Mass Rebuild for Fedora 21
by Dennis Gilmore
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi All,
It was requested in https://fedorahosted.org/rel-eng/ticket/5877
that we do a mass rebuild for Fedora 21 for
https://fedoraproject.org/wiki/Changes/GCC49
https://fedoraproject.org/wiki/Changes/F21Make40
https://fedoraproject.org/wiki/Changes/Java8
we will start the mass rebuild on 2014-06-06, all existing side tags
and anything that you wish to land in Fedora before the mass rebuild
needs to be completed by 2014-04-26. we will be merging over all side
tags at that point and removing the targets for them.
This is a heads up that it will be done in a side tag and moved over
when completed. We will be running scripts to output failure stats.
please be sure to let releng know if you see any bugs in the reporting.
Dennis
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)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=aG6O
-----END PGP SIGNATURE-----
9 years, 4 months
F21 Self Contained Change: Serf 0.4.5
by Jaroslav Reznik
= Proposed Self Contained Change: Serf 0.4.5 =
https://fedoraproject.org/wiki/Changes/Serf_0.4.5
Change owner(s): Jeff Schroeder <jeffschroeder(a)computer.org>
Serf [1] is a decentralized solution for service discovery and orchestration
that is lightweight, highly available, and fault tolerant. This change is to
package serf for Fedora users.
== Detailed Description ==
This is the first set of dependencies for serf. After these are merged, the
second set of dependencies can be independently reviewed and merged. Finally,
once all of the dependencies are available in fedora, serf can be packaged.
https://fedoraproject.org/wiki/Changes/Serf_0.4.5#Detailed_Description
== Scope ==
* Proposal owners: Package dependencies and serf itself.
* Other developers: N/A (not a System Wide Change)
* Release engineering: N/A (not a System Wide Change)
* Policies and guidelines: N/A (not a System Wide Change)
[1] http://www.serfdom.io/
9 years, 4 months
F21 System Wide Change: Web Assets
by Jaroslav Reznik
= Proposed System Wide Change: Web Assets =
https://fedoraproject.org/wiki/Changes/Web_Assets
Change owner(s): T.C. Hollingsworth <tchollingsworth(a)gmail.com>
This is multi-release change, already approved for Fedora 20.
https://lists.fedoraproject.org/pipermail/devel-announce/2013-July/001197...
Traditionally, Fedora has been pushing bits from its various servers to
people's browsers in an ad-hoc fashion, and issues surrounding JavaScript have
been swept under the rug. This change proposal provides a simple framework for
shipping static web content and a way forward to treat JavaScript more closely
to other code in the distribution.
== Detailed Description ==
A standard directory (/usr/share/web-assets) for static bits that are intended
to be delivered to web browsers, such as CSS Frameworks, UI libraries, etc.
will be introduced. HTTP daemons in the distribution should make this
directory available publicly as /.sysassets.
Additionally, a standard directory (/usr/share/javascript) for JavaScript
code, which may be used in browsers or server-side by applications such as
nodejs or rubygem-execjs will also be introduced.
Finally, new packaging guidelines [1] will provide instructions for making
proper use of these new directories.
== Scope ==
See https://fedoraproject.org/wiki/Changes/Web_Assets#Scope
[1] https://fedoraproject.org/wiki/User:Patches/PackagingDrafts/Web_Assets
9 years, 4 months
F21 Self Contained Change: SSSD GPO-Based Access Control
by Jaroslav Reznik
= Proposed Self Contained Change: SSSD GPO-Based Access Control =
https://fedoraproject.org/wiki/Changes/SssdGpoBasedAccessControl
Change owner(s): Yassir Elley <yelley(a)redhat.com>
This change will enhance SSSD, by adding support for centrally managed host-
based access control in an Active Directory (AD) environment, using Group
Policy Objects (GPOs).
