The release manager for openSUSE Leap Luboš Kocman is expected to announce the Beta release phase of Leap 15.4 this week, according to the roadmap. That means the openSUSE Community can download, install and test the release.

Leap’s Beta phase has rolling updates until it’s official release, which will then transition the release to a maintenance phase.

To celebrate this Beta phase, why not have a Pizza Party and test the openSUSE Leap 15.4 Beta.

If there’s no party near you, organize your own; just add it to the wiki page and invite others from your local community to join you in testing openSUSE Leap. Get some pizza delivered to your home or office and bring friends and colleagues together. A new openSUSE user may show up! If you are unsure of how to do it, read this.

Download the Beta…

The Leap 15.4 Beta is available on get.opensuse.org. Pick an image fitting your purposes. Install it on a VM, virtualbox or on your hardware.

Testing and helping out!

Report or help fix any problems you encounter. The focus of a Beta Pizza Party is about building a local openSUSE community and testing Leap 15.4 Betas. This means installing it and submitting bug reports.

During the beta, testers are encouraged to record their testing on the Beta testing worksheet. Find out how to report bugs on the openSUSE wiki.

Discussions about openSUSE development takes place on the openSUSE Factory mailing list. If you want to help out, please see the wiki page on contributing to Factory. Contributing is easy and welcomed!

Architectures available for testing include x86_64, aarch64, PowerPC and s390. People interested in armv7 and other architectures should read the announcement about openSUSE Step.

Those interested in beta testing images for openSUSE Leap 15.4 Windows Subsystem for Linux can contact the Leap release manager Kocman or email the factory mailing list.

Leap beta testers have an option to receive a gift of gratitude, so make sure to fill in all the proper information and bug reports to get one. Then send an email to ddemaio (at) opensuse.org with your address. Please make the subject title “Leap beta testings”.

Have a lot of fun!

Dear Tumbleweed users and hackers,

This week we managed to do the impossible: despite missing one snapshot 0220), we STILL published 7 snapshots (0217, 0218, 0219, 0221, 0222, 0223, and 0224). Of course, this just happens by coincidence, as 0217 could only be released late evening and 0224 happens to come out already before writing the weekly review.

And what did those snapshots bring us? See for yourself:

• KDE Plasma 5.24.1 (0217) & 5.24.2 (0224)
• KDE Frameworks 5.91.0
• Linux kernel 5.16.10 (simpledrm disabled again)
• systemd 249.10
• systemd packaging changes: systemd-sysvinit will be renamed to systemd-sysvcompat: most users won’t need it (sysv support is minimized anyway, and Tumbleweed no longer ships any sysv init script)
• Mozilla Firefox 97.0.1
• expat 2.4.6
• tigervnc 1.12.0: the ‘vncserver’ script no longer exists, see https://github.com/TigerVNC/tigervnc/blob/master/unix/vncserver/HOWTO.md

That’s pretty cool and everything reported last week as coming (except the gcc12 and python long-lasting efforts) have thus been delivered. As usual, we don’t stop there, and staging projects are already prepared with these updates:

• Linux kernel 5.16.11 (also addressing build fails with gcc12)
• Mesa 21.3.7
• Python 3.6 interpreter will be removed (We have roughly 45 python36-FOO packages left)
• Python 3.10 as the distro default interpreter (a bit down the line, after py36 is done)
• GCC 12 introduction has started to be as ready as possible for when the upstream release happens.

Snapshots of openSUSE Tumbleweed continue to be released at a steady pace. There have been seven snapshots released since our last review.

The latest snapshot is 20220223 and it dropped an updated version of systemd 249.10. The version changed the settings to increase the external core size for processing coredumps to infinity. Flatpak 1.12.6 updated translations and fixed a bug that sometimes caused repo corruption when downloads were interrupted or canceled. A handful of Common Vulnerabilities and Exposures were fixed in the mariadb 10.7.3 update. CVE-2021-46665, CVE-2021-46664, CVE-2021-46661, CVE-2021-46668 and CVE-2021-46663, which caused the application to crash, were all fixed in the updated version. Many CVEs were also fixed with the the XML parser expat 2.4.6; one of those was fixing an integer overflow in the copyString function. Several other packages updated in the snapshot including autoyast2 4.4.31, yast2-security 4.4.12 and yast2-installation 4.4.44.

Text editor nano 6.2 came in snapshot 20220222. In this version, the file browser clears the prompt bar when using --minibar, and better analyzing of code with a newer source file parser pyflakes is now an option available for nano. Virtualization package Xen added multiple x86_64 patches in the 4.16.0_06 version and an update of both vulkan-tools and vulkan-loader 1.3.204.0 brought new features like a profile tooling solution for application developers that enables developers to generate their own app-specific feature profiles. There was a kernel-firmware update in the snapshot, and yast2-firstboot 4.4.8 added an option to have a registration step enabled for SUSE Linux Enterprise even when running in Windows Subsystem for Linux.

Web browser Firefox had an update to 97.0.1 in snapshot 20220221. The Mozilla project fixes centered on some functionality with TikTok and Hulu. The update of php7 7.4.28 was a security release meant to fix CVE-2021-21708, which could have allowed an attacker to inject a malicious file, leading to a crash or a Segmentation fault. Italian, Germany, Chinese and Chinese (Taiwan) languages were updated in the libstorage-ng 4.4.88 update. The general-purpose e-mail package mailutils 3.14 had Transport Layer Security support rewritten from scratch and fixed a timezone calculation bug. Other packages to update in the snapshot were yast2-installation 4.4.42, python-lxml 4.8.0, libinput 1.20.0 and more.

Just two packages were update in snapshot 20220219. The Linux Kernel update to 5.16.10 was part of the snapshot. The kernel had several updates for the Network File System protocol, and there were a few Small Computer System Interface fixes. There were also a few updates in the kernel for arm64 that added detection for Trace Buffer Extensions. The update of systemd-rpm-macros 16 fixed some dependencies and renamed systemd-sysvinit to systemd-sysvcompat.

The native viewer for tigervnc now supports full screen over a subset of monitors thanks to the 1.12.0 update in snapshot 20220218. Passwords and usernames can now be specified via the environment for the native viewer with packages that interact with graphical applications on remote machines. Rendering engine webkit2gtk3 2.34.6 fixed several crashes. The package also fixed the rendering of scrollbars when overlay scrollbars are disabled, and webkit2gtk3 also fixed builds in a number of situations where the main OpenGL library was not called.

Both GNOME and KDE Plasma users received updates in snapshot 20220217. Plasma 5.24.1 was updated and the new Long-Term Support version that will be available in Leap 15.4 made some modification to the Dolphin file manager. The KScreen manager adjusted a workaround for an unknown Qt issue that caused reverted dialogs to be invisible. Window manager KWin had multiple fixes to include one for Wayland that had the decoration tooltips mispositioned. The cursor color was fixed in the xwayland 22.1.0 update. An update of gnome-shell-extensions 41.2 fixed the window tracking to avoid missing icons.The directory listing program tree 2.0.2 changed some settings and fixed a HTML URL output issue. There were a few more package updated in the snapshot.

Snapshot 20220216 was released last week shortly after last week’s Tumbleweed review was published.

Recently I got some complaints that it is difficult to figure out how to contact the syslog-ng team to get help or report problems. Most of this information is available both on the syslog-ng website and at the syslog-ng repository on GitHub, but collecting here all information might be still useful for some people.

Read the rest of my blog at https://www.syslog-ng.com/community/b/blog/posts/contacting-the-syslog-ng-team-reporting-problems-asking-questions

We realized that, apart from the blog post presenting our D-Installer project, we have not reported any YaST activity during 2022 here in our blog. Since we are in the Beta phase of the development of SUSE Linux Enterprise 15-SP4 (which will also be the base for openSUSE Leap 15.4) we are quite focused on helping to diagnose and fix the problems found by the intensive and extensive tests done by SUSE QA department, partners and customers. We know that’s not the part of our job our audience wants to read about… and to be honest is not the part we enjoy writing about either.

Fortunately, two months after our latest regular report, we have some interesting more bits to share.

New YaST Features

While debugging and fixing issues we also found time to implement quite some interesting changes and new features in YaST. Let’s quickly go through a summary.

• Improvements in the way YaST handles the activation of encrypted devices.
• Better integration of NFS management in the Partitioner.
• Usability and speed enhancements for DASD formatting on S/390 systems.
• Support for GRUB2 password protection in AutoYaST (check the recently extended documentation for more information).
• Better handling of the errors found analyzing storage devices.
• Adapted the keyboard layouts used by YaST.
• Support for selecting during installation the desired Linux Security Module (note the screenshots on that pull request are not fully up-to-date and do not exactly reflect the current user interface).
• Improvements in how the _netdev mount option is handled for remote file-systems. Including changes in the general handling and the new warning in the Partitioner.
• Adapted YaST to be compliant with the inclusive naming initiative. This implies changes in different parts of YaST, like this, this, this or this.
• Definition of specific per-product schemas to validate the AutoYaST profiles.
• Integration of the package yast2-firstboot-wsl into yast2-firstboot.
• Adjusted creation of snapshots in YaST for transactional systems like MicroOS.
• New capability for roles and products to specify a default timeout for the boot-loader configuration.
• Support for switching themes.
• Adapted handling of network configuration if iBFT (iSCSI Boot Firmware Table) is used during installation.

We also found time to implement some internal changes that, even though they don’t have a direct impact on final users, may be interesting for the more technical audience like people who usually debug or develop YaST:

• Better ways to manually test yast2-storage and debug storage-related issues.
• Usage of RSpec verifying doubles and better YaST module mocking. See this announcement in the yast-devel mailing list.

Progress on D-Installer

As you all know from our previous blog post mentioned above, we are also working on a side project codenamed D-Installer, as our main YaST duties permit. We want to turn our initial proof of concept into something that you can actually try, so the team is working on a few topics at the same time.

On the one hand, we are redefining our D-Bus API thinking about how it should look like in the future. As a side effect, Martin is improving the ruby-dbus library to support a few features that we need, like better support for D-Bus properties.

On the other hand, we are redesigning the user interface. Although we have not implemented the new design, you can see the approach we would like to follow in our mock-ups. :-)

More to Come

As you can see, we have been quite busy lately and we plan to remain so. The bright side is that both YaST and D-Installer will keep evolving at a good pace. The not-so-bright one is that we are not sure when we will be able to blog again. But we promise we will try to recover the biweekly cadence. Meanwhile do as we do and have a lot of fun!

The openSUSE community has opened the call for papers for a summit that will be held in conjunction with Open Source Conference Albania (OSCAL) 2022.

People can submit a talk for the openSUSE Summit at OSCAL 2022 from now until April 26 on events.opensuse.org.

OSCAL will take place from June 18 and 19 in Tirana, Albania, and will gather free (libre) open source technology users, developers, academics, governmental agencies and people who share the idea that software should be free and open for people to study, develop and customize. The conference is organized by Open Labs, which is a non-profit community that promotes the importance of an open source culture in Albania since 2012.

The openSUSE Summit at OSCAL 2022 will take place on one day of OSCAL and people are encouraged to submit a talk about openSUSE and open source. There are two talks that can be submitted for the summit. One is a short talk with a 10-minute limit and the other is a normal talk with a 30-minute limit.

The summit will be a hybrid event, so people can submit talks for presentation at the event or submit a talk and do it virtually if they are unable to travel to Albania.

Some attendees who want to travel to the conference and summit may be required to apply for a visa. If an attendee requires visa approval, they can email nafie.shehu (at) gmail.com to assist with an invitation to the conference. All attendees traveling to the conference/summit require the following:

• have a valid passport;
• have enough money for each day of their stay;
• be able to demonstrate the purpose of your stay to border officials;
• pose no threat to public order, national security or international relations.

For more information, visit Albania’s Federal Foreign Office website.

Your watchlist, where you keep your most used projects, now supports packages and requests. OBS is huge. And why not say it straight: it is easy to lose track of what matters. The watchlist came to solve this by making it possible to add your favorite projects to a list, available from every corner of the application. But it was only possible to add projects. We are happy to introduce managing packages and requests through...

The motivation of this post is to demonstrate how easy and logical is the workflow of an upstream change in a project to a given SUSE Linux codestream. I try to write this post in a codestream agnostic way. As I have experienced the workflow from the package maintainer point of view is the same for SUSE:SLE-15:Update and for openSUSE:Factory.

What I want to do

It all starts with a Bugzilla case. For the sake of this exercise I will walk through the process with this bug report: https://bugzilla.suse.com/show_bug.cgi?id=1195126 I use this case because it was a fairly simple, straight forward issue. It is a CVE-2022-0351: vim: uncontrolled recursion in eval7(). This is a Common Vulnerabilities and Exposures (CVE) what means that somebody has found and published an information-security vulnerabilities and exposures. By classification it is an important issue and as a package maintainer it is not my role to re-evaluate if the issue represents serious threat or not. My goal is to figure out if I can reproduce the issue and if I can find a fix for it.

Dear Tumbleweed users and hackers,

This week, the major news is a glibc update to version 2.35. This was surprisingly smooth (so far) compared to earlier version updates. Let’s all cross our fingers for this to stay the way it is. In total, Tumbleweed has seen 6 new snapshots during this week (0210, 0212, 0213, 0214, 0215, and 0216).

The major changes in these snapshots were:

• Mozilla Firefox 97.0
• GStreamer 1.18.6
• Mesa 21.3.6
• Linux kernel 5.16.8, with full drm support in earlyboot; this will be disabled again with kernel 5.16.10
• NetworkManager 1.34.0
• gnome-shell and mutter 41.4
• Glibc 2.35 (Snapshot 0216)

The future, near and far, will bring these changes to Tumbleweed (and of course more, which we have no tests in staging going on yet):

• KDE Plasma 5.24.1 (Snapshot 0217+)
• KDE Frameworks 5.91
• Linux kernel 5.16.10, simpedrm disabled again: too many issues reported
• systemd packaging changes: systemd-sysvinit will be renamed to systemd-sysvcompat: most users won’t need it (sysv support is minimized anyway, and Tumbleweed no longer ships any sysv init script)
• Python 3.6 interpreter will be removed (We have roughly 75 python36-FOO packages left)
• Python 3.10 as the distro default interpreter (a bit down the line)
• GCC 12 introduction has started to be as ready as possible for when the upstream release happens.

openSUSE’s rolling release Tumbleweed has produced five snapshots since our last review.

Snapshots 20220215, 20220214, 20220213, 20220212 and 20220210 updated several tools, libraries and clients this week.

The latest snapshot, 20220215, updated a couple Python Package Index and RubyGem packages. The package that generates profile reports from pandas DataFrame fixed almost a dozen regressions and reverted a performance speedup to fix a precision regression. The RubyGem package rubygem-faraday, which is an HTTP/REST Application Programming Interfaces client library, updated to a major new version from 1.3.0 to 2.1.0; the package added several new features like backport authorization process, improved documentation and added a policy on inclusive language. Data compression package lzip 1.23 reduced compression times by 5 to 12 percent depending on the file. Text editor vim 8.2.4375 fixed a few crashes and a couple of those involved FuncRef. An update of yast2-trans 84.87.20220211 added new pot files for storage, dns-server, nfs and s390.

Snapshot 20220214 updated six packages. Flatpak 1.12.5 now detects and removes left-over data from /var/lib/flatpak/appstream and a fix was made with a display bug in Flatpak history; it does not set up an unnecessary polkit agent for flatpak’s history. An update of gnome-maps 41.4 provided some translations and fixed build issues with Meson 0.60. The update of NetworkManager 1.34.0 had multiple additions for Meson builds requirements. The updated NetworkManager also split out NetworkManager-pppoe, which is needed to configure regular PPPoE connections; the changelog states that it’s not very common since most users have PPPoE routers for the DSL connections.

Internet Relay Chat client hexchat 2.16.1 updated in snapshot 20220213 and received build fixes with OpenSSL 3. The IRC client also fixed Python scripts not being opened as UTF-8. The 4.6.1 GTK4 package has a new API for text shaping engine HarfBuzz and the toolkit also fixes support for the new high-contrast setting with Wayland. The glib2 2.70.4 version updated translations and fixed a memory leak. Another packages to update in the snapshot was yast2-installation 4.4.40, which fixed some issue running with Qt 5.15.

Mesa 21.3.6 was among the many packages updated in snapshot 20220212. The update fixed a flickering with Intel UHD Graphic 620 and had some Wayland fixes with added modifiers for RGB formats. Apparmor 3.0.4 fixed a build error that could cause AppArmor builds to fail during tests in some build environments. The kernel security module also fixed log parsing for socklogd and added support in utils for new and future Python versions. With gnome-software 41.4, translations for Japanese and Icelandic languages were updated. Other GNOME packages to update were gnome-autoar 0.4.3, evolution 3.42.4 and gnome-documents 3.34.0+37, which the changelog states is the final version of gnome-documents as it is now archived. Identity management package sssd 2.6.3 fixed some critical regressions that prevented authentication of users via AD and IPA providers. There were some typo fixes and new tests added with the btrfsprogs 5.16.1 update. Other packages to update in the snapshot were nano 6.1, pango 1.50.4, Linux Kernel 5.16.8 and several YaST packages.

Snapshot 20220210 was released last week and brought ImageMagick 7.1.0.23. The image editor had a couple fixes for the minor version and one of those fixed an errant check, which increased memory and slowed down the tool. The newest Mozilla Firefox version, 97.0, was updated and it had a change that removed support for directly generating PostScript for printing on Linux. Printing to PostScript printers still remains a supported option, however. There was some code cleanup with the newest harfbuzz 3.3.2 upgrade and it reverted splitting of pair positioning values introduced in 3.3.0; the previous version in Tumbleweed was 3.2.0. The 1.18.6 version of GStreamer fixed an object leak for a plugin feature and the input-selector now uses the proper segments when cleaning cached buffers. Other packages to update in the snapshot were remmina 1.4.24, squid 5.4, webkit2gtk3 2.34.5 and many others.