Gentoo Weekly Newsletter: 13 November 2006
1.
Gentoo News
Anonymous CVS and SVN now available
The Gentoo Infrastructure team is
pleased to announce that they have completed the configuration and testing of
the anonymous read-only CVS and SVN services for Gentoo repositories, and that
these services are now available for public use.
The anonymous services are primarily intended to help our non-developer
contributors easily produce patches and modifications (cvs diff/svn diff), and
provide easier access to the source for gentoo-hosted projects.
For our more enthusiastic of users out there, please note that the CVS and SVN
services are not any more up-to-date than what is available via rsync,
and may be an additional 30 minutes behind, based on load on various machines.
Please do not switch to using the CVS simply because you think that it will get
you the tree faster, or make you cooler. Compared to our rsync distribution
method, the anonymous services have considerably less resources (both
processing and bandwidth) behind them. Infrastructure will not hesitate to
block IP addresses that abuse this service.
CVS
CVS is limited to 5 concurrent users. It currently offers the following
repositories: gentoo, gentoo-projects, gentoo-src, and gentoo-x86
Code Listing 1.1: Checking out from CVS |
$ cvs -d :pserver:anonymous@anoncvs.gentoo.org/var/cvsroot co <repo>
|
SVN
SVN has the following repositories: apache, baselayout, catalyst, devmanual,
eselect, genkernel, gentoo-alt, gentoo-python, gentoo-syntax, gentoo-vdr,
gentoolkit, gli, glsr, hardened, hwdata, keychain, linux-patches, livecd-tools,
portage, sandbox
Code Listing 1.2: Checking out from SVN |
$ svn co http://anonsvn.gentoo.org/repositories/<repo>
|
The front page of the service, http://anoncvs.gentoo.org/,
maintains an accurate list of the repositories available, as well as holding
complete instructions and caveats.
Please file an Infrastructure
bug for any problems that might come up.
The gzip blocking previously discussed has been removed, due to bandwidth
constraints on the part of the server. The concurrent user limit has been
lowered correspondingly.
Thanks go to: kengland, robbat2, kingtaco, ramereth, and several others for
helping make this happen.
Engine Yard uses Gentoo clusters for Ruby on Rails service
Engine Yard uses Gentoo-based clusters for its Ruby on Rails deployment
service. There's a video about its use of Gentoo at
http://qualityhumans.com/images/tom_ezra_gentoo.mov. In it, they talk
about how Gentoo has helped them in the design of their service and praise
Gentoo's customization capabilities. They also make several humorous comments
about Gentoo, such as "I'm pretty convinced that all the other distros are
built on Gentoo." They then go on to describe their upcoming Xen domU image,
which will be a Ruby on Rails development environment based on Gentoo.
2.
Heard in the community
gentoo-user
Symlinking out of a chroot
Brian Davis was planning on running his Apache server in a chroot. However, he
did not want to have to copy the pictures and other content to be served into
the chroot. He wanted to know if he could symlink out of the chroot to the
content.
Responding Gentooers pointed out that the symlinks wouldn't work and suggested
using mount --bind instead.
Code Listing 2.1: Using --bind with mount |
# mount --bind /source /chroot/target
|
New to Gentoo. Having trouble getting it started for the first time
Jon M had set up his root partition on /dev/hda3 using ReiserFS. When he
tried to boot, however, he received error messages including "VFS: Cannot open
root device "hda3" or unknown-block(0,0)".
Richard Fish responded that the "unknown-block(0,0)" showed that the kernel
could not find a device for hda3. This would be a symptom of failure to compile
in the necessary IDE device driver's for Jon's chipset or a failure to compile
int IDE support entirely.
Jon M had a look at the .config file for his kernel and indicated he'd missed
the device driver for his chipset.
3.
Gentoo developer moves
Moves
The following developers recently left the Gentoo project:
Adds
The following developers recently joined the Gentoo project:
- Alexander Færøy (eroyf) User Relations/Alpha/MIPS
- Cédric Krier (cedk) netmon team
Changes
The following developers recently changed roles within the
Gentoo project:
4.
Gentoo security
NVIDIA binary graphics driver: Privilege escalation vulnerability
The NVIDIA binary graphics driver is vulnerable to a local privilege
escalation through an X session.
For more information, please see the
GLSA Announcement
Bugzilla: Multiple Vulnerabilities
Bugzilla is vulnerable to cross-site scripting, script injection, and
request forgery.
For more information, please see the
GLSA Announcement
Netkit FTP Server: Privilege escalation
An incorrect seteuid() call could allow an FTP user to access some files or
directories that would normally be inaccessible.
For more information, please see the
GLSA Announcement
5.
Upcoming package removals
This is a list of packages that have been announced to be removed in the
future. The package removals come from many locations, including the Treecleaners and various developers.
Last-Rites:
6.
Bugzilla
Summary
Statistics
The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track
bugs, notifications, suggestions and other interactions with the
development team. Between 05 November 2006
and 12 November 2006, activity on the site has resulted in:
- 753 new bugs during this period
- 484 bugs closed or resolved during this period
- 15 previously closed bugs were reopened this period
- 183 closed as NEEDINFO/WONTFIX/CANTFIX/INVALID/UPSTREAM during this period
- 181 bugs marked as duplicates during this period
Of the 10914 currently open bugs: 29 are labeled 'blocker', 103 are labeled
'critical', and 487 are labeled 'major'.
Closed bug rankings
The developers and teams who have closed the most bugs during this period are:
New bug rankings
The developers and teams who have been assigned the most new bugs during this
period are:
7.
GWN feedback
The GWN is staffed by volunteers and members of the community who submit ideas
and articles. If you are interested in writing for the GWN, have feedback on an
article that we have posted, or just have an idea or article that you would
like to submit to the GWN, please send us your feedback and help make the GWN
better.
8.
GWN subscription information
To subscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+subscribe@gentoo.org.
To unsubscribe to the Gentoo Weekly Newsletter, send a blank e-mail to
gentoo-gwn+unsubscribe@gentoo.org
from the e-mail address you are subscribed under.
9.
Other languages
The Gentoo Weekly Newsletter is also available in the following
languages:
|