Wiki -> https://fedoraproject.org/wiki/Changes/ArmMinimalImageOSBuild
This is a proposed Change for Fedora Linux.
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
Build the Arm minimal image to be built using osbuild.
== Owner ==
* Name: [[User:pbrobinson| Peter Robinson]]
* Email: <pbrobinson(a)fedoraproject.org>
== Detailed Description ==
The Fedora Arm Minimal image is widely used as a base for various
usecases from low level board bring up right through to the basis of
other images. Over time the existing ImageFactory build process has
stagnated limiting our ability to enhance this image. The osbuild team
have worked with the Arm SIG to enable a number of enhancements around
things like Arm SystemReady and other such functionality to improve
this image creation process and to make it easier to use these images
with a much wider range of Arm devices making it easier to bring up
new types of Arm device in Fedora. In the future we are planning
further enhancements to ensure it's easy for developers and users to
make use of the Fedora within the Arm ecosystem.
== Feedback ==
<!-- Summarize the feedback from the community and address why you
chose not to accept proposed alternatives. This section is optional
for all change proposals but is strongly suggested. Incorporating
feedback here as it is raised gives FESCo a clearer view of your
proposal and leaves a good record for the future. If you get no
feedback, that is useful to note in this section as well. For
innovative or possibly controversial ideas, consider collecting
feedback before you file the change proposal. -->
== Benefit to Fedora ==
The Fedora arm Minimal Image currently requires a number of changes
and hacks to be used on specific devices or SoCs, the move to osbuild
will reduce or entirely eliminate these hacks right away with further
enhancements coming in the future.
== Scope ==
* Proposal owners:
The proposal owners will:
** Enable the creation of Minimal image using osbuild in pungi
** Test the available artifacts
* Other developers:
* Release engineering: [https://pagure.io/releng/issues #Releng issue
number] <!-- REQUIRED FOR SYSTEM WIDE CHANGES -->
Changes to the pungi config to use osbuild for minimal image will be
submitted as a PR by feature owners.
* Policies and guidelines: N/A (not needed for this Change)
* Trademark approval: N/A (not needed for this Change)
* Alignment with Community Initiatives:
== Upgrade/compatibility impact ==
No upgrade impact. Only for new users.
== How To Test ==
There will be a new Minimal Image, it will be testable in the same way
as the old image. Test various SoCs with arm-image-installer to ensure
devices boot and run as expected.
== User Experience ==
There should be no change to the user experience for existing users.
We will enable the wider use of
== Dependencies ==
All changes are already in osbuild but we will work with the osbuild
team if any issues arise.
== Contingency Plan ==
The contingency plan is to build the Arm minimal image in the same way
we currently do.
== Documentation ==
There should be no changes required to documentation for existing
users, docs will be updated for specific devices where enhancements
have been made.
== Release Notes ==
TBD.
--
Aoife Moloney
Fedora Operations Architect
Fedora Project
Matrix: @amoloney:fedora.im
IRC: amoloney
--
_______________________________________________
devel-announce mailing list -- devel-announce(a)lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave(a)lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedorapr…
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Wiki -> https://fedoraproject.org/wiki/Changes/Deprecate_ntlm_in_cyrus_sasl
This is a proposed Change for Fedora Linux.
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
NTLM has been deprecated for years and is obsolete. Support for it
should be removed as a SASL mechanism. This is no longer supported by
cyrus-sasl upstream. The cyrus-sasl-ntlm subpackage should be removed.
== Owner ==
* Name: [[User:rcritten| Rob Crittenden]]
* Email: rcritten(a)redhat.com.
== Detailed Description ==
NTLM authentication is a family of authentication protocols to
authenticate users and computers. It has been supplanted by more
secure protocols (e.g. Kerberos).
[https://specopssoft.com/blog/microsoft-phases-out-ntlm-with-kerberos/
Microsoft is removing support for NTLM in favor of Kerberos in Windows
to boost security]
[https://en.wikipedia.org/wiki/NTLM#Availability_and_use_of_NTLM Since
2010, Microsoft no longer recommends NTLM in applications:]
Implementers should be aware that NTLM does not support any recent
cryptographic methods, such as AES or SHA-256. It uses cyclic
redundancy checks (CRC) or MD5 for integrity, and RC4 for encryption.
Deriving a key from a password is as specified in RFC1320 and
FIPS46-2. Therefore, applications are generally advised not to use
NTLM.
== Feedback ==
== Benefit to Fedora ==
The cyrus-sasl project dropped support for the ntlm plugin in July,
2023. This proposal removes an unsupported and insecure protocol.
Without upstream support from upstream this plugin is potentially a
heavy burden for Fedora packagers and a risk to security.
== Scope ==
* Proposal owners:
Proposal owner: Deprecate cyrus-sasl-ntlm. This will allow for
sub-package from the distribution in a future release.
* Other developers:
** There do not appear to be any packages that rely on cyrus-sasl-ntlm
* Release engineering:
Some coordination may be necessary so the subpackage never appears in
a given Fedora release. Ideally it is removed in rawhide before the
Fedora-next fork.
* Policies and guidelines: Release notes will be needed to announce
the deprecation and removal.
* Trademark approval: N/A (not needed for this Change)
* Alignment with Community Initiatives: N/A
== Upgrade/compatibility impact ==
Existing users of cyrus-sasl-ntlm will need to authenticate using a
different mechanism.
== How To Test ==
This will only affect a narrow set of users. It will be an exercise
for the end-user to determine which mechanism(s) may be a suitable
replacement.
== User Experience ==
This will not be visible to users that aren't using cyrus-sasl-ntml.
It will be '''very''' visible to those that are as they will have to
revise their authentication configuration in order to upgrade or
install the cyrus-sasl package.
== Dependencies ==
None.
== Contingency Plan ==
The proposal involves removing a subpackage from the spec file. There
backup plan is to not do it.
== Documentation ==
This was removed in upstream PR
https://github.com/cyrusimap/cyrus-sasl/issues/708
== Release Notes ==
--
Aoife Moloney
Fedora Operations Architect
Fedora Project
Matrix: @amoloney:fedora.im
IRC: amoloney
--
_______________________________________________
devel-announce mailing list -- devel-announce(a)lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave(a)lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedorapr…
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Hello,
In my packager dashboard there are six AusweisApp2 bugs listed, all of
them are actually resolved. The bugs currently open are not listed
either. Is this a known problem?
Best regards,
Julian
Plese note that as part of the update to Gedit 46, the following
packages will break ABI:
* amtk: renamed to libgedit-amtk, review needed:
https://bugzilla.redhat.com/show_bug.cgi?id=2258912
* tepl
* gedit
Affected packages are gedit-plugins which needs to be updated to match
gedit, and (gnome-)genius which just needs a rebuild. This will be
done in a side-tag for rawhide only once the mass rebuild is complete
and libgedit-amtk is approved.
--
Yaakov Selkowitz
Principal Software Engineer - Emerging RHEL
Red Hat, Inc.
Text Log: https://meetbot.fedoraproject.org/meeting-1_matrix_fedoraproject-org/2024-0…
HTML Log: https://meetbot.fedoraproject.org/meeting-1_matrix_fedoraproject-org/2024-0…
Text Minutes: https://meetbot.fedoraproject.org/meeting-1_matrix_fedoraproject-org/2024-0…
HTML Minutes: https://meetbot.fedoraproject.org/meeting-1_matrix_fedoraproject-org/2024-0…
=====================================
# #meeting-1:fedoraproject.org: fedora_coreos_meeting
=====================================
Meeting started by @dustymabe:matrix.org at 2024-01-17 16:29:18
Meeting summary
---------------
* TOPIC: roll call (@dustymabe:matrix.org, 16:29:23)
* TOPIC: Action items from last meeting (@dustymabe:matrix.org, 16:35:27)
* TOPIC: there are no action items from the last meeting.
(@dustymabe:matrix.org, 16:35:44)
* TOPIC: Platform Request: Proxmox (@dustymabe:matrix.org, 16:35:58)
* LINK: https://github.com/coreos/fedora-coreos-tracker/issues/736
(@dustymabe:matrix.org, 16:36:05)
* INFO: there is work going on that should make proxmox easier to
add FCOS support for if a motivated individual came along:
https://github.com/coreos/fedora-coreos-tracker/issues/736#issuecomment-189…
(@dustymabe:matrix.org, 16:51:29)
* AGREED: We will reserve the `proxmoxve` platform ID for the
proxmox platform. (@dustymabe:matrix.org, 16:54:42)
* TOPIC: Podman v5 breaking changes (@dustymabe:matrix.org, 16:56:45)
* LINK: https://github.com/coreos/fedora-coreos-tracker/issues/1629
(@dustymabe:matrix.org, 16:56:53)
* INFO: we are looking for a volunteer to drive the process to
help users migrate older systems to newer settings that will allow
them to adopt podman v5 without issue (@dustymabe:matrix.org,
17:04:56)
* TOPIC: Open Floor (@dustymabe:matrix.org, 17:07:43)
Meeting ended at 2024-01-17 17:13:47
Action items
------------
People Present (lines said)
---------------------------
* @dustymabe:matrix.org (43)
* @jlebon:fedora.im (18)
* @zodbot:fedora.im (9)
* @apiaseck:matrix.org (3)
* @mnguyen:fedora.im (3)
* @jbtrystram:matrix.org (3)
* @meetbot:fedora.im (2)
* @gurssing:matrix.org (2)
* @buckaroogeek:fedora.im (2)
* @marmijo:fedora.im (2)