News and Editorials
By Rebecca Sobol
August 27, 2008
There has been a recent discussion on the opensuse-factory mailing list
about the creation of a repository for non-core packages. The concern
expressed at the beginning of the discussion is that openSUSE has too many
repositories of unknown quality. Right now many openSUSE community
members have home repositories with software packages not found in the
main openSUSE repository. Some have software that other openSUSE users
would like, some have highly experimental packages that most users would
rather avoid. It is difficult for the user to find the packages they want,
or know which ones they might find suitable.
Pascal
Bleser expressed some of those concerns:
The goal of the contrib repository must indeed be "stability", which
essentially means two things:
- - feature freeze: when the Factory repository is freezed, the contrib
repository must be freezed too; only allow bugfix upgrades (as, clearly,
I doubt we'd find enough human resources to backport fixes) and reject
feature upgrades
- - stable software: packages that are in there need a lot of testing and
must hence be picked carefully
The point is to make an "additional" type of repository,
not an "always the latest".
And then we should think about how to have those packages tested
properly in order to gain an acceptable level of quality in there when
openSUSE distro releases happen (or, rather, when they're freezed).
Following the alpha/beta/RC cycles of Factory and issue the same calls
for testing could be an option.
Alexey
Eromenko had some ideas of what that might look like:
Yes, "Contrib" is planned to be a community-driven extension of Factory,
with all Factory standards and limits applied.
This means, that user's will have early version of contrib available
for 11.1. "early" doesn't mean unstable, but it means that number of
packages are expected to be limited.
Only stable software will make it into contrib.
All unstable software will remain in user's Home projects in OBS.
Pascal
Bleser wondered about how a package is determined to be stable.
Yes, sure, but => "after it becomes stable" <=
That's precisely the point. How do we decide whether a package is stable
enough to go into contrib ?
Through a release management team ?
But maybe we need to offer a comfortable way for people to test packages
before they make it into contrib, and having a staging repository is one
way of doing it.
(I'm just throwing ideas, I'm not saying it's necessarily _the_ way to
do it)
Richard
Guenther proposed some sort of staging repository.
It as well makes sense to stage Contrib (I would like this for Factory,
too, but it's probably easiest to try with Contrib first). If you
are familiar with the Debian way then you know there is the unstable
and the testing repositories. So there should be something like
Contrib:/Unstable (feel free to pick a more suitable name) where
a new package (version) should reside for some time before it is
migrated to the main Contrib repository. Criterias ideally would be
"zero bugs of severity greater than normal" - but of course this
would require proper bugzilla integration (or completely manual
migration).
Staging Contrib helps getting more peer review and avoids breaking
Contrib itself. At the point the next openSUSE is freezed development
can continue in the unstable branch but only critical fixes are
migrated to Contrib.
Alexey
Eromenko that the new repository should have stable versioned branches,
but unstable packages should remain in Home repositories.
Speaking about stable/unstable trees:
-I think that stable must have braches, yes, (contrib-stable-11.1,
contrib-stable-11.2, etc...) - but only for future releases, not
backports.
Reason is simple: We will find BETA-testers for 11.1/11.2, but
unlikely to find enough testers for packages for 10.2.
-unstable: I prefer this branch should exists in user's OBS, but if
there are volunteers,
it could be part of contrib. Because it is unstable, I don't think it
needs branching.
The discussion continued from there. For now unstable packages remain the
the user's Home repository and a small review team has been formed to
review these potential candidates. The discussion, and results have been
documented on the Contrib
wiki page, along with a wish list of packages, for those who
are interested in learning more about the Contrib repository and the shape
it might take.
Comments (2 posted)
New Releases
AntiX 7.5 has been
announced.
"
Built using the MEPIS Linux 7.0 core including the MEPIS 2.6.22
kernel and utilities, along with selected additions from Debian Lenny, this
lightweight OS is especially appropriate for older hardware and users who
like a very fast and highly configurable system."
