August 2020 - openSUSE Kubic - openSUSE Mailing Lists

[opensuse-kubic] New Kubic snapshot 20200821 released!
by Richard Brown 23 Aug '20

23 Aug '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: curl (7.71.1 -> 7.72.0) findutils flannel (0.11.0 -> 0.12.0) helm (3.2.4 -> 3.3.0) installation-images-MicroOS (16.7 -> 16.8) k9s (0.18.1 -> 0.21.7) kubernetes1.17 kubernetes1.18 microos-tools (2.3 -> 2.4) podman popt (1.16 -> 1.18) xfsprogs === Details === ==== curl ==== Version update (7.71.1 -> 7.72.0) Subpackages: libcurl4 - Update to 7.72.0 [bsc#1175109, CVE-2020-8231] * Changes: - content_encoding: add zstd decoding support - CURL_PUSH_ERROROUT: allow the push callback to fail the parent stream - CURLINFO_EFFECTIVE_METHOD: added * Bugfixes: - CVE-2020-8231: libcurl: wrong connect-only connection - curl-config: ignore REQUIRE_LIB_DEPS in --libs output - curl: improve the existing file check with -J - curl_multi_setopt: fix compiler warning "result is always false" - curl_version_info.3: CURL_VERSION_KERBEROS4 is deprecated - docs: Add video link to docs/CONTRIBUTE.md - docs: clarify MAX_SEND/RECV_SPEED functionality - ftp: don't do ssl_shutdown instead of ssl_close - ftpserver: don't verify SMTP MAIL FROM names - getinfo: reset retry-after value in initinfo - gnutls: repair the build with 'CURL_DISABLE_PROXY' - gtls: survive not being able to get name/issuer - h2: repair trailer handling - http2: close the http2 connection when no more requests may be sent - http2: fix nghttp2_strerror -> nghttp2_http2_strerror in debug messages - libssh2: s/ssherr/sftperr/ - mprintf: Fix dollar string handling - mprintf: Fix stack overflows - multi_remove_handle: close unused connect-only connections - ngtcp2: adapt to error code rename - ngtcp2: adjust to recent sockaddr updates - ngtcp2: update to modified qlog callback prototype - ntlm: free target_info before (re-)malloc - page-header: provide protocol details in the curl.1 man page - quiche: handle calling disconnect twice - setopt: unset NOBODY switches to GET if still HEAD - smtp_parse_address: handle blank input string properly - socks: use size_t for size variable - tls-max.d: this option is only for TLS-using connections - tlsv1.3.d. only for TLS-using connections - tool_getparam: make --krb option work again - transfer: fix data_pending for builds with both h2 and h3 enabled - transfer: fix memory-leak with CURLOPT_CURLU in a duped handle - transfer: move retrycount from connect struct to easy handle - url: fix CURLU and location following ==== findutils ==== - findutils.keyring: Update GPG keys of Bob Proulx. Prompted by an error of 'osc service localrun download_files'. ==== flannel ==== Version update (0.11.0 -> 0.12.0) - update to 0.12.0: * fix deleteLease * Use publicIP lookup iface if --public-ip indicated * kubernetes 1.16 cni error * Add cniVersion to general CNI plugin configuration. * Needs to clear NodeNetworkUnavailable flag on Kubernetes * Replaces gorillalabs go-powershell with bhendo/go-powershell * Make VXLAN device learning attribute configurable * change nodeSelector to nodeAffinity and schedule the pod to linux node * This PR adds the cni version to the cni-conf.yaml inside the kube-flannel-cfg configmap * EnableNonPersistent flag for Windows Overlay networks * snap package. * Update lease with DR Mac * main.go: add the "net-config-path" flag * Deploy Flannel with unprivileged PSP * Enable local host to local pod connectivity in Windows VXLAN * Update hcsshim for HostRoute policy in Windows VXLAN ==== helm ==== Version update (3.2.4 -> 3.3.0) - Update to version 3.3.0: * Fix issue with install and upgrade running all hooks * bump version to v3.3 * fix(template):Issue:helm template with --output-dir (#8156) * Adding v4 link * Updating for today's actual milestone practices * fix(cmd): display warnings on stderr * Determine chart digest by manifest (#8249) * Fix some go-lint warnings * Fix golint issue * feat(comp): Complete revision for rollback command * fix template command use --show-only flags error in windows environment * version bump * remove s390x arch check * feat(comp): Provide completion for --version flag * chore(Makefile): Remove unused variable * Improve the extractor and add tests (#8317) * Add HelmVersion to Capabilities * feat(cmd): Subcommands for the completion command * fix(chartutil): do not set helpers.tpl filetype for vim * Add unit test case * feat(comp): Move custom completions to Cobra 1.0 * fix(doc): generic description for --version/verify * Fix description is ignore when installed with upgrade * Add unit test for man-in-the-middle attack on pull * chore(helm): Avoid confusion in command usage * Fix crashing `helm chart list` with large list * Show errors when linting for Chart.yaml version and appVersion fields of type non-string * ref(tests): localize unit test fixtures to package * Fix issue with unhandled error on Stat * Removing legacy completions.bash file * Using flags instead of persistent flags on status * Removing tiller language * Added s390x support * add kind_sorter support for SecretList * Fix unit test * Fix repo