NonFree project and removed from the blacklist? If not, I believe that forbidding the oracle-instantclient package from OBS and OpenSUSE will adversely impact professionals that work with Oracle DBs - particularly due to the domino effect on dependent packages. There is no legal reason for this restriction - just a philosophical one from my understanding. Example project (now with a deletion request): https://build.opensuse.org/package/show/home:davidnichols/oracle-instantcli… Thanks in advance for any feedback from anyone who has insight into this situation. thx David -- *David Nichols*Qore Technologies, s.r.o. Karolinská 654/2, 186 00 Prague - CZ mobile: +420 777 279 144, +1 858 306 1002 1312 17th Street Suite 776, Denver, CO 80202 - USA tel: +1 303 833-9201 book a meeting with me: https://info.qoretechnologies.com/meetings/david-nichols <https://qoretechnologies.com> https://qoretechnologies.com [image: Review Qorus on Capterra and earn a $10 gift card!] <https://review.capterra.com/Feedback-Qorus-Integration-Engine-182971-333718…>

5 12

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openSUSE Build Service January 2023