- 1 Fedora Weekly News Issue 152
- 1.1 Announcements
- 1.2 Developments
- 1.3 Translation
- 1.4 Security Advisories
Fedora Weekly News Issue 152
Welcome to Fedora Weekly News Issue 152 for the week ending November 16th, 2008.
This week's exciting issues features extensive coverage of a Server SIG formation in the Developments beat, along with clarifications from the Fedora Engineering leadership on feature freeze policies. In announcements, reminders of this Tuesday's public Fedora Board meeting on fedora-board-meeting at irc.freenode.net. The Translation beat features various Fedora 10 milestones and an introduction of three new members to the translation team. In Artwork, some history on the genesis of the Fedora infinity bubble is saved, and more feedback on Fedora 10 themes. Virtualization includes updates of dom0 support in the upstream kernel, and a RFC on including greater detail in domain events. Finally, Fedora 9 and 8 updates for the week in Security Advisories. These are but a few highlights in this week's Fedora Weekly News!
If you are interested in contributing to Fedora Weekly News, please see our 'join' page.
In this section, we cover announcements from the Fedora Project.
Contributing Writer: Max Spevack
Public Fedora Board Meeting on IRC
Paul Frields reminded the community about the upcoming Fedora Board meeting on IRC. The meeting will be on 2008-11-19 (Tuesday) at 19:00 UTC.
"Join #fedora-board-meeting to see the Board's conversation. This channel is read-only for non-Board members. Join #fedora-board-public to discuss topics and post questions. This channel is read/write for everyone.
The moderator will direct questions from the #fedora-board-public channel to the Board members at #fedora-board-meeting. This should limit confusion and ensure our logs are useful to everyone."
Upcoming Bugzilla Activities
Jon Stanley wrote about some upcoming Bugzilla changes, that will coincide with Fedora 10's release. There are two things of which people should be aware: First, "we will be rebasing all rawhide bugs to F10. This will result in regular bugs reported against rawhide during the Fedora 10 development cycle being changed to version '10' instead of their current assignment, 'rawhide'."; Second, "all bugs for EOL releases (at this point, Fedora 8) will get a comment on or about GA of Fedora 10, explaining that one month of maintenance remains, and to either move the bug to a later version if still applicable, or they will be automatically closed in one month with a resolution of WONTFIX."
See the link below for the complete announcement.
In this section the people, personalities and debates on the @fedora-devel mailing list are summarized.
Contributing Writer: Oisin Feeley
Features Policy Modified
The latest FESCo discussions (2008-11-12) clarified the Features process. The changes make explicit the need for testing to be complete one week prior to the final freeze. Failure to meet that condition can result in FESCo deciding to drop the feature or implement a contingency plan or other suitable action.
 Features are "a significant change or enhancement to the version of Fedora currently under development": http://fedoraproject.org/wiki/Features/Policy/Definitions
The spur to these discussions was several last-minute changes for Fedora 10 which included dropping the instant-messaging client Empathy as the default, and the late addition of LiveConnect (see FWN#151) and AMQP. Earlier confusion about the Feature process and difficulties with communication had also been expressed (see FWN#147) after the decision to drop the Lightweight X11 Desktop Environment as a feature.
 The Advanced Messaging Queue Protocol is a vendor-neutral middleware transport for business processes: http://en.wikipedia.org/wiki/Advanced_Message_Queuing_Protocol
The other major changes to the process include the emailing of the Feature owner to inform them when their feature is being discussed by FESCo and any decisions made concerning said feature. The extra work involved in tracking down email addresses was anticipated to be an over-burdening of the committee chair, Brian Pepple. To ease this problem it was decided that Feature owners must include current email addresses on their Feature pages.
DanHorák announced that a "[...] formal entity to coordinate [...] the server fundamentals that later create a successful enterprise product [...]" had been launched as a SIG. He invited constructive ideas and the wiki page suggests that the SIG has many important initial goals including: a spin for headless servers, CLI equivalents of GUI tools, a lightweight installer and maintenance of the
The extensive discussion which followed mostly consisted of approval for the idea. Dennis Gilmore expressed enthusiasm for the general idea and specifically requested kickstart files for different types of servers and "best practice" whitepapers. An example of one of the issues the SIG might deal with was the observation by Chris Adams that an installation of
ntop had resulted in seventy dependencies, including
metacity, being pulled down. Peter Robinson attributed this to
graphviz and suggested that while such problems were declining in number it would be useful for the ServerSIG to co-ordinate bug filing for these issues. Chris provided a script which allowed test installs into a subdirectory to determine "what gets pulled in." Later James Antill mentioned two useful scripts written by himself and Seth Vidal which show package dependencies and provides as a tree structure. Dominik "rathan" Mierzejewski added a mention of
rpmreaper, a utility which eases the removal of unnecessary dependencies.
