After the Fedora Activity Day (FAD) for the Documentation Project. Wow, this was a great idea! It was great to have almost all of our heavy-hitters in one room for the day. Topics covered today were “What went wrong? What went right?” during the Fedora 11 release last week, things we need to figure out for the Fedora 12 release (which is coming up soon), and we learned how to create packages for Fedora. You can read our meeting summary on the wiki.
Unfortunately we didn’t have a lot of time this morning to cover everything but I hope that we can create a dialogue with the rest of the Docs Project community to cover these areas to improve our F12 release.
This afternoon, however, was very exciting for me. Packaging has been something that has been foreign to me since I joined the Project a couple of years ago. Those in attendance that had packaging experience instructed those of us who didn’t and we got to work packaging the remaining Zikula modules needed to stand up our new CMS solution. We all worked on the first one of which I submitted and then we all began work on additional modules (I’m still working on mine). Hopefully we can get these modules packaged up soon so we can get our CMS up and running on docs.fp.o.
All in all, we had a very productive day. I just wish everyone could have physically been in Clemson to attend this wonderful event. We did have some of our members attend remotely thanks to Talk, IRC, and Gobby. I wonder if this is something we can do “regularly” for its working and social benefits. I hope everyone learned something today. I know I learned a lot, myself.
- turn off root login via ssh (“PermitRootLogin no” in /etc/ssh/sshd_config and activate RSA authentication while I’m in there) (Don’t forget to restart the sshd service)
- drop all packets that don’t meet a rule in iptables (“:INPUT DROP [0:0]” and “FORWARD DROP [0:0]” in /etc/sysconfig/iptables) (don’t forget to restart iptables)
- allow users of the wheel group to have sudo access (visudo -> remove the “#” from in front of the line %wheel ALL=(ALL) ALL)
- add myself to the wheel group (usermod -aG wheel )
- yum install yum-fastestmirror yum-presto
- yum update
If you haven’t tried Presto, you are missing out! Presto is a yum plugin that allows you to only download the bits you need using deltarpm. I just installed F11 on my wife’s laptop and installed Evolution. Yum said 55M for download but with Presto-enabled repos it was only 1.5M or a savings of 98 percent! After the installation of F11 I ran yum update… 66M became 8.7M or a savings of 87 percent!
So if you have a slower Internet connection, and even if you don’t, I’d recommend two plugins for Yum: yum-fastestmirror, which will locate the fastest mirror to you and get your packages from there, and yum-presto. Both of these plugins will make your experience much faster.
I finally got all the kinks worked out of CVS and got all the bits uploaded. The Security Guide can be retrieved by going to http://docs.fedoraproject.org/security-guide/. Both HTML and PDF versions are available. Translations are ongoing but as soon as one hits 75% I’ll get those versions up as well.
Publican has been used to create over 300 documentation packages for Red Hat but none, really, for Fedora (I think Publican’s documentation is in the repo). Jeff Fearn closed a bunch of tickets over the last couple of weeks and fixed all of the problems we were seeing earlier today with the release of Publican-0.40. This is a two-fold win. The first is that I think I have all the issues fixed in the security guide package (there were some that were Publican issues and a lot that were not). The second is that the next documentation projects (SELinux?) will be a lot easier to get through the process.
There is still a lot of work to be done. Right now the text is being validated to make sure everything that is written is correct. After that is completed the sections will be rearranged and the languaged smoothed to create an easy to read document that will help readers with make decisions on their personal security initiatives.
We are targetting the big release to be ready in time for Fedora 11. If you would like a sneek peek, I have posted the SRPM, RPM, and PDF versions on my Fedora People site and the web version is available on the docs.fedoraproject.org website. We appreciate feedback via the Trac instance on Fedora Hosted but updates may not be worked on until after the main portion of work is completed.