== Detailed Description ==
GPO policy settings are commonly used to manage host-based access control in
an AD environment. The two specific GPO policy settings ("Allow Log On
Locally" and "Deny Log On Locally") essentially serve as a whitelist and
blacklist of domain users/groups that are consulted to determine whether logon
access to a particular domain computer should be granted. When dealing with
GPOs, there is typically a management piece (used to specify the policy
settings) and a client-side processing piece (used to retrieve and enforce the
policy settings). Since the two policy settings of interest already exist in
AD, administrators can continue to use existing mechanisms to specify the
whitelist and blacklist (e.g. Group Policy Management Console, or GPMC). As
such, this change is related only to the retrieval and enforcement of policy
settings. This change only affects SSSD's AD provider. It has no effect on any
other SSSD providers (e.g. IPA provider).The upstream design page that
includes deeper technical details can be found in the SSSD Trac [1].
== Scope ==
Since this functionality would only be used by SSSD's AD provider, it would be
included as part of the sssd-ad package. This feature would be enabled by
default, but a build switch would be provided for those who do not wish to
deploy this functionality.
* Other developers: N/A (not a System Wide Change)
* Release engineering: N/A (not a System Wide Change)
* Policies and guidelines: N/A (not a System Wide Change)
[1] http://fedorahosted.org/sssd/wiki/DesignDocs/ActiveDirectoryGPOIntegration
9 years, 4 months
F21 Self Contained Change: Web Application Authentication
by Jaroslav Reznik
= Proposed Self Contained Change: Web Application Authentication =
https://fedoraproject.org/wiki/Changes/Web_App_Authentication
Change owner(s): Jan Pazdziora <jpazdziora(a)redhat.com>, Jakub Hrozek
On operating system level, there are numerous authentication and identity
lookup mechanisms, some of them using sssd. With new Apache modules and new
sssd, some of those mechanisms become more easily consumable by web
applications. Various web application environments and frameworks can then
consume results of the authentication and information retrieval using
environment variables similar to REMOTE_USER.
== Detailed Description ==
With mod_authnz_pam, PAM authentication and access checks are available to web
applications, allowing wider combination of authentication and access
controls. One specific target is host-based access control rules of FreeIPA
for Kerberos SSO via pam_sss and sssd.
The mod_intercept_form_submit module makes it possible to enable the PAM
authentication of mod_authnz_pam on normal logon form handling paths, which
can then be consumed by web application with fairly minimal changes.
The mod_lookup_identity uses sssd-dbus to retrieve additional attributes like
name, email address, or group membership, and populates environment variables
for easy consumption of this information by web applications.
The sssd-dbus implements new service ifp which provides access to additional
user-related pieces of information.
== Scope ==
* Proposal owners: Three new packages (Apache modules) and rebase of sssd.
* Other developers: N/A (not a System Wide Change)
* Release engineering: N/A (not a System Wide Change)
* Policies and guidelines: N/A (not a System Wide Change)
9 years, 4 months
F21 Self Contained Change: Review Board 2.0
by Jaroslav Reznik
= Proposed Self Contained Change: Review Board 2.0 =
https://fedoraproject.org/wiki/Changes/ReviewBoard2
Change owner(s): Stephen Gallagher <sgallagh(a)redhat.com>
Review Board is a powerful tool for managing patch reviews.
== Detailed Description ==
Review Board integrates with many types of repository (svn, git, mercurial,
perforce and more) as well as popular hosting environments such as Fedora
Hosted, Github and Bitbucket. It provides a powerful and clean interface to
managing patches for review.
Review Board 2.0 adds the ability to post committed changes from a branch
directly from the web UI, adds review of text file attachments, greatly
extends the capabilities of the public API and extension framework, and offers
significant performance improvements, usability enhancements, and visual
cleanups.
== Scope ==
* Proposal owners: Review Board 2.0 RC3 is in Rawhide today and will be
upgraded to 2.0 final when it is released (expected by the end of May, 2014)
* Other developers: N/A (not a System Wide Change)
* Release engineering: N/A (not a System Wide Change)
* Policies and guidelines: N/A (not a System Wide Change)
9 years, 4 months