20:01:25 <DavidWHodgins> #startmeeting 20:01:25 <Inigo_Montoya> Meeting started Thu Mar 25 20:01:25 2021 UTC. The chair is DavidWHodgins. Information about MeetBot at http://wiki.debian.org/MeetBot. 20:01:25 <Inigo_Montoya> Useful Commands: #action #agreed #help #info #idea #link #topic. 20:01:35 <DavidWHodgins> #chair MageiaTJ wilcal 20:01:35 <Inigo_Montoya> Current chairs: DavidWHodgins MageiaTJ wilcal 20:01:42 <DavidWHodgins> #topic * Who's new? - If you are then come and say hello 20:01:57 <DavidWHodgins> Anyone here who hasn't been to a qa team irc meeting before? 20:02:25 <DavidWHodgins> #topic * Testing Mageia 8 - updating from M7 to M8 20:02:51 <bri_an> I was about to try the applet. Should I wait for anything on this drive? 20:02:51 <wilcal> I would ask that David define exactly how to update from M7 -> M8 20:02:57 <wilcal> for the record 20:03:04 <DavidWHodgins> bug 28522 was still a problem 20:03:06 <[mbot> Bug: ['File conflicts with opencv-devel cause cascading errors during upgrade from Mageia 7 to 8', 'NEW', 'QA Team'] https://bugs.mageia.org/show_bug.cgi?id=28522 20:03:19 <MageiaTJ> I still have to do an upgrade on my brother's computer. 20:03:31 <DavidWHodgins> I'll retest the upgrade after the meeting or tomorrow if I get to tired. 20:04:02 <wilcal> Define for me hpw you do upgrade David 20:04:24 <DavidWHodgins> In addition, I want to do a test with all desktop environments installed which takes many hours 20:05:27 <wilcal> hi zeke 20:05:39 <DavidWHodgins> What I'm doing for my testing is removing all repos, adding them as per the wiki, but pointing to mageia 8 url repos, then urpmi --auto-select after enabling the testing repos as update repos 20:05:40 <zekemx> Hi wilcal 20:05:42 <bri_an> anything special I need to do for the mgaapplet upgrade? I killed the old and started it with mgaapplet --testing 20:05:44 <zekemx> hi all 20:06:28 <DavidWHodgins> bri_an: That should do it for online upgrades if you don't need to enable the testing repos as part of the upgrade 20:06:31 <MageiaTJ> When I do an upgrade install, I like to use the netinstall iso. It's nice that it works with most wifi devices now. 20:06:36 <DavidWHodgins> Most people shouldn't 20:06:52 <wilcal> so how shouuld it be done? 20:07:24 <DavidWHodgins> Most people should wait until we enable using mgaapplet for upgrades without needing --testing. 20:08:12 <DavidWHodgins> That won't happen until all bugs shown by https://bugs.mageia.org/showdependencytree.cgi?id=28393&hide_resolved=1 are fixed and I've tested an upgrade with all desktop environments 20:08:14 <[mbot> [ Dependency tree for Bug 28393 ] 20:08:46 <wilcal> magaapplet called from a su teerminal? 20:08:54 <bri_an> that's how I do it 20:09:16 <wilcal> how about setting up the repo? 20:09:31 <wilcal> do you remove the M7 repo and install the M8 repo 20:09:57 <wilcal> or leave both active 20:10:09 <wilcal> then call magapplet 20:10:10 <bri_an> nope - I am just running the mgaapplet from su with current 7 repo's enabled. the applet seems to affiliate 20:10:37 <wilcal> how does it know where the M8 repo is? On line? 20:11:28 <bri_an> that's for someone else to answer. I've done it before and it just works 20:12:04 <DavidWHodgins> Just lost connection for a bit 20:12:16 <wilcal> That's why I'm asking for a specific set of actions to launch the upgrade 20:12:52 <wilcal> Like M7 repo is enabled. Enable M8 repo launch magaapplet from an su window? 20:13:33 <DavidWHodgins> https://wiki.mageia.org/en/Upgrading_with_urpmi 20:15:06 <bri_an> I've imaged this drive, let me kick it off 20:15:47 <DavidWHodgins> "urpmi.removemedia -a", thenu use urpmi.addmedia --distrib http://mirror.math.princeton.edu/pub/mageia/distrib/8/x86_64 to add the Mageia 8 repos (or your mirror of choice) 20:15:48 <[mbot> [ A fully community-based Linux Distribution: Mageia ] 20:16:19 <DavidWHodgins> I then use drakrpm-edit-media --expert to enable the testing repos as update repos for my tests 20:17:07 <DavidWHodgins> Once those updates I'm getting from the testing repos have all been validated and moved to updates, the drakrpm-edit-media should not be used 20:18:14 <DavidWHodgins> For most people, once the flag has been set to allow it, mgaapplet can be used (without the --testing option) 20:18:42 <DavidWHodgins> Any additional questions about upgrading? 20:19:54 <wilcal> I'll give it a go here 20:19:58 <bri_an> running the mgaapplet upgrade now 20:20:02 <DavidWHodgins> For my really big upgrade test, I'll be testing with an install that has all of the packages shown by urpmf /usr/share/xsessions/ installed 20:20:04 <bri_an> so if I drop off ....... 20:20:12 <DavidWHodgins> :-) 20:21:00 <DavidWHodgins> Shouldn't impact running programs. I make sure I have a couple of konsoles open, already "su -" to root before starting the upgrade so I can use those to monitor things 20:21:01 <wilcal> on real hardware i can clone an ssd My drive and try the upgrade on that 20:21:22 <DavidWHodgins> That's what I do on my main system 20:21:48 <bri_an> this is gnome I did disable screen blanking 20:21:50 <ZemeMX> great idea wilcal! 20:21:52 <wilcal> Any problems with doing the upgrade on a Vbox client 20:22:07 <DavidWHodgins> Using rsync, not dd with the commands needed to restore safely on a live usb stick with persistence, if needed. 20:22:50 <DavidWHodgins> wilcal: So far, most of my testing has been in vb clients, using snapshots so I can undo/repeat the upgrade tests 20:23:28 <wilcal> From the ML it looks like some are not getting to a desktop after the upgrade 20:23:30 <bri_an> so about 2.5 months away from MGA 7 complete done 20:23:45 <DavidWHodgins> I make sure the vb guest was installed without removing unused hardware/locales 20:24:04 <bri_an> I'll bang around a couple of more, but trying to retain some mga7 for testing 20:24:43 <DavidWHodgins> Depends on when it's safe to turn on upgrading via mgaapplet. If it takes too long, I'll ask council to extend support for m7 20:24:54 <wilcal> Just bought two 250GB Samsung 370 EVO SSD's I can clone one to the other in about 5 minutes :-)) 20:24:56 <bri_an> thanks that does make sense 20:25:57 <wilcal> The clone then becomes the victim 20:26:00 <DavidWHodgins> I should be using my laptop for more of my testing. It has two nvram ssd drives. (currently one mga7 and one mga8 install) 20:26:29 <DavidWHodgins> There's enough room to rsync a full copy of the m7 install (I think. Have to confirm). 20:26:32 <Benmc> the only suggestion I would make regarding mga--testing is that you start it from a user ($) , rather than root (#) terminal 20:26:32 <wilcal> All my teesting now is USB connected storage on a Dell laptop 20:26:43 <wilcal> USB 3.0 20:28:35 <DavidWHodgins> Anything else about mga8 testing before I move on? 20:28:41 <wilcal> Not from me 20:28:45 <ZemeMX> Does KDE Plasma 5.21 in testing already or M8 or not yet? 20:29:57 <auroud85[m]> <ZemeMX "Does KDE Plasma 5.21 in testing "> Hi all, not yet 20:30:35 <DavidWHodgins> #topic * Testing Megaia 7 - Any questions or problems 20:31:00 <auroud85[m]> Not for me. 20:31:05 <DavidWHodgins> I've still been focusing on m7->m8 testing so haven't had the time to work on updates 20:31:10 <wilcal> WOW! What did we do there. 3 kernel updates in a couple weeks? 20:31:21 <wilcal> scary 20:31:30 <DavidWHodgins> With another on the way I think 20:31:31 <auroud85[m]> <wilcal "WOW! What did we do there. 3 ker"> tmb is in the place. 20:31:48 <auroud85[m]> Several Security fixes there. 20:32:00 <wilcal> critical I assume 20:32:28 <wilcal> we went from 24 to 25 almost in the same day 20:32:34 <auroud85[m]> Note that Imagemagick Advisory was tricky. So does jackson-databind... 