- rocky-announce - RESF Lists

Rocky Linux Community Update - 2021 Quarter 4
by Brian Clemens 10 Dec '21

10 Dec '21

============================================= Rocky Linux Community Update - 2021 Quarter 4 ============================================= Highlights ========== Rocky Linux 8.5 --------------- The latest minor release of Rocky Linux was released on November 15, 2021. The speed at which the latest release was built is a testament to the dedication of the Rocky Linux Release Engineering team. Their maturing procedures, home-grown tools, and lengthy preparations enabled them to deliver testing assets within hours of upstream source availability. Likewise, the Testing team’s improvement efforts over the past months was validated by their speedy discovery and resolution of issues. 1st Anniversary Party --------------------- We are hosting a party to celebrate our first year! Please join us on December 11th at 15:00 PST. A link to the meeting room and more details are available at https://rockylinux.org/news/event-20211211-anniversary. New Members ----------- Since June, we’ve added four new members to the Rocky Linux leadership team: * Scott Shinn, @atomicturtle, Security Team Deputy * Sherif Nagy, @sherif, Release Engineering Team Deputy * Skip Grube, @skip77, Release Engineering Team Deputy * Steven Spencer, @sspencerwire, Documentation Team Deputy Participation is always welcome in the Rocky Linux project. If you would like to help, please get in touch with a Team Lead or e-mail hello(a)rockylinux.org if you cannot determine a relevant one. Secure Boot ----------- The Rocky Linux bootloader shim has been validated and signed by all necessary parties, enabling Rocky Linux to use secure boot without configuration. This is the culmination of months of work by the Release Engineering team and Sherif Nagy in particular. Secure Boot is a common (and often requested) requirement for many scenarios, including OEMs that have expressed interest in shipping systems with Rocky Linux pre-installed. This is a huge milestone for Rocky Linux as it is the culmination of many months of effort to become validated as a vendor in our own right by Microsoft. Mailing Lists ------------- Mailing lists are an irreplaceable fixture in open source projects. To support Rocky Linux and other RESF projects, the Infrastructure Team has deployed and configured a mailing list solution. We encourage you to subscribe to the Rocky Linux announcements list at https://lists.resf.org/mailman3/lists/rocky-announce.lists.resf.org. Team Updates ============ Community --------- We need you! The Community Team is seeking volunteers to help us grow community facing initiatives Please email community(a)rockylinux.org if you’d like to help. * The Community Team is now holding meetings every Wednesday at 10:00 PST. Please see the community team channel for more information. * We held a very successful “Ask Me Anything” interview on the /r/linux subreddit. We would like to thank everyone who participated, especially the moderator /u/purpleidea who helped to coordinate and run the event. * RockyCon 2022 is now being planned! Please look forward to a day of workshops, presentations, and socializing with the Rocky Linux community within the next few months. * We have selected and configured a social media management solution to coordinate the publication of news across all social platforms where Rocky Linux has a presence. Design ------ * We have planned a wallpaper design contest for the community to incorporate their own designs into the distribution. Winners will get Rocky Linux swag with custom (not-generally-available) designs! * Finalized designs have been made for the RESF’s logo. A sneak peek is available on the web and forum versions of this announcement. Documentation ------------- * Our documentation has been reorganized into intuitive categories. The documentation landing page has also seen many enhancements to usability. The Documentation Team would like to especially thank Patrick (@justasojourner), Steven Spencer (@sspencerwire) and others who have championed, led and implemented these changes. * We are making great progress in our translation efforts with help from new contributors such as Tianci Li (@jimcat8), Antoine Le Morvan (@alemorvan), Franco Colussi (@ambaradan), and many others. * After evaluating and testing several platforms, the Documentation Team has selected Crowdin to scale translation efforts and is beginning to onboard translators. Infrastructure -------------- * A pastebin application has been created to facilitate exchange of text files and long messages on our IRC channels, available at https://rpa.st / https://paste.resf.org / https://paste.rockylinux.org. It can be used easily with the rpaste package available in the Rocky-Extras repository. * We completed many projects to support other teams, including deploying PowerPC build platforms and deploying the highly secure infrastructure necessary for building secure boot components. * Mirror infrastructure has been updated and improved. * Mattermost