Comments (none posted)
Version 6.3 of Beyond Linux From Scratch has been released. See the
release
notes for more information.
Full Story (comments: none)
The Debian Live project has released its first product in the form of a set
of beta Debian Lenny live CDs. "
Although live-helper is a toolkit to produce your very own live systems
with only a few steps, we also provide prebuilt images that are meant to
be used as reference systems for end-users. Currently, this consists of
the three major desktop environments (GNOME, KDE and Xfce), as well as a
small 'standard' image without a graphical environment." They are
looking for testers to help find the inevitable glitches.
Full Story (comments: none)
The Fedora Unity Project has released Fedora 8 re-spins. "
These
Re-Spin ISOs are based on the officially released Fedora 8 installation
media and include all updates released as of August 14th, 2008."
Full Story (comments: none)
The second beta for Mandriva Linux 2009 is available. "
This beta
includes a completely new installer for the Free (and, in the final
release, Powerpack) edition, and is testing the Fedora
system-config-printer printer configuration tool as an alternative to
printerdrake. The new beta also brings Firefox 3, OpenOffice.org 3.0 beta,
and support for the ethernet adapter used in many new Eee (and other
netbook) models."
Full Story (comments: none)
openSUSE 11.1 Alpha2 is available and ready for testing. Click below to
find out more about getting this release, the known problems and other
information.
Full Story (comments: none)
Distribution News
Debian GNU/Linux
Debian has a new marketing team. "
We started putting together ideas
at http://wiki.debian.org/Marketing,
will use the existing mailing list debian-publicity@lists.debian.org and
the irc channel #debian-marketing on irc.debian.org for
communication."
Full Story (comments: none)
The service people.debian.org is moving to the machine ravel.debian.org.
"
Ravel is a freshly installed system so there probably are a few
packages missing that you might need. Please contact DSA at the
debian-admin mailinglist with requests. Also, ssh logins are restricted to
key based logins, password based logins are not allowed."
Full Story (comments: none)
Fedora
The Fedora Project has sent out an update describing its "infrastructure
issues" in some detail. Yes, it was a security breach. "
One of the compromised Fedora servers was a system used for signing
Fedora packages. However, based on our efforts, we have high confidence
that the intruder was not able to capture the passphrase used to secure
the Fedora package signing key. Based on our review to date, the
passphrase was not used during the time of the intrusion on the system
and the passphrase is not stored on any of the Fedora servers."
They are changing the signing keys anyway.
Red Hat, too, suffered a breach, which has been disclosed in this openssh update
notice. "In connection with the incident, the intruder was able to sign a small
number of OpenSSH packages relating only to Red Hat Enterprise Linux 4
(i386 and x86_64 architectures only) and Red Hat Enterprise Linux 5 (x86_64
architecture only). As a precautionary measure, we are releasing an
updated version of these packages..."
Full Story (comments: 38)
A
proposal
for a revised Fedora 10 schedule is under discussion. If this schedule
holds, the Fedora 10 beta release will be delayed two weeks (to
September 23), and the final release would be on November 18,
three weeks later than originally planned.
Comments (3 posted)
SUSE Linux and openSUSE
The openSUSE project has announced that, starting with openSUSE 11.1,
SELinux will be supported for those who want it. "
While our customer experience shows that AppArmor is the best solution
for the vast majority of users, applications, and use cases, we want to
give all of our users the ability to choose the security framework
that's appropriate for their respective environments and needs."
Full Story (comments: none)
The first OpenOffice.org 3.0 beta packages are available in the Build
Service OpenOffice.org:UNSTABLE project. Click below for a list of known
bugs and other information.
Full Story (comments: none)
Ubuntu family
The second Ubuntu Developer Week has been announced for September 1 - 5,
2008 in #ubuntu-classroom on irc.freenode.net. "
The Ubuntu Developer
Week is designed to give you an overview of what's going on in the Ubuntu
Developer world. Speak to the developers, learn, ask questions and finally
realise "It's true, I *can* make a difference by helping out here.""
Full Story (comments: none)
Click below to see the minutes from the August 26th meeting of the Ubuntu
technical board. Topics include Status of cdrtools discussion, Gobby
co-maintenance with Debian, Revisiting limited upload privileges for kernel
and printing packages, and Board membership/nominations.
Full Story (comments: none)
Other distributions
CentOS has sent out a notice reassuring its users that it was not affected
by the recent problems at Red Hat and Fedora. "
We take security issues very seriously, and as soon as we were made aware of the
situation I undertook a complete audit of the entire CentOS4/5 Build and Signing
infrastructure. We can now assure everyone that no compromise has taken place
anywhere within the CentOS Infrastructure. Our entire setup is located behind
multiple firewalls, and only accessible from a very small number of
places, by only a few people. Also included in this audit were all entry points
to the build services, signing machines, primary release machines and
connectivity between all these hosts."
Full Story (comments: 15)
gOS has issued a press release
following up on the the release of gOS 3 Gadgets beta, with links to
screenshots, forums, an interview with GoodOS Founder, David Liu, and more.
Full Story (comments: none)
TerraSoft Solutions invites people to check out their
customer
showcase, which currently features YDL running Cypher DMV Connectivity
software that "fetches" DMV records for the City of Aurora, Colorado.
Full Story (comments: none)
Distribution Newsletters
The Ubuntu Weekly Newsletter for August 23, 2008 covers: Xubuntu Developer,
MOTU news(Nicolas Valcarcel interview), IRC Council Nominations, Ubuntu-MD
SFD, Ubuntu-NJ Barbecue/LAN party, Atlanta Linux Fest 2008, Ubuntu Bloggers
wanted, Happy Birthday Linux, Meeting Summaries, and much more.
Full Story (comments: none)
This edition of the
OpenSUSE Weekly
News looks at openSUSE 11.1 Alpha2 is available, Hack Week III is
almost here!, openSUSE to add SELinux Basic Enablement in 11.1, Masim
Sugianto: Linux Distribution Popularity Across the Globe, and much more.
Comments (none posted)
The Fedora Weekly News for August 24, 2008 presents a detailed look at
Fedora infrastructure issues and has several other topics.
Full Story (comments: none)
The
DistroWatch
Weekly for August 25, 2008 is out. "
Not all user-friendly
desktop operating systems are based on Linux; as demonstrated by PC-BSD, it
is entirely feasible to turn a "geek" project into a piece of software that
can be installed and used by even less technical computer users. In this
issue, we talk to Kris Moore, PC-BSD lead developer, about his love affair
with FreeBSD and the upcoming PC-BSD 7.0. In the news section, Fedora
admits that some of its servers have been compromised, Novell signs a new,
US$100 million "interoperability" deal with Microsoft, openSUSE ads SELinux
support as an alternative security framework, and gNewSense celebrates its
second birthday with an updated release of the "freest" Linux
distribution. Finally, FreeBSD announces tentative release dates for its
upcoming versions 6.4 and 7.1."
Comments (none posted)
Distribution meetings
The openSUSE Project will be hosting a table to show off the latest and
greatest in openSUSE, and Novell and openSUSE also will have several
speakers/talks on the agenda at the Utah Open Source Conference, August 28 -
30 at Salt Lake Community College.
Full Story (comments: none)
Newsletters and articles of interest
susegeek.com is a site with Tips, Tricks, Tutorials, HowTos and
Troubleshooting for (open)SUSE. This
article
about Flock looks at this social web browser and how to get it running
on openSUSE 11.0. "
Flock Web browser is a new kid in the block of
browsers built on the codebase of Mozilla Codebase, Needless to say, this
project is powered by Mozilla. Flock web browser is built in Web2.0 and
social networking as the core theme of the browser supporting, Social
Networking sites like Facebook, Digg, Flickr, Twitter, Youtube, Pownce,
etc." (Thanks to Kumaran B)
Comments (none posted)
Page editor: Rebecca Sobol
Next page: Development>>