From Fedora Project Wiki


Fedora Weekly News Issue 169

Welcome to Fedora Weekly News Issue 169 for the week ending March 29th, 2009.

This week in "What Happened Last Summer?" Developments conveys an announcement on the Fedora intrusion of 2008. Announcements reels-off a list of interesting "Upcoming Events". PlanetFedora selects choice blog posts including Richard W.M. Jones' RPM-dependency visualizer. Marketing reports that "Fedora has the Most New Features". Ambassadors reports that "Fedora is on the move in Italy". QualityAssurance shares the results of "Test Days" for the nouveau driver and other outstanding work. Translation catches-up on problems with Persian l10n and more. Artwork asks is it too late for "A Lion for Leonidas?". Security warns of a "Firefox Emergency". Virtualization concludes that "KVM and QEMU Merge Feature Stays in Fedora 11" and on "Web Based libvirt Management" and a comprehensive "Fedora Virtualization Status Report".

If you are interested in contributing to Fedora Weekly News, please see our 'join' page[1]. We welcome reader feedback:

FWN Editorial Team: Pascal Calarco, Oisin Feeley, Huzaifa Sidhpurwala


In this section, we cover announcements from the Fedora Project.

Contributing Writer: Max Spevack

Fedora Board

Our fearless leader[1] reminded[2] the community that the Fedora Board will be "holding its monthly public meeting on Tuesday, 7 April 2009, at 1800 UTC on IRC Freenode."

Join #fedora-board-meeting to see the Board's conversation.

Join #fedora-board-public to discuss topics and post questions. This channel is read/write for everyone.

Paul also mentioned a change in the procedure for the meeting. "We're trying something new (albeit in a minor way) in this meeting. The moderator will still be available to gather input from the #fedora-board-public channel, but will voice people, one at a time, in the queue in the #fedora-board-meeting channel."

Fedora 11

Jesse Keating[1] announced[2] that the Beta composes are complete, and that the freeze on Rawhide has been lifted.

Andreas Bierfert[3] announced[4] that opensync was being downgraded to 0.22, as discussed on fedora-devel-list. As a result, maintainers will need to rebuild "all packages which depend on opensync in some way."

Qt 4.5.0

Kevin Kofler[1] informed[2] the community that, "we are working on providing Qt 4.5.0 as updates for Fedora 9 and 10." There are several important pieces of information that anyone who maintains a Qt-4-based package needs to know. Please read the full announcement.

FUDCon Berlin 2009

Max Spevack[1] reminded[2] the community about FUDCon Berlin 2009[3], including registration[4], lodging[5], and speaking[6] opportunities.

Upcoming Events

March 31-April 2: Linux Solutions[1] in Paris, France.

April 1-2: OpenExpo[2] in Bern, Switzerland.

April 15: NYLUG[3] in New York, New York, USA.

April 17-19: Summer Geek Camp 2[4] in Antipolo City, Phillipines.

April 18: BarCamp Rochester[5] in Rochester, New York, USA.

April 19-22: Red Hat EMEA Partner Summit[6] in Malta.

Planet Fedora

In this section, we cover the highlights of Planet Fedora - an aggregation of blogs from Fedora contributors worldwide.

Contributing Writer: Adam Batkin


Dave Malcolm developed[1],[2] a command line app called show that allows for access to various log files through an SQL-like interface. It supports aggregates and can handle Apache access logs, /var/log/messages and /var/log/secure and various others using backends from Augeas[3] for configuration files like /etc/passwd.

Paul W. Frields explained[4] how to convert virtual disk images between various formats using utilities from qemu.

Rakesh Pandit wrote[5] a "Report for National Institute of Technology Hamirpur Software Activity Workshop" describing an event where students were trained in software development using Free and Open Source Software.

Nicu Buculei announced[6] that the Open Clipart Library has reached its goal of 10,000 images.

Richard W.M. Jones posted[7] a visualization of RPM dependencies by size, as part of his quest to build a minimal Fedora installation. A later followup noted[8] that very different results occur depending on how the dependencies are traversed (in this case, breadth-first traversal versus depth-first). He then released[9] a tool, rpmdepsize[10] to allow users to generate their own dependency visualizations.

James Morris described[11] some security subsystem changes going into the 2.6.29 kernel.

Jef Spaleta continued[12] writing about "the NSF workshop on software sustainability for cyberinfrastructure" and the mismatch that often occurs between the length of grant funding and expected software lifetimes and lifecycles. Chitlesh Goorah followed-up[13] with the abstract of the Fedora Electronic Lab position paper from the workshop. Chitlesh later posted[14] some information on FEL's place in the open source Electronic Design Automation (EDA) world.

Luis Villa wrote[15] about "deliberative nirvana and software design myopia". He cited the White House's Open For Questions[16] site, built using tools like Google Moderator and App Engine, allowing it to scale on a technological level without any realistic limitations but with results that may not perfectly reflect the United States due to social/demographic limitations of the technology.


In this section, we cover the Fedora Marketing Project.

Contributing Writer: Kam Salisbury

Marketing Meeting Log for 2009-03-24

The meeting log of the 2009-03-24 Fedora Marketing Meeting was made[1] available.

Fedora on Twitter and

Fedora on passed 500 followers and 50 followers[2]!

Fedora has the Most New Features

In another example of Fedora leading the way, a comparison of the Fedora 11 and an upcoming similiar distribution's release shows that Fedora has the lion's share of new features.[3]


In this section, we cover Fedora Ambassadors Project.

Contributing Writer: Larry Cafiero

Fedora is on the move in Italy

Luca Foppiano's recent blog item[1] outlines developments in Italy.

While Luca mentions that Italy has not yet reached the numbers of the French and German communities, the Italian community is growing. With around 7 ambassadors and 10 to 15 regular IRC participants, the community has put down firm roots in the country.

For 2009, Luca reports that some activities are in the works, like:

  • One meeting each month, to keep in touch regularly, have brainstorming, discussions and involving all interested people.
  • Pages on fedora wiki to keep and track internal information like events and inventory.

"I think we are on the right way," Luca writes. "Stay tuned"

Got Ambassador News?

Any Ambassador news tips from around the Fedora community can be submitted to me by e-mailing lcafiero-AT-fedoraproject-DOT-org and I'd be glad to put it in this weekly report.


In this section, we cover the activities of the QA team[1].

Contributing Writer: Adam Williamson

Test Days

This week's[1] was on the Noveau driver[2]for NVIDIA video cards, which will become the default in Fedora 11. Thanks to an excellent turnout, over 80 sets of results were reported, and several bug reports were made: some of the issues have already been resolved. The developer present was Ben Skeggs, and Adam Williamson, James Laska and Will Woods were present for the QA team.

Next week again will see two test days. The first[3] will be on the radeon driver for ATI graphics cards, while the second[4] will be on [5] power management. Live CDs will be available for both test days so you'll be able to test without a Rawhide installation. The Radeon test day will be held on Wednesday (2009-04-01) and the Power Management test day on Thursday (2009-04-02) in the #fedora-qa channel on Freenode IRC. If you have a Radeon graphics card, please make sure to come along to the first test day; if you have a laptop, please come to the second. If you can't make it on the day, please do the tests and fill out your results on the page another day.

Weekly meetings

The QA group weekly meeting[1] was held on 2009-03-25. Will Woods reported that the Fedora 11 beta release had slipped.

James Laska reported that packaging work on the Semantic extension for Mediawiki was progressing, and one package had already passed review. He also noted that he had created a test Mediawiki instance with the extension enabled, but had not yet been able to do much testing. Adam Williamson confirmed that he also had not had time to do much testing.

Adam Williamson reported that planning for the Radeon test day was still in progress. He also reported that Bugzappers team review of Anaconda bugs for the Fedora 11 beta release had been successfully completed.

Adam Williamson reported that the Xfce test day was fully planned, and Kevin Fenzi reported that he had successfully generated some live CD images for the test day. Adam asked if someone could make sure these images would be available for download.

Will Woods reported that he had been testing upgrade scenarios for the Fedora 11 beta release and had found several bugs in this area.

James Laska noted that most critical bugs for the beta release were already known and being tracked, and re-testing was not necessary for any known issues. A long discussion followed on the correct place and format in which to note known issues. The group agreed that known issues for the beta release should be noted within the beta release notes as separate sub-headings, and a concerted effort should be made to make sure that the release notes were referred to in all official, semi-official and unofficial communications regarding the beta release. Will Woods' suggestion that this was a job for the <marquee> tag was roundly rejected.

The Bugzappers group weekly meeting[2] was held on 2009-03-24. It was a short meeting as several key group members were not able to attend. Matej Cepl reported that he had consolidated his RHEL and Fedora triage and signature scripts into a single Greasemonkey script[3]. Other topics were deferred to future meetings or the mailing list for lack of a reasonable number of group members to make binding decisions.

