From arekm at maven.pl  Tue Dec  7 21:51:58 2021
From: arekm at maven.pl (=?UTF-8?Q?Arkadiusz_Mi=c5=9bkiewicz?=)
Date: Tue, 7 Dec 2021 21:51:58 +0100
Subject: [packages/iputils] - epoch 3 (s20190709 > 20210722), BR: pkgconfig
In-Reply-To: <3a2973d1fda11d4c2c73488d06ab1c940768ce15_refs_heads_master@pld-linux.org>
References: <85d62f0fb8812f23ccbea7760cdcefc2eb98ed26_refs_heads_master@pld-linux.org>
 <3a2973d1fda11d4c2c73488d06ab1c940768ce15_refs_heads_master@pld-linux.org>
Message-ID: <9c17af67-1a06-60ea-92bf-178af67f24ae@maven.pl>

W dniu 07.12.2021 o?21:05, qboosh pisze:
> commit 3a2973d1fda11d4c2c73488d06ab1c940768ce15
> Author: Jakub Bogusz <qboosh at pld-linux.org>
> Date:   Tue Dec 7 21:05:33 2021 +0100
> 
>     - epoch 3 (s20190709 > 20210722), BR: pkgconfig

Hmm. My initial plan was to keep sXYZ scheme but:

[arekm at ixion ~]$ rpmvercmp s20190709 20210722
s20190709 < 20210722
[arekm at ixion ~]$ rpmvercmp 20210722 s20190709
20210722 > s20190709
[arekm at ixion ~]$ rpm --version
RPM version 4.16.1.3

You say otherwise, why?

-- 
Arkadiusz Mi?kiewicz, arekm / ( maven.pl | pld-linux.org )


From qboosh at pld-linux.org  Tue Dec  7 22:01:40 2021
From: qboosh at pld-linux.org (Jakub Bogusz)
Date: Tue, 7 Dec 2021 22:01:40 +0100
Subject: [packages/iputils] - epoch 3 (s20190709 > 20210722), BR: pkgconfig
In-Reply-To: <9c17af67-1a06-60ea-92bf-178af67f24ae@maven.pl>
References: <85d62f0fb8812f23ccbea7760cdcefc2eb98ed26_refs_heads_master@pld-linux.org>
 <3a2973d1fda11d4c2c73488d06ab1c940768ce15_refs_heads_master@pld-linux.org>
 <9c17af67-1a06-60ea-92bf-178af67f24ae@maven.pl>
Message-ID: <20211207210140.GA14222@mail>

On Tue, Dec 07, 2021 at 09:51:58PM +0100, Arkadiusz Mi?kiewicz via pld-devel-en wrote:
> W dniu 07.12.2021 o?21:05, qboosh pisze:
> > commit 3a2973d1fda11d4c2c73488d06ab1c940768ce15
> > Author: Jakub Bogusz <qboosh at pld-linux.org>
> > Date:   Tue Dec 7 21:05:33 2021 +0100
> > 
> >     - epoch 3 (s20190709 > 20210722), BR: pkgconfig
> 
> Hmm. My initial plan was to keep sXYZ scheme but:
> 
> [arekm at ixion ~]$ rpmvercmp s20190709 20210722
> s20190709 < 20210722
> [arekm at ixion ~]$ rpmvercmp 20210722 s20190709
> 20210722 > s20190709
> [arekm at ixion ~]$ rpm --version
> RPM version 4.16.1.3
> 
> You say otherwise, why?

