This is a weekly report from the I&R (Infrastructure & Release Engineering) Team. It also contains updates for CPE (Community Platform Engineering) Team as the CPE initiatives are in most cases tied to I&R work.

We provide you both infographic and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.

Week: 01 – 05 July 2024

Infrastructure & Release Engineering

The purpose of this team is to take care of day to day business regarding CentOS and Fedora Infrastructure and Fedora release engineering work.
It’s responsible for services running in Fedora and CentOS infrastructure and preparing things for the new Fedora release (mirrors, mass branching, new namespaces etc.).
List of planned/in-progress issues

Fedora Infra

• In progress:
  • Get replacement PSU on the vmhost-x86-copr01 server.
  • rhel7 EOL
  • Migration of registry.fedoraproject.org to quay.io
  • add monitoring for dnf countme
  • Replace Nagios with Zabbix in Fedora Infrastructure
  • notifications do not notify
  • PDC retirement
  • Move from iptables to firewalld
  • Setup RISC-V builder(s) VM in Fedora Infrastructure
  • Update compose hosts to get latest pungi release (4.6.0)
  • Deploy new sign hardware/software
  • Commits don’t end up on the scm-commits list
  • Create monitoring tool for rabbitmq certificates
  • Request for new FAS group: miracle-sig
  • Password reset issues on accounts.centos.org
  • Private mirror check-in with mirrormanager fails
  • rhel9 adoption
  • How do I set up FAS login for discussion.stg.fedoraproject.org?
  • Private mirror check-in with mirrormanager fails
  • Still CC’ed in Chromium security bugs even though I’m not in points of contact anymore
  • EPEL minor version archive repos in MirrorManager
  • Cleaning script for communishift
  • Grant additional permissions to the fedimg AWS role
  • Moderating mailing list viewing message shows “This held message has been lost.”
  • Mailman fedmsg-archiver error
  • release-monitoring.org crawlers seem to not be running since ~June 26
  • Update Fedora Planet wiki
• Done:
  • add monitoring for dnf countme
  • Please upgrade mailman for lists.fedoraproject.org to fix ARC signing
  • fedoraplanet.org: Upgrade Venus to Pluto
  • Move mailman to newer release of Fedora or CentOS
  • rhel7 – Fedora people
  • rhel7 – sundries servers
  • rhel7 EOL – mirrormanager
  • Test downgrade kernel on a i686 koji builder
  • Toddlers are stuck in production
  • Enabling github webhook at github2fedmsg is erroring
  • Fedora repositories. Is my server blocked?
  • Data Analysis Images broken
  • Test access to AWS
  • Planned Outage – mailman – 2024-06-27 10:00 UTC
  • Spam from two accounts on pagure.io
  • Planned Outage – fedorapeople.org – 2024-06-27 21:00 UTC
  • fedpkg clone failing
  • lists.fedorahosted.org login doesn’t work
  • ostree slow
  • New SSH keys for fedorapeople.org
  • fedora media writer files seem to missing
  • charan chintu chintucharan844@gmail.com spam mail
  • https://lists.fedoraproject.org says “503 backend fetch failed”
  • SPAM from napallam jane napallamjane@gmail.com via lists.fedoraproject.org
  • Spam on Fedora Users list
  • Add an ‘authorizer’ OIDC client for kerneltest

CentOS Infra including CentOS CI

• In progress:
  • prepare c8s/c7 EOL for CI infra
  • Decommission old dedicated hardware used for c7/c8s builds
• Done:
  • Working with Dell tech support to fix power issue with server
  • c8s/c7 EOL infrastructure planning
  • Stream third-party mirrors ACL update
  • Archive all CentOS Stream 8 builds to tier3 storage/archive volume
  • Simple redirect for forums.centos.org to Fedora discourse
  • stream8, stream9, and stream10 BuildTargets and Tags needed for nfs-ganesha-6
  • Modify www.centos.org task to not display legacy third-party mirrors
  • CBS rhel repos not updated
  • Decommission legacy mirrorlist.centos.org infra
  • Decommission legacy torrent trackers
  • fermilab mirror: @ERROR: Unknown module ‘CentOS-Stream-All’
  • Decommission some sponsored servers

Release Engineering

• In progress:
  • Packages that fail to build SRPM are not reported during the mass rebuild bugzillas
  • i686 builders need to use 32-bit inode numbers
  • When orphaning packages, keep the original owner as co-maintainer
  • Use an automated script to control checksums of compose images
  • Create an ansible playbook to do the mass-branching
  • Package retirements are broken in rawhide
  • Implement checks on package retirements
  • Update bootloader components assignee to “Bootloader Engineering Team”for Improved collaboration
  • Cleaning old stuff from koji composes directories
  • Untag containers-common-0.57.1-6.fc40
  • Renaming distribution media for Fedora Server
  • Remove PDC from package retirement process
  • Fix tokens for ftbfs_weekly_reminder. Script
  • Fedora-34-Beta .composeinfo file
  • Publish x86_64/aarch64 containers to the new AWS container repo
  • Update block_retired.py to use bodhi api
  • orphan-all-packages.py should remove bugzilla_contact entries from fedora-scm-requests as well
  • Fedora 40 Mass Branching Tracker
  • Retire EPEL 8 Next
  • unmaintained bot account: dummy-test-package-gloster gating pipeline tests broken
  • Unretire rpms/fbf-mukti-fonts
  • Drop modularity from EPEL8.
• Done:
  • Unretire rpms/uniol-fonts
  • Unretire rpms/fbf-mukti-fonts
  • Can we have `dnf5 copr` command in the Fedora Container?
  • Please provide a container image variant with `dnf5-plugins` in it
  • F41 System-Wide Change: Mark Fedora KDE AArch64 as Release Blocking
  • PDC product_versions still says F38 is active release
  • Still on Bugzilla CC-list of package I no longer have a role in
  • [Critical] Fedora Pagure dist-git is completely broken
  • Unretire rpms/rust-lev_distance
  • Untag NetworkManager-openvpn-1.12.0-1.fc41 and NetworkManager-openvpn-1.12.0-1.eln141
  • BuildError: package act not in list for tag epel9-build-side-91723
  • Unretire openjpeg
  • PDC product_versions still says F38 is active release

CPE Initiatives

EPEL

Extra Packages for Enterprise Linux (or EPEL) is a Fedora Special Interest Group that creates, maintains, and manages a high quality set of additional packages for Enterprise Linux, including, but not limited to, Red Hat Enterprise Linux (RHEL), CentOS, Scientific Linux (SL) and Oracle Linux (OL).

Updates

• Refinement of fedpkg pull request to add EPEL 10 minor version support
• Packager workflow coaching session to update the butt package
• Backport fix for CVE-2022-24761 to python-waitress in EPEL 7
• Obsolete epel-next-release subpackage for EPEL 8 Next retirement

Community Design

CPE has few members that are working as part of Community Design Team. This team is working on anything related to design in Fedora Community.

Updates

• Cast your vote in this fedora wallpaper poll to find F42’s inspiration!
• Flock 2024 assets in progress! 🐤 ticket here
• Podman Desktop 🦭
  • Reviewing experimental light mode ☀️
  • Working on consistency across pages

List of new releases of apps maintained by CPE

• Minor update of Dist Git from 1.13 to 1.14 on 2024-07-03: https://pagure.io/pagure-dist-git/commits/1.14

If you have any questions or feedback, please respond to this report or contact us on #redhat-cpe channel on matrix.