[opensuse-factory] Secfixed kernel for FACTORY, pretty please?
Hi all. Greg said "all users of the 3.0 series *must* upgrade when announcing 3.0.4. However, with FACTORY, I can't, as there is only 3.0.0 (and Kernel:HEAD's 3.1.rc3 is crashing like hell all the time). Even Tumbleweed has a newer Kernel than FACTORY. That's not how it was planned to be IIUC. -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On Tuesday, August 30, 2011 15:54:29 Stefan Seyfried wrote:
Current head is 3.1rc4 and that works fine for me (first 3.1 rc I tried).
Even Tumbleweed has a newer Kernel than FACTORY. That's not how it was planned to be IIUC.
Jeff, which kernel are we going to use for 12.1? 3.0 or 3.1? Which way do you want to update now? Andreas -- Andreas Jaeger, Program Manager openSUSE aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 N�rnberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imend�rffer, HRB 16746 (AG N�rnberg) GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Am Wed, 31 Aug 2011 09:15:44 +0200 schrieb Andreas Jaeger <aj@suse.com>:
I updated now, too and will check if the issues are fixed (resetting an USB connected android ADB device was often crashing the kernel). If not, the kernel is now hopefully current enough to file a bug ;-)
No matter what we'll get for 12.1, leaving FACTORY vulnerable to apparently grave bugs ("all users MUST upgrade") is not good IMVHO. If a kernel is good enough for Tumbleweed, it should be good enough for FACTORY, too. If "use Kernel:HEAD for FACTORY" is the proposed way of handling this, then we should remove the kernel packages from FACTORY and tell people that they have to add Kernel:HEAD in order to use FACTORY. -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 08/31/2011 03:15 AM, Andreas Jaeger wrote:
I'm planning on using 3.1 for 12.1. We don't branch for every kernel I push to Factory so it'd be something of a pain to go back and adjust the 3.0 kernel for Factory. - -Jeff - -- Jeff Mahoney SUSE Labs -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk5eTikACgkQLPWxlyuTD7Li0wCdEcWgyPQe4SowjSxKLrv6xAfZ h6cAn0vy3q0c8bpPhfF8rQWj4zQQ/3Ng =US9d -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On Wednesday, August 31, 2011 11:07:21 Jeff Mahoney wrote:
So, time to push rc4 into Factory? Thanks for the update, Andreas -- Andreas Jaeger, Program Manager openSUSE aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Hi Jeff, Am Wed, 31 Aug 2011 11:07:21 -0400 schrieb Jeff Mahoney <jeffm@suse.com>:
I'm planning on using 3.1 for 12.1.
Good.
I understand that. However, leaving FACTORY users vulnerable is not a good option IMVHO. Maybe in such times (when HEAD has already moved to a not-yet-stable -rc1 and important fixes come up in 3.x.y) the tumbleweed kernel (which is a de-facto, even if unofficial branch of Kernel:HEAD IIUC) could be submitted into FACTORY? For me it is not *that* important as I'm running HEAD anyway (and in cases of it being a bit borken, as 3.1.rc3 was, I can manually install the Tumbleweed kernel), but I'm planning on converting fome new people to FACTORY with my oS Conf talk/workshop "surviving openSUSE Factory", and I don't want to scare them away with "but beware that there are often no secfixes for the kernel" :-) Best regards -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On Wed, Aug 31, 2011 at 07:42:55PM +0200, Stefan Seyfried wrote:
Vulnerable to what specifically are you referring to here? And there's always going to be a lag of a few days from upstream to getting stuff into Factory, especially during times when Factory is "frozen" due to rebuilds and the like. If you run Factory, you get used to this, it's nothing new. greg k-h -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Hi Greg, Am Wed, 31 Aug 2011 11:36:27 -0700 schrieb Greg KH <gregkh@suse.de>:
The general public reads "All users must upgrade" as "there are unspecified security bugs fixed". If that's the wrong interpretation, then -stable announcements should mention more precisely *why* users must upgrade. -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On Wed, Aug 31, 2011 at 09:13:21PM +0200, Stefan Seyfried wrote:
That is correct as bugs are fixed, and if they are really "security" issues is unknown depending on your situation.
If that's the wrong interpretation, then -stable announcements should mention more precisely *why* users must upgrade.
We've been down this path before, and that's not going to happen, sorry. After over 5 years of doing this, the phrase "All users must upgrade" is what is going to be used as it says what needs to be said. greg k-h -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Am Wed, 31 Aug 2011 12:39:47 -0700 schrieb Greg KH <gregkh@suse.de>:
=> so Factory users need this update. qed. :-) As this is really mostly a problem during early -rc time (the rc is not yet suitable for Factory, but the effort of branching the kernel repo is too high), maybe simply submitting the tumbleweed kernel to Factory in such times would be a solution. Let's talk about it at the Conference ;) -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On Tuesday, August 30, 2011 15:54:29 Stefan Seyfried wrote:
Current head is 3.1rc4 and that works fine for me (first 3.1 rc I tried).
Even Tumbleweed has a newer Kernel than FACTORY. That's not how it was planned to be IIUC.
Jeff, which kernel are we going to use for 12.1? 3.0 or 3.1? Which way do you want to update now? Andreas -- Andreas Jaeger, Program Manager openSUSE aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 N�rnberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imend�rffer, HRB 16746 (AG N�rnberg) GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Am Wed, 31 Aug 2011 09:15:44 +0200 schrieb Andreas Jaeger <aj@suse.com>:
I updated now, too and will check if the issues are fixed (resetting an USB connected android ADB device was often crashing the kernel). If not, the kernel is now hopefully current enough to file a bug ;-)
No matter what we'll get for 12.1, leaving FACTORY vulnerable to apparently grave bugs ("all users MUST upgrade") is not good IMVHO. If a kernel is good enough for Tumbleweed, it should be good enough for FACTORY, too. If "use Kernel:HEAD for FACTORY" is the proposed way of handling this, then we should remove the kernel packages from FACTORY and tell people that they have to add Kernel:HEAD in order to use FACTORY. -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 08/31/2011 03:15 AM, Andreas Jaeger wrote:
I'm planning on using 3.1 for 12.1. We don't branch for every kernel I push to Factory so it'd be something of a pain to go back and adjust the 3.0 kernel for Factory. - -Jeff - -- Jeff Mahoney SUSE Labs -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk5eTikACgkQLPWxlyuTD7Li0wCdEcWgyPQe4SowjSxKLrv6xAfZ h6cAn0vy3q0c8bpPhfF8rQWj4zQQ/3Ng =US9d -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On Wednesday, August 31, 2011 11:07:21 Jeff Mahoney wrote:
So, time to push rc4 into Factory? Thanks for the update, Andreas -- Andreas Jaeger, Program Manager openSUSE aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Hi Jeff, Am Wed, 31 Aug 2011 11:07:21 -0400 schrieb Jeff Mahoney <jeffm@suse.com>:
I'm planning on using 3.1 for 12.1.
Good.
I understand that. However, leaving FACTORY users vulnerable is not a good option IMVHO. Maybe in such times (when HEAD has already moved to a not-yet-stable -rc1 and important fixes come up in 3.x.y) the tumbleweed kernel (which is a de-facto, even if unofficial branch of Kernel:HEAD IIUC) could be submitted into FACTORY? For me it is not *that* important as I'm running HEAD anyway (and in cases of it being a bit borken, as 3.1.rc3 was, I can manually install the Tumbleweed kernel), but I'm planning on converting fome new people to FACTORY with my oS Conf talk/workshop "surviving openSUSE Factory", and I don't want to scare them away with "but beware that there are often no secfixes for the kernel" :-) Best regards -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On Wed, Aug 31, 2011 at 07:42:55PM +0200, Stefan Seyfried wrote:
Vulnerable to what specifically are you referring to here? And there's always going to be a lag of a few days from upstream to getting stuff into Factory, especially during times when Factory is "frozen" due to rebuilds and the like. If you run Factory, you get used to this, it's nothing new. greg k-h -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
participants (4)
-
Andreas Jaeger -
Greg KH -
Jeff Mahoney -
Stefan Seyfried