Gentoo Weekly Newsletter: 19 June 2006

Ulrich Plate  Editor
Patrick Lauer  Author
Christel Dahlskjaer  Author
Tobias Scherbaum  Author
Mark Kowarsky  Author
Markus Ullmann  Author
Steve Dibb  Author
Lucas Chiesa  Author
Lars Weiler  Author

Updated June 19, 2006

1.  Gentoo news

Userrel wants YOU! - User Representatives Nominations

As one of the major distributions at the moment, Gentoo's organisation can be a fiendishly complicated thing to understand, and it can be difficult to know how you can help out. To this end, we have created the position of ‘user representative’, and would like to take this opportunity to explain something about the role.

“Know thy users” is popular advice, and often we attempt to achieve this by consultation with one or more users. People will tend to err towards the idea of the statistical ‘average user’ – one speaks for all. Although this approach is a simple and oftentimes effective way to find a representative user, the results are only valuable if the user base, their day-to-day tasks and work settings are homogeneous. If there are significant variations, this approach will fail to support some users, and can result in a product that does not meet their needs. It relies heavily upon having selected the most important user attributes for sampling and consultation, and can easily tempt us to think that knowing the characteristics of the average user, we need not consult with them. In this way it discourages us from challenging our own assumptions, and may deny us a source of valuable information that could prevent mistakes.

The User Relations project focuses on bridging the gap between the developer and user communities, actively seeking out ways to improve communications between the two and encourage user involvement. It aims to ensure that high standards are met, and to work closely with other user focused projects to produce the best distribution possible for the user base. To this end, it is looking for user representatives to help in this quest.

The project has decided that 5 user representatives should be enough to provide a sufficiently diverse range of opinions and interests while avoiding the issues associated with having too many. Nominations are now open; see this forum thread for more information and to nominate any users you would like to see considered for the position.

What does a User Representative do?

Becoming a user representative may take some time, energy and commitment, but it can also be very rewarding. The role of user representative involves:

If you were thinking of becoming a user representative, you will not be left alone. The user relations project will be there to support you, and you will be assigned a current developer as a point of contact with whom you can discuss any questions or concerns about your role or the group as a whole.

Why become a user representative?

What makes a good user representative?

The ideal user representative would:

Where can I learn more?

We hope that most questions will have been answered above, but for any more information please do get in touch with the user relations team by one of the following methods:

Other ways to get involved

There are a number of areas in which interested users can contribute to Gentoo:

Project Sunrise - Gentoo User Overlay

Last week there was the announcement of an overlay for user-submitted ebuilds. This was intended to help users to find and use ebuilds that for now only exist in Gentoo Bugzilla and to ensure that these ebuilds adhere to quality standards. Also it might offer a good environment for recruiting new ebuild developers from the user community.

Giving commit access to this repository to trusted users has caused some very intense debates, centering mostly around policies and potential problems from malicious users. During the council meeting on June 16th it was decided that while the idea is quite good the execution was lacking.

As a consequence the Sunrise overlay has been suspended from official Gentoo hardware, but it does continue on gentoo-sunrise.org as an unofficial project.

Sunrise is looking for more users to add ebuilds from bugzilla to the overlay. You can find more information about Sunrise and its goals on the project page and have a look at the FAQ as well as the actual overlay. Feel free to visit the IRC channel - #gentoo-sunrise on irc.freenode.net awaits you!

Java 1.5 progress and changes in Java handling

As some might have noticed, Java 1.5 has been package.masked for some time now. There are a number of issues introduced with 1.5 that have kept it in package.mask. Please see the Java 1.5 FAQ for more details.

About a year ago, work was begun on improving our part of the build system (read: Java related eclasses and our java-config tool) in a way to make it much more flexible in general, but specifically improve it to get around the known issues. It took about six months to fully develop. Unfortunately, the new system was not quite a drop-in replacement. So, it took from then until now to determine how to migrate from the current system to the new one in a sane way.

But now we are ready to move to the new system.

Highlights of the new system:

The new system is currently being discussed on the gentoo-dev mailinglist, and assuming no major issues come up, will likely make their way into the tree in the next few weeks.

nss_ldap breakage and how to prevent it

With the upgrade to nss_ldap-249 and later many users found their system in an almost unusable state: Upon boot it could take an extremely long time (up to an hour) to get to a login prompt. This is caused by a small change in behaviour: What used to be a fixed timeout is now a configurable amount of attempts with increasing time between them. Information how to fix this problem can be found here:

Hungarian GWN translators

Recently a Hungarian GWN translation has been considered. Right now we are looking for some translators to help with the task - if you are interested please send a notice to gwn-feedback@gentoo.org. Many thanks in advance!

2.  Heard in the community

planet.gentoo.org

Gentoo multimedia FAQ

After seeing lots of similar questions on the Gentoo Forums and the #gentoo IRC channel Steve Dibb started collecting questions for a multimedia FAQ. If you like to see common questions being answered in his FAQ let him know.

gentoo-dev

Project Sunrise

The User Overlay project by Stefan Schweizer and Markus Ullmann has caused much discussion and has been suspended for now. The following threads spawned from this announcement:

Defining the Tree: a proto-GLEP.

Stephen Bennett starts a discussion that has its roots in the “alternative package manager” threads of the last weeks. One issue that was often mentioned is the lack of a formal specification of the ebuild format, environment and many other small details. So Stephen intends to write, together with the portage team and other interested developers, a full specification if there is enough interest and support within the developer community – and, almost obviously, this idea is almost universally accepted as a good thing.

Profiles Part 2

Following on from the lengthy and at times heated discussion in the Paludis and Profiles thread mentioned here two weeks ago, Stephen Bennett sent a new proposal to the list to make life easier for alternative package managers in the tree. This version is package-manager-agnostic and met with a much more positive response and no visible opposition. As things stand, it is set to be implemented at some point after the 2006.1 release.

GLEP 42 Revisited

GLEP 42, “Critical News Reporting”, has been waiting in a sort of limbo since its author left the Gentoo project. However, Stephen Bennett has now taken over sponsorship of it, and sent it to the mailing list again. The GLEP seems to have fairly widespread support, and should be sent to the Gentoo Council for approval in the near future.

GWN issues

Under the slightly unintuitive title "July Council Meeting: Requested Agenda Item" Christel Dahlskjaer starts a discussion about the state of the GWN. There were some issues with past GWNs, especially with the limited availability of Ulrich Plate. As a positive side effect Christel and some other devs have joined the GWN and will try to help where they can.

[RFC] i18n project

Diego 'Flameeyes' Pettenò asks for some input on one of his excellent ideas: An internationalization (i18n) project to make the life of our non-English users easier. Initial goals include translating error messages of Gentoo-developed applications and the respective manpages but the real span is yet to be defined.

3.  Gentoo International

Germany: FrOSCon, Bonn/Rhein-Sieg

Gentoo Developer Tobias Scherbaum will give two talks at the first Free and Open Source Software Conference taking place at the University of Applied Sciences Bonn-Rhein-Sieg next weekend. His first talk is an introduction to Gentoo where he talks about Gentoo's history, Gentoo's current state and further development. The second talk covers Gentoo's usage in business environments and demonstrates Gentoo's strengths, but also areas where Gentoo needs to evolve. For more details check the FrOSCon lectures website.

Gentoo Summer Camp 2006

The second Gentoo Summer Camp will take place on 26 and 27 august on a campground next to the fourth largest lake in Lower Saxony called “Grosses Meer”. While this claims to be a Gentoo camp, the organization team around Forums moderator Uwe Hölzel focusses mainly on social aspects. Playing mini-golf, having barbeque or just discovering the nature is preferred over hacking. For everyone who is interested in attending, the GSC team already set up a web page which provides further information and a forum.

4.  Gentoo in the press

gentoo.de: Guide to Portage 2.1 (13 June 2006)

The German community website gentoo.de published an article on new features and changed behaviour in Portage 2.1. Author Tobias Scherbaum includes an overview, but also gives practical examples on how these new features can be used to improve your Gentoo experience. The article is currently only available in German, an English translation can be done on short notice if some people indicate interest.

Rapid GUI Development with QtRuby

Gentoo Developer Caleb Tennis has recently published a book called “Rapid GUI Development with QtRuby”. It is available as PDF on the Pragmatic Programmer Website. While it does assume some basic working knowledge of Ruby it is intended to be easy to read and informative even for people not yet familiar with Qt.

Although it is not Gentoo-specific all testing of programs for this book happened on Gentoo. The QtRuby bindings can be emerged with emerge qtruby, the KDE extension Korundum can also be emerged with emerge korundum, so Gentoo users will have it especially easy if they wish to play around with these programs.

Caleb Tennis has been a Gentoo developer for three years now and is part of the Ruby, Qt and KDE herds.

5.  Tips and tricks

Exploring portage features

The new release of Portage 2.1 brings many features and improvements. While most of them are documented in the example make.conf and the portage man page they may not be obvious to most users, so we will show how to use some of these features.

