devel March 2020

devel@lists.centos.org

43 participants
32 discussions

Re: [CentOS-devel] The Git forge decision (was CPE Weekly: 2020-03-28)
by Neal Gompa 30 Mar '20

30 Mar '20

On Mon, Mar 30, 2020 at 8:13 AM Nicolas Mailhot via devel <devel(a)lists.fedoraproject.org> wrote: > > Le dimanche 29 mars 2020 à 23:47 -0400, Neal Gompa a écrit : > > > > > As a General User > > > I want to access repos fully over https > > > For environments where SSH is blocked > > > > I would be really curious if the Red Hat Infrastructure Security guys > > have changed their opinion on this after four years of blocking the > > development of this feature in Pagure. The two major reasons we don't > > have this in Pagure are: > > Neal, > > Security is the usual excuse not to implement stuff. That does not work > when competing with others that did their homework. As you noted > yourself ssh accesss is not blameless either. > > Gitlab and Github work in https mode. Pagure does not. End of story. > > Expecting others to hole their security with corkscrew because of the > ssh holy cow was never going to impress any third party. > You don't have to tell me, I already know. It was intentionally not implemented. And even with all that, we *do* have HTTPS through SSO on src.fp.o. We just don't have it on pagure.io. Don't expect it to be available with the move to GitLab. GitLab admins have a toggle they can use to disable HTTPS pushing for policy reasons, and I will strongly bet on it being flipped so that HTTPS pushing will not be available in our GitLab. -- 真実はいつも一つ！/ Always, there's only one truth!

1 0

Git Forge Decision from the CPE Team
by Leigh Griffin 30 Mar '20

30 Mar '20

Hi everyone, Thank you for your patience while the CPE Team worked through an incredible number of requirements from multiple stakeholder sources. On Friday evening we announced on the CentOS Blog <https://blog.centos.org/2020/03/git-forge-decision/> our decision to adopt Gitlab as our Git Forge and to retain pagure.io to ultimately hand over to the Community to maintain. It wasn't an easy decision by any stretch of the imagination and we hope that the compromise that we are striking will help to allow Pagure flourish and to give a choice of Forges for your usage. I'm happy to field any questions or comments about this decision. Kind regards, Leigh, on behalf of the CPE Team -- Leigh Griffin Engineering Manager Red Hat Waterford <https://www.redhat.com/> Communications House Cork Road, Waterford City lgriffin(a)redhat.com M: +353877545162 IM: lgriffin @redhatjobs <https://twitter.com/redhatjobs> redhatjobs <https://www.facebook.com/redhatjobs> @redhatjobs <https://instagram.com/redhatjobs> <https://red.ht/sig>