The next QA weekly meeting will be held on 2009-04-02 at 1600 UTC (note reversion to previous meeting time) in #fedora-meeting, and the next Bugzappers weekly meeting on 2009-04-01 at 1500 UTC in #fedora-meeting.

Wiki changes

The group discussed Christopher Beland's new How to Triage draft[1], and Chris made several revisions and improvements. Chris summarized[2] several remaining questions relating to the page, and Adam Williamson[3] and Edward Kirk provided feedback[4].

Bugzappers meeting schedule

Adam Williamson requested[1] a final decision on re-scheduling the Bugzappers group movement, but no final conclusion was yet reached.

Triage Days on the Wiki

Adam Williamson apologized for the delay, and announced [1] that a Triage Day page was now available on the Wiki, explaining the existence and function of the Bugzappers group's weekly Triage Day.


In this section the people, personalities and debates on the @fedora-devel mailing list are summarized.

Contributing Writer: Oisin Feeley

What Happened Last Summer

Paul W. Frields broke radio silence to provide[1] a detailed explanation of last August's (2008-08-12) security problem. Briefly, a Fedora Project systems administrator used a pass-phraseless SSH key. This was copied from the administrator's machine and used to gain access to Fedora infrastructure. Subsequently trojaned versions of OpenSSH and rpm were built and deployed on Fedora infrastructure. The investigation concludes that these packages were detected and removed before any rpms were built with them or distributed to Fedora users. The full, detailed communication includes a time-line.

Emacs Cabal Disables Xorg Ctrl-Alt-Backspace

Much work has been done on the Fedora 11 release notes[1] to advise users of significant changes. A thread started[2] by Gerry Reno to question the disabling of Ctrl-Alt-Backspace as a key combination to kill the X server shows that these beta release notes are an important means to notify prospective users of new features of the operating system. Gerry was among many contributors to the thread that preferred to keep the traditional functionality enabled. This change was an upstream Xorg decision apparently taken to prevent users from accidentally killing their X servers. Although there had previously been extensive discussion (reported in FWN#162[3]) and a nice, hot flamewar on the upstream lists[4] the change seemed to take many by surprise. This prompted[5] accusations that "[...] big changes like this need to be advertised extensively instead of just quietly slipped in."

Roland McGrath suggested[6] ways in which xorg.conf could be changed using a kickstart post-scriptlet but preferred that such choices would be pushed into the users' "keyboard shortcut" preferences. Gerry raised[7] the issue of the use of the Ctrl-Alt-Backspace combination being essential to virtual machine management.

Another dissatisfied user was Arthur Pemberton. He requested[8] discussion of why such large changes as disabling Ctrl-Alt-Backspace, removing Xorg.conf in favor of auto-detection, and others had been made without what he considered to be enough discussion. Response to this line of questioning suggested[9] variously that the change had been made "secretly" upstream in order to appease an emacs-using cabal, and that Fedora had adopted the changes solely because Ubuntu had done so. This latter accusation was disputed[10] by Matthew Garrett. The emacs angle seems to come from the fact that the emacs key-combinations "Ctrl-Alt-End" and "Ctrl-Alt-\" are, with certain keyboard layouts, a danger to fumble-fingered users. Arthur pointed[11] to an added complication in a use case in which booting with the monitor powered off requires restarting the X server.

Felix Miata mentioned[12] that OpenSuSE's solution was to require that the Ctrl-Alt-Backspace sequence be struck twice before it took effect. This was also suggested[13] by Gerry during a thread in which Matthew Garrett and Matthias Clasen explained that the Terminate_Server symbol could be bound to any desired key-binding through XKB maps.

Ahmed Kamal suggested[14]: "To anyone wanting to kill X when it hangs, why not login through a VC and `pkill X' .. Just like any process, why do we have to have magic keys!" Similarly Adam Jackson challenged[15] the assertion that it would be possible to use the key combination to deal with faulty drivers.

ZFS-based Upgrades

Neal Becker posted[1] a link to an interesting way to use the capabilities of the ZFS filesystem to take snapshots of the system and provide a safe, stable way to upgrade. Seth Vidal seemed[2] sanguine that this would be relatively easy with a YUM-based system.

Repoview Temporarily Bust in Fedora 10

After a report from Uwe Kiewel that he could not create a repoview for Fedora 10 Everything Seth Vidal posted[1] that there was a fix available in rawhide but it had not got into Fedora 10 yet. Konstantin Ryabitsev (Icon) built the updated packages and Josh Boyer posted[2] that they would be available very shortly.

LGPL Qt-4.5 in Fedora 10 and Fedora 9

KevinKofler announced[1] updates of Qt-4.5 for Fedora 10 and Fedora 9. He detailed the advantages of this backwards-compatible update and suggested that maintainers of Qt-4-based packages do some quick checks to ensure that there would be no snags.


This section covers the news surrounding the Fedora Translation (L10n) Project.

Contributing Writer: Runa Bhattacharjee

FLP Meeting

The common meeting for the Fedora Localization Project team was held on 25th/26th March 2009[1][2]. The discussion centered around general feedback around the new transifex interface for statistics and submissions. Currently, it lacks the FLP logo and is also not the landing page for the project. AnkitPatel from the FLP-Admin team informed that these issues can be fixed after the end of Fedora Infrastructure freeze period.

Other issues that were discussed were the non-availability of the updated Anaconda file and problem related to leadership in the Persian Translation team. The meeting was chaired by NorikoMizumoto.

FLP Admin Meeting

The FLP Admin team met[1] on 24th March 2009 to discuss about the new transifex instance, publican/docs support for statistics generation on transifex, feedback ticket filing FAQ, coordination with Fedora Infrastructure team to iron out the current issues.

Anaconda File Ready for Translation

VillePekkaVainio announced[1] the availability of the updated Anaconda .po files for translation. The files were held back due to a delay from the Anaconda developers who were running additional tests [2].

Release Notes Moved in the Repository

The location of the translated .po files of Fedora Release notes were recently moved without notification, within the git repository[1][2].

PackageKit 0.4.6 version for Fedora 11

RichardHughes announced[1] that the 0.4.6 version of PackageKit would be part of Fedora 11 and translations for this version were to be submitted by 29th March 2009. PackageKit 0.4.6 is scheduled for release on 30th March 2009.

New Members in FLP

Hamid Reza Neyari (Persian)[1], Hedda Peters (German)[2], Sam Friedmann (French)[3], Sveinn Helgi Sverrisson (Icelandic)[4], Imre Csuhai (Hungarian)[5] joined the Fedora Localization Project during the past week.


In this section, we cover the Fedora Artwork Project.

Contributing Writer: Nicu Buculei

Preparing for the Berlin FUDCon

Max Spevack presented[1] on @fedora-art a check list with items needed by the organizational team for the upcoming FUDCon in Berlin: a T-shirt design, a magazine ad, posters, banners and more "I'd love to use FUDCon Berlin to really show off the coolness of the Fedora Art team, and to provide our EMEA crew with some reusable resources for future FUDCons in the region, as well as some stuff that we can use for the F11 release, and then auction off or something :)"

A Lion for Leonidas?

Samuele Storari advanced[1] a new concept for the Fedora 11 artwork, a lion "So I created a new theme based on the meaning of the name: Leonidas come from Lions and Leonidas was a king,so why don't use another king? This graphic proposal is about the proud and the glory for being a king and the subject is shouting:'The King is here!'" The graphics were generally liked but considered a bit too late by Martin Sourada[2] and Máirí­n Duffy[3] "We are *really* late in the schedule right now, and we had already made a decision, based on our survey, to go with a landscape depicting Greece so we have a number of mockups and work around that concept already".

Security Week

In this section, we highlight the security stories from the week in Fedora.

Contributing Writer: JoshBressers

Firefox Emergency

On Friday, a new version of Firefox [1] was released. The number of hours that went into this event are amazing to even consider. For most of the week, there were various groups working non stop to make this happen. Be sure to update your firefox, it's pretty important.


In this section, we cover discussion on the @et-mgmnt-tools-list, @fedora-xen-list, @libvirt-list and @ovirt-devel-list of Fedora virtualization technologies.

Contributing Writer: Dale Bewley

Fedora Virtualization List

This section contains the discussion happening on the fedora-virt list.

KVM and QEMU Merge Feature Stays in Fedora 11

After missing the previous round[1] and some development delay, the KVM and QEMU package merge feature of Fedora 11 has been marked as accepted by the Fedora Engineering Steering Committee.

"Currently, there is both a Package-x-generic-16.pngqemu package and Package-x-generic-16.pngkvm package. The KVM package's source is a fork of the QEMU source, but KVM regularily re-bases to the latest QEMU source and merging of KVM support into the QEMU code base is actively under-way."

Fedora Virtualization Status Report

After a few weeks off, Mark McLoughlin reached back into the future and produced an exhaustive status report[1] covering all the developments in fedora Virtualization for the last month. Grab a bowl of popcorn and dig in!

Fedora Xen List

This section contains the discussion happening on the fedora-xen list.

Success with Experimental Fedora 10 pv_ops dom0

Users are continuing to build experimental kernels with pv_ops dom0[1] support. Pasi Kärkkäinen was happy to report[2] success getting a "custom Xen pv_ops dom0 kernel working with virt-install and/or Package-x-generic-16.pngvirt-manager on Fedora 10".

"I was able to run the following on Fedora 10 32bit PAE pv_ops dom0:"

  • CentOS 5.3 32bit PAE PV domU
  • Fedora 10 32bit PAE PV domU (using virt-install and custom kickstart to force PAE kernel installation to avoid the anaconda BUG[3])

Pasi was successful by using:

  • pv_ops dom0 kernel (2.6.29-rc8 or newer) "Compile with CONFIG_HIGHPTE=n since it seems to be broken still"
  • Package-x-generic-16.pnglibvirt 0.6.1 and related packages from Fedora 10 updates-testing
  • Package-x-generic-16.pngxen 3.3.1-9 packages from rawhide/F11 rebuilt for F10
  • LVM volumes for domU disks (tap:aio is not yet supported by pv_ops dom0 kernel)

Yum Repository for Experimental Dom0 Kernels

Since Koji removes scratch builds after some time, Michael Young created[1] a repository[2] for the experimental Dom0 capable[3] kernels he's experimenting with.

Libvirt List

This section contains the discussion happening on the libvir-list.

More Formal libvirt Release Scheduling

After Daniel Veillard proposed a Package-x-generic-16.pnglibvirt 0.6.2 release next week, Daniel Berrange thought [1] the "release schedule has become a little too variable in timeframe and quality in recent times[...]" (FWN #155[2]) and suggested:

  • Monthly releases aiming for the 1st of the month.
  • Any non-trivial new feature for release must be reviewed, approved and committed at least 1 week before the release.

Daniel Berrange is also "working on an integration test suite, which will enable us to run automated tests against individual hypervisor drivers. This will help us detect regressions in hypervisor drivers, and more importantly let us ensure that all drivers are implementing consistent semantics for their APIs."

Daniel Veillard tended[3] "to agree on the approximate rule of one release every months [sic] but I would like to keep this flexible" and offered this schedule for the next 2 releases:

  • 0.6.2:
commit feature freeze: Tuesday 31 Mar
expected release date: Friday 3 Apr
  • 0.6.3:
commit feature freeze: Friday 17 Apr
expected release date: Friday 24 Apr

New Release perl-Sys-Virt 0.2.0

Daniel Berrange announced[1] an update of the Perl binding for libvirt, Package-x-generic-16.pngperl-Sys-Virt[2].

New features:

  • Fix network create API, and UUID lookups
  • Implement storage pool, storage vol, node device, security model, domain events and event loop APIs
  • Improve way constants are exposed to Perl layer
  • Fix horrible memory leak in methods returning a hash
  • Fix integer overflow in APIs using 64-bit ints (aka 'long long')
  • Minimum required libvirt C library for building is 0.6.1

SCSI Host Pools Patch

David Allan has been working[1] on a reworked SCSI host storage pool[2] patch for some time, and appears to be close to ironing out all the bugs.

API for Host Interface Configuration

The Shared Network Interface feature[1] was deferred to Fedora 12 while David Lutterkort continues to work on netcf[2] (FWN #164[3]).

Now Laine Stump has posted[4] "a first attempt at the public API that will hook up to libnetcf on the libvirtd side."

Web Based libvirt Management

Radek Hladik is developing[1] "a simple web application in PHP to monitor and control VMs using libvirt." The stateless nature of the web presents efficiency problems when each action must call out to the virsh command. Radik sought advice on picking from a list of approaches.

Daniel Berrange picked[2] door number two, which is to create a libvirt-aware Zend extension in C. "A few people have expressed interest in this idea in the past, but unforatuntely I'm not aware of anyone having written any code for this yet. We'd very much like to see a PHP binding for libvirt developed & happy to give advice/support to anyone attempting this."

Russell Haering mentioned[3] a Django (python) WebApp he's working on, called virtadmin[4]. To bridge the stateless to stateful gap, the "system consists of a python daemon used for actual libvirt interaction and a separate django web interface that interacts with the daemon via AMF over https."

Although more of an appliance, it is also worth mentioning oVirt[5]. "oVirt is a small host image that provides libvirt service and hosts virtual machines and a web-based virtual machine management console."