We are pleased to announce Issue 197 from openSUSE Weekly News.
This work (compilation) is licenced under Creative Commons attribution-ShareAlike 3.0 Unported License.
The rights for the compilation itself are copyright by Sascha Manns.
Opt-Out: If you are an Author and don’t want to be included in the openSUSE Weekly News, just send a Mail to:
Copyrights of the referenced articles are owned by original authors or copyright owners. If you want to reuse those articles, ask each original copyright owner which
license should be applied. We don’t reprint any Article without a free license, we just introduce it then under the Agreement of the German Copyright Law.
If you are an author and want to set your blog under a free License just visit: http://goo.gl/Tw3td
- Status Updates
- In the Community
- Games Corner
- Security Updates
- Kernel Review
- Tips and Tricks
- Planet SUSE
- On the Web
We are pleased to announce our 197 issue of the openSUSE Weekly News.
You can also read this issue in other formats here.
Enjoy reading :-)
The openSUSE Project announces the 1.0 release of the unique cross-distribution-capable,
fully automated testing framework openQA. openQA is the only
comprehensive testing tool which can run tests on every level of the OS, from core
functionality like the bootloader and booting the kernel up to testing applications like
Firefox and LibreOffice. It shows the results in a convenient web interface and allows testers
to see screenshots and even videos of the issues found.
openQA is used to run nightly tests of the â€˜Factoryâ€™ development repository for the upcoming
openSUSE 12.1 release. openQA is
available under the GPL version 2 or later. (…)
Last week, openQA 1.0 was released. We
did an interview with Bernhard Wiedeman, the main developer of openQA.
First of all, whatÃ½s your job regarding the openQA project?
My role in the project was to wish for, envision, design, organize and implement most of
openQA and OS-autoinst (the test-engine powering the openQA service). I made it do what was
needed most and added things others wanted as well. Actually, my job at SUSE (doing cloud
stuff) is completely unrelated to openQA, which is still my hobby project. (…)
Build Service Statistics.Â Statistics can found at Buildservice
Network installation could be improved by running package download and package
installation in parallel.
I wanted to open a fate feature about this when I first heard of plymouth, but
really makes me think we should go this way.
Ray’s comment starting with “Every flicker and mode change in the boot
process takes away from the whole experience.” is especially interesting. Is it
okay to track the “don’t show grub by default” here?
An easy way to remove Software! For example: you installed an application with “1-click install” (which will install all the packages that you need), there should be an easy way (also with 1 click) to remove what you have installed with that 1-click operation… in another words: an “1-click Uninstall” to remove installed software (dependencies and packages included).
Every single bug or feature that anyone has developed for GRUB 0.97 has been
rejected by the upstream project in favor of using GRUB 2. There has been resisitence in
the distribution community to switching boot loaders, but this stalemate isn’t
going to go away. The code itself isn’t well written or well maintained. Adding a
new feature involves jumping through a lot of hoops that may or may not work even if you
manage to work around all the runtime limitations. For example, a fs implementation has
a static buffer it can use for memory management. It’s only 32k. For complex file
systems, or even a simple journaled file system, we run into problems (like the reiserfs
taking forever to load bug) because we don’t have enough memory to do block mapping
for the journal so it needs to scan it for every metadata read. (Yeah, really.)
We need a feedback about packages that are preferred by users and actively used. Debian already has a tool named Popularity contest (popcon)
* reusing popcon will give us results that are directly comparable with Debian and Ubuntu
* packagers team can take care of the package
* we need a configuration dialog in YaST that is visible enough
* we need a server infrastructure on opensuse.org. (There are certain privacy issues, see Debian FAQ for details)
Features newly requested last week. Please vote and/or comment if you get interested.
Why does not require a password to unlock the screen with the same login screen of KDM or GDM, instead of a dialog box? Such as Windows XP.
This is a dependency for tracker (and possibly gstreamer).
Libcue is intended to parse a so called cue sheet from a char string or a file pointer. For handling of the parsed data a convenient API is available. This project is meant as a fork of cuetools by Svend Sorensen which saw it last release in 02/2006.
This is an extension of Feature #312871, but because it’s a little more involved than changing a simple default, I thought it would be better to have a separate feature request.
The screen-saver settings for time-out and “require password” are security settings that really should not be freely available to the individual user. I propose that we
1) set a reasonable default (60sec, 15sec, always require passwd) (see Feature #312871) and
2) only let these settings be modified by someone with root-access.
To a regular user, the timeout and “require password” settings should appear “greyed out”, clearly indicating “not available”.
Adobe just released Flash 11 which has a native 64-bit version for Linux, OS X and Windows. It should be included with OpenSuse 12.1 in the same way that Flash 10.x is included in 11.4. I know it’s very new but I think the removal of the nsplugginwrapper requirement on 64-bit makes it worthwhile. Flash is also know to have many security bugs, so keeping 12.1 at 10.3 for it’s entire lifecycle would be more dangerous than including 11.0.
When doing a kernel patch or update (as in eg zypper dup), the upgrade process re-writes the menu.lst entries for the kernel parameters with the default string from /etc/sysconfig/boot-something.conf
Not a lot of end-users are aware of that file (in my case it took 5 years to realise what was happening), and are instead constantly having to re-write missing kernel paraemters into the menu.lst file.
For instance, most sane folks would use splash=verbose as opposed to splash=silent, and for anyone using console=, brokendriver=, etc this is quite disasterous in the case of remote systems that suddenly become unreponsive / unreachable as a result of the kernel upgrade changing very important parameters.
Instead of taking the default from an obscure config file that no other distro even uses, I’d suggest that the kernel param line is taken as-is from the menu.lst / elilo.conf files, not set to some static value.
Statistics for openSUSE distribution in openFATE
The openSUSE Weekly News are available as podcast in German. You can hear it or download
it on http://saigkill.homelinux.net/podcast.
The Section provides the Game of the Week, and Updates in the Game Repository
While the Unknown Horizons developers
are working hard fixing bugs and preparing the new release, 2011.3, Iâ€™ve went ahead and
started to update all the dependencies to bring this wonderful game to openSUSE users.
Hereâ€™s a few things that were changed to support this release:
FIFE â€“ Unknown Horizons now requires FIFE 0.3.3 (released
a few days ago). This was a bit of a pain-in-butt package, that started to build
properly after a SCons update (also forwarded to the openSUSE devel project in
Updated guichan to the latest release (0.8.2) and backported a commit that enables
Updated SCons to 2.1.0;
ENet was updated to latest version (1.3.3).
Regarding Unknown Horizons packaging, Iâ€™ve also fixed some pending issues:
Added python-enet package: we now provide this so we can drop the binary blob
bundled with Unknown Horizons (depends on libenet >= 1.3.3);
UH now requires FIFE >= 0.3.3, which is no longer backward compatible;
Updated %post and %postun scriptlets.
Sources are a bit fatter now, using .xz now.
To install Unknown Horizons 2011.3rc3 please use one of the available 1-Click installers
To view the security announcements in full, or to receive them as soon as they’re released,
refer to the openSUSE Security Announce mailing list.
|Package:||Update to Mozilla Seamonkey 2.4.1|
|Date:||Fri, 14 Oct 2011 15:08:20 +0200 (CEST)|
|Affected Products:||openSUSE 11.4 openSUSE 11.3|
|Description:||fixing various bugs and security issues.|
Kernel version 3.1 will probably be released in the next few days. After
a break of more than four weeks, Greg Kroah-Hartman has released new stable kernels. The
X.org developers are thinking about merging the most important graphics drivers into the
Late last Tuesday night, Linus Torvalds issued the ninth release
candidate of Linux 3.1. Since then, some further corrections have been integrated into the
main development branch; however, in the past few days there have not been any new hints on
when Linux 3.1 might get released â€“ but it is likely to be released some time this week, or
next week at the latest, as indicated by Torvalds when releasing RC7.
Linus Torvalds explained in his release email that in RC9,
a new GPG key for signing Git tags has been used for the first time. The new key is said to be
stronger than the old one and has already been signed by more developers who are known to
Torvalds; however, the tag has also been signed with the old key.
As is the case every month, Jon Masters looks at the latest
developments in the Linux kernel community, including work on new architecture and ABI
support, not to mention Kernel.org disruptionsâ€¦
In spite of the recent security attacks on kernel.org and other Linux community
infrastructure, the show must go on and kernel development continued â€“ albeit heavily
disrupted at first by the various outages. That didnâ€™t stop patches being posted adding
support for two brand new architectures to the Linux kernel. One of these architecture patch
postings targets a new DSP (Digital Signal Processor) design from Qualcomm called Hexagon that
is commonly found in combination with a more powerful ARM processor within Qualcomm
system-on-chip (SoC) processors â€“ thatâ€™s two cores, both running different Linux kernels on
the same chip.
Rares gives his weekly Kernel Review with openSUSE Flavor.
Well here we are again, at part two of the ‘Getting Help from Linux’ series. In this blog post I’ll be talking about using Info to get help from Linux. In my previous post I spoke about how Info came about, but just in case you missed it I’ll give you another quick lesson. Gnu Info was created by the Free Software Foundation and in my experience is used by all of Gnu’s software for their version of ‘man’ pages. Info may contain much more information than what you can find in Man pages, and sometimes contains much more than you ever really need. The good thing about Info is that it is a hypertext markup utility. This makes it much easier to navigate through via hyperlinks embedded in emacs, than simply using arrow keys to navigate through information. While Man uses the Less utility to control the display, the info utility itself is designed to display Info pages. For those of you familiar with emacs, it appears the layout may be the same, along with some of the basic navigation. But that’s where the two applications can differ. If you’re using the Info application then your commands will be different than if you’re viewing info files in Emacs. This article is about reading Info pages inside of info. (…)
This is going to be just a brief blog post with one important image. You probably all
already know that there is bunch of people in openSUSE community who are working on getting ARM supported by distribution. And
you probably already seen many blog posts about how great it is working. Well this is one of
them. Iâ€™m happy owner of ASUS Transformer machine. As a geek I have root on my android
machine. And since not long time ago, I also had a Debian chroot there to be able to run my
favorite applications. But not any more. I replaced my Debian chroot with openSUSE one and
now I can use zypper happily and forget everything about apt-get.
How did I did that? I started with a simple package in obs, changed BuildRequires to the
set of packages I wanted to have, run osc build armv7l standard and after
osc created chroot for me, I just took it away. And fixed few things after switching to it
on my Transformer. Iâ€™m still missing some packages, but hopefully they will be available
Snort, the open source intrusion detection and prevention system, is immensely powerful, but to get the most out of it, you need to configure it correctly for your own setup. My previous Snort article looked at Snortâ€™s own performance monitoring provision and how to use it to tune Snort to get the best throughput at the detection end. Here are some performance tips for dealing well with alerts, looking at alert monitoring, streamlining false positives and genuine but frequent real positives, and logical rule optimization.
The last article looked at monitoring rule performance â€“ that is, how well the Snort detection engine deals with the traffic it sees. The next stage concerns what to do with traffic that Snort flags as suspicious: alerts of various sorts. I wonâ€™t go into detail about how to deal with specific alerts, but talk instead about some good Snort management practices. (…)
By using MySQL replication, you can distribute MySQL queries over multiple servers to improve application performance, provide high availability (HA), and distribute data across diverse physical locations. The process involves one or more master servers, which send databases or tables asynchronously to slave servers. For all of its potential benefits, MySQL replication can cause serious trouble, especially in complex environments. Follow the advice here to get off to a healthy start.
In MySQL replication each participating server may be a master, a slave, or both. Master servers handle database transactions and write them to a binary log (binlog). Slaves connect to masters and request copies of their binary logs. Servers can act both as master and slave thanks to features such as different auto increment, which sets the interval between successive column values. (…)
As many of you know the most used packages on GNU/Linux are deb and rpm.
deb is the extension of the Debian software package format and the most often used name for such binary packages.
Debian packages are standard Unix ar archives that include two gzipped, bzipped or lzmaed tar archives: one that holds the control information and another that contains the data.
The accepted program for handling these packages is dpkg, commonly used via other programs such as apt/aptitude or Gdebi.
RPM Package Manager (RPM) is a package management system. The name RPM variously refers to the .rpm file format, files in this format, software packaged in such files, and the package manager itself. RPM was intended primarily for GNU/Linux distributions; the file format is the baseline package format of the Linux Standard Base. (…)
In preparation for taking the Linux Professional Institute Certification exam LPI-302 for systems administrators, learn how to set up and store passwords, integrate Samba with LDAP, and use ACLs to protect your Linux installation. (…)
Letâ€™s say you want to CIFS mount a windows share â€” say â€œ//server01/it stuff$â€, but your
Windows admin put spaces in the path. Replace the spaces with \040.
So, in your /etc/fstab, the line would give:
username=fblaise,password=yoursinhere,uid=1000,gid=100,_netdev 0 0
It will then work, and your linux apps which cannot see beyond your local filesystems
will have a new life.
So HackWeek VII has been and gone, but work has not stopped in getting our beloved Geeko
Now I’ll be the first to admit, things have been a wee bit scrappy in places. This isn’t
anyone’s fault, it’s just that we want to get things rolling ASAP. Thing is, we need more
haste less speed; we need to be somewhat more concerted with our efforts. So instead of trying
to get everything to build in one hit (would be great if that was possible), we are going to
target patterns of packages. (…)
This hackweek I spent playing
with joysticks in YaST and hwinfo
(libhd). YaST already has a module for configuring joysticks, but I only supported Gameport joysticks which are quite
obsoleted these days.