Uh.
rpm 4.5 and rpm5 say

$ rpmvercmp s20190709 20210722
s20190709 > 20210722
$ rpmvercmp 20210722 s20190709
20210722 < s20190709

so it's not properly defined if it varies between versions/implementations


-- 
Jakub Bogusz    http://qboosh.pl/


From atler at pld-linux.org  Sat Dec 11 11:47:01 2021
From: atler at pld-linux.org (Jan Palus)
Date: Sat, 11 Dec 2021 11:47:01 +0100
Subject: broken osv.dev pld report
Message-ID: <20211211104701.ia3w6qncde47beoa@pine.grzadka>

Page https://srcbuilder.pld-linux.org/~pldth/qa.php?q=main-vuln greets
visitor with exception:

multiprocessing.pool.RemoteTraceback:
"""
Traceback (most recent call last):
File "/usr/lib64/python3.9/multiprocessing/pool.py", line 125, in worker
result = (True, func(*args, **kwds))
File "/usr/lib64/python3.9/multiprocessing/pool.py", line 51, in starmapstar
return list(itertools.starmap(args[0], args[1]))
File "/usr/share/python3.9/site-packages/ratelimit/decorators.py", line 113, in wrapper
return func(*args, **kargs)
File "/usr/share/python3.9/site-packages/ratelimit/decorators.py", line 80, in wrapper
return func(*args, **kargs)
File "/home/pld/admins/th/bin/query-vuln.py", line 48, in get_status
print("package: %s\nftp version: %s\nseverity: %s\nsummary: %s\npublished: %s\naffects: %s\nreferences: %s\n\n\n" % (vuln['package']['name'],
KeyError: 'package'
"""


From glen at pld-linux.org  Tue Dec 14 22:13:17 2021
From: glen at pld-linux.org (=?UTF-8?Q?Elan_Ruusam=c3=a4e?=)
Date: Tue, 14 Dec 2021 23:13:17 +0200
Subject: coq-8.13.1-2.x86_64: capabilities will be splitted due to their
 size over 64KB
In-Reply-To: <8c633eaa-36ab-d75c-b14f-b9a8a081ac90@pld-linux.org>
References: <8c633eaa-36ab-d75c-b14f-b9a8a081ac90@pld-linux.org>
Message-ID: <34008bdd-7187-f29c-a9e7-019fca951063@pld-linux.org>

still there:


coq-8.13.1-4.x86_64: capabilities will be splitted due to their size 
over 64KB
coq-8.13.1-4.x86_64: capabilities will be splitted due to their size 
over 64KB
coq-8.13.1-4.x86_64: capabilities will be splitted due to their size 
over 64KB



From arekm at maven.pl  Fri Dec 17 11:50:15 2021
From: arekm at maven.pl (=?UTF-8?Q?Arkadiusz_Mi=c5=9bkiewicz?=)
Date: Fri, 17 Dec 2021 11:50:15 +0100
Subject: php pear deps not generating
Message-ID: <5d8c0d0d-ae38-d286-07bd-0b9a0c8b2ce3@maven.pl>


Hi.

Is anything new needed with rpm 4.16 to get php pear deps filled?

I'm testing build on php-pear-Archive_Tar.spec and php.req/prov are not
used and thus no pear() deps gets generated.

-- 
Arkadiusz Mi?kiewicz, arekm / ( maven.pl | pld-linux.org )


From baggins at pld-linux.org  Fri Dec 17 14:12:44 2021
From: baggins at pld-linux.org (Jan =?utf-8?Q?R=C4=99korajski?=)
Date: Fri, 17 Dec 2021 14:12:44 +0100
Subject: php pear deps not generating
In-Reply-To: <5d8c0d0d-ae38-d286-07bd-0b9a0c8b2ce3@maven.pl>
References: <5d8c0d0d-ae38-d286-07bd-0b9a0c8b2ce3@maven.pl>
Message-ID: <YbyMzF/xkH5YeKTU@tachikoma.lan>

On Fri, 17 Dec 2021, Arkadiusz Mi?kiewicz via pld-devel-en wrote:

> 
> Hi.
> 
> Is anything new needed with rpm 4.16 to get php pear deps filled?
> 
> I'm testing build on php-pear-Archive_Tar.spec and php.req/prov are not
> used and thus no pear() deps gets generated.

There was something wrong with it and I disabled it over a year ago.
I honestly can't remember what was wrong, so feel free to reenable and
retest. It's in rpm-pld-macros package, file attr.php.

-- 
Jan R?korajski                    | PLD/Linux
SysAdm | baggins<at>pld-linux.org | http://www.pld-linux.org/


From glen at pld-linux.org  Fri Dec 24 11:49:46 2021
From: glen at pld-linux.org (=?UTF-8?Q?Elan_Ruusam=c3=a4e?=)
Date: Fri, 24 Dec 2021 12:49:46 +0200
Subject: libsz.so.2
Message-ID: <3e72dbf6-eb09-dd94-f737-c94c2748170e@pld-linux.org>

hdf5-1.10.7-4.x86_64: required "libsz.so.2()(64bit)" is provided by the 
following packages:
a) libaec-szip-0.3.2-1.x86_64
b) szip-2.1.1-1.x86_64



From glen at pld-linux.org  Tue Dec 28 11:21:02 2021
From: glen at pld-linux.org (=?UTF-8?Q?Elan_Ruusam=c3=a4e?=)
Date: Tue, 28 Dec 2021 12:21:02 +0200
Subject: [packages/rpm-pld-macros] allow overriding GOARCH/GOARM/GOOS
In-Reply-To: <8fdaf5810d85f437399e3c22d7a010d39d5c2093_refs_heads_master@pld-linux.org>
References: <7ea50c522048a35fae80c4b89f903aa7790cf27e_refs_heads_master@pld-linux.org>
 <8fdaf5810d85f437399e3c22d7a010d39d5c2093_refs_heads_master@pld-linux.org>
Message-ID: <f475a535-1219-9843-9470-b0f037ca817c@pld-linux.org>


On 28.12.2021 11:27, atler wrote:
> commit 8fdaf5810d85f437399e3c22d7a010d39d5c2093
> Author: Jan Palus <atler at pld-linux.org>
> Date:   Tue Dec 28 10:27:12 2021 +0100
>
>      allow overriding GOARCH/GOARM/GOOS
>
>   macros.go | 26 +++++++++++++-------------
>   1 file changed, 13 insertions(+), 13 deletions(-)
> ---
> diff --git a/macros.go b/macros.go
> index e1624a1..07efe21 100644
> --- a/macros.go
> +++ b/macros.go
> @@ -2,34 +2,34 @@
>   
>   %__go	\\\
>   %ifarch aarch64 \
> -	GOARCH=arm64 \\\
> +	GOARCH=${GOARCH-arm64} \\\

you probably want empty value be treated as not defined:


```


$ (GOARCH=; echo ${GOARCH-arm})

$ (GOARCH=; echo ${GOARCH:-arm})
arm

$

```




From qboosh at pld-linux.org  Tue Dec 28 20:35:49 2021
From: qboosh at pld-linux.org (Jakub Bogusz)
Date: Tue, 28 Dec 2021 20:35:49 +0100
Subject: cargo-vendor broken with openssl 3?
Message-ID: <20211228193549.GA31694@mail>

```
[qboosh at carme-pld dssim-3.0.2]$ cargo vendor
    Updating crates.io index
error: failed to sync

Caused by:
  failed to load pkg lockfile

Caused by:
  failed to get `imgref` as a dependency of package `dssim-core v3.1.0 (/home/users/qboosh/rpm/BUILD/dssim-3.0.2/dssim-core)`

Caused by:
  failed to fetch `https://github.com/rust-lang/crates.io-index`

Caused by:
  network failure seems to have happened
  if a proxy or similar is necessary `net.git-fetch-with-cli` may help here
  https://doc.rust-lang.org/cargo/reference/config.html#netgit-fetch-with-cli

Caused by:
  the SSL certificate is invalid; class=Ssl (16); code=Certificate (-17)
```

Fetching `https://github.com/rust-lang/crates.io-index` with curl works.

cargo-vendor works for me with rust 1.57.0 built with openssl 1.1.1l.


-- 
Jakub Bogusz    http://qboosh.pl/


From atler at pld-linux.org  Tue Dec 28 20:54:35 2021
From: atler at pld-linux.org (Jan Palus)
Date: Tue, 28 Dec 2021 20:54:35 +0100
Subject: cargo-vendor broken with openssl 3?
In-Reply-To: <20211228193549.GA31694@mail>
References: <20211228193549.GA31694@mail>
Message-ID: <20211228195435.rh2ebiasw74mik2k@pine>

On 28.12.2021 20:35, Jakub Bogusz wrote:
> ```
> [qboosh at carme-pld dssim-3.0.2]$ cargo vendor
>     Updating crates.io index
> error: failed to sync
> 
> Caused by:
>   failed to load pkg lockfile
> 
> Caused by:
>   failed to get `imgref` as a dependency of package `dssim-core v3.1.0 (/home/users/qboosh/rpm/BUILD/dssim-3.0.2/dssim-core)`
> 
> Caused by:
>   failed to fetch `https://github.com/rust-lang/crates.io-index`
> 
> Caused by:
>   network failure seems to have happened
>   if a proxy or similar is necessary `net.git-fetch-with-cli` may help here
>   https://doc.rust-lang.org/cargo/reference/config.html#netgit-fetch-with-cli
> 
> Caused by:
>   the SSL certificate is invalid; class=Ssl (16); code=Certificate (-17)
> ```
> 
> Fetching `https://github.com/rust-lang/crates.io-index` with curl works.
> 
> cargo-vendor works for me with rust 1.57.0 built with openssl 1.1.1l.

I guess it has more to do with /etc/openssl/certs/ca-certificates.crt
being used on carme which is not owned by any package and dated
2010-02-05.


From atler at pld-linux.org  Tue Dec 28 22:27:16 2021
From: atler at pld-linux.org (Jan Palus)
Date: Tue, 28 Dec 2021 22:27:16 +0100
Subject: cargo-vendor broken with openssl 3?
In-Reply-To: <20211228195435.rh2ebiasw74mik2k@pine>
References: <20211228193549.GA31694@mail>
 <20211228195435.rh2ebiasw74mik2k@pine>
Message-ID: <20211228212716.7xff3ynjlpnbzzuy@pine>

On 28.12.2021 20:54, Jan Palus wrote:
> On 28.12.2021 20:35, Jakub Bogusz wrote:
> > ```
> > [qboosh at carme-pld dssim-3.0.2]$ cargo vendor
> >     Updating crates.io index
> > error: failed to sync
> > 
> > Caused by:
> >   failed to load pkg lockfile
> > 
> > Caused by:
> >   failed to get `imgref` as a dependency of package `dssim-core v3.1.0 (/home/users/qboosh/rpm/BUILD/dssim-3.0.2/dssim-core)`
> > 
> > Caused by:
> >   failed to fetch `https://github.com/rust-lang/crates.io-index`
> > 
> > Caused by:
> >   network failure seems to have happened
> >   if a proxy or similar is necessary `net.git-fetch-with-cli` may help here
> >   https://doc.rust-lang.org/cargo/reference/config.html#netgit-fetch-with-cli
> > 
> > Caused by:
> >   the SSL certificate is invalid; class=Ssl (16); code=Certificate (-17)
> > ```
> > 
> > Fetching `https://github.com/rust-lang/crates.io-index` with curl works.
> > 
> > cargo-vendor works for me with rust 1.57.0 built with openssl 1.1.1l.
> 
> I guess it has more to do with /etc/openssl/certs/ca-certificates.crt
> being used on carme which is not owned by any package and dated
> 2010-02-05.

Works better with SSL_CERT_FILE=/etc/certs/ca-certificates.crt cargo vendor

Relevant code:

https://github.com/alexcrichton/openssl-probe/blob/4a48569829cc7834817bf2fecf8fec4236fa6de5/src/lib.rs#L24-L44
https://github.com/alexcrichton/openssl-probe/blob/4a48569829cc7834817bf2fecf8fec4236fa6de5/src/lib.rs#L106-L115