Hi everyone,
Welcome to the CPE team weekly project update mail!
Background:
The Community Platform Engineering group is the Red Hat team combining
IT and release engineering from Fedora and CentOS. Our goal is to keep
core servers and services running and maintained, build releases, and
other strategic tasks that need more dedicated time than volunteers
can give.
For better communication, we will be giving weekly reports to the
CentOS and Fedora communities about the general tasks and work being
done. Also for better communication between our groups we have
created #redhat-cpe on Freenode IRC! Please feel free to catch us
there, a mail has landed on both the CentOS and Fedora devel lists
with context here.
Note:
This document is currently built from individual reports rolled into a
google document which we edit and copy into a final document. We are
aware that this causes problems with some email readers, and are
working on a method to make this less problematic.
High Level Project Updates:
CentOS:
The team have been testing projects migration from repospanner to
locally hosted git repositores on git.dev.centos.org and come back
with a migration script/plan to unblock RCM
CentOS Stream
Scoping meetings are still ongoing
Fedora:
Rawhide Gating:
Bodhi was 5.1 released and is deployed in staging
Robosignatory is broken in staging preventing testing much there
Application Retirements
Elections
Elections being moved to Communishift really soon! Stay tuned!
Fedocal
Still no progress on kanban board last four weeks
https://teams.fedoraproject.org/project/fedora-calendar/kanban
Jlanda is still hitting permission error in communishift
https://pagure.io/fedora-infrastructure/issue/8274
Still working on running local instance
Nuancier
Benson Muite is now working on OIDC authentication
A PR will be created on Github to test if we can see the progress
New PR from sebwoj - Porting to Fedora messaging is under review
Pastebin
Still on track for December 1 modernpaste shutdown
GDPR and privacy centric conversations with respect to application
handovers have resulted in…..more conversations needed - shock :)
Misc
Bugzilla sync script has been resolved
Email inviting to review its change has been sent
New changes to src.fedoraproject.org deployed:
Ability to set the anitya monitoring status directly in the UI
Ability to adopt orphan (and not retired) packages directly in the UI
New changes to Pagure on the horizon:
New API endpoint to enable/disable git hooks
Ability to set dist-git in the default assignee overrides for bugzilla
EPEL 8 modularity
Updates can now be created in bodhi staging!
We are currently testing pushes/composes
We are also testing epel8-playground-modules composes
Aarch64 is now racked and networked
Koji
New koji owner script was debugged
Koji client was updated
Koji was also patched for the --title option fix
Configured migrations from Ansible/Jinja template
https://pagure.io/Fedora-Infra/distgit-bugzilla-sync/pull-request/1https://pagure.io/Fedora-Infra/distgit-bugzilla-sync/pull-request/3https://pagure.io/Fedora-Infra/distgit-bugzilla-sync/pull-request/11https://pagure.io/Fedora-Infra/distgit-bugzilla-sync/pull-request/14https://pagure.io/Fedora-Infra/distgit-bugzilla-sync/pull-request/16
Various Resolved Issues
https://pagure.io/mdapi/pull-request/91https://github.com/fedora-infra/bodhi/pull/3782
Comments? Suggestions? Feedback? Let Us Know!
Have a great weekend!
Aoife
--
Aoife Moloney
Feature Driver
Community Platform Engineering Team
Red Hat EMEA
Communications House
Cork Road
Waterford
From
https://blog.centos.org/2019/11/minutes-for-centos-board-of-directors-2019-…:
Public minutes
On 2019-11-13 theCentOS Board of Directors
<https://centos.org/about/governance/>held their first meeting following
the release of CentOS Linux 8 and announcement of CentOS Stream.
As covered in this meeting, the CentOS Board are taking on an initiative
to increase transparency of the working of the Board. This set of
minutes for the community and wider public is the first instance of new,
more transparent processes in action.
Topics covered in the meeting and via email are discussed below, and
remain open on the Board’s rolling agenda for future conversation and
actions:
1. Board membership:
1. The Board has been considering for some time adjusting the
membership of the Board, in particular by adding new Directors.
Discussions with potential new Directors will begin.
2. All Directors discussed the need for future leadership of the
CentOS Project to continue being able to straddle the project’s
traditional footing on one side, and help drive a vision for the
future on the other side.
2. Transparency initiatives:
1. All agree that the biggest need for transparency in the Project
is at the Board level.
1. Other groups e.g. SIGs are generally following good
transparency practices
2. Board Directors have been asked directly about this topic
and the issue of the Board not releasing minutes from meetings.
3. The Board’s infrequent meetings have not been configured to
easily generate public topics, since most technical and
day-to-day leadership happens in the SIGs especially the
Core SIG and QA SIG.
2. Next step -- improving Board meeting norms:
1. *AGREED:*Publish (for next and future meetings) that there
will be a meeting, and what the public portion of the agenda
is, in advance of the meeting.
2. *AGREED:*Publish a set of public minutes within 72 hours of
the conclusion of a Board meeting
3. *AGREED:*There will be a rolling element to the agenda so
that items are not dropped between meetings but rather
eventually addressed/resolved.
4. *ACTION*: Karsten to write and publish this set of public
meeting minutes
3. New branding work underway - Karsten briefed the Board on the
community efforts to consider the CentOS brand, logo, and overall
branding in light of the addition of CentOS Stream.
1. https://git.centos.org/centos/Artwork/issue/1
2. https://lists.centos.org/pipermail/centos-devel/2019-November/018098.html
3. *AGREED*: Board more actively drive approving/rejecting design
ideas.
4. *AGREED*: There will be a reasonable time for discussion around
the potential brand changes, and the Board will ensure the
discussion concludes in a timely manner.
--
Karsten Wade [he/him/his]| Senior Community Architect | @quaid
Red Hat Open Source Program Office (OSPO) : @redhatopen
https://community.redhat.com | https://next.redhat.com | https://theopensourceway.org
gpg: AD0E0C41 | https://red.ht/sig
Ok, folks, last call for content for the FOSDEM CentOS Dojo, January 31
in Brussels.
https://wiki.centos.org/Events/Dojo/Brussels2020
Note that as of right now, I'm going to have to cancel one of the two
rooms for the event, because we don't have enough content. So please
submit your proposals about the interesting things you're doing on
CentOS, so that we can put together another awesome event.
Thanks.
--
Rich Bowen - rbowen(a)redhat.com
@CentOSProject // @rbowen
859 351 9166
Hi,
is there any page like https://wiki.centos.org/About/Building_8
we can monitor for getting updates on CentOS 8.1 build?
Within oVirt project we are trying to plan for our 4.4 beta and since it
requires a few stuff that are only in 8.1 we'd like to align our schedule
to it.
Thanks,
--
Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
Red Hat EMEA <https://www.redhat.com/>
sbonazzo(a)redhat.com
<https://www.redhat.com/>*Red Hat respects your work life balance.
Therefore there is no need to answer this email out of your office hours.*
Happy Friday everyone!
Welcome to the CPE team weekly project update mail!
Background:
The Community Platform Engineering group is the Red Hat team combining
IT and release engineering from Fedora and CentOS. Our goal is to keep
core servers and services running and maintained, build releases, and
other strategic tasks that need more dedicated time than volunteers
can give.
For better communication, we will be giving weekly reports to the
CentOS and Fedora communities about the general tasks and work being
done. Also for better communication between our groups we have
created #redhat-cpe on Freenode IRC! Please feel free to catch us
there, a mail has landed on both the CentOS and Fedora devel lists
with context here.
Note:
This document is currently built from individual reports rolled into a
google document which we edit and copy into a final document. We are
aware that this causes problems with some email readers, and are
working on a method to make this less problematic.
High Level Project Updates:
CentOS:
The team have been testing migrating away from Repospanner
Wrote a PoC migration script (taking care also of
requests/tickets/forks repositories)
RCM confirmed that it works
Next step is testing on https://git.stg.centos.org and we hope to have
an ETA on a migration time soon
CentOS Stream
Scoping meetings are ongoing
Fedora:
F31 Upgrades & Reinstallations
Updated s390x buildvm’
Updated buildvmhost-s390x-01
Updated ppc9-01 to f31 and all guests to f31, added on bug about qemu
in f31 on ppc64le not being able to do pseries-4.1 guests (the
default), switched to pseries-4.0.
https://bugzilla.redhat.com/show_bug.cgi?id=1769600
Re-installed buildvm-aarch64-01/02/03 and buildvm-armv7-01/02/03 with
f31 and worked though issues with composes on them.
Rawhide Gating:
Bodhi 5.0 has been deployed for a week now and we are getting some
feedback on the new UI
We hope to incorporate some of this feedback in the 5.1 release
5.1 will include a fix needed by the CI pipeline
Ci pipeline on fedora-messaging
JMS plugin has been updated
That broke datagrepper: unix timestamp are in seconds, not
milliseconds and postgresql doesn’t like the year 51850
Fedora-messaging client on resultsdb had broke
Open ticket is for monitoring:
https://pagure.io/fedora-infrastructure/issue/8392
repoSpanner
83x performance patch submitted as a pull request and is awaiting review.
Once the 83x patch is merged, we hope that it will be possible to make
a release/deployment.
It is possible that it will still be too slow so our next idea for
improvement involves changing the API that nodes use to synchronize
objects with each other.
Application Retirements
Elections
Blocking issue was fixed https://pagure.io/fedora-infrastructure/issue/8253
Bcotton confirmed the fix is now in place - thanks Ben!
Fedocal
No progress on kanban board last four weeks
https://teams.fedoraproject.org/project/fedora-calendar/kanban
Jlanda is still hitting permission error in communishift
https://pagure.io/fedora-infrastructure/issue/8274
Working on running local instance
Nuancier
Benson Muite is now working on OIDC authentication
By creating a PR on Github, we should be able to see the progress
New PR from sebwoj - Porting to Fedora messaging
Pastebin
Magazine article posted after getting bounced between commblog and
magazine a few times.
On track for December 1 modernpaste shutdown
GDPR and privacy centric conversations are ongoing with respect to
application handovers
Misc
Introduction of a dedicated team for community issues:
The CPE Team have created a dedicated team to work through a backlog
of issues that are affecting the community.
The team has a 6 week plan ahead of them this side of the New Year
Check out our Kanban board:
https://teams.fedoraproject.org/project/community-fire-team/kanban
Our first priority task is to fix the bugzilla sync script
Got its own upstream project:
https://pagure.io/Fedora-Infra/distgit-bugzilla-sync/
We will be working on these items secondary to other work we have but
will try to get some of these issues resolved soon!
EPEL 8 modularity:
Modules are building in stg koji
Tagging is working
Bodhi testing is blocked on https://github.com/fedora-infra/bodhi/issues/3779
Nest steps are to test epel8 playground module composing
Comments? Suggestions? Feedback? Let Us Know!
Have a great weekend!
Aoife
--
Aoife Moloney
Feature Driver
Community Platform Engineering Team
Red Hat EMEA
Communications House
Cork Road
Waterford
We have to do some maintenance work on the node[s] hosting
git.centos.org to optimize the git storage layout : the goal is to get
better performances and also fix some issues reported by some of our users.
Worth knowing that ssh will be blocked to prevent git pushes and so
"freeze" the git repositories while they are reorganized.
Migration is scheduled for """"Monday November 25th, 7:00 am UTC time"""".
You can convert to local time with $(date -d '2019-11-25 7:00 UTC')
The expected "downtime" is estimated to ~60 minutes , time needed to
reflect the new git storage layout.
Thanks for your comprehending and patience.
on behalf of the Infra team,
--
Fabian Arrotin
The CentOS Project | https://www.centos.org
gpg key: 17F3B7A1 | twitter: @arrfab
The CentOS Atomic SIG has released an [updated
version](https://wiki.centos.org/SpecialInterestGroup/Atomic/Download)
of CentOS Atomic Host (7.1910), an operating system designed to run
Linux containers, built from standard CentOS 7 RPMs, and tracking the
component versions included in Red Hat Enterprise Linux Atomic Host.
