2024-06-17 18:00:44 <@alexsaezm:fedora.im> !startmeeting Go SIG meeting
2024-06-17 18:00:45 <@meetbot:fedora.im> Meeting started at 2024-06-17 18:00:44 UTC
2024-06-17 18:00:45 <@meetbot:fedora.im> The Meeting name is 'Go SIG meeting'
2024-06-17 18:00:59 <@alexsaezm:fedora.im> !topic Roll Call
2024-06-17 18:01:13 <@alexsaezm:fedora.im> Hi everyone! (like always, we can wait a few minutes for everyone)
2024-06-17 18:01:25 <@buckaroogeek:fedora.im> Greetings
2024-06-17 18:01:36 <@mikelolasagasti:matrix.org> !hello
2024-06-17 18:01:38 <@zodbot:fedora.im> Mikel Olasagasti Uranga (mikelo2)
2024-06-17 18:01:51 <@buckaroogeek:fedora.im> !hello
2024-06-17 18:01:51 <@zodbot:fedora.im> Brad Smith (buckaroogeek)
2024-06-17 18:02:03 <@eclipseo:fedora.im> agree
2024-06-17 18:02:17 <@eclipseo:fedora.im> !hello
2024-06-17 18:02:18 <@zodbot:fedora.im> Robert-André Mauchin (eclipseo)
2024-06-17 18:02:18 <@mikelolasagasti:matrix.org> Will you or should I?
2024-06-17 18:02:44 <@eclipseo:fedora.im> i don't exactly have much time these days sorry
2024-06-17 18:03:14 <@mikelolasagasti:matrix.org> no worries, I’ll take care of it 
2024-06-17 18:04:27 <@alexsaezm:fedora.im> Anyone has an issue in particular? I don't see movement in the tickets. Should we jump right away to the Open Floor?
2024-06-17 18:04:44 <@mikelolasagasti:matrix.org> ^ this
2024-06-17 18:05:00 <@buckaroogeek:fedora.im> There was that issue with golang in rawhide on aarch64
2024-06-17 18:05:07 <@alexsaezm:fedora.im> the ld one?
2024-06-17 18:05:08 <@mikelolasagasti:matrix.org> we’ve hundreds of package in that situation 
2024-06-17 18:05:52 <@alexsaezm:fedora.im> so we have two things going on. The golang issue in aarch64 with ld that Brad Smith found and the empty %files from mikelolasagasti , right?
2024-06-17 18:06:19 <@eclipseo:fedora.im> what is the fix spec side? the underscore thing?
2024-06-17 18:07:46 <@mikelolasagasti:matrix.org> For which issue?
2024-06-17 18:08:19 <@eclipseo:fedora.im> debugsourcelist
2024-06-17 18:09:36 <@eclipseo:fedora.im> what causes it initially? new rpm version runs debuginfo extract even without build and generate buildrequires section?
2024-06-17 18:10:31 <@mikelolasagasti:matrix.org> Affects source only packages 
2024-06-17 18:10:52 <@mikelolasagasti:matrix.org> Those where the define debug… has to be defined
2024-06-17 18:10:58 <@mikelolasagasti:matrix.org> (On the phone sorry)
2024-06-17 18:11:22 <@mikelolasagasti:matrix.org> Failing specs have rather old spec without that entry
2024-06-17 18:11:57 <@mikelolasagasti:matrix.org> Old specs were OK but started to fail few weeks ago 
2024-06-17 18:12:18 <@mikelolasagasti:matrix.org> Koschei can help to track, but was many macro package updates
2024-06-17 18:12:36 <@eclipseo:fedora.im> yeah we added to new spec because generate buildrequires needed it, i reported that problem upstream back then
2024-06-17 18:12:52 <@alexsaezm:fedora.im> Does Koschei show the error in any form? as a failing build?
2024-06-17 18:13:14 <@mikelolasagasti:matrix.org> Now, why old packages were fine until a few weeks ago but new (~<2 years) packages required the entry
2024-06-17 18:13:23 <@eclipseo:fedora.im> seems to be linked redhat-rpm-config 289 which introduces reproductibility macros
2024-06-17 18:15:21 <@mikelolasagasti:matrix.org> I guess we can script to add the define in the specs
2024-06-17 18:15:23 <@eclipseo:fedora.im> /usr/lib/rpm/macros.d/macros.build-reproducibility and add-determinism binary was introduced but no idea what they do
2024-06-17 18:16:36 <@eclipseo:fedora.im> ah no my mistake
2024-06-17 18:16:46 <@eclipseo:fedora.im> it was the move from 289 to 292
2024-06-17 18:17:58 <@eclipseo:fedora.im> and https://src.fedoraproject.org/rpms/redhat-rpm-config/c/89546cd879491b034fc5a5a53ee9f738add5d9b3?branch=rawhide
2024-06-17 18:17:58 <@eclipseo:fedora.im> we have https://src.fedoraproject.org/rpms/redhat-rpm-config/c/7a1571ee808ba13b129eab7a7ed3869e77740c3e?branch=rawhide
2024-06-17 18:25:55 <@eclipseo:fedora.im> probably easy fix but time consuming
2024-06-17 18:26:22 <@alexsaezm:fedora.im> What would be the best approach? 
2024-06-17 18:26:36 <@mikelolasagasti:matrix.org> Update specs 😅
2024-06-17 18:26:40 <@eclipseo:fedora.im> grep
2024-06-17 18:26:59 <@eclipseo:fedora.im> fd -e spec -0 | xargs -0 rg --files-without-match "debug_package"
2024-06-17 18:28:00 <@alexsaezm:fedora.im> 🫠
2024-06-17 18:28:14 <@eclipseo:fedora.im> fd -e spec -0 | xargs -0 rg --files-without-match "debug_package" | xargs -0 rg --files-without-match "\%build"
2024-06-17 18:29:33 <@alexsaezm:fedora.im> Is there a way to batch clone all of the affected repos? I never checked if I can clone all of the go sig packages
2024-06-17 18:29:51 <@eclipseo:fedora.im> i already have all the go repo sync every day
2024-06-17 18:29:53 <@mikelolasagasti:matrix.org> we can take the list from koschei and loop 
2024-06-17 18:30:14 <@eclipseo:fedora.im> grokmirror
2024-06-17 18:30:50 <@mikelolasagasti:matrix.org> using https://src.fedoraproject.org/lookaside/rpm-specs-latest.tar.xz to detect and then clone + do stuff
2024-06-17 18:30:55 <@mikelolasagasti:matrix.org> don't know bout grokmirror
2024-06-17 18:31:29 <@eclipseo:fedora.im> grokmirror clone and sync the git repo locally
2024-06-17 18:32:19 <@alexsaezm:fedora.im> didn't know about the tool, sounds cool.
2024-06-17 18:32:21 <@alexsaezm:fedora.im> Any volunteer ? :) I can offer myself
2024-06-17 18:34:42 <@mikelolasagasti:matrix.org> i can help, but will be out a couple of day thsi week and next one
2024-06-17 18:34:57 <@mikelolasagasti:matrix.org> we've time until f41 is branched 
2024-06-17 18:35:27 <@alexsaezm:fedora.im> I have time this week (at least for now)
2024-06-17 18:38:46 <@eclipseo:fedora.im> 
2024-06-17 18:38:46 <@eclipseo:fedora.im> sudo dnf install grokmirror
2024-06-17 18:38:46 <@eclipseo:fedora.im> 
2024-06-17 18:38:46 <@eclipseo:fedora.im> mkdir ~/fedoraproject
2024-06-17 18:38:46 <@eclipseo:fedora.im> 
2024-06-17 18:38:46 <@eclipseo:fedora.im> mkdir -p /var/lib/fedoraproject/mirror
2024-06-17 18:38:46 <@eclipseo:fedora.im> 
2024-06-17 18:38:46 <@eclipseo:fedora.im> chown -R user:user /var/lib/fedoraprojec
2024-06-17 18:38:46 <@eclipseo:fedora.im> 
2024-06-17 18:38:46 <@eclipseo:fedora.im> ~/.config/grokmirror/repos-golang.conf https://eclipseo.fedorapeople.org/repos-golang.conf
2024-06-17 18:38:46 <@eclipseo:fedora.im> ~/.local/bin/post-pull-hook-golang.sh  https://eclipseo.fedorapeople.org/post-pull-hook-golang.sh
2024-06-17 18:38:46 <@eclipseo:fedora.im> 
2024-06-17 18:38:46 <@eclipseo:fedora.im> ~/.config/systemd/user/grokmirror-golang.timer https://eclipseo.fedorapeople.org/grokmirror-golang.timer 
2024-06-17 18:38:46 <@eclipseo:fedora.im> 
2024-06-17 18:38:46 <@eclipseo:fedora.im> ~/.config/systemd/user/grokmirror-golang.service https://eclipseo.fedorapeople.org/grokmirror-golang.service
2024-06-17 18:39:51 <@alexsaezm:fedora.im> I need to save that :D
2024-06-17 18:39:52 <@alexsaezm:fedora.im> !action: @alexsaezm will look into the debugsourcefiles empty.
