- Announce - AlmaLinux List Archives

[Security Advisory] ALSA-2022:5813: vim security update (Moderate)
by AlmaLinux Errata Notifications 18 Aug '22

18 Aug '22

Hi, you are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 8 Type: Security Severity: Moderate Release date: 2022-08-10 Summary: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Out-of-bounds Write (CVE-2022-1785) * vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897) * vim: buffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/8/ALSA-2022-5813.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux team

1 0

AlmaLinux 8.6 Stable Now Available
by Jack Aboutboul 12 May '22

12 May '22

Hell All, AlmaLinux OS 8.6 Stable, Codenamed Sky Tiger, is now available for your casual consumption, on a mirror near you. Mirrors: https://mirrors.almalinux.org Release Notes: https://wiki.almalinux.org/release-notes/8.6.html Blog: https://almalinux.org/blog/almalinux-86-stable-is-now-available/ Join us on https://chat.almalinux.org and all the various and sundry social channels. Thanks, Jack

1 0

AlmaLinux 8.6 Beta Now Available
by Jack Aboutboul 07 May '22

07 May '22

Hello All, Just a quick note to let you all know that we've just released AlmaLinux 8.6 Beta. Read/comment/discuss here: https://almalinux.discourse.group/t/almalinux-8-6-sky-tiger-beta-now-availa… and https://www.reddit.com/r/AlmaLinux/comments/ujtjc2/almalinux_86_sky_tiger_b… You can find it on the mirrors: https://mirrors.almalinux.org/isos.html Have a great weekend, Jack

1 0

AlmaLinux 9 Beta -- Now Available
by Jack Aboutboul 20 Apr '22

20 Apr '22

Hello, Community! AlmaLinux OS is proud to announce AlmaLinux OS 9.0 Beta <https://mirrors.almalinux.org/isos.html> for all 4 architectures: x86_64 <https://mirrors.almalinux.org/isos/x86_64/9.0-beta.html>, aarch64 <https://mirrors.almalinux.org/isos/aarch64/9.0-beta.html>, ppc64le <https://mirrors.almalinux.org/isos/ppc64le/9.0-beta.html> and s390x <https://mirrors.almalinux.org/isos/s390x/9.0-beta.html>, achieving architecture parity with upstream. As this is a *BETA* release it should not be used for production installations. The provided upgrade instructions should not be used on production machines unless you don't mind if something breaks. Now if you wanna test this somehow, somewhere to see how things will work in 9.0 stable, you're on the right track. Cloud Images and Containers Cloud images and containers are in process and we anticipate the first batch to be ready in 1-2 days. Release Notes and More Information AlmaLinux OS 9.0 Beta is based on upstream kernel version 5.14 and contains enhancements around cloud and container development and improvements to the web console. This release also delivers enhancements for security and compliance including additional security profiles. Other various updates include Python 3.9, GCC 11 with the latest versions of LLVM, Rust and Go to make modernizing the applications faster and easier. You can read more about it by checking out the Release Notes <https://wiki.almalinux.org/release-notes/9.0-beta.html>. Test Days Please make sure to stay tuned to the blog, community chat and various social channels and mailing lists (links below) for the upcoming announcement of test days, where we will gather together and have ourselves a good ole' fashioned bug hunt. What you can do to help? Test, test, test. Your feedback is what helps make great production releases. Please report any bugs you may see on the Bug Tracker <https://bugs.almalinux.org/>. You can also pop into the AlmaLinux Community Chat <https://chat.almalinux.org/> and join our Testing Channel, post a question on our 9.0 Beta Forum <https://almalinux.discourse.group/c/devel/9-0-beta/29>, on our AlmaLinux Community on Reddit <https://reddit.com/r/almalinux> or catch us on Twitter <https://twitter.com/almalinux>. Please enjoy this Beta release, let us know what you think and stay tuned for more updates and announcements coming soon. Happy Testing!