CentOS Atomic Host includes these core component versions:
* atomic-1.22.1-29.gitb507039.el7.x86_64
* rpm-ostree-client-2018.5-2.atomic.el7.x86_64
* ostree-2019.1-2.el7.x86_64
* cloud-init-18.5-3.el7.centos.x86_64
* docker-1.13.1-103.git7f2769b.el7.centos.x86_64
* kernel-3.10.0-1062.4.3.el7.x86_64
* podman-1.4.4-4.el7.centos.x86_64
* flannel-0.7.1-4.el7.x86_64
* etcd-3.3.11-2.el7.centos.x86_64
## Download CentOS Atomic Host
CentOS Atomic Host is available as a VirtualBox or libvirt-formatted
Vagrant box, or as an installable ISO, or qcow2 image. For links to
media, see the [CentOS
wiki](https://wiki.centos.org/SpecialInterestGroup/Atomic/Download).
## Upgrading
If you're running a previous version of CentOS Atomic Host, you can
upgrade to the current image by running the following command:
```bash
# atomic host upgrade
```
## Release Cycle
The CentOS Atomic Host image follows the upstream Red Hat Enterprise
Linux Atomic Host cadence. After sources are released, they're rebuilt
and included in new images. After the images are tested by the SIG and
deemed ready, we announce them.
## Getting Involved
CentOS Atomic Host is produced by the [CentOS Atomic
SIG](http://wiki.centos.org/SpecialInterestGroup/Atomic), based on
upstream work from [Project Atomic](http://www.projectatomic.io/). If
you'd like to work on testing images, help with packaging,
documentation -- join us!
You'll often find us in #atomic and/or #centos-devel if you have
questions. You can also join the
[atomic-devel](https://lists.projectatomic.io/mailman/listinfo/atomic-devel)
mailing list if you'd like to discuss the direction of Project Atomic,
its components, or have other questions.
## Getting Help
If you run into any problems with the images or components, feel free
to ask on the [centos-devel](http://lists.centos.org/mailman/listinfo/centos-devel)
mailing list.
Have questions about using Atomic? See the
[atomic](https://lists.projectatomic.io/mailman/listinfo/atomic)
mailing list or find us in the #atomic channel on Freenode.
--
Jason Brooks
Community Architects & Infrastructure
Red Hat Open Source Program Office (OSPO)
https://community.redhat.com | https://osci.io
Hi to all,
Am I wrong or the CentOS AppStream repo is heavily lagging behind the
RedHat repos?
Some examples here:
- the php:7.2 critical security errata published on 2019-11-06 (that's
almost 2 weeks ago) [1] [2] is still unavailable in the CentOS AppStream
repo leaving systems vulnerable to an already exploited bug [3];
- (this is less critical IMHO) new yum modules published in EL8.1 on on
2019-11-05 (php:7.3 nginx:1.16, ruby:2.6, nodejs:12) are still unavailable
in the CentOS AppStream repo;
I'm wondering if it's unintended and justified by lack of time and
resources or it's a sneaky strategy to let users choose RHEL for running
production systems instead of CentOS.
I'm really sorry to say that but the issue described here and the lack of a
security errata bulletin [4], makes CentOS8 almost unusable on a production
environment.
Thanks for your attention.
Regards
Angelo Barney
[1] https://access.redhat.com/errata/RHSA-2019:3735
[2] https://nvd.nist.gov/vuln/detail/CVE-2019-11043
[3]
https://nextcloud.com/blog/nextcry-or-how-a-hacker-tried-to-exploit-a-nginx…
[4]
https://lists.centos.org/pipermail/centos-devel/2019-November/018053.html
Hi Everyone!
Travelling yesterday saw a delay in sending this weeks CPE email
blast, but nevertheless, here it is!
Hope everyone has been having a great weekend and if you have any
comments or feedback, please let me know- it is always welcome :)
Background:
The Community Platform Engineering group is the Red Hat team combining
IT and release engineering from Fedora and CentOS. Our goal is to keep
core servers and services running and maintained, build releases, and
other strategic tasks that need more dedicated time than volunteers
can give.
For better communication, we will be giving weekly reports to the
CentOS and Fedora communities about the general tasks and work being
done. Also for better communication between our groups we have
created #redhat-cpe on Freenode IRC! Please feel free to catch us
there, a mail has landed on both the CentOS and Fedora devel lists
with context here.
Note:
This document is currently built from individual reports rolled into a
google document which we edit and copy into a final document. We are
aware that this causes problems with some email readers, and are
working on a method to make this less problematic.
High Level Project Updates:
CentOS:
The team is busy working on 8.1
Comps were produced and in git repo for next compose (pungi)
Transmodrify tool rewritten to match the mbs/rpm needs
Analyzing what RH hasn’t pushed and so that is needed
Builds started and are being worked on for x86_64, ppc64le, aarch64
and armhfp architectures
https://koji.mbox.centos.org/koji/indexhttps://koji.armhfp-mbox.centos.org/koji/index
Infrastructure :
Dealing with hardware issues on storage box , so opening tickets with
the vendor and internal IT to play MITM and try to get this solved
Dealing with RCM having still issues to push to git.centos.org for
some identified packages (reproducible) so now waiting on Repospanner
maintainer to come with a fix and an ETA for new release that would
fix it
Trying to provision some EC2 instances and working with Fedora to get
proper access to be able to have proper AWS access for CentOS (also
for S3)
Working on various PR for cbs-content-control and/or issues with mash
on https://cbs.centos.org (now resolved)
Fedora:
Rawhide Gating:
Bodhi 5.0 has been deployed in production
We received some feedback about the changes in the UI and are looking
at how we can address them.
We are working on documenting on how packagers will use Bodhi for
multi-builds updates in rawhide:
https://github.com/fedora-infra/bodhi/issues/2322https://fedoraproject.org/w/index.php?title=User:Nphilipp/Package_update_HO…
A 5.1 release is scheduled, likely some time next week, to address
some of the issues encountered and fixed in the 5.0 release.
repoSpanner
Our team came across some test reliability issues last week & these
are impeding progress on the 83x patch.
Some more debugging/discussions around RCMs pushes that seem to be
either very slow or hanging but the team is looking into some
solutions
Some progress was also made on the 83x patch however and we managed to
fix one unreliable test.
Application Retirements
Elections
Blocking issue was fixed (https://pagure.io/fedora-infrastructure/issue/8253)
Fedocal
jlanda hitting permission error in communishift
https://pagure.io/fedora-infrastructure/issue/8274
Nuancier
Benson Muite is now working on OIDC authentication
Pastebin
An article will be posted to Magazine instead - keep an eye out!
GDPR policies are still being looked into so stay tuned for updates
soon. This unfortunately takes some time given the legal perspective
needed!
Misc
EPEL 8 modularity
EPEL8 module builds are working in staging & composes should be closed
There are now tags added to staging in koji
Bodhi configs have been updated
Pungi configs for epel8-playground are updated
Bug about zchunk update for EPEL-7 was fixed
https://github.com/fedora-infra/bodhi/pull/3692
Fedora Docs
Multiple small PRs were merged where people were being sent to Fedora
docs after F31 came out & below are all fixed:
https://pagure.io/fedora-docs/system-administrators-guide/issue/40https://pagure.io/fedora-docs/system-administrators-guide/issue/39https://pagure.io/fedora-docs/system-administrators-guide/issue/35https://pagure.io/fedora-docs/install-guide/issue/33https://pagure.io/fedora-docs/system-administrators-guide/issue/25https://pagure.io/fedora-docs/system-administrators-guide/issue/23https://pagure.io/fedora-docs/quick-docs/issue/155
Kindest regards,
Aoife
--
Aoife Moloney
Feature Driver
Community Platform Engineering Team
Red Hat EMEA
Communications House
Cork Road
Waterford