After Chris observed that "[w]ith rawhide, it appears impossible to install a kernel without pulling in X libraries (because of plymouth), so I guess the base X libraries can be considered "core" now" the conversation took a more adversarial turn. The accuracy of this statement turned out to depend on whether
pango were considered to be "X libraries" and Chris demonstrated the dependency chain as originating with the
plymouth-plugin-solar. Les Mikesell commented: "This is all pretty strange from a server perspective. And plymouth is there to keep the screen from blinking while you boot?" When Jesse Keating replied that Plymouth "handl[ed] the passphrase prompting for encrypted volumes" Les argued that it should be optional for remote, headless boxes. Dominik "rathann" Mierzejewski was shocked when Jesse Keating pointed out that
plymouth also provided working
/var/log/boot.logs: " Hm, you're right, all my boot.log files are 0 bytes (F-9). So instead of fixing the bug, a new package was introduced? Amazing." Dominik's dissatisfaction continued to be unabated when he was informed that the absence of the kernel commandline parameter "rhgb" would result in
plymouthd running but without any graphical plugins.
The automatic selection of
plymouth-plugin-solar as opposed to the alternate "plymouth-text-and-details-only" resulted in a discussion around whether it was possible to make
yum behave differently in such ambiguous situations. Enrico Scholz wished to add a "fail, warn and/or prompt when multiple packages satisfy a (virtual) dependency[.]" Seth Vidal reminded him that the constraint of non-interactive defaults meant that this might not work. James Antill posted that he had a patch to
yum which "[...] would allow Fedora (or any active repo.) to configure these choices manually. We could then also easily have different defaults for the desktop vs. the server spins." James received some questions from Jesse Keating and Bill Nottingham who asked how per-spin defaults would be stored and how to deal with conflicting information from multiple repositories. His answer suggested that introducing new repositories for the metadata or changing its syntax would be necessary.
Dan Horák's desire to remove
plymouth entirely was dismissed as non-optional by Bill Nottingham as it will take on an even more important role in storage handling in the future. Bill suggested that the default plugin was optional however. He reassured Dan that as regards headless machines there had been "[...] some testing on PPC boxes via serial/hvc consoles. Please test that it works in your scenarios as well, of course." When Enrico Scholz rejected disk encryption as important for servers Jesse Keating made the case that "In a colo environment I /would/ want some encryption on the disk, and if I have to use a remote kvm to input the passphrase at reboot time, that's OK. Reboots are either planned events, or emergencies, both of which are going to require the attention of the people who have the passphrase." Alan Cox backed this up: "If you are storing personal data on a system in a colo its practically mandatory to have encryption, and if you are storing anything sensitive its a big deal indeed - at least in those parts of the world with real data and privacy law ;)"
The thread continued in fits and starts. Adam Tkac raised the problem of handling static IPs with
NetworkManager (see this same FWN#152 "NetworkManager keyfiles for Pre-login Static Routes" for a discussion of as yet undocumented features). Chuck Anderson disputed that the problem existed and provided commandline and GUI solutions: "[...] for system-wide connections which you would presumably want for a server, you edit /etc/sysconfig/networkscripts/ifcfg-* as usual and NM will bring the interface up at boot. From the desktop, you can Edit Connections and create a new static connection and select it instead of the System or Auto connection which is very handy when moving between networks that don't support DHCP."
An important addendum was provided by Olivier Galibert "Try a "chkconfig -list network". It should be on for levels 2-5. If it isn't, you haven't enabled the old-style networking [.]" The same point was made by Chuck "Are you using NetworkManager or network service? chkconfig -list NetworkManager; chkconfig -list network If NetworkManager is enabled and network is not, then you need to change ifcfg-eth0: NM_CONTROLLED=yes" and by Bill Nottingham "You need to either set NM_CONTROLLED to something other than 'no', or enable the 'network' service. In either case, NM's static network support is not your problem."
