This is a weekly report from the I&R (Infrastructure & Release Engineering) Team. We provide you both infographic and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.
Week: 28th April – 2nd May 2025
Infrastructure & Release Engineering
The purpose of this team is to take care of day to day business regarding CentOS and Fedora Infrastructure and Fedora release engineering work.
It’s responsible for services running in Fedora and CentOS infrastructure and preparing things for the new Fedora release (mirrors, mass branching, new namespaces etc.).
List of planned/in-progress issues
Fedora Infra
- In progress:
- Move copr_hypervisor group from iptables to nftables
- Several proxies are missing ipv6 addresses in DNS
- tmpwatch removed from ansible
- FedoraQA – Blockerbugs – OIDC setup
- please don’t remove enrolled centos machines from IPA in staging
- wiki upgrade before f40 eol
- FedoraQA – Testdays – OIDC setup
- Request #centos-proposed-updates:fedoraproject.org as additional address for #centos-proposed-updates:fedora.im
- redeploy aws proxies
- Disable self-serve project creation on pagure.io
- Link in staging distgit instance leads to prod auth
- re-add datagrepper nagios checks (and add to zabbix?)
- Fix logrotate on kojipkgs01/02
- 2025 datacenter move (IAD2->RDU3)
- Broken link for STG IPA CA certificate, needed for staging CentOS Koji cert
- [CommOps] Open Data Hub on Communishift
- retire easyfix
- Deploy Element Server Suite operator in staging
- Pagure returns error 500 trying to open a PR on https://src.fedoraproject.org/rpms/python-setuptools-gettext
- Create a POC integration in Konflux for fedora-infra/webhook-to-fedora-messaging
- maubot-meetings bot multi line paste is cut
- setup ipa02.stg and ipa03.stg again as replicas
- Move OpenShift apps from deploymentconfig to deployment
- The process to update the OpenH264 repos is broken
- httpd 2.4.61 causing issue in fedora infrastructure
- Support allocation dedicated hosts for Testing Farm
- EPEL minor version archive repos in MirrorManager
- Add fedora-l10n pagure group as an admin to the fedora-l10n-docs namespace projects
- vmhost-x86-copr01.rdu-cc.fedoraproject.org DOWN
- Add yselkowitz to list to notify when ELN builds fail
- Cleaning script for communishift
- Move from iptables to firewalld
- Port apps to OIDC
- Help me move my discourse bots to production?
- Replace Nagios with Zabbix in Fedora Infrastructure
- Migration of registry.fedoraproject.org to quay.io
- Done:
- Cannot update software due to 503 on https://mirrors.fedoraproject.org/metalink?repo=fedora-42&arch=x86_64
- 404 Errors for fedoraproject-updates-archive.fedoraproject.org
- [IPv6] mirrors.fedoraproject.org & mirrormanager.fedoraproject.org return 503 HTTP errors
- Request to increase disk space on fedorapeople.org
- Spam inside Desktop mailing list
- Silverblue upgrade (to 42)
- Provision f42-test
- Connection to pagure.io refused
- give Michael Armijo koji permissions for coreos repos
- Owner Access on Fedora Podcast Gitlab Repo
- bvmhost-s390x-01.stg can’t resolve log01 server
- admin access to https://github.com/fedora-infra/siguldry
- Fedora + EPEL Mirror Request – mirror.maeen.sa
- Planned Outage – firewall update / possible reboots – 2025-04-24 20:00UTC
- ostree repo for fedora-iot (aarch64) oudated/unmaintained?
- Find old docs content on proxies and remove it
- fedora-scm-requests repo moved?
- rpminspect task failing on stratisd bodhi updates in a consistent(?) manner
- mirror.gtlib.gatech.edu is listed as a Tier 1 mirror but hasn’t been updated for years
- Are fedora-rawhide-ppc64le composes broken?
CentOS Infra including CentOS CI
- In progress:
- Write a script to cleanup Duffy DB after retiring a pool
- Add proposed-updates c9s and c10s tags to hyperscale9s and hyperscale10s tags
- Missing s390x extras/extras-common repo
- Ensuring ansible automation in place can manage/control el10 nodes
- [spike] : investigating ppc64le kvm host option with el9/el10 (for Power10)
- (Cloud SIG) OKDerator CI/CD space
- [spike] : investigating needed deps (poetry) for duffy on el9
- [spike] : investigating options/alternatives for the upcoming DC move
- Release Improvements
- Done:
- Issue authentication against id.stg.centos.org
- [CloudSIG] Remove cloud9s-openstack-dalmatian-testing from inherited tags in cloud9s-openstack-epoxy-el9s-build
- download.autosd.sig.centos.org CNAME for cloudfront
- Reconcile duffy DB and AWS EC2 instance
- Create sig-council FAS group
- Fedora-messaging usage inventory (Fedora infra change)
- Upgrade our various OCP cluster to latest version from 4.16.x branch
- Decommission ppc64le duffy nodes in CI infra/env
- Upgrade our openshift cluster to supported version (aligned with rest of centos infra)
- Update Fedora-messaging TLS files due to Fedora infra change
Release Engineering
- In progress:
- Re-push root-6.34.08-4.fc42 to stable
- F42 Post Release Cleanup
- Fix OpenH264 tagging issues
- Turn EPEL minor branching scripts into playbooks
- Mass retirement of packages with uninitialized rawhide branch
- Please send openh264-2.6.0 to Cisco
- 300+ F42FTBFS bugzillas block the F41FTBFS tracker
- Packages that have not been rebuilt in a while or ever
- Send compose reports to a to-be-created separate ML
- 10 builds still koji tagged with signing-pending
- Could we have fedoraproject-updates-archive.fedoraproject.org for Rawhide?
- Investigate and untag packages that failed gating but were merged in via mass rebuild
- a few mass rebuild bumps failed to git push – script should retry or error
- Package retirements are broken in rawhide
- Update pungi filters
- Implement checks on package retirements
- Untag containers-common-0.57.1-6.fc40
- Provide stable names for images
- Packages that fail to build SRPM are not reported during the mass rebuild bugzillas
- When orphaning packages, keep the original owner as co-maintainer
- Create an ansible playbook to do the mass-branching
- RFE: Integration of Anitya to Packager Workflow
- Fix tokens for ftbfs_weekly_reminder. script
- Update bootloader components assignee to “Bootloader Engineering Team”for Improved collaboration
- Done:
- Remove f40 signing key from coreos-pool
- Stalled EPEL package request: python-json5
- Remove branch fix/sysusers in testcloud repository
- Enable epel10 branch for ipset package
- Request for permissions to access bodhi server
- Unretire gtranslator
- Stalled EPEL package: a2jmidid
- Orphan kdissert, flowcanvas
- Remove manually created f41/f42 branches from getmail6 repository
- Remove v4.3.0 and versionbump branches from pgcli repository
- Unretire rust-arraydeque
- Accidentally created a branch in `rust-tonic-types`
If you have any questions or feedback, please respond to this report or contact us on #redhat-cpe channel on matrix.
Start the discussion by commenting on the auto-created topic at discussion.fedoraproject.org