devel March 2021

devel@lists.centos.org

30 participants
26 discussions

CPE Weekly: 2021-03-05
by Aoife Moloney 05 Mar '21

05 Mar '21

Hi Everyone, If you would like to see this report and toggle to the section you are most interested in, I would suggest visiting this link https://hackmd.io/8iV7PilARSG68Tqv8CzKOQ?view and use the header bar on your left to skip to where you want to go! ## Initiative FYI Links Initiatives repo here: https://pagure.io/cpe/initiatives-proposal 2021 Quarterly Planning timetable here: https://docs.fedoraproject.org/en-US/cpe/time_tables/ Details on initiative requesting/how to work with us on new projects here: https://docs.fedoraproject.org/en-US/cpe/initiatives/ ### Misc * CentOS Newsletter for March is out! https://blog.centos.org/2021/03/centos-community-newsletter-march-2021-2103/ * CentOS Dojo scheduled for May 13th & 14th CFP is open, details on event and CFP link can be found here https://wiki.centos.org/Events/Dojo/May2021 * New community podcast is out from Red Hat Community https://twitter.com/redhatopen/status/1367113857936809984 * Lightning Talks & some others from DevConf.cz are now uploaded! https://www.youtube.com/c/DevConf_INFO/featured * Check out the most recent blog post on the Fedora Code of Conduct here https://communityblog.fedoraproject.org/fedora-code-of-conduct-report-2020/ ## Project Updates *The below updates are pulled directly from our CPE team call we have every week.* ## CentOS Updates ### CentOS * Legacy CentOS CI Infra Openshift 3.6 has been retired * CentOS CI OCP clusters updated to 4.6.18 ### CentOS Stream * Testing centpkg against the new buildsystem and CBS * Developing a style guide for CentOS Stream - first draft will be in a repo on git.centos.org to view/comment by mid-March * Building CentOS Stream only packages, eg logos, etc for Stream 9 ### Fedora * Still in Beta Freeze * Working on progressing flatpak-indexer, its currently in staging * Processed 100+ fedscm requests! * In staging got pagure on dist-git working with the git user instead of each packager having their own shell account * Working with debuginfo-d folks to get them set up with resources to enable it in Fedora infra ### Noggin/AAA * Reviewing dates for a planned outage in March - early estimated dates are 18th & 19th for production migration. Formal email to follow to all fedora lists once outage period is confirmed early next week. * Community blog coming middle of next week on the new account system work * The work tracker for this project can be found here https://github.com/orgs/fedora-infra/projects/6 * The team use #fedora-aaa for discussions on IRC * And please report any issues you find in the repo https://github.com/fedora-infra/noggin ## Team Info ### Background: The Community Platform Engineering group, or CPE for short, is the Red Hat team combining IT and release engineering from Fedora and CentOS. Our goal is to keep core servers and services running and maintained, build releases, and other strategic tasks that need more dedicated time than volunteers can give. See our wiki page here for more information:https://docs.fedoraproject.org/en-US/cpe/ -- Aoife Moloney Product Owner Community Platform Engineering Team Red Hat EMEA Communications House Cork Road Waterford

1 0

CentOS Stream Pull Requests: How to know about them?
by Miro Hrončok 03 Mar '21

03 Mar '21

Hello CentOS! I've recently opened this Pull Request: https://git.centos.org/rpms/python-six/pull-request/1 The only purpose was to see if the RHEL maintainers (my Red Hat team members) get notified. They were not. What is the supposed workflow here? There was no "CentOS" person who would respond to this Pull Request and the "RHEL persons" who could do something about this are not notified. Thanks, -- Miro Hrončok -- Phone: +420777974800 IRC: mhroncok

5 5

grub2 sources and build available for Stream
by Josh Boyer 03 Mar '21

03 Mar '21

Yesterday Red Hat released an updated grub2 errata to resolve a CVE. You can find more details about this here: https://access.redhat.com/security/vulnerabilities/RHSB-2021-003 While we have no CVE SLAs for CentOS, I thought it would be worthwhile to point to this given that grub and boothole have been hot topics recently. The sources for this fix are available in git.centos.org for CentOS Stream 8, and a new build has been completed. https://git.centos.org/rpms/grub2/commits/c8s https://koji.mbox.centos.org/koji/buildinfo?buildID=16717 For those of you that also use RHEL, the CentOS Stream changes will land in a future RHEL minor release. Testing and feedback in any case is always welcome. Thanks to the CentOS team for getting this turned around very quickly. josh

1 0

Announcing ROSI - RHEL for Open Source Infrastructure
by Mike McGrath 03 Mar '21

03 Mar '21

Hi all, as I did last month I thought I'd keep the list up to date with today's free RHEL announcement: https://www.redhat.com/en/blog/extending-no-cost-red-hat-enterprise-linux-o… This one is targeted at Open Source projects and organizations. I know some of you, in particular, are interested in academic or non-profit uses. Today's announcement is *not* the one you're looking for so stay tuned, we're still evaluating some of the feedback and more announcements are planned. -- Mike McGrath Linux Engineering - Chicago Red Hat mmcgrath(a)redhat.com T: (312)-660-3547

12 21

Re: [CentOS-devel] re CVE errata in CentOS Stream
by redbaronbrowser 02 Mar '21

02 Mar '21

On Friday, February 19, 2021 5:47 PM, Josh Boyer <jwboyer(a)redhat.com> wrote: > On Fri, Feb 19, 2021 at 5:47 PM redbaronbrowser > redbaronbrowser(a)protonmail.com wrote: > > > I'm not asking for anything ahead of RHEL customers getting it. All I am asking for is pre-approval from management to get access as an Upstream once a problem with RHEL is confirmed. > > If you mean "get access to the fixed code" or "get access to a fixed > build", in a situation like the post-Boot Hole scenario there is no > pre-approval necessary. We will do our best to resolve the issue in > Stream as quickly as possible. You keep coming back to the Fix for the Broken-Fix. I believe you when you say Red Hat has always been working as quickly as possible to Fix any Broken-Fixes. However, once they have the fix the lifecycle of the bug is over. Stream isn't interesting from the perspective of completed bug lifecycles. The interesting aspect to closing the openness gap is the mid-lifecycle of the bug. I am trying to focus on how quickly will Stream users be able to contribute to the fixing of a Broken-Fix. I am sorry if I am parsing too much into Mike's response, but it read to me like it is possible for the code to a Broken-Fix to, by policy, be withheld to only the "entitled" RHEL subscribers to access. I'm asking to what degree Red Hat expects to be able to take advantage us while an active Bugzilla entry exist because a CVE "fix" had unintended side-effects. Can we get quick transparency into accessing broken packages and code even if that broken build is a CVE "fix" related? Or is the policy that we will sit on the sidelines for Red Hat by itself to fix broken security patches much like CentOS has always operated before Stream?

9 32

Meeting minutes of the Storage SIG Monthly, March Edition
by Niels de Vos 02 Mar '21

02 Mar '21

Agenda: https://hackmd.io/Epc35JIESaeotoGzwu5R5w?both#2021-03-02 Minutes: https://www.centos.org/minutes/2021/March/centos-meeting2.2021-03-02-10.00.… Minutes (text): https://www.centos.org/minutes/2021/March/centos-meeting2.2021-03-02-10.00.… Log: https://www.centos.org/minutes/2021/March/centos-meeting2.2021-03-02-10.00.… =========================================================== #centos-meeting2: CentOS Storage SIG monthly, March Edition =========================================================== Meeting started by ndevos at 10:00:58 UTC. The full logs are available at https://www.centos.org/minutes/2021/March/centos-meeting2.2021-03-02-10.00.… . Meeting summary --------------- * Roll Call (ndevos, 10:01:14) * Agenda (ndevos, 10:03:24) * LINK: https://hackmd.io/Epc35JIESaeotoGzwu5R5w?both#2021-03-02 (ndevos, 10:03:29) * centos-release-gluster packages (ndevos, 10:04:34) * Open Floor (ndevos, 10:11:27) * ceph packages update (fmount, 10:13:12) * Any Other Bussiness (ndevos, 10:27:07) Meeting ended at 10:32:11 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * ndevos (58) * fmount (45) * centbot (3) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel March 2021