devel March 2021

devel@lists.centos.org

30 participants
24 discussions

forums + portal for {lang}.centos.org sites
by Karanbir Singh 17 Aug '24

17 Aug '24

Hi, Earlier in the evening today Ralph, Fabian and I had a chat about the present state of the language subsites. This email sort of summarises the main issue ( s/w ). We seem to have run into a slight technical hitch with punbb/fluxbb. They dont support LDAP as a backend. And we had decided a few months back that all new rollouts must have ldap backend so we can rollin CentOS-DS / openldap based backend. So we need to look at alternatives, and since the primary focus of these international sites is going be forums : Here is a shortlist ( if there is anything else that people are aware of, please add to this list ) - phpBB - SMF - Fudforum - phorum - fluxbb Requirements: - Must be able to scale ( couple of hundred thousand msgs ) - Must be able to handle ldap auth ( if it cant, whats involved in writing the ldap-auth portion ) - Must address the specific requirements raised by the present www.centos.org forum users ( Can you please fill this section in ? ) - Must support all languages we need ( pure utf8 support would be good ) - Secure - Skin'able Nice to have: - Capable of running multiple instances from a single deployment - responsive community :D Things we will need to do: - Decide on what s/w to use. - Give the ArtWork people enough time to get the look & feel sorted. - Migrate newbb forums from www.centos.org to $system ( hey, english is a language too :D ). - Migrate fr.centos.org into the final s/w - setup {de/es/ja/it/pt_br}.centos.org Actions: Ralph and Fabian are going to work on setting up a test ldap server, once that is online we will then start by installing into our test-vm-farm the various s/w to eval them. If anyone would like to help, please feel free to jump right in. I'll setup a wiki page for this issue, which might be a good place to track progress. -- Karanbir Singh : http://www.karan.org/ : 2522219@icq

22 81

repomd.xml.asc outdated?
by Leon Fauster 11 Jun '21

11 Jun '21

JFYI: LANG=C yum update --noplugins ... Error: Failed to download metadata for repo 'appstream': repomd.xml GPG signature verification error: Bad GPG signature http://mirror.centos.org/centos-8/8/AppStream/x86_64/os/repodata/ shows repomd.xml 2021-03-16 15:43 repomd.xml.asc 2021-03-03 00:29 -- Leon

5 6

RFC: Stream Kernel SIG Proposal
by redbaronbrowser 19 May '21

19 May '21

There are four main goals of this SIG: First, break down changes in the Stream version 4.18.0 kernel into individual patches. When possible, document the source the patch is from and the purpose of the patch. Moving forward also document which Stream kernel package revision introduced the patch. Second, build CentOS Plus kernel for Stream. Third, package newer LTS kernels during the LTS lifespan. These would be available as alternative kernels for Stream similar to the CentOS Plus kernel. Fourth, work on tools for better delivery of live security patches to be applied via kpatch. The reasoning for this SIG is to improve the openness of kernels available through Stream. Normally a distribution upstream would have access to which patch or commit each addition to the kernel belongs to. The patch name or commit comment would also give information as to the purpose of the patch. Stream's kernel reports to be 4.18.0 but uses a tar that is 110% the size of a true 4.18.0 tar. A breakdown of the additional 10% is not provided. Hence Stream's kernel still functions similar to a downstream rather than providing what is expected for a successful upstream project. This SIG would help close the kernel openness gap by documenting the changes. Stream users would then be in a better position to track down individual patches that cause regressions or bugs. This SIG would also help smooth the adoption of Stream for users that depend on CentOS Plus kernel features. Next, this SIG should help improve feedback to the LTS kernel developers. Tracking LTS kernel changes may also help with documenting some changes in the primary Stream kernel. Lastly, this SIG should help improve kernel security by promoting methods to enable kernel security updates even when a reboot of the system is not possible.

12 42

Infrastructure SIG Bi-Weekly Meeting Report: 2021-03-29
by Aoife Moloney 01 Apr '21

01 Apr '21

Hi All, Please find below Infrastructure SIG report & meeting minutes from our bi-weekly meeting on Monday 29th March. Meeting minutes https://www.centos.org/minutes/2021/March/centos-meeting.2021-03-29-14.00.t… Attendees: amoloney (chair), bstinson, arrfab, bowen, mobrien Discussion: grant carlwgeorge access to mirror.centos.org Decision: approved Reason: continues the progression of being able to build test and push content out Action: arrfab to add carlwgeorge to appropriate setup Discussion: Add another person into IPA for CentOS to expand coverage for maintenance and support Decision: approved pending account migration completion and peerson(s) to be added to be discussed at next meeting on 12th April Reason: this will allow us time to review what level of support CentOS needs in IPA for Fedora once the migration is completed so we can add the correct number of people at the correct levels for better coverage and support Discussion: Should we be reviewing CentOS Board tracker in these meetings? Decision: No Reason: if there is something needing infra assignment at the board level, the corresponding need should be expressed either through another tracker and/or through discussion Our next meeting is on Monday 12th April @ 1400 UTC +1 on IRC channel #centos-meeting. We look forward to seeing you there if you would like to get involved in the discussions. On behalf of the Infrastructure SIG, Aoife -- Aoife Moloney Product Owner Community Platform Engineering Team Red Hat EMEA Communications House Cork Road Waterford

1 0

CPE Weekly: 2021-03-31
by Aoife Moloney 01 Apr '21

01 Apr '21

Hi Everyone, Sorry for the two week gap since my last report, we had a busy time in the CPE team with the new fedora accounts deployment, our quarterly planning cycle started for Q2 and Ireland had a bank holiday mid week which *seemed* like a great idea at the time. Until no-one knew what day it was for about a week! So here I am, right at the end of Q1 with the CPE teams final weekly report for January, February and March... two days early :) If you would like to see this report and toggle to the section you are most interested in, I would suggest visiting this link https://hackmd.io/8iV7PilARSG68Tqv8CzKOQ?view and use the header bar on your left to skip to where you want to go! ## Initiative FYI Links CPE had our quarterly planning call last Thursday 26th March to prioritize our project work going into Q2 (quarter 2, which is April, May & June). Our initiative repo quarterly boards have been updated https://pagure.io/cpe/initiatives-proposal/boards/2021Q2 and our repo can be accessed here: https://pagure.io/cpe/initiatives-proposal Our 2021 Quarterly Planning timetable can also be viewed here if you are curious on when our next quarterly planning session is: https://docs.fedoraproject.org/en-US/cpe/time_tables/ And finally, details on initiative requesting/how to work with us on new projects here: https://docs.fedoraproject.org/en-US/cpe/initiatives/ Going into Q2, the CPE team will work on rpmautospec https://pagure.io/cpe/initiatives-proposal/issue/11 and aim to deliver this project within the months of April, May & June. We are starting this project on Monday 12th April and will keep you posted on where the team will track work and what IRC channel they will use for comms. You can also expect a Q1 blog post from us in the next week or two highlighting the work that the team delivered over the last quarter too. ### Misc * CentOS Dojo for May 13th & 14th CFP closes on Monday 5th April so please submit your talks asap! https://wiki.centos.org/Events/Dojo/May2021 ## Project Updates *The below updates are pulled directly from our CPE team call we have every week.* ## CentOS Updates ### CentOS * Account Migration is scheduled for next Tuesday 6th April * Please read this important email from Fabian Arrotin on verifying/updating your CentOS and Fedora email address https://lists.centos.org/pipermail/centos-devel/2021-March/076690.html * CentOS CI is also updating ocp.stg to 4.7.3 & will roll out to production by the end of the week if all goes well ### CentOS Stream * Centpkg is build and available in Fedora and EPEL! * MBS is being deployed * ODCS is deployed * Scripts for mass rebuild are ready * CVE Dashboard for CentOS 8 Stream is up * In short, lots of good things coming! ### Fedora * F34 beta is out! * Mass reboot is scheduled for tomorrow, April 1st so please expect some issues due to this required outage * Final Freeze is due to start on Tuesday April 6th @ 1400 UTC - F34 schedule can be viewed here https://fedorapeople.org/groups/schedule/f-34/f-34-key-tasks.html ### Noggin/AAA * Fedora Accounts is out!!!!!!!!!!!!!!!! * There are still some corner case issues being worked through but users should be able to access fedora services as normal. **NOTE** you will need to reset your password if you have not already done so if you receive an Unable to call ID or some note like that. Please request a password reset and wait for the mail to land. Then follow the link and reset your password. * For any issues, please open a ticket on https://pagure.io/fedora-infrastructure/issues * The team can be found on #fedora-aaa for discussions on IRC * And please report any issues you find relating to the Noggin application in the repo https://github.com/fedora-infra/noggin **ANOTHER NOTE** Thank you so so so much to all of the members of the fedora community and wider open source communities who assisted our team last week when we were deploying the new system. Your help did not go unnoticed and unappreciated and we could not have done this work without any of you. You know who you are, and you have my and the wider teams sincerest thanks and gratitude :) ## Team Info ### Background: The Community Platform Engineering group, or CPE for short, is the Red Hat team combining IT and release engineering from Fedora and CentOS. Our goal is to keep core servers and services running and maintained, build releases, and other strategic tasks that need more dedicated time than volunteers can give. See our wiki page here for more information:https://docs.fedoraproject.org/en-US/cpe/ As always, feedback is welcome, and we will continue to look at ways to improve the delivery and readability of this weekly report. Have a great weekend! Aoife Source: https://hackmd.io/8iV7PilARSG68Tqv8CzKOQ?view -- Aoife Moloney Product Owner Community Platform Engineering Team Red Hat EMEA Communications House Cork Road Waterford

1 0

Last call: Dojo CFP closes this weekend
by Rich Bowen 30 Mar '21

30 Mar '21

For those of you who like to leave things to the last minute - this is your final warning that the CFP (Call for presentations) for the May CentOS Dojo will close when I get to my desk on Monday morning - that is, approximately 12:00 UTC Monday April 4th. Details and CFP are here: https://wiki.centos.org/Events/Dojo/May2021 Note also that as of right now, we have enough submissions for a one-day event. We had initially scheduled 2 days, and that is still possible if I hear from more of you! --Rich

1 0

CentOS authentication switch : Last Call for you to verify/update your email address
by Fabian Arrotin 30 Mar '21

30 Mar '21

Hi all, We already announced multiple times the CentOS authentication merge with Fedora. That means that you'll use (starting next week) only *one* account for both projects. That also means that we asked *all* of you to have verified that if you registered an account on both sides before, you'd be updating your profile so that email addresses would match (as a primary key, used as filter for the import tool). As of today, we still have 175 CentOS user accounts in this conflicting situation :/ So this is the last call to ask you to verify and update your email addresses so that they match (if you are the same person that is). Important note from the script author : if you used your @fedoraproject.org email address to register your account on https://accounts.centos.org, the script will complain about "circular email address", as in new system, your @fedoraproject.org will be created *on*/*from* that new IPA based solution. So that means : update now on https://accounts.centos.org your email address to match the one from https://accounts.fedoraproject.org. If you think that you're late to the party, let me just say (after a very quick look) that it *also* concerns some CentOS Board/Core members :-) (subliminal message : update $now) As a reminder, every account *not* imported will lead to no group membership added, and so potentially no ACL applied to let you build on https://cbs.centos.org, or access any other service using new merged portal as authentication source. Kind Regards, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 0

Infrastructure SIG Meeting Agenda: 2021-03-29
by Aoife Moloney 29 Mar '21

29 Mar '21

Hi all, Please note the Infrastructure SIG will have a bi-weekly meeting tomorrow, 29th March @ 1500 UTC+1 on #centos-meeting. The agenda thus far is: - Review any open tickets relating to infrastructure on https://git.centos.org/centos/board/issues - Review and prioritize tickets from https://pagure.io/centos-infra/issues - AOB Please join IRC channel #centos-meeting if you would like to discuss anything with the SIG. Kindest regards, Aoife, on behalf of the CentOS Infra SIG -- Aoife Moloney Product Owner Community Platform Engineering Team Red Hat EMEA <https://www.redhat.com> Communications House Cork Road Waterford <https://www.redhat.com>

1 0

Fedora/CentOS authentication merge : please read
by Fabian Arrotin 27 Mar '21

27 Mar '21

Hi All ! As announced multiple times (including but not limited to https://lists.centos.org/pipermail/centos-devel/2021-February/076442.html) Fedora and CentOS will merge authentication soon. It was already merged for Staging environment, where SIGs contributors could test things and now it's time to really merge https://accounts.centos.org and https://admin.fedoraproject.org/accounts on the new system. Let me point you first to the mail sent to Fedora so please read it first to have a little bit of background/history : https://lists.fedoraproject.org/archives/list/announce@lists.fedoraproject.… As you can see, the Fedora migration will happen next week. Based on current timeline and agenda, we'll proceed like this for the CentOS migration : * Friday April 2nd : * We'll "freeze" https://accounts.centos.org in Read-only mode * Fedora infra team launches the fas2ipa script to import centos users/groups not existing (yet) in new IPA setup (if you had a fedora account matching your account in accounts.centos.org, you'll not be imported again, but rather be added to your imported centos groups - so merged -) * Monday April 5th * quick sanity check for the import script result and some internal checks, then * Real CentOS infra authentication switch : it's hard to give a timeline but we'll start with https://cbs.centos.org (I'll announce downtime in separate mail when we'll have full agenda) and then proceed with the other services. How will you be impacted ? If you use any kind of service authenticated by either TLS cert from https://accounts.centos.org (that's the case for cbs.centos.org, or mqtt notifications), you'll *have* to retrieve a new cert. (more information in the SIGGuide will appear on due time. Same for services using authentication tied to https://accounts.centos.org through https://id.centos.org (for openid/openidc, etc) So this mail doesn't contain all the information for how to retrieve new TLS cert, how to reset password, etc but more to give you the date when we'll have smallest possible downtime while reconfiguring system to switch to new authentication (FWIW, all changes were automated through ansible for our staging environment, so we'll just reapply same process for the production one) Have a nice week-end ! -- Fabian Arrotin (all excited to finally see this project arriving at deploy time) :) The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab

1 2

Hyperscale SIG meeting update
by Davide Cavalca 26 Mar '21

26 Mar '21

Hey folks, Wanted to signal boost that we've moved the Hyperscale SIG meeting to 16:00 UTC, still bi-weekly on Wednsdays. The next one will be on March 31. The CentOS Calendar is up to date as well: https://www.centos.org/community/calendar/#Hyperscale_SIG and has a handy ICS for your calendar. Meeting minutes for past meetings are up at https://wiki.centos.org/SpecialInterestGroup/Hyperscale/Meetings and we'll try and keep that up to date. Also, my talk at DevConf.cz 2021 has been published at https://www.youtube.com/watch?v=K8x4CIetnCc on Youtube. While this isn't specific to the SIG, it does cover some of our work there so you might find it interesting. Cheers Davide

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel March 2021