0-day bump requests

Ioannis is right about the futility of filing 0-day bump requests.

Just a few hours after Xen 3.0.3 was announced on the xen-devel mailing list, a version bump request was filed as bug #151764.

As maintainers of a package, we’re aware of when new relases are made – we’re probably even following the development list and working on ebuilds for the release candidates. If a working ebuild doesn’t appear in the tree within 3 hours of the upstream release announcement, it doesn’t mean we need to be prodded!

Oh, and since Chris White didn’t like Ioannis’ choice of kitten, I’ve taken the liberty of finding some puppies and cute little kittens to be sacrificed in response to this latest 0-day version bump request 🙂

Technorati tags: , , ,

Danger, Will Robinson! Hardened and xen-tools-3.0.2-r4

The motive for my previous post is about to be revealed – I’ve just committed app-emulation/xen-tools-3.0.2-r4, as ~x86/~amd64, and hardened users should heed the ebuild’s warning:

xend may not work when python is built with stack smashing protection (ssp). If ‘xm create’ fails with ‘<ProtocolError for /RPC2: -1 >’, see bug #141866

While -r4 includes fixes for quite a few bugs, for those using a hardened profile the biggest change is a relaxation of the restriction I introduced in -r3 to combat bug #141866 (RPC Protocol Error with xen-tools and hardened profile).

In response to this bug I made -r3 die if python was built with SSP, since it appeared that everyone using xen with a hardened profile was having the same problem. However, after -r3 hit the tree some users reported that they were unaffected by this problem, hence the relaxation in -r4.

If you’re using xen on a hardened system please test xen-tools-3.0.2-r4 and let me know (via the above-mentioned bug) if your ‘xm create’ fails with ‘<ProtocolError for /RPC2: -1 >’ or not.

Technorati tags: , ,

elog – endless possibilities and no excuses.

I don’t believe in holding the hands of users running ~arch – even if they only have a few ~arch ebuilds on an otherwise stable system. While ALL Gentoo users should be reading the messages delivered via ewarn, for ~arch users this can be critical.

With the introduction of the elog logging framework in portage-2.1.1, there’s no excuse for missing these messages. make.conf.example shows how to automatically save ebuild messages to disk, or email them to an address of your choosing. elogviewer provides a nice GUI for reviewing messages, while portage-mod_jabber allows you to receive them via XMPP (Jabber).

Should you want to, there’s no reason why you couldn’t easily receive ebuild messages via SMS or pager – they could even be posted to a blog using the MetaWeblog API (MWA), or sent directly to your workstation screen using PyKotIcon or Remote Growl.