[prev in list] [next in list] [prev in thread] [next in thread]
List: nix-dev
Subject: Re: [Nix-dev] Channels, LetsEncrypt, and Security fixes from 2016-12-23 01:26 UTC
From: Freddy Rietdijk <freddyrietdijk () fridh ! nl>
Date: 2016-12-25 17:35:11
Message-ID: CAOQtOH0nOGkVTauJeSDaoeW+zX_4usUMaJ6-70ef-jf9hbGUJA () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Those extra failures seem to be transients. At least, the one that I
tested. It is also very unlikely that the only change, a Python 2.7
maintenance version bump, would cause those extra failures.
Building 16.09 after the Python bump went fast. There is still a large
queue (nixpkgs:trunk/nixos:trunk-combined) but that should be solved in my
opinion by reconsidering the jobsets so that nixpkgs:trunk and
nixos:trunk-combined are synchronized.
On Sun, Dec 25, 2016 at 6:25 PM, zimbatm <zimbatm@zimbatm.com> wrote:
> Checking Hydra as well. Exim has been built but both the large and small
> channels are stuck.
>
> Unfortunately there are 130 (!!!) failing jobs on http://hydra.nixos.org/
> jobset/nixos/release-16.09 . How did we get there?
>
> The small build was blocked by a *new* package that pointed a missing
> file, I reverted that change and the channel should advance in the next
> hour unless somebody else is being reckless again.
>
> We really need pierron's security framework so the security releases can
> be pushed regardless of the branch's state. Or prevent users from pushing
> to master unless the builds are passing.
>
> On Sun, 25 Dec 2016 at 13:10 Graham Christensen <graham@grahamc.com>
> wrote:
>
> zimbatm <zimbatm@zimbatm.com> writes:
>
> > Thanks Graham.
> >
> > I pushed the Exim updates for CVE-2016-9963 as well.
> >
> > master: 352e167c224: exim: 4.87 -> 4.88 for CVE-2016-9963
> > release-16.09: d6bff30c96ed6: exim: 4.87 -> 4.87.1 for CVE-2016-9963
>
>
> Thank you so much! I have sent notice to the security list. Checking
> Hydra, this channel update should be out very soon.
>
> Graham
>
> --
> You received this message because you are subscribed to the Google Groups
> "nix-security-announce" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to nix-security-announce+unsubscribe@googlegroups.com.
> To post to this group, send email to nix-security-announce@
> googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/nix-security-announce/87zijkyx1v.fsf%40grahamc.com.
> For more options, visit https://groups.google.com/d/optout.
>
>
> _______________________________________________
> nix-dev mailing list
> nix-dev@lists.science.uu.nl
> http://lists.science.uu.nl/mailman/listinfo/nix-dev
>
>
[Attachment #5 (text/html)]
<div dir="ltr">Those extra failures seem to be transients. At least, the one that I \
tested. It is also very unlikely that the only change, a Python 2.7 maintenance \
version bump, would cause those extra failures.<div><br></div><div>Building 16.09 \
after the Python bump went fast. There is still a large queue \
(nixpkgs:trunk/nixos:trunk-combined) but that should be solved in my opinion by \
reconsidering the jobsets so that nixpkgs:trunk and nixos:trunk-combined are \
synchronized.<br><div><br></div><div><br></div></div></div><div \
class="gmail_extra"><br><div class="gmail_quote">On Sun, Dec 25, 2016 at 6:25 PM, \
zimbatm <span dir="ltr"><<a href="mailto:zimbatm@zimbatm.com" \
target="_blank">zimbatm@zimbatm.com</a>></span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div dir="ltr"><div dir="ltr" \
class="m_8242946800246731667gmail_msg">Checking Hydra as well. Exim has been built \
but both the large and small channels are stuck.<div \
class="m_8242946800246731667gmail_msg"><br \
class="m_8242946800246731667gmail_msg"></div><div \
class="m_8242946800246731667gmail_msg">Unfortunately there are 130 (!!!) failing jobs \
on <a href="http://hydra.nixos.org/jobset/nixos/release-16.09" \
class="m_8242946800246731667gmail_msg" \
target="_blank">http://hydra.nixos.org/<wbr>jobset/nixos/release-16.09</a> . How did \
we get there?</div><div class="m_8242946800246731667gmail_msg"><br \
class="m_8242946800246731667gmail_msg"></div><div \
class="m_8242946800246731667gmail_msg">The small build was blocked by a *new* package \
