February 2021 - openSUSE Factory - openSUSE Mailing Lists

[factory] 15.3 reboot fails (target busy) immediately following dup including kernel 5.3.18-22 -> 5.3.18-45
by Felix Miata 04 Feb '21

04 Feb '21

This was originally an online upgrade, IIRC from 15.2, many weeks ago. Today was first attempt to dup since repos were refreshed. # systemctl reboot umount: /run/user/0: target is busy. umount: /: target is busy. umount: /sys/fs/cgroups/unified: target is busy. umount: /sys/fs/cgroup: target is busy. umount: /run: target is busy. umount: /dev: target is busy. Failed to open initctl fifo: No such device or address Failed to talk to init daemon. # Ctrl-Alt-Del watchdog: watchdog0: watchdog did not stop! systemd-shutdown[1]: Waiting for process: systemd After quite a wait, CAD had the desired effect. This has occurred on my first two 15.3 dup'd since the online repos started getting updated. Is everyone suffering this (aka known issue)? OT: on second instance, first boot to 5.3.18-45 vtty came in 1024x768 instead of display's native mode (new post coming). NIC came up, but as ewhatever instead of eth0. It turns out kernel-firmware-network wasn't installed. I installed it, then rebooted. Eth0 came back. -- Evolution as taught in public schools, like religion, is based on faith, not on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 04 Feb '21

04 Feb '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - dovecot23 Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

2 1

unsafe systemd services in openSUSE Tumbleweed
by Dirk Müller 03 Feb '21

03 Feb '21

Hi, today I stumbled over "systemd-analyze security" which gives an overview of installed systemd services and their configured sandboxing capabilities. It appears that from the ones that I have installed, most of them have no sandboxing features enabled at all, so pretty much everything is at score 9.5 and above (10 seems to be the absolutely worst). Would It be useful to take a pass at configuring this more sandboxy? in my opinion, security should be default. It appears this is a lot simpler to contain the services than with functionality like apparmor or selinux, although those of course provide further protection. Here's an example on smartd.service: # systemd-analyze security smartd.service NAME DESCRIPTION EXPOSURE ✗ PrivateNetwork= Service has access to the host's network 0.5 ✗ User=/DynamicUser= Service runs as root user 0.4 ✗ CapabilityBoundingSet=~CAP_SET(UID|GID|PCAP) Service may change UID/GID identities/capabilities 0.3 ✗ CapabilityBoundingSet=~CAP_SYS_ADMIN Service has administrator privileges 0.3 ✗ CapabilityBoundingSet=~CAP_SYS_PTRACE Service has ptrace() debugging abilities 0.3 ✗ RestrictAddressFamilies=~AF_(INET|INET6) Service may allocate Internet sockets 0.3 ✗ RestrictNamespaces=~CLONE_NEWUSER Service may create user namespaces 0.3 ✗ RestrictAddressFamilies=~… Service may allocate exotic sockets 0.3 ✗ CapabilityBoundingSet=~CAP_(CHOWN|FSETID|SETFCAP) Service may change file ownership/access mode/capabilities unrestricted 0.2 ✗ CapabilityBoundingSet=~CAP_(DAC_*|FOWNER|IPC_OWNER) Service may override UNIX file/IPC permission checks 0.2 ✗ CapabilityBoundingSet=~CAP_NET_ADMIN Service has network configuration privileges 0.2 ✗ CapabilityBoundingSet=~CAP_SYS_MODULE Service may load kernel modules 0.2 ✗ CapabilityBoundingSet=~CAP_SYS_RAWIO Service has raw I/O access 0.2 ✗ CapabilityBoundingSet=~CAP_SYS_TIME Service processes may change the system clock 0.2 ✗ DeviceAllow= Service has no device ACL 0.2 ✗ IPAddressDeny= Service does not define an IP address allow list 0.2 ✓ KeyringMode= Service doesn't share key material with other services ✗ NoNewPrivileges= Service processes may acquire new privileges 0.2 ✓ NotifyAccess= Service child processes cannot alter service state ✗ PrivateDevices= Service potentially has access to hardware devices 0.2 ✗ PrivateMounts= Service may install system mounts 0.2 ✗ PrivateTmp= Service has access to other software's temporary files 0.2 ✗ PrivateUsers= Service has access to other users 0.2 ✗ ProtectClock= Service may write to the hardware clock or system clock 0.2 ✗ ProtectControlGroups= Service may modify the control group file system 0.2 ✗ ProtectHome= Service has full access to home directories 0.2 ✗ ProtectKernelLogs= Service may read from or write to the kernel log ring buffer 0.2 ✗ ProtectKernelModules= Service may load or read kernel modules 0.2 ✗ ProtectKernelTunables= Service may alter kernel tunables 0.2 ✗ ProtectSystem= Service has full access to the OS file hierarchy 0.2 ✗ RestrictAddressFamilies=~AF_PACKET Service may allocate packet sockets 0.2 ✗ RestrictSUIDSGID= Service may create SUID/SGID files 0.2 ✗ SystemCallArchitectures= Service may execute system calls with all ABIs 0.2 ✗ SystemCallFilter=~@clock Service does not filter system calls 0.2 ✗ SystemCallFilter=~@debug Service does not filter system calls 0.2 ✗ SystemCallFilter=~@module Service does not filter system calls 0.2 ✗ SystemCallFilter=~@mount Service does not filter system calls 0.2 ✗ SystemCallFilter=~@raw-io Service does not filter system calls 0.2 ✗ SystemCallFilter=~@reboot Service does not filter system calls 0.2 ✗ SystemCallFilter=~@swap Service does not filter system calls 0.2 ✗ SystemCallFilter=~@privileged Service does not filter system calls 0.2 ✗ SystemCallFilter=~@resources Service does not filter system calls 0.2 ✓ AmbientCapabilities= Service process does not receive ambient capabilities ✗ CapabilityBoundingSet=~CAP_AUDIT_* Service has audit subsystem access 0.1 ✗ CapabilityBoundingSet=~CAP_KILL Service may send UNIX signals to arbitrary processes 0.1 ✗ CapabilityBoundingSet=~CAP_MKNOD Service may create device nodes 0.1 ✗ CapabilityBoundingSet=~CAP_NET_(BIND_SERVICE|BROADCAST|RAW) Service has elevated networking privileges 0.1 ✗ CapabilityBoundingSet=~CAP_SYSLOG Service has access to kernel logging 0.1 ✗ CapabilityBoundingSet=~CAP_SYS_(NICE|RESOURCE) Service has privileges to change resource use parameters 0.1 ✗ RestrictNamespaces=~CLONE_NEWCGROUP Service may create cgroup namespaces 0.1 ✗ RestrictNamespaces=~CLONE_NEWIPC Service may create IPC namespaces 0.1 ✗ RestrictNamespaces=~CLONE_NEWNET Service may create network namespaces 0.1 ✗ RestrictNamespaces=~CLONE_NEWNS Service may create file system namespaces 0.1 ✗ RestrictNamespaces=~CLONE_NEWPID Service may create process namespaces 0.1 ✗ RestrictRealtime= Service may acquire realtime scheduling 0.1 ✗ SystemCallFilter=~@cpu-emulation Service does not filter system calls 0.1 ✗ SystemCallFilter=~@obsolete Service does not filter system calls 0.1 ✗ RestrictAddressFamilies=~AF_NETLINK Service may allocate netlink sockets 0.1 ✗ RootDirectory=/RootImage= Service runs within the host's root directory 0.1 SupplementaryGroups= Service runs as root, option does not matter ✗ CapabilityBoundingSet=~CAP_MAC_* Service may adjust SMACK MAC 0.1 ✗ CapabilityBoundingSet=~CAP_SYS_BOOT Service may issue reboot() 0.1 ✓ Delegate= Service does not maintain its own delegated control group subtree ✗ LockPersonality= Service may change ABI personality 0.1 ✗ MemoryDenyWriteExecute= Service may create writable executable memory mappings 0.1 RemoveIPC= Service runs as root, option does not apply ✗ RestrictNamespaces=~CLONE_NEWUTS Service may create hostname namespaces 0.1 ✗ UMask= Files created by service are world-readable by default 0.1 ✗ CapabilityBoundingSet=~CAP_LINUX_IMMUTABLE Service may mark files immutable 0.1 ✗ CapabilityBoundingSet=~CAP_IPC_LOCK Service may lock memory into RAM 0.1 ✗ CapabilityBoundingSet=~CAP_SYS_CHROOT Service may issue chroot() 0.1 ✗ ProtectHostname= Service may change system host/domainname 0.1 ✗ CapabilityBoundingSet=~CAP_BLOCK_SUSPEND Service may establish wake locks 0.1 ✗ CapabilityBoundingSet=~CAP_LEASE Service may create file leases 0.1 ✗ CapabilityBoundingSet=~CAP_SYS_PACCT Service may use acct() 0.1 ✗ CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG Service may issue vhangup() 0.1 ✗ CapabilityBoundingSet=~CAP_WAKE_ALARM Service may program timers that wake up the system 0.1 ✗ RestrictAddressFamilies=~AF_UNIX Service may allocate local sockets 0.1 → Overall exposure level for smartd.service: 9.6 UNSAFE 

14 26

openSUSE Release Engineering Meeting 03.02.2021
by Lubos Kocman 03 Feb '21

03 Feb '21

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Participants guillaume_g, lkocman, DocB, dirk, sarah !!! Please be aware that this meeting is hosted on https://meet.opensuse.org/ReleaseEngineeringMeeting ## Leap I can't attend in person, (same for Dimstar) as my manager asked me to support Frederic on Engineering summit (10-11am CET), my talk is right after. Sorry for late notice I'm just sending an email. Internal Engineering Summit - We're having challenges with openSUSE Leap 15.3 caused by Closing the Leap Gap Input for slides from lkocman, Max, Wolfgang: https://etherpad.opensuse.org/p/challenges-leap-15.3 CtLG update: 12 features still in progress. Need to be finished until 15 SP3 Public Beta (out of 150 in total). Seamless migration currently two bugs open: https://bugzilla.suse.com/show_bug.cgi?id=1181711 - SCC I was not able to reproduce https://bugzilla.suse.com/show_bug.cgi?id=1180851 - So I take it as a test issue. YaST team TL thinks the same. Python stack still broken on Leap 15.3: https://bugzilla.opensuse.org/show_bug.cgi?id=1180701 lkocman: I've pinged Matej Cepl to confirm ownership of the issue. Ftp-tree out of sync issues which blocks net-install testing https://bugzilla.opensuse.org/show_bug.cgi?id=1180626. Should be fixed (issues with publishing script on pontifex) Telemetry: I've confirmed with Mili that there seems to be no more need for more telemetry data, after confirmation that metrics.opensuse.org contain information from mirrors. So survey.opensuse.org and metrics-o-o provide sufficient insight. Therefore closing Maint setup handed off to maintenance team followed by test updates request. We should be good there for now. ## openSUSE Tumbleweed Dimstar also need to be on Engineering Summit. * Mostly rolling without interruptions * Planned switch from LUA 5.3 to LUA 5.4 - one more blocker: haproxy (SR to devel prj pending) * GCC 11 introduction. As usual, 2 phases: 1) Switch libgcc libraries in use to gcc11 2) use gcc 11 as default compiler * glibc 2.33 - staging/testing in progress * Autoconf 2.70: some backwards incompatible changes, and implicitly starts gtkdocize in case configure.ac contains GTK_DOC_CHECK; Especially for ring0 packages, this is painful, as we cannot add gtk- doc dependenices there. Those packages need to GTKDOCIZE=true before running autoreconf (most don't need to run autoreconf, unless they patch configure - upstream your patches!) ## Richard (Kubic/TW MicroOS) Richard also needs to be on Engineering Summit. devel-project Housekeeping ongoing, significant pile of updates checked in MicroOS for Rock64 Image is now in testing Team is looking into adding NVIDIA Jetson Nano support, investigating purchase/sponsorship options SELinux-by-default tests reviewed, changes still required, WIP MicroOS talk recorded for FOSDEM and presented at SUSE Engineering Summit discussing the wide scope of the Project ## Max * Fails to verify signature of Backports RPM while installing, asked YaST team and zypp teamhttps://bugzilla.suse.com/show_bug.cgi?id=1181344 * My experiment for zypper dup kind of works https://openqa.opensuse.org/tests/1603691 , we needhttps://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/11696 for openQA, in reality we need to update opensuse-release package to add vendor conf change and release updated opensuse-release to supported Leap version * Have a look at migration problem reported by QA and asked Hernan give his thought about credential issue, bsc#1180851 Some maintenance updates were not picked up by Maintenance team because of missing maintainer. All packages blocking audacity update now have maintainers (lv2 lilv, serd - slees, python-Markup - mcepl) ## Guillaume - Arm Tumbleweed: * Once glibc 2.33 (staging B) will be in Factory, MTE - Memory Tagging Extension (Heap) will be supported in user-space, on MTE enabled hardware. (Other deps are already in). For in-kernel support we need to wait for kernel 5.11. More details on the wiki: https://en.opensuse.org/ARM_architecture_support#ARMv8.5_-_MTE_.28Memory_Ta… * MicroOS images for Rock64 are still failing because we need to build u-boot against arm-trusted-firmware package which requires to have arm-trusted-firmware and edk2 packages in Tumbleweed first, but they are blocked in legal queue (Staging:adi:75). Leap 15.3 ARM: * JeOS images for aarch64 added: https://build.opensuse.org/package/show/openSUSE:Leap:15.3:Images/JeOS * Armv7: openSUSE Step is being created - wip OBS projects setup. openQA: * Some random network issue in qemu: https://progress.opensuse.org/issues/88335 WSL: WIP to have WSL on aarch64 on https://build.opensuse.org/project/show/home:Guillaume_G:WSL The goal is to have WSL-DistroLauncher package built for aarch64. Help welcomed. ## Michel ppc64le not present, nothing special to report. ## Sarah - s390x * Sarah needed a new