Course of work in Linux command line not only for MetaCentrum 2024 vojta Wed, 09/27/2023 - 09:06

Choosing a name for anything is not an easy task; the detail can wield significant influence, which is why a survey to make a decision about renaming Slowroll was presented.

Slowroll is a new distribution based on Tumbleweed, but rolls out updates slower; it is designed to implement updates at a pace of one to two months, integrating bug fixes and addressing Common Vulnerability and Exposure issues as they emerge.

As will all things in open source, the name was presented along with the idea for the distribution and discussion took place about the details surrounding Slowroll. The origin of the name was self-describing the distribution, but other names for Slowroll were proposed, so the renaming of it was put to a vote. All names there were proposed were included in the survey.

That voting process concluded today with more than 1,000 votes cast by interested members of the open-source community. This enthusiastic involvement underscores the interest of the openSUSE user base and trajectory of the project. The top results are the following:

1. Slowroll - 46.33%

2. Driftwood - 25.91%

3. Snowroll - 21.04%

4. Drift - 20.51%

5. Wave - 16.36%

6. Orbit - 13.44%

7. Lunar - 12.56%

8. Tide - 12.47%

The percentages surpass the 100% threshold due to the respondents’ option to endorse multiple choices.

With an impressive 46.33% of the votes, the community found Slowroll to remain the best option to describe the naming of the distribution. The decision has been reached to retain the established name as it represents a communal vision and messaging in name.

Members of the project extend their gratitude and appreciation for all those who took the survey and contributed to this pivotal decision.

Anyone interested in making a logo for the new distribution can send design images to the project’s marketing telegram channel. The logo should be an .svg image and should complement other logos for the project that related to a branding direction being discussed on the project’s GitHub.

Thank you for being part of the journey, and have a lot of fun!

Version 1.1 von Kraft ist mit wichtigen Verbesserungen für Benutzende und die Integration in moderne Softwarestacks wie cmake und KDE releast worden. Die wichtigsten Änderungen sollen hier kurz vorgestellt werden.

Als erstes einige technische Details: Die niederländischen Übersetzungen sind aktualisiert. Das Anwendungs-Icon wurde repariert, und die cmake Steuerdateien wurden so geändert, dass Kraft jetzt sowohl mit älteren als auch neuen Versionen von Akonadi zusammenarbeitet, wie sie in verschiedenen Linux-Distributionen gefunden werden.

Aus Sicht von Benutzenden gibt es zwei wesentliche Verbesserungen:

Erstens können die Kopf- und Fußtexte der Dokumente können jetzt mit Makros erweitert werden, die automatische Berechnung z. B. von Datumswerten unterstützen. So kann beispielsweise ein Zahlungsziel von zwei Wochen nach dem Dokumentdatum durch den Einsatz eines Makros sehr leicht automatisch auf dem Ausdruck eingefügt werden. Darüber hinaus gibt es noch weitere interessante Makros z. B. zur Berechnung der sog. haushaltsnahen Dienstleistungen. Sie werden in einem separaten Beitrag vorgestellt.

Zum Zweiten wurde ein neuer Knopf hinzugefügt, mit dem Vorlagen für Kopf- und Fußtexte jetzt an der Cursorposition zusätzlich in die Texte des Dokumentes eingefügt werden. Bisher konnten nur die gesamten Dokumenttexte ersetzt werden. Mit der neuen Erweiterung steigt die Flexibilität wie die
Vorlagen organisiert werden, da jetzt leichter spezifische Textbausteine erstellt werden können.

Parallel zu diesem Release geht die Arbeit an einem Kraft 2.0 Branch weiter, der Kraft zu einem kollaborativen, digital souveränen Werkzeug über Internet machen wird.

Kraft Version 1.1 kann wie üblich über die Download-Seite heruntergeladen werden.

Bitte beachten: Wenn man Kraft 1.1 selbst übersetzen will, stößt man auf einen kleinen Fehler: Im root-Verzeichnis des source Tarballs wird die Datei .tag erwartet, sonst bricht cmake mit einem Fehler ab. Dies kann behoben werden, indem die Datei angelegt wird mit dem Inhalt 100ca9f3.

Dear Tumbleweed users and hackers,

Tumbleweed went for a small break this week and delivered ‘only’ 4 snapshots (0914, 0915, 0917, and 0920). The large gap happened due to a test suite error in icu, which resulted in all stagings turning red. Once this was resolved, the fix was added in parallel to multiple stagings to resume progress.