1 0

AlmaLinux for PowerPC 8.5 Stable Now Available
by Jack Aboutboul 26 Feb '22

26 Feb '22

Hello All, We've just released AlmaLinux OS 8.5 for ppc64le. A highly requested arch from the community. You can read more here: https://almalinux.org/blog/almalinux-for-powerpc-85-stable-now-available/ ISO images: https://repo.almalinux.org/almalinux/8.5/isos/ppc64le/ Release Notes: https://wiki.almalinux.org/release-notes/8.5-ppc.html Please join us on https://chat.almalinux.org and https://forums.almalinux.org for any questions you may have or support you might need. We'd also like to give a shout out to our good friends at OSUOSL, CERN and other ppc64le community members for everyone's support in making the release for this architecture possible. Pray for Peace, Jack

1 0

AlmaLinux Live Media and Cloud Images 8.5 Updates
by Jack Aboutboul 19 Feb '22

19 Feb '22

Hello All, I just threw up an announcement on our recent updates to Cloud, Container and Live images. Everything is now on 8.5, although most of it has been for a while. The Live images were the last missing piece. You can read more here: https://almalinux.org/blog/almalinux-live-media-and-cloud-images-85-updates/ Also a huge thanks to Bala. That man is magic. Jack

1 0

Generic Cloud (cloud-init) Images Now Available for PPC64LE
by Jack Aboutboul 04 Feb '22

04 Feb '22

Hello All, Just a quick note to let everyone know that cloud-init/generic cloud images are now available for the PPC64LE architecture as part of the ongoing beta. The image is available from: https://repo.almalinux.org/almalinux/8/cloud/ppc64le/images/ and you can of course find the relevant documentation on the wiki here: https://wiki.almalinux.org/cloud/Generic-cloud.html. Thanks, Jack

1 0

Looking Back, Leaping Forward: A look back at the first year for
by Jack Aboutboul 03 Feb '22

03 Feb '22

Hello All, Earlier today I posted a one year retrospective to the blog. It is a drop longer than I would like to read in my mail and so in an effort not to clog up your inbox and prevent eye strain, I'll present you with a link to read it on there: https://almalinux.org/blog/looking-back-leaping-forward-a-look-back-at-the-… Thanks, Jack

1 0

Proposal and Request For Feedback: Implement `dnf countme`
by Jonathan Wright 17 Dec '21

17 Dec '21

Hello I am Jonathan Wright, Infrastructure Team Lead for AlmaLinux. I manage most of the plumbing that keeps things humming smoothly along and I’ve been working on some improvements to some parts of it to make things more user friendly for our community. AlmaLinux values transparency <https://wiki.almalinux.org/Transparency.html> and communal decision making, it’s one of the reasons why I decided to become a contributor. As part of some of the work I’m doing I’d like to request some feedback from the community on a proposal to enable `dnf countme` similar to the way the Fedora project does. countme is a core feature of DNF implemented upstream in Fedora 32 (dnf 4.2.9). It is described by the docs as such: Determines whether a special flag should be added to a single, randomly chosen metalink/mirrorlist query each week. This allows the repository owner to estimate the number of systems consuming it, by counting such queries over a week's time, which is much more accurate than just counting unique IP addresses (which is subject to both overcounting and undercounting due to short DHCP leases and NAT, respectively). The flag is a simple "countme=N" parameter appended to the metalink and mirrorlist URL, where N is an integer representing the "longevity" bucket this system belongs to. The following 4 buckets are defined, based on how many full weeks have passed since the beginning of the week when this system was installed: 1 = first week, 2 = first month (2-4 weeks), 3 = six months (5-24 weeks) and 4 = more than six months (> 24 weeks). This information is meant to help distinguish short-lived installs from long-term ones, and to gather other statistics about system lifecycle. countme was designed with privacy in mind and does not add any identifying or unique information to requests so there is no tracking involved. Just a simple “hello” to the repository. Currently, AlmaLinux does not track any sort of usage statistics for our distribution at all. We can technically try to aggregate basic metrics from HTTP logs on our mirrorlist servers but the reliability of the data will not be the best since counting unique IPs is undermined by things like NAT and dynamic addressing. So, I’d like to propose we implement “countme=1” in our repository configs just as Fedora and EPEL have done. I’d also like to propose that the aggregated data be made available publicly, similar to https://data-analysis.fedoraproject.org/ for the community to see. I’ve setup a form for feedback at https://forms.gle/BShXoxJmsjNbMXCk6 in case you’d like to give any input on this proposal. We will keep this form open for about a week. FAQ: Q: When are “countme” requests sent? A: Once a week at random during normal dnf activity. If you do not use dnf calls that would otherwise trigger mirrorlist requests (makecache, install, update) this flag will NOT cause dnf to go out of its way and make special requests. Q: What extra data will be sent that is not currently collected? A: “countme=X” will be added to a random mirrorlist request each week from DNF where X is a number, 1-4 which represents the number of weeks your system has been installed. See above for the explanation of this from the DNF documentation. Q: Will aggregated data be made publicly available? A: Yes Q: What data do you use? A: The only data we look at is in the HTTP request itself. Our log lines are in the standard Combined Log Format. Ex: 172.30.61.81 - - [15/Dec/2021:17:02:12 +0000] "GET /mirrorlist/8/baseos?countme=4 HTTP/1.1" 200 629 "-" "libdnf (AlmaLinux 8.3; generic; Linux.x86_64)" We only look at log lines where the request is "GET", the query string includes "countme=N", the result is 200 or 302, and the User-Agent string matches the libdnf User-Agent header. The only data we use are the timestamp, the query parameters (repo, arch, countme), and the libdnf User-Agent data. In the future we will also aggregate data by country using GeoIP. Our processing and aggregation does not care about IPs themselves or their uniqueness. When we implement the aggregation of geographic data it will use MaxMind’s GeoIP database locally to turn the IP into a region which will be used for tallying generalized metrics for that region. Raw access logs are archived in case we find major issues in any of our processing which would allow us to re-parse the data in the future and correct the published statistics. Q: Can I opt out? A: Yes, but we’d prefer you not since the data is very helpful. The only extra data you’ll be submitting is “countme=X” in one request per week. If you’d like to opt out you can comment out the “countme=1” line in the repository config files in /etc/yum.repos.d/ Discussion for this should be directed to the AlmaLinux Infrastructure mailing list. You can join the list at https://lists.almalinux.org/mailman3/lists/infra.lists.almalinux.org/ -- Jonathan Wright AlmaLinux Foundation Mattermost: chat <https://chat.almalinux.org/almalinux/messages/@jonathan>

