devel August 2025

devel@lists.fedoraproject.org

128 participants
228 discussions

Release rpkg-1.68 and fedpkg-1.46
by Ondrej Nosek 06 Jan '26

06 Jan '26

Hi all, a new version rpkg-1.68 together with fedpkg-1.46 are released containing both features and bugfixes. Currently, all supported versions (Fedora 40, Fedora 41, Fedora 42, Fedora Rawhide, EPEL 8, EPEL 9, EPEL 10) are present in stable repositories. Changelog (web documentation): https://docs.pagure.org/rpkg/releases/1.68.html https://docs.pagure.org/fedpkg/releases/1.46.html Both released (rpkg & fedpkg) versions need to be installed together, they contain some changes incompatible with older packages. All changes listed above are not new - most of them were released earlier as patches. Updates: https://bodhi.fedoraproject.org/updates/?builds=rpkg-1.68-1.el8&builds=rpkg… Alternative link: https://bodhi.fedoraproject.org/updates/?packages=rpkg&page=1 https://bodhi.fedoraproject.org/updates/?packages=fedpkg&page=1 rpkg is also available from PyPI. Because setuptools is not working on the latest Fedora versions, PyPI package was prepared in Hatchling instead. Fedpkg is not supported in Python 2 anymore. Thanks to all contributors; Special thanks to Adam Williamson and Diego Herrera for their notable contributions. Regards

1 1

yajl - call for new maintainer and/or to stop using it
by Daniel P. Berrangé 05 Jan '26

05 Jan '26

I've been maintainer of the yajl package in Fedora forever, as it was a dep of libvirt. yajl upstream has been dead since 2015, so the current release tarball has multiple CVEs, which I've patched downstream by grabbing patches from github issue comments from third parties or other distros [1]. In the libvirt 10.8.0 release that just hit rawhide, we've switched to using json-c instead. Aside from libvirt in stable Fedora release branches, there are a few other packages in Fedora still using yajl that I see: Io-language collectd crun grive2 i3 i3-gaps i3status libmodsecurity mod_security raptor2 xen If anyone is cares about the above packages enough to want to take over ownership of 'yajl', either now or in future, please let me know. I'm willing to keep ownership of yajl until the Fedora 41 branch goes end of life, at which point no version of libvirt will still use it If no new volunteer has stepped forward by then I'll be orphaning yajl. If you are the Fedora maintainer of any of the above packages, I'd strongly recommend talking to their respective upstream about switching JSON library to json-c instead of yajl, to avoid being stuck using a dead project forever. With regards, Daniel [1] I collect patches in src-git at https://github.com/berrange/yajl/tree/fedora-dist-git -- |: https://berrange.com -o- https://www.flickr.com/photos/dberrange :| |: https://libvirt.org -o- https://fstop138.berrange.com :| |: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|

4 6

Windows Secure Boot certificate expiration (June 2026)
by Mateus Rodrigues Costa 31 Dec '25

31 Dec '25

Hello all, As you guys know Secure Boot is supported by Fedora Linux and it relies on the Microsoft signing keys. Well, recently I was looking at this month's Windows 11 cumulative update and noticed this warning: Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates. Which links to https://support.microsoft.com/en-us/topic/windows-secure-boot-certificate-e… My question is if we as Fedora users should worry.... I guess that users with devices that actively receive BIOS updates should receive a update with the new certificates included, but it's unknown what will happen for devices that are basically out of support. I believe that fwupd should be able to update that certificate, but at least on my system the Microsoft certificate isn't shown on it (I believe on a UEFI Secure Boot VM it's shown) Should we worry about this? For instance, my device, a Dell laptop, for which fwupd recognizes: the firmware (which I update via a built in Bios flash utility), the dbx (updated via fwupd) and a mysterious "Dell Platform Key", which might be Microsoft's certificate along with some other Dell stuff. Is Linux ready for the Microsoft certificate expiring next year? Thanks for your time, Mateus Rodrigues Costa

20 47

Looking for provenpackager to update rapid-photo-downloader package
by Damon Lynch 18 Dec '25

18 Dec '25

Greetings Fedora community, I am the developer of Rapid Photo Downloader. The package for it in Fedora is about two years old, and crashes during start-up under Python 3.10. As the subject says, I'm looking for a provenpackager to update the package. I'm posting this message here at the suggestion of a fellow PyQt developer who unlike myself is a Fedora expert. I filed a bug report last year but the maintainer has been unable to work on it: https://bugzilla.redhat.com/show_bug.cgi?id=2031866 Meanwhile, two months ago Neal Gompa made this pull request to update it: https://src.fedoraproject.org/rpms/rapid-photo-downloader/pull-request/3 The current release is 0.9.33. Compared to the Fedora version, it requires a new package in Fedora: https://github.com/damonlynch/showinfilemanager Unfortunately I'm unable to volunteer my time because I managed to injure my hands while working on the code earlier this year. Serious typing injuries are not fun. :-( (I'm dictating this using a voice recognition program under Windows.) Fun fact: Fedora was the first distro to package Rapid Photo Downloader.

8 7

Replacing regular file with directory on RPM upgrade ?
by Daniel P. Berrangé 10 Dec '25

10 Dec '25

In the packaging guidelines we call out the problematic upgrades for replacing a directory with a non-directory, or replacing a symlink with a directory. We don't mention replacing a regular file with a directory though. Empirically that appears to be a broken scenario too. # ls -al /usr/lib64/gimp/3.0/plug-ins/gmic_gimp_qt -rwxr-xr-x. 1 root root 10443848 Aug 29 2024 /usr/lib64/gimp/3.0/plug-ins/gmic_gimp_qt # dnf update --enablerepo=updates-testing gmic-gimp ...snip... [5/8] Upgrading gmic-gimp-0:3.5.2-4.fc41.x86_64 >>> [RPM] failed to open dir gmic_gimp_qt of /usr/lib64/gimp/3.0/plug-ins/gmic_gimp_qt/: cpio: mkdir failed - File exists >>> [RPM] unpacking of archive failed on file /usr/lib64/gimp/3.0/plug-ins/gmic_gimp_qt/gmic_gimp_qt;67ceae1e: cpio: mkdir failed - Directory not empty >>> Unpack error: gmic-gimp-0:3.5.2-4.fc41.x86_64 Did something change in cpio, or has it always been broken for regular file to directory replacement too, and our docs were thus always incomplete ? With regards, Daniel [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/Directory_Replace… -- |: https://berrange.com -o- https://www.flickr.com/photos/dberrange :| |: https://libvirt.org -o- https://fstop138.berrange.com :| |: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|

6 8

fedora:rawhide --arch s390x container: bash missing prompt
by Marián Konček 03 Dec '25

03 Dec '25

When I run `podman run --arch s390x --rm -it fedora:rawhide` as well as `mock -r fedora-rawhide-s390x --shell`, the shell prompt is missing but the shell is still working. On F41 shell looks correct. This seems like a bug somewhere in the container. -- Marián Konček

5 12

F36 Change: Remove Wire Extensions Support (Self-Contained Change proposal)
by Ben Cotton 11 Nov '25

11 Nov '25

https://fedoraproject.org/wiki/Changes/RemoveWirelessExtensions == Summary == The legacy wireless extensions interface was replaced by the new mac80211/cfg80211 interface in 2007. The legacy Wireless Extensions support has been long deprecated and only supports long EOL WiFi encryption like WEP so it's time to disable it and remove it. == Owner == * Name: [[User:pbrobinson| Peter Robinson]] * Email: [mailto:pbrobinson@fedoraproject.org| pbrobinson(a)fedoraproject.org] == Detailed Description == The Wireless Extensions support in the kernel has been long replaced by the mac80211/cfg80211 support. Disable the kernel options and retire the wireless-tools userspace utilities. Wireless Extensions only supports a minor subset of the wireless interfaces, predominently the WEP interface and userspace has been replaced by iw/libnl/ip interfaces which offer a lot more advanced features as well as modern 802.11 functionality like WPA. == Benefit to Fedora == More secure and advanced features in wireless. In most cases most users won't notice a difference. The vast majority of users use NetworkManager to use 802.11 based wireless interfaces which has long ceased to support wireless extensions/wireless-tools, if it evere did. == Scope == * Proposal owners: ** Disable the wireless extensions interface in the kernel and any drivers that depend on it. The only driver that is currently enabled that requires wireless extension support is the Intel Pro Wireless 2100/2200 drivers, this hardware was released in 2003-2005 as part of the original Centrino laptop platforms and all officially supported devices were 32 bit so it's unlikely there's any current users but as they were mPCI cards it's possible there's a few users that put them into 64 bit machines. ** Retire the wireless-tools package, retirn any packages that depend on it, or migrate them to use libnl3. * Other developers: ** No impact * Release engineering: [https://pagure.io/releng/issue/10386 #10386] * Policies and guidelines: N/A (not a System Wide Change) * Trademark approval: N/A (not needed for this Change) == Upgrade/compatibility impact == A handful of packages still use the libiw interface and hence depend on the wireless-tools package. Some projects look dead upstream, a number have already been migrated in the last year or so. Where the project is alive upstream tickets have been filed requesting migration. The current remaining package list is: * conky * lxpanel * reaver == How To Test == * Check that the wireless extensions kernel options are disabled: (CONFIG_WEXT_CORE CONFIG_WEXT_PROC CONFIG_WEXT_SPY CONFIG_WEXT_PRIV CONFIG_CFG80211_WEXT CONFIG_CFG80211_WEXT_EXPORT) * Check the wireless-tools package is no longer available == User Experience == Generally users should notice little to no difference. == Dependencies == N/A (not a System Wide Change) == Contingency Plan == * Contingency mechanism: Leave WEXT enabled in the kernel, leave wireless-tools package in Fedora package repository. * Contingency deadline: GA * Blocks release? No. * Blocks product? No. == Documentation == N/A (not a System Wide Change) == Release Notes == N/A -- Ben Cotton He / Him / His Fedora Program Manager Red Hat TZ=America/Indiana/Indianapolis

8 12

/usr/bin/xz: Failed to enable the sandbox
by Orion Poplawski 31 Oct '25

31 Oct '25

I use centos stream 9 for my primary laptop. I'm trying to build some Fedora Rawhide packages in mock. When rpm is trying to uncompress xz tar balls I get: + /usr/lib/rpm/rpmuncompress -x /builddir/build/SOURCES/gdal-3.11.3-fedora.tar.xz /usr/bin/xz: Failed to enable the sandbox Any clue as to what is causing this? I'm not seeing any obvious SELinux errors. -- Orion Poplawski he/him/his - surely the least important thing about me IT Systems Manager 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 https://www.nwra.com/

3 4

Rebuilds needed for swig?!
by Michael J Gruber 29 Oct '25

29 Oct '25

Hi there, this is half a question and half a remark. python-PyMuPDF started to FTBFS recently with a weird error message: https://koschei.fedoraproject.org/build/21026539 python-PyMuPDF uses swig generated python bindings from the package mupdf. After staring at the error and koschei's list of changes for a while, knowing that my regular rebuilds in copr showed no such issue, I did the following in mock locally: rebuild and install mupdf (unchanged) rebuild python-PyMuPDF This worked. My current assumption is that that the patch in swig-4.3.1-4.fc43 introduced a change which made a rebuild necessary - i.e. the mupdf bindings built with swig-4.3.1-3 do not work when I use them to build python-PyMuPDF with swig-4.3.1-4. The rebuilt bindings do work. Since my mock changeroot does not want to downgrade swig I cannot test for sure, just wanted to throw it out there in case someone experiences strange effects with call signatures of overloaded functions using swig. Michael

2 5

Orphaning mu and dependencies
by Miro Hrončok 27 Oct '25

27 Oct '25

Hi, mu has been declared dead upstream: https://madewith.mu/mu/users/2025/08/16/rip.html As a result, I am orphaning the following Fedora packages: mu python-microfs python-nudatus python-pyqtchart I also recommend orphaning the following packages only depended on by mu: python-adafruit-board-toolkit (lbalhar) pgzero (lbalhar) uflash (kushal) Assuming mu is retired in six weeks, I will also remove it from the Python Classroom comps group on F44+. I will remain a co-maintainer of the orphaned packages in case there is a problem to be fixed on Fedora 41-43. -- Miro Hrončok -- Phone: +420777974800 Fedora Matrix: mhroncok

4 5

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

devel August 2025