cache setting * Update the Helm version docs * Revert "group command for easy read" * Catching a potential panic in strval parsing * Recovering from panic that can occur with make * Fixing error with strvals parsing * ref(pkg/chartutil): use minimal in-memory fixtures * feat: Detect missing selector during lint * Add new line to fix code formatting in doc * fix(comp): Prepare plugin completion for Cobra 1.0 * feat(test): Update golangci-lint to 1.27.0 * chore(*): Fix formatting * Fixing PAX Header handling (#8086) * fix: upgrade using --force shoud not run patch logic (#8000) * feat(getter): add timeout option (#7950) * fix security mailing list address * bump DefaultCapabilities to 1.18 * bump to kubernetes 1.18.2 * scripts: do not use optional 'which' command in get-helm installation (#8048) * feat: make the linter coalesce the passed-in values before running values tests (#7984) * Removed scheme * Fixes repo parsing * Fixes repo parsing * Set DisableCompression to true to disable unwanted httpclient transformation * Update lint deprecation list * refactor: alter constant `pluginFileName` to `PluginFileName` * Fixing argument to be lower case * docs: fix capitalization in a few help messages * bump version to v3.2 * fix: removed strict template errors in linter (#8017) * Add checking of length of resourceList before creating of deleting * fix: use correct regular expression for Kubernetes names (#8013) * feat: implement deprecation warnings in helm lint (#7986) * added option --insecure-skip-tls-verify for helm install, addresses #7875 * added option --insecure-skip-tls-verify for helm pull, addresses #7875 * polish to keep the same log style * Fix markdown table in helm command doc * feat: lint the names of templated resources (#8011) * Adding Helm env vars where XDG exposed * Fix : Prints empty list in json/yaml is no repositories are present (#7949) * Updating CONTRIBUTING to match current practice * Adding PR template from dev-v2 branch * Add unit test for pkg/chart/chart.go * fix: write index.yaml file atomically (#7954) * test: add test for bom test data integrity * Fixing docs from version to appVersion (#7975) * Modify Circle config to use Go 1.14 (#7980) * fix(pkg/cli): ensure correct configuration from kubeconfig file * fix(cmd/env): make helm env command respect cli flags (#7978) * fix(*): remove bom in utf files when loading chart files (#6081) * Helm upgrades with --reuse-values and nil user values -- with tests (#7959) * fix(pkg/plugin): copy plugins directly to the data directory (#7962) * fix linting error with lookup function (#7969) * Parse reference templates in predictable order (#7702) * group command for easy read * fs_test: use os.Getuid() instead user.Current() to determine if a test is executed with root privileges. * fix(helm): allow a previously failed release to be upgraded (#7653) * Updating get stripts to skip pre-releases * fix(pkg/kube): continue deleting objects when one fails * Add comments about release Version variable * fixed to mirror master * removed panic, and replaced with error * fix test * added config file string * Fix a typo "update" -> "updates" (#7346) * fix(cmd): Fixes logging on action conf init error (#6909) * Remove duplicated words (#7336) ==== installation-images-MicroOS ==== Version update (16.7 -> 16.8) - merge gh#openSUSE/installation-images#408 - document default network repo location - 16.8 ==== k9s ==== Version update (0.18.1 -> 0.21.7) - update to 0.21.7: - see https://github.com/derailed/k9s/releases ==== kubernetes1.17 ==== - Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib ==== kubernetes1.18 ==== Subpackages: kubernetes1.18-client kubernetes1.18-kubeadm kubernetes1.18-kubelet kubernetes1.18-kubelet-common - Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib - update url ==== microos-tools ==== Version update (2.3 -> 2.4) - Update to version 2.4 - fixes for autorelabel in initrd - Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup /tmp after 10 days and /var/tmp after 30 days - Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379] - Add tmp.mount for SUSE MicroOS 5.0 [jsc#SMO-2] ==== podman ==== Subpackages: podman-cni-config - Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib ==== popt ==== Version update (1.16 -> 1.18) - Update to version 1.18: * fix an ugly and ancient security issue with popt failing to drop privileges on alias exec from a SUID/SGID program * perform rudimentary sanity checks when reading in popt config files * collect accumulated misc fixes (memleaks etc) from distros * convert translations to utf-8 encoding * convert old postscript documentation to pdf * dust off ten years worth of autotools sediment * reorganize and clean up the source tree for clarity * remove the obnoxious splint annotations from the sources - popt-alignment-checks.patch removed: contained in upstream - popt-libc-updates.patch changed: to be compatible with new version. ==== xfsprogs ==== - Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075) -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20200819 released!
by Richard Brown 21 Aug '20

21 Aug '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dbus-1 (1.12.16 -> 1.12.20) dbus-1-x11 (1.12.16 -> 1.12.20) exiv2 (0.27.2 -> 0.27.3) fuse (2.9.8 -> 2.9.9) fuse-overlayfs (1.1.0 -> 1.1.2) irqbalance (1.6.0+git20200317.0348a3b -> 1.7.0) less (562 -> 563) libical (3.0.7 -> 3.0.8) liblrdf (0.5.0 -> 0.6.1) libraw1394 (2.1.1 -> 2.1.2) libressl (3.1.3 -> 3.1.4) libsmbios (2.4.2 -> 2.4.3) libvpx (1.8.2 -> 1.9.0) libyaml (0.2.4 -> 0.2.5) openldap2 osinfo-db (20200529 -> 20200804) rsync (3.2.2 -> 3.2.3) sqlite3 (3.32.3 -> 3.33.0) === Details === ==== dbus-1 ==== Version update (1.12.16 -> 1.12.20) Subpackages: libdbus-1-3 - Update to 1.12.20 * On Unix, avoid a use-after-free if two usernames have the same numeric uid. In older versions this could lead to a crash (denial of service) or other undefined behaviour, possibly including incorrect authorization decisions if <policy group=...> is used. Like Unix filesystems, D-Bus' model of identity cannot distinguish between users of different names with the same numeric uid, so this configuration is not advisable on systems where D-Bus will be used. Thanks to Daniel Onaca. (dbus#305, dbus!166; Simon McVittie) - From 1.12.18 * CVE-2020-12049: If a message contains more file descriptors than can be sent, close those that did get through before reporting error. Previously, a local attacker could cause the system dbus-daemon (or another system service with its own DBusServer) to run out of file descriptors, by repeatedly connecting to the server and sending fds that would get leaked. Thanks to Kevin Backhouse of GitHub Security Lab. (dbus#294, GHSL-2020-057; Simon McVittie) * Fix a crash when the dbus-daemon is terminated while one or more monitors are active (dbus#291, dbus!140; Simon McVittie) * The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 (fd.o #48816, dbus!115; Chris Morin) * Fix a wrong environment variable name in dbus-daemon(1) (dbus#275, dbus!122; Mubin, Philip Withnall) * Fix formatting of dbus_message_append_args example (dbus!126, Felipe Franciosi) * Avoid a test failure on Linux when built in a container as uid 0, but without the necessary privileges to increase resource limits (dbus!58, Debian #908092; Simon McVittie) * When building with CMake, cope with libX11 in a non-standard location (dbus!129, Tuomo Rinne) - Run spec-cleaner - Move generation of API docs to a separate package, avoid doxygen dependency for building main package. - Build x11 and devel-doc (API doc) using _multibuild. - Drop no longer required call to autoreconf, remove obsolete BuildRequires for libtool and autoconf-archive. ==== dbus-1-x11 ==== Version update (1.12.16 -> 1.12.20) - Update to 1.12.20 * On Unix, avoid a use-after-free if two usernames have the same numeric uid. In older versions this could lead to a crash (denial of service) or other undefined behaviour, possibly including incorrect authorization decisions if <policy group=...> is used. Like Unix filesystems, D-Bus' model of identity cannot distinguish between users of different names with the same numeric uid, so this configuration is not advisable on systems where D-Bus will be used. Thanks to Daniel Onaca. (dbus#305, dbus!166; Simon McVittie) - From 1.12.18 * CVE-2020-12049: If a message contains more file descriptors than can be sent, close those that did get through before reporting error. Previously, a local attacker could cause the system dbus-daemon (or another system service with its own DBusServer) to run out of file descriptors, by repeatedly connecting to the server and sending fds that would get leaked. Thanks to Kevin Backhouse of GitHub Security Lab. (dbus#294, GHSL-2020-057; Simon McVittie) * Fix a crash when the dbus-daemon is terminated while one or more monitors are active (dbus#291, dbus!140; Simon McVittie) * The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 (fd.o #48816, dbus!115; Chris Morin) * Fix a wrong environment variable name in dbus-daemon(1) (dbus#275, dbus!122; Mubin, Philip Withnall) * Fix formatting of dbus_message_append_args example (dbus!126, Felipe Franciosi) * Avoid a test failure on Linux when built in a container as uid 0, but without the necessary privileges to increase resource limits (dbus!58, Debian #908092; Simon McVittie) * When building with CMake, cope with libX11 in a non-standard location (dbus!129, Tuomo Rinne) - Run spec-cleaner - Move generation of API docs to a separate package, avoid doxygen dependency for building main package. - Build x11 and devel-doc (API doc) using _multibuild. - Drop no longer required call to autoreconf, remove obsolete BuildRequires for libtool and autoconf-archive. - Remove left overs from blocking restart on update from May 29th 2019 - Use sysusers.d to create messagebus user ==== exiv2 ==== Version update (0.27.2 -> 0.27.3) - Update to 0.27.3: * Bug and security fixes * UNIX suppport * Support for building with C++11 and C++14 * Revised build and test environments * Revised documentation * Improved charset handling in UserComment * Other improvements ==== fuse ==== Version update (2.9.8 -> 2.9.9) - update to 2.9.9: * Added OpenAFS to whitelist (so users can now mount FUSE filesystems on mountpoints within OpenAFS filesystems). * Added a test of seekdir to test_syscalls. * Fixed readdir bug when non-zero offsets are given to filler and the filesystem client, after reading a whole directory, re-reads it from a non-zero offset e. g. by calling seekdir followed by readdir. ==== fuse-overlayfs ==== Version update (1.1.0 -> 1.1.2) - udpate to 1.1.2 - fix build issues with libmusl. - fix memory leak when creating whiteout files. - fix lookup for overflow uid when it is different than the overflow gid. ==== irqbalance ==== Version update (1.6.0+git20200317.0348a3b -> 1.7.0) - update to 1.7.0: * Strlen checking for IRQBALANCE_BANNED_CPU env var * Typo cleanup in SOCKET_TMPFS * consolidation of numa node creation on non-numa systems * fix uninitialized use of package_mask in affinity setup * use num_online_cpus instead of core_count * fix a null ptr crash in do_one_cpu * make list searching common from glib * fix a calloc parameter bug * remove some unused variables * use g_list_free_full * remove redundant call to free_cl_opts * fix some resource leaks in main() * fix some use after free issues in check_for_irq_ban * fix resource leaks in irqballance-ui, and in add_one_node - remove Correct-capitalizing-in-service-file.patch: upstream ==== less ==== Version update (562 -> 563) - update to 563: * Update Unicode tables. * Treat Hangul Jamo medial vowels and final consonants as zero width. * Display error message immediately when -o is toggled and input is not a pipe. * Fix regression: make screen repaint when "squished" and a no-movement command is given. * Fix erroneous EOF calculation when F command is interrupted. * Make WIN32C version include this fix from 551: Don't count lines in initial screen if using -X with -F. * Fix display bug in WIN32C version. * Fix memory corruption when built with libtermcap. * Support libtinfow. ==== libical ==== Version update (3.0.7 -> 3.0.8) - Update to version 3.0.8: * Fix for icalattach_new_from_data() and the 'free_fn' argument. * Fix if recurrencetype contains both COUNT and UNTIL (only output UNTIL in the RRULE). - Replace gcc-c++ with generic c++_compiler BuildRequires. - Use cmake_build macro, forcing single thread building is no longer needed. This breaks support for SLE12SP4, but that one is superseeded by SP5 anyway. ==== liblrdf ==== Version update (0.5.0 -> 0.6.1) - update to 0.6.1: - resolve license and build issues ==== libraw1394 ==== Version update (2.1.1 -> 2.1.2) - update to 2.1.2 - Fix build with some alternative C libraries and with some older build environments. No functional changes. ==== libressl ==== Version update (3.1.3 -> 3.1.4) Subpackages: libcrypto46 libssl48 libtls20 - Update to release 3.1.4 * TLS 1.3 client improvements: * Improve client certificate selection to allow EC certificates instead of only RSA certificates. * Do not error out if a TLSv1.3 server requests an OCSP response as part of a certificate request. * Fix SSL_shutdown behavior to match the legacy stack. The previous behaviour could cause a hang. * Fix a memory leak and add a missing error check in the handling of the key update message. * Fix a memory leak in tls13_record_layer_set_traffic_key. * Avoid calling freezero with a negative size if a server sends a malformed plaintext of all zeroes. * Ensure that only PSS may be used with RSA in TLSv1.3 in order to avoid using PKCS1-based signatures. * Add the P-521 curve to the list of curves supported by default in the client. ==== libsmbios ==== Version update (2.4.2 -> 2.4.3) - update to 2.4.3 * Fixes for WMI based communications * Fixes for battery controls * Fixes for some segfaults and error handling ==== libvpx ==== Version update (1.8.2 -> 1.9.0) - Update to 1.9.0 This release adds support for NV12, a separate library for rate control, as well as incremental improvements. - Upgrading: NV12 support is added to this release. A new interface is added for VP9 rate control. The new library libvp9rc.a must be linked by applications. Googletest is updated to v1.10.0. simple_encode.cc is compiled into a new library libsimple_encode.a with CONFIG_RATE_CTRL. - Enhancement: Various changes to improve VP9 SVC, rate control, quality and speed to real time encoding. - Bug fixes: Fix key frame update refresh simulcast flexible svc. Fix to disable_16x16part speed feature for real time encoding. Fix some signed integer overflows for VP9 rate control. Fix initialization of delta_q_uv. Fix condition in regulate_q for cyclic refresh. Various fixes to dynamic resizing for VP9 SVC. ==== libyaml ==== Version update (0.2.4 -> 0.2.5) - update to 0.2.5: * Allow question marks in plain scalars in flow collections * Emitter: Don't output trailing space for empty scalar nodes * Emitter: Output space after an alias mapping key * Add -h and --flow (on|off|keep) to run-*-test-suite * Remove unnecessary include and malloc * Add specific files back to .gitignore * Output error position in run-parser-test-suite.c * A couple patches to improve test suite support ==== openldap2 ==== - Drop obsolete, not working DB_CONFIG - Remove init.d header from start script, does not work - Use bash for start script as syntax is not POSIX sh supported - Remove UPDATE_NEEDED section in start script, does never match - Remove remaining rc.status usage in start script ==== osinfo-db ==== Version update (20200529 -> 20200804) - Update database to version 20200804 - Drop patches included in new tarball add-opensuse-leap-15.2-support.patch add-sle15sp2-support.patch ==== rsync ==== Version update (3.2.2 -> 3.2.3) - Updated to version 3.2.3 * Fixes a memory usage regression introduced in 3.2.2 * Too many changes to list, see included NEWS.md file. - acls.diff, time-limit.diff and xattrs.diff are now upstream. - Drop rsync-add_back_use_slp_directive.patch, included in upstream slp.diff - Add BR on c++_compiler needed for SIMD support - Add --enable-simd configure option on x86_64 - Change BR on xxhash-devel to pkgconfig(libxxhash) and depend on xxhash >= 0.8.0 since this is needed for XXH3 - Use xxhash only on suse_version >= 1550 since xxhash 0.8.0 is not available elsewhere. ==== sqlite3 ==== Version update (3.32.3 -> 3.33.0) - SQLite 3.33.0: * Support for UPDATE FROM following the PostgreSQL syntax * Increase the maximum size of database files to 281 TB * Extend the PRAGMA integrity_check statement so that it can optionally be limited to verifying just a single table and its indexes, rather than the entire database file. * Add the decimal extension for doing arbitrary-precision decimal arithmetic * Enhancements to the ieee754 extension for working with IEEE 754 binary64 numbers * cli: Add four new output modes: "box", "json", "markdown", and "table" * cli: The "column" output mode automatically expands columns to contain the longest output row and automatically turns ".header" on if it has not been previously set * cli: The "quote" output mode honors ".separator" * cli: The decimal extension and the ieee754 extension are built-in to the CLI * multiple query planner improvements -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20200819 released!
by Richard Brown 21 Aug '20

21 Aug '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dbus-1 (1.12.16 -> 1.12.20) fuse (2.9.8 -> 2.9.9) fuse-overlayfs (1.1.0 -> 1.1.2) irqbalance (1.6.0+git20200317.0348a3b -> 1.7.0) less (562 -> 563) libressl (3.1.3 -> 3.1.4) libyaml (0.2.4 -> 0.2.5) openldap2 rsync (3.2.2 -> 3.2.3) sqlite3 (3.32.3 -> 3.33.0) === Details === ==== dbus-1 ==== Version update (1.12.16 -> 1.12.20) Subpackages: libdbus-1-3 - Update to 1.12.20 * On Unix, avoid a use-after-free if two usernames have the same numeric uid. In older versions this could lead to a crash (denial of service) or other undefined behaviour, possibly including incorrect authorization decisions if <policy group=...> is used. Like Unix filesystems, D-Bus' model of identity cannot distinguish between users of different names with the same numeric uid, so this configuration is not advisable on systems where D-Bus will be used. Thanks to Daniel Onaca. (dbus#305, dbus!166; Simon McVittie) - From 1.12.18 * CVE-2020-12049: If a message contains more file descriptors than can be sent, close those that did get through before reporting error. Previously, a local attacker could cause the system dbus-daemon (or another system service with its own DBusServer) to run out of file descriptors, by repeatedly connecting to the server and sending fds that would get leaked. Thanks to Kevin Backhouse of GitHub Security Lab. (dbus#294, GHSL-2020-057; Simon McVittie) * Fix a crash when the dbus-daemon is terminated while one or more monitors are active (dbus#291, dbus!140; Simon McVittie) * The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 (fd.o #48816, dbus!115; Chris Morin) * Fix a wrong environment variable name in dbus-daemon(1) (dbus#275, dbus!122; Mubin, Philip Withnall) * Fix formatting of dbus_message_append_args example (dbus!126, Felipe Franciosi) * Avoid a test failure on Linux when built in a container as uid 0, but without the necessary privileges to increase resource limits (dbus!58, Debian #908092; Simon McVittie) * When building with CMake, cope with libX11 in a non-standard location (dbus!129, Tuomo Rinne) - Run spec-cleaner - Move generation of API docs to a separate package, avoid doxygen dependency for building main package. - Build x11 and devel-doc (API doc) using _multibuild. - Drop no longer required call to autoreconf, remove obsolete BuildRequires for libtool and autoconf-archive. ==== fuse ==== Version update (2.9.8 -> 2.9.9) - update to 2.9.9: * Added OpenAFS to whitelist (so users can now mount FUSE filesystems on mountpoints within OpenAFS filesystems). * Added a test of seekdir to test_syscalls. * Fixed readdir bug when non-zero offsets are given to filler and the filesystem client, after reading a whole directory, re-reads it from a non-zero offset e. g. by calling seekdir followed by readdir. ==== fuse-overlayfs ==== Version update (1.1.0 -> 1.1.2) - udpate to 1.1.2 - fix build issues with libmusl. - fix memory leak when creating whiteout files. - fix lookup for overflow uid when it is different than the overflow gid. ==== irqbalance ==== Version update (1.6.0+git20200317.0348a3b -> 1.7.0) - update to 1.7.0: * Strlen checking for IRQBALANCE_BANNED_CPU env var * Typo cleanup in SOCKET_TMPFS * consolidation of numa node creation on non-numa systems * fix uninitialized use of package_mask in affinity setup * use num_online_cpus instead of core_count * fix a null ptr crash in do_one_cpu * make list searching common from glib * fix a calloc parameter bug * remove some unused variables * use g_list_free_full * remove redundant call to free_cl_opts * fix some resource leaks in main() * fix some use after free issues in check_for_irq_ban * fix resource leaks in irqballance-ui, and in add_one_node - remove Correct-capitalizing-in-service-file.patch: upstream ==== less ==== Version update (562 -> 563) - update to 563: * Update Unicode tables. * Treat Hangul Jamo medial vowels and final consonants as zero width. * Display error message immediately when -o is toggled and input is not a pipe. * Fix regression: make screen repaint when "squished" and a no-movement command is given. * Fix erroneous EOF calculation when F command is interrupted. * Make WIN32C version include this fix from 551: Don't count lines in initial screen if using -X with -F. * Fix display bug in WIN32C version. * Fix memory corruption when built with libtermcap. * Support libtinfow. ==== libressl ==== Version update (3.1.3 -> 3.1.4) Subpackages: libcrypto46 libssl48 libtls20 - Update to release 3.1.4 * TLS 1.3 client improvements: * Improve client certificate selection to allow EC certificates instead of only RSA certificates. * Do not error out if a TLSv1.3 server requests an OCSP response as part of a certificate request. * Fix SSL_shutdown behavior to match the legacy stack. The previous behaviour could cause a hang. * Fix a memory leak and add a missing error check in the handling of the key update message. * Fix a memory leak in tls13_record_layer_set_traffic_key. * Avoid calling freezero with a negative size if a server sends a malformed plaintext of all zeroes. * Ensure that only PSS may be used with RSA in TLSv1.3 in order to avoid using PKCS1-based signatures. * Add the P-521 curve to the list of curves supported by default in the client. ==== libyaml ==== Version update (0.2.4 -> 0.2.5) - update to 0.2.5: * Allow question marks in plain scalars in flow collections * Emitter: Don't output trailing space for empty scalar nodes * Emitter: Output space after an alias mapping key * Add -h and --flow (on|off|keep) to run-*-test-suite * Remove unnecessary include and malloc * Add specific files back to .gitignore * Output error position in run-parser-test-suite.c * A couple patches to improve test suite support ==== openldap2 ==== - Drop obsolete, not working DB_CONFIG - Remove init.d header from start script, does not work - Use bash for start script as syntax is not POSIX sh supported - Remove UPDATE_NEEDED section in start script, does never match - Remove remaining rc.status usage in start script ==== rsync ==== Version update (3.2.2 -> 3.2.3) - Updated to version 3.2.3 * Fixes a memory usage regression introduced in 3.2.2 * Too many changes to list, see included NEWS.md file. - acls.diff, time-limit.diff and xattrs.diff are now upstream. - Drop rsync-add_back_use_slp_directive.patch, included in upstream slp.diff - Add BR on c++_compiler needed for SIMD support - Add --enable-simd configure option on x86_64 - Change BR on xxhash-devel to pkgconfig(libxxhash) and depend on xxhash >= 0.8.0 since this is needed for XXH3 - Use xxhash only on suse_version >= 1550 since xxhash 0.8.0 is not available elsewhere. ==== sqlite3 ==== Version update (3.32.3 -> 3.33.0) - SQLite 3.33.0: * Support for UPDATE FROM following the PostgreSQL syntax * Increase the maximum size of database files to 281 TB * Extend the PRAGMA integrity_check statement so that it can optionally be limited to verifying just a single table and its indexes, rather than the entire database file. * Add the decimal extension for doing arbitrary-precision decimal arithmetic * Enhancements to the ieee754 extension for working with IEEE 754 binary64 numbers * cli: Add four new output modes: "box", "json", "markdown", and "table" * cli: The "column" output mode automatically expands columns to contain the longest output row and automatically turns ".header" on if it has not been previously set * cli: The "quote" output mode honors ".separator" * cli: The decimal extension and the ieee754 extension are built-in to the CLI * multiple query planner improvements -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New MicroOS snapshot 20200818 released!
by Richard Brown 19 Aug '20

