#meeting-1:fedoraproject.org log

<@tdawson:fedora.im>

18:00:30

!startmeeting EPEL (2024-08-28)

<@meetbot:fedora.im>

18:00:31

Meeting started at 2024-08-28 18:00:30 UTC

<@meetbot:fedora.im>

18:00:31

The Meeting name is 'EPEL (2024-08-28)'

<@tdawson:fedora.im>

18:00:37

!meetingname epel

<@tdawson:fedora.im>

18:00:37

!topic aloha

<@meetbot:fedora.im>

18:00:38

The Meeting Name is now epel

<@jrichardson:matrix.org>

18:00:50

!hi

<@zodbot:fedora.im>

18:00:52

James Richardson (jrichardson)

<@rcallicotte:fedora.im>

18:01:00

!hi

<@zodbot:fedora.im>

18:01:02

Robby Callicotte (rcallicotte) - he / him / his

<@nirik:matrix.scrye.com>

18:01:25

morning

<@davide:cavalca.name>

18:01:47

!hi

<@zodbot:fedora.im>

18:01:49

Davide Cavalca (dcavalca) - he / him / his

<@conan_kudo:matrix.org>

18:02:02

!hi

<@zodbot:fedora.im>

18:02:04

Neal Gompa (ngompa) - he / him / his

<@dherrera:fedora.im>

18:02:30

!hi

<@zodbot:fedora.im>

18:02:31

Diego Herrera (dherrera) - he / him / his

<@salimma:fedora.im>

18:02:39

!hi

<@zodbot:fedora.im>

18:02:40

Michel Lind (salimma) - he / him / his

<@nhanlon:beeper.com>

18:02:54

!hi

<@zodbot:fedora.im>

18:02:56

Neil Hanlon (neil) - he / him / his

<@nhanlon:beeper.com>

18:03:18

<@nhanlon:beeper.com>

18:03:18

happy* wednesday, folks

<@nhanlon:beeper.com>

18:03:18

__*needs citation__

<@salimma:fedora.im>

18:03:41

I believe in Germany there is a tradition to celebrate midweek

<@salimma:fedora.im>

18:03:46

in parts of Germany I should say

<@tdawson:fedora.im>

18:04:36

Hi Davide Cavalca Conan Kudo Diego Herrera Michel Lind 🎩 James Richardson and Robby Callicotte

<@salimma:fedora.im>

18:04:47

https://blogs.transparent.com/german/what-mittwoch-means/

<@tdawson:fedora.im>

18:05:01

Morning nirik

<@salimma:fedora.im>

18:05:14

<@salimma:fedora.im>

18:05:14

> n Germany, this “hump day” is known as das Bergfest (the mountain party). A Bergfest is normally a Fest (celebration) half-way through a project, to celebrate the accomplishments so-far. The work week, then, is seen as a week-long project to overcome, from the difficult Monday and Tuesday to the easier Thursday and Friday, with at the peak the Wednesday.

<@salimma:fedora.im>

18:05:14

In this sense, Mittwoch actually is the middle of the work week!

<@salimma:fