This is a weekly report from the I&R (Infrastructure & Release Engineering) Team. It also contains updates for CPE (Community Platform Engineering) Team as the CPE initiatives are in most cases tied to I&R work.

We provide you both infographic and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.

Week: 03 June – 07 June 2024

Infrastructure & Release Engineering

The purpose of this team is to take care of day to day business regarding CentOS and Fedora Infrastructure and Fedora release engineering work.
It’s responsible for services running in Fedora and CentOS infrastructure and preparing things for the new Fedora release (mirrors, mass branching, new namespaces etc.).
List of planned/in-progress issues

Fedora Infra

• In progress:
  • rhel7 EOL
  • Migration of registry.fedoraproject.org to quay.io
  • add monitoring for dnf countme
  • Replace Nagios with Zabbix in Fedora Infrastructure
  • notifications do not notify
  • PDC retirement
  • Move from iptables to firewalld
  • fedoraplanet.org: Upgrade Venus to Pluto
  • Move mailman to newer release of Fedora or CentOS
  • Setup RISC-V builder(s) VM in Fedora Infrastructure
  • Update compose hosts to get latest pungi release (4.6.0)
  • Deploy new sign hardware/software
  • Commits don’t end up on the scm-commits list
  • Create monitoring tool for rabbitmq certificates
  • Request for new FAS group: miracle-sig
  • Password reset issues on accounts.centos.org
  • Drop of traffic since 30th May
  • Private mirror check-in with mirrormanager fails
  • epel.io redirect
  • Upgrade wiki
  • Password reset issues on accounts.centos.org
• Done:
  • Replace failed drive in bvmhost-x86-01.stg.iad2.fedoraproject.org
  • Kanban – OpenShift app bringup
  • Still CC’ed in Chromium security bugs even though I’m not in points of contact anymore
  • Bastion’s TLS cert has expired
  • release-monitoring.org offline
  • New “pkgdb” group: coreos-sig
  • epel-packagers-sig sponsors
  • Toddlers are not processing – gdeschner@redhat.com is disabled in ldap.corp.redhat.com
  • Logging code errors when doing pushes on src.fp.o
  • Running into `Errors during downloading metadata for repository ‘epel’`
  • mildly urgent: proxy/cache Discussion URLs hit by start.fedoraproject.org

CentOS Infra including CentOS CI

• In progress:
  • c8s/c7 EOL infrastructure planning
  • Review all our ansible infra roles pointing to mirror.centos.org
  • Prepare CBS c10s koji tags
  • SIGs/releng : modify releng/signing process 
  • prepare c8s/c7 EOL for CI infra
  • Archive CentOs Stream 8 builds to secondary volume
• Done:
  • SIGs/releng : modify releng/signing process 
  • Hyperscale docs generation seems stuck
  • upgrade pagure instances with new release

Release Engineering

• In progress:
  • From the releng meeting yesterday, some upcoming work from epel10 will need releng assistance, this will be discussed more in the next meeting. Carl will be filing tickets for each individual item of work, later on, we plan to document this.
  • Packages that fail to build SRPM are not reported during the mass rebuild bugzillas
  • i686 builders need to use 32-bit inode numbers
  • When orphaning packages, keep the original owner as co-maintainer
  • Use an automated script to control checksums of compose images
  • Create an ansible playbook to do the mass-branching
  • Package retirements are broken in rawhide
  • Implement checks on package retirements
  • Support for self-service package un-retirement
  • Update bootloader components assignee to “Bootloader Engineering Team”for Improved collaboration
  • Cleaning old stuff from koji composes directories
  • Untag containers-common-0.57.1-6.fc40
  • Renaming distribution media for Fedora Server
  • Please send openh264 2.4.1 builds to Cisco
• Done:
  • F38 End of Life
  • Unretire rust-lipsum
  • Unretire mkdocs
  • Please block packages in epelX-build that were blocked in epelX
  • Yet another accidentally-created branch
  • SCM request failed due to expired token
  • Fixes for release-candidate.sh in pungi-fedora
  • Get many error messages when push the private branch to the fork libthai repo
  • scm request failed: “Bugzilla reviewer is not tied to a user in FAS”
  • Remove f38 signing key from coreos-pool
  • reboot respins01.fedoracloudinfrastructure.org
  • archful builds fail in koji
  • Extend sync-latest-container-base-image.sh to publish native OCI atomic desktop containers, get rid of sync-ostree-base-containers.sh

CPE Initiatives

EPEL

Extra Packages for Enterprise Linux (or EPEL) is a Fedora Special Interest Group that creates, maintains, and manages a high quality set of additional packages for Enterprise Linux, including, but not limited to, Red Hat Enterprise Linux (RHEL), CentOS, Scientific Linux (SL) and Oracle Linux (OL).

Updates

• Meeting this past Monday with Adrian Reber and Aurelien Bompard to discuss EPEL minor version implementation in MirrorManager
• Rebuilt busybox and apcupsd to migrate them from epel8-next to epel 8
• Set up demo of releasever_minor for EPEL 10 repo file
• Updated awscli to work with rebased botocore in EPEL 9
• Updated epel-packagers-sig sponsors to match EPEL Steering Committee members
• Updated rust2rpm to no use the SourceLicense field with vendored sources

If you have any questions or feedback, please respond to this report or contact us on #redhat-cpe channel on matrix.