!aGqRytqbCECitOFhbt:nixos.org

Release Management

333 Members
25.11 "Xantusia" | https://nixos.github.io/release-wiki/Home.html90 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
29 Nov 2024
@sandro:supersandro.deSandro 🐧
In reply to @hexa:lossy.network
Sandro 🐧: that code has been there since 2022/2023, so how can it be a release blocker now?
Emily switched pcre to pcre2 a week ago and backported that
12:26:27
@sandro:supersandro.deSandro 🐧Overriding pcre2 with pcre also fixes the crash12:26:41
@sandro:supersandro.deSandro 🐧So we can also just revert that :P12:26:48
@sandro:supersandro.deSandro 🐧btw this is true for any service consuming any library that is going to be switched. I saw that libgit2 or libssh2 was also switched and now theoretically any service consuming those might just crash when triggering pcre2 jit based on individual configs or even user input12:27:51
@sandro:supersandro.deSandro 🐧* btw this is true for any service consuming any library that is going to be switched. I saw that libgit2 or libssh2 was also switched and now theoretically any service consuming those might just crash when triggering pcre2 jit based on individual configs or even user input and it is blocking memfd_create in hardening12:28:33
@lennart:0520.chlennart
In reply to @rosscomputerguy:matrix.org

Got the PR's queued up:

  • https://github.com/NixOS/nixos-homepage/pull/1593
  • https://github.com/NixOS/infra/pull/515
there was one mention of 24.05 hidden, left a comment
12:30:30
@lennart:0520.chlennartah two12:32:01
@lennart:0520.chlennartin the announcement post12:32:18
@vcunat:matrix.orgvcunat
In reply to @sandro:supersandro.de
btw this is true for any service consuming any library that is going to be switched. I saw that libgit2 or libssh2 was also switched and now theoretically any service consuming those might just crash when triggering pcre2 jit based on individual configs or even user input and it is blocking memfd_create in hardening
That's how these hardenings work. (Annoying to me honestly, but I get there's a tradeoff.)
12:32:55
@vcunat:matrix.orgvcunatThe worst thing is that the usage of a syscall is often conditioned by some kind of user settings..12:33:40
@vcunat:matrix.orgvcunat * The worst thing is that the usage of a syscall is often conditioned by some kind of user settings... so you may not find out immediately.12:33:53
@sandro:supersandro.deSandro 🐧We just shouldn't push this a week before release when manually testing is required12:33:53
@sandro:supersandro.deSandro 🐧I mean it even took me over an hour of debugging with prior knowledge of the same issue in a different place12:35:28
@fpletz:lodere.esfpletz
In reply to @sandro:supersandro.de
We just shouldn't push this a week before release when manually testing is required
I agree that we should revert the pcre2 switch in 24.11. That was clearly premature.
18:07:15
@lassulus:lassul.uslassulus changed their profile picture.18:29:49
@alaliliiso:matrix.orgalaliliiso joined the room.20:10:22
30 Nov 2024
@rosscomputerguy:matrix.orgTristan RossStarting the release process 15:04:10
@rosscomputerguy:matrix.orgTristan Rosshttps://github.com/NixOS/nixpkgs/pull/359948 this PR failed to backport and I don't have the time to backport manually 15:05:16
@rosscomputerguy:matrix.orgTristan RossI found time to backport it15:42:18
@rosscomputerguy:matrix.orgTristan RossNixpkgs related stuff for release is done, just needs the homepage & infra PR's merged15:42:45
@vcunat:matrix.orgvcunat Cancelling the last two jobs in nixpkgs-24.11-darwin, so that the channel can advance. (it's ~12 days old right now) 16:29:47

Show newer messages


Back to Room ListRoom Version: 6