The 4 delivered snapshots contained some eagerly awaited updates (at least for some):

• KDE Plasma 5.27.8
• KDE Gear 23.08.1
• Linux kernel 6.5.3
• GNOME 45.0
• Libproxy 0.5.3
• groff 1.23.0
• PostgreSQL 16.0

The staging projects are mostly moving, a few select issues have been with us for a while by now and block some updates. The things on the list are:

• Java 20 OpenJDK will be removed; Java 21 OpenJDK added. Mid-term, we will switch from Java 17 LTS version to Java 21 LTS as the distro default
• Linux kernel 6.5.4
• Poppler 23.09.0
• LLVM 17
• Mesa 23.1.8
• cmake 3.27.5
• FMT 10: breaks mariadb boo#1213219 and ceph boo#1213217; help welcome

A few openSUSE Tumbleweed snapshots became available to users of the rolling release this week.

Several software packages for KDE users were among those updated.

The health-checker package, which checks to ensure a system comes up correctly after an update, moved to version 1.10 in snapshot 20230917. The new version fixed a journal check error that reported an invalid option error with systemctl. While not a critical issue, this can spam the journal and was caused by a change in openSUSE kiwi, according to the bugzilla report. An update of OpenSSL 1.1.1w fixes a Common Vulnerability and Exposure that doesn’t effect Linux systems and had a fix preventing corruption of XMM registers ensuring application stability. The 0.10.6 snapper version had fixes for creating files in the root directory and provides improvements in handling info.xml files. Security updates came in libwebp 1.3.2 that specifically addresses CVE-2023-4863, which could have allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Also updated in the snapshot were groff 1.23.0, tiff 4.6.0 and more.

Snapshot 20230915 brought one other package besides updates for KDE Gear 23.08.1. The lone software package to update was gtkmm4 4.12.0 had some enhancements in simplifying C++ development with GTK. The package also introduces a deprecation and improves documentation with clearer explanations about managed and non-managed widgets in GTK. The Gear 23.08.1 updates had several improvements and bug fixes. Among those updates were kitinerary and it expands its barcode extraction capabilities as well as enhances ticket handling for various scenarios. There were some fixes to the definition of preprocessor macro HAVE_X11 in KMail. KNavalBattle reset stats upon restarting a game. A crash was fixed for Konsole and Gwenview improved navigation with side mouse buttons and settings menu override issues. The update of Okular fixes object creation and button icon issues in PDFs.

The 20230914 wasn’t in the last Tumbleweed update, but it did have some significant updates. The snapshot also provides more updates for KDE users. Plasma 5.27.8 updates Application installer Discover and fixes some Flatpak crashes to enhance stability. An update of Breeze fixes the separator position on HiDPI displays and removed extra 1px padding for improved visual aesthetics. The plasma5-desktop 5.27.8 package fixes touchpad-related crashes on X11 and also includes numerous other fixes and improvements. An update of btrfsprogs 6.5.1 addresses issues with crc32c when PIE or relro is enabled. The spec file no longer has a dependency on xmlto for building docs. A 13.2.1+git update of GNU Compiler Collection addresses issues with -fstack-protector related to aarch64 fixing CVE-2023-4039. Xfce users also received an update in the snapshot. The xfce4-whiskermenu-plugin 2.8.0 update fixes menu issues in Wayland, adds new features like specific menu instances and center screen display, streamlines settings, and improves compatibility with Xfce 4.14.

Kraft (Github) is a desktop utility making it easy to create offers and invoices quickly and beautifully in small companies.

Today we are releasing Kraft Version 1.1 with significant improvements for users and the Krafts integration with latest software such as cmake and KDE.

It received updated dutch translations in UI and also for the manual. The application icon was fixed, and some cmake related fixes were done that make Kraft working with different versions of Akonadi that are available on different distributions.

Macros

For users, two significant improvements are included: The header- and footer texts of the documents now may contain macros that support automatic computing of values such as dates that depend on the document date. With that, it is for example easy to have for example a payment date printed out on the document, that is ten days later than the document date.

There are even more interesting macros, stay tuned for a separate post about this feature.

Insert Templates Button

The second new feature is a new button that allows to insert templates for the header- or footer text at the cursor position. Before it was only possible to replace the entire text with a template. This will give users way more flexibility how to structure template texts.

In parallel to these improvements, work is also going on in a branch for Kraft 2.0 which will enable more collaborative functions for Kraft.

Dear Tumbleweed users and hackers,

Due to my contributing to different things last Friday, I had to skip the weekly review (again) and thus will have to span two weeks again this time. As Tumbleweed rests in the capable hands of Ana, this is not an issue: Tumbleweed keeps on rolling without me being present after all. Just as we expect it to be. During the last two weeks, we have released 9 snapshots (0901, 0902, 0904, 0906, 0908, 0910, 0911, 0912, and 0913).