2024-06-17 18:40:12 <@alexsaezm:fedora.im> Not sure if the bot got the action...
2024-06-17 18:40:18 <@alexsaezm:fedora.im> !action @alexsaezm will look into the debugsourcefiles empty.
2024-06-17 18:40:28 <@alexsaezm:fedora.im> now, the colon was messing it
2024-06-17 18:40:35 <@zodbot:fedora.im> alexsaezm gave a cookie to eclipseo. They now have 50 cookies, 3 of which were obtained in the Fedora 40 release cycle
2024-06-17 18:41:18 <@alexsaezm:fedora.im> Regarding the other issue, I will also look into the missing ld message, didn't have time yet, but I have tomorrow.
2024-06-17 18:41:27 <@buckaroogeek:fedora.im> ok
2024-06-17 18:41:34 <@alexsaezm:fedora.im> !action @alexsaezm will look into the failing golang aarch64 build
2024-06-17 18:41:48 <@buckaroogeek:fedora.im> on rawhide
2024-06-17 18:42:04 <@alexsaezm:fedora.im> right :D
2024-06-17 18:42:10 <@alexsaezm:fedora.im> yeah, on rawhide
2024-06-17 18:42:18 <@alexsaezm:fedora.im> any other topics?
2024-06-17 18:43:21 <@mikelolasagasti:matrix.org> CVE-2024-24789 
2024-06-17 18:43:36 <@mikelolasagasti:matrix.org> ~1h ago a bunch of BZs have been opened for that CVE
2024-06-17 18:43:54 <@mikelolasagasti:matrix.org> it would be great to rebuild affected packages and for that to have the script to do so
2024-06-17 18:44:10 <@mikelolasagasti:matrix.org> "golang: archive/zip: Incorrect handling of certain ZIP files"
2024-06-17 18:46:13 <@alexsaezm:fedora.im> hmmmmm that one is related to 1.22.4 which is failing right now in Rawhide
2024-06-17 18:46:24 <@alexsaezm:fedora.im> but I can do the rebuild for the other ones
2024-06-17 18:47:05 <@mikelolasagasti:matrix.org> the CVE has been opened against all packages that use archive/zip, so first golang needs to be fixed/updated and after all the affected packages
2024-06-17 18:47:17 <@alexsaezm:fedora.im> yep
2024-06-17 18:47:31 <@alexsaezm:fedora.im> I'll take that action too, I'll fix golang as soon as I can
2024-06-17 18:47:44 <@alexsaezm:fedora.im> !action @alexsaezm rebuild packages affected by CVE-2024-24789 
2024-06-17 18:49:02 <@alexsaezm:fedora.im> any other issues?
2024-06-17 18:49:40 <@buckaroogeek:fedora.im> Nothing from me
2024-06-17 18:50:05 <@mikelolasagasti:matrix.org> reviews :/
2024-06-17 18:50:19 <@mikelolasagasti:matrix.org> I'll appreciate this https://bugzilla.redhat.com/show_bug.cgi?id=2277225 to unblock glab update
2024-06-17 18:50:51 <@eclipseo:fedora.im> rg --files-without-match "debug_package" -g "*.spec" -0 | xargs -0 rg --files-without-match "%build" -g "*.spec" | wc -l    74ms  fish 
2024-06-17 18:50:51 <@eclipseo:fedora.im> 743
2024-06-17 18:51:04 <@eclipseo:fedora.im> rg --files-without-match "debug\_package" -g "_.spec" -0 | xargs -0 rg --files-without-match "%build" -g "_.spec" | wc -l 
2024-06-17 18:51:04 <@eclipseo:fedora.im> 743
2024-06-17 18:51:10 <@eclipseo:fedora.im> small task
2024-06-17 18:51:34 <@eclipseo:fedora.im> will do
2024-06-17 18:53:39 <@alexsaezm:fedora.im> awesome
2024-06-17 18:54:21 <@alexsaezm:fedora.im> I guess we can call it for today :)
2024-06-17 18:55:17 <@alexsaezm:fedora.im> Thanks everyone! Enjoy the rest of the day :)
2024-06-17 18:55:18 <@alexsaezm:fedora.im> !endmeeting