20:01:25 <DavidWHodgins> #startmeeting
20:01:25 <Inigo_Montoya> Meeting started Thu Mar 25 20:01:25 2021 UTC.  The chair is DavidWHodgins. Information about MeetBot at http://wiki.debian.org/MeetBot.
20:01:25 <Inigo_Montoya> Useful Commands: #action #agreed #help #info #idea #link #topic.
20:01:35 <DavidWHodgins> #chair MageiaTJ wilcal
20:01:35 <Inigo_Montoya> Current chairs: DavidWHodgins MageiaTJ wilcal
20:01:42 <DavidWHodgins> #topic * Who's new? - If you are then come and say hello
20:01:57 <DavidWHodgins> Anyone here who hasn't been to a qa team irc meeting before?
20:02:25 <DavidWHodgins> #topic * Testing Mageia 8 - updating from M7 to M8
20:02:51 <bri_an> I was about to try the applet.  Should I wait for anything on this drive?
20:02:51 <wilcal> I would ask that David define exactly how to update from M7 -> M8
20:02:57 <wilcal> for the record
20:03:04 <DavidWHodgins> bug 28522 was still a problem
20:03:06 <[mbot> Bug: ['File conflicts with opencv-devel cause cascading errors during upgrade from Mageia 7 to 8', 'NEW', 'QA Team'] https://bugs.mageia.org/show_bug.cgi?id=28522
20:03:19 <MageiaTJ> I still have to do an upgrade on my brother's computer.
20:03:31 <DavidWHodgins> I'll retest the upgrade after the meeting or tomorrow if I get to tired.
20:04:02 <wilcal> Define for me hpw you do upgrade David
20:04:24 <DavidWHodgins> In addition, I want to do a test with all desktop environments installed which takes many hours
20:05:27 <wilcal> hi zeke
20:05:39 <DavidWHodgins> What I'm doing for my testing is removing all repos, adding them as per the wiki, but pointing to mageia 8 url repos, then urpmi --auto-select after enabling the testing repos as update repos
20:05:40 <zekemx> Hi wilcal
20:05:42 <bri_an> anything special I need to do for the mgaapplet upgrade?  I killed the old and started it with mgaapplet --testing
20:05:44 <zekemx> hi all
20:06:28 <DavidWHodgins> bri_an: That should do it for online upgrades if you don't need to enable the testing repos as part of the upgrade
20:06:31 <MageiaTJ> When I do an upgrade install, I like to use the netinstall iso. It's nice that it works with most wifi devices now.
20:06:36 <DavidWHodgins> Most people shouldn't
20:06:52 <wilcal> so how shouuld it be done?
20:07:24 <DavidWHodgins> Most people should wait until we enable using mgaapplet for upgrades without needing --testing.
20:08:12 <DavidWHodgins> That won't happen until all bugs shown by https://bugs.mageia.org/showdependencytree.cgi?id=28393&hide_resolved=1  are fixed and I've tested an upgrade with all desktop environments
20:08:14 <[mbot> [ Dependency tree for Bug 28393 ]
20:08:46 <wilcal> magaapplet called from a su teerminal?
20:08:54 <bri_an> that's how I do it
20:09:16 <wilcal> how about setting up the repo?
20:09:31 <wilcal> do you remove the M7 repo and install the M8 repo
20:09:57 <wilcal> or leave both active
20:10:09 <wilcal> then call magapplet
20:10:10 <bri_an> nope - I am just running the mgaapplet from su with current 7 repo's enabled.  the applet seems to affiliate
20:10:37 <wilcal> how does it know where the M8 repo is? On line?
20:11:28 <bri_an> that's for someone else to answer.  I've done it before and it just works
20:12:04 <DavidWHodgins> Just lost connection for a bit
20:12:16 <wilcal> That's why I'm asking for a specific set of actions to launch the upgrade
20:12:52 <wilcal> Like M7 repo is enabled. Enable M8 repo launch magaapplet from an su window?
20:13:33 <DavidWHodgins> https://wiki.mageia.org/en/Upgrading_with_urpmi
20:15:06 <bri_an> I've imaged this drive, let me kick it off
20:15:47 <DavidWHodgins> "urpmi.removemedia -a", thenu use urpmi.addmedia --distrib http://mirror.math.princeton.edu/pub/mageia/distrib/8/x86_64 to add the Mageia 8 repos (or your mirror of choice)
20:15:48 <[mbot> [ A fully community-based Linux Distribution: Mageia ]
20:16:19 <DavidWHodgins> I then use drakrpm-edit-media --expert to enable the testing repos as update repos for my tests
20:17:07 <DavidWHodgins> Once those updates I'm getting from the testing repos have all been validated and moved to updates, the drakrpm-edit-media should not be used
20:18:14 <DavidWHodgins> For most people, once the flag has been set to allow it, mgaapplet can be used (without the --testing option)
20:18:42 <DavidWHodgins> Any additional questions about upgrading?