All the features have to be set in /etc/make.conf.

Portage is now able to download some package's source code while compiling another. This can considerably reduce installation time when emerging many packages. There's no need to run emerge --fetchonly while doing a normal emerge anymore. You just have to add the following option:

Code Listing 5.1: Setting parallel-fetch in /etc/make.conf

FEATURES="parallel-fetch"
          

This feature appears to be non-functional in some of the Portage 2.1 releases, but is expected to be fixed soon.

Another new option to reduce installation time yet a bit more is confcache. With this new feature portage caches many of the tests configuration scripts do, thus making execution faster. This comes with the small risk of caching wrong values, so be warned that this feature is known to have a few bugs. Since this package is currently keyworded on most architectures, the required steps to enable it are:

Code Listing 5.2: Enabling confcache

Add this in /etc/make.conf
FEATURES="confcache"
We need to unmask the package before emerging it
echo "=dev-util/confcache-0.4.2-r1 ~arch" >> /etc/portage/package.keywords
Installing confcache
emerge -av confcache
On further installations. you'll see stuff like:
checking for i686-pc-linux-gnu-gcc... (cached) i686-pc-linux-gnu-gcc
checking whether we are using the GNU C compiler...(cached) yes
checking whether i686-pc-linux-gnu-gcc accepts -g... (cached) yes
        

Another important new feature is the ability to log all the messages ebuilds print. Which messages to log and how to do it is configurable. For example, to save just the warnings and errors in a separate file for each package we emerge, you have to add:

Code Listing 5.3: Configuring logging features in /etc/make.conf

This sets what to log
PORTAGE_ELOG_CLASSES="warn error log"
And this is how to do it
PORTAGE_ELOG_SYSTEM="save"
        

There are many more options like sending log messages via email. Please check out make.conf.example for further information.

6.  Gentoo developer moves

Moves

The following developers recently left the Gentoo project:

Adds

The following developers recently joined the Gentoo project:

Changes

The following developers recently changed roles within the Gentoo project:

Note: Chris White resigned and then retracted his resignation. To show this change in status he is mentioned both as leaving and newly joining.

7.  Gentoo security

GDM: Privilege escalation

An authentication error in GDM could allow users to gain elevated privileges.

For more information, please see the GLSA Announcement

Asterisk: IAX2 video frame buffer overflow

Asterisk contains a bug in the IAX2 channel driver making it vulnerable to the remote execution of arbitrary code.

For more information, please see the GLSA Announcement

DokuWiki: PHP code injection

A flaw in DokuWiki's spell checker allows for the execution of arbitrary PHP commands, even without proper authentication.

For more information, please see the GLSA Announcement

OpenLDAP: Buffer overflow

The OpenLDAP replication server slurpd contains a buffer overflow that could result in arbitrary code execution.

For more information, please see the GLSA Announcement

PAM-MySQL: Multiple vulnerabilities

Vulnerabilities in PAM-MySQL can lead to a Denial of Service, making it impossible to log into a machine.

For more information, please see the GLSA Announcement

Sendmail: Denial of Service

Faulty multipart MIME messages can cause forked Sendmail processes to crash.

For more information, please see the GLSA Announcement

Typespeed: Remote execution of arbitrary code

A buffer overflow in the network code of Typespeed can lead to the execution of arbitrary code.

For more information, please see the GLSA Announcement

Mozilla Thunderbird: Multiple vulnerabilities

Several vulnerabilities in Mozilla Thunderbird allow cross site scripting, JavaScript privilege escalation and possibly execution of arbitrary code.

For more information, please see the GLSA Announcement

8.  Bugzilla

Summary

Statistics

The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track bugs, notifications, suggestions and other interactions with the development team. Between 12 June 2006 and 19 June 2006, activity on the site has resulted in:

Of the 10298 currently open bugs: 54 are labeled 'blocker', 138 are labeled 'critical', and 554 are labeled 'major'.

Closed bug rankings

The developers and teams who have closed the most bugs during this period are:

New bug rankings

The developers and teams who have been assigned the most new bugs during this period are:

9.  GWN feedback

Please send us your feedback and help make the GWN better.

10.  GWN subscription information

To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to gentoo-gwn+subscribe@gentoo.org.

To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to gentoo-gwn+unsubscribe@gentoo.org from the e-mail address you are subscribed under.

11.  Other languages

The Gentoo Weekly Newsletter is also available in the following languages: