June 2015 - packaging - Fedora Mailing-Lists

Summary/Minutes from today's FPC Meeting (2015-06-18 16:00 - 17:35 UTC)

by James Antill

====================== #fedora-meeting-1: fpc ====================== Meeting started by geppetto at 16:00:44 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting-1/2015-06-18/fpc.2015-06-... . Meeting summary --------------- * Roll Call (geppetto, 16:00:44) * Schedule (geppetto, 16:10:43) * LINK: https://lists.fedoraproject.org/pipermail/packaging/2015-June/010705.html (geppetto, 16:10:49) * #541 Package Naming Guidelines - Clarification Required (geppetto, 16:11:16) * LINK: https://fedorahosted.org/fpc/ticket/541 (geppetto, 16:11:17) * #542 Forbid "python -OO" for Python < 3.5 (geppetto, 16:16:16) * LINK: https://fedorahosted.org/fpc/ticket/542 (geppetto, 16:16:16) * ACTION: Forbid "python -OO" for all versions of Python, no need for rationale in policy (+1:4, 0:1, -1:0) (geppetto, 16:38:28) * ACTION: Need more votes (geppetto, 16:38:37) * #281 New Python Macros for Easier Packaging (geppetto, 16:40:32) * LINK: https://fedorahosted.org/fpc/ticket/281 (geppetto, 16:40:32) * ACTION: New Python Macros for Easier Packaging, py2_build/py2_install/etc. (+1:4, 0:1, -1:0) (geppetto, 16:49:05) * ACTION: Need more votes (geppetto, 16:49:12) * #541 Package Naming Guidelines - Clarification Required (geppetto, 16:50:59) * LINK: https://fedorahosted.org/fpc/ticket/541 (geppetto, 16:50:59) * LINK: https://fedoraproject.org/w/index.php?title=PackagingDrafts% 2FLowerCase&diff=416012&oldid=416011 (tibbs|w, 16:52:08) * ACTION: Package Naming Guidelines - Clarification (+1:4, 0:0, -1:1) (geppetto, 16:59:26) * ACTION: Need more votes (geppetto, 16:59:34) * Open Floor (geppetto, 16:59:43) * LINK: https://fedoraproject.org/w/index.php?title=Packaging:NamingGuidelines&ol... (racor, 17:05:52) Meeting ended at 17:35:30 UTC. Action Items ------------ * Forbid "python -OO" for all versions of Python, no need for rationale in policy (+1:4, 0:1, -1:0) * Need more votes * New Python Macros for Easier Packaging, py2_build/py2_install/etc. (+1:4, 0:1, -1:0) * Need more votes * Package Naming Guidelines - Clarification (+1:4, 0:0, -1:1) * Need more votes Action Items, by person ----------------------- * **UNASSIGNED** * Forbid "python -OO" for all versions of Python, no need for rationale in policy (+1:4, 0:1, -1:0) * Need more votes * New Python Macros for Easier Packaging, py2_build/py2_install/etc. (+1:4, 0:1, -1:0) * Need more votes * Package Naming Guidelines - Clarification (+1:4, 0:0, -1:1) * Need more votes People Present (lines said) --------------------------- * geppetto (114) * tibbs|w (86) * tomspur (38) * gbcox (26) * mbooth (19) * racor (15) * zodbot (12) * nirik (10) * abadger1999 (1) * Corey84 (1) * tibbs (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

8 years, 10 months

1
0
0 / 0

Have secure by default permissions for configuration and log files

by Kurt Seifried

https://fedorahosted.org/fpc/ticket/543 Have secure by default permissions for configuration and log files [edit] Proposed change All configuration files (e.g. files in /etc/) and all log files (e.g. files in /var/log/) must not be set world-readable unless there is a functional reason to do so. By default, configuration files should be chmod 600 or 0640 and log files should be chmod 0600. This is due to a continuing number of security issues with world readable files that contain sensitive information (e.g. passwords and access tokens or logged usernames and commands for example). Some examples: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=configuration+file+permis... http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=log+file+permissions https://fedoraproject.org/wiki/Kurtseifried/secure_config_and_log_permiss... Thanks! -- Kurt Seifried -- Red Hat -- Product Security -- Cloud PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993 Red Hat Product Security contact: secalert(a)redhat.com

8 years, 10 months

1
0
0 / 0

Schedule for Thursday's FPC Meeting (2015-06-18 16:00 UTC)

by James Antill

Following is the list of topics that will be discussed in the FPC meeting Thursday at 2015-06-18 16:00 UTC in #fedora-meeting-1 on irc.freenode.net. Local time information (via. rktime): 2015-06-18 09:00 Thu US/Pacific PDT 2015-06-18 12:00 Thu US/Eastern EDT 2015-06-18 16:00 Thu UTC <- 2015-06-18 17:00 Thu Europe/London BST 2015-06-18 18:00 Thu Europe/Paris CEST 2015-06-18 18:00 Thu Europe/Berlin CEST 2015-06-18 21:30 Thu Asia/Calcutta IST ------------------new day---------------------- 2015-06-19 00:00 Fri Asia/Singapore SGT 2015-06-19 00:00 Fri Asia/Hong_Kong HKT 2015-06-19 01:00 Fri Asia/Tokyo JST 2015-06-19 02:00 Fri Australia/Brisbane EST Links to all tickets below can be found at: https://fedorahosted.org/fpc/report/13 = Followups = #topic #281 New Python Macros for Easier Packaging .fpc 281 https://fedorahosted.org/fpc/ticket/281 #topic #508 New GID for openstack-neutron .fpc 508 https://fedorahosted.org/fpc/ticket/508 #topic #539 Procedure for approving package review process exceptions .fpc 539 https://fedorahosted.org/fpc/ticket/539 = New business = #topic #541 Package Naming Guidelines - Clarification Required .fpc 541 https://fedorahosted.org/fpc/ticket/541 #topic #542 Forbid "python -OO" for Python < 3.5 .fpc 542 https://fedorahosted.org/fpc/ticket/542 = Open Floor = For more complete details, please visit each individual ticket. The report of the agenda items can be found at: https://fedorahosted.org/fpc/report/13 If you would like to add something to this agenda, you can reply to this e-mail, file a new ticket at https://fedorahosted.org/fpc, e-mail me directly, or bring it up at the end of the meeting, during the open floor topic. Note that added topics may be deferred until the following meeting.

8 years, 10 months

1
0
0 / 0

Packaging Guidelines for Applications using Git Submodules

by Gerald B. Cox

I'm trying to figure out the best way to handle the situation where a project decides to use submodules in Git. The archive generated doesn't incorporate the submodule files. I've done some searching on this, and haven't really come up with much. I've reviewed: Packaging:Github <https://fedoraproject.org/wiki/Packaging:SourceURL?rd=Packaging/SourceURL...> ; but that really doesn't address the submodule issue. I looked through some packages that are currently in the Fedora repository and found where a few folks have rebuilt the tarball and referenced that version as the Source in the spec file; then they put in a comment stating: The source of this package was pulled from upstreams' vcs. Use the following commands to generate the tarball: ... - git clone ... - git submodule init - git submodule update ... This approach is the best that I've found. Any other suggestions? Thanks much!

8 years, 10 months

3
4
0 / 0

Doubt about the name for a package mkdocs

by William Moreno

Hello I am trying to package mkdocs , it si similar to sphinx, but not as powerfull, but can be very usefull. https://bugzilla.redhat.com/show_bug.cgi?id=1230963 I am packaging only one version build with phyton 3 and naming it mkdocs, but I am not sure it is better to name this docs as python3-mkdocs and build python-mkdocs also. I think than build python-mkdocs and python3-mkdocs with Provides: mkdocs in the Python3 package can work. Really I not sure how to proceed in this case, but I think if it would be good to have both versions available for booth Python releases and provide by default the version for Python 3 when a user install mkdocs with dnf. William Moreno Reyes http://about.me/williamjmorenor

8 years, 10 months

3
5
0 / 0

Summary/Minutes from today's FPC Meeting (2015-06-11 16:00 - 17:20 UTC)

by James Antill

====================== #fedora-meeting-1: fpc ====================== Meeting started by geppetto at 16:00:44 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting-1/2015-06-11/fpc.2015-06-... . Meeting summary --------------- * Roll Call (geppetto, 16:00:45) * Schedule (geppetto, 16:06:55) * LINK: https://lists.fedoraproject.org/pipermail/packaging/2015-June/010680.html (geppetto, 16:06:58) * #539 Procedure for approving package review process exceptions (geppetto, 16:10:29) * LINK: https://fedorahosted.org/fpc/ticket/539 (geppetto, 16:10:29) * LINK: https://admin.fedoraproject.org/pkgdb/request/package/ requires a review url, but maybe a trac url? (tomspur_, 16:11:50) * #533 Distinguish between packaging modules and applications in python packaging (geppetto, 16:12:09) * LINK: https://fedorahosted.org/fpc/ticket/533 (geppetto, 16:12:09) * #513 Use python -Es in shbang (geppetto, 16:24:53) * LINK: https://fedorahosted.org/fpc/ticket/513 (geppetto, 16:24:54) * ACTION: tibbs Deal with non-voted on parts of 513 in other tickets, macros. etc. (geppetto, 16:47:33) * #281 New Python Macros for Easier Packaging (geppetto, 16:47:55) * LINK: https://fedorahosted.org/fpc/ticket/281 (geppetto, 16:47:55) * Open Floor (geppetto, 17:17:22) Meeting ended at 17:19:52 UTC. Action Items ------------ * tibbs Deal with non-voted on parts of 513 in other tickets, macros. etc. Action Items, by person ----------------------- * tibbs * tibbs Deal with non-voted on parts of 513 in other tickets, macros. etc. * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * tibbs|w (99) * geppetto (76) * tomspur_ (37) * Rathann (36) * zodbot (13) * mbooth (3) * racor (1) * tibbs (0) * tomspur (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

8 years, 10 months

1
0
0 / 0

Schedule for Thursday's FPC Meeting (2015-06-11 16:00 UTC) Follow ups: 5

by James Antill

Following is the list of topics that will be discussed in the FPC meeting Thursday at 2015-06-11 16:00 UTC in #fedora-meeting-1 on irc.freenode.net. Local time information (via. rktime): 2015-06-11 09:00 Thu US/Pacific PDT 2015-06-11 12:00 Thu US/Eastern EDT 2015-06-11 16:00 Thu UTC <- 2015-06-11 17:00 Thu Europe/London BST 2015-06-11 18:00 Thu Europe/Paris CEST 2015-06-11 18:00 Thu Europe/Berlin CEST 2015-06-11 21:30 Thu Asia/Calcutta IST ------------------new day---------------------- 2015-06-12 00:00 Fri Asia/Singapore SGT 2015-06-12 00:00 Fri Asia/Hong_Kong HKT 2015-06-12 01:00 Fri Asia/Tokyo JST 2015-06-12 02:00 Fri Australia/Brisbane EST Links to all tickets below can be found at: https://fedorahosted.org/fpc/report/13 = Followups = #topic #281 New Python Macros for Easier Packaging .fpc 281 https://fedorahosted.org/fpc/ticket/281 #topic #508 New GID for openstack-neutron .fpc 508 https://fedorahosted.org/fpc/ticket/508 #topic #513 Use python -Es in shbang .fpc 513 https://fedorahosted.org/fpc/ticket/513 #topic #533 Distinguish between packaging modules and applications in python packaging .fpc 533 https://fedorahosted.org/fpc/ticket/533 #topic #539 Procedure for approving package review process exceptions .fpc 539 https://fedorahosted.org/fpc/ticket/539 = Open Floor = For more complete details, please visit each individual ticket. The report of the agenda items can be found at: https://fedorahosted.org/fpc/report/13 If you would like to add something to this agenda, you can reply to this e-mail, file a new ticket at https://fedorahosted.org/fpc, e-mail me directly, or bring it up at the end of the meeting, during the open floor topic. Note that added topics may be deferred until the following meeting.

8 years, 10 months

1
0
0 / 0

Summary/Minutes from today's FPC Meeting (2015-06-04 16:00 - 17:35 UTC)

by James Antill

====================== #fedora-meeting-1: fpc ====================== Meeting started by geppetto at 16:02:06 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting-1/2015-06-04/fpc.2015-06-... . Meeting summary --------------- * Roll Call (geppetto, 16:02:06) * #539 Procedure for approving package review process exceptions (geppetto, 16:09:50) * LINK: https://fedorahosted.org/fpc/ticket/539 (geppetto, 16:09:50) * Schedule (geppetto, 16:18:48) * LINK: https://lists.fedoraproject.org/pipermail/packaging/2015-June/010674.html (geppetto, 16:18:52) * #534 Add provides for python2-foo to python-foo packages (geppetto, 16:19:10) * LINK: https://fedorahosted.org/fpc/ticket/534 (geppetto, 16:19:11) * LINK: https://fedoraproject.org/w/index.php?title=User%3ATomspur% 2FPackaging%3APython&diff=cur&oldid=413644 (tomspur, 16:25:22) * LINK: https://fedoraproject.org/wiki/User:Rkuska/f24packaging this is what I would like to have specfiles for python in f24 look like (rkuska, 16:48:55) * ACTION: Add provides for python2-foo to python-foo packages (+1:5, 0:0, -1:0) (geppetto, 16:55:27) * #531 Establish guidelines for use of weak dependencies in package specifications for F23. (geppetto, 16:56:05) * LINK: https://fedorahosted.org/fpc/ticket/531 (geppetto, 16:56:05) * ACTION: Establish guidelines for use of weak dependencies in package specifications, no first and last section (+1:5, 0:0, -1:0) (geppetto, 17:07:10) * #538 Bundling exception for htmlunit-core-js (geppetto, 17:08:03) * LINK: https://fedorahosted.org/fpc/ticket/538 (geppetto, 17:08:04) * LINK: http://htmlunit.sourceforge.net/gettingLatestCode.html (geppetto, 17:11:32) * LINK: https://github.com/HtmlUnit/htmlunit-core-js (geppetto, 17:12:05) * LINK: https://github.com/HtmlUnit/htmlunit-core-js/tree/master/src/net/sourcefo... (geppetto, 17:13:09) * Open Floor (geppetto, 17:17:48) * LINK: https://fedoraproject.org/wiki/Packaging:Python#Executables_in_.2Fusr.2Fbin (tibbs|w, 17:31:44) Meeting ended at 17:38:35 UTC. Action Items ------------ * Add provides for python2-foo to python-foo packages (+1:5, 0:0, -1:0) * Establish guidelines for use of weak dependencies in package specifications, no first and last section (+1:5, 0:0, -1:0) Action Items, by person ----------------------- * **UNASSIGNED** * Add provides for python2-foo to python-foo packages (+1:5, 0:0, -1:0) * Establish guidelines for use of weak dependencies in package specifications, no first and last section (+1:5, 0:0, -1:0) People Present (lines said) --------------------------- * tibbs|w (123) * geppetto (81) * tomspur (32) * rkuska (14) * zodbot (11) * SmootherFrOgZ (5) * mbooth (4) * mstuchli (2) * sYnfo (1) * tibbs (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

8 years, 10 months

1
0
0 / 0

Schedule for Thursday's FPC Meeting (2015-06-04 16:00 UTC) Follow-ups: 4, New: 4

by James Antill

Following is the list of topics that will be discussed in the FPC meeting Thursday at 2015-06-04 16:00 UTC in #fedora-meeting-1 on irc.freenode.net. Local time information (via. rktime): 2015-06-04 09:00 Thu US/Pacific PDT 2015-06-04 12:00 Thu US/Eastern EDT 2015-06-04 16:00 Thu UTC <- 2015-06-04 17:00 Thu Europe/London BST 2015-06-04 18:00 Thu Europe/Paris CEST 2015-06-04 18:00 Thu Europe/Berlin CEST 2015-06-04 21:30 Thu Asia/Calcutta IST ------------------new day---------------------- 2015-06-05 00:00 Fri Asia/Singapore SGT 2015-06-05 00:00 Fri Asia/Hong_Kong HKT 2015-06-05 01:00 Fri Asia/Tokyo JST 2015-06-05 02:00 Fri Australia/Brisbane EST Links to all tickets below can be found at: https://fedorahosted.org/fpc/report/13 = Followups = #topic #281 New Python Macros for Easier Packaging .fpc 281 https://fedorahosted.org/fpc/ticket/281 #topic #508 New GID for openstack-neutron .fpc 508 https://fedorahosted.org/fpc/ticket/508 #topic #513 Use python -Es in shbang .fpc 513 https://fedorahosted.org/fpc/ticket/513 #topic #531 Establish guidelines for use of weak dependencies in package specifications for F23. .fpc 531 https://fedorahosted.org/fpc/ticket/531 = New business = #topic #533 Distinguish between packaging modules and applications in python packaging .fpc 533 https://fedorahosted.org/fpc/ticket/533 #topic #534 Add provides for python2-foo to python-foo packages .fpc 534 https://fedorahosted.org/fpc/ticket/534 #topic #538 Bundling exception for htmlunit-core-js .fpc 538 https://fedorahosted.org/fpc/ticket/538 #topic #539 Procedure for approving package review process exceptions .fpc 539 https://fedorahosted.org/fpc/ticket/539 = Open Floor = For more complete details, please visit each individual ticket. The report of the agenda items can be found at: https://fedorahosted.org/fpc/report/13 If you would like to add something to this agenda, you can reply to this e-mail, file a new ticket at https://fedorahosted.org/fpc, e-mail me directly, or bring it up at the end of the meeting, during the open floor topic. Note that added topics may be deferred until the following meeting.

8 years, 10 months

1
0
0 / 0

AppData Guidelines

by Gerald B. Cox

I've reviewed Packaging:AppData <https://fedoraproject.org/wiki/Packaging:AppData> and have some questions. When running fedpkg lint, I receive:*copyq.x86_64: E: invalid-appdata-file /usr/share/appdata/copyq.appdata.xml* I then issue appstream-util validate copyq.appdata.xml and receive: *copyq.appdata.xml: FAILED: • tag-missing : <name> is not present • tag-missing : <summary> is not present Validation of files failed* However, when I run appstream-util validate-relax, it passes. The guidelines indicate you MUST follow the AppData Specification Page <http://people.freedesktop.org/~hughsient/appdata/>; but it doesn't really give an indication of what is required, and what is optional. It only says "should"; however: If you read the description of <name> and <summary> it says the contents for both of those fields are "usually the same as the desktop file" - which indicates it is known to be a duplicate of what is in the desktop file, but yet implies it is still required - otherwise why bother to point out the correlation to the desktop file. Upstream response is if they are duplicated in the desktop file, then they aren't needed in the appdata file. There is also a bug report <https://bugzilla.redhat.com/show_bug.cgi?id=1185361> which discusses rpmlint and validate-relax. It touches upon the fact that validate-relax may be missing some things, but doesn't appear to reach any conclusion. The Fedora guidelines say to use "validate-relax", but rpmlint appears to use "validate". Which is correct? Is <name> and <summary> optional or required?

8 years, 11 months

2
2
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

packaging June 2015