20:19:54 <wilcal> I'll give it a go here
20:19:58 <bri_an> running the mgaapplet upgrade now
20:20:02 <DavidWHodgins> For my really big upgrade test, I'll be testing with an install that has all of the packages shown by urpmf /usr/share/xsessions/ installed
20:20:04 <bri_an> so if I drop off .......
20:20:12 <DavidWHodgins> :-)
20:21:00 <DavidWHodgins> Shouldn't impact running programs. I make sure I have a couple of konsoles open, already "su -" to root before starting the upgrade so I can use those to monitor things
20:21:01 <wilcal> on real hardware i can clone an ssd My drive and try the upgrade on that
20:21:22 <DavidWHodgins> That's what I do on my main system
20:21:48 <bri_an> this is gnome I did disable screen blanking
20:21:50 <ZemeMX> great idea wilcal!
20:21:52 <wilcal> Any problems with doing the upgrade on a Vbox client
20:22:07 <DavidWHodgins> Using rsync, not dd with the commands needed to restore safely on a live usb stick with persistence, if needed.
20:22:50 <DavidWHodgins> wilcal: So far, most of my testing has been in vb clients, using snapshots so I can undo/repeat the upgrade tests
20:23:28 <wilcal> From the ML it looks like some are not getting to a desktop after the upgrade
20:23:30 <bri_an> so about 2.5 months away from MGA 7 complete done
20:23:45 <DavidWHodgins> I make sure the vb guest was installed without removing unused hardware/locales
20:24:04 <bri_an> I'll bang around a couple of more, but trying to retain some mga7 for testing
20:24:43 <DavidWHodgins> Depends on when it's safe to turn on upgrading via mgaapplet. If it takes too long, I'll ask council to extend support for m7
20:24:54 <wilcal> Just bought two 250GB Samsung 370 EVO SSD's I can clone one to the other in about 5 minutes :-))
20:24:56 <bri_an> thanks that does make sense
20:25:57 <wilcal> The clone then becomes the victim
20:26:00 <DavidWHodgins> I should be using my laptop for more of my testing. It has two nvram ssd drives. (currently one mga7 and one mga8 install)
20:26:29 <DavidWHodgins> There's enough room to rsync a full copy of  the m7 install (I think. Have to confirm).
20:26:32 <Benmc> the only suggestion I would make regarding mga--testing is that you start it from a user ($) , rather  than root (#) terminal
20:26:32 <wilcal> All my teesting now is USB connected storage on a Dell laptop
20:26:43 <wilcal> USB 3.0
20:28:35 <DavidWHodgins> Anything else about mga8 testing before I move on?
20:28:41 <wilcal> Not from me
20:28:45 <ZemeMX> Does KDE Plasma 5.21 in testing already or M8 or not yet?
20:29:57 <auroud85[m]> <ZemeMX "Does KDE Plasma 5.21 in testing "> Hi all, not yet
20:30:35 <DavidWHodgins> #topic * Testing Megaia 7 - Any questions or problems
20:31:00 <auroud85[m]> Not for me.
20:31:05 <DavidWHodgins> I've still been focusing on m7->m8 testing so haven't had the time to work on updates
20:31:10 <wilcal> WOW! What did we do there. 3 kernel updates in a couple weeks?
20:31:21 <wilcal> scary
20:31:30 <DavidWHodgins> With another on the way I think
20:31:31 <auroud85[m]> <wilcal "WOW! What did we do there. 3 ker"> tmb is in the place.
20:31:48 <auroud85[m]> Several Security fixes there.
20:32:00 <wilcal> critical I assume
20:32:28 <wilcal> we went from 24 to 25 almost in the same day
20:32:34 <auroud85[m]> Note that Imagemagick Advisory was tricky. So does jackson-databind...
20:32:43 <auroud85[m]> <wilcal "we went from 24 to 25 almost in "> Yeah, there was a CVE to fix.
20:33:07 <DavidWHodgins> The mailing list oss-security@lists.openwall.com has been busy
20:33:18 <wilcal> Anyway installs went through fine here
20:34:29 <DavidWHodgins> I keep meaning to get back to testing the updates for guacd and kerberos. I will eventually get to them.
20:34:59 <MageiaTJ> We'll wait. :-)
20:35:01 <neoclust> how many updates left in mga7 to test ?
20:35:26 <DavidWHodgins> 28
20:35:27 <MageiaTJ> 28.
20:35:36 <auroud85[m]> 28
20:35:42 <MageiaTJ> Some are for both 7 and 8.
20:35:56 <DavidWHodgins> Yes. m8 has 23
20:35:58 <DavidWHodgins> https://madb.mageia.org/tools/updates
20:36:01 <wilcal> but there will be more added in the next couple months
20:36:01 <[mbot> [ Mageia App Db - Current Update candidates ]
20:36:04 <neoclust> 23 ? :)
20:36:08 <guygoye[m]> With some help i can test many bug
20:36:24 <auroud85[m]> 26 for M8
20:36:24 <neoclust> DavidWHodgins: no new updates planned on mga8 :)
20:36:25 <DavidWHodgins> That would help. Thanks
20:36:44 <wilcal> take a breather
20:36:59 <DavidWHodgins> auroud85[m]: Ah. I needed to reload the page. :-)
20:37:04 <MageiaTJ> I plead guilty of picking low-hanging fruit. Doing the ones I think are easier.
20:37:58 <wilcal> the tor thing llooks intesting
20:38:10 <wilcal> That's the onion browser right?
20:38:26 <guygoye[m]> Yes it is
20:38:38 <DavidWHodgins> There are a lot to test. When testing, for those updates that are for both m7 & m8, please try to test both if you test one.
20:38:55 <MageiaTJ> gthumb - that's a Gnome thing, right?
20:39:19 <wilcal> yes
20:39:25 <DavidWHodgins> tor is pretty easy to test, but best to test it in a vb snapshot so you don' risk messing up your network settings
20:39:27 <MageiaTJ> I don't associate with Gnomes if I can help it.
20:39:31 <auroud85[m]> <wilcal "That's the onion browser right?"> Yes
20:39:50 <bri_an> I can look at gthumb
20:39:57 <wilcal> I didn't realize that tor was in the Mageia repo
20:40:34 <wilcal> Tor is fun to tinker with. See how many websites throw you out
20:40:42 <DavidWHodgins> gthumb is for showing thumbnail images of graphics files such as png, gif, etc.
20:41:05 <guygoye[m]> I can try to test gthumb and thor
20:41:14 <auroud85[m]> gthumb still segfault in my tests.
20:41:30 <DavidWHodgins> Ouch
20:41:41 <auroud85[m]> I don't think the issue is corrected
20:41:50 <bri_an> then I'll wait
20:42:02 <auroud85[m]> See https://bugs.mageia.org/show_bug.cgi?id=26084#c15
20:42:04 <[mbot> [ 26084 – gthumb new security issue CVE-2019-20326 ]
20:42:13 <DavidWHodgins> If you've tested and it fails the test, add the feedback keyword
20:42:26 <auroud85[m]> <bri_an "then I'll wait"> No please test on your own.
20:43:03 <auroud85[m]> Because I tested it in plasma not in other DE
20:43:16 <DavidWHodgins> Yeah. Sometimes an update fails on one system due to things like config settings that are not the fault of the package being tested.
20:43:33 <bri_an> ok will try it on gnome
20:44:19 <auroud85[m]> <DavidWHodgins "If you've tested and it fails th"> I don't know in fact if this should exit gracefully or display something
20:45:42 <DavidWHodgins> Just checked. gthumb /home/dave/Pictures is working on my m7 system
20:46:15 <DavidWHodgins> So it may be one image that it has trouble with on your system
20:46:20 <auroud85[m]> <DavidWHodgins "Just checked. gthumb /home/dave/"> Yeah it works, I checked the PoC to see if code was corrected
20:46:46 <DavidWHodgins> Oh, Ok. I haven't looked at the bug report in detail
20:47:06 <auroud85[m]> <DavidWHodgins "So it may be one image that it h"> The PoC make gthumb to exit badly. Intended ? Perhaps.
20:47:41 <auroud85[m]> Pix has the same CVE. It was corrected OK. The PoC was handled OK.
20:47:52 <tarazed> Yes before update the PoC should fail but maybe display an image afterwards.
20:48:27 <tarazed> Or just exit gracefully
20:48:32 <auroud85[m]> But in both case it exits badly.