that pointed a missing file, I reverted that change and the channel should advance in \
the next hour unless somebody else is being reckless again.</div><div \
class="m_8242946800246731667gmail_msg"><br \
class="m_8242946800246731667gmail_msg"></div><div \
class="m_8242946800246731667gmail_msg">We really need pierron's security \
framework so the security releases can be pushed regardless of the branch's \
state. Or prevent users from pushing to master unless the builds are \
passing.</div></div><br class="m_8242946800246731667gmail_msg"><div \
class="gmail_quote m_8242946800246731667gmail_msg"><div><div class="h5"><div \
dir="ltr" class="m_8242946800246731667gmail_msg">On Sun, 25 Dec 2016 at 13:10 Graham \
Christensen <<a href="mailto:graham@grahamc.com" \
class="m_8242946800246731667gmail_msg" target="_blank">graham@grahamc.com</a>> \
wrote:<br class="m_8242946800246731667gmail_msg"></div></div></div><blockquote \
class="gmail_quote m_8242946800246731667gmail_msg" style="margin:0 0 0 \
.8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5">zimbatm <<a \
href="mailto:zimbatm@zimbatm.com" class="m_8242946800246731667gmail_msg" \
target="_blank">zimbatm@zimbatm.com</a>> writes:<br \
class="m_8242946800246731667gmail_msg"> <br class="m_8242946800246731667gmail_msg">
> Thanks Graham.<br class="m_8242946800246731667gmail_msg">
><br class="m_8242946800246731667gmail_msg">
> I pushed the Exim updates for CVE-2016-9963 as well.<br \
class="m_8242946800246731667gmail_msg"> ><br \
class="m_8242946800246731667gmail_msg"> > master: 352e167c224: exim: 4.87 -> \
4.88 for CVE-2016-9963<br class="m_8242946800246731667gmail_msg"> > release-16.09: \
d6bff30c96ed6: exim: 4.87 -> 4.87.1 for CVE-2016-9963<br \
class="m_8242946800246731667gmail_msg"> <br class="m_8242946800246731667gmail_msg">
<br class="m_8242946800246731667gmail_msg">
Thank you so much! I have sent notice to the security list. Checking<br \
class="m_8242946800246731667gmail_msg"> Hydra, this channel update should be out very \
soon.<br class="m_8242946800246731667gmail_msg"> <br \
class="m_8242946800246731667gmail_msg"> Graham<br \
class="m_8242946800246731667gmail_msg"> <br \
class="m_8242946800246731667gmail_msg"></div></div><span class="HOEnZb"><font \
color="#888888">
--<br class="m_8242946800246731667gmail_msg">
You received this message because you are subscribed to the Google Groups \
"nix-security-announce" group.<br class="m_8242946800246731667gmail_msg"> \
To unsubscribe from this group and stop receiving emails from it, send an email to <a \
href="mailto:nix-security-announce%2Bunsubscribe@googlegroups.com" \
class="m_8242946800246731667gmail_msg" \
target="_blank">nix-security-announce+<wbr>unsubscribe@googlegroups.com</a>.<br \
class="m_8242946800246731667gmail_msg"> To post to this group, send email to <a \
href="mailto:nix-security-announce@googlegroups.com" \
class="m_8242946800246731667gmail_msg" \
target="_blank">nix-security-announce@<wbr>googlegroups.com</a>.<br \
class="m_8242946800246731667gmail_msg"> To view this discussion on the web visit <a \
href="https://groups.google.com/d/msgid/nix-security-announce/87zijkyx1v.fsf%40grahamc.com" \
rel="noreferrer" class="m_8242946800246731667gmail_msg" \
target="_blank">https://groups.google.com/d/<wbr>msgid/nix-security-announce/<wbr>87zijkyx1v.fsf%40grahamc.com</a>.<br \
class="m_8242946800246731667gmail_msg"> For more options, visit <a \
href="https://groups.google.com/d/optout" rel="noreferrer" \
class="m_8242946800246731667gmail_msg" \
target="_blank">https://groups.google.com/d/<wbr>optout</a>.<br \
class="m_8242946800246731667gmail_msg"> </font></span></blockquote></div></div>
<br>______________________________<wbr>_________________<br>
nix-dev mailing list<br>
<a href="mailto:nix-dev@lists.science.uu.nl">nix-dev@lists.science.uu.nl</a><br>
<a href="http://lists.science.uu.nl/mailman/listinfo/nix-dev" rel="noreferrer" \
target="_blank">http://lists.science.uu.nl/<wbr>mailman/listinfo/nix-dev</a><br> \
<br></blockquote></div><br></div>
_______________________________________________
nix-dev mailing list
nix-dev@lists.science.uu.nl
http://lists.science.uu.nl/mailman/listinfo/nix-dev
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic