This is a weekly report from the I&R (Infrastructure & Release Engineering) Team. We provide you both infographic and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.
Week: 14 July – 18 July 2025
Infrastructure & Release Engineering
The purpose of this team is to take care of day to day business regarding CentOS and Fedora Infrastructure and Fedora release engineering work.
It’s responsible for services running in Fedora and CentOS infrastructure and preparing things for the new Fedora release (mirrors, mass branching, new namespaces etc.).
List of planned/in-progress issues
Fedora Infra
- In progress:
- Packager Dashboard out of sync
- [FMTS] TLS certificate for centos-koji service is about to expire in 30 days
- [FMTS] TLS certificate for git-hooks service is about to expire in 30 days
- [FMTS] TLS certificate for batcave service is about to expire in 30 days
- [FMTS] TLS certificate for gitlab-centos service is about to expire in 30 days
- [FMTS] TLS certificate for fmc service is about to expire in 30 days
- Please register my testing instance of Fedora Infrastructure apps to OIDC
- Forgejo: Owner access to @jflory7 for @CommOps
- Move copr_hypervisor group from iptables to nftables
- tmpwatch removed from ansible
- Link in staging distgit instance leads to prod auth
- re-add datagrepper nagios checks (and add to zabbix?)
- Fix logrotate on kojipkgs01/02
- 2025 datacenter move (IAD2->RDU3)
- Broken link for STG IPA CA certificate, needed for staging CentOS Koji cert
- [CommOps] Open Data Hub on Communishift
- retire easyfix
- Deploy Element Server Suite operator in staging
- Pagure returns error 500 trying to open a PR on https://src.fedoraproject.org/rpms/python-setuptools-gettext
- maubot-meetings bot multi line paste is cut
- Move OpenShift apps from deploymentconfig to deployment
- The process to update the OpenH264 repos is broken
- httpd 2.4.61 causing issue in fedora infrastructure
- Support allocation dedicated hosts for Testing Farm
- EPEL minor version archive repos in MirrorManager
- Add fedora-l10n pagure group as an admin to the fedora-l10n-docs namespace projects
- vmhost-x86-copr01.rdu-cc.fedoraproject.org DOWN
- Add yselkowitz to list to notify when ELN builds fail
- Cleaning script for communishift
- Move from iptables to firewalld
- Port apps to OIDC
- Help me move my discourse bots to production?
- Migration of registry.fedoraproject.org to quay.io
- Done:
- Clicking login on https://kerneltest.fedoraproject.org/ leads to an error 400 – Bad Request
- The Github webhooks into OpenShift fail with 403
- Blocking spam user david80098
- Blockerbugs – update API tokens
- Login error at fedora weblate site
- Some of HyperKitty’s OAuth2 integrations are (sometimes) unconnectable.
- Nagios doesn’t like the new DRAC hosts, returns 400
- koji rpminfo returns 403 forbidden
- OOM on mailman3
- Submission for testing to bodhi seems stuck…
- torrent01 server is not receiving recent changes.
- On staging, the IPA servers can’t do ldap queries on each other
- Some mirrors are not up-to-date
- Mailing list moderation consistently fails
- ipa users and groups cannot be added.
- pkgs/dns: SSH access warns about wrong host key in SSHFP resource record
- Transfer ownership of kde-sig resources (mailing list, group, etc.) from rdieter to ngompa
- tar tool missing at fedorapeople.org
- Is Hyperkitty search for the devel@ broken?
- [FMTS] TLS certificate for mbs-private-queue service is about to expire in 30 days
- power off iad2 hosts
- Can’t login to COPR following datacenter move
- Info links in koji are forbidden
- Staging resultsdb is crashing in a loop
- Decommission provisioning.fp.org
CentOS Infra including CentOS CI
- In progress:
- Done:
- Migrate koji infra auth from REDHAT.COM to IPA.REDHAT.COM
- New tags needed for Sama v4.22 and v4.21 in Storage SIG for CentOS Stream 10
- investigate non working gssapi/kerberos auth passthrough on id.centos.org
- Upgrade our various OCP clusters to latest version from 4.18.x branch
- Request to update buildroots for Gluster in the Storage SIG
Release Engineering
- In progress:
- When processing stalled EPEL package requests, make the requester EPEL bugzilla override
- golang-helm-3 not retired properly
- Merge f43-perl side tag into f43
- Packages containg a “+” do not have a f42 branch
- Transfer/orphan packages owned by rdieter
- F43 system-wide change: GNU Toolchain update for F43 https://fedoraproject.org/wiki/Changes/GNUToolchainF43
- `–no-git-branch` option to fedpkg request-branch and creating the branch manually doesn’t work as expected
- Broken fork
- F39 Archives are still not cleaned up
- Fedora-KDE-42-1.1-x86_64-CHECKSUM has wrong ISO filename
- F40 end of life
- Turn EPEL minor branching scripts into playbooks
- Mass retirement of packages with uninitialized rawhide branch
- 300+ F42FTBFS bugzillas block the F41FTBFS tracker
- Packages that have not been rebuilt in a while or ever
- Send compose reports to a to-be-created separate ML
- Could we have fedoraproject-updates-archive.fedoraproject.org for Rawhide?
- Investigate and untag packages that failed gating but were merged in via mass rebuild
- a few mass rebuild bumps failed to git push – script should retry or error
- Package retirements are broken in rawhide
- Update pungi filters
- Implement checks on package retirements
- Untag containers-common-0.57.1-6.fc40
- Provide stable names for images
- Packages that fail to build SRPM are not reported during the mass rebuild bugzillas
- When orphaning packages, keep the original owner as co-maintainer
- Create an ansible playbook to do the mass-branching
- RFE: Integration of Anitya to Packager Workflow
- Fix tokens for ftbfs_weekly_reminder. script
- Update bootloader components assignee to “Bootloader Engineering Team”for Improved collaboration
- Done:
- `python-mpd-0.2.1-43.fc43` be tagged into the `f43-build` tag
- Stalled EPEL package: dbus-test-runner
- Stalled EPEL package: libfaketime
- Stalled EPEL package: range-v3
- Stalled EPEL package: libayatana-ido
- Stalled EPEL package: libayatana-appindicator
- Stalled EPEL package: libayatana-indicator
- Unretire flatpak-runtime-config
- Stalled package epel10 python-rx
- Request the permissions to edit packages on dist-git and be able to unblock tags in Koji
- Unretire mygui
- Add https://status.fedoraproject.org/ link to new issue template
- Stuck update
- Change proposal: Drop i686 support
- msedit: Delete commit
If you have any questions or feedback, please respond to this report or contact us on #redhat-cpe channel on matrix.
Start the discussion by commenting on the auto-created topic at discussion.fedoraproject.org