The most relevant changes in those nine snapshots included:

• glibc fix for malloc: Enable merging of remainders in memalign, remove bin scanning from memalign
• Mesa 23.1.6 & 23.1.7
• Mozilla Firefox 117.0 & 117.0.1
• Grub 2.12 RC1
• KDE Gear 23.08.0
• KDE Frameworks 5.110.0
• git 2.42.0
• Linux kernel 6.4.12 & 6.5.2
• Pipewire 0.3.79
• Samba 4.18.6
• PHP 8.2.10
• GNOME 44.4
• Coreutils 9.4
• Python 3.11.5
• btrfsprogs 6.5
• systemd 254.3
• Qemu 8.1.0

This list makes it quite obvious: the vacation period is over. The performance issues around OBS/openQA after the data center move seem also to be well under control for the moment.

Staging projects currently hold these changes to be tested:

• KDE Plasma 5.27.8
• KDE Gear 23.08.1
• GNOME 45 (currently RC staged, final release scheduled for September 20; we should be able to deliver this rather swiftly. NOTE: extensions need to be updated for this GNOME version!)
• libproxy 0.5.3 (changing from 0.4.18): This is the rewrite maintained by Volkswagen Group
• FMT 10: breaks mariadb boo#1213219 and ceph boo#1213217; help welcome
• libxml2 2.11.x

This week saw openSUSE Tumbleweed level up with a new Linux Kernel.

The rolling release had many snapshots, but only recently did the zypper dup change the distribution to Linux Kernel 6.5.

The most recent snapshot to be released is 20230913. Mozilla Firefox 117.0.1 fixes a bug that causes extensions with long-running tasks to be terminated prematurely. The web browser resolves problems with audio for WebAssembly-based sites. An update of curl 8.3.0 removes Global Secure Kit and Network Security Services support. The package also fixes address issues like handling IPv6 addresses in response headers, reduces some timeouts and improves SSL and HTTP protocol handling. An update of virtualization tool qemu 8.1.0 improved live migration support for Virtual Function Input/Output (VFIO) and has some Advanced Encryption Standard acceleration for arm, PowerPC, and RISC-V architectures. An update of sudo 1.9.14p3 fixes a crash issue related to Python 3.12 and resolves output formatting problems when piping or redirecting output. Several other packages updated in the snapshot.

Text editor vim arrived in snapshot 20230912. The 9.0.1894 version took care of four Common Vulnerabilities and Exposures. CVE-2023-4751 was one of those and it had the potential for a buffer overflow. The package also improves error handling, and the update addresses some problems related to testing, syntax recognition and compatibility with different file types. An update of perl-Mojolicious 9.340.0 improves support for serving static files with a prefix, enhancements encoding option methods and addresses issues related to Perl features and fixes built-in templates to not require an internet connection. An update of yast2-trans provided Swedish, Indonesian and Russian translations. There were several other packages updated in the snapshot including libportal 0.7.1 that had an update earlier in the week.

The 6.5.2 kernel arrives on users machines with snapshot 20230911 and it introduces several features like improved support for server and cloud performance and Advanced Configuration and Power Interface (ACPI) support for RISC-V architecture. The kernel-sourcel from 6.4.12 to 6.5.2 also brings support for USB4 V2 for high-speed data transfer all while preparing for a future with support for Wi-Fi 7. The diagnostic, debugging and instructional userspace package strace also made a 6.4 to 6.5 jump; it introduces decoding for various syscalls and socket options. It also updates lists of constant values and ioctl (input/output control) commands from Linux 6.5. An update of systemd 254.3 introduced configurability for utmp, AppArmor, SELinux as well as improves package handling. The snapshot brought KDE Frameworks 5.110.0 that brought several improvements. Notable changes include the enhancement of KImageFormats with improved desktop file support along with support for libavif 1.0 for encoding and decoding .avif files. KIO now handles copy operations on CIFS mounts more effectively and fixes the Ask Jeeves search provider. Kirigami addresses property access, spacing and itemChange problems. KWayland resolves build issues related to XLib’s Bool definition, and several other updates were made with KDE Frameworks packages.

Snapshot 20230910 had many packages update in the snapshot. Mesa 23.1.7 introduces support for the OpenGL 4.6 Application Programming Interface; however, not all drivers support all OpenGL 4.6 features. Mesa also implements the Vulkan 1.3 API. An update to btrfsprogs 6.5 had some notable changes. The filesystem package published static binaries built with backward compatibility and including a 3x speedup in the CRC32C implementation. The package introduces stricter option combinations for btrfstune and adds some experimental feature updates and code refactoring. An update for dracut removes a microcode check that was previously based on the configuration settings related to AMD and Intel microcode. The package also disabled FIPS (Federal Information Processing Standards) and IMA (Integrity Measurement Architecture) features for an older specific architecture. An update of libvirt 9.7.0 enhances functionality with qemu providing basic support for “VFIO variant” drivers. The library also adds two new commands, net-desc and net-metadata. The GObject package for creating cabinet files, gcab, updated to version 1.6 and has a new feature that introduces an ability to specify allowed compression formats at runtime. Flatpak portal library, libportal 0.7, adds support for new methods in the Background and Remote Desktop portals. The library enhances documentation and also improves unit and integration tests. The 4.5.141 update of libstorage-ng had Swedish translations and now handles the json output of Btrfs 6.5 better.

The 20230908 snapshot brought a python311 3.11.5, which addresses various security and bug-related issues. It fixes security vulnerabilities in SSL sockets and resolves potential memory access issues on C APIs. The new python also enhances various aspects of the python-core, which was also updated in the snapshot, and built-in libraries. Numerous bug fixes and improvements were made in the update and the snapshot also brought several other Python Package Index updates. The kexec-tools 2.0.27 update adds various architecture-specific improvements, enhancements to documentation and the Xen support in ALP was disabled for the package. An update of sssd 2.9.2 introduces a new option called local_auth_policy and allows control over offline authentication methods. Caching DNS resolver unbound 1.18.0 brought new features such as metrics on collisions and support for Redis Unix sockets and passwords. The package also introduces NAT64 support. An update of perl-Bootloader 1.8 had improvements for a bootloader_entry script to accept an optional force-default argument. Several other packages were updated in the snapshot from last Friday.

Lately, we have been working again on the request workflow redesign. We have introduced the build results summary of a request and improved the information displayed in the Mentioned Issues section. All these improvements will help you focus on what matters and better digest all the information you receive when you review or visit a request. The request redesign is part of the beta program. We started the redesign of the request workflow in August...

This week’s openSUSE Tumbleweed snapshots varied from large to small and there was also an updated arm Tumbleweed snapshot released.

Packages to arrive so far this month have touched several portions of the rolling release.

Snapshot 20230904 had security fixes for two packages. The XML parsing package libxml2 addresses CVE-2023-39615, which pertains to a crafted XML that could potentially lead to a global buffer overflow, and libxml2-python mitigates this vulnerability with a patch.

An update of FreeRDP arrived in snapshot 20230902. The update of freerdp 2.11.0 had various input validation fixes and addresses potential vulnerabilities to enhance security. The package introduces various CMake options to provide more flexibility in building the package. There are fixes related to LibreSSL and the inclusion of support for big endian systems. The package also had changes in handling the H.264 codec by adopting a new FFmpeg Application Programming Interface. An update of php8 8.2.10 fixes a command-line interface (CLI) server crash and addresses issues in the MySQLnd extension to ensure proper authentication with password accounts and prevents segfaults. SDL2 2.28.3 introduces a gamepad mapping for the G-Shark GS-GP702 and the package fixes touchpad events for the Razer Wolverine V2 Pro controller in PS5 mode. An update of xdg-utils merges an upstream patch and has changes to support KDE Plasma 6 when releases. Several other packages updated in the snapshot including suse-module-tools 16.0.34, virtiofsd 1.7.2 and more.

More than 30 software packages were updated in the first snapshot of September. Updates for KDE Gear arrived in snapshot 20230901. File manager Dolphin can now hide temporary and backup files, which unclutters the user’s file view. Dolphin also introduces features like showing the progress of size calculations. Document viewer Okular enhances digital signing by allowing additional metadata like reason and location to be added to signatures. KDE’s travel assistant package Itinerary now supports importing online railway tickets and improves the extraction of data from various companies’ documents like Air Asia, B&B Hotels, Deutsche Bahn, Eventbrite, FlixBus and more. An update of Mozilla Firefox 117.0 has changes to take care of memory corruption in various components and fixes issues related to an integer overflow and unencrypted push notifications. The web browser update addresses 13 Common Vulnerabilities and Exposures. An update of git 2.42.0 had some notable changes that includes the ability to tweak the reference hierarchy using patterns with git pack-refs and uses a new hook program in git pack-objects to enumerate extra objects for anchoring. There are also improvements in handling GPG signature verification and the package enhances compatibility with the sparse index feature. An update of Linux Kernel 6.4.12 fixes error handling in crypto and Common Internet File System. It also has some Advanced Linux Sound Architecture (ALSA) System on Chip changes (ASoC) and stability improvements. Several other packages updated in the snapshot including PipeWire 0.3.79, python-pip 23.2.1, LibreOffice 7.6.1.1, Mesa 23.1.6, AppStream 0.16.3, samba 4.18.6 and more.

A new arm Tumbleweed snapshot 20230904 included all the package updates from the software highlighted above.