Hello.
I hope that some of Red Hat kernel team members are subscribed to this
list.
I want to use TOMOYO in RHEL kernels.
In accordance with Fedora -> CentOS Stream -> RHEL flow, as a first step,
I opened https://bugzilla.redhat.com/show_bug.cgi?id=2303689 and
am waiting for response.
Regards.
As discussed last week
(https://lists.centos.org/hyperkitty/list/devel@lists.centos.org/thread/S3X3…
) I reached out to openmainframeproject to see if there would be a
possibility to remotely use at least one s390x VM for SIGs.
I'm proud to announce that such infra is ready to be used within CBS
build infra (https://cbs.centos.org/koji/hostinfo?hostID=22)
# What does that mean ?
If your SIG wants to start building against/for s390x architecture,
please just open a infra ticket on https://pagure.io/centos-infra/issues
(usual way) and for which SIG/tags you'd like to see the s390x arch
being added.
As usual, SIGs can build against rhel8/rhel9/CentOS Stream 9 and CentOS
Stream 10, including for s390x (internal mirror is now ready too)
# How to proceed
There are basically multiple ways to add the s390x architecture :
- when you'll create new tag, you can ask for s390x arch to be included
by default for your new build tag
- for existing tags, you can also ask for the s390x arch to be added,
but that also means that builds you'll submit as usual will have to find
all build dependencies, including for s390x.
It can be that you have yourself built some BuildRequires: dependencies
for your RPM packages in your tags, but so probably just for x86_64,
aarch64 and eventually ppc64le.
How can that specific problem be solved :
- either bump nvr for your build chain/order, rebuild in order to
include from now on s390x, and then it will be BAU (Business as Usual)
once s390x will be at same level for all pkgs.
- other possibility (what I just used for the infra tags) : it's
possible to just resubmit scratch builds for same package NVR (which
koji would refuse you to do as "normal" build) :
cbs build --scratch --arch-override s390x <target> <src.rpm/dist-git url>
After each successfully scratch build, you can use the build id and then
communicate (either through ticket or irc) us the build id, so that we
can use a specific (admin right required, reason why SIGs can do that
themselves) koji api call, to "merge" the newly s390x build with the
existing one (with same pkg NVR, so nothing to do at the src.rpm/git
level at all)
- other option (if you have plenty of packages in the build chain, and
don't want to block other builds for your existing -release tags) : we
can create a specific "bootstrap" tag, with only s390x, in which we can
just do the scratch+merge dance, until it's all resolved/equal to other
tag, and only then, add the s390x arch to your existing tags (that will
then automatically find the s390x packages, as existing in koji)
One example : I had to rebuild cvs (one of many pkgs I rebuilt), itself
a dep for koji-builder (needed to bootstrap the new infra) :
- scratch build : https://cbs.centos.org/koji/taskinfo?taskID=4235422
- promoted to existing build :
https://cbs.centos.org/koji/buildinfo?buildID=43020 (see s390x artifacts
now part of a previous build ID)
# Worth knowing
We'd like to thank again openmainframeproject for the VM, but also worth
knowing that because it's a remote (and locked down) VM, all koji/mirror
traffic goes through an encrypted tunnel , and so that has a small
impact on the needed time to init a buildroot.
Based on my tests, it's still pretty fast to build, but just a little
bit slower to init the buildroot, when downloading all needed packages
Happy building and let us know which SIG wants to be next SIG (Infra SIG
started to rebuild packages for our own usage already)
--
Fabian Arrotin
The CentOS Project | https://www.centos.org
gpg key: 17F3B7A1 | @arrfab[@fosstodon.org]
Due to a mandatory core switches upgrade in the DC where some services
are hosted, we'll lose connectivity between some services/storage
servers and some publicly available services will be impacted.
Impacted services:
- https://git.centos.org
- https://cbs.centos.org (builders will be put on hold during
maintenance window)
- https://lists.centos.org - CentOS mailing lists
- CentOS CI env (https://duffy.ci.centos.org api endpoint)
Maintenance is scheduled for """"Tuesday September 22nd, 6:00 am UTC
time"""".
You can convert to local time with $(date -d '2020-09-22 06:00 UTC')
The expected/communicated "downtime" was estimated to be 4h, but we'll
just announce when all services will be available again.
Thanks for your understanding and patience.
on behalf of the Infra team,
--
Fabian Arrotin
The CentOS Project | https://www.centos.org
gpg key: 17F3B7A1 | @arrfab[@fosstodon.org]
Hi Everyone,
Our next board meeting will take place at 20:00 UTC tomorrow
`date -d "2024-10-09 20:00 UTC"`
If you would like to attend please send me an email to
alphacc(a)centosproject.org ( please do not reply to @centos-devel or use
another email address) and you will receive a link to a meeting
room with a passcode, 1 hour before the meeting takes place.
The agenda can be checked at (work in progress) :
https://hackmd.io/@centosboard/B1WddHykye
As a reminder we will enforce few rules :
* Wait to be recognized by the Chair before speaking
* Respect the Chair when told your time to speak is over - this will
allow us to remain on agenda, and complete the meetings in the
allotted time
* In the event that there are Board-confidential topics, these will be
put at the end of the meeting, in Executive Session, and guests will be
asked to leave. We hope to minimize these items, but they do sometimes
happen. The most common scenarios in which this may happen are personnel
issues, or information that Red Hat wishes to share with the Board, but
is not yet public.
* Muting of participants, or, in extreme situations, ejection from the
meeting, is at the sole discretion of the Chair.
* Meetings will be recorded, and published to YouTube (possibly with
edits/redaction, as approved by the Directors). Thus, by joining the
meeting you consent to have your presence at the meeting, and anything
you say during the meeting, made public.
I hope some of you can join.
thanks,
--
Thomas 'alphacc' Oulevey
CentOS Board of Directors Secretary
alphacc(a)centosproject.org
As of a couple days ago, some of you might have noticed that the default
branch for all RPM packages on CentOS Stream Gitlab [1] has been changed to
“c10s”. This was the result of extensive discussion in CS-1985 [2] where we
came to the decision that we needed to have a consistent default branch
across the package set and that it should always track the latest Y-stream
project. We put together the tooling for this and executed it this week.
[1] https://gitlab.com/redhat/centos-stream/rpms
[2] https://issues.redhat.com/browse/CS-1985