AFAIK all recent mainboards do not have gamport connectors (just a pin header) or the
gameport is completely missing. And if you want to buy a joystick you will find only USB
There was a note in the YaST module that it only supports Gameport joysticks but some
users find it confusing.
So I decided to change the situation and do something interesting during my Hackweek
project – to add USB joystick support to YaST. (…)
Whoooo. Just 2 more days until KDE can celebrate the 15th birthday. Have you prepered your
presents ;-) And even more important: Are you ready to party?
Find more information on the dot. http://dot.kde.org/2011/10/05/freedom-15-years-party
I bought a Windows game last week. What I got
was a scenic tour through the demise of the Windows platform. I knew that Windows as gaming
platform was troublesome, but it never was
as clear that it’s actually moving towards
irrelevance. If you ever have seriously played games on Windows you know this
cocktail of driver updates, googling error messages, entering illegiible cryptic codes from
stickers hidden in game boxes, waiting for online activation, going through update popups of
various origins, and what not. It took me something like two hours before I was even able to
start the game. I love games, and I have played quite some games on Windows, but I might be
done with this now.
Plasma Active brings a
flexible, elegant, activity-driven user experience to a spectrum of devices. This article is
part of a series
of articles about different perspectives on Plasma Active. This installment looks
at the user story, and aims at answering the questions â€œwhat does Plasma Active bring me as
a user?â€, what are the underlying concepts and how do we plan to achieve these
For the user who wants to enjoy the Internet, multimedia and data away from his laptop or
desktop, right now choices are rather slim. This means, for example, that you will choose a
platform with some sort of critical mass, meaning that your favourite 3rd party apps are
available, enough services supported, etc.. A Free software platform has to bring a lot to the
table for users: Thereâ€™s a lot of cool software available, systems such as Plasma Active offer
a system without lock-in to a single vendor, but rather being able to take apps across vendors
and devices. Plasma Active already comes with a good amount of interesting widgets, new ones
are being developed all the time, the development platform is proven to be stable and working
in real world use, and itâ€™s easy for 3rd parties to develop and bring support for (even â€œ4thâ€
party) services. Plasma Active extends the Free software ecosystem into user experiences for
devices, bringing a critical mass with it.
I personally use Plasma Active almost every day, I prefer the tablet form factor for
â€œlight readingâ€, checking on news, social networks, the blogosphere. For me itâ€™s an ideal â€œon
the couch in the living roomâ€ device, although I tend to use it in trains for reading and
watching movies as well. With its powerful email client Kontact Touch it allows me quite
conveniently read longer email threads. The virtual keyboard works well enough for entering
short texts. For longer texts, I usually either plug in a keyboard and put the tablet into a
stand, so it feels more like a â€˜stationary laptopâ€™. (…)
I promised that Iâ€™ll write a post about how you can contribute. There are several ways how
to contribute to MySQL, but most of it means modifying packages. And as everything in openSUSE
is built using openSUSE Build service, first post will be actually pretty general obs and osc
howto. In the next posts, Iâ€™ll go deeper into specific details of MySQL packaging.
time I described how to contribute quite to any package in openSUSE Build Service.
But I left out the most important part. I havenâ€™t shown how to change anything. This time I
want to show you, how to create patches, if you need them, easily. Letâ€™s start start with
package we checked out from obs. Creating patch for anything is different only in first few
First we got to the directory where do we have the package checked out. We run
This command will parse the .spec file, unpack tarball and prepare all quilt stuff. Now is
time for patching, so letâ€™s enter the newly created directory and try following command
Fifteen years ago Matthias Ettrich started the KDE community. On
14th October 1996 he wrote his famous email to the de.comp.os.linux.misc group on Usenet. He called for other
programmers to join him to create a free desktop environment for Linux targeted at end users.
Many, many people joined. Thousands of
developers wrote millions lines
of code. We did 90 stable
releases of our core set of applications alone, not counting all additional stuff
and the thousands of 3rd party applications.
On the 9th of October, 2011 (9.10.11), the first release of the Plasma Active tablet user experience was made publicly available. Plasma Active Oneâ€™s touchscreen interface is more than just an application launcher. As soon as the device is turned on, rather than the traditional grid of applications, you see the Activities view showing your current project, task or idea. With Activities, you can collect all of the documents, people, web sites, media and widgets related to a topic in one place, building personalized and interactive views of your life.
