From glen at delfi.ee  Tue Apr 10 20:46:12 2018
From: glen at delfi.ee (=?UTF-8?Q?Elan_Ruusam=c3=a4e?=)
Date: Tue, 10 Apr 2018 21:46:12 +0300
Subject: [packages/bacula-backup-mysql] - change default to mysqldump,
 mysqlhotcopy no longer exists in mysql 5.7 - rel 2
In-Reply-To: <abb107aa8ae91f4acd76dec00348614518133fa1_refs_heads_master@pld-linux.org>
References: <3dd7f368e6335ebf6fc074e87f2bee164dcf13fc_refs_heads_master@pld-linux.org>
 <abb107aa8ae91f4acd76dec00348614518133fa1_refs_heads_master@pld-linux.org>
Message-ID: <a5daa3e1-e254-b041-7f2d-b5dc9de64891@delfi.ee>

um, this would break setups if they have not defined the default in 
their config.

and you can still have mysqlhotcopy functional if you put mysql packages 
to hold (use custom build, older th-snapshot repos, etc)


On 08/04/2018 09:28, baggins wrote:
> commit abb107aa8ae91f4acd76dec00348614518133fa1
> Author: Jan R?korajski <baggins at pld-linux.org>
> Date:   Sun Apr 8 08:27:47 2018 +0200
>
>      - change default to mysqldump, mysqlhotcopy no longer exists in mysql 5.7
>      - rel 2
>
>   bacula-backup-mysql.spec |  5 +++--
>   default-mysqldump.patch  | 22 ++++++++++++++++++++++
>   2 files changed, 25 insertions(+), 2 deletions(-)
> ---
> diff --git a/bacula-backup-mysql.spec b/bacula-backup-mysql.spec
> index 44acbd4..02f7be3 100644
> --- a/bacula-backup-mysql.spec
> +++ b/bacula-backup-mysql.spec
> @@ -2,15 +2,15 @@
>   Summary:	MySQL backup hook for Bacula
>   Name:		bacula-backup-mysql
>   Version:	0.8
> -Release:	1
> +Release:	2
>   License:	GPL v2
>   Group:		Applications/Databases
>   Source0:	https://github.com/glensc/bacula-backup-mysql/archive/%{version}/%{name}-%{version}.tar.gz
>   # Source0-md5:	e9bf019ba75f2d7db5ec215eb7668632
> +Patch0:		default-mysqldump.patch
>   URL:		https://github.com/glensc/bacula-backup-mysql
>   BuildRequires:	perl-tools-pod
>   BuildRequires:	rpm-perlprov >= 4.1-13
> -Requires:	/usr/bin/mysqlhotcopy
>   Requires:	bacula-common
>   Requires:	perl-DBD-mysql
>   BuildArch:	noarch
> @@ -26,6 +26,7 @@ This package contains MySQL backup hook.
>   
>   %prep
>   %setup -q
> +%patch0 -p1
>   
>   %build
>   pod2man README.pod -o bacula-backup-mysql.1
> diff --git a/default-mysqldump.patch b/default-mysqldump.patch
> new file mode 100644
> index 0000000..e0dcd62
> --- /dev/null
> +++ b/default-mysqldump.patch
> @@ -0,0 +1,22 @@
> +--- bacula-backup-mysql-0.8/README.pod~	2016-05-30 11:25:11.000000000 +0200
> ++++ bacula-backup-mysql-0.8/README.pod	2018-04-08 08:26:43.742397366 +0200
> +@@ -42,7 +42,7 @@
> + backup; any C<exclude_database> options will reduce this list.
> +
> + Since v0.6 it's possible to do SQL dump backups with L<mysqldump(1)>. Use this if you want to backup InnoDB databases.
> +-Option name is C<dump_type>, which takes values C<mysqlhotcopy> (default) and C<mysqldump>.
> ++Option name is C<dump_type>, which takes values C<mysqlhotcopy> and C<mysqldump> (default).
> +
> + Since v0.7 you can pass arbitary options to C<mysqlhotcopy> or C<mysqldump>
> + using C<mysqlhotcopy_options> or C<mysqldump_options> respectively. Use this to
> +--- bacula-backup-mysql-0.8/bacula-backup-mysql.pl~	2016-05-30 11:25:11.000000000 +0200
> ++++ bacula-backup-mysql-0.8/bacula-backup-mysql.pl	2018-04-08 08:25:54.428793262 +0200
> +@@ -252,7 +252,7 @@
> + 	my $socket = $c->get($cluster, 'socket') || $c->get('client', 'socket');
> +
> + 	# dump type: mysqlhotcopy, mysqldump
> +-	my $dump_type = $c->get($cluster, 'dump_type') || 'mysqlhotcopy';
> ++	my $dump_type = $c->get($cluster, 'dump_type') || 'mysqldump';
> +
> + 	my $dbh = BBM::DB->new($user, $password, $host, $socket);
> +
> ================================================================
>
> ---- gitweb:
>
> http://git.pld-linux.org/gitweb.cgi/packages/bacula-backup-mysql.git/commitdiff/abb107aa8ae91f4acd76dec00348614518133fa1
>
> _______________________________________________
> pld-cvs-commit mailing list
> pld-cvs-commit at lists.pld-linux.org
> http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit



From baggins at pld-linux.org  Wed Apr 11 08:31:11 2018
From: baggins at pld-linux.org (Jan =?utf-8?Q?R=C4=99korajski?=)
Date: Wed, 11 Apr 2018 08:31:11 +0200
Subject: [packages/bacula-backup-mysql] - change default to mysqldump,
 mysqlhotcopy no longer exists in mysql 5.7 - rel 2
In-Reply-To: <a5daa3e1-e254-b041-7f2d-b5dc9de64891@delfi.ee>
References: <3dd7f368e6335ebf6fc074e87f2bee164dcf13fc_refs_heads_master@pld-linux.org>
 <abb107aa8ae91f4acd76dec00348614518133fa1_refs_heads_master@pld-linux.org>
 <a5daa3e1-e254-b041-7f2d-b5dc9de64891@delfi.ee>
Message-ID: <20180411063110.GA1787@starbug>

On Tue, 10 Apr 2018, Elan Ruusam?e wrote:

> um, this would break setups if they have not defined the default in 
> their config.
> 
> and you can still have mysqlhotcopy functional if you put mysql packages 
> to hold (use custom build, older th-snapshot repos, etc)

This is distro wide support vs custom configs problem.
Sorry, but if distro does not ship mysqlhotcopy, then defaulting to it
will create non-functioning package.

-- 
Jan R?korajski                    | PLD/Linux
SysAdm | baggins<at>pld-linux.org | http://www.pld-linux.org/


From gzohop at gmail.com  Wed Apr 11 09:06:25 2018
From: gzohop at gmail.com (Grzesiek)
Date: Wed, 11 Apr 2018 09:06:25 +0200
Subject: [packages/bacula-backup-mysql] - change default to mysqldump,
 mysqlhotcopy no longer exists in mysql 5.7 - rel 2
In-Reply-To: <20180411063110.GA1787@starbug>
References: <3dd7f368e6335ebf6fc074e87f2bee164dcf13fc_refs_heads_master@pld-linux.org>
 <abb107aa8ae91f4acd76dec00348614518133fa1_refs_heads_master@pld-linux.org>
 <a5daa3e1-e254-b041-7f2d-b5dc9de64891@delfi.ee>
 <20180411063110.GA1787@starbug>
Message-ID: <899a3d3d-998c-f266-7c7d-2b1fe0c37c81@gmail.com>

W dniu 11.04.2018 o?08:31, Jan R?korajski pisze:
> On Tue, 10 Apr 2018, Elan Ruusam?e wrote:
>
>> um, this would break setups if they have not defined the default in 
>> their config.
>>
>> and you can still have mysqlhotcopy functional if you put mysql packages 
>> to hold (use custom build, older th-snapshot repos, etc)
> This is distro wide support vs custom configs problem.
> Sorry, but if distro does not ship mysqlhotcopy, then defaulting to it
> will create non-functioning package.
>
Bacula just should require >= mysql version that provides mysqldump, and
it will solve the hold problem.



From glen at delfi.ee  Wed Apr 11 14:04:15 2018
From: glen at delfi.ee (Elan Ruusamae)
Date: Wed, 11 Apr 2018 15:04:15 +0300
Subject: tmpfiles check
Message-ID: <88d3e691-7fbc-6e3d-7587-6f7ffe6e4530@delfi.ee>

 > Checking /var/run <-> tmpfiles.d completeness...
 > No tmpfiles configuration for '/var/run/zabbix'


this doesn't seem to check /run <-> tmpfiles.d (in zabbix.spec)

but could the check be improved that it creates sample tmpfiles config 
so developer could add it to package?



From glen at delfi.ee  Wed Apr 11 14:14:07 2018
From: glen at delfi.ee (Elan Ruusamae)
Date: Wed, 11 Apr 2018 15:14:07 +0300
Subject: [packages/bacula-backup-mysql] - change default to mysqldump,
 mysqlhotcopy no longer exists in mysql 5.7 - rel 2
In-Reply-To: <20180411063110.GA1787@starbug>
References: <3dd7f368e6335ebf6fc074e87f2bee164dcf13fc_refs_heads_master@pld-linux.org>
 <abb107aa8ae91f4acd76dec00348614518133fa1_refs_heads_master@pld-linux.org>
 <a5daa3e1-e254-b041-7f2d-b5dc9de64891@delfi.ee>
 <20180411063110.GA1787@starbug>
Message-ID: <3f1e3e24-51e6-d8e1-176d-9f83ce6ff9a0@delfi.ee>

On 4/11/18 9:31 AM, Jan R?korajski wrote:
> On Tue, 10 Apr 2018, Elan Ruusam?e wrote:
>
>> um, this would break setups if they have not defined the default in
>> their config.
>>
>> and you can still have mysqlhotcopy functional if you put mysql packages
>> to hold (use custom build, older th-snapshot repos, etc)
> This is distro wide support vs custom configs problem.
> Sorry, but if distro does not ship mysqlhotcopy, then defaulting to it
> will create non-functioning package.
the problem is that if user config does not specify the value, you 
changed default, then their backup mode will also change.

i don't have solution, just pointing out the problem.


From glen at delfi.ee  Wed Apr 11 14:16:24 2018
From: glen at delfi.ee (Elan Ruusamae)
Date: Wed, 11 Apr 2018 15:16:24 +0300
Subject: [packages/bacula-backup-mysql] - change default to mysqldump,
 mysqlhotcopy no longer exists in mysql 5.7 - rel 2
In-Reply-To: <899a3d3d-998c-f266-7c7d-2b1fe0c37c81@gmail.com>
References: <3dd7f368e6335ebf6fc074e87f2bee164dcf13fc_refs_heads_master@pld-linux.org>
 <abb107aa8ae91f4acd76dec00348614518133fa1_refs_heads_master@pld-linux.org>
 <a5daa3e1-e254-b041-7f2d-b5dc9de64891@delfi.ee>
 <20180411063110.GA1787@starbug>
 <899a3d3d-998c-f266-7c7d-2b1fe0c37c81@gmail.com>
Message-ID: <5be803f9-6dab-0335-7185-897cfdeefdca@delfi.ee>

On 4/11/18 10:06 AM, Grzesiek wrote:

> W dniu 11.04.2018 o?08:31, Jan R?korajski pisze:
>> On Tue, 10 Apr 2018, Elan Ruusam?e wrote:
>>
>>> um, this would break setups if they have not defined the default in
>>> their config.
>>>
>>> and you can still have mysqlhotcopy functional if you put mysql packages
>>> to hold (use custom build, older th-snapshot repos, etc)
>> This is distro wide support vs custom configs problem.
>> Sorry, but if distro does not ship mysqlhotcopy, then defaulting to it
>> will create non-functioning package.
>>
> Bacula just should require >= mysql version that provides mysqldump, and
> it will solve the hold problem.
bacula?

the mysqlhostcopy program was dropped, so the only require line i see is 
in bacula-backup-mysql package:

requires: mysqlhotcopy

but as baggins already said, no such package exists in distro anymore.

altho, we could just add such spec and use last version before upstream 
dropped it.


From atler at pld-linux.org  Sat Apr 14 18:42:29 2018
From: atler at pld-linux.org (Jan Palus)
Date: Sat, 14 Apr 2018 18:42:29 +0200
Subject: [packages/libutf8proc] - rel 4; avoid includedir subdir
 (compatible with other distros)
In-Reply-To: <f8274d04fe4385692919d8ca584f1686c82fba29_refs_heads_master@pld-linux.org>
References: <1f8d3063177cf37a9e667b67399788ea1dc044f0_refs_heads_master@pld-linux.org>
 <f8274d04fe4385692919d8ca584f1686c82fba29_refs_heads_master@pld-linux.org>
Message-ID: <20180414164229.ncych6artlso7agq@kalarepa>

On 14.04.2018 17:45, arekm wrote:
> commit f8274d04fe4385692919d8ca584f1686c82fba29
> Author: Arkadiusz Mi?kiewicz <arekm at maven.pl>
> Date:   Sat Apr 14 17:44:57 2018 +0200
> 
>     - rel 4; avoid includedir subdir (compatible with other distros)

Looks like someone else is also upgrading subversion. Note that utf8proc was
started by netsurf team, later maintenance was passed over to Julia Lang. Last
version released by netsurf (1.3.1) has include file in a subdir and ships with
pkgconfig file, latest version released by Julia Lang (2.1.0) does not have a
subdir and does not ship a pkgconfig file (moronic breakage of compatibility if
you ask me). netsurf's version is required by... netsurf itself (includes file
with subdir, uses pkgconfig), while Julia's version is required by subversion. I
guess the way forward is to either:

- upgrade utf8proc to 2.1.0 and adjust netsurf to build with new library
  (preferred)

- package these two independently


Regards
Jan


From glen at delfi.ee  Mon Apr 16 21:08:18 2018
From: glen at delfi.ee (=?UTF-8?Q?Elan_Ruusam=c3=a4e?=)
Date: Mon, 16 Apr 2018 22:08:18 +0300
Subject: runuser do not preserve env
Message-ID: <b0417964-a541-07e7-e846-eda0ba6b6207@delfi.ee>

doesn't seem like runuser resets env...

seems to me that these days only reliable way to switch user is using 
sudo, no standard tools available...


# rpm -qf `which runuser`
util-linux-2.31-2.x86_64

# runuser --help

Usage:
 ?runuser [options] -u <user> [[--] <command>]
 ?runuser [options] [-] [<user> [<argument>...]]

Run <command> with the effective user ID and group ID of <user>.? If -u is
not given, fall back to su(1)-compatible semantics and execute standard 
shell.
The options -c, -f, -l, and -s are mutually exclusive with -u.

Options:
 ?-u, --user <user>?????????????? username
 ?-m, -p, --preserve-environment? do not reset environment variables
 ?-g, --group <group>???????????? specify the primary group
 ?-G, --supp-group <group>??????? specify a supplemental group

 ?-, -l, --login????????????????? make the shell a login shell
 ?-c, --command <command>???????? pass a single command to the shell with -c
 ?--session-command <command>???? pass a single command to the shell with -c
 ?????????????????????????????????? and do not create a new session
 ?-f, --fast????????????????????? pass -f to the shell (for csh or tcsh)
 ?-s, --shell <shell>???????????? run <shell> if /etc/shells allows it
 ?-P, --pty?????????????????????? create a new pseudo-terminal

 ?-h, --help????????????????????? display this help
 ?-V, --version?????????????????? display version


For more details see runuser(1).

# env TMP111=foo runuser -u http -- env|grep TMP

TMP=/home/glen/tmp
TMPDIR=/home/glen/tmp
TMP111=foo

and "login shell" has completely useless purpose

$ env TMP111=foo runuser -l -u http -- env|grep TMP
runuser: options --{shell,fast,command,session-command,login} and --user 
are mutually exclusive


From glen at delfi.ee  Mon Apr 16 21:37:26 2018
From: glen at delfi.ee (=?UTF-8?Q?Elan_Ruusam=c3=a4e?=)
Date: Mon, 16 Apr 2018 22:37:26 +0300
Subject: runuser do not preserve env
In-Reply-To: <b0417964-a541-07e7-e846-eda0ba6b6207@delfi.ee>
References: <b0417964-a541-07e7-e846-eda0ba6b6207@delfi.ee>
Message-ID: <df251719-0cb1-54db-1cb1-574f2b2802d7@delfi.ee>