20:32:43 <auroud85[m]> <wilcal "we went from 24 to 25 almost in "> Yeah, there was a CVE to fix. 20:33:07 <DavidWHodgins> The mailing list oss-security@lists.openwall.com has been busy 20:33:18 <wilcal> Anyway installs went through fine here 20:34:29 <DavidWHodgins> I keep meaning to get back to testing the updates for guacd and kerberos. I will eventually get to them. 20:34:59 <MageiaTJ> We'll wait. :-) 20:35:01 <neoclust> how many updates left in mga7 to test ? 20:35:26 <DavidWHodgins> 28 20:35:27 <MageiaTJ> 28. 20:35:36 <auroud85[m]> 28 20:35:42 <MageiaTJ> Some are for both 7 and 8. 20:35:56 <DavidWHodgins> Yes. m8 has 23 20:35:58 <DavidWHodgins> https://madb.mageia.org/tools/updates 20:36:01 <wilcal> but there will be more added in the next couple months 20:36:01 <[mbot> [ Mageia App Db - Current Update candidates ] 20:36:04 <neoclust> 23 ? :) 20:36:08 <guygoye[m]> With some help i can test many bug 20:36:24 <auroud85[m]> 26 for M8 20:36:24 <neoclust> DavidWHodgins: no new updates planned on mga8 :) 20:36:25 <DavidWHodgins> That would help. Thanks 20:36:44 <wilcal> take a breather 20:36:59 <DavidWHodgins> auroud85[m]: Ah. I needed to reload the page. :-) 20:37:04 <MageiaTJ> I plead guilty of picking low-hanging fruit. Doing the ones I think are easier. 20:37:58 <wilcal> the tor thing llooks intesting 20:38:10 <wilcal> That's the onion browser right? 20:38:26 <guygoye[m]> Yes it is 20:38:38 <DavidWHodgins> There are a lot to test. When testing, for those updates that are for both m7 & m8, please try to test both if you test one. 20:38:55 <MageiaTJ> gthumb - that's a Gnome thing, right? 20:39:19 <wilcal> yes 20:39:25 <DavidWHodgins> tor is pretty easy to test, but best to test it in a vb snapshot so you don' risk messing up your network settings 20:39:27 <MageiaTJ> I don't associate with Gnomes if I can help it. 20:39:31 <auroud85[m]> <wilcal "That's the onion browser right?"> Yes 20:39:50 <bri_an> I can look at gthumb 20:39:57 <wilcal> I didn't realize that tor was in the Mageia repo 20:40:34 <wilcal> Tor is fun to tinker with. See how many websites throw you out 20:40:42 <DavidWHodgins> gthumb is for showing thumbnail images of graphics files such as png, gif, etc. 20:41:05 <guygoye[m]> I can try to test gthumb and thor 20:41:14 <auroud85[m]> gthumb still segfault in my tests. 20:41:30 <DavidWHodgins> Ouch 20:41:41 <auroud85[m]> I don't think the issue is corrected 20:41:50 <bri_an> then I'll wait 20:42:02 <auroud85[m]> See https://bugs.mageia.org/show_bug.cgi?id=26084#c15 20:42:04 <[mbot> [ 26084 – gthumb new security issue CVE-2019-20326 ] 20:42:13 <DavidWHodgins> If you've tested and it fails the test, add the feedback keyword 20:42:26 <auroud85[m]> <bri_an "then I'll wait"> No please test on your own. 20:43:03 <auroud85[m]> Because I tested it in plasma not in other DE 20:43:16 <DavidWHodgins> Yeah. Sometimes an update fails on one system due to things like config settings that are not the fault of the package being tested. 20:43:33 <bri_an> ok will try it on gnome 20:44:19 <auroud85[m]> <DavidWHodgins "If you've tested and it fails th"> I don't know in fact if this should exit gracefully or display something 20:45:42 <DavidWHodgins> Just checked. gthumb /home/dave/Pictures is working on my m7 system 20:46:15 <DavidWHodgins> So it may be one image that it has trouble with on your system 20:46:20 <auroud85[m]> <DavidWHodgins "Just checked. gthumb /home/dave/"> Yeah it works, I checked the PoC to see if code was corrected 20:46:46 <DavidWHodgins> Oh, Ok. I haven't looked at the bug report in detail 20:47:06 <auroud85[m]> <DavidWHodgins "So it may be one image that it h"> The PoC make gthumb to exit badly. Intended ? Perhaps. 20:47:41 <auroud85[m]> Pix has the same CVE. It was corrected OK. The PoC was handled OK. 20:47:52 <tarazed> Yes before update the PoC should fail but maybe display an image afterwards. 