The LSB also came in for a bashing due to infrequently used, old tools (such as
ypbind and the insecure r-commands) being installed to achieve compliance. Patrice Dumas clarified that
ypbind was necessary in
@base to provide
NIS functionality. Later discussion separated out LSB-Core and LSB-Desktop which should simplify making a minimal install LSB compliant. Bill Nottingham and Chris Adams performed a dissection of
@core with the intent of separating out items such as
ed and others into
Jeremy Katz outlined a perspective from the Quality Assurance point of view. The burden imposed by preserving the modularity that many of the participants advocated sounds quite high: "[...] trying to preserve that modularity combinatorially adds to the testing matrix and also makes it significantly more difficult to write code since you can no longer depend on functionality. It also makes things slower as you have to conditionally check for things constantly [...] It's more than just /etc/init.d/network that has to be maintained. There's oodles of stuff in install-time configuration that will have to be maintained, tested, and have things fixed when people report them." Seth Vidal acknowledged this but cautioned against dismissing the objections to particular changes as merely "neoluddite".
The massive thread included much more discussion and resists easy summary. Those interested should probably plow through the messages. Among the issues raised were finding DBus documentation and contention between class devices to set default routes.
A quote from DanHorak which seems to offer the perspective of the ServerSIG concisely is appropriate in closing: "It is really time to look back at the roots of Unix systems. It should be a combination of small pieces with well defined interfaces doing well their tasks. Only the time had changed those pieces from simple command line utilities to more complex ones."
NetworkManager keyfiles for Pre-login Static Routes
In the course of the ServerSIG discussions (see this same FWN#152 "Server SIG") an interesting question about
NetworkManager was asked by Les Mikesell: "If you bring up a mix of static and dynamically assigned interfaces, can you control which gets to assign the default route and DNS servers?"
Dan Williams provided a useful description of how
NetworkManager currently decides the default route. In response to Olivier Galibert he added that static routes could be set up using the "[...] connection editor see the "Routes..." button in the IPv4 tab. Routes from ifcfg files aren't yet supported, but could be. Routes from keyfile-based system connections (ie, prelogin) are supported." After this tidbit Chuck Anderson prodded Dan into explaining that keyfiles were a way to support things like "VPN, 3G, WPA" which were difficult or impossible to support with the ifcfg files in
/etc/sysconfig/network-scripts. "NM has a system settings 'keyfile' plugin that allows editing system connections from the connection editor, or your favorite text editor if you don't use a GUI at all. Add `,keyfile' to the --plugins argument in the /usr/share/dbus-1/systemservices/org.freedesktop.NetworkManagerSystemSettings.service file, and then 'killall -TERM nm-system-settings'."
Jesse Keating wondered when and where the documentation for this was placed and Dan replied "[w]hen I struggle up for air from the tarpit that is the concurrent release of NM 0.7 + F10 + RHEL 5.3? :) "
Flash 10 in 64-bit Fedora 9
Jos Vos asked for comparative data on using
Firefox to access
Flash content in 64-bit Fedora 9. He was experiencing "[...] error messages about not finding 'soundwrapper' in my $PATH [.]"
Although Chris Adams reported success Orcan Ogetbil described a "gray rectangle bug" which seemed to be manifested mostly when multiple tabs were open. Brennan Ashton claimed that it was due to a
Ignacio Vazquez-Abrams and others reported no problems and Jos posted that there appeared to be a dependency on
libcurl.i386 in the Adobe supplied
rpm. This was later stated by Paul Howarth to be changed so that either
libcurl.so.4 will be used via a
dlopen() and there is no explicit
requires:libcurl in the rpm. Gianluca Szforna supplied a link which suggests that
libflashsupport should be completely removed as it may cause crashes.
This section covers the news surrounding the Fedora Translation (L10n) Project.
Contributing Writer: Runa Bhattacharjee
Fedora 10 Release Notes Translation Over
The translation task for the Release Notes to be packaged with Fedora 10 came to an end on 13th November 2008. However, translations for the web version can continue until 21st November 2008.
Additionally, the Colophon section has been updated to include the names of the new translators and other contributors.
Fedora Website Translations for F10
Ricky Zhou announced the start of the translations for the Fedora website, for Fedora 10. The counter is also available for translation.
The due date for the Fedora Web translations is November 24th 2008 and can be submitted via translate.fedoraproject.org.
Few System-config tools to be migrated
Nils Philippsen announced the plans for the migration of a few system-config tools (date, nfs, samba, services, users) from the mercurial to the git repository. Additionally, the documentation and the software would be segregated. During the migration, these modules will not be available for updation in translate.fedoraproject.org.
New members in FLP
Confusion over Hindi Release Notes
There was a confusion while building the hindi release notes for Fedora 10, due to the presence of an obsolete file for the same locale. A bug has been filed for this matter by Rejesh Ranjan.
Docs-Homepage module is now obsolete
The module docs-homepage is now obsolete and does not require further translation. This query was raised by Xavier Conde Rueda and clarified by Paul Frields. A bug has been filed by Noriko Mizumoto for the removal of this module from translate.fedoraproject.org.
Dimitris Glezos, the current chair of the Fedora Localization Steering Committee (FLSCo) has initiated a discussion to evaluate the Committee's present method of functioning and any changes that can be made to improve it . It is to be noted that the next elections for the Steering Committee would be held in December 2009.
In this section, we cover Security Advisories from fedora-package-announce.
Contributing Writer: David Nalley
Fedora 9 Security Advisories
- gnutls-2.0.4-4.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00222.html
- blender-2.48a-4.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00243.html
- libpng10-1.0.41-1.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00320.html
- optipng-0.6.2-1.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00321.html
- clamav-0.93.3-2.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html
- quassel-0.3.0.3-1.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00354.html
- xulrunner-22.214.171.124-1.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html
- firefox-3.0.4-1.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00386.html
- epiphany-2.22.2-5.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00387.html
- chmsee-1.0.1-6.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00388.html
- devhelp-0.19.1-6.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00389.html
- cairo-dock-126.96.36.199-1.fc9.1 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00390.html
- epiphany-extensions-2.22.1-5.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00391.html
- galeon-2.0.7-3.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00392.html
- gnome-python2-extras-2.19.1-21.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00394.html
- gtkmozembedmm-1.4.2.cvs20060817-22.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00393.html
- gnome-web-photo-0.3-15.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00395.html
- evolution-rss-0.1.0-4.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00396.html
- google-gadgets-0.10.1-5.fc9.1 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00397.html
- Miro-1.2.7-2.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00398.html
- kazehakase-0.5.6-1.fc9.1 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00399.html
- mugshot-1.2.2-3.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00400.html
- mozvoikko-0.9.5-4.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00401.html
- ruby-gnome2-0.17.0-3.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00402.html
- totem-2.23.2-8.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00403.html
- seamonkey-1.1.13-1.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00404.html
- yelp-2.22.1-6.fc9 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00405.html
Fedora 8 Security Advisories
- kvm-60-7.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00255.html
- gnutls-1.6.3-5.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00293.html
- blender-2.48a-4.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00303.html
- optipng-0.6.2-1.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00326.html
- libpng10-1.0.41-1.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00327.html
- clamav-0.92.1-4.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html
- firefox-188.8.131.52-1.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
- epiphany-2.20.3-8.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00367.html
- cairo-dock-184.108.40.206-1.fc8.1 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00368.html
- epiphany-extensions-2.20.1-11.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00369.html
- blam-1.8.3-19.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00370.html
- chmsee-1.0.0-5.31.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00371.html
- devhelp-0.16.1-11.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00372.html
- evolution-rss-0.0.8-13.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00373.html
- galeon-2.0.4-6.fc8.3 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00374.html
- gnome-web-photo-0.3-14.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00375.html
- liferea-1.4.15-5.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00376.html
- gnome-python2-extras-2.19.1-19.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00377.html
- kazehakase-0.5.6-1.fc8.1 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00378.html
- openvrml-0.17.10-2.0.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00379.html
- Miro-1.2.7-2.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00380.html
- ruby-gnome2-0.17.0-3.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00381.html
- seamonkey-1.1.13-1.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00382.html
- yelp-2.20.0-14.fc8 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00383.html