September 2023 - openSUSE Factory - openSUSE Mailing Lists

slowroll renaming.
by Larry Len Rainey 21 Sep '23

21 Sep '23

2 1

slowroll will not install correctly from either network iso or DVD image
by Larry Len Rainey 20 Sep '23

20 Sep '23

6 20

openSUSE Release Engineering meeting 20.09.2023
by Lubos Kocman 20 Sep '23

20 Sep '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees anag, Sarah, DimStar, Richard, lkocman,GuillaumeG, wengel, bmwiedemann,maxlin, Marcus ## Leap legaldb queue for Leap 15.6 is finally clean. I did many license corrections but at some point I started to simply fastrack requests, unless legaldb threw a warning. libwebkit2gtk issue still visible in latest published Alpha, we should release new snapshot with the fix asap. Improvements on Leap Micro 5.5 openqa runs, unfortunatelly post- failures in transactional-update make it mostly red. Feature evaluation https://code.opensuse.org/leap/features/issues - resynced jiras after duplicates https://code.opensuse.org/leap/features/issue/136 - discussion with gcc maintainer about /usr/bin/gcc99 and similar (Fedora/Slackware does it) Discussion with Yi Fan regarding Audacity 3.X enablement https://code.opensuse.org/leap/features/issue/135 (further dependencies added) Simon received maintainer permissions for openSUSE:Leap:16.0 NVIDIA repo availability for 15.6 this week. ## openSUSE Tumbleweed (anag) openSUSE:Factory build fail stats: 76 failed 1 unresolvable (last week: 77 failed, 5 unresolvable) https://tinyurl.com/ysy4nnnz Shanav Tovah! The new year in the Hebrew calendar broke a test in icu related to the new year being a leap year. This blocked the chekin since Monday. A checkin is planned today early with : * gnome 45 * postgresql 16 (new default version) * pipewire 0.3.80 * chromium (both regular ungoogled one) 117 with a bunch of security updates Updates waiting in staging: * boost 1.83.0 (waiting for fixes in libzyp) * fmt 10 advancing, now we have fmt-9 package separately, waiting update mariadb boo#1213219, ceph boo#1213217 (fixed). * aeon branding, installer, patterns, etc ;) ## Richard (Aeon) Presented Aeon at All Systems Go last week - talk went very well, recordings have more views than the keynotes Lots of inspiration for using systemd-boot, systemd-repart, systemd-cryptenroll and producing trusted-boot compatible images out of the box Still an open question as to whether we'll work on systemd-homed or else bail out and declare Aeon a single user OS Lots of stuff stuck in Staging J, currently waiting on the new rpmlint that allows Aeon's new sudo/polkit approach devel:microos:aeon:images experiments with systemd-boot ## Bernhard (Slowroll) Bernhard continued scripting https://en.opensuse.org/openSUSE:Slowroll Dominique: use branch instead of copypac then you'll not have issues with release counters TODO list: openQA, frozen project link, etc Slowly moving forward Voting for the new name, so far we have a lot of proposals. Starting with one flavor, more to come. ## Max Leap 15.6 * More build fixes and package updates has been merged * A bit struggling with the updated protobuf-c in SLE, bsc#1214006, perhaps we should set Substitutes: protobuf-c libprotobuf-c-devel on SLE15-SP2-Update project, or we adjust all affecting packages * Patched skelcd-openSUSE and skelcd-control-openSUSE for adopt the package to 15.6 ## Guillaume - Arm Tumbleweed: * Snapshots still blocked due to multiple bugs * WIP to get Tumbleweed to run on Lenovo X13s: random issues with USB and kernel 6.5.3 * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). Stalled - https://bugzilla.suse.com/show_bug.cgi?id=1211297 Leap: * 15.5: port for armv7: containers are currently not building/created. Dirk mentioned that driver in 15.4 was the k3s team. ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is now possible (WSL1 and WSL2) thanks to Fabian https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server lkocman: I will inform WSL team ## Sarah - s390x Tumbleweed * Releases are running again -> data center move required together with old mainframe. Data center move has been executed, but there are issues Sarah's question: Is that the reason for disabling Backports for s390x? Max: the reason is we're lack of s390x build power at this moment On top of this topic with low build power: IBM is doing marketing for our OBS for zSystems (for all Linux distributions) for s390x via the Open Mainframe Project: https://openmainframeproject.org/news/developer-resources-for-linux-on-s390… -> Requesting additional mainframes? Leap: * sshfs is failing because no package availabe (s390x disabled for building for Leap/Backports) Package news: * cmsfs was failing because of old kernel support -> updated statement by the Upstream Maintainer: History: back in the Linux 2.2 days, the CMSFS package included a filesystem driver. The details varied depending on what release of the kernel you were building against. But the FS driver fell out because the author could not keep up with changes to kernel VFS. Eventually IBM wrote a CMS filesystem driver, so the driver function in this package became less needed and all of that logic fell into disrepair. Forwarded to Linux Distributions Working Group -> Feedback by Fedora: the cmsfs-fuse tool/driver provided by s390-tools project is replacing the functionality provided by the cmsfs project's tools Feedback by Ihno: cmsfs should not be replaced directly, because introduced by Mark Post News after IBM TechXChange: VP Ecosystems of IBM had a small feedback discussion with myself (together with Mike (SUSE) and Elizabeth (Head of Open Source Program Office for zSystems) -> Nobody has known, that no developer resources for Power exist for Open Source Developers (equal to the LinuxONE OSS Community Cloud) and it is more difficult to receive fixes for Power. The VP wants to improve and introduce the same there. lkocman: our project suffers from lack of human-resources focusing on ppc64le too (so far only Dominique from rel-eng perspective). Am I correct DimStar? It might happen that we won't have ppc64le for Leap 15 replacement etc. dimstar: currently the biggest issue for ppc64le is no working openQA setup - stuck on dtc migration afaiu Hint for Douglas because of the Geeko Foundation activity: Reach out to Peter Czanik. He is an IBM Power Champion with IBM connections. ## Doug * Workshop done in Algeria - https://cutt.us/Q6ycc * Moderation training updated - https://en.opensuse.org/Moderation * Use cases survey lkocman: relation to end of the year survey? Doug: It's bit different. * openSUSE.Asia Summit * funds arrived * Registrations 32, Submissions 31 * Processing more TSP requests * Storage decision made, just need a vacancy * GSoC * Two extentions due next week (Due By -Oct. 2 by 18:00 UTC) * Will send mentees an item if I get their address * FOSDEM (Feb. 3 & 4) * Stand submissions open * Had to file a bug since it's saying we already submitted a proposal. * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) Static * AI topics (static) * Nothing new FOSDEM: stand submissions are open, we did submit ours. But seems like there is a bug in the system. lkocman: Devconf mini 2023 (fall) is not happening. ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling no news ## Maintenance team (Marcus or Maurizio (m4u)) Leap 15.4 / 15.5 users and openqa massively hit by libwebkit2gtk issue (visible e.g. in evolution) recent libwebkit2gtk update did not fix all of the issues. We wait for QA currently. https://bugzilla.suse.com/show_bug.cgi?id=1213858 Security issue in libwebp package, this library is included in Chrome and Firefox. Was shipped everywhere, still finding embedded copies of libwebp in various other software like rust crates. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well blocked on Leap Micro 5.5 channel setup (SLEM channels need to be created first) Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. ## Adrian - OBS "Virtual" server room migration to PRG seemed to work well. Only some minor issues remains. Slowroll having issue with binary packages that were not published for Factory. Could we perhaps handle them through a separate product? Dimstar: maybe there is no longer reason to skip them from publishing. ## Open Floor

1 0

Re: slowroll will not install correctly from either network iso or DVD image
by Eric Schwarzenbach 19 Sep '23

19 Sep '23

On 9/19/23 15:17, Joe Salmeri wrote: > That does not explain why you are having the problem, but it seems very odd to me that Experimental:/ is NOT showing on the cd.opensuse.org site > under ALP:/ but that you can go to it directly. I don't know what technologies the site is set up with but I've seen that sort of things due to file permissions. Like x without r maybe.

1 0

Slowroll still cannot do zypper dup when installed with no network connection.
by Larry Len Rainey 19 Sep '23

19 Sep '23

1 0

New Tumbleweed snapshot 20230917 released!
by Dominique Leuenberger 19 Sep '23

19 Sep '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: groff (1.22.4 -> 1.23.0) groff-full (1.22.4 -> 1.23.0) health-checker (1.9 -> 1.10) libev liburing libwebp (1.3.1 -> 1.3.2) openssl-1_1 (1.1.1v -> 1.1.1w) qemu snapper (0.10.5 -> 0.10.6) tiff (4.5.1 -> 4.6.0) === Details === ==== groff ==== Version update (1.22.4 -> 1.23.0) - Refresh bash-scripts.patch - Add nroff-map-CW-to-R.patch * Fixes man-db build errors - Update to 1.23.0: * Too many changes, see NEWS file for details. - Refreshed patches: * 0002-documentation-for-the-locale-keyword.patch * 0004-don-t-use-usr-bin-env-in-shebang.patch * groff-1.20.1-deunicode.patch * groff-1.20.1-nroff-empty-LANGUAGE.patch * groff-1.21-CVE-2009-5081.patch * groff-force-locale-usage.patch - Drop sort-perl-hash-keys.patch (upstreamed) - Drop doc-volume-operating-system and doc-default-operating-system changes (doesn't default to BSD anymore) - Configure flag --with-appresdir has been renamed to --with-appdefdir - Update file list with files that were removed from the package ==== groff-full ==== Version update (1.22.4 -> 1.23.0) Subpackages: gxditview - Refresh bash-scripts.patch - Add nroff-map-CW-to-R.patch * Fixes man-db build errors - Update to 1.23.0: * Too many changes, see NEWS file for details. - Refreshed patches: * 0002-documentation-for-the-locale-keyword.patch * 0004-don-t-use-usr-bin-env-in-shebang.patch * groff-1.20.1-deunicode.patch * groff-1.20.1-nroff-empty-LANGUAGE.patch * groff-1.21-CVE-2009-5081.patch * groff-force-locale-usage.patch - Drop sort-perl-hash-keys.patch (upstreamed) - Drop doc-volume-operating-system and doc-default-operating-system changes (doesn't default to BSD anymore) - Configure flag --with-appresdir has been renamed to --with-appdefdir - Update file list with files that were removed from the package ==== health-checker ==== Version update (1.9 -> 1.10) Subpackages: health-checker-plugins-MicroOS - Update to version 1.10 * Fix Btrfs subvolume check if subvol starts with '-' [boo#1215368]. ==== libev ==== - %bcond for signify ==== liburing ==== - tests-don-t-expect-multishot-recv-overflow-backloggi.patch (bsc#1215332) - build tests in parallel (using %{?_smp_mflags}) ==== libwebp ==== Version update (1.3.1 -> 1.3.2) Subpackages: libsharpyuv0 libwebp7 libwebpdecoder3 libwebpdemux2 libwebpmux3 - update to 1.3.2: * security fix for lossless decoder (boo#1215231 CVE-2023-4863) - Drop 0001-Fix-OOB-write-in-BuildHuffmanTable.patch, 0001-Fix-invalid-incremental-decoding-check.patch - Add 0001-Fix-invalid-incremental-decoding-check.patch: [boo#1215231] [CVE-2023-4863] ==== openssl-1_1 ==== Version update (1.1.1v -> 1.1.1w) Subpackages: libopenssl1_1 - Update to 1.1.1w: * Fix POLY1305 MAC implementation corrupting XMM registers on Windows. The POLY1305 MAC (message authentication code) implementation in OpenSSL does not save the contents of non-volatile XMM registers on Windows 64 platform when calculating the MAC of data larger than 64 bytes. Before returning to the caller all the XMM registers are set to zero rather than restoring their previous content. The vulnerable code is used only on newer x86_64 processors supporting the AVX512-IFMA instructions. The consequences of this kind of internal application state corruption can be various - from no consequences, if the calling application does not depend on the contents of non-volatile XMM registers at all, to the worst consequences, where the attacker could get complete control of the application process. However given the contents of the registers are just zeroized so the attacker cannot put arbitrary values inside, the most likely consequence, if any, would be an incorrect result of some application dependent calculations or a crash leading to a denial of service. (CVE-2023-4807) - Add missing FIPS patches from SLE: * Add patches: - bsc1185319-FIPS-KAT-for-ECDSA.patch - bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch - openssl-1.1.1-fips-fix-memory-leaks.patch - openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch - openssl-1_1-FIPS_drbg-rewire.patch - openssl-1_1-Zeroization.patch - openssl-1_1-fips-drbg-selftest.patch - openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch - openssl-1_1-jitterentropy-3.4.0.patch - openssl-1_1-ossl-sli-000-fix-build-error.patch - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch - openssl-1_1-ossl-sli-002-ran-make-update.patch - openssl-1_1-ossl-sli-003-add-sli.patch - openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch - openssl-1_1-ossl-sli-005-EC_group_order_bits.patch - openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch - openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch - openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch - openssl-1_1-serialize-jitterentropy-calls.patch - openssl-1_1-shortcut-test_afalg_aes_cbc.patch - openssl-DH.patch - openssl-FIPS-KAT-before-integrity-tests.patch - openssl-fips-DH_selftest_shared_secret_KAT.patch - openssl-fips-kdf-hkdf-selftest.patch - openssl-kdf-selftest.patch - openssl-kdf-ssh-selftest.patch - openssl-kdf-tls-selftest.patch - openssl-no-date.patch - openssl-s_client-check-ocsp-status.patch * Modify patches: - openssl-1.1.1-fips.patch - openssl-1_1-FIPS-fix-error-reason-codes.patch * Remove patches: - openssl-add_rfc3526_rfc7919.patch - openssl-fips-dont_run_FIPS_module_installed.patch - openssl-fips_fix_selftests_return_value.patch * Add build and runtime dependency on jitterentropy - Pass over with spec-cleaner ==== qemu ==== Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Fix the build for SLE/Leap: * [openSUSE][RPM] Make the package buildable on SLE/Leap 15.x ==== snapper ==== Version update (0.10.5 -> 0.10.6) Subpackages: libsnapper7 snapper-zypp-plugin - fixed creating files in root dir (gh#openSUSE/snapper#168) - version 0.10.6 - relax access to info.xml files (gh#openSUSE/snapper#279) - enable snapper-timeline.timer when adjusting config using snapper (gh#openSUSE/snapper#788) ==== tiff ==== Version update (4.5.1 -> 4.6.0) - Update to version 4.6.0: * API/ABI breaks: none * WebP decoder: validate WebP blob width, height, band count against TIFF parameters to avoid use of uninitialized variable, or decoding corrupted content without explicit error (fixes issue #581, issue #582). * WebP codec: turn exact mode when creating lossless files to avoid altering R,G,B values in areas where alpha=0 * Fix TransferFunction writing of only two transfer functions. * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs, it should be harmless in practice though * tiffcp: remove -i option (ignore errors) * This version removes a big number of utilities that have suffered from lack of maintenance over the years and were the source of various reported security issues: + fax2ps + fax2tiff + pal2rgb + ppm2tiff + raw2tiff + rgb2ycbcr + thumbnail + tiff2bw + tiff2rgba + tiffcmp + tiffcrop + tiffdither + tiffgt + tiffmedian + tiff2ps + tiff2pdf - Remove no longer needed tiff-4.0.3-compress-warning.patch.

1 0

GNOME 45 update will break all extensions
by Martin Wilck 19 Sep '23

19 Sep '23

There's an open OBS request to update GNOME shell to 45.rc [1]. This update will break every existing GNOME extension [2,3]. As one of the pitiable individuals who have volunteered to co-maintain a few GNOME extensions in the past, I'd like to suggest that this update be postponed at least a few weeks. (No, not every extension maintainer follows GNOME beta releases). I'm particularly surprised that this updated is pushed to Factory while this is still in RC stage upstream. Is it really necessary to rush this breaking change in this way? Martin [1] https://build.opensuse.org/request/show/1110494 [2] https://gjs.guide/extensions/upgrading/gnome-shell-45.html#esm [3] https://news.itsfoss.com/gnome-45-extensions/

5 9

Suggestions for Enhancing the UI/UX Designs of openSUSE Websites
by Ayhem Kahri 18 Sep '23

18 Sep '23

Dear openSUSE Team and Fellow Users, I wanted to take a moment to express my deep appreciation for the incredible work you have been doing with the openSUSE Project. As an avid supporter and user, I have witnessed firsthand how openSUSE has become a shining beacon in the open source world, offering a robust and user-friendly Linux distribution along with a range of invaluable tools like YaST, Open Build Service, openQA, Snapper, and many others. I must also commend you on the exceptional feature of the status website, which provides real-time updates on the state of openSUSE infrastructure. This level of transparency and dedication to user support is truly remarkable. However, as someone who is deeply invested in the openSUSE community, I believe there are areas where we can further improve, specifically in the UI/UX design of our forum and main websites. I strongly believe that revamping the user experience by giving the entire openSUSE interface a modern and refreshing overhaul could open up exciting new possibilities. It would breathe new life into the distribution, giving it a contemporary look and feel that resonates with users. In this regard, I would like to suggest exploring the idea of migrating the project to GitLab for managing the UI/UX aspects. This would ensure continuous updates, maintenance, and a perpetually fresh and modern appearance. Furthermore, it would provide a fantastic opportunity for contributors to actively participate in shaping the new vibe of openSUSE. To that end, I would like to offer a few specific suggestions: 1. **Implement a modern and intuitive design**: The future of UX design lies in motion design and gestural interfaces. By incorporating visually appealing elements, intuitive gestures, and smooth animations, we can create a more engaging and user-friendly experience, particularly on mobile devices. 2. **Consider the use of VR and animated logos**: As digital services continue to evolve, there is a growing trend towards using Virtual Reality (VR) to deliver immersive experiences. Additionally, introducing motion designs, such as animated logos, can make a lasting impression and enhance brand awareness. 3. **Experiment with unorthodox designs**: By breaking away from conventional design grids and exploring unique layouts, we can make our websites truly stand out. Let's dare to be different by experimenting with various scrolling techniques and interactive elements that provide visitors with a distinctive and memorable user experience. 4. **Improve usability**: I noticed that some of our websites face usability challenges, while others remain static. It would greatly benefit the openSUSE community if we focus on enhancing the usability of all our websites, ensuring a consistent and user-friendly experience across the board. I want to express my utmost gratitude for your unwavering commitment to enhancing people's experience with open source software. Your tireless efforts are invaluable to the entire openSUSE community. I genuinely hope that these suggestions serve as valuable insights for future updates to our websites, and I eagerly look forward to witnessing the positive impact they will have. Thank you for your time and consideration. Warm regards, Ayhem

7 7

[opensuse-factory] Slowroll progress report
by Bernhard M. Wiedemann 18 Sep '23

18 Sep '23

Hi fellow Geekos, in recent days I have made some nice progress on scripting [1] for our slowed-down version of Tumbleweed. The repo setup evolved a bit, so that https://build.opensuse.org/project/show/openSUSE:ALP:Experimental:Slowroll has builds disabled now and actual packages are built in https://build.opensuse.org/project/show/openSUSE:ALP:Experimental:Slowroll:… instead. Once packages are built there, they can be tested. Then build-compare is used to detect if we got the same binaries as Tumbleweed and in that case, `osc release` is used to copy the Tumbleweed version over to Slowroll. This helps to reduce unnecessary re-installs when we re-sync all of Tumbleweed later. In case we differ from TW, the Slowroll:Staging variant is released. In the 26 days since the base TW snapshot 20230822, there were 783 packages released to Slowroll and another 131 are waiting in the :Staging area. At the same time, 982 updates are deferred for later. The exact ratios and delays can still be fine-tuned later. ToDo: openQA: https://progress.opensuse.org/issues/135731 It cannot do i586 builds atm, so we lack the -32bit library variants there. We still inherit Tumbleweed's, so it is not too bad. Some -bootstrap packages are not released in Tumbleweed but are required for building, . Images (DVD iso) do not build, yet. Some changelog-only updates in TW should be skipped, but since we don't have sources with the download-on-demand method, this is hard to implement. We might want to decide on a different name - the etherpad [2] has a dozen of proposals. We should get a proper openSUSE:Slowroll repo before we can leave the experimental status. Ciao Bernhard M. [1] https://github.com/bmwiedemann/slowroll-tools/tree/devel [2] https://etherpad.opensuse.org/p/slowroll-idea

2 1

15.6 builds in OBS
by Peter Czanik 18 Sep '23

18 Sep '23

Hi, Last week the latest syslog-ng was added to SLES 15 SP 6 backports by maintainers. As 15.6 seems to get some version updates, I thought that I enable some syslog-ng features which are now possible to build. However the Leap 15.6 / SLES 15 SP 6 backports target does not seem to be available yet in OBS. When will these be enabled? BPF support is fun: it can speed up UDP log collection significantly... Peter

1 0