This is a weekly report from the I&R (Infrastructure & Release Engineering) Team. It also contains updates for CPE (Community Platform Engineering) Team as the CPE initiatives are in most cases tied to I&R work.

We provide you both infographic and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.

Week: 06 May – 10 May 2024

Infrastructure & Release Engineering

The purpose of this team is to take care of day to day business regarding CentOS and Fedora Infrastructure and Fedora release engineering work.
It’s responsible for services running in Fedora and CentOS infrastructure and preparing things for the new Fedora release (mirrors, mass branching, new namespaces etc.).
List of planned/in-progress issues

Fedora Infra

• In progress:
  • Zabbix: putting missing configuration under source control.
  • Zabbix: template for handling external hosts outside iad2.
  • rhel7 EOL
  • Migration of registry.fedoraproject.org to quay.io
  • add monitoring for dnf countme
  • Replace Nagios with Zabbix in Fedora Infrastructure
  • notifications do not notify
  • DNF countme minor changes post migration
  • PDC retirement
  • Move from iptables to firewalld
  • fedoraplanet.org: Upgrade Venus to Pluto
  • Move mailman to newer release of Fedora or CentOS
  • Setup RISC-V builder(s) VM in Fedora Infrastructure
  • Update compose hosts to get latest pungi release (4.6.0)
  • Deploy new sign hardware/software
  • Commits don’t end up on the scm-commits list
  • Create monitoring tool for rabbitmq certificates
• Done:
  • Flathub reverse proxy for infra (openQA)
  • rhel7 EOL – Badges
  • logrotate not working on proxy31
  • FAMNA Nextcloud OIDC for FAS
  • Deploy new cloud image upload service
  • remap gitlab permission groups for the ai-ml-sig
  • missing matrix address
  • Issues with syncing Rawhide and ELN into Red Hat Beaker
  • iddev.fedorainfracloud.org seems to be offline
  • [FAS] Updating community-blog sponsors
  • MDAPI v3.1.6a1 deployed on production environment
  • RabbitMQ monitoring has been setup on Zabbix

CentOS Infra including CentOS CI

• In progress:
  • c8s/c7 EOL infrastructure planning
  • Review all our ansible infra roles pointing to mirror.centos.org
  • Set up compose testing for c10s
  • koji set-build-volume throws errors for some builds 
• Done:
  • Keeping builds and reducing loads on mirror
  • updating ci openshift cluster to maintained release
  • Upgrade Stream openshift cluster to supported release

Release Engineering

• In progress:
  • Packages that fail to build SRPM are not reported during the mass rebuild bugzillas
  • Silverblue aarch64 installer image compose always fails on F38 and Rawhide
  • Sync RCs to alt/stg dl.fp.o
  • i686 builders need to use 32-bit inode numbers
  • Fixes for release-candidate.sh in pungi-fedora
  • When orphaning packages, keep the original owner as co-maintainer
  • Emit fedmsg when candidate composes are synced to stage
  • Publish “latest” tag to quay.io/fedora/fedora
  • Use an automated script to control checksums of compose images
  • Create an ansible playbook to do the mass-branching
  • Package retirements are broken in rawhide
  • Implement checks on package retirements
  • Support for self-service package un-retirement
  • Cleanup post F40 Release
• Done:
  • CVE-2024-3094 Impact on Container Registry Layers
  • respins01.fedorainfracloud.org appears to be down again
  • Please remove me from gnumeric
  • Problem with new package repo error
  • Unretire python-oslo-messaging
  • Unretire rpms/php-psr-http-client
  • Unorphan tests/rust
  • create EPEL 9.3 archive snapshot

CPE Initiatives

Community Design

CPE has few members that are working as part of Community Design Team. This team is working on anything related to design in Fedora Community.

Updates

• Avocado-framework logo and website design work #146
• RH Summit showcasing UI and logo/graphic work done over the last few months 🤩 Some links:
  • Getting started with Podman AI Lab
    • Video: Getting Started with AI Lab on Podman Desktop
  • Podman Desktop brings the Red Hat Developer Subscription to your fingertips
  • Introducing image mode for RHEL and bootable containers in Podman Desktop