20:48:42 <DavidWHodgins> Ah. Good point. Not clear if the poc should still crash (as long as it doesn't execute aribrary code) or not
20:48:45 <tarazed> Yes, that is what I saw
20:48:52 <auroud85[m]> <tarazed "Or just exit gracefully"> So if it does this or should be ok.
20:49:11 <DavidWHodgins> Does the poc show if it executes the arbitrary code?
20:49:45 <auroud85[m]> The same PoC made Pix (gthumb fork for cinnamon) to display the image ok.
20:50:31 <auroud85[m]> (Baby Time see you later in the Minutes) ++
20:50:43 <tarazed> DavidWHodgins: from the gdb run it looks like it tries to execute the code.
20:50:55 <DavidWHodgins> Ouch
20:52:20 <DavidWHodgins> Where did you find the poc?
20:53:03 <DavidWHodgins> Found it
20:53:51 <DavidWHodgins> Hmm. It's not crashing with the poc on my system
20:54:04 <tarazed> Stretching my memory there.  It is usually by following a link from the Mitre CVE page - looking for "issue" usually.
20:54:18 <DavidWHodgins> https://github.com/Fysac/CVE-2019-20326/blob/master/poc.min.jpg
20:54:38 <tarazed> Sounds right.  Not crashing?  Hmm.
20:54:46 <DavidWHodgins> Just downloaded that to an empty directory and ran "gthumb ."
20:56:56 <DavidWHodgins> Using xv to show the image shows the script it's trying to run, to fetch stuff from  githubassets.com
20:59:29 <DavidWHodgins> running gthumb to view the poc under strace shows it is not running the script
20:59:54 <tarazed> Just tried poc.min.jpg in mga8 - gthumb . - crashed.
21:00:04 <DavidWHodgins> So it appears to be working based on my test in m7
21:01:29 <MageiaTJ> The bug is for m7. Is M8 a separate issue?
21:03:05 <tarazed> I am in mga8 just now but agreed the bug appears to be mga7 only.
21:03:33 <Bequimao> Can we move on?
21:04:08 <wilcal> yes please
21:04:11 <DavidWHodgins> Yeah. I'll look at it tomorrow
21:04:27 <DavidWHodgins> #topic * Anything else?
21:04:33 <wilcal> Not from me
21:04:37 <DavidWHodgins> Nothing else from me
21:04:38 <wilcal> Thanks for being here David
21:04:47 <DavidWHodgins> Thanks for coming everyone
21:04:50 <DavidWHodgins> t - 5
21:04:52 <DavidWHodgins> 4
21:04:54 <DavidWHodgins> 3
21:04:55 <DavidWHodgins> 2
21:04:56 <Bequimao> We did not have Mga8 testing yet?
21:04:57 <wilcal> see yas all next week
21:05:15 <neoclust> Bequimao: wdym ?
21:05:15 <MageiaTJ> Foolishness is working well for this. I kinds like the feel of the old-fashioned keyboard.
21:05:23 <DavidWHodgins> Bequimao: That was first, though most of it was about upgrading
21:05:58 <Bequimao> No, only upgrade to Mga8!
21:06:04 <MageiaTJ> kinds=kind of
21:06:06 <DavidWHodgins> Bequimao: Any partitcular m8 only update
21:06:26 <wilcal> https://wiki.mageia.org/en/Upgrading_with_urpmi
21:06:44 <Bequimao> https://bugs.mageia.org/show_bug.cgi?id=28216
21:06:46 <[mbot> [ 28216 – Under KDE - MTP mounting SOME Android phones doesn't work (only PTP mode) ]
21:07:16 <DavidWHodgins> I don't have a cell phone (just a landline), so I can't test that one
21:07:19 <Bequimao> MageiaTJ : you were also involved.
21:08:35 <MageiaTJ> Yes. My phone won't connect with M8 but will with M7.
21:08:35 <Bequimao> the update could not be tested sucessfully. To many different hardware and OSses involved.
21:09:39 <MageiaTJ> There is an update to libusb that seems to help, but doesn't cure the problem.
21:09:41 <DavidWHodgins> Bequimao: No regressions found, but at least some fixed, so it should be validated and a new one opened for the still not working phone
21:10:28 <Bequimao> But it seems necessary to move on. Is there any procedure to do upgrade?
21:10:32 <MageiaTJ> Actually, I don't think that bug was ever sent to QA.
21:11:11 <Bequimao> MageiaTJ: It was. You reassigned it.
21:11:54 <MageiaTJ> OK, I'll take care of it.
21:12:18 <DavidWHodgins> Ok, let's call it a night. :-)
21:12:23 <DavidWHodgins> #endmeeting