hi 🙂 been using bluefin-dx-40 prerelease for a while now, noticed today that devpod was temporarily

been using bluefin-dx-40 prerelease for a while now, noticed today that devpod was temporarily removed. is it easiest to rebase back to 39 to get it back ?

Llaamaa hi 🙂 been using bluefin-dx-40 prerelease for a while now, noticed today that de...

Jose S•4/10/24, 8:47 AM

Yes

laamaaOP•4/10/24, 8:58 AM

ok. thank you

Llaamaa hi 🙂 been using bluefin-dx-40 prerelease for a while now, noticed today that de...

Niklas ⚡•4/10/24, 8:58 AM

Devpod will soon be readded but right now it has some issues while building the image. If you want to stay on :40 you could try the AppImage for now. https://devpod.sh/docs/getting-started/install

Install DevPod | DevPod docs | DevContainers everywhere

In order to get started with DevPod, you can choose between the DevPod Desktop application and DevPod CLI.

j0rge•4/10/24, 3:01 PM

@RoyalOughtness you're going to need to kick off some rebuilds

j0rge•4/10/24, 3:01 PM

https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6

j0rge•4/10/24, 3:01 PM

@xyny @fiftydinar ditto people with custom images.

j0rge•4/10/24, 3:01 PM

main's being rebuilt right now and after that we'll do the others,

bsherman•4/10/24, 3:03 PM

@Robert (p5) any specific reason 38 is building manually?

Bbsherman @Robert (p5) any specific reason 38 is building manually?

Robert•4/10/24, 3:04 PM

Oh shit. Did Timothee's CVE not affect 38?

RRobert Oh shit. Did Timothee's CVE not affect 38?

bsherman•4/10/24, 3:04 PM

it didn't

Robert•4/10/24, 3:04 PM

Sorry!

bsherman•4/10/24, 3:04 PM

it's fine... i only build 39/40 manually so i could start confirming they were fixed sooner than later

bsherman•4/10/24, 3:05 PM

i've confirmed the fix is good in F39

bsherman•4/10/24, 3:05 PM

Robert•4/10/24, 3:05 PM

Ah, I was on mobile, saw "38" was affected but didn't notice it was only CoreOS, and 39+ desktop images

bsherman•4/10/24, 3:08 PM

i'm torn on what to do, but i think i'd prefer to let the scheduled builds run for main and then we can manually build hwe / bluefin / bazzite

bsherman•4/10/24, 3:12 PM

i'm trying not to say anything which could jinx us LOL

bsherman•4/10/24, 3:13 PM

@j0rge we talked about tightening up the cron timers the other day

i can see we have not yet done so on main

bsherman•4/10/24, 3:13 PM

we're still waiting for F38

bsherman•4/10/24, 3:14 PM

but, maybe since @p5 just built it, we skip.

@Robert (p5) wanna push "build now" on hwe 39 and 40?

Robert•4/10/24, 3:15 PM

Looking at yesterday's runs, HWE should be building in about 30 minutes anyway?

Noel•4/10/24, 3:15 PM

I'm starting a thread.

Noel•4/10/24, 3:15 PM

Putting out the announcement now.

Jj0rge @xyny @fiftydinar ditto people with custom images.

xyny•4/10/24, 3:30 PM

thanks for the heads-up

j0rge•4/10/24, 3:53 PM

@Noel everything we need is queued up, you may indulge yourself on the builders.

Jj0rge @Noel everything we need is queued up, you may indulge yourself on the builders.

Noel•4/10/24, 3:54 PM

I'm going to gorge myself on builders. ALL MINE!

Jj0rge @Noel everything we need is queued up, you may indulge yourself on the builders.

bsherman•4/10/24, 3:57 PM

you didn't ask me if i needed builders for ucore

bsherman•4/10/24, 3:57 PM

because... yeah, we do

j0rge•4/10/24, 3:58 PM

60/60, we have a lot of queues but watch, they moving.

j0rge•4/10/24, 3:58 PM

queue them up now

j0rge•4/10/24, 3:59 PM

@M2 ISOs building for bluefin for the CVE, everything is queued up

M2•4/10/24, 3:59 PM

cancel mine for now

j0rge•4/10/24, 4:00 PM

ack, we're almost done

fiftydinar•4/10/24, 4:04 PM

@j0rge thanks for the vulnerability info.

I use ublue-os isogenerator instead of Jason's upstream one.

Do I just need to rebuild the ISO in Github Action, or I need to switch to Jason isogenerator to fix the vulnerability?

fiftydinar•4/10/24, 4:08 PM

oh, I believe it doesn't matter, nvm

Ffiftydinar @j0rge thanks for the vulnerability info. I use ublue-os isogenerator instead o...

bsherman•4/10/24, 4:08 PM

note: no F40 ISOs should NOT be rebuilt right now as those images are not fixed yet: CVE-2024-2905

edit: I added "NOT"... as F40 may be rebuilt but won't have the fix

Ffiftydinar oh, I believe it doesn't matter, nvm

j0rge•4/10/24, 4:09 PM

yeah you just need an updated image

fiftydinar•4/10/24, 4:42 PM

@Noel There is a mistype in vulnerability announcement:

fiftydinar•4/10/24, 4:43 PM

fix

fix

instead of

fox

fox

Ffiftydinar `fix` instead of `fox`

bsherman•4/10/24, 4:45 PM

corrected it, thank you

Atapi•4/10/24, 5:21 PM

https://github.com/ValveSoftware/gamescope/commits/3.13.16.9

GitHub

Commits · ValveSoftware/gamescope

SteamOS session compositing window manager. Contribute to ValveSoftware/gamescope development by creating an account on GitHub.

Atapi•4/10/24, 5:21 PM

Contains a backport for Splitgate crash on exit

Atapi•4/10/24, 5:21 PM

Might be of interest

Robert•4/10/24, 6:40 PM

https://www.linkedin.com/posts/fatherlinux_project-bluefin-and-the-future-of-operating-activity-7183894868312690705-bGhl

Scott reshared his article on LinkedIn

Scott McCarty on LinkedIn: Project Bluefin and the future of operat...

I envision an image-based workflow, similar to Project Bluefin, as the future of operating systems https://bit.ly/49wy4dG #linux #bluefin #fedora #container…

Noel•4/10/24, 6:45 PM

Very Cool, GitHub Outage: https://www.githubstatus.com/

j0rge•4/10/24, 7:41 PM

40 is not fixed upstream yet, 38 isn't affected, but 39 is good to go in main/hwe, you just need a rebuild

j0rge•4/10/24, 7:46 PM

https://discussion.fedoraproject.org/t/security-issue-cve-2024-2905-world-readable-etc-shadow-etc-gshadow-on-fedora-coreos-iot-atomic-desktops-including-silverblue-kinoite/112438 has everything

Fedora Discussion

Security issue CVE-2024-2905: World-readable /etc/shadow & /etc/gsh...

Due to a bug in rpm-ostree, the /etc/shadow, /etc/shadow-, /etc/gshadow and /etc/gshadow- files in Fedora CoreOS, IoT, Atomic Desktops have the world-readable bit set. Affected versions All Fedora CoreOS nodes installed starting from the following versions are impacted: stable: 38.20230902.3.0 testing: 38.20230902.2.1 next: 38.20230902.1.1 F...

Sharkitty•4/10/24, 8:22 PM

Hello! When doing a PR on

ublue-os/config

ublue-os/config

, it says to read the contributor's guide, and gives a deadlink ^^'

hi 🙂 been using bluefin-dx-40 prerelease for a while now, noticed today that devpod was temporarily

Similar Threads

Similar Threads

Similar Threads