approval for openSUSE contributions after receiving a new Manager (received it after 2 hours). * Expanded tests for openSUSE Tumbleweed on s390x and has been fixing issues * DASD bug has been fixed and should be tested and verified (only in the SUSE openQA reproducable): bug 1151436 * packaging issues because of low memory: https://bugzilla.opensuse.org/show_bug.cgi?id=1181479 * kernel bug https://bugzilla.suse.com/show_bug.cgi?id=1180917 has got the result of thinking about how to receive more detailed information from OBS for IBM Developers ## Doug * EOY Results Meetups * Planned for Jan. 30. - http://bit.ly/2YiizUK * Editing video for youtube * List of items and improvements we identified - http://bit.ly/3olI8Pn * Quarterly sprints for improving websites (o.o. and get.o.o, plus more) lkocman: Is anybody aware of any reason why software-o-o couldn't be replaced by get-o-o Doug: Stasiek mentioned that this was discussed and there was a lot of ideas but the effort died based on available resources. * Looking at codes and wiki improvements * software.o.o explanation of images * may look at new survey for pain points to extract hardware info * GSOC 2021 application due by Feb. 19 * 101.o.o. updated * metrics.o.o is fixed (thx Witek) - Mili wants to see some more telemetry details, he's willing to dedicate two persons working on the telemetry solutions in installer or in general. Lubos will open a feature tracker. OPENSUSE-16 Richard: there is a whole page about it. metrics-o-o are displaying also data from mirrors. /var/lib/zypp/AnonymousUniqueID Richard - community might not like it Adrian: we could have an icon to click on to provide a feedback. Dirk: analyzing sentiment could be better. lkocman: I got recently reached out by somebody from SUSE Technical Alliance about CentOS, about the effort. Meeting will be possibly on Thursday. suseportal.cz / opensuse.cz - ongoing discussion https://etherpad.opensuse.org/p/suseportalcz_discussion Waiting for feedback from Martin Zikmund (should be this week). ## Dirk Looking at initial "Leap 15.3 for Ports" bootstrap together with Adrian. First step is to recreate the SLE packages from SLE source in OBS. Identified a > 150 packages blacklist that seems to cause fallout. Unclear how to lubos: https://en.opensuse.org/Portal:Leap:Jump/OBS/Blacklist defined/expected way less than 150 blacklisted packages. Many issues are around SLE updates causing a bootstrap to fail from source. Unclear how to resolve this. No further discussion with openSUSE Backports for ports, no conclusion so far * Various package updates and build fixes for openSUSE:Factory:ARM and in general Dirk: bootstrapping is in progress . Adrian helps with OBS implementation improvements Dirk: It doesn't make sense Leap 15.3 which only contains 1k packages. If we'd skip backports the whole project would not make any sense. Dirk: Backports people are concerned about enabling ARMv7 ## Gerald or any Board representative Not present ## Wolfgang (Package Hub) Still: Submit requests for package updates are still on hold since dependency updates on SLE side is waiting for package maintainers. Add fix for rpmlint-mini (character encoding bug) Thanks to Dirk Runtime dependency for KDE Plasma 5 (libpoppler-qt5) release thru supackages repo (Antonio is currently testing) Pattern kde was missing and couldn't build since patterns from SLE wheren't mirrored to from IBS to OBS. Mirroring patterns to OBS should be done now. lkocman: pattern* blacklist was removed yesterday by Rudi ## Adrian - CtLG Marco is still working on the submit request mirroring and transferring information. lkocman: Is there currently any todo list for the Maintenance setup? It would be great to have something testable by maintenance team after Beta. Max's pull request for osc-plugin-jump needs to be rebased, otherwise I do not have any issues with his githash. Max: rebased and merged. lkocman: how to currently handle transition of state change? We're currently having open requests after the change was accepted. And rejecting "accepted" change would not look good. Adrian: we will discuss this internally. lkocman: I'll keep internally accepted - SRs open for now Note by Adrian: SLE maintenance updates are merged to a single channel by a script by Adrian which is merging updates and keeps amount of repos/channels low. SLE Updates are published as soon as possible it's definitely within few hours, not days. Dimstar: we're enabling non-free repos for Ports. For s390x it is already enabled and published (to my surprise no changes were needed on the publisher side); question is basically if we can expect the publish to 'just happen' on ARM/PowerPC as well or if publisher adjustments would have to be expected TTM: does not have enabled pubshing since 1st of January. -- Lubos Kocman Release Manager openSUSE Leap SUSE LINUX, s.r.o. Krizikova 148/34 tel: +49 173 5876850 186 00 Praha 8 http://www.suse.com Czech Republic

1 0

apology: Dimstar and lkocman can't attend today's Release Engineering meeting
by Lubos Kocman 03 Feb '21

03 Feb '21

Hello team, my manager asked me to support Frederic on his talk during Engineering Summit (10-11am) and my talk starts right after (11-12 CET). I'd like to apology for not being able to attend today's releng meeting I did provide overall update on Leap 15.3 situation https://etherpad.opensuse.org/p/ReleasEngineering-20210203 I leave attendance on meet.opensuse.org tou you, but I'd like to ask you to provide some update, I'll send it to factory by end of the day. Axel I'm really sorry as I was expecting to talk to you about Beta update. If you want we can schedule a meeting on meet.opensuse.org in the late afternoon. Let me know if it works for oyu. -- Lubos Kocman Release Manager openSUSE Leap SUSE LINUX, s.r.o. Krizikova 148/34 tel: +49 173 5876850 186 00 Praha 8 http://www.suse.com Czech Republic

1 0

Big update: openSUSE Leap 15.3 testing images are finally available and detail about Leap 15.3 submissions
by Lubos Kocman 03 Feb '21

03 Feb '21

Ahoy openSUSE! I'd like to inform you that you can already find openSUSE Leap 15.3 testing images on https://software.opensuse.org/distributions/testing . We're really sorry for the delay that was caused mostly by waiting on SLE 15 SP3 Beta1 NDA liftoff and rebuild of openSUSE Backports. I've already requested process changes, so this does not happen next release. Just a reminder that openSUSE Leap 15.3 is based on the Jump concept that we've developed for the past several months. https://en.opensuse.org/Portal:Jump Any update request to existing packages should be simply submitted against openSUSE:Leap:15.3 and OBS will determine where to redirect the request either to SLE or openSUSE Backports. The top-level Leap project servers more like a wrapper for building images and to override SLE branding. On new package submissions: Please note that new packages need to be currently submitted against openSUSE:Backports:SLE-15-SP3.opensuse-factory@ We know it's inconvenient and we'll work with the Autobuild team to make it a default destination place for any new package submission for openSUSE Leap 15.3. Note: on SLE submissions: Yes you can finally do them. Please make sure that you reference JIRA (e.g. openSUSE partner id request) or bugzilla number while sending request against package comming from SUSE Linux Enterprise. The feature requests will not be approved by suse-sle- review team https://en.opensuse.org/openSUSE:Suse_sle_review_team More about open SLE/Leap Features and their progress can be found here https://etherpad.opensuse.org/p/FeatureReview-meeting We're already looking forward to your Leap 15.3 submissions. **Just a reminder that our checking deadline for Leap 15.3 Beta is scheduled for the 12th of February.** Note about software.opensuse.org: You may notice that Installation images for all arches can be now found in the Installation tabs, and the tab Ports no longer exist. This new structure corresponds with the way how we build images in 15.3. We will have to decide where to track ARMv7 once we have images, either the same tab or "Additional architectures". Happy Hacking! -- Lubos Kocman, Release Manager openSUSE Leap SUSE Software Solutions Germany GmbH Maxfeldstr. 5, 90409 Nürnberg - Germany (HRB 36809, AG Nürnberg) Geschäftsführer: Felix Imendörffer

10 15

openSUSE Release Engineering Meeting 27.01.2021
by Lubos Kocman 01 Feb '21

01 Feb '21

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Participants dleuenberger,guillaumeg, adrians, lkocman, rbrown, ddemaio, bigironman, maxlin, dirk !!! Please be aware that this meeting is hosted on https://meet.opensuse.org/ReleaseEngineeringMeeting ## Leap Open Source @ SUSE Internal and External marketing. We've received an bit undefined task to increase adoption and visibility of openSUSE. Mili would like. Still need to look into missing maintainers on SUSE side situation. Still some ongoing discussion about migration testing, we need to have migrations passing by Leap 15.3 Beta / 15 SP3 Public Beta (End of February). * Discussion with new packaging team lead about future python refreshes (previously done by Tomas Ch.) Dominique: ftp-tree of Leap 15.3 is not up2date. This blocks beta testing Lubos will check with Adrian. ## openSUSE Tumbleweed * Bash 5.1 available in Tumbleweed since 0120 * Few snapshots in the last week: 0122 blocked due to sysuser-tools switch to systemd-sysuser, but boo#1181328 (reverted) 0123 was 'too slow in openQA' - 0125 was ready with build way too fast, replaced snapshot 0125 was blocked due to postfix boo#1180473 (postfix reverted) 0126 en route to QA * Did some cleanup of obsolete Prefer: in openSUSE:Factory prjconf * Planned switch from LUA 5.3 to LUA 5.4 * Autoconf 2.70: some backwards incompatible changes, and implicitly starts gtkdocize in case configure.ac contains GTK_DOC_CHECK; Especially for ring0 packages, this is painful, as we cannot add gtk- doc dependenices there. Those packages need to GTKDOCIZE=true before running autoreconf (most don't need to run autoreconf, unless they patch configure - upstream your patches!) lkocman: gstreamer-plugins-bad some functionality might be dropped as part of CtLG (SLE-13843) ## Richard (Kubic/TW MicroOS) devel-project Housekeeping ongoing, significant pile of updates checked in Kubernetes 1.20.2 and 1.19.7 released (Thanks Dirk!) MicroOS for Rock64 Image is now in testing Team is looking into adding NVIDIA Jetson Nano support, investigating purchase/sponsorship options SELinux-by-default tests reviewed, changes required, WIP MicroOS talk discussing the wide scope of the Project will be at FOSDEM (Distro DevRoom) and SUSE Engineering Summit Investigating possibility of adapting/creating a new variant of Kubic focused on being a base OS for Rancher k8s AdrianS: I'll be happy to help there if needed. ## Max * Fails to verify signature of Backports RPM while installing, asked YaST team and zypp team https://bugzilla.suse.com/show_bug.cgi?id=1181344 * My experiment for zypper dup kind of works https://openqa.opensuse.org/tests/1603691 , we need https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/11696 for openQA, in reality we need to update opensuse-release package to add vendor conf change and release updated opensuse-release to supported Leap version * Have a look at migration problem reported by QA and asked Hernan give his thought about credential issue, bsc#1180851 Some maintenance updates were not picked up by Maintenance team because of missing maintainer. All packages blocking audacity update now have maintainers (lv2 lilv, serd - slees, python-Markup - mcepl) ## Guillaume - Arm Tumbleweed: * MicroOS images for Rock64 are still failing because we need to build u-boot against arm-trusted-firmware package which requires to have arm-trusted-firmware and edk2 packages in Tumbleweed first, but is blocked in legal queue (Staging:adi:75). Leap 15.3 ARM: * WIP: add JeOS package to build images for non-UEFI Arm systems. * Armv7: Project setup: See Dirk's section below. openQA: * M6g worker is currently down. Working to get it back asap. WSL: WIP to have WSL on aarch64 on https://build.opensuse.org/project/show/home:Guillaume_G:WSL The goal is to haveWSL-DistroLauncher package built for aarch64. Help welcomed. lkocman: Apple M1 chips are now "fully" supporting Linux. ## Michel ppc64le not present, nothing special to report. ## Sarah - s390x Did not attend, apologized in advance. ## Doug * EOY Results Meetups * Planned for Jan. 30. - http://bit.ly/2YiizUK * Editing video for youtube * List of items and improvements we identified - http://bit.ly/3olI8Pn * Quarterly sprints for improving websites (o.o. and get.o.o, plus more) lkocman: Is anybody aware of any reason why software-o-o couldn't be replaced by get-o-o Doug: Stasiek mentioned that this was discussed and there was a lot of ideas but the effort died based on available resources. * Looking at codes and wiki improvements * software.o.o explanation of images * may look at new survey for pain points to extract hardware info * GSOC 2021 application due by Feb. 19 * 101.o.o. updated * metrics.o.o is fixed (thx Witek) - Mili wants to see some more telemetry details, he's willing to dedicate two persons working on the telemetry solutions in installer or in general. Lubos will open a feature tracker. OPENSUSE-16 Richard: there is a whole page about it. metrics-o-o are displaying also data from mirrors. /var/lib/zypp/AnonymousUniqueID Richard - community might not like it Adrian: we could have an icon to click on to provide a feedback. Dirk: analyzing sentiment could be better. lkocman: I got recently reached out by somebody from SUSE Technical Alliance about CentOS, about the effort. Meeting will be possibly on Thursday. suseportal.cz / opensuse.cz - ongoing discussion https://etherpad.opensuse.org/p/suseportalcz_discussion Waiting for feedback from Martin Zikmund (should be this week). ## Dirk Looking at initial "Leap 15.3 for Ports" bootstrap together with Adrian. First step is to recreate the SLE packages from SLE source in OBS. Identified a > 150 packages blacklist that seems to cause fallout. Unclear how to lubos: https://en.opensuse.org/Portal:Leap:Jump/OBS/Blacklist defined/expected way less than 150 blacklisted packages. Still waiting for builds being scheduled, progress is very slow. Only managed to reach Adrian this week. No further discussion with openSUSE Backports for ports, no conclusion so far * Various package updates and build fixes for openSUSE:Factory:ARM and in general Dirk: bootstrapping is currently stalled as he approach Adrian only recently. Dirk: It doesn't make sense Leap 15.3 which only contains 1k packages. If we'd skip backports the whole project would not make any sense. Dirk: Backports people are concerned about enabling ARMv7 ## Gerald or any Board representative Not present ## Wolfgang (Package Hub) Still: Submit requests for package updates are still on hold since dependency updates on SLE side is waiting for package maintainers. Add fix for rpmlint-mini (character encoding bug) Thanks to Dirk Runtime dependency for KDE Plasma 5 (libpoppler-qt5) release thru supackages repo (Antonio is currently testing) Pattern kde was missing and couldn't build since patterns from SLE wheren't mirrored to from IBS to OBS. Mirroring patterns to OBS should be done now. lkocman: pattern* blacklist was removed yesterday by Rudi ## Adrian - CtLG Marco is still working on the submit request mirroring and transferring information. lkocman: Is there currently any todo list for the Maintenance setup? It would be great to have something testable by maintenance team after Beta. Max's pull request for osc-plugin-jump needs to be rebased, otherwise I do not have any issues with his githash. Max: rebased and merged. lkocman: how to currently handle transition of state change? We're currently having open requests after the change was accepted. And rejecting "accepted" change would not look good. Adrian: we will discuss this internally. lkocman: I'll keep internally accepted - SRs open for now Note by Adrian: SLE maintenance updates are merged to a single channel by a script by Adrian which is merging updates and keeps amount of repos/channels low. SLE Updates are published as soon as possible it's definitely within few hours, not days. Dimstar: we're enabling non-free repos for Ports. For s390x it is already enabled and published (to my surprise no changes were needed on the publisher side); question is basically if we can expect the publish to 'just happen' on ARM/PowerPC as well or if publisher adjustments would have to be expected TTM: does not have enabled pubshing since 1st of January. ## Marcus - Maintenance Adrian: patchinfo is still TBD. Dependecies should be resolvable. The setup from Jump 15.2.1 has been implemented to Leap:15.3:Updates Adrian: 15.3 SLE and 15.3 OSS is there, and I have to hardlink openSUSE:Backports:15-SP3:Update Lubos to update Maintenance team by end of the day.

3 5

FireFox bug
by Winfried Bartnick 01 Feb '21

01 Feb '21

Hi! FireFox bug under rare circumstances: * Look a TV Channel with FF * Dont switch the channel for 70..80 minutes. After 70..80 minutes the broadcast beginns to stutter and sometimes looses the connection. The CPU percentage is on heavy load the little applet in the taskbar shows. And the rest of the desktop works like molasses . This is the very high time to close FF. The FF process needs 10..15 seconds to leave the RAM. If you dont stop FF at this point you first will recognize that the mouse stops to work. If you are lucky you can switch with Alt-CtrlF1..F6 to a konsole and kill (-9) FF. Otherwise there is no reaction anymore from the whole machine and you have to do a hardware reset. This is reproduceble and I had this situation for 4 times until I recognized to restart FF every hour. My Hardware: AMD Ryzen 5 2400 G, 4/8 cores, 16 GB RAM, Suse Tumbleweed. Winni

2 1

New Tumbleweed snapshot 20210131 released!
by Dominique Leuenberger 01 Feb '21

01 Feb '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: z3 (4.8.9 -> 4.8.10) === Details === ==== z3 ==== Version update (4.8.9 -> 4.8.10) - update to 4.8.10: - rewritten arithmetic solver replacing legacy arithmetic solver and on by default

1 0