1 0

AlmaLinux for Azure HPC --Available Now!
by Jack Aboutboul 15 Dec '21

15 Dec '21

Hello HPC Fans. A few weeks ago we updated our images on Microsoft Azure to 8.5. Today we are proud to announce the general availability of–AlmaLinux OS for Azure HPC <https://azuremarketplace.microsoft.com/en-us/marketplace/apps/almalinux.alm…> based on AlmaLinux OS 8.5. This was a tremendous team effort starting from community requests and developed in collaboration between the AlmaLinux community and the team over at our amazing sponsors Microsoft Azure. We had a couple of goals when we set out on this project. First, is to further enable scientific computing and research. That is something that we feel very strongly about and many across the vast expanse of scientific research have begun to start leveraging the cloud due to the lack of resource constraints there. It is much easier to do you work whether it be simulations or something else if you can add nodes instantly with a quick command in your terminal. Second, HPC is often out of reach for many due to the large investment that is typically required. Combining the benefits of cloud economies-of-scale along with HPC technology opens the door for many to be able to experience what HPC is and what it really do. We hope that it will inspire those already there to explore what more they can accomplish and inspire the next generation of scientists and researchers to begin experimenting. You can now take advantage of Azure’s leading edge H-series CPU and N-series GPU based instances, along with RDMA support and low latency networking to power all of your cloud-based HPC workloads large scale computation, circuit design, fluid dynamic analysis, natural resource exploration and many other HPC workloads. The image includes a suite of the most popular HPC tools and libraries pre-installed including the NVIDIA/Mellanox OFED drivers, InfiniBand-based MPI Libraries such as HPC-X and OpenMPI, Communication runtimes Libfabric and OpenUCX, AMD BLIS, FFTW and FLAME libraries, Intel oneAPI Math Kernel Library, and a host of other domain-specific libraries and utilities. Join us <https://chat.almalinux.org>. Our team is always on the lookout for more contributors. Report any bugs you may see on the Bug Tracker <https://bugs.almalinux.org>. Join the AlmaLinux Community Chat <https://chat.almalinux.org> or our HPC Forum <https://almalinux.discourse.group/c/sigs/hpc/31> if you need any help, post a question, or even if you just want to hang out. Reach us on Reddit <https://reddit.com/r/almalinux> and on Twitter <https://twitter.com/almalinux>. –Happy Hacking

1 0