1 0

CPE Weekly: 2020-03-28
by Aoife Moloney 28 Mar '20

28 Mar '20

--- title: CPE Weekly status email tags: CPE Weekly, email --- # CPE Weekly: 2020-03-06 Background: The Community Platform Engineering group is the Red Hat team combining IT and release engineering from Fedora and CentOS. Our goal is to keep core servers and services running and maintained, build releases, and other strategic tasks that need more dedicated time than volunteers can give. For better communication, we will be giving weekly reports to the CentOS and Fedora communities about the general tasks and work being done. Also for better communication between our groups we have created #redhat-cpe on Freenode IRC! Please feel free to catch us there, a mail has landed on both the CentOS and Fedora devel lists with context here. ### CentOS * ppc64le and aarch64, 8 and 8-stream nodes now available in cico for tenants to checkout. -- Email sent to ci-user list * New signing for SIGs (through https://cbs.centos.org) live this week! ### CentOS Stream * Qt5.12 pushed in response to an internal request * NetworkManager re-imported ## Fedora Updates * Freeze is over! * New version of pagure (5.9.0) has been released and deployed in staging and on pagure.io * Document being worked on about how to onboard new CI systems in Fedora - this is a work in progress! https://hackmd.io/5gk_kHFhSR6sKa1huPA-4Q ### Request for Review * Fedora magazine: Article proposals about Silverblue rebase to F32 https://pagure.io/fedora-magazine-proposals/issue/59 * Packit integration in the-new-hotness https://github.com/packit-service/packit/issues/689 * KeepassXC flatpak issue https://pagure.io/flatpak-module-tools/issue/6 ### Data Centre Move * Communishift will be unavailable from 2020-04-13 until 2020-05-08 * Check out our detailed move shedule here https://hackmd.io/R3EkjzVyTG2TYwQvkfzYrA?sync=&type= * Covid-19 has seen restrictions added to the data centres we are moving from and to, however we are unaffected as of yet for the move. * If or when our timelines become affected, we will inform you immediately of any outages, downtimes, etc a delay could cause. * Thank you for your understanding at this particularly uncertain and worrying times. ### AAA Replacement * We are nearly complete in our phase one development! * Below are some of the features the team have developed since beginning the project in mid-Jan * UI where people register and login * Add groups function * Change personal details * Enroll OPT * Reset password * View group owner details * Use a search engine * Our next steps in this project is to demo to the team for feedback and then continue to develop CentOS authentication, more user focused features, request for more feedback and test, test test! ### CI/CD * Monitor-gating is now running in production and has already caught a couple of issues with bodhi (both in stg and in prod)! * Rpmautospec * This is in review as a Fedora package: https://bugzilla.redhat.com/show_bug.cgi?id=1816124 * Work progressing on Koji tagging plugin (post-build), full use case support for bumping releases * The team hope to deploy this in staging soon! ### Sustaining Team * Mbbox * Some progress on CRD for koji-builder and koji-hub components has been made this week * Bodhi 5.2.2 released * Some issues with celery tasks & rawhide monitoring has been super useful with this. * Compose Tracker enhancement * Tagging issues have been resolved * Ability to ping maintainers * Fedora Minimal Compose * Odcs-backend-releng01 has been provisioned to enable testing ## CentOS Updates ### Other Updates #### GitForge Decision * After evaluating over 300 user stories from multiple stakeholders we have aligned on a decision for the Gitforge that CPE will operate for the coming years. We are opting for Gitlab for our dist git and project hosting and will continue to run pagure.io with community assistance. * Check out our GitForge decision on the Fedora Community blog https://communityblog.fedoraproject.org/ * And at the CentOS blog page https://blog.centos.org/2020/03/git-forge-decision/ * Keep an eye out for mails in the coming months to the devel lists as we plan transitions and next steps with GitLab * We would like to express our sincere thank you to all who contributed requirements to us! As always, feedback is welcome, and we will continue to look at ways to improve the delivery and readability of this weekly report. Have a great weekend! Aoife Source: https://hackmd.io/8iV7PilARSG68Tqv8CzKOQ -- Aoife Moloney Product Owner Community Platform Engineering Team Red Hat EMEA Communications House Cork Road Waterford

1 0

Last call for video content: CentOS @ Red Hat Summit
by Rich Bowen 25 Mar '20

25 Mar '20

Next month, Red Hat Summit will be happening, as a virtual event. They're expecting 30,000 "attendees", and we're delivering content via videos. If you'd like to present your work in the CentOS project to 30,000 interested people, PLEASE get in touch with me ASAP, and we can schedule a short video interview for inclusion in that event. Any topic is fair game, if it's related to the CentOS project. The deadline for delivering these finished videos is Monday, March 30th, so I really need to hear from you today or tomorrow if we want to make this happen. Thanks! -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

3 3

CBS Signing process going live this wednesday !
by Fabian Arrotin 25 Mar '20

25 Mar '20

Hi all, After some tests and some feedback from some SIGs , we're happy to announce that we'll go live this wednesday with the new signing process (also covering c8) Per discussion/feedback with some SIGs (or lack of feedback), we locked the following CBS tags : paas7-openshift-origin311-release paas7-openshift-origin-release paas7-openshift-origin13-release paas7-openshift-origin14-release paas7-openshift-origin15-release paas7-openshift-origin36-release paas7-openshift-origin37-release paas7-openshift-origin38-release paas7-openshift-origin39-release paas7-openshift-origin310-release paas7-openshift-common-release nfv7-vpp-1801-release nfv7-vpp-1804-release nfv7-vpp-1807-release nfv7-common-release virt7-ovirt-42-release virt7-ovirt-44-release virt7-kubernetes-19-release virt7-kubernetes-110-release opstools7-perfmon-common-release opstools7-common-release opstools7-sensu-common-release opstools7-sensu-027-release opstools7-sensu-110-release opstools7-fluentd-012-release If you have questions, Thomas and myself will be answering in #centos-devel, should any issue arise. PS : for Trimmed content/EOL, each SIG should start considering announcing content that will go away (to vault and not available to mirror network) -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

3 4

SIG members: Presentations for the "virtual summit"
by Rich Bowen 24 Mar '20

24 Mar '20

As you may have seen, Red Hat Summit has been converted to a virtual event - https://www.redhat.com/en/summit - and we, the community projects that were to have a presence there - have been asked to supply some of the content for that virtual event. This is an opportunity to tell a wider audience about what we're doing in this project. In particular, I invite SIG members to provide an update, in the form of a video/slide presentation, about what your SIG has been working on, what's planned for the coming year, and how new participants can get involved. If you are involved in a SIG, please discuss this with the other participants, and put together 2-5 slides about the above topics, and designate someone who can deliver this content. Get in touch with me, and we can schedule a time to record this presentation via Google Meeting, or Bluejeans. I *think* that the "virtual summit" will be async, rather than live presentations, but that is still being figured out at this time. Meanwhile, gathering the content and identifying the speakers is an important first step. If you're interested in presenting some other (ie, non-SIG related) content, please do get in touch with me. Thanks! -- Rich Bowen - rbowen(a)redhat.com @CentOSProject // @rbowen 859 351 9166

1 1

CBS mash repositories going away next wednesday
by Fabian Arrotin 23 Mar '20

23 Mar '20

Tied to the previous announce, the new signing system will not depend on cbs-content-control, which itself was using repositories prepared by mash. Those repositories, while normally not meant to be consumed, will so go away. So all https://cbs.centos.org/repos/* will disappear next wednesday (FWIW) -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

2 2

CPE Weekly: 2020-03-21
by Aoife Moloney 21 Mar '20

21 Mar '20

--- title: CPE Weekly status email tags: CPE Weekly, email --- # CPE Weekly: 2020-03-21 Background: The Community Platform Engineering group is the Red Hat team combining IT and release engineering from Fedora and CentOS. Our goal is to keep core servers and services running and maintained, build releases, and other strategic tasks that need more dedicated time than volunteers can give. For better communication, we will be giving weekly reports to the CentOS and Fedora communities about the general tasks and work being done. Also for better communication between our groups we have created #redhat-cpe on Freenode IRC! Please feel free to catch us there, a mail has landed on both the CentOS and Fedora devel lists with context here. ## Fedora Updates * Fedora 32 Beta is released * Pungi configs created * RC composes ran * Synched to stg * Checksums signed * Pushed to mirrors * F32 flatpack support added * Silverblue is rebased for f32 - article on proposal to Fedora Magazine https://pagure.io/fedora-magazine-proposals/issue/59 ### Issue FYI's & Request for Review * The team are working on resolving the issues in the staging environment for the packager workflow https://pagure.io/releng/issue/9293 * Help with infra-sig packaging appreciated https://bugzilla.redhat.com/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&… * Packit integration in the-new-hotness https://github.com/packit-service/packit/issues/689 * KeepassXC flatpak issue https://pagure.io/flatpak-module-tools/issue/6 ### Data Centre Move * Communishift will be unavailable from 2020-04-13 until 2020-05-08 * Check out our detailed move shedule here https://hackmd.io/R3EkjzVyTG2TYwQvkfzYrA?sync=&type= ### AAA Replacement * OTP & 2FA authentication is now working! * Fedora messaging is also integrated in the project * As always, check out our progress on github here https://github.com/orgs/fedora-infra/projects/6 ### CI/CD * The koji plugin which is triggered post git checkout has been written and merged in the rpmautospec project * Working on finishing the rpmautospec logic for release and changelog and use it in the koji post git-checkout plugin and hope to achieve the following * Write the koji plugin to add git tags on dist-git (via pagure) upon successful builds * Package rpmautospec as an RPM * Deploy to stg * Links to the WIP issues in the POC * https://pagure.io/Fedora-Infra/rpmautospec/pull-request/15 https://pagure.io/Fedora-Infra/rpmautospec/pull-request/9 https://pagure.io/Fedora-Infra/rpmautospec/pull-request/5 https://pagure.io/Fedora-Infra/rpmautospec/pull-request/7 https://pagure.io/Fedora-Infra/rpmautospec/pull-request/8 https://pagure.io/Fedora-Infra/rpmautospec/pull-request/13 ### Sustaining Team * Mbbox upgrade work * Project is kicked off https://github.com/fedora-infra/mbbox/projects/1 Vagrant environment for operator-sdk ready Initial operator project ready Work on koji-hub CRD started Work on koji-builder CRD started * RabbitMQ has an outage so a new troubleshooting section has been added to the SOP https://fedora-infra-docs.readthedocs.io/en/latest/sysadmin-guide/sops/rabb… ## Docs * Issue created for problems with SELinux documentation in Fedora Quick Fix https://pagure.io/fedora-docs/quick-docs/issue/207 * Build errors updated in the Fedora Defensive Coding Guide https://pagure.io/defensive-coding-guide/issue/7#comment-634123 * F32 release notes being worked on ### Misc Updates/Review Requests * Upgrade pagure and pagure-dist-git on stg * Bugzilla overrides on src.stg landing * Infra-Sig Package Updates * https://bodhi.fedoraproject.org/updates/FEDORA-2020-2c40290717 https://bodhi.fedoraproject.org/updates/FEDORA-2020-2f3ff7bd46 https://bodhi.fedoraproject.org/updates/FEDORA-2020-2c3c3a9e25 https://bodhi.fedoraproject.org/updates/FEDORA-2020-dcb1f11c25 * Jms-messaging-plugin wire support https://github.com/jenkinsci/jms-messaging-plugin/pull/162 * Create 1.0 milestone for Anitya https://github.com/fedora-infra/anitya/milestone/6 * Openh264 Generated the repos Signed the rpms and repodata Sent them to cisco and waiting ## CentOS Updates ### CentOS * Fedora infra images are added to quay.ie for shared library * ppc64le image in testing ### CentOS Stream * Python38 module is running in c8S! * Kernel + VDO has been created for Stream * The team are refactoring the sync2git role and hope to deploy it soon As always, feedback is welcome, and we will continue to look at ways to improve the delivery and readability of this weekly report. Have a great weekend! Aoife Source: https://hackmd.io/8iV7PilARSG68Tqv8CzKOQ -- Aoife Moloney Product Owner Community Platform Engineering Team Red Hat EMEA Communications House Cork Road Waterford

1 0

newer cri-o builds for CentOS 7
by Baptiste Agasse 20 Mar '20

20 Mar '20

Hi all, I try to find a build of cri-o > 1.13 in a repo for CentOS 7. I find some package version that fit this requirement [1] and some builds[2] that are tagged with 'paas7-crio-115-release' but I didn't find any newer version of cri-o than crio-1.11 in origin311 repo [3]. Is there any repo that I'm missing where newer cri-o builds are located ? Have a nice day. Cheers. [1] https://cbs.centos.org/koji/packageinfo?packageID=5695 [2] https://cbs.centos.org/koji/buildinfo?buildID=26497 [3] http://mirror.centos.org/centos-7/7.7.1908/paas/x86_64/openshift-origin311/ -- Baptiste

4 3

Tags structure proposal (and fix) for CBS
by Fabian Arrotin 19 Mar '20

19 Mar '20

When working with Thomas on new signing process, we decided that we'd use Koji/CBS as single source of truth, so new signing process should only query koji/cbs and automatically act when there would be something to do. Creating so a different thread to discuss the koji tags we have. We discovered some inconsistencies and we think that $now would be a good time to fix/move those if needed. The current proposal would be (and most of the existing tags are following that convention) : <sig><dist>-<sig_project>-<sig_project_rel>-<sig_level> If we take an example for Gluster 7 for CentOS 7, built by Storage SIG, that means the following tags : storage7-gluster-7-{candidate,testing,release} The path where new process would automatically push out (to mirror CDN) would be so based on koji tag : mirror.centos.org/{centos,altarch}/<dist>/<sig>/{arch}/<sig_project>-<sig_project_rel>/ Once again, if we take the gluster 7 as an example, that would mean that process would automatically (for -release tag, with three enabled arches), push to those paths (created if needed) : * http://mirror.centos.org/centos/7/storage/x86_64/gluster-7/ * http://mirror.centos.org/altarch/7/storage/aarch64/gluster-7/ * http://mirror.centos.org/altarch/7/storage/ppc64le/gluster-7/ The full path is coming from the koji tag, but we see some issues for some paths/SIGs (like NFV) As we think that it would be good to have confirmations from all SIGs (as they are responsible for content to be pushed out, and also good time to have EOL content removed), we'd eventually "lock" koji tags for which we have *not* received confirmation for final destination path. Other thing we discovered : some SIGs (in the past) have asked for a "common" tag but then have asked (through cbs-content-control) to have content from that common tag to be added in other repo. As we'll *not* use cbs-content-control anymore, the way to deal with this would be : - either we use koji tag inheritance (preferred solution) - or you just "tag-build" yourself when needed from one to the other The advantage of doing this through koji tag inheritance is the following : When you request for some tags, and specify what they would need, nothing else would have to be done and you can just tag-build from -testing to -release to trigger the sign+push to mirrors (while tag-build to -testing first would push unsigned pkgs automatically to buildlogs.centos.org, as usual) Can we ask each SIG Chair to see which projects/releases are still needed and so come back (either in this thread of #centos-devel) Thanks for your collaboration ! -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel March 2020