With Plasma Active, the possibilities are unlimited. You can add as many things to an Activity as you wish with its â€œinfinite scrollâ€ feature. You can create as many Activities as you like and move between them using the touch-friendly Activity Switcher. (…)
Want a free trip to SCALE 10X in Los Angeles this January?
In marking 10 years of the Southern California Linux Expo (SCALE) and 20 years of Linux, the SCALE team wants to incorporate an open-source approach to this yearâ€™s expo logo designs for publications and for swag.
With this in mind, the SCALE team announces a contest to select the artwork for use on this year’s t-shirts, attendee bags, and other conference materials.
openSUSE community manager, Jos Poortvliet, shares his thoughts on the recent creation
of Tizen and offers a new home for the MeeGo projectâ€¦
A while ago Intel and Samsung announced a new initiative under the Linux Foundation
umbrella: Tizen. Tizen is a Linux OS for embedded use building on HTML5 and CSS. Cool? Well,
maybe. If youâ€™ve been involved with MeeGo, the Linux Foundationâ€™s previous embedded Linux
OS, youâ€™re probably not too happy right now. Yes, MeeGo will have to go. For them, as
Richard Dale wrote, itâ€™s â€˜Tizen or Tizenâ€™tâ€™. The MeeGo community had no say in the merger of
Moblin and Maemo to MeeGo, nor did they in the birth of Tizen. Surprised? (…)
Since last Monday at the latest, all virus scanners will issue an alert when an attempt
is made to load the trojan that was exposed by the Chaos Computer Club (CCC) onto a computer. However, to think that one is therefore protected from
the government-procured spyware would be a serious mistake. Anti-virus software hardly
stands a chance against such malware; some of the alerts have even turned out to be proper
An open source automated testing framework, openQA 1.0, has been released by openSUSE to make it easier to test Linux
distributions and other operating systems. The GPLv2 licensed framework is already running
within the openSUSE process to test openSUSE Factory distributions, including the upcoming openSUSE 12.1, due mid-November.
The KDE project has announced the release of
version 2.0 of ownCloud, an open, web-based
storage application which is designed to be run on a user’s personal server. The major
stable update includes a new user interface and several new features, such as support for
calendar and address book syncing.
Thanks to the people who completed the survey for the Desktop Summit 2011!
To improve Desktop Summits in the future, the Desktop Summit organizing team collected feedback from attendees through this survey, which 192 people answered. The survey asked for brief background information, a general evaluation of the Desktop Summit and various elements of it, and feedback on the social events.
The overall feedback was positive. People enjoyed Desktop Summit 2011 Berlin and the forum it provided for exchanging technology and ideas among different free software communities. In addition, there were suggestions for improvements to upcoming Desktop Summits.
Details can be read in the report if you’re interested.
We appreciate you taking time to give us feedback and look forward to seeing you again at the next Desktop Summit!
Believe it or not, the greatest threat to your personal or corporate computing environment is you. You put your personal and collective corporate security at risk every day by just being you. Itâ€™s not a particular personality flaw with you as an individual but rather it is your innate human response to other humans. You want to be open, helpful and kind but those attributes are also your security Achillesâ€™ heel. The quote, â€œA little kindness goes a long way,â€ is no less true when speaking of computer security. That wee bit of kindness that you show a stranger could put your personal and corporate security at significant risk and could result in very high remedial costs. (…)
One of the great things about the original Star Wars trilogy, was the â€œlived inâ€, junky, hacked together aesthetic of the Star Wars universe. Everything was a bit trashed, as if real people actually lived there. Thankfully, thatâ€™s one of the things that George Lucas hasnâ€™t tinkered with in his endless quest to ruin the childhood memories of a generation. So itâ€™s heartening to see this tradition carried on with the playing of the imperial death march on miscellaneous hacked together hardware. Enjoy â€¦ (…)
Do you have comments on any of the things mentioned in this article? Then head right over to the comment section and let us know!
Or if you would like to be part of the openSUSE:Weekly news team then
check out our team page and join!
If you don’t know, how to contribute, just check out the
We have a Etherpad, which you can also
use to sumbit news.
Talk with us:
Or Communicate with or get help from the wider openSUSE
community via IRC, forums, or mailing lists see Communicate.
Visit our connect.opensuse.org Page: and give your
Visit our Facebook Fanpage: Fanpage
You can subscribe to the openSUSE Weekly News RSS feed at
DOCS: Visit the official openSUSE docs page: docs.opensuse.org.
We thank for this Issue:
We thank for this Issue:
Both comments and pings are currently closed.