We are happy to welcome our new sponsored Fedora Ambassadors in November:

• http://fedoraproject.org/wiki/User:Mhayden mentored by herlo
• https://fedoraproject.org/wiki/User:Nsglynn mentored by fab
• https://fedoraproject.org/wiki/User:Juranir mentored by dbruno
• https://fedoraproject.org/wiki/User:Edtomasa mentored by azneita
• https://fedoraproject.org/wiki/User:Cardero mentored by lbazan
• https://fedoraproject.org/wiki/User:Mayorgalinux mentored by lbazan

Fedora Ambassador Statistics

Sun Dec 2 10:19:18 2012 | Approved: 616 | Inactive: 82 | % inactive: 13.31

Cheers,

Herlo

• Installed and configured totpcgi authentication on the staging environment. This performs the verification from the clients. There will be several servers doing authentication to prevent a single point of failure.
• Installed and configured pam_url on each staging client with the intent of connecting to the authentication servers.
• Enabled yubikey as an alternate second factor.
• Reviewed RPMs for pam_url and totpcgi (and a few others to help along the way)
• Setup the totpcgi provisioning web page for google authenticator
• Fixed fun bugs in pam_url
• Wrote documentation on how to setup authentication.

A few things were accomplished that were not part of the goals, but good stuff nonetheless:

• Enjoyed some awesome tapas at Buku (a restaurant is at the base of the Red Hat Tower)
• Found the open source cow
• Documented the setup of the OpenPGP SmartCard with gpg-agent and GNOME 3
• Watched Seth Vidal do some Beastie Boys!
• Enjoyed some yummy dinner at Gravy (thanks to Ruth Suehle and Red Hat)
• Discussed some ideas for FUDCon Lawrence and the future of FUDCons

While I didn’t participate in all of the above activities, I was definitely involved in many of them. It turns out, everyone there was fairly involved at the FAD. It was fun to watch everyone come together to solve this issue. Everyone seemed to have a good sense of satisfaction accomplishing the goals.

Cheers,

herlo

One of the perks I’ve been able to work out will be to attend the Fedora Activity Day this week in Raleigh, where we’ll be working on two-factor authentication among other things. This has been something I’ve recently set up at LF and am hopefully going to be involved in getting this working for Fedora as well.

Additionally, I have been working on getting a GPG SmartCard token working to accommodate ssh authentication. I think Fedora is going to be using Yubikeys, but I thought it might be cool to show this off as an alternative.

Anyway, it should be a fun week and very busy as well. Watch for more reports here about our progress.

Cheers,

Herlo

I have now RPMs built for Fedora and EPEL6 (EPEL5 requires some outside help). They are available from my personal repository on fedorapeople.org. If you are interested in trying them out, you can just grab the repo definition for your system.

A review request

Salt development moves very fast. In the past 2 weeks or so, I’ve posted 2 new releases for salt in my review request. I’d really like to get salt into the Fedora and EPEL repositories, but I need this review to be completed. I will happily do a review swap!!

Cheers,

Herlo

As I have been working on getting the import functionality into skein pre2.0, there are a few features that have come to mind as I go along. It’s very interesting to see these features appear once the tool is out in the wild. Some of them have come from other users/contributors and some from my brain, but here’s a dump of what I have been considering adding to skein:

• skein revoke – (this one is from imak, and quite a good idea) It’s possible to accidentally request a repo that you didn’t mean to request. skein revoke will allow you to specify that you erred and will allow you to close the request with a nice message you provide.
• skein request from an SRPM – the above request brought forth something I’d been thinking about doing, but hadn’t really formalized. I suspect this feature will be a good bit of our automation in our second push to finish GoOSe 6.0 by year’s end.
• skein update – providing this feature will probably happen after 2.0. The plan would be to allow an already existing repo to be updated to a new release or version of an SRPM. In addition, it’s possible the update will be to a new branch, which update should be able to handle.

As for the rest of the features, the code for export was just finished today. I expect to be able to finish push, upload and import by the end of this coming week. Then it will be on to importing the rest of the upstream tree and building GoOSe 6.0

Cheers,

Herlo

Skein’s goal is provide easy functionality for rebuilding SRPMS from upstream and import them into github, where they can be built using our koji instance. The process is actually easier than one might think:

• skein request – Request a particular repository be setup on our github organization for the specified package. The package itself should be able to be requested from the SRPM, but that feature is not yet available.
• skein query – To verify the request has been placed, this shows the open queries (by default).
• skein show – For a particular request, show the detail of who requested and the purpose of such a request.
• skein grant – Only an admin can grant the repository. Only members of the admin team on our github organization can grant the repository.
• skein extract – Once granted, the SRPM can be extracted and placed into two basic directories:
• /path/to/package/lookaside/ – contains the archive from the SRPM, usually a tar, tar.gz or zip file. The contents of this directory can then be pushed to the lookaside cache.
• /path/to/package/git/ – contains the spec file, any patches and other sources that are not archives. A Makefile and sources file are also generated along with a .gitignore to provide useful functionality during the koji build

Other functionality is currently under development:

• skein push – Once extracted and committed to the git repository, this pushes the git commits to github.
• skein upload – Once extracted, this uploads the content of the lookaside directory to the lookaside cache at pkgs.gooselinux.org.
• skein import – A combination of skein extract, push and upload, since that seems fairly logical.
• skein build – Albeit mostly complete, it will need to be tested with an SRPM that has been run through this process.

I took a few minutes the other day and created a video of the completed process. I post this here for others to use for their benefit, but also so I can have it in another place besides my laptop.

Skein video

Cheers,

Herlo