Line 257: | Line 257: | ||
These changes have been accepted by the [[Fedora_Engineering_Steering_Committee |Fedora Engineering Steering Committee]] for the Fedora 27 Release as Self Contained Changes. | These changes have been accepted by the [[Fedora_Engineering_Steering_Committee |Fedora Engineering Steering Committee]] for the Fedora 27 Release as Self Contained Changes. | ||
===[[Changes/BodhiNonRPMArtifacts | Bodhi Non-RPM Artifacts]]=== | |||
Bodhi, the Fedora Updates System, should be able to process more than just RPMs. | |||
* Owner: Randy Barlow | |||
* Last updated: 2017-03-21 | |||
* Completed: no | |||
===[[Changes/ChineseSerifFonts | Chinese Serif Fonts]]=== | ===[[Changes/ChineseSerifFonts | Chinese Serif Fonts]]=== | ||
Fedora already provides default Chinese Sans fonts, | Fedora already provides default Chinese Sans fonts, | ||
Line 262: | Line 267: | ||
* Owner: Peng Wu | * Owner: Peng Wu | ||
* Last updated: 2017-07-11 | * Last updated: 2017-07-11 | ||
* Completed: [ | * Completed: yes | ||
===[[Changes/Decouple system java setting from java command setting | Decouple system java setting from java command setting]]=== | |||
By default, Java applications installed from RPMs are run with JVM found on PATH. We propose to run them with default system JVM, not considering PATH. Users will still be able to override the default using JAVA_HOME environment variable as before. | |||
* Owner: Mikolaj Izdebski | |||
* Last updated: 2017-07-25 | |||
* Completed: yes | |||
===[[Changes/Improved Bay Cherry Trail Support | Improved Bay- and Cherry-Trail device support]]=== | |||
Improve support for hardware using Intel Bay Trail and Cherry Trail SoCs. | |||
* Owner: Hans de Goede | |||
* Last updated: 2017-07-25 | |||
* Completed: yes | |||
===[[Changes/Java9TechPreview | Java 9]]=== | |||
Add a tech preview preview of the the upcoming version of Java (OpenJDK9) to Fedora 27 | |||
* Owner: Jiri Vanek | |||
* Last updated: 2017-04-18 | |||
* Completed: yes | |||
===[[Changes/Making sudo pip safe | Making sudo pip Safe (Again)]]=== | |||
At the present time, running sudo pip3 in Fedora is not safe. Pip shares its installation directory with dnf, can remove dnf-managed files and generally break the Python 3 interpreter. We propose a series of measures that will make it safe to use. | |||
* Owner: Miro Hroncok | |||
* Last updated: 2017-06-19 | |||
* Completed: yes | |||
===[[Changes/New default cipher in OpenVPN | New default cipher in OpenVPN]]=== | ===[[Changes/New default cipher in OpenVPN | New default cipher in OpenVPN]]=== | ||
Since the discovery of the SWEET32 flaw, ciphers using cipher-blocks smaller than 128-bits are considered vulnerable and should not be used any more. OpenVPN uses Blowfish (BF-128-CBC) as the default cipher, which is hit by the SWEET32 flaw. This proposal changes the default cipher to AES-256-GCM while in parallel allowing clients to connect using AES-256-CBC, AES-128-CBC or the deprecated BF-CBC, | Since the discovery of the SWEET32 flaw, ciphers using cipher-blocks smaller than 128-bits are considered vulnerable and should not be used any more. OpenVPN uses Blowfish (BF-128-CBC) as the default cipher, which is hit by the SWEET32 flaw. This proposal changes the default cipher to AES-256-GCM while in parallel allowing clients to connect using AES-256-CBC, AES-128-CBC or the deprecated BF-CBC, | ||
* Owner: David Sommerseth | * Owner: David Sommerseth | ||
* Last updated: 2017-08-08 | * Last updated: 2017-08-08 | ||
* Completed: | * Completed: yes | ||
===[[Changes/OpenSSH Server Crypto Policy | OpenSSH Server Crypto Policy]]=== | ===[[Changes/OpenSSH Server Crypto Policy | OpenSSH Server Crypto Policy]]=== | ||
OpenSSH clients follow the system-wide crypto policy since Fedora 26. | OpenSSH clients follow the system-wide crypto policy since Fedora 26. | ||
Line 275: | Line 298: | ||
That will allow openssh server configuration to adapt to the multiple security levels offered system-wide. | That will allow openssh server configuration to adapt to the multiple security levels offered system-wide. | ||
* Owner: Jakub Jelen | * Owner: Jakub Jelen | ||
* Last updated: 2017-08- | * Last updated: 2017-08-14 | ||
* Completed: | * Completed: yes | ||
===[[Changes/Platform Python Stack | Platform Python Stack]]=== | ===[[Changes/Platform Python Stack | Platform Python Stack]]=== | ||
A revisit of the System Python change from Fedora 24. It has been renamed from System Python to Platform Python not to collide with upstream PEP 432. | A revisit of the System Python change from Fedora 24. It has been renamed from System Python to Platform Python not to collide with upstream PEP 432. | ||
* Owner: | * Owner: Tomáš Orsava | ||
* Last updated: 2017-08- | * Last updated: 2017-08-11 | ||
* Completed: yes | |||
* Completed: | |||
===[[Changes/Remove SSH-1 from OpenSSH | Remove SSH-1 from OpenSSH clients]]=== | ===[[Changes/Remove SSH-1 from OpenSSH | Remove SSH-1 from OpenSSH clients]]=== | ||
Upstream removes support for SSH-1 protocol and we plan to do the same in Fedora. The protocol is years obsolete and not even supported in current default binaries (only in openssh-clients-ssh1 subpackage). | Upstream removes support for SSH-1 protocol and we plan to do the same in Fedora. The protocol is years obsolete and not even supported in current default binaries (only in openssh-clients-ssh1 subpackage). | ||
* Owner: Jakub Jelen | * Owner: Jakub Jelen | ||
* Last updated: 2017-07- | * Last updated: 2017-07-25 | ||
* Completed: | * Completed: yes | ||
===[[Changes/Remove krb5-appl | Remove krb5-appl]]=== | ===[[Changes/Remove krb5-appl | Remove krb5-appl]]=== | ||
Remove src:krb5-appl (produces packages krb5-appl-clients and krb5-appl-servers) from the distribution. | Remove src:krb5-appl (produces packages krb5-appl-clients and krb5-appl-servers) from the distribution. | ||
* Owner: Robbie Harwood (rharwood) | * Owner: Robbie Harwood (rharwood) | ||
* Last updated: 2017-07-25 | * Last updated: 2017-07-25 | ||
* Completed: | * Completed: yes | ||
===[[Changes/Replace yumex-dnf with dnfdragora | Replace Yumex-DNF with dnfdragora]]=== | ===[[Changes/Replace yumex-dnf with dnfdragora | Replace Yumex-DNF with dnfdragora]]=== | ||
Replace the current alternative graphical package manager. | Replace the current alternative graphical package manager. | ||
* Owner: Christian Dersch | * Owner: Christian Dersch <lupinix@fedoraproject.org> | ||
* Last updated: 2017-04-04 | * Last updated: 2017-04-04 | ||
* Completed: | * Completed: yes | ||
===[[Changes/Samba AD | Samba AD]]=== | |||
===[[Changes/ | Samba AD is an open source implementation of an Active Directory set of tools and protocols. It allows Windows clients to be enrolled and managed using native Windows tools. In addition, Samba AD can serve as a domain controller for Fedora workstations and servers utilizing DCERPC, LDAP and Kerberos. | ||
* Owner: Andreas Schneider | |||
* Owner: | * Last updated: 2017-07-25 | ||
* Last updated: 2017- | * Completed: yes | ||
* Completed: | ===[[Changes/aarch64SBCImages | aarch64 SBC (Single Board Computer) Disk Images]]=== | ||
We will deliver the first supported SBC disk images for aarch64. | |||
===[[Changes/ | * Owner: Paul Whalen | ||
* Last updated: 2017-08-08 | |||
* Owner: | * Completed: yes | ||
* Last updated: 2017- | ===[[Changes/libpinyin2.1 | libpinyin 2.1]]=== | ||
* Completed: [ | libpinyin 2.1 will merge libzhuyin code and replace the package | ||
* Owner: Peng Wu | |||
* Last updated: 2017-07-12 | |||
* Completed: yes | |||
[[:Category:ChangeAcceptedF27]] and [[:Category:SelfContainedChange]] | [[:Category:ChangeAcceptedF27]] and [[:Category:SelfContainedChange]] |
Revision as of 11:35, 19 September 2017
Fedora 27 Accepted System Wide Changes Proposals
These changes have been accepted by the Fedora Engineering Steering Committee for the Fedora 27 Release as System Wide Changes.
Perl 5.26
A new perl 5.26 version brings a lot of changes done over a year of development. Perl 5.26 will be released 5/20/2017. See 5.26.0-RC perldelta for more details about preparing release.
Owners
- Owner: Petr Písař
- Release notes owner:
Tracking
- Last updated: 2017-05-20
- Tracking bug: #1453004
- Status: Change accepted
Kerberos KCM credential cache by default
Default to a new Kerberos credential cache type called KCM which is better suited for containerized environments and provides a better user experience in the general case as well.
Owners
- Owner: Jakub Hrozek
- Release notes owner:
Tracking
- Last updated: 2017-02-13
- Tracking bug: #1421604
- Status: Change accepted
Enable TRIM pass down to encrypted disks
Override kernel default for dm-crypt mappings of LUKS1 encrypted volumes via flag put in /etc/crypttab file. This change should affect only newly created encrypted storage based on LUKS1 format during installation.
Owners
- Owner: Vratislav Podzimek and Ondrej Kozina
- Release notes owner:
Tracking
- Last updated: 2017-02-13
- Tracking bug: #1421596
- Status: Change accepted
Separate Subpackage and Source Debuginfo
Allow to install just the debuginfo for a subpackage and/or without the source files. The debuginfo packages are huge because they contain debuginfo and all sources for all subpackages. Being able to install only the debuginfo for the subpackage that is installed reduces the size that needs to be downloaded to analyze, trace, profile or debug a program or core file. Some tracing and profiling tools don't need the actual source files to provide stack traces or insert probes. So installing the debugsources should be optional.
Owners
- Owner: Mark Wielaard and Neal Gompa
- Release notes owner:
Tracking
- Last updated: 2017-02-13
- Tracking bug: #1421595
- Status: Change accepted
Parallel Installable Debuginfo
debuginfo packages can be installed in parallel to make it easier to trace, profile and observe what programs are doing or to debug when they have crashed. That way debugging, tracing or profiling programs can be done independent of whether they are 32bit, 64bit, a slightly newer or older version than currently installed or even from a different architecture.
Owners
- Owner: Mark Wielaard
- Release notes owner:
Tracking
- Last updated: 2017-01-25
- Tracking bug: #1340819
- Status: Change accepted
Modular Release
The build, release, distribution, and update changes associated with and required for the [Changes/Modular_Server] and [Changes/Host_and_Platform] Changes.
Owners
- Owner: Ralph Bean
- Release notes owner:
Tracking
- Last updated: 2017-07-17
- Tracking bug: #1474935
- Status: Change accepted
Modular Server
The Modularity Working Group, Factory 2.0, Base Runtime, and Server Working Group would like to propose using the modular infrastructure for creating and delivering the Fedora Server Edition for Fedora 27. While we are still working through some of the kinks leading up to the release of Fedora 26, we believe that the changes to the infrastructure and technology implementations will be available with sufficient time to harden the components in time for the 27 release.
Owners
- Owner: Langdon White
- Release notes owner:
Tracking
- Last updated: 2017-07-17
- Tracking bug: #1474931
- Status: Change accepted
Host and Platform
Host and Platform is an evolution of the Base Runtime module concept introduced in Fedora 26 Boltron, splitting the minimal system further into independent modules allowing for greater flexibility when composing and maintaining the base system.
Owners
- Owner: Petr Šabata
- Release notes owner:
Tracking
- Last updated: 2017-07-17
- Tracking bug: #1474910
- Status: Change accepted
Golang 1.9
Rebase of Golang package to upcoming version 1.9 in Fedora 27, including rebuild of all dependent packages(pre-release version of Go will be used for mass rebuild).
Owners
- Owner: Jakub Čajka
- Release notes owner:
Tracking
- Last updated: 2017-07-17
- Tracking bug: #1474909
- Status: Change accepted
The GNU C Library version 2.26
Switch glibc in Fedora 27 to glibc version 2.26.
Owners
- Owner: Carlos O'Donell
- Release notes owner:
Tracking
- Last updated: 2016-07-04
- Tracking bug: #1474902
- Status: Change accepted
Fedora 27 Boost 1.64 upgrade
This change brings Boost 1.64.0 to Fedora 27. This will mean F27 ships with a recent upstream Boost release.
Owners
- Owner: Jonathan Wakely
- Release notes owner:
Tracking
- Last updated: 2017-07-17
- Tracking bug: #1474895
- Status: Change accepted
Drop 256term.sh
Do not install /etc/profile.d/256term.sh and /etc/profile.d/256term.csh.
Owners
- Owner: Zbigniew Jędrzejewski-Szmek
- Release notes owner:
Tracking
- Last updated: 2017-07-17
- Tracking bug: #1474884
- Status: Change accepted
32 bit UEFI Support
Some x86 systems ship with a 64 bit CPU, but 32 bit UEFI firmware. It is possible to use a 32 bit UEFI grub build to boot a 64 bit kernel and distribution on these systems. So far this setup has not been supported in Fedora. This feature is about adding support for installing and booting Fedora on this hardware.
Owners
- Owner: Peter Jones
- Release notes owner:
Tracking
- Last updated: 2017-07-21
- Tracking bug: #1474861
- Status: Change accepted
RPM 4.14
Update RPM to the upcoming 4.14 release.
Owners
- Owner: Igor Gnatenko, Florian Festi, Panu Matilainen
- Release notes owner:
Tracking
- Last updated: 2017-07-25
- Tracking bug: #1474836
- Status: Change accepted
Reduce Initial Setup Redundancy
Currently there is a high level of redundancy between the Anaconda installer and gnome-initial-setup. This change aims to eliminate these redundancies and streamline the initial user experience in Fedora Workstation.
Owners
- Owner: Michael Catanzaro
- Release notes owner:
Tracking
- Last updated: 2017-07-25
- Tracking bug: #1474787
- Status: Change accepted
NSS Default File Format SQL
Change the NSS library default to use the sqlite based data storage, when applications don't specify their preferred storage file format.
Owners
- Owner: Kai Engert
- Release notes owner:
Tracking
- Last updated: 2017-07-25
- Tracking bug: #1474771
- Status: Change accepted
Graphical Applications as Flatpaks
This change is to enable package maintainers to build Flatpaks of their applications and make those Flatpaks available for installation.
Owners
- Owner: Owen Taylor
- Release notes owner:
Tracking
- Last updated: 2017-07-25
- Tracking bug: #1474769
- Status: Change accepted
perl Package to Install Core Modules
dnf install perl will install all core Perl modules that come with Perl upstream sources.
Owners
- Owner: Petr Písař
- Release notes owner:
Tracking
- Last updated: 2017-06-26
- Tracking bug: #1464903
- Status: Change accepted
Node.js 8.x
Fedora 27 will be updated to Node.js 8.x, the latest LTS release of the platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications.
Owners
- Owner: Zuzana Svetlikova
- Release notes owner:
Tracking
- Last updated: 2017-06-13
- Tracking bug: #1461012
- Status: Change accepted
Ruby on Rails 5.1
Ruby on Rails 5.1 is the latest version of well known web framework written in Ruby.
Owners
- Owner: Pavel Valena, Vít Ondruch, Jun Aruga
- Release notes owner:
Tracking
- Last updated: 2017-06-05
- Tracking bug: #1458667
- Status: Change accepted
Arbitrary Branching
Tooling changes to support the new way of branching for Fedora 27
Owners
- Owner: Matt Prahl
- Release notes owner:
Tracking
- Last updated: 2017-06-05
- Tracking bug: #1458665
- Status: Change accepted
Switch libcurl back to OpenSSL
libcurl in Fedora currently uses the NSS (Network Security Services) library for TLS and cryptography. After implementing this change, libcurl will use OpenSSL instead of NSS.
Owners
- Owner: Kamil Dudka
- Release notes owner:
Tracking
- Last updated: 2017-04-25
- Tracking bug: #1445153
- Status: Change accepted
Switch libidn-using applications to IDNA2008
The proposed change is about deprecating libidn, which supports IDNA2003, and switch all applications using libidn, to libidn2 2.0.0, which supports IDNA2008.
Owners
- Owner: Nikos Mavrogiannopoulos, Robert Scheck
- Release notes owner:
Tracking
- Last updated: 2017-04-25
- Tracking bug: #1445151
- Status: Change accepted
No More Alphas
Fedora will no longer produce Alpha releases.
Owners
- Owner: Dennis Gilmore, Adam Williamson
- Release notes owner:
Tracking
- Last updated: 2017-03-16
- Tracking bug: #1432874
- Status: Change accepted
Category:ChangeAcceptedF27 and Category:SystemWideChange
Fedora 27 Accepted Self Contained Changes Proposals
These changes have been accepted by the Fedora Engineering Steering Committee for the Fedora 27 Release as Self Contained Changes.
Bodhi Non-RPM Artifacts
Bodhi, the Fedora Updates System, should be able to process more than just RPMs.
- Owner: Randy Barlow
- Last updated: 2017-03-21
- Completed: no
Chinese Serif Fonts
Fedora already provides default Chinese Sans fonts, now Fedora 27 will also provide default Chinese Serif fonts.
- Owner: Peng Wu
- Last updated: 2017-07-11
- Completed: yes
Decouple system java setting from java command setting
By default, Java applications installed from RPMs are run with JVM found on PATH. We propose to run them with default system JVM, not considering PATH. Users will still be able to override the default using JAVA_HOME environment variable as before.
- Owner: Mikolaj Izdebski
- Last updated: 2017-07-25
- Completed: yes
Improved Bay- and Cherry-Trail device support
Improve support for hardware using Intel Bay Trail and Cherry Trail SoCs.
- Owner: Hans de Goede
- Last updated: 2017-07-25
- Completed: yes
Java 9
Add a tech preview preview of the the upcoming version of Java (OpenJDK9) to Fedora 27
- Owner: Jiri Vanek
- Last updated: 2017-04-18
- Completed: yes
Making sudo pip Safe (Again)
At the present time, running sudo pip3 in Fedora is not safe. Pip shares its installation directory with dnf, can remove dnf-managed files and generally break the Python 3 interpreter. We propose a series of measures that will make it safe to use.
- Owner: Miro Hroncok
- Last updated: 2017-06-19
- Completed: yes
New default cipher in OpenVPN
Since the discovery of the SWEET32 flaw, ciphers using cipher-blocks smaller than 128-bits are considered vulnerable and should not be used any more. OpenVPN uses Blowfish (BF-128-CBC) as the default cipher, which is hit by the SWEET32 flaw. This proposal changes the default cipher to AES-256-GCM while in parallel allowing clients to connect using AES-256-CBC, AES-128-CBC or the deprecated BF-CBC,
- Owner: David Sommerseth
- Last updated: 2017-08-08
- Completed: yes
OpenSSH Server Crypto Policy
OpenSSH clients follow the system-wide crypto policy since Fedora 26. This F27 change modifies the openssh server configuration to adhere to the system-wide policy. That will allow openssh server configuration to adapt to the multiple security levels offered system-wide.
- Owner: Jakub Jelen
- Last updated: 2017-08-14
- Completed: yes
Platform Python Stack
A revisit of the System Python change from Fedora 24. It has been renamed from System Python to Platform Python not to collide with upstream PEP 432.
- Owner: Tomáš Orsava
- Last updated: 2017-08-11
- Completed: yes
Remove SSH-1 from OpenSSH clients
Upstream removes support for SSH-1 protocol and we plan to do the same in Fedora. The protocol is years obsolete and not even supported in current default binaries (only in openssh-clients-ssh1 subpackage).
- Owner: Jakub Jelen
- Last updated: 2017-07-25
- Completed: yes
Remove krb5-appl
Remove src:krb5-appl (produces packages krb5-appl-clients and krb5-appl-servers) from the distribution.
- Owner: Robbie Harwood (rharwood)
- Last updated: 2017-07-25
- Completed: yes
Replace Yumex-DNF with dnfdragora
Replace the current alternative graphical package manager.
- Owner: Christian Dersch <lupinix@fedoraproject.org>
- Last updated: 2017-04-04
- Completed: yes
Samba AD
Samba AD is an open source implementation of an Active Directory set of tools and protocols. It allows Windows clients to be enrolled and managed using native Windows tools. In addition, Samba AD can serve as a domain controller for Fedora workstations and servers utilizing DCERPC, LDAP and Kerberos.
- Owner: Andreas Schneider
- Last updated: 2017-07-25
- Completed: yes
aarch64 SBC (Single Board Computer) Disk Images
We will deliver the first supported SBC disk images for aarch64.
- Owner: Paul Whalen
- Last updated: 2017-08-08
- Completed: yes
libpinyin 2.1
libpinyin 2.1 will merge libzhuyin code and replace the package
- Owner: Peng Wu
- Last updated: 2017-07-12
- Completed: yes