20:48:27 <tarazed> Or just exit gracefully 20:48:32 <auroud85[m]> But in both case it exits badly. 20:48:42 <DavidWHodgins> Ah. Good point. Not clear if the poc should still crash (as long as it doesn't execute aribrary code) or not 20:48:45 <tarazed> Yes, that is what I saw 20:48:52 <auroud85[m]> <tarazed "Or just exit gracefully"> So if it does this or should be ok. 20:49:11 <DavidWHodgins> Does the poc show if it executes the arbitrary code? 20:49:45 <auroud85[m]> The same PoC made Pix (gthumb fork for cinnamon) to display the image ok. 20:50:31 <auroud85[m]> (Baby Time see you later in the Minutes) ++ 20:50:43 <tarazed> DavidWHodgins: from the gdb run it looks like it tries to execute the code. 20:50:55 <DavidWHodgins> Ouch 20:52:20 <DavidWHodgins> Where did you find the poc? 20:53:03 <DavidWHodgins> Found it 20:53:51 <DavidWHodgins> Hmm. It's not crashing with the poc on my system 20:54:04 <tarazed> Stretching my memory there. It is usually by following a link from the Mitre CVE page - looking for "issue" usually. 20:54:18 <DavidWHodgins> https://github.com/Fysac/CVE-2019-20326/blob/master/poc.min.jpg 20:54:38 <tarazed> Sounds right. Not crashing? Hmm. 20:54:46 <DavidWHodgins> Just downloaded that to an empty directory and ran "gthumb ." 20:56:56 <DavidWHodgins> Using xv to show the image shows the script it's trying to run, to fetch stuff from githubassets.com 20:59:29 <DavidWHodgins> running gthumb to view the poc under strace shows it is not running the script 20:59:54 <tarazed> Just tried poc.min.jpg in mga8 - gthumb . - crashed. 21:00:04 <DavidWHodgins> So it appears to be working based on my test in m7 21:01:29 <MageiaTJ> The bug is for m7. Is M8 a separate issue? 21:03:05 <tarazed> I am in mga8 just now but agreed the bug appears to be mga7 only. 21:03:33 <Bequimao> Can we move on? 21:04:08 <wilcal> yes please 21:04:11 <DavidWHodgins> Yeah. I'll look at it tomorrow 21:04:27 <DavidWHodgins> #topic * Anything else? 21:04:33 <wilcal> Not from me 21:04:37 <DavidWHodgins> Nothing else from me 21:04:38 <wilcal> Thanks for being here David 21:04:47 <DavidWHodgins> Thanks for coming everyone 21:04:50 <DavidWHodgins> t - 5 21:04:52 <DavidWHodgins> 4 21:04:54 <DavidWHodgins> 3 21:04:55 <DavidWHodgins> 2 21:04:56 <Bequimao> We did not have Mga8 testing yet? 21:04:57 <wilcal> see yas all next week 21:05:15 <neoclust> Bequimao: wdym ? 21:05:15 <MageiaTJ> Foolishness is working well for this. I kinds like the feel of the old-fashioned keyboard. 21:05:23 <DavidWHodgins> Bequimao: That was first, though most of it was about upgrading 21:05:58 <Bequimao> No, only upgrade to Mga8! 21:06:04 <MageiaTJ> kinds=kind of 21:06:06 <DavidWHodgins> Bequimao: Any partitcular m8 only update 21:06:26 <wilcal> https://wiki.mageia.org/en/Upgrading_with_urpmi 21:06:44 <Bequimao> https://bugs.mageia.org/show_bug.cgi?id=28216 21:06:46 <[mbot> [ 28216 – Under KDE - MTP mounting SOME Android phones doesn't work (only PTP mode) ] 21:07:16 <DavidWHodgins> I don't have a cell phone (just a landline), so I can't test that one 21:07:19 <Bequimao> MageiaTJ : you were also involved. 21:08:35 <MageiaTJ> Yes. My phone won't connect with M8 but will with M7. 21:08:35 <Bequimao> the update could not be tested sucessfully. To many different hardware and OSses involved. 21:09:39 <MageiaTJ> There is an update to libusb that seems to help, but doesn't cure the problem. 21:09:41 <DavidWHodgins> Bequimao: No regressions found, but at least some fixed, so it should be validated and a new one opened for the still not working phone 21:10:28 <Bequimao> But it seems necessary to move on. Is there any procedure to do upgrade? 21:10:32 <MageiaTJ> Actually, I don't think that bug was ever sent to QA. 21:11:11 <Bequimao> MageiaTJ: It was. You reassigned it. 21:11:54 <MageiaTJ> OK, I'll take care of it. 21:12:18 <DavidWHodgins> Ok, let's call it a night. :-) 21:12:23 <DavidWHodgins> #endmeeting