Packagers - Flag day 2016 Important changes
by Dennis Gilmore
Greetings.
As previously announced, releng has made a number of changes as part of
it's 2016 "flag day".
All package maintainers will want to make sure they have updated to
the
following package versions (some may be in testing as of this email):
python-cccolutils-1.4-1
fedpkg-1.26-2
fedora-packager-0.6.0.0-1
pyrpkg-1.47-3
koji-1.11.0-1
Please also see the following links for up to date information:
https://fedoraproject.org/wiki/ReleaseEngineering/FlagDay2016
The following changes were made:
* koji and the source lookaside were changed to use kerberos
authentication
instead of ssl certificates. All maintainers will need to:
kinit YOUR-FAS-ACCOUNTNAME(a)FEDORAAPROJECT.ORG
to get a valid kerberos TGT and be able to authenticate to koji and
the lookaside upload cgi.
See the general kerberos information at:
https://fedoraproject.org/wiki/Infrastructure_kerberos_authentication
for more details.
Additionally, via GSSAPI many browsers allow you to seamlessly login
to any of our ipsilon using applications simply by clicking on the
login
button ( bodhi, fedorahosted trac, elections, fedocal, mailman3, etc)
* koji now uses a well known cert for https.
* pkgs.fedoraproject.org now redirects to https://src.fedoraproject.org
and
that uses a well known cert. Please correct any links you use to use
https://src.fedoraproject.org for packages spec and patch files.
* rawhide builds now land in the f26-pending tag, where they are signed
and then
added to the f26 tag for compose in the next rawhide compose. This
allows
rawhide packages to be fully signed as well as a point where automated
QA
can take place in the future.
* packages "sources" files now use sha512 by default instead of md5.
You will need the fedpkg update in order to create and use these new
checksums.
Questions or concerns as always welcome at #fedora-admin on
irc.freenode.net
or tickets at https://pagure.io/fedora-infrastructure.
7 years, 4 months
- 1
- 0
F26 Self Contained Change: Authconfig Cleanup
by Jan Kurik
= Proposed Self Contained Change: Authconfig Cleanup =
https://fedoraproject.org/wiki/Changes/AuthconfigCleanup
Change owner(s):
* Tomáš Mráz <tmraz AT redhat DOT com>
Removal of obsolete and unmaintainable code from Authconfig such as
the support for configuring Hesiod and the authconfig GTK2 based GUI
and TUI.
== Detailed Description ==
There is plentiful of Authconfig code that is not really usable in the
modern environment such as the support for WINS or Hesiod. Also the
TUI and GUI of Authconfig is using unmaintained libraries such as
GTK+2 and Glade. There are no resources to further develop these and
port them to current GUI toolkits. The TUI was declared as deprecated
a very long time ago. The current modern environments support
autoconfiguration of the remote user identity and authentication via
Realmd and SSSD and do not need any manual configuration through GUI.
There is also an effort underway to develop a new tool for setup of
PAM and NSSWITCH with better use of SSSD. But we understand that some
of the command line functionality of Authconfig might still be useful
in some environments and also to support the Anaconda kickstart %auth
command. To keep the Authconfig code maintainable in future (in a kind
of legacy mode) we need to cut out the parts that are not maintainable
anymore or just complicate the code without any real user benefit.
== Scope ==
* Proposal owners:
Cleanup the Authconfig code, release a new upstream version and import
it to Fedora.
* Other developers:
N/A (not a System Wide Change)
* Release engineering:
N/A (not a System Wide Change)
* List of deliverables:
N/A (not a System Wide Change)
* Policies and guidelines:
N/A (not a System Wide Change)
* Trademark approval:
N/A (not needed for this Change)
--
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
7 years, 4 months
- 1
- 0
F26 System Wide Change: Enable coredumpctl by default
by Jan Kurik
= System Wide Change: Enable coredumpctl by default =
https://fedoraproject.org/wiki/Changes/coredumpctl
Change owner(s):
* Michael Catanzaro <mcatanzaro AT gnome DOT org>
Enable coredumpctl by default. Core dumps will be stored in the system
journal rather than created in the crashing process's current working
directory by ABRT.
== Detailed Description ==
coredumpctl will be enabled by default. Core dumps will now be stored
in the systemd journal, rather than created in the crashing process's
current working directory by ABRT. Currently abrt-ccpp.service
installs its own core pattern to /proc/sys/kernel/core_pattern that
overrides the core pattern set by systemd. We will simply disable
abrt-ccpp.service in the Fedora systemd presets to avoid this. This is
of course only a change in default behavior. It will still be possible
and easy to revert to the previous Fedora behavior by enabling and
starting abrt-ccpp.service, or to traditional Linux behavior by
overriding the sysctl variable kernel.core_pattern.
Note that coredumpctl is intended as a developer tool, not as an
automatic bug reporting tool nor as a replacement for ABRT. ABRT will
continue to automatically report C and C++ crashes to the Fedora
Analysis Framework (FAF), and users will still be able to manually
report crashes to Red Hat Bugzilla using ABRT's Problem Reporting
application. Nor does coredumpctl replace ABRT's ability to catch
non-C/C++ issues like Java exceptions, Python exceptions, or machine
check events. ABRT remains an important component of Fedora, and will
continue to function largely as before as it has support for
retrieving core files from the system journal using
abrt-vmcore.service. However, it must be admitted that ABRT's feature
set will be slightly smaller with abrt-ccpp.service disabled. Notably,
crash-time stacktraces will no longer be available as all stacktraces
will be generated from core files extracted from the system journal.
This could result in reduced-quality for the truncated stacktraces
that are used in FAF and the first comment in Bugzilla, but it will
not affect the detailed stacktraces that are uploaded as Bugzilla
attachments.
== Scope ==
* Proposal owners:
We will disable abrt-ccpp.service in our systemd presets. That's it.
* Other developers:
We request some assistance from SELinux developers to address an
incompatibility between SELinux and coredumpctl that was introduced in
Fedora 24, RHBZ #1341829.
* Release engineering: No changes needed
* List of deliverables: No changes needed
* Policies and guidelines: No changes needed
* Trademark approval: Not needed for this change
--
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
7 years, 4 months
- 1
- 0