looks like i've already been there


https://github.com/karelzak/util-linux/issues/325


On 16/04/2018 22:08, Elan Ruusam?e wrote:
> doesn't seem like runuser resets env...
>
> seems to me that these days only reliable way to switch user is using 
> sudo, no standard tools available...
>
>
> # rpm -qf `which runuser`
> util-linux-2.31-2.x86_64
>
> # runuser --help
>
> Usage:
> ?runuser [options] -u <user> [[--] <command>]
> ?runuser [options] [-] [<user> [<argument>...]]
>
> Run <command> with the effective user ID and group ID of <user>.? If 
> -u is
> not given, fall back to su(1)-compatible semantics and execute 
> standard shell.
> The options -c, -f, -l, and -s are mutually exclusive with -u.
>
> Options:
> ?-u, --user <user>?????????????? username
> ?-m, -p, --preserve-environment? do not reset environment variables
> ?-g, --group <group>???????????? specify the primary group
> ?-G, --supp-group <group>??????? specify a supplemental group
>
> ?-, -l, --login????????????????? make the shell a login shell
> ?-c, --command <command>???????? pass a single command to the shell 
> with -c
> ?--session-command <command>???? pass a single command to the shell 
> with -c
> ?????????????????????????????????? and do not create a new session
> ?-f, --fast????????????????????? pass -f to the shell (for csh or tcsh)
> ?-s, --shell <shell>???????????? run <shell> if /etc/shells allows it
> ?-P, --pty?????????????????????? create a new pseudo-terminal
>
> ?-h, --help????????????????????? display this help
> ?-V, --version?????????????????? display version
>
>
> For more details see runuser(1).
>
> # env TMP111=foo runuser -u http -- env|grep TMP
>
> TMP=/home/glen/tmp
> TMPDIR=/home/glen/tmp
> TMP111=foo
>
> and "login shell" has completely useless purpose
>
> $ env TMP111=foo runuser -l -u http -- env|grep TMP
> runuser: options --{shell,fast,command,session-command,login} and 
> --user are mutually exclusive



From glen at delfi.ee  Tue Apr 17 15:52:40 2018
From: glen at delfi.ee (Elan Ruusamae)
Date: Tue, 17 Apr 2018 16:52:40 +0300
Subject: [packages/rsync] - downgrade to 3.1.2 due to server segfault
In-Reply-To: <615041e096bf687532c390c51043f93d15f4801e_refs_heads_master@pld-linux.org>
References: <b4e632d774aeafb4040ed072ba7d0033d6a561c1_refs_heads_master@pld-linux.org>
 <615041e096bf687532c390c51043f93d15f4801e_refs_heads_master@pld-linux.org>
Message-ID: <fbfdb023-e857-1ad9-c25a-ccf23f1fdcfb@delfi.ee>

quite temperamentic change not justifying imho epoch bump.

did you just try to downgrade in your env and put package to old

and perhaps bisect to commit that breaks if you're sure it's code not 
build releated.


On 4/17/18 10:19 AM, baggins wrote:
> commit 615041e096bf687532c390c51043f93d15f4801e
> Author: Jan R?korajski <baggins at pld-linux.org>
> Date:   Tue Apr 17 09:19:12 2018 +0200
>
>      - downgrade to 3.1.2 due to server segfault
>
>   rsync.spec | 10 ++++++----
>   1 file changed, 6 insertions(+), 4 deletions(-)
> ---
> diff --git a/rsync.spec b/rsync.spec
> index d663909..a257e2d 100644
> --- a/rsync.spec
> +++ b/rsync.spec
> @@ -1,3 +1,4 @@
> +# TODO: 3.1.3 rsyncd segfaults very early in server rsync:// mode (both inetd and standalone)




From baggins at pld-linux.org  Wed Apr 18 07:57:28 2018
From: baggins at pld-linux.org (Jan =?utf-8?Q?R=C4=99korajski?=)
Date: Wed, 18 Apr 2018 07:57:28 +0200
Subject: [packages/rsync] - downgrade to 3.1.2 due to server segfault
In-Reply-To: <fbfdb023-e857-1ad9-c25a-ccf23f1fdcfb@delfi.ee>
References: <b4e632d774aeafb4040ed072ba7d0033d6a561c1_refs_heads_master@pld-linux.org>
 <615041e096bf687532c390c51043f93d15f4801e_refs_heads_master@pld-linux.org>
 <fbfdb023-e857-1ad9-c25a-ccf23f1fdcfb@delfi.ee>
Message-ID: <20180418055728.GB1787@starbug>

On Tue, 17 Apr 2018, Elan Ruusamae wrote:

> quite temperamentic change not justifying imho epoch bump.

Every version downgrade should justify epoch bump, or you won't be able
to install the package :)

> did you just try to downgrade in your env and put package to old

I sure did, and I also rebuilt rsync to eliminate any possible build
artifacs before downgrading the package. My env is cvs.pld-linux.org,
rsyncing those resources just doesn't work anymore with 3.1.3.
I straced it and rsync crashes immediately after starting.

> and perhaps bisect to commit that breaks if you're sure it's code not 
> build releated.

I'd rather bump the epoch to make sure everything works and try working
out what broke later, as I don't have that much time to spent on
debugging weird problems :(

-- 
Jan R?korajski                    | PLD/Linux
SysAdm | baggins<at>pld-linux.org | http://www.pld-linux.org/


From qboosh at pld-linux.org  Mon Apr 23 19:40:42 2018
From: qboosh at pld-linux.org (Jakub Bogusz)
Date: Mon, 23 Apr 2018 19:40:42 +0200
Subject: [packages/eventum: 11/14] seems only reliable and useful way to
 switch user is sudo
In-Reply-To: <db2ce4e265ef36c31a6bef09e13a300d756d927b_refs_heads_master@pld-linux.org>
References: <05c9edc6e49d902ae17a75a2fe751c36135ab773_refs_heads_master@pld-linux.org>
 <db2ce4e265ef36c31a6bef09e13a300d756d927b_refs_heads_master@pld-linux.org>
Message-ID: <20180423174042.GA30767@mail>

On Mon, Apr 23, 2018 at 07:13:53PM +0200, glen wrote:
> commit db2ce4e265ef36c31a6bef09e13a300d756d927b
> Author: Elan Ruusam?e <glen at delfi.ee>
> Date:   Mon Apr 16 22:10:58 2018 +0300
> 
>     seems only reliable and useful way to switch user is sudo

>  # run database update if configured
>  test -s %{_webappdir}/config.php && \
> -runuser -u http -- %{_appdir}/bin/upgrade.php || :
> +sudo -H -u http -- %{_appdir}/bin/upgrade.php || :

Why not su?
su - http -s /bin/sh ...


-- 
Jakub Bogusz    http://qboosh.pl/


From jajcus at jajcus.net  Mon Apr 23 22:39:01 2018
From: jajcus at jajcus.net (Jacek Konieczny)
Date: Mon, 23 Apr 2018 22:39:01 +0200
Subject: [packages/eventum: 11/14] seems only reliable and useful way to
 switch user is sudo
In-Reply-To: <20180423174042.GA30767@mail>
References: <05c9edc6e49d902ae17a75a2fe751c36135ab773_refs_heads_master@pld-linux.org>
 <db2ce4e265ef36c31a6bef09e13a300d756d927b_refs_heads_master@pld-linux.org>
 <20180423174042.GA30767@mail>
Message-ID: <e1d2b976-1e09-d3bb-f18d-234fd22b8d81@jajcus.net>

On 2018-04-23 19:40, Jakub Bogusz wrote:
> On Mon, Apr 23, 2018 at 07:13:53PM +0200, glen wrote:
>> commit db2ce4e265ef36c31a6bef09e13a300d756d927b
>> Author: Elan Ruusam?e <glen at delfi.ee>
>> Date:   Mon Apr 16 22:10:58 2018 +0300
>>
>>     seems only reliable and useful way to switch user is sudo
> 
>>  # run database update if configured
>>  test -s %{_webappdir}/config.php && \
>> -runuser -u http -- %{_appdir}/bin/upgrade.php || :
>> +sudo -H -u http -- %{_appdir}/bin/upgrade.php || :
> 
> Why not su?
> su - http -s /bin/sh ...

There is also 'setuidgid' which just changes uid/gid without bothering
with all that user session stuff (usually pointless for daemons and
system scripts).

Jacek


From glen at delfi.ee  Thu Apr 26 10:34:46 2018
From: glen at delfi.ee (Elan Ruusamae)
Date: Thu, 26 Apr 2018 11:34:46 +0300
Subject: [packages/eventum: 11/14] seems only reliable and useful way to
 switch user is sudo
In-Reply-To: <e1d2b976-1e09-d3bb-f18d-234fd22b8d81@jajcus.net>
References: <05c9edc6e49d902ae17a75a2fe751c36135ab773_refs_heads_master@pld-linux.org>
 <db2ce4e265ef36c31a6bef09e13a300d756d927b_refs_heads_master@pld-linux.org>
 <20180423174042.GA30767@mail>
 <e1d2b976-1e09-d3bb-f18d-234fd22b8d81@jajcus.net>
Message-ID: <77f208c0-cb50-159c-3825-34f419162f3e@delfi.ee>

On 4/23/18 11:39 PM, Jacek Konieczny wrote:

> On 2018-04-23 19:40, Jakub Bogusz wrote:
>> On Mon, Apr 23, 2018 at 07:13:53PM +0200, glen wrote:
>>> commit db2ce4e265ef36c31a6bef09e13a300d756d927b
>>> Author: Elan Ruusam?e <glen at delfi.ee>
>>> Date:   Mon Apr 16 22:10:58 2018 +0300
>>>
>>>      seems only reliable and useful way to switch user is sudo
>>>   # run database update if configured
>>>   test -s %{_webappdir}/config.php && \
>>> -runuser -u http -- %{_appdir}/bin/upgrade.php || :
>>> +sudo -H -u http -- %{_appdir}/bin/upgrade.php || :
>> Why not su?
>> su - http -s /bin/sh ...
> There is also 'setuidgid' which just changes uid/gid without bothering
> with all that user session stuff (usually pointless for daemons and
> system scripts).

su, failed to find working combination that reset env. and it's is so 
tied to everything is shell, that i want to puke

# su - http -s /bin/sh /bin/id
/bin/id: no closing quote
/bin/id[4]: : not found
/bin/id[4]: ??: not found
/bin/id[4]: ?: not found
/bin/id[4]: +?: not found
/bin/id[4]: I?: not found
/bin/id[4]: N?: not found
/bin/id: syntax error: unexpected '?'
/bin/id: syntax error: unexpected ')'


setuidgid does not reset env, and seems our own script, which probably 
has never been audited.

? setuidgid --help
setuidgid: invalid option -- '-'
setuidgid $Rev$ (PLD Linux rc-scripts)

Usage: setuidgid [OPTIONS] account command ...
Run a command under the uid and gid of an account.

-s??????? Also set supplementary groups
-V??????? Show version information
-h??????? Show usage information

i wanted something standard and maintained.

but as replied in other thread: 
http://lists.pld-linux.org/mailman/pipermail/pld-devel-en/2018-April/025531.html

setpriv+env can be used:
https://github.com/karelzak/util-linux/issues/325#issuecomment-381722770




From glen at delfi.ee  Thu Apr 26 13:39:59 2018
From: glen at delfi.ee (Elan Ruusamae)
Date: Thu, 26 Apr 2018 14:39:59 +0300
Subject: [packages/rsync] - downgrade to 3.1.2 due to server segfault
In-Reply-To: <20180418055728.GB1787@starbug>
References: <b4e632d774aeafb4040ed072ba7d0033d6a561c1_refs_heads_master@pld-linux.org>
 <615041e096bf687532c390c51043f93d15f4801e_refs_heads_master@pld-linux.org>
 <fbfdb023-e857-1ad9-c25a-ccf23f1fdcfb@delfi.ee>
 <20180418055728.GB1787@starbug>
Message-ID: <c6282889-0955-70fe-44d0-4a12e25aef68@delfi.ee>

i have such report that starting from commandline worked fine.


rsync-3.1.3-1.x86_64

so, i guess it segfaulted when std* streams closed/redirected, but not if still attached to terminal.


# service rsyncd restart
rsyncd service is not running.
Starting rsyncd service............................................[ FAIL ]
Segmentation fault

Apr 26 12:42:17 eventum kernel: [568787.515188] rsync[25844]: segfault at 7468 ip 00007fdfddfb3e81 sp 00007ffea8114230 error 4 in libc-2.27.so[7fdfddf30000+1b4000]

Bit it starting if initiated manually from command line:

nice -n5 /usr/bin/rsync --daemon --dparam=pidfile=/var/run/rsync.pid

so rsyncd is running like that now




From glen at delfi.ee  Mon Apr 30 15:24:06 2018
From: glen at delfi.ee (Elan Ruusamae)
Date: Mon, 30 Apr 2018 16:24:06 +0300
Subject: push broken
Message-ID: <073a67c6-6c77-3e4b-e645-29f68a846689@delfi.ee>


[~/relup/test(1) (rw-check)] ? git push -u
fatal: '/packages/test' does not appear to be a git repository
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
[~/relup/test(1) (rw-check)] ? cat .git/config
[core]
 ??????? repositoryformatversion = 0
 ??????? filemode = true
 ??????? bare = false
 ??????? logallrefupdates = true
[remote "origin"]
 ??????? url = git://git.pld-linux.org/packages/test.git
 ??????? fetch = +refs/heads/*:refs/remotes/origin/*
 ??????? fetch = refs/notes/*:refs/notes/*
 ??????? push = refs/notes/*:refs/notes/*
 ??????? push = HEAD
 ??????? pushurl = ssh://git at git.pld-linux.org/packages/test
[branch "master"]
 ??????? remote = origin
 ??????? merge = refs/heads/master
[push]
 ??????? default = current



[~/relup/test(1) (rw-check)] ? git push -u 
ssh://git at git.pld-linux.org/packages/test rw-check
fatal: '/packages/test' does not appear to be a git repository
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
[~/relup/test(1) (rw-check)] ? git push -u 
ssh://git at git.pld-linux.org/packages/test.git rw-check
fatal: '/packages/test.git' does not appear to be a git repository
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

[~/relup/test(1) (rw-check)] ? git push -u 
git://git.pld-linux.org/packages/test.git rw-check
fatal: remote error: access denied or repository not exported: 
/packages/test.git

[~/relup/test(1) (rw-check)] ? git push -u 
git://git.pld-linux.org/packages/test rw-check
fatal: remote error: access denied or repository not exported: 
/packages/test

[~/relup/test(1) (rw-check)] ?



From glen at delfi.ee  Mon Apr 30 17:29:59 2018
From: glen at delfi.ee (=?UTF-8?Q?Elan_Ruusam=c3=a4e?=)
Date: Mon, 30 Apr 2018 18:29:59 +0300
Subject: push broken
In-Reply-To: <073a67c6-6c77-3e4b-e645-29f68a846689@delfi.ee>
References: <073a67c6-6c77-3e4b-e645-29f68a846689@delfi.ee>
Message-ID: <2fde4ab7-56bc-9137-48fa-63fdf7ab7891@delfi.ee>

On 30/04/2018 16:24, Elan Ruusamae wrote:

>
> [~/relup/test(1) (rw-check)] ? git push -u
> fatal: '/packages/test' does not appear to be a git repository
> fatal: Could not read from remote repository.
>
> Please make sure you have the correct access rights
> and the repository exists. 
some possibly related syslog entries.


Apr 30 15:19:45 1822-cvs git-daemon[23353]: 'receive-pack': service not 
enabled for '/cvs/root/gitolite/repositories/packages/python-pytest.git'
Apr 30 15:19:48 1822-cvs git-daemon[23388]: 'receive-pack': service not 
enabled for '/cvs/root/gitolite/repositories/packages/python-pytest.git'
Apr 30 15:23:31 1822-cvs git-daemon[24757]: 
'/cvs/root/gitolite/repositories/packages/test.gitt' does not appear to 
be a git repository
Apr 30 15:23:34 1822-cvs git-daemon[24765]: 'receive-pack': service not 
enabled for '/cvs/root/gitolite/repositories/packages/test.git'
Apr 30 15:23:39 1822-cvs git-daemon[24787]: 'receive-pack': service not 
enabled for '/cvs/root/gitolite/repositories/packages/test.git'


root at 1822-cvs /var/log# pkgbytime git-core-2
Sun Apr 15 10:07:48 2018 git-core-2.16.2-2.x86_64


root at 1822-cvs /var/log# rpm -q git-core --blink
git-core-2.16.2-2.x86_64.rpm
 ??????? <= git-core-2.16.0-1.x86_64.rpm


From glen at delfi.ee  Mon Apr 30 17:44:12 2018
From: glen at delfi.ee (=?UTF-8?Q?Elan_Ruusam=c3=a4e?=)
Date: Mon, 30 Apr 2018 18:44:12 +0300
Subject: push broken (from carme)
In-Reply-To: <073a67c6-6c77-3e4b-e645-29f68a846689@delfi.ee>
References: <073a67c6-6c77-3e4b-e645-29f68a846689@delfi.ee>
Message-ID: <8a91c2fc-13c2-e016-7c83-3feeea7c14b5@delfi.ee>



On 30/04/2018 16:24, Elan Ruusamae wrote:
>
> [~/relup/test(1) (rw-check)] ? git push -u
> fatal: '/packages/test' does not appear to be a git repository
> fatal: Could not read from remote repository.
>
> Please make sure you have the correct access rights
> and the repository exists. 
i am identified as glen... so what is going on.


[~/rpm/packages/pyp2rpm(3.3.2) (master)??] ? git ssh
PTY allocation request failed on channel 0
hello glen, this is gitolite v2.3.1 running on git 2.16.2
the gitolite config gives you the following access:
 ??? @R_???????? Refs
 ??? @R_???????? SPECS
 ???? R?? W????? gitolite-admin
 ? C? R?? W????? packages/..*
 ???? R?? W????? projects/.*
 ??? @R_???????? readonly/..*
 ??? @R_ @W_???? testing
Connection to git.pld-linux.org closed.


ps: seems my pushes worked on 27th of april from carme.
https://github.com/pld-linux/ruby/commit/f9cc3f389a01ff455c58149e52803dd72a309650


and still wrong from my own host

https://github.com/pld-linux/test/commit/cc6f29c1497581b6728a51f433c974e86c46286c