From glen at pld-linux.org Tue Sep 1 20:42:29 2015 From: glen at pld-linux.org (=?UTF-8?B?RWxhbiBSdXVzYW3DpGU=?=) Date: Tue, 01 Sep 2015 21:42:29 +0300 Subject: rpm unwanted autodep In-Reply-To: References: <55DD7EF9.6040503@pld-linux.org> <55DD80FF.4070504@pld-linux.org> Message-ID: <55E5F195.1080103@pld-linux.org> On 31.08.2015 01:40, Jeffrey Johnson wrote: >> On Aug 30, 2015, at 6:36 PM, Jeffrey Johnson wrote: >> >> >>> On Aug 26, 2015, at 5:03 AM, Elan Ruusam?e wrote: >>> >>> On 26.08.2015 11:55, Elan Ruusam?e wrote: >>>> hi >>>> >>>> how to avoid rpm to generate python(abi) dependency on this file >>> i tried to input bunch of junk in front of the file, but file-5.24 is SOOOO persistent, it still considers it as python: >>> >> Try >> chmod -x lib/fpm/package/pyfpm/get_metadata.py >> to disable automated dependencies >> >> If you really need +x when installed, then add a %attr in %files (rather then adding chmod +x in %post). >> > Yes you trued this. There are certain cases where the *.py suffix is used instead of > the execute bit for dispatching. > > I personally consider using paths or suffix?s (instead of content) a bug, but I have been > out-shouted by others over the years. > > hah so used _noautoreqfiles macro https://github.com/pld-linux/fpm/commit/2a24ca30d7e85b0e4d9a8680f634819e097999f7 aside, content check here is worse than extension check. i needed to input 5mb junk beginning of file to prevent file(1) detecting content as python! -- glen From n3npq at me.com Tue Sep 1 20:49:31 2015 From: n3npq at me.com (Jeffrey Johnson) Date: Tue, 01 Sep 2015 14:49:31 -0400 Subject: rpm unwanted autodep In-Reply-To: <55E5F195.1080103@pld-linux.org> References: <55DD7EF9.6040503@pld-linux.org> <55DD80FF.4070504@pld-linux.org> <55E5F195.1080103@pld-linux.org> Message-ID: <0217E31A-9981-4234-B888-4EA79AA5C267@me.com> > > so used _noautoreqfiles macro > > https://github.com/pld-linux/fpm/commit/2a24ca30d7e85b0e4d9a8680f634819e097999f7 > > aside, content check here is worse than extension check. > i needed to input 5mb junk beginning of file to prevent file(1) detecting content as python! > (aside) You just created a role with 5Mb of ?yes? with extension *.py. The word ?yes? in content is hardly valid python as indicated by the extension *.py Yes the content checks in file(1) are rather primitive and often have false positives. The buffer used to be 65Kb years ago. I doubt the larger buffer increases the accuracy of the keyword based content check. 73 de Jeff > > -- > glen > > _______________________________________________ > pld-devel-en mailing list > pld-devel-en at lists.pld-linux.org > http://lists.pld-linux.org/mailman/listinfo/pld-devel-en From jan.palus at gmail.com Tue Sep 1 21:27:37 2015 From: jan.palus at gmail.com (Jan Palus) Date: Tue, 1 Sep 2015 21:27:37 +0200 Subject: Failed delivery of build request Message-ID: <20150901192737.GA1158@cukinia.lan> Could someone have a look why build request sent on Aug 30 keeps on failing? On 01.09.2015 19:18, Mail Delivery Subsystem wrote: > This is an automatically generated Delivery Status Notification > > THIS IS A WARNING MESSAGE ONLY. > > YOU DO NOT NEED TO RESEND YOUR MESSAGE. > > Delivery to the following recipient has been delayed: > > builderth at pld-linux.org > > Message will be retried for 1 more day(s) > > Technical details of temporary failure: > Google tried to deliver your message, but it was rejected by the server for the recipient domain pld-linux.org by b.mx.pld-linux.org. [217.149.246.12]. > > The error that the other server returned was: > 452 4.3.1 Insufficient system storage > > > ----- Original message ----- > > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; > d=gmail.com; s=20120113; > h=sender:date:from:to:subject:message-id; > bh=WGnmFPncFP3x+Sp6pv9u3LXOx4w5E7/8wHd5fMrvSCw=; > b=mQ+OVhQl4XUr3mA2IagGOXwkVQIoavAfk33l+buIE7zgisnhHi0LfMpjP5lKjhXZhO > WWPsCKoX3CxIfVL5/fbZnCM6zUvwLP0mVv/IZRkVa0EnJM12vx0HhJIBAzq7IHW0QXvJ > Lxa5xTJOi1FNkotAiWhPLNAw0p+YP/7QTNYL1u4fN27JwXB+tJhwqhqseaHhbTwSiO6a > JLGKnXRKdnVXWINtu8xzesUPIvd50OpoJXwrCkeI59PZg6gODX2DaPi36nEE83nx06Qb > 58mUpou0lZl+P7YyLmlyzTQR8ONfHxiftLjhGfGZAmyDVjMNkNCZ74P/YRwb1LSKLfxE > 6e7A== > X-Received: by 10.180.20.210 with SMTP id p18mr11847576wie.6.1440940674877; > Sun, 30 Aug 2015 06:17:54 -0700 (PDT) > Return-Path: > Received: from localhost (dlb37.neoplus.adsl.tpnet.pl. [83.24.31.37]) > by smtp.gmail.com with ESMTPSA id en5sm13161299wib.18.2015.08.30.06.17.49 > for > (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); > Sun, 30 Aug 2015 06:17:53 -0700 (PDT) > Sender: Jan Palus > Date: Sun, 30 Aug 2015 15:17:49 +0200 > From: atler at pld-linux.org > To: builderth at pld-linux.org > Subject: build request > Message-Id: > X-New-PLD-Builder: request > X-Requester-Version: 1.87 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > 2 > > > pidgin-sipe.spec > HEAD > > > > > > th-* > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1 > > iQEcBAEBAgAGBQJV4wJ9AAoJEG1dyvySXCLzhnAIAI8vxPliNdP6daL8T8neDKdH > qKnxvRJGO7dW9Yk4zTlfMlDpkKKsoppPatTt3WGiT2xV7QFViiAb5FUCj55NYltb > Nt13FSVNcWO8c6xg57R+khZFyKNmH7G/nO7jgfmXHYsIUdFXSqgOwtrOVTEUNIVB > OiPstztlIe9GnvprkAHLoez/w2OnnG0Mpjd2032PSXjpBab9GYNCbQ7Qs6mR+GAN > kR3kQYvOLsx64cKexwTkHGE+3ZSbfPsv3SlzDOhuVNWIwfeFnqMN+sn03GVlGzm5 > cTmwVCswGZdxDHUBRiVZ85pYNPv8ZznYWHQRyQwU05IUp5Stb8Enj4eUpFVsrl0= > =IuNy > -----END PGP SIGNATURE----- From glen at pld-linux.org Wed Sep 2 08:42:49 2015 From: glen at pld-linux.org (=?ISO-8859-1?Q?Elan_Ruusam=E4e?=) Date: Wed, 02 Sep 2015 09:42:49 +0300 Subject: Failed delivery of build request In-Reply-To: <20150901192737.GA1158@cukinia.lan> References: <20150901192737.GA1158@cukinia.lan> Message-ID: <55E69A69.4000009@pld-linux.org> this looks like rather one of the builderth at pld-linux.org alias recipients mailbox is full. likely forwarded to google. ps: i wonder is it possible to have forward bounces being discarded, like it was mailinglist not alias? ps2: i have also some 550 issues with glen at pld-linux.org forward, i mailed postmaster at pld-linux.org but none of them have replied to me. On 01.09.2015 22:27, Jan Palus wrote: > Could someone have a look why build request sent on Aug 30 keeps on > failing? > > On 01.09.2015 19:18, Mail Delivery Subsystem wrote: >> This is an automatically generated Delivery Status Notification >> >> THIS IS A WARNING MESSAGE ONLY. >> >> YOU DO NOT NEED TO RESEND YOUR MESSAGE. >> >> Delivery to the following recipient has been delayed: >> >> builderth at pld-linux.org >> >> Message will be retried for 1 more day(s) >> >> Technical details of temporary failure: >> Google tried to deliver your message, but it was rejected by the server for the recipient domain pld-linux.org by b.mx.pld-linux.org. [217.149.246.12]. >> >> The error that the other server returned was: >> 452 4.3.1 Insufficient system storage >> >> >> ----- Original message ----- >> >> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; >> d=gmail.com; s=20120113; >> h=sender:date:from:to:subject:message-id; >> bh=WGnmFPncFP3x+Sp6pv9u3LXOx4w5E7/8wHd5fMrvSCw=; >> b=mQ+OVhQl4XUr3mA2IagGOXwkVQIoavAfk33l+buIE7zgisnhHi0LfMpjP5lKjhXZhO >> WWPsCKoX3CxIfVL5/fbZnCM6zUvwLP0mVv/IZRkVa0EnJM12vx0HhJIBAzq7IHW0QXvJ >> Lxa5xTJOi1FNkotAiWhPLNAw0p+YP/7QTNYL1u4fN27JwXB+tJhwqhqseaHhbTwSiO6a >> JLGKnXRKdnVXWINtu8xzesUPIvd50OpoJXwrCkeI59PZg6gODX2DaPi36nEE83nx06Qb >> 58mUpou0lZl+P7YyLmlyzTQR8ONfHxiftLjhGfGZAmyDVjMNkNCZ74P/YRwb1LSKLfxE >> 6e7A== >> X-Received: by 10.180.20.210 with SMTP id p18mr11847576wie.6.1440940674877; >> Sun, 30 Aug 2015 06:17:54 -0700 (PDT) >> Return-Path: >> Received: from localhost (dlb37.neoplus.adsl.tpnet.pl. [83.24.31.37]) >> by smtp.gmail.com with ESMTPSA id en5sm13161299wib.18.2015.08.30.06.17.49 >> for >> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); >> Sun, 30 Aug 2015 06:17:53 -0700 (PDT) >> Sender: Jan Palus >> Date: Sun, 30 Aug 2015 15:17:49 +0200 >> From: atler at pld-linux.org >> To: builderth at pld-linux.org >> Subject: build request >> Message-Id: >> X-New-PLD-Builder: request >> X-Requester-Version: 1.87 >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> >> >> 2 >> >> >> pidgin-sipe.spec >> HEAD >> >> >> >> >> >> th-* >> >> >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1 >> >> iQEcBAEBAgAGBQJV4wJ9AAoJEG1dyvySXCLzhnAIAI8vxPliNdP6daL8T8neDKdH >> qKnxvRJGO7dW9Yk4zTlfMlDpkKKsoppPatTt3WGiT2xV7QFViiAb5FUCj55NYltb >> Nt13FSVNcWO8c6xg57R+khZFyKNmH7G/nO7jgfmXHYsIUdFXSqgOwtrOVTEUNIVB >> OiPstztlIe9GnvprkAHLoez/w2OnnG0Mpjd2032PSXjpBab9GYNCbQ7Qs6mR+GAN >> kR3kQYvOLsx64cKexwTkHGE+3ZSbfPsv3SlzDOhuVNWIwfeFnqMN+sn03GVlGzm5 >> cTmwVCswGZdxDHUBRiVZ85pYNPv8ZznYWHQRyQwU05IUp5Stb8Enj4eUpFVsrl0= >> =IuNy >> -----END PGP SIGNATURE----- > _______________________________________________ > pld-devel-en mailing list > pld-devel-en at lists.pld-linux.org > http://lists.pld-linux.org/mailman/listinfo/pld-devel-en -- glen From arekm at maven.pl Wed Sep 2 08:51:45 2015 From: arekm at maven.pl (Arkadiusz =?utf-8?q?Mi=C5=9Bkiewicz?=) Date: Wed, 2 Sep 2015 08:51:45 +0200 Subject: Failed delivery of build request In-Reply-To: <20150901192737.GA1158@cukinia.lan> References: <20150901192737.GA1158@cukinia.lan> Message-ID: <201509020851.45910.arekm@maven.pl> On Tuesday 01 of September 2015, Jan Palus wrote: > Could someone have a look why build request sent on Aug 30 keeps on > failing? One of (unmaintained btw as all postmasters are gone I think) MXes had: rootfs 2.0G 1.9G 0 100% / I've deleted few things to make more space there. -- Arkadiusz Mi?kiewicz, arekm / ( maven.pl | pld-linux.org ) From glen at pld-linux.org Wed Sep 2 09:22:29 2015 From: glen at pld-linux.org (=?UTF-8?B?RWxhbiBSdXVzYW3DpGU=?=) Date: Wed, 02 Sep 2015 10:22:29 +0300 Subject: Failed delivery of build request In-Reply-To: <201509020851.45910.arekm@maven.pl> References: <20150901192737.GA1158@cukinia.lan> <201509020851.45910.arekm@maven.pl> Message-ID: <55E6A3B5.8000209@pld-linux.org> On 02.09.2015 09:51, Arkadiusz Mi?kiewicz wrote: > On Tuesday 01 of September 2015, Jan Palus wrote: >> Could someone have a look why build request sent on Aug 30 keeps on >> failing? > One of (unmaintained btw as all postmasters are gone I think) MXes had: > > rootfs 2.0G 1.9G 0 100% / > > I've deleted few things to make more space there. > can we move mx handling of @pld-linux.org to google? does google still offer that for free? -- glen From adamg at pld-linux.org Wed Sep 2 12:57:24 2015 From: adamg at pld-linux.org (Adam Golebiowski) Date: Wed, 2 Sep 2015 12:57:24 +0200 Subject: Failed delivery of build request In-Reply-To: <55E69A69.4000009@pld-linux.org> References: <20150901192737.GA1158@cukinia.lan> <55E69A69.4000009@pld-linux.org> Message-ID: <20150902105723.GA20312@adamg.eu> On Wed, Sep 02, 2015 at 09:42:49AM +0300, Elan Ruusam?e wrote: > ps2: i have also some 550 issues with glen at pld-linux.org forward, i > mailed postmaster at pld-linux.org but none of them have replied to me. I am rarely looking at my @pld-linux.org alias, but did not get anything from you for at least couple of months ... From glen at pld-linux.org Wed Sep 2 13:35:37 2015 From: glen at pld-linux.org (=?UTF-8?B?RWxhbiBSdXVzYW3DpGU=?=) Date: Wed, 02 Sep 2015 14:35:37 +0300 Subject: Failed delivery of build request In-Reply-To: <20150902105723.GA20312@adamg.eu> References: <20150901192737.GA1158@cukinia.lan> <55E69A69.4000009@pld-linux.org> <20150902105723.GA20312@adamg.eu> Message-ID: <55E6DF09.5060307@pld-linux.org> On 02.09.2015 13:57, Adam Golebiowski wrote: > On Wed, Sep 02, 2015 at 09:42:49AM +0300, Elan Ruusam?e wrote: >> ps2: i have also some 550 issues with glen at pld-linux.org forward, i >> mailed postmaster at pld-linux.org but none of them have replied to me. > I am rarely looking at my @pld-linux.org alias, but did not get anything > from you for at least couple of months ... perhaps postmaster at pld-linux.org alias is (was?) broken too then! -- glen From baggins at pld-linux.org Mon Sep 7 07:15:53 2015 From: baggins at pld-linux.org (Jan =?utf-8?Q?R=C4=99korajski?=) Date: Mon, 7 Sep 2015 07:15:53 +0200 Subject: [packages/systemd] removed depreciated /etc/timezone, fixed /var/log/btmp group and mode, adjusted /etc/machine-id and In-Reply-To: References: Message-ID: <20150907051553.GA3869@home.lan> On Sun, 06 Sep 2015, gotar wrote: > commit e8e38afd6e273980031bf6d52444dc5afda5fe79 > Author: Tomasz Pala > Date: Sun Sep 6 20:18:16 2015 +0200 > > removed depreciated /etc/timezone, fixed /var/log/btmp group and mode, > adjusted /etc/machine-id and /var/lib/machines modes > > systemd.spec | 23 +++++++++++------------ > 1 file changed, 11 insertions(+), 12 deletions(-) ehem, what are the following changes supposed to accomplish? > @@ -1104,11 +1104,10 @@ fi > /etc/dbus-1/system.d/org.freedesktop.systemd1.conf > /etc/dbus-1/system.d/org.freedesktop.timedate1.conf > %attr(755,root,root) %{_sysconfdir}/X11/xinit/xinitrc.d/50-systemd-user.sh > -%ghost %config(noreplace) %{_sysconfdir}/machine-id > +%attr(444,root,root) %ghost %config(noreplace) %{_sysconfdir}/machine-id ^^^^^^^^^^^^^^^^^^^^^^^^ > @@ -1419,12 +1418,12 @@ fi > %{_mandir}/man8/systemd-update-utmp.8* > %{_mandir}/man8/systemd-user-sessions.8* > %{_mandir}/man8/systemd-vconsole-setup.8* > -%dir /var/lib/machines > +%attr(600,root,root) %dir /var/lib/machines > %dir /var/lib/%{name} > %dir /var/lib/%{name}/coredump > %dir /var/lib/%{name}/catalog > %attr(640,root,root) %ghost /var/lib/%{name}/random-seed > -%attr(640,root,root) %ghost /var/log/btmp > +%attr(600,root,utmp) %ghost /var/log/btmp ^^^^^^^^^^^^^^^^^^^^^^^ attr 444 on machine-id is really no different than defattr 644. and changing gid for btmp and then removing group access on that file completely just makes no sense at all. -- Jan R?korajski | PLD/Linux SysAdm | bagginspld-linux.org | http://www.pld-linux.org/ From glen at pld-linux.org Mon Sep 7 09:32:46 2015 From: glen at pld-linux.org (=?ISO-8859-1?Q?Elan_Ruusam=E4e?=) Date: Mon, 07 Sep 2015 10:32:46 +0300 Subject: [packages/systemd] removed depreciated /etc/timezone, fixed /var/log/btmp group and mode, adjusted /etc/machine-id and In-Reply-To: References: Message-ID: <55ED3D9E.408@pld-linux.org> On 06.09.2015 21:46, gotar wrote: > +%attr(600,root,root) %dir /var/lib/machines this can't be right, dir should have at least +x bit -- glen From jajcus at jajcus.net Mon Sep 7 10:02:33 2015 From: jajcus at jajcus.net (Jacek Konieczny) Date: Mon, 7 Sep 2015 10:02:33 +0200 Subject: [packages/systemd] removed depreciated /etc/timezone, fixed /var/log/btmp group and mode, adjusted /etc/machine-id and In-Reply-To: <20150907051553.GA3869@home.lan> References: <20150907051553.GA3869@home.lan> Message-ID: <55ED4499.3010401@jajcus.net> On 2015-09-07 07:15, Jan R?korajski wrote: > attr 444 on machine-id is really no different than defattr 644. But that is what systemd uses by default, I guess it is a hint to the administrator that this file should really never ever be modified. [jajcus at jajo ~]$ systemd-machine-id-setup --root=/tmp/dupa Initializing machine ID from random generator. [jajcus at jajo ~]$ ls -l /tmp/dupa/etc/ total 4 -r--r--r-- 1 jajcus users 33 Sep 7 10:01 machine-id Jacek From gotar at polanet.pl Mon Sep 7 16:06:01 2015 From: gotar at polanet.pl (Tomasz Pala) Date: Mon, 7 Sep 2015 16:06:01 +0200 Subject: [packages/systemd] removed depreciated /etc/timezone, fixed /var/log/btmp group and mode, adjusted /etc/machine-id and In-Reply-To: <20150907051553.GA3869@home.lan> References: <20150907051553.GA3869@home.lan> Message-ID: <20150907140600.GA2051@polanet.pl> On Mon, Sep 07, 2015 at 07:15:53 +0200, Jan R?korajski wrote: > ehem, what are the following changes supposed to accomplish? Ask systemd maintainers, their software sets these bits. I could make rpm -V happy by %verify(not mode) but this won't change the fact, that these files in living system would be as is. >> -%dir /var/lib/machines >> +%attr(600,root,root) %dir /var/lib/machines Here's the actual mistake. > attr 444 on machine-id is really no different than defattr 644. > and changing gid for btmp and then removing group access on that file > completely just makes no sense at all. Not mine decision, please ask upstream. It might be caused by their mistake, or it might have some explanation when considering ACLs. I don't care THAT much to research this, sorry. -- Tomasz Pala From gotar at polanet.pl Tue Sep 8 10:56:06 2015 From: gotar at polanet.pl (Tomasz Pala) Date: Tue, 8 Sep 2015 10:56:06 +0200 Subject: [packages/systemd] removed depreciated /etc/timezone, fixed /var/log/btmp group and mode, adjusted /etc/machine-id and In-Reply-To: <20150907140600.GA2051@polanet.pl> References: <20150907051553.GA3869@home.lan> <20150907140600.GA2051@polanet.pl> Message-ID: <20150908085606.GA24140@polanet.pl> Speaking about systemd: ~: ldd /sbin/init | grep /usr libapparmor.so.1 => /usr/lib64/libapparmor.so.1 (0x00007f199b0e8000) libseccomp.so.2 => /usr/lib64/libseccomp.so.2 (0x00007f199ac8a000) If we're chasing the /usr-on-different-media target, these should be moved. It would be nice for rpm to check if anything in /bin, /lib* or /sbin depends on /usr during package. -- Tomasz Pala From ed at yen.ipipan.waw.pl Mon Sep 14 11:49:07 2015 From: ed at yen.ipipan.waw.pl (=?utf-8?B?xYF1a2FzeiBNYcWba28=?=) Date: Mon, 14 Sep 2015 11:49:07 +0200 Subject: poldek --upa = segfault (0.30.1-8) Message-ID: <1643238.6JzfPKcaul@geralt> $ poldek --upa Naruszenie ochrony pami?ci (zrzut pami?ci) $ gdb poldek GNU gdb (GDB) 7.10-1 (PLD Linux) Copyright (C) 2015 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i686-pld-linux". Type "show configuration" for configuration details. For bug reporting instructions, please see: . Find the GDB manual and other documentation resources online at: . For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from poldek...Reading symbols from /usr/lib/debug/usr/bin/poldek.debug...done. done. (gdb) run --upa Starting program: /usr/bin/poldek --upa [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/libthread_db.so.1". Program received signal SIGSEGV, Segmentation fault. 0x4cfad721 in ?? () from /lib/libc.so.6 (gdb) backtrace #0 0x4cfad721 in ?? () from /lib/libc.so.6 #1 0x4cf64f5e in ?? () from /lib/libc.so.6 #2 0x4cf65153 in setenv () from /lib/libc.so.6 #3 0x4138853a in env_source (idxpath=0xbfffd9ec "ftp://ftp1.pld-linux.org/dists/th/PLD/i686/RPMS/packages.ndir.gz", src=0x8063df8) at pkgdir.c:277 #4 pkgdir_update_a (src=src at entry=0x8063df8) at pkgdir.c:301 #5 0x41384c62 in source_update_a (src=src at entry=0x8063df8) at source.c:712 #6 0x41386154 in source_update (src=0x8063df8, flags=flags at entry=3) at source.c:732 #7 0x413865f6 in sources_update (sources=sources at entry=0x8052c28, flags=3) at source.c:869 #8 0x413deb40 in oprun (rt=0x805e9d0) at op_source.c:470 #9 0x0804bb6b in do_run () at main.c:505 #10 0x08049d8b in main (argc=2, argv=0xbfffec44) at main.c:699 Does anyone have any idea, what is wrong there? It wouldn't be a big problem but id does not only appear with the --upa command, but also whenever poldek decides, that it cannot apply patches and wants to download the whole index. -- ?ukasz Ma?ko _o) Lukasz.Masko(at)ipipan.waw.pl /\\ Registered Linux User #61028 _\_V From glen at pld-linux.org Wed Sep 16 06:42:43 2015 From: glen at pld-linux.org (=?UTF-8?B?RWxhbiBSdXVzYW3DpGU=?=) Date: Wed, 16 Sep 2015 07:42:43 +0300 Subject: [packages/rocksdb] - updated to 3.13.1 (note: soname set/changed) - updated libdir patch In-Reply-To: References: Message-ID: <55F8F343.20602@pld-linux.org> On 15.09.2015 19:58, qboosh wrote: > +# std::__once_call, std::__once_callable non-function symbols > +%define skip_post_check_so librocksdb.so.* > + should the check_so function be fixed? to exclude non-functions? i noticed the similar problem with __tls symbol on ac builders -- glen From glen at pld-linux.org Wed Sep 16 15:16:20 2015 From: glen at pld-linux.org (=?UTF-8?B?RWxhbiBSdXVzYW3DpGU=?=) Date: Wed, 16 Sep 2015 16:16:20 +0300 Subject: systemd /tmp tmpfs Message-ID: <55F96BA4.8070408@pld-linux.org> /tmp tmpfs mount used to be off in pld, and i'd like it to stay that way. but seems something changed and it's mounted now by default. what's more annoying is that it's mounted "as soon as it (systemd) can" meaning in the middle of working x11-session (GRRR!) i haven't updated systemd itself recently, but when i upgraded some packages (poldek --upgrade-dist) the /tmp got mounted. and that even several times if i already unmounted it manually. [~] ? systemctl status tmp.mount ? tmp.mount - Temporary Directory Loaded: loaded (/proc/self/mountinfo; disabled; vendor preset: enabled) Active: inactive (dead) since K 2015-09-16 16:00:36 EEST; 12min ago Where: /tmp What: tmpfs Docs: man:hier(7) http://www.freedesktop.org/wiki/Software/systemd/APIFileSystems sept 16 15:56:25 blodnatt.delfi.lan systemd[1]: Mounting Temporary Directory... sept 16 15:56:25 blodnatt.delfi.lan systemd[1]: Mounted Temporary Directory. [~] ? systemctl mask tmp.mount Created symlink from /etc/systemd/system/tmp.mount to /dev/null. [~] ? pkgbytime systemd Tue Apr 15 21:05:28 2014 systemd-libs-208-11.i686 Fri Mar 27 20:44:39 2015 systemd-libs-208-12.x86_64 Fri Mar 27 20:48:14 2015 systemd-init-208-12.x86_64 Wed Jun 3 22:09:46 2015 systemd-libs-219-3.x86_64 Wed Jul 29 19:54:20 2015 bash-completion-systemd-219-3.noarch Wed Jul 29 19:54:20 2015 systemd-219-3.x86_64 Wed Jul 29 19:54:20 2015 systemd-units-219-3.x86_64 [~] ? -- glen From gotar at polanet.pl Thu Sep 17 12:14:10 2015 From: gotar at polanet.pl (Tomasz Pala) Date: Thu, 17 Sep 2015 12:14:10 +0200 Subject: systemd /tmp tmpfs In-Reply-To: <55F96BA4.8070408@pld-linux.org> References: <55F96BA4.8070408@pld-linux.org> Message-ID: <20150917101410.GA1413@polanet.pl> On Wed, Sep 16, 2015 at 16:16:20 +0300, Elan Ruusam?e wrote: > what's more annoying is that it's mounted "as soon as it (systemd) can" > meaning in the middle of working x11-session (GRRR!) Maybe something in this session activated it via dbus? This shouldn't happen when tmp.mount is masked though, so was it before that happened? -- Tomasz Pala From glen at pld-linux.org Thu Sep 17 12:54:59 2015 From: glen at pld-linux.org (=?ISO-8859-2?Q?Elan_Ruusam=E4e?=) Date: Thu, 17 Sep 2015 13:54:59 +0300 Subject: systemd /tmp tmpfs In-Reply-To: <20150917101410.GA1413@polanet.pl> References: <55F96BA4.8070408@pld-linux.org> <20150917101410.GA1413@polanet.pl> Message-ID: <55FA9C03.9030003@pld-linux.org> On 17.09.2015 13:14, Tomasz Pala wrote: > On Wed, Sep 16, 2015 at 16:16:20 +0300, Elan Ruusam?e wrote: > >> what's more annoying is that it's mounted "as soon as it (systemd) can" >> meaning in the middle of working x11-session (GRRR!) > Maybe something in this session activated it via dbus? This shouldn't > happen when tmp.mount is masked though, so was it before that happened? > tmp.mount was not masked, masking of course helped. but i never masked it before, so something changed that now i need to mask i would prefer if default is masked, and should unmask to enable /tmp tmpfs. -- glen From jajcus at jajcus.net Thu Sep 17 13:06:57 2015 From: jajcus at jajcus.net (Jacek Konieczny) Date: Thu, 17 Sep 2015 13:06:57 +0200 Subject: systemd /tmp tmpfs In-Reply-To: <55FA9C03.9030003@pld-linux.org> References: <55F96BA4.8070408@pld-linux.org> <20150917101410.GA1413@polanet.pl> <55FA9C03.9030003@pld-linux.org> Message-ID: <55FA9ED1.3050202@jajcus.net> On 2015-09-17 12:54, Elan Ruusam?e wrote: > On 17.09.2015 13:14, Tomasz Pala wrote: >> On Wed, Sep 16, 2015 at 16:16:20 +0300, Elan Ruusam?e wrote: >> >>> what's more annoying is that it's mounted "as soon as it (systemd) can" >>> meaning in the middle of working x11-session (GRRR!) >> Maybe something in this session activated it via dbus? This shouldn't >> happen when tmp.mount is masked though, so was it before that happened? >> > tmp.mount was not masked, masking of course helped. but i never masked > it before, so something changed that now i need to mask > > i would prefer if default is masked, and should unmask to enable /tmp > tmpfs. To make PLD different to anything else in yet another way? I would prefer sticking to the systemd ways. They usually have good reasons to do things one way or another. Jacek From glen at pld-linux.org Thu Sep 17 17:52:45 2015 From: glen at pld-linux.org (=?UTF-8?B?RWxhbiBSdXVzYW3DpGU=?=) Date: Thu, 17 Sep 2015 18:52:45 +0300 Subject: chkconfig forward Message-ID: <55FAE1CD.5050707@pld-linux.org> looks like there's loop: # chkconfig gpm off Note: Forwarding request to 'systemctl disable gpm.service'. Synchronizing state of gpm.service with SysV init with /lib/systemd/systemd-sysv-install... Executing /lib/systemd/systemd-sysv-install disable gpm Note: Forwarding request to 'systemctl disable gpm.service'. Synchronizing state of gpm.service with SysV init with /lib/systemd/systemd-sysv-install... Executing /lib/systemd/systemd-sysv-install disable gpm Note: Forwarding request to 'systemctl disable gpm.service'. ^C [~] ? rpm -q gpm chkconfig systemd gpm-1.20.6-18.x86_64 chkconfig-1.5-1.x86_64 systemd-221-1.x86_64 [~] ? rpm -V gpm chkconfig systemd missing d /usr/share/man/man1/gpm-root.1.gz missing d /usr/share/man/man1/mev.1.gz missing d /usr/share/man/man1/mouse-test.1.gz missing d /usr/share/man/man7/gpm-types.7.gz missing d /usr/share/doc/gpm-1.20.6/README.gz missing d /usr/share/doc/gpm-1.20.6/README.microtouch.gz missing d /usr/share/doc/gpm-1.20.6/README.synaptics.gz missing d /usr/share/doc/gpm-1.20.6/README.twiddler.gz missing d /usr/share/doc/gpm-1.20.6/TODO.gz missing d /usr/share/doc/gpm-1.20.6/gpm-root.conf.gz missing d /usr/share/doc/gpm-1.20.6/gpm-syn.conf.gz missing d /usr/share/doc/gpm-1.20.6/gpm-twiddler.conf.gz missing d /usr/share/info/gpm.info.gz missing d /usr/share/man/man8/gpm.8.gz missing /usr/share/doc/gpm-1.20.6 missing d /usr/share/doc/gpm-1.20.6/BUGS.gz missing d /usr/share/doc/gpm-1.20.6/Changes.gz missing d /usr/share/doc/gpm-1.20.6/FAQ.gz missing d /usr/share/doc/gpm-1.20.6/README.1.20.2.gz missing d /usr/share/doc/gpm-1.20.6/README.etouch.gz missing d /usr/share/doc/gpm-1.20.6/README.gunze.gz .M...... /var/lib/machines .M...... c /etc/machine-id .M....G. g /var/log/btmp [~] ? -- glen From gotar at polanet.pl Fri Sep 18 11:19:53 2015 From: gotar at polanet.pl (Tomasz Pala) Date: Fri, 18 Sep 2015 11:19:53 +0200 Subject: Stack Smashing Protection - are we obsolete? Message-ID: <20150918091952.GA31036@polanet.pl> I've been searching this for an hour now but can't find any discussion on this - why do we have (rpm/macros.pld.in) %_ssp_cflags -fstack-protector --param=ssp-buffer-size=4 instead superior -fstack-protector-strong which seems to be taken as default in many distros, even on gcc level? -- Tomasz Pala From gotar at polanet.pl Fri Sep 18 12:01:55 2015 From: gotar at polanet.pl (Tomasz Pala) Date: Fri, 18 Sep 2015 12:01:55 +0200 Subject: systemd /tmp tmpfs In-Reply-To: <55FA9ED1.3050202@jajcus.net> References: <55F96BA4.8070408@pld-linux.org> <20150917101410.GA1413@polanet.pl> <55FA9C03.9030003@pld-linux.org> <55FA9ED1.3050202@jajcus.net> Message-ID: <20150918100155.GA4535@polanet.pl> On Thu, Sep 17, 2015 at 13:06:57 +0200, Jacek Konieczny wrote: > On 2015-09-17 12:54, Elan Ruusam?e wrote: >>> >> tmp.mount was not masked, masking of course helped. but i never masked >> it before, so something changed that now i need to mask Well, entire systemd architecture supports on-demand activation. One can have some HTTP server started when "something" changes. The only proper way of telling "I don't want this crap at all" is masking. Please check (after unmasking temporarily): systemctl list-unit-files --type=mount and /lib/systemd/system/local-fs.target.wants directory for tmp.mount symlink - maybe something made it reappear there. >> i would prefer if default is masked, and should unmask