has been updated several times, including a major version. Release Engineering ------------------- * Alongside the regular Enterprise Linux kernel, a realtime kernel has been built and is now available in the Rocky-RT repo. * We have developed and deployed an application to show live differences between Rocky Linux and RHEL, available at https://repocompare.rockylinux.org. * Security advisories, known bugs, and feature information is now available, both baked into our repositories and as a web page. Try it out with “dnf update info --list” or visit https://errata.rockylinux.org. * Skip Grube (Team Deputy) is sharing some of his release engineering knowledge in a new blog. We encourage anyone interested in helping the team to check it out at https://skip.linuxdn.org/blog.html. * The infrastructure for building a PowerPC version of Rocky Linux has been setup, and builds are underway. This is a fairly involved process and will take some time before it is ready for public consumption. * We have begun initializing the foundation (release and core packages) needed to start on Rocky Linux 9. We have begun importing the RHEL 9 beta sources as well as CentOS Stream 9 sources. In the coming days, we plan on bootstrapping the necessary components for 9. We look forward to sharing more about this with you very soon. Security -------- * Thanks to efforts by Scott Shinn (@atomicturtle), OpenSCAP automated security compliance and remediation is now fully functional on Rocky Linux. * The Center for Internet Security (CIS) is targeting a benchmark for Rocky Linux in early 2022. Thank you to community member mmackenzie for opening up the Workbench request. * We supported the Release Engineering and Infrastructure Teams in their efforts to attain secure boot functionality. Testing ------- * A primary focus for the Testing Team this quarter has been work on openQA test suites allowing automated testing of the Rocky Linux release media and installer. Special thanks to Al B. (@raktajino) for work on Ansible playbooks, Lukas M. (@lumarel) for multi-host openQA configuration and Russ B. (@Russ Butler) for aarch64 test suite validation. * Lukas has also been heavily involved with testing of Secure Boot working closely with Release Engineering to help bring SB to Rocky Community. * In the next quarter we hope to move openQA testing to Rocky Linux hosted infrastructure and begin direct integration with Release Engineering to support fully automated build testing. Web --- * We are working on a UI toolkit which will replace all of the existing Tailwind CSS-based theming across the RESF’s web presence. This is to ensure consistency in design between all Rocky Linux experiences, and will have its debut on the main Rocky Linux website. More sites will follow, but for now it will just be the main website. * We have implemented Fathom Analytics on both the main website, as well as the Documentation website. Fathom is an open-source, privacy-friendly, cookie-less analytics solution. You can view our analytics publicly at the links below. * Main Website: https://app.usefathom.com/share/qdepahys/website/ * Documentation Website: https://app.usefathom.com/share/ktsptdwy/documentation/ Special Interest Groups ======================= As mentioned above, we are now moving forward with SIGs. We started this process by integrating the CentOS SIGs which will bring in some collaborative effort and avoid any redundant efforts. These can be installed via release packages with the nomenclature of “centos-release-*” and will help ease the transition from CentOS to Rocky Linux as well as help foster collaboration between all of the Enterprise Linux variants. Building off of the existing CentOS SIGs, we are be developing the foundation to empower the Rocky Linux community with our own SIGs which we will ensure are completely compatible with all Enterprise Linux family of distributions. We have a number of SIG ideas already developing in Mattermost and we are working on the template SIG charter now. There are three SIGs which have already been started: * SIG/Kernel which is being led by Greg Kroah-Hartman (lead maintainer of the stable main-line Linux kernel) and will include an optional enhanced kernel for Rocky Linux * SIG/Cloud will provide cloud optimizations, packages, and universal base container images to support all clouds and typical use-cases * SIG/AltArch which has already built Raspberry Pi images for testing (more information can be found here: https://wiki.rockylinux.org/en/special-interest-groups/alt-arch/raspberry-pi). We look forward to working with others interested in leading SIGs. Partners & Sponsors =================== We would like to thank our existing partners and sponsors for their support, and we’re pleased to announce a few new ones: * Crowdin * Equinix * ProComputers.com * Seagate Government Solutions * Supermicro * VMware If you have any comments, questions, concerns, suggestions, or would like to help out, send a note to hello(a)rockylinux.org. Sincerely, The Rocky Enterprise Software Foundation https://rockylinux.org

1 0

Rocky Linux 8.5 Updates since 2021-12-09
by Louis Abel 09 Dec '21

09 Dec '21

The following packages have been updated since December 09, 2021: thunderbird: thunderbird-91.3.0-2.el8_4 -> thunderbird-91.4.0-2.el8_5 thunderbird: thunderbird-91.3.0-2.el8.plus -> thunderbird-91.4.0-2.el8.plus ========================= Release Engineering Notes ========================= Thunderbird ----------- This is a regular ESR build update for thunderbird. This update is for both the base repositories and Plus. The Plus repository contains a version of thunderbird with PGP support. ======= Updates ======= Updates released since upstream are posted across our current architectures. We strongly recommend that all users apply *all* updates, including the content released today on your existing Rocky Linux machines. This can be done by running `dnf update`. All Rocky Linux components are built from the sources hosted at git.rockylinux.org. In addition, SRPMs are being published alongside the repositories in a corresponding "source" directory. You can find these on any of our mirrors. These source packages match every binary RPM we release. Please give mirrors at least 24/48 hours to fully sync. If you find that you cannot update any of the packages listed in this message, you may try another mirror or wait till they have fully synced. Louis Abel Release Engineering

1 0

Rocky Linux 8.5 Updates since 2021-12-03
by Louis Abel 09 Dec '21

09 Dec '21

The following packages have been updated since December 03, 2021: abrt: abrt-2.10.9-21.el8 -> abrt-2.10.9-21.el8.rocky.0 firefox: firefox-91.3.0-1.el8_4 -> firefox-91.4.0-1.el8_5 sos: sos-4.1-5.el8 -> sos-4.1-5.el8.rocky.2 ========================= Release Engineering Notes ========================= Firefox ------- This is an updated ESR build for Firefox. abrt ---- This is a mostly cosmetic change. It removes the reliance on the libreport-rhel* and rhtsupport plugins. These packages can be safely removed after updating to the new abrt package. sos --- This is a mostly cosmetic change. It brings down the upstream Rocky policy. See this PR for more details: https://github.com/sosreport/sos/pull/2784 ======= Updates ======= Updates released since upstream are posted across our current architectures. We strongly recommend that all users apply *all* updates, including the content released today on your existing Rocky Linux machines. This can be done by running `dnf update`. All Rocky Linux components are built from the sources hosted at git.rockylinux.org. In addition, SRPMs are being published alongside the repositories in a corresponding "source" directory. You can find these on any of our mirrors. These source packages match every binary RPM we release. Please give mirrors at least 24/48 hours to fully sync. If you find that you cannot update any of the packages listed in this message, you may try another mirror or wait till they have fully synced. Louis Abel Release Engineering

1 0

Rocky Linux 8.5 Updates since 2021-12-02
by Louis Abel 02 Dec '21

02 Dec '21

The following packages have been updated since December 02, 2021: mailman: mailman-3:2.1.29-12.module+el8.5.0+716+66d1ab43.1 -> mailman-3:2.1.29-12.module+el8.5.0+717+27fd1ba7.2 Associated CVE's: mailman: CVE-2021-44227 The follow modules have been updated since December 02, 2021: mailman-2.1-8050020211202160117.fd901a62 ======= Updates ======= Updates released since upstream are posted across our current architectures. We strongly recommend that all users apply *all* updates, including the content released today on your existing Rocky Linux machines. This can be done by running `dnf update`. All Rocky Linux components are built from the sources hosted at git.rockylinux.org. In addition, SRPMs are being published alongside the repositories in a corresponding "source" directory. You can find these on any of our mirrors. These source packages match every binary RPM we release. Louis Abel Release Engineering

1 0

Rocky Linux 8.5 Updates since 2021-11-29
by Louis Abel 02 Dec '21

02 Dec '21

The following packages have been updated since Nov 29, 2021: kronosnet: kronosnet-1.18-2.el8 -> kronosnet-1.18-4.el8_5 nss: nss-3.67.0-6.el8_4 -> nss-3.67.0-7.el8_5 Associated CVE's: nss-3.67.0-7.el8_5: CVE-2021-43527 ======= Updates ======= Updates released since upstream are posted across our current architectures. We strongly recommend that all users apply *all* updates, including the content released today on your existing Rocky Linux machines. This can be done by running `dnf update`. All Rocky Linux components are built from the sources hosted at git.rockylinux.org. In addition, SRPMs are being published alongside the repositories in a corresponding "source" directory. You can find these on any of our mirrors. These source packages match every binary RPM we release. Louis Abel Release Engineering

1 0

Rocky Linux 8.5 Supplementary Updates - 2021-11-30
by Louis Abel 30 Nov '21

30 Nov '21

The following packages have been added to the devel repository: * ncurses-static The following packages have been added to the plus repository: * open-vm-tools (aarch64 specific build only) ======= Plus Notes ======= The plus repository contains items which are not provided in the base repositories, either because they are not available due to the comps and pungi configuration (based on RHEL repositories) or they are requested as alternative builds with additional patches/features not found in the base. The plus repository should be safe to keep enabled. The current packages in plus (as of 2021-11-30) are: * openldap-servers (all architectures) * thunderbird with PGP support (all architectures) * ncurses-static (all architectures) * open-vm-tools (aarch64 specific build only) ======= Devel Notes ======= The devel repository should be used with care. It is meant for koji or buildroot purposes and should not be enabled 100% of the time. If you find there is a package you wish to see in the devel repo, send a mail on rocky-devel and/or open a bug report on https://bugs.rockylinux.org Louis Abel Release Engineering

1 0

Rocky Linux 8.5 Updates since 2021-11-24
by Louis Abel 29 Nov '21

29 Nov '21

The following packages have been updated since Nov 24, 2021: dotnet5.0: dotnet5.0-5.0.208-2.el8_5 -> dotnet5.0-5.0.209-1.el8_5 dotnet5.0-build-reference-packages: dotnet5.0-build-reference-packages-0-11.20210607git5f10a4b.el8 -> dotnet5.0-build-reference-packages-0-12.20211117git6ce5818.el8_5 ======= Updates ======= Updates released since upstream are posted across our current architectures. We strongly recommend that all users apply *all* updates, including the content released today on your existing Rocky Linux machines. This can be done by running `dnf update`. All Rocky Linux components are built from the sources hosted at git.rockylinux.org. In addition, SRPMs are being published alongside the repositories in a corresponding "source" directory. You can find these on any of our mirrors. These source packages match every binary RPM we release. Louis Abel Release Engineering

1 0

Rocky Linux 8.5 Updates since 2021-11-22
by Louis Abel 24 Nov '21

24 Nov '21

The following packages have been updated since Nov 22, 2021 (including updated module packages): mailman: mailman-3:2.1.29-12.module+el8.5.0+703+19300c10 -> mailman-3:2.1.29-12.module+el8.5.0+716+66d1ab43.1 The follow modules have been updated since Nov 23, 2021: mailman-2.1-8050020211123230959.fd901a62 Associated CVE's: CVE-2021-42096 CVE-2021-42097 ======= Updates ======= Updates released since upstream are posted across our current architectures. We strongly recommend that all users apply *all* updates, including the content released today on your existing Rocky Linux machines. This can be done by running `dnf update`. All Rocky Linux components are built from the sources hosted at git.rockylinux.org. In addition, SRPMs are being published alongside the repositories in a corresponding "source" directory. You can find these on any of our mirrors. These source packages match every binary RPM we release. Louis Abel Release Engineering

1 0

Rocky Linux 8.5 Updates since 2021-11-16
by Louis Abel 22 Nov '21

22 Nov '21

The following packages have been updated since Nov 16, 2021 (including updated module packages): clang: clang-12.0.1-2.module+el8.5.0+692+8756646f -> clang-12.0.1-4.module+el8.5.0+715+58f51d49 llvm-toolset: llvm-toolset-12.0.1-1.module+el8.5.0+692+8756646f -> llvm-toolset-12.0.1-1.module+el8.5.0+715+58f51d49 The follow modules have been updated since Nov 16, 2021: llvm-toolset-rhel8-8050020211122023437.b4937e53 ======= Updates ======= Updates released since upstream are posted across our current architectures. We strongly recommend that all users apply *all* updates, including the content released today on your existing Rocky Linux machines. This can be done by running `dnf update`. All Rocky Linux components are built from the sources hosted at git.rockylinux.org. In addition, SRPMs are being published alongside the repositories in a corresponding "source" directory. You can find these on any of our mirrors. These source packages match every binary RPM we release. Louis Abel Release Engineering

1 0

Rocky Linux 8.5 Updates since 2021-11-14
by Louis Abel 16 Nov '21

16 Nov '21

The following packages have been updated since the 8.5 release Nov 14, 2021 (including updated module packages): annobin: annobin-9.65-1.el8 -> annobin-9.72-1.el8_5.2 binutils: binutils-2.30-108.el8 -> binutils-2.30-108.el8_5.1 dotnet-build-reference-packages: dotnet-build-reference-packages-0-9.20200608gitcd5a8c6.el8 -> dotnet-build-reference-packages-0-10.20200608gitcd5a8c6.el8 dotnet3.1: dotnet3.1-3.1.119-2.el8.0.1 -> dotnet3.1-3.1.120-2.el8_5 dotnet5.0: dotnet5.0-5.0.207-3.el8.0.1 -> dotnet5.0-5.0.208-2.el8_5 dotnet6.0: dotnet6.0-6.0.0-0.6.28be3e9a006d90d8c6e87d4353b77882829df718.el8.0.1 -> dotnet6.0-6.0.100-0.10.el8_5 firefox: firefox-78.13.0-2.el8 -> firefox-91.3.0-1.el8 flatpak: flatpak-1.8.5-4.el8 -> flatpak-1.8.5-5.el8_5 freerdp: freerdp-2:2.2.0-2.el8 -> freerdp-2:2.2.0-7.el8_5 gcc: gcc-8.5.0-3.el8 -> gcc-8.5.0-4.el8_5 gcc-toolset-10-annobin: gcc-toolset-10-annobin-9.29-1.el8 -> gcc-toolset-10-annobin-9.29-1.el8_5.2 gcc-toolset-10-binutils: gcc-toolset-10-binutils-2.35-8.el8_4.4 -> gcc-toolset-10-binutils-2.35-8.el8_5.6 gcc-toolset-10-gcc: gcc-toolset-10-gcc-10.2.1-8.2.el8 -> gcc-toolset-10-gcc-10.3.1-1.2.el8_5 gcc-toolset-11-annobin: gcc-toolset-11-annobin-9.73-1.el8 -> gcc-toolset-11-annobin-9.85-1.el8_5.1 gcc-toolset-11-binutils: gcc-toolset-11-binutils-2.36.1-1.el8 -> gcc-toolset-11-binutils-2.36.1-1.el8_5.1 gcc-toolset-11-dyninst: gcc-toolset-11-dyninst-11.0.0-1.el8 -> gcc-toolset-11-dyninst-11.0.0-2.el8 gcc-toolset-11-gcc: gcc-toolset-11-gcc-11.1.1-3.el8 -> gcc-toolset-11-gcc-11.2.1-1.2.el8_5 gcc-toolset-11-systemtap: gcc-toolset-11-systemtap-4.5-3.el8 -> gcc-toolset-11-systemtap-4.5-4.el8 gcc-toolset-11-valgrind: gcc-toolset-11-valgrind-1:3.17.0-4.el8 -> gcc-toolset-11-valgrind-1:3.17.0-6.el8 gnome-settings-daemon: gnome-settings-daemon-3.32.0-14.el8 -> gnome-settings-daemon-3.32.0-16.el8 gnome-shell-extensions: gnome-shell-extensions-3.32.1-20.el8 -> gnome-shell-extensions-3.32.1-20.el8_5.1 httpd: httpd-2.4.37-41.module+el8.5.0+695+1fa8055e -> httpd-2.4.37-43.module+el8.5.0+714+5ec56ee8 ibus: ibus-1.5.19-13.el8 -> ibus-1.5.19-14.el8_5 java-1.8.0-openjdk: java-1.8.0-openjdk-1:1.8.0.302.b08-3.el8 -> java-1.8.0-openjdk-1:1.8.0.312.b07-2.el8_5 java-11-openjdk: java-11-openjdk-1:11.0.12.0.7-4.el8 -> java-11-openjdk-1:11.0.13.0.8-3.el8_5 java-17-openjdk: java-17-openjdk-1:17.0.0.0.35-4.el8 -> java-17-openjdk-1:17.0.1.0.12-2.el8_5 kernel: kernel-4.18.0-348.el8.0.2 -> kernel-4.18.0-348.2.1.el8_5 kernel-rt: kernel-rt-4.18.0-348.rt7.130.el8.0.2 -> kernel-rt-4.18.0-348.2.1.rt7.132.el8_5 kronosnet: kronosnet-1.18-1.el8 -> kronosnet-1.18-2.el8 rust: rust-1.54.0-2.module+el8.5.0+678+cf7bc64b -> rust-1.54.0-3.module+el8.5.0+712+d335422a rust-toolset: rust-toolset-1.54.0-1.module+el8.5.0+678+cf7bc64b -> rust-toolset-1.54.0-1.module+el8.5.0+712+d335422a sssd: sssd-2.5.2-2.el8 -> sssd-2.5.2-2.el8_5.1 thunderbird: thunderbird-78.13.0-1.el8 -> thunderbird-91.3.0-2.el8 udftools: udftools-2.2-5.el8 -> udftools-2.3-2.el8 The following packages have been dropped and also removed from dnf groups: insights-client: insights-client-3.1.5-1.el8 (Standard Group) For packages that been dropped, it is safe to remove them using `dnf remove` The following modules have been updated since the 8.5 release Nov 14, 2021: rust-toolset-rhel8-8050020211112021616.f73640c0 httpd-2.4-8050020211115030420.b4937e53 ======= Updates ======= Updates released since upstream are posted across our current architectures. We strongly recommend that all users apply *all* updates, including the content released today on your existing Rocky Linux machines. This can be done by running `dnf update`. All Rocky Linux components are built from the sources hosted at git.rockylinux.org. In addition, SRPMs are being published alongside the repositories in a corresponding "source" directory. You can find these on any of our mirrors. These source packages match every binary RPM we release. ============ Known Issues ============ https://bugs.rockylinux.org/show_bug.cgi?id=174 - We are aware of an issue that kdump does not work on vmware systems such as ESXi. We are also aware of our mirror system reporting back the wrong directory for doing updates. It was going to `kickstart` rather than `os`. This should be resolved and updates should work normally. Louis Abel Release Engineering

1 0

2024

2023

2022

2021