Security, Updates and More – Oh My!

From Stew Benedict (aka stewb)

If you’ve been using Mageia 1, you may have been wondering where all the updates are. It’s customary to get quite a few updated packages in the first month or so of a new distribution to correct bugs and address security issues. Don’t worry, we’ve been working on that too.

As a new organization, and a community driven one, we first had to work out how to do the updates.  While some of us have experience from previous lives, we weren’t entirely satisfied with the old process and wanted to make sure our new community of users and packagers had an input into how we’ll do things.

So, after discussion and some work behind the scenes for the mechanics of issuing an update, we have now have a process where the security team, the QA team, and the packager maintainer will all work together to build, test, and issue new updates. If you use MySQL, you should have seen the first update appear in the last couple of days and more are in the pipeline. Policies managing the process have been added to our wiki, and as we work through the first few packages we’re refining and documenting the process more thoroughly.
For Mageia 1, we have a special exception for updates. So called “missing” packages that weren’t part of Mageia 1 but are in our sister distribution, can be issued as an update, rather than a backport, provided they pass the QA process.

Hey, What About Backports?

We haven’t forgotten backports either, but we can’t do everything at once :). The discussions have just started on the development mail list as to how we will handle backports. Sometimes backport repositories have a somewhat bad reputation, and we want to fashion a process and policy such that ours can avoid being discounted as “don’t use those”. If you want to get involved in fashioning how they will work, please subscribe to the mail list and voice your opinion.

A nice summary of the community discussions

How You Can Help

We want to be the best distribution ever for our users, but we need your help. We use Bugzilla as our tracking tool to work packages through the update process. If you find a bug or are aware of a security issue, please open a bug (after checking if one doesn’t already exist) in bugzilla. The more concise the information you provide in the bug (patches, links to fixes or discussions of the issue), the more quickly one of our packagers will be able to issue an updated package to QA for testing so that you can get the fix.

Thanks For Your Patience and Support

We know some of you have been asking about updates and we haven’t forgotten. We’d like to think we cleansed a lot of bugs before issuing Mageia 1, but there are always a few more we’ve missed. Now that the process is in place for updates we hope to provide fixes in a timely fashion.

Posted in Uncategorized | 17 Comments

New clothes for Mageia: preview of ARM port is now available

We spoke about this some weeks ago, it’s now done! Thanks to Arnaud Patard (aka rtp) the Mageia ARM port is available for a first preview. The port’s code name is “arm eabi”, as a future port should be “arm eabihf”. It will use the hard float feature of Cortex family processors.

Where can I find it?

Because it’s a technical preview, for now, you will find it only on a specific mirror – thanks again to Arnaud.

ARM content

Again, because it’s a preview, not all Mageia packages are available for now. The preview has 1,382 SRPMS and 3,909 RPMS (excluding debug packages). The global ARM tree is about 9GB. More details:

  • graphical environments: complete GNOME, minimal KDE
  • desktop applications: Mozilla Firefox, LibreOffice is on the way
  • basic network services: httpd, named, LDAP, PostgreSQL, MySQL…
  • development: Python, Perl, PHP, C, C++
  • Mageia tools: installer, drakxtools, Mageia Control Center
  • multimedia: audio support; video is not ready as it works for now by default on framebuffer

Proprietary video drivers are provided by manufacturers. For now the focus is not on free video drivers as they are not accelerated so it would not improve anything vs framebuffer drivers.

How was it built

ARM port started on a distribution bootstrap based on a Mandriva chroot. The build was  done using iurt: it took a bit longer but it helped a lot to fix some missing dependencies and various packaging problems. So the situation is now much cleaner.

More than a hundred packages were fixed because of compilation problems. They can now be rebuilt either for  i586 / x86_64 or arm. For now everything is available in SVN except some of them that still need to be committed.

What hardware is compatible?

This ARM port supports the Kirkwood series from Marvell. Most frequent are: Open-RD, computer plugs (SheevaPlug, GuruPlug). It runs also in qemu as a virtual machine.

Installing in qemu

You will find some short documentation explaining the main steps to make this work. You will find also a pre-built qemu image.

Still lots of things to be done!

This first release has been built using Mageia tools but not integrated into the Mageia build system yet. This is one of the main items on the current TODO list. A PandaBoard is waiting now to be installed in the Mageia build system so that a parallel build can be done in ARM when a package is submitted to the build system. The hard part will be managing different ARM machines using different socs meaning different kernels.

This too opens up a whole new range of possibilities for the Mageia platform: new hardware, new use cases, new applications.

You can get in touch with Mageia ARM developers on #mageia-dev on Freenode IRC and the mageia-dev mailing-list.

Posted in Uncategorized | Tagged , , , , , , , , , , , | 11 Comments

Is there life after our first release?

It’s nice to be able to say: there’s more life in Mageia than ever!

First, thanks to everyone who took the trouble to not only try Mageia 1, but to write about it – in articles and on their blogs. You’ve encouraged even more people to try it out, and come onto the lists and forums with their suggestions, issues, reactions and – perhaps most importantly for a growing community – their contributions of time and skills.

Take a minute to look at the reviews here and if you know of one we haven’t listed, let us know!

Second, thanks to all our great Mageia people – it’s great to be part of such a varied group of people, all working together to make something good. Now we’d like to extend a warm welcome to new contributors.

There’s lots happening in the Mageia community. All sorts of discussion is happening; where will we take Mageia next? We’ve got all the basics in place – our organisation, our Code of Conduct, and a growing sense of who we are and what we’re about.

And we’ll welcome whatever you bring – your new ideas, new skills and new contributions. Whatever your interest, there’s a team for you; take a look here and see what might suit you.

Welcome to post-release Mageia – help us to make sure it just keeps getting better.

Posted in Uncategorized | 3 Comments

Our baby is here: Mageia 1

We are the Mageia community, and today we are happy to tell everyone that our first release, Mageia 1, is out and available for download.

For people who want to cut to the chase, you can see what’s available, choose your version and download it from mageia.org/downloads.

What is different about Mageia?

Mageia is about people – the people who make and the people who use Mageia the Linux distribution. We’re a good community, and we like to include our users in our community; the people who continue to join us make it better still.

Mageia is about technical excellence – we pursue excellence, so Mageia people will have the best computing experience we can make. Whether you’re a programmer or a student, a business user or a system administrator – whatever your use of your computer, we’d like to help you make it a good experience. Try Mageia 1 and see what you think.

Mageia is about quality – our release promises to be as solid and perfect as Mandriva at its best; that’s our heritage.

Mageia is open – we are committed to the Open Source ideal, we are open to new people and new ideas, and we have open governance of our community.

Mageia is International – our community comes from all over the planet to help Mageia “speak” many languages. Mageia’s structure and its anchor in the user community have already produced excellent results.

Mageia is about diversity – Mageia offers and maintains applications for a wide variety of user groups – with applications ranging from game-playing and music-listening to scientific and engineering applications.

Mageia is about equilibrium – we strive to maintain balance between leading-edge developments and the stable computing experience.

Why might you choose Mageia?

Aside from our great distro, you mean? We’re a great community, and we’re getting better all the time. We care for each other, and in doing so, we try for the best user experience. We’d like to welcome you into our community, while making sure your Mageia installation is trouble-free and a joy to use.

What’s different about us? we’re completely community based, with everything that implies. Our organisation is community-driven; no commercial management can dictate the path Mageia will take; you as a Mageia user can have more say in the future of this distribution than anywhere else.

Standing on the shoulders of Giants

Our team of developers, packagers, contributors, translators, sysadmins and testers have all worked super-hard to bring Mageia 1 to readiness on time.

And we’re all gratefully aware of the amazing work of people at Mandriva, KDE, GNOME, Xfce, LXDE, the Linux kernel team, the FSF and all the many, many people writing free software – thanks to you all for inspiring us and making the great software that forms the foundation of Mageia.

We want to carry that further into the future and make Mageia the best we possibly can.

What is Mageia?

Mageia is both a community and a Linux distribution. Find out more at:

Posted in Uncategorized | Tagged , , , , , , , , , | 66 Comments

Power outage on Mageia servers

From Misc and sysadmin team

UPDATE: Servers are now back to life and testers back to final isos!

As some people may have seen, we suffered from a severe power outage yesterday, around 00h05 CET time in one of our hosting datacenter.

It seems that an electrical problem stopped some servers at the Lost Oasis server room in Marseille, with the net effect of stopping 4 servers (valstar, alamut, jonund and ecosse as well as the virtual machine running on alamut aka friteuse_tmp). It also impacted all servers of zarb.org that still provides support for some services (like www, mailing-list, secondary DNS, SMTP, etc.).

Perenoel, one of the great Lost Oasis guys, went to the building during the night to take care of the issue and so the servers got power again around 00:20 CEST time. Lost Oasis people worked until 4 o’clock in the morning to fix all servers.

Now all but 2 servers, Valstar and Jonund, are back online.

Jonund is just a build node, we have another one and we are in freeze, so we can cope with the failure without much trouble.

Valstar is the main SVN and LDAP server, so almost everything depend on it. Impacted services:

  • LDAP

– Identity, no access ( no account creation )
– forum, bugzilla, transifex : mostly read only access, no one can log in, but currently logged in people are still ok
– most @mageia.org aliases ( emails are still in queue on zarb )
– shell access ( rabbit, champagne )
– some Sympa lists ( @ml.mageia.org ), mostly board one

  • SVN
  • buildsystem ( no scheduler, no mirror for builders )
  • automated administration of all servers ( no puppetmaster )

The rest ( website, blog, xymon, mailling list, svnweb ) should be ok. We are still looking into it. Lost Oasis told us they would go look at our server in the afternoon, we will keep you informed of the changes with a mail on our list.

Sysadmins will also be looking at making the infrastructure more resilient to such problems (for example, a 2nd LDAP would have solved most issues, and this is already planned ).

If you have any questions please ask on the sysadmin mailing list or on the #mageia-sysadm IRC channel on Freenode , where we will be happy to answer you.

Update (13:10 CEST): all systems are back, up and operational now. \o/

Posted in Uncategorized | Tagged , , , , , | 6 Comments