to enable /tmp >> tmpfs. > > To make PLD different to anything else in yet another way? > > I would prefer sticking to the systemd ways. They usually have good > reasons to do things one way or another. Agreed. We should keep systemd differences as small as possible, especially for things that are easily configurable in runtime (in contrary to this crappy interface renaming to some ep40x%x44xWTF). Actually I haven't had tmp.mount masked myself, but this takes just one command to fix. I didn't know rationale on this, so just found http://0pointer.de/blog/projects/tmp.html and https://fedoraproject.org/wiki/Features/tmp-on-tmpfs Similar discussion: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718906 -- Tomasz Pala From arekm at maven.pl Fri Sep 18 21:57:46 2015 From: arekm at maven.pl (Arkadiusz =?utf-8?q?Mi=C5=9Bkiewicz?=) Date: Fri, 18 Sep 2015 21:57:46 +0200 Subject: Stack Smashing Protection - are we obsolete? In-Reply-To: <20150918091952.GA31036@polanet.pl> References: <20150918091952.GA31036@polanet.pl> Message-ID: <201509182157.46870.arekm@maven.pl> On Friday 18 of September 2015, Tomasz Pala wrote: > I've been searching this for an hour now but can't find any discussion on > this - why do we have (rpm/macros.pld.in) > > %_ssp_cflags -fstack-protector --param=ssp-buffer-size=4 > > instead superior -fstack-protector-strong which seems to be taken as > default in many distros, even on gcc level? Looks like our version was used by distros back then... I have no problems with switching to -fstack-protector-strong. http://www.phoronix.com/scan.php?page=news_item&px=MTM5NjQ http://outflux.net/blog/archives/2014/01/27/fstack-protector-strong/ https://wiki.debian.org/Hardening "Prior to GCC 4.9, `-fstack-protector --param ssp-buffer-size=4' is used to cover functions that defines a 4 or more byte local character array, which is an okay balance for security and performance. For those who want to protect all the functions then -fstack-protector-all is recommended. Since GCC 4.9, -fstack-protector-strong, an improved version of -fstack- protector is introduced, which covers all the more paranoid conditions that might lead to a stack overflow but not trade performance like -fstack- protector-all, thus it becomes default." -- Arkadiusz Mi?kiewicz, arekm / ( maven.pl | pld-linux.org ) From qboosh at pld-linux.org Sun Sep 20 18:43:58 2015 From: qboosh at pld-linux.org (Jakub Bogusz) Date: Sun, 20 Sep 2015 18:43:58 +0200 Subject: [packages/rocksdb] - updated to 3.13.1 (note: soname set/changed) - updated libdir patch In-Reply-To: <55F8F343.20602@pld-linux.org> References: <55F8F343.20602@pld-linux.org> Message-ID: <20150920164358.GA27237@mail> On Wed, Sep 16, 2015 at 07:42:43AM +0300, Elan Ruusam?e wrote: > On 15.09.2015 19:58, qboosh wrote: > >+# std::__once_call, std::__once_callable non-function symbols > >+%define skip_post_check_so librocksdb.so.* > >+ > > should the check_so function be fixed? to exclude non-functions? Not so easy with current approach. This check uses `objdump -T` output, filtered for non-weak symbols not defined in particular library (*UND*) and having "normal" type (i.e. not resolved as functions, files or objects). Unfortunately `objdump -T` output for resolved symbols referring to e.g. data structures doesn't differ from unresolved symbols of any kind. -- Jakub Bogusz http://qboosh.pl/ From glen at pld-linux.org Mon Sep 21 09:49:39 2015 From: glen at pld-linux.org (=?UTF-8?B?RWxhbiBSdXVzYW3DpGU=?=) Date: Mon, 21 Sep 2015 10:49:39 +0300 Subject: Stack Smashing Protection - are we obsolete? In-Reply-To: <201509182157.46870.arekm@maven.pl> References: <20150918091952.GA31036@polanet.pl> <201509182157.46870.arekm@maven.pl> Message-ID: <55FFB693.2070701@pld-linux.org> On 18.09.2015 22:57, Arkadiusz Mi?kiewicz wrote: > On Friday 18 of September 2015, Tomasz Pala wrote: >> I've been searching this for an hour now but can't find any discussion on >> this - why do we have (rpm/macros.pld.in) >> >> %_ssp_cflags -fstack-protector --param=ssp-buffer-size=4 >> >> instead superior -fstack-protector-strong which seems to be taken as >> default in many distros, even on gcc level? > Looks like our version was used by distros back then... I have no problems > with switching to -fstack-protector-strong. > > http://www.phoronix.com/scan.php?page=news_item&px=MTM5NjQ > > http://outflux.net/blog/archives/2014/01/27/fstack-protector-strong/ > > https://wiki.debian.org/Hardening > "Prior to GCC 4.9, `-fstack-protector --param ssp-buffer-size=4' is used to > cover functions that defines a 4 or more byte local character array, which is > an okay balance for security and performance. For those who want to protect > all the functions then -fstack-protector-all is recommended. > > Since GCC 4.9, -fstack-protector-strong, an improved version of -fstack- > protector is introduced, which covers all the more paranoid conditions that > might lead to a stack overflow but not trade performance like -fstack- > protector-all, thus it becomes default." your commit http://git.pld-linux.org/gitweb.cgi/packages/rpm.git/commitdiff/f5f4004c4c8eeb0f338fa3e53b9a82c18faa0add should include updated gcc version dependency too? -- glen From glen at pld-linux.org Mon Sep 21 09:50:44 2015 From: glen at pld-linux.org (=?UTF-8?B?RWxhbiBSdXVzYW3DpGU=?=) Date: Mon, 21 Sep 2015 10:50:44 +0300 Subject: [packages/kernel] - use stack protector strong instead of default one In-Reply-To: References: <40aeec0ed98fc9a6479c5467165e52ca0a3f088c_refs_heads_master@pld-linux.org> Message-ID: <55FFB6D4.1040405@pld-linux.org> On 18.09.2015 23:48, arekm wrote: > commit c23f33a10de6404c12685e0fe437bef15ad50104 > Author: Arkadiusz Mi?kiewicz > Date: Fri Sep 18 22:48:44 2015 +0200 > > - use stack protector strong instead of default one > > kernel-multiarch.config | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > --- > diff --git a/kernel-multiarch.config b/kernel-multiarch.config > index dd79147..704068d 100644 > --- a/kernel-multiarch.config > +++ b/kernel-multiarch.config > @@ -5,8 +5,8 @@ > ARCH_MEMORY_PROBE all=n > CC_STACKPROTECTOR all=y > CC_STACKPROTECTOR_NONE all=n > -CC_STACKPROTECTOR_REGULAR all=y > -CC_STACKPROTECTOR_STRONG all=n > +CC_STACKPROTECTOR_REGULAR all=n > +CC_STACKPROTECTOR_STRONG all=y > EARLY_PRINTK_EFI all=n > EFI_MIXED all=y > IOSF_MBI all=m this is for compiling kernel itself? or it affects built kernel userland? -- glen From jajcus at jajcus.net Tue Sep 22 12:41:47 2015 From: jajcus at jajcus.net (Jacek Konieczny) Date: Tue, 22 Sep 2015 12:41:47 +0200 Subject: OpenJDK 8 Message-ID: <5601306B.4040500@jajcus.net> Hi, I have prepared openjdk8 packages, so we finally have Java 8 in PLD. We used to use IcedTea to build Java 7 from OpenJDK7 source and a few other projects, but OpenJDK8 is more self-contained and could be built directly. That causes package name change, but it may also mean, that the new packages are missing something. Please test the new openjdk8-* packages with your favorite Java software and let me know if everything works as expected. 'openjdk8' should replace 'icedtea7' in PLD soon. Greets, Jacek From glen at pld-linux.org Wed Sep 23 09:13:03 2015 From: glen at pld-linux.org (=?UTF-8?B?RWxhbiBSdXVzYW3DpGU=?=) Date: Wed, 23 Sep 2015 10:13:03 +0300 Subject: [packages/dbus] - initial update to 1.10.0; 1.8.x left on dbus-1.8 branch In-Reply-To: <194ba1819dcc2fbb4ef0f5d9ab78f1751b9b2c73_refs_heads_master@pld-linux.org> References: <194ba1819dcc2fbb4ef0f5d9ab78f1751b9b2c73_refs_heads_master@pld-linux.org> Message-ID: <560250FF.3070309@pld-linux.org> On 22.09.2015 16:45, qboosh wrote: > +# TODO: now it's only for local configuration - move to base dbus package > +# after all packages place constant configuration in %{_datadir}/dbus-1 do we need yet another macro for it? %{_dbus_system_dir} perhaps? -- glen From glen at pld-linux.org Wed Sep 23 09:14:24 2015 From: glen at pld-linux.org (=?windows-1252?Q?Elan_Ruusam=E4e?=) Date: Wed, 23 Sep 2015 10:14:24 +0300 Subject: [packages/llvm] - WIP on files; note: cmake builds produce different set of libs than autotools - ocaml bindings bui In-Reply-To: <6df3b432e0c58d79e331b1fa5913b7301c58dc25_refs_heads_master@pld-linux.org> References: <41876fe7fcc01e803b038d41d8f9608e9bf0e658_refs_heads_master@pld-linux.org> <6df3b432e0c58d79e331b1fa5913b7301c58dc25_refs_heads_master@pld-linux.org> Message-ID: <56025150.6000000@pld-linux.org> On 22.09.2015 22:31, qboosh wrote: > +# std::__once_call, std::__once_callable non-function symbols > +%define skip_post_check_so liblldAArch64ELFTarget.so.* liblldARMELFTarget.so.* liblldHexagonELFTarget.so.* liblldMipsELFTarget.so.* liblldb.so.* > + so maybe another macro which symbols to exclude, not to exclude whole set of libraries? -- glen From baggins at pld-linux.org Fri Sep 25 08:25:57 2015 From: baggins at pld-linux.org (Jan =?utf-8?Q?R=C4=99korajski?=) Date: Fri, 25 Sep 2015 08:25:57 +0200 Subject: Kernel 3.4 removal Message-ID: <20150925062557.GA3861@home.lan> The 3.4 longterm kernel line has reached the end of maintainablity and usability for us. I will not update it, and I will remove it from Th-main soon. Old packages will be available in th-archive. -- Jan R?korajski | PLD/Linux SysAdm | bagginspld-linux.org | http://www.pld-linux.org/