From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id 4EbpFxd5umU/SwEA62LTzQ:P1 (envelope-from ) for ; Wed, 31 Jan 2024 17:45:11 +0100 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id 4EbpFxd5umU/SwEA62LTzQ (envelope-from ) for ; Wed, 31 Jan 2024 17:45:11 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=jpoiret.xyz header.s=dkim header.b=m1fVfepD; dmarc=pass (policy=reject) header.from=jpoiret.xyz; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1706719511; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=NX82PH0xq7sUemk3uDRTpy8iIvm1p14WTx4cOvRXi5Y=; b=lC0lxOVde4oCJPfaap4ZQYv6JIh5bfsS287xAM71R4W5vXeZo9R+K/mXv9l5LIYmwz97aV rYBVQ3aBcCtRex2BjjaaIoelh7V3jS572n05Kz/FxGoV346Eo0sknzuaDNVKFHpH79Zv06 3Dk9HGIG3lfI6V4fcBKWMBncXL6oNm6LsAAnqnArzT8Xd+sdOflhcY9is3WB5DKINxdcxP K/zduMP6z6vuuSjO5R7+rzS3b5cms5llN6sXbAPUCMUdBJSrgRrwbsWZ9y4Aq9CHuFjhRz 8CWMlGWMT/eYeZZFFanVjNOD6uTNqgKYynkxmt8suqds/4Z7cey5tzsbF1vm8Q== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=jpoiret.xyz header.s=dkim header.b=m1fVfepD; dmarc=pass (policy=reject) header.from=jpoiret.xyz; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1706719511; a=rsa-sha256; cv=none; b=A+L/3hg4JHNAeq1Ek/lzSUZsgtIruNZ0JJ0RKxQaiuPRkUxdfP/5WWT4KXMG/ydAFeOxw3 TD+0awFzl6JhIo/SFs0Ls05JWiiWzb2zzarAKLucOAidkva0OKuKZXJ2NOXq1kMcZ2G+d/ Y2arEY33xD9393F/GIKEerC1Fd28DF0+xLyN6BUkNvm6keXoWFYy8QlQen9rI71v+rAxqO m5AuSXJZF1CgZPMQEYgXtnpc40z3iSnugNmxwDWaQAaDc3jxTqBFB9Q5wgNwp6t1kA0mJg Lg/ZY59UPJr+4LAfwN2m3qESm9RfaG/HuCtqentt6Gxpvujqy/o4p8VC1fcvgA== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 46AB7125C7 for ; Wed, 31 Jan 2024 17:45:11 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rVDhM-0008BY-0B; Wed, 31 Jan 2024 11:44:28 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rVDhK-0008B2-BO for guix-devel@gnu.org; Wed, 31 Jan 2024 11:44:26 -0500 Received: from jpoiret.xyz ([206.189.101.64]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rVDhI-0004V9-Ni for guix-devel@gnu.org; Wed, 31 Jan 2024 11:44:26 -0500 Received: from authenticated-user (jpoiret.xyz [206.189.101.64]) by jpoiret.xyz (Postfix) with ESMTPA id CEF481851D2 for ; Wed, 31 Jan 2024 16:44:22 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jpoiret.xyz; s=dkim; t=1706719462; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=NX82PH0xq7sUemk3uDRTpy8iIvm1p14WTx4cOvRXi5Y=; b=m1fVfepD8Ap3Zy7vSstANB87helGaoXlxbsuT1mjYendOQ42mStR8zywDPnKehS4IJrd0W zh+t+iA7e9psNlg3iDf3fI8WvO8EXL2zWRMf0Z4w0byWfVtnUDAJEsvpHcWUxoKWfeL7mp DitX5pbLINfemkar37Et1QTACxoRL69/MFEbMvmQ9kWr5dw4mBORY/Eedb3H6hxiaRAzcT DHDsUIixmoGcsRg963fsFVrEcYiJFUWw55uPyn3XdrKaU4DRSQpdqfEAedojtl5HDpm9a8 YmSYukZbj1gLwDnJ7gKmAIf4YOcXVJ58JIrRt4L11Yq8L+WY6ird3LuUzsidHQ== From: Josselin Poiret To: guix-devel@gnu.org Subject: Core-updates coordination and plans Date: Wed, 31 Jan 2024 17:44:21 +0100 Message-ID: <87h6itzc4a.fsf@jpoiret.xyz> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spamd-Bar: -- Received-SPF: pass client-ip=206.189.101.64; envelope-from=dev@jpoiret.xyz; helo=jpoiret.xyz X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -8.23 X-Spam-Score: -8.23 X-Migadu-Queue-Id: 46AB7125C7 X-Migadu-Scanner: mx12.migadu.com X-TUID: MKwoBycmsE8C --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi everyone, Since we're a couple people working on core-updates at the same time, it might be a good idea to coordinate a bit (of course, other volunteers welcome :) ). One conundrum we have for now: glibc 2.38 has a couple of new CVEs, and we have three options: 1) change glibc to track the 2.38 release branch =E2=86=92 world rebuild. 2) graft glibc =E2=86=92 bad user experience (and we're not supposed to gra= ft outside of master). 3) switch to 2.39 =E2=86=92 world rebuild + possibly more work fixing new b= uild failures. glibc 2.39 should hopefully release tomorrow (01/02/2024) What is everyone's opinion regarding those? IMO, option 2 is the one I'd like to avoid, and between 1 and 3 I'd ideally prefer 3 but we don't know yet if there is going to be a lot of breakage because of that (feels like usually it's toolchain updates, not glibc updates that cause them the most). Also, I see that most of the patches that were requested to be merged into c-u (like the big pages for jemalloc) actually got pushed, are there any other (well-tested) ones we can go for at the same time as the glibc rebuild? I will stress that this is about *core* packages now, I feel that it's too late to introduce more complications and delay the update any longer. Best, =2D-=20 Josselin Poiret --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQHEBAEBCAAuFiEEOSSM2EHGPMM23K8vUF5AuRYXGooFAmW6eOUQHGRldkBqcG9p cmV0Lnh5egAKCRBQXkC5Fhcaih/sC/4mscKkCAsUmhBGQOKkLm4FGXCB6BS+VMpR 4rNNkRXMEVjfgMi59PRVRNehQx5i7mGTGvueCkL1BxvsogaUELB0X/FLLnkU8k1b jIdW3UulDrSJnd74z9NIjK2dGdGT4QdieqvyzAw3rOB2gjdITHDe1aDROlYTWXWW XmO4sNkiPTSOWnxjz3+RvHr3M7JqyO328hYpncTBi5PHVuG7+pP5TfWp6nlFEZgx mcq1CbZxLPOCtfw4/m/3fnbzHzqDBQkBBtM8kMmsVTIHwbYvaz+Mat4rD3Zb6GHv pSSMbdc4pPB+UVMJIqPD+9PbweyoEnAU8uGCvyJFDs9uF4w4uw8WbtyEIgD3b9gg Vs4b95gcCJkXvr/cgTfDB4b+NqbDV3IJtdRuEleFsOq0GktqOxrCWGSBryqHd4b+ 6OW83lkHBNsSKevbUPA+o/rcxWtRRRW2qD3hsLKMLZLW3Hyf7RuiOPkgopuuTksn 1PVXXpuF4jLF73BYb6LQ6nq7MLfnmeg= =1+k0 -----END PGP SIGNATURE----- --=-=-=--