19 Aug '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: baloo5-widgets (20.04.3 -> 20.08.0) dolphin (20.04.3 -> 20.08.0) kaccounts-integration (20.04.3 -> 20.08.0) kate (20.04.3 -> 20.08.0) kde-print-manager (20.04.3 -> 20.08.0) kdeconnect-kde (20.04.3 -> 20.08.0) kdialog (20.04.3 -> 20.08.0) kio-extras5 (20.04.3 -> 20.08.0) konsole (20.04.3 -> 20.08.0) kwalletmanager5 (20.04.3 -> 20.08.0) === Details === ==== baloo5-widgets ==== Version update (20.04.3 -> 20.08.0) - Update to 20.08.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-08-apps-update - No code change since 20.07.90 - Update to 20.07.90 * New feature release - No code change since 20.07.80 - Update to 20.07.80 * New feature release - Changes since 20.04.3: * Support API documentation generation with kapidox * [FilePropertiesPlugin] Port KRun to OpenUrlJob * FileMetaDataWidget: Avoid showing fields when they have no value * Use KFileItem::recursiveSize to Display recursive size as total size ==== dolphin ==== Version update (20.04.3 -> 20.08.0) Subpackages: dolphin-part libdolphinvcs5 - Update to 20.08.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-08-apps-update - Changes since 20.07.90: * [search] Close tags menu after click when there is only one tag (kde#424873) * Remove MaximumSize entry from kdeglobals when setting the preview file size limit to "No limit" (kde#424403) - Update to 20.07.90 * New feature release - Changes since 20.07.80: * Fix "Show folders, tabs, and window state from last time" feature (kde#422300) * Fix deprecated knsrc file location - Update to 20.07.80 * New feature release - Too many changes since 20.04.3, only listing bugfixes: * Fix selection rect after porting from QFontMetrics::width() (kde#421973) * [search] Do not update text input when it has focus (kde#423328) * Places: Use Solid::Device::DisplayName for DisplayRole (kde#415281) * Provide ability to configure size cut-off for local file previews (kde#331240) * Status bar: Hide the space free bar when size is unknown (kde#420027) * Prevents showing StatJob Progress info (kde#422121) * Move search and filter bar close buttons to the right (kde#421372) * Keep name readable on drag to matching background (kde#405266) * [Details mode] Allow to fill the column size of directories with actual size (kde#190580) * Information Panel: show early icons for folders (kde#420340) ==== kaccounts-integration ==== Version update (20.04.3 -> 20.08.0) - Update to 20.08.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-08-apps-update - No code change since 20.07.90 - Update to 20.07.90 * New feature release - No code change since 20.07.80 - Update to 20.07.80 * New feature release - Changes since 20.04.3: * Fix message extraction * Port to Kirigami.PlaceholderMessage * Fix clazy warning * Remove extra ';' * Add missing exclude file * Actually include plugins folder * Fix build by using QStringLiteral * Restore kio-webdav plugin (kde#413888) * Fix build with Qt 5.15 ==== kate ==== Version update (20.04.3 -> 20.08.0) Subpackages: kate-plugins - Update to 20.08.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-08-apps-update - No code change since 20.07.90 - Update to 20.07.90 * New feature release - Changes since 20.07.80: * Highlight documentation: add feature of comment position * apply make clang-format * cleanup internal handling of tabs * Use camelcase includes (scripted) - Update to 20.07.80 * New feature release - Too many changes since 20.04.3, only listing bugfixes: * register files not only at recently opened files menu but globally, too (kde#420504) * Properly port away from deprecated QProcess::start() (kde#420794) * Fix crash if search command is used while searching (kde#419719) ==== kde-print-manager ==== Version update (20.04.3 -> 20.08.0) - Update to 20.08.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-08-apps-update - No code change since 20.07.90 - Update to 20.07.90 * New feature release - No code change since 20.07.80 - Update to 20.07.80 * New feature release - Changes since 20.04.3: * Increase frameworks dependency to 5.72 for PlasmaExtras.PlaceholderMessage * Port applet to use PlasmaExtras.PlaceholderMessage * [applet] Show KCM in System Settings * Set saner widths for Placeholder message so its text doesn't overflow * [applet] Port to Kirigami.PlaceholderMessage * [Applet] Port to ExpandableListItem * [applet] Remove unnecessary top margin ==== kdeconnect-kde ==== Version update (20.04.3 -> 20.08.0) - Update to 20.08.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-08-apps-update - No code change since 20.07.90 - Update to 20.07.90 * New feature release - Changes since 20.07.80: * Fix file dialog usage in app and plasmoid (kde#423975) - Update to 20.07.80 * New feature release - Too many changes since 20.04.3, only listing bugfixes: * [SMS App] Select Message Text (kde#418630) * Finally, we have support for sending out Battery information. (kde#357193) - Drop 0001-Use-ecm_qt_declare_logging_category-to-declare-the-l.patch. Merged upstream ==== kdialog ==== Version update (20.04.3 -> 20.08.0) - Update to 20.08.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-08-apps-update - No code change since 20.07.90 - Update to 20.07.90 * New feature release - Changes since 20.07.80: * Correct the 'ask' parameter to KMessageBox::createKMessageBox() - Update to 20.07.80 * New feature release - Changes since 20.04.3: * Support specifying calendar's default date * Add option for specifying calendar's date format (kde#232712) ==== kio-extras5 ==== Version update (20.04.3 -> 20.08.0) Subpackages: libkioarchive5 - Update to 20.08.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-08-apps-update - No code change since 20.07.90 - Update to 20.07.90 * New feature release - No code change since 20.07.80 - Update to 20.07.80 * New feature release - Too many changes since 20.04.3, only listing bugfixes: * Thumbnail folders: scale down sub image when their height is too big (kde#419566) * filenamesearch: Implement stat to display metainfo (kde#420354) * [KIO-MTP] Fix null pointer dereference (kde#405838) * smb: make all qmin and qmax explicitly typed off_t (kde#419702) * smb: make sure we use balanced arguments on qmax (kde#419702) * smb: fast copy (kde#291835) ==== konsole ==== Version update (20.04.3 -> 20.08.0) Subpackages: konsole-part - Update to 20.08.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-08-apps-update - Changes since 20.07.90: * Fix underlining files with non-ascii names (kde#424404) - Update to 20.07.90 * New feature release - Changes since 20.07.80: * Unminimize Konsole when --new-tab is called * Fix focus when using --new-tab (kde#421408) * Adjust context markers * Add some context markers * kcfg use Bool, not bool * Revert "Update kcfg URLS to https" * Polish the highlightScrolledLines feature - Update to 20.07.80 * New feature release - Too many changes to list here. ==== kwalletmanager5 ==== Version update (20.04.3 -> 20.08.0) - Update to 20.08.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-08-apps-update - No code change since 20.07.90 - Update to 20.07.90 * New feature release - No code change since 20.07.80 - Update to 20.07.80 * New feature release - Changes since 20.04.3: * Move KCM to personalization category * Drop support for KF <5.58

1 0

[opensuse-kubic] MicroOS: new page about configuring wifi
by Marcos Paulo de Souza 19 Aug '20

19 Aug '20

Hi, after investing some time to properly configure wifi after installing MicroOS, I decided to write a step-by-step procedure about how to do it: https://en.opensuse.org/Portal:MicroOS/WifiSetup Please help me to polish the text, as I'm not good at writing tutorials and neither in networking in general... Also, I would like to add this page in the Navigation frame at https://en.opensuse.org/Portal:MicroOS, but I don't know how... can someone do it? Thanks in advance, Marcos -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

3 3

[opensuse-kubic] New MicroOS snapshot 20200817 released!
by Richard Brown 18 Aug '20

18 Aug '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20200507.e2243a4 -> 84.87+git20200804.d7fb210) apparmor bash (5.0.11 -> 5.0.18) filesystem krb5 libcap (2.32 -> 2.42) llvm10 permissions (1550_20200727 -> 1550_20200811) pkgconf python-rpm-macros (20200714.252de1f -> 20200806.f44d3ac) zlib === Details === ==== aaa_base ==== Version update (84.87+git20200507.e2243a4 -> 84.87+git20200804.d7fb210) - Let's own /etc/init.d/ as it is gone from package filesystem - Don't create/ship halt.local, systemd support for it was dropped. - Update to version 84.87+git20200804.d7fb210: * bashrc: fix bash: -s: command not found - Update to version 84.87+git20200804.00680c3: * Add proper quoting to last change * add screen.xterm-256color to DIR_COLORS - Update to version 84.87+git20200708.f5e90d7: * check for Packages.db and use this instead of Packages (boo#1171762) * Add also support for /usr/etc/profile.d for tcsh * Do add some support for /usr/etc/profile.d ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547) ==== bash ==== Version update (5.0.11 -> 5.0.18) - Bump bpatchlvl version to 18 which was missed in previous change ==== filesystem ==== - Ignore init.d/*.local ghost files from aaa_base and remove /etc/init.d (it's part of insserv-compat since a long time) [jsc#SMO-14] ==== krb5 ==== - Don't fail if %{_lto_cflags} is empty ==== libcap ==== Version update (2.32 -> 2.42) - Update to version 2.42: * Closed a potential issue with "libcap/psx" Go package and errno * Documentation updates * Minor optimization for cap_to_text() and (*cap.Set).String() * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap * Multiple fixes * Support Go module abstraction * A new kernel capability: CAP_BPF * Better support for cross-compilation * pam_cap now honors PAM_REINITIALIZE_CRED * implements cap_launch functionality ==== llvm10 ==== - Add ld.lld as an alternative for ld. (boo#1174656) ==== permissions ==== Version update (1550_20200727 -> 1550_20200811) Subpackages: chkstat permissions-config - Update to version 20200811: * regtest: support new getcap output format in libcap-2.42 * regtest: print individual test case errors to stderr ==== pkgconf ==== Subpackages: libpkgconf3 pkgconf-m4 pkgconf-pkg-config - Add /usr/local paths to pkg-config(1) search path for non RPM builds (boo#1175039) ==== python-rpm-macros ==== Version update (20200714.252de1f -> 20200806.f44d3ac) - Update to version 20200806.f44d3ac: * fix unittest macros ==== zlib ==== Subpackages: libminizip1 libz1 - Permit a deflateParams() parameter change as soon as possible(bsc#1174736) * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551) * bsc1174551-fxi-imcomplete-raw-streams.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] New Kubic snapshot 20200817 released!
by Richard Brown 18 Aug '20

18 Aug '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20200507.e2243a4 -> 84.87+git20200804.d7fb210) apparmor bash (5.0.11 -> 5.0.18) filesystem krb5 libcap (2.32 -> 2.42) permissions (1550_20200727 -> 1550_20200811) pkgconf python-rpm-macros (20200714.252de1f -> 20200806.f44d3ac) salt zlib === Details === ==== aaa_base ==== Version update (84.87+git20200507.e2243a4 -> 84.87+git20200804.d7fb210) - Let's own /etc/init.d/ as it is gone from package filesystem - Don't create/ship halt.local, systemd support for it was dropped. - Update to version 84.87+git20200804.d7fb210: * bashrc: fix bash: -s: command not found - Update to version 84.87+git20200804.00680c3: * Add proper quoting to last change * add screen.xterm-256color to DIR_COLORS - Update to version 84.87+git20200708.f5e90d7: * check for Packages.db and use this instead of Packages (boo#1171762) * Add also support for /usr/etc/profile.d for tcsh * Do add some support for /usr/etc/profile.d ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils perl-apparmor python3-apparmor - sevdb-caps-mr589.diff: add new capabilities CAP_BPF and CAP_PERFMON to severity.db (lp#1890547) ==== bash ==== Version update (5.0.11 -> 5.0.18) - Bump bpatchlvl version to 18 which was missed in previous change ==== filesystem ==== - Ignore init.d/*.local ghost files from aaa_base and remove /etc/init.d (it's part of insserv-compat since a long time) [jsc#SMO-14] ==== krb5 ==== - Don't fail if %{_lto_cflags} is empty ==== libcap ==== Version update (2.32 -> 2.42) - Update to version 2.42: * Closed a potential issue with "libcap/psx" Go package and errno * Documentation updates * Minor optimization for cap_to_text() and (*cap.Set).String() * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap * Multiple fixes * Support Go module abstraction * A new kernel capability: CAP_BPF * Better support for cross-compilation * pam_cap now honors PAM_REINITIALIZE_CRED * implements cap_launch functionality ==== permissions ==== Version update (1550_20200727 -> 1550_20200811) Subpackages: chkstat permissions-config - Update to version 20200811: * regtest: support new getcap output format in libcap-2.42 * regtest: print individual test case errors to stderr ==== pkgconf ==== Subpackages: libpkgconf3 pkgconf-m4 pkgconf-pkg-config - Add /usr/local paths to pkg-config(1) search path for non RPM builds (boo#1175039) ==== python-rpm-macros ==== Version update (20200714.252de1f -> 20200806.f44d3ac) - Update to version 20200806.f44d3ac: * fix unittest macros ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration - Require /usr/bin/python instead of /bin/python for RHEL-family (bsc#1173936) - Don't install SuSEfirewall2 service files in Factory - Fix __mount_device wrapper to accept separate args and kwargs - Added: * fix-__mount_device-wrapper-254.patch ==== zlib ==== - Permit a deflateParams() parameter change as soon as possible(bsc#1174736) * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551) * bsc1174551-fxi-imcomplete-raw-streams.patch -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

Re: Re : Re: [opensuse-kubic] MicroOS 20200815 Rendered System Broken
by The Undertaker 18 Aug '20

18 Aug '20

Thank you for pointing that blog post out, I did not know about the change. That being said, I am not sure if that is relevant as the post is for july 27th! Personally I did not follow the blog post, since of course I did not know of the change, and because I fall under the type of people who need /tmp partition on disk rather than loaded into memory so I see no reason why I should change anything at the moment. cheers. On Tue, 18 Aug 2020 at 10:16, contact(a)ffreitas.io <contact(a)ffreitas.io> wrote: > > Did you follow the blog post about the migration to tmpfs for /tmp partition [1] ? Maybe it's correlated. > > > Regards, > > Francisco > > > [1] : https://kubic.opensuse.org/blog/2020-07-27-tmp_on_tmpfs/ > > > > Le mar., août 18, 2020 à 06:57, The Undertaker <takertxgs4(a)gmail.com> a écrit : > > I would like to confirm this, I started seeing this very exact > behaviour earlier as well. > > > On Tue, 18 Aug 2020 at 07:58, Jim Heald <james.r.heald(a)gmail.com> wrote: > > > > Hello! I don't know how to communicate "where" the breakage occurred, > > but with my latest snapshot (which was 10x bigger than my other > > snapshots, at 206MB) I observed the following behavior: > > 1. `/tmp` somehow became a mountpoint for `/`. As such, ls'ing /tmp > > and / returned the same results, and /tmp became ro, breaking some of > > my Docker services > > 2. `sudo` took an unreasonable amount of time. Before I decided to > > just become root, running something trivial such as `sudo echo hi` > > took 25 seconds (I typed my password in a previous sudo command) > > I would also like to add a few other points that I have observed in > this case, though still not having any idea what went wrong here. > > 1. The system is generally slower in doing pretty much everything now > compared to before the update, that includes booting, logging in, and > running commands in general. > > 2. upon boot, and before showing the login prompt, I know receive 5 > lines of "failed to start login service" and one line of "failed to > start NTP client/server" > > 3. My HPE Gen 10 DL380 server is in a small server room on a different > floor, but now the NICs don't initiate anymore and I can only service > it in person or through the HP iLO rather than remotely. > > 4. The only out of the ordinary prompt during the update process that > I noticed was: > > "(33/70) Installing: gtk3-tools-3.24.22-1.1.x86_64 [...............done] > Additional rpm output: > update-alternatives: warning: forcing reinstallation of alternative > /usr/bin/gtk-update-icon-cache-3.0 because link group > gtk-update-icon-cache is broken > update-alternatives: warning: skip creation of > /usr/share/man/man1/gtk-update-icon-cache.1.gz because associated file > /usr/share/man/man1/gtk-update-icon-cache-3.0.1.gz (of link group > gtk-update-icon-cache) doesn't exist" > > but I don't have any clue how that pertains to this issue, if at all. > > > Doing `transactional-update > > rollback last` worked flawlessly, > > In my case I rebooted > Start bootloader from read-only snapshot > > chose the previous working snapshot > ran "snapper rollback" when > system successfully rebooted. > > Anything I can help with, count me in as well. > > Cheers. > -- > To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org > To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org > > > -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

5 6

Re: [opensuse-kubic] MicroOS 20200815 Rendered System Broken
by The Undertaker 18 Aug '20

18 Aug '20

On Tue, 18 Aug 2020 at 09:44, Attila Pintér <apinter.it(a)gmail.com> wrote: > > Yep, same issue on this end. Rolling back fixes the issue then transactional-update dup and comment the @tmp mount to /tmp in fstab before a reboot. Seems to solve it for now. I could not replicate this hack for some reason, do you mind to explain more? I checked my fstab after running the transactional-update dup and this is what I had for the /tmp; "UUID=435f85e7-f149-4419-bbef-5c3bafe73add /tmp btrfs subvol=/@/tmp 0 0" which I then changed to "UUID=435f85e7-f149-4419-bbef-5c3bafe73add /tmp btrfs subvol=/tmp 0 0" before updating but I still get the aforementioned issues. am I missing something here? > The most worrying part for me with this issues is that health-checker didn't catch this during boot. Starting it from the system manually does state that the system is not healthy. worrying indeed! > Let me know if I can provide anything for debugging. > > Br, > A. > > On Tue, Aug 18, 2020, 11:57 AM The Undertaker <takertxgs4(a)gmail.com> wrote: >> >> I would like to confirm this, I started seeing this very exact >> behaviour earlier as well. >> >> >> On Tue, 18 Aug 2020 at 07:58, Jim Heald <james.r.heald(a)gmail.com> wrote: >> > >> > Hello! I don't know how to communicate "where" the breakage occurred, >> > but with my latest snapshot (which was 10x bigger than my other >> > snapshots, at 206MB) I observed the following behavior: >> > 1. `/tmp` somehow became a mountpoint for `/`. As such, ls'ing /tmp >> > and / returned the same results, and /tmp became ro, breaking some of >> > my Docker services >> > 2. `sudo` took an unreasonable amount of time. Before I decided to >> > just become root, running something trivial such as `sudo echo hi` >> > took 25 seconds (I typed my password in a previous sudo command) >> >> I would also like to add a few other points that I have observed in >> this case, though still not having any idea what went wrong here. >> >> 1. The system is generally slower in doing pretty much everything now >> compared to before the update, that includes booting, logging in, and >> running commands in general. >> >> 2. upon boot, and before showing the login prompt, I know receive 5 >> lines of "failed to start login service" and one line of "failed to >> start NTP client/server" >> >> 3. My HPE Gen 10 DL380 server is in a small server room on a different >> floor, but now the NICs don't initiate anymore and I can only service >> it in person or through the HP iLO rather than remotely. >> >> 4. The only out of the ordinary prompt during the update process that >> I noticed was: >> >> "(33/70) Installing: gtk3-tools-3.24.22-1.1.x86_64 [...............done] >> Additional rpm output: >> update-alternatives: warning: forcing reinstallation of alternative >> /usr/bin/gtk-update-icon-cache-3.0 because link group >> gtk-update-icon-cache is broken >> update-alternatives: warning: skip creation of >> /usr/share/man/man1/gtk-update-icon-cache.1.gz because associated file >> /usr/share/man/man1/gtk-update-icon-cache-3.0.1.gz (of link group >> gtk-update-icon-cache) doesn't exist" >> >> but I don't have any clue how that pertains to this issue, if at all. >> >> > Doing `transactional-update >> > rollback last` worked flawlessly, >> >> In my case I rebooted > Start bootloader from read-only snapshot > >> chose the previous working snapshot > ran "snapper rollback" when >> system successfully rebooted. >> >> Anything I can help with, count me in as well. >> >> Cheers. >> -- >> To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org >> To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org >> -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

1 0

[opensuse-kubic] MicroOS 20200815 Rendered System Broken
by Jim Heald 18 Aug '20

18 Aug '20

Hello! I don't know how to communicate "where" the breakage occurred, but with my latest snapshot (which was 10x bigger than my other snapshots, at 206MB) I observed the following behavior: 1. `/tmp` somehow became a mountpoint for `/`. As such, ls'ing /tmp and / returned the same results, and /tmp became ro, breaking some of my Docker services 2. `sudo` took an unreasonable amount of time. Before I decided to just become root, running something trivial such as `sudo echo hi` took 25 seconds (I typed my password in a previous sudo command) Let me know if and how I can help debug. Doing `transactional-update rollback last` worked flawlessly, so kudos to you all and the snapper devs! Additionally, there may be an opportunity to add a health checker here... just not sure what weirdness happened with the subvolumes to make mounting my /tmp subvolume mirror my root subvolume (or so it would seem). Let me know if I can help at all! Jim --------------------------------------------------- James Heald Production Engineer Facebook james.r.heald(a)gmail.com -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-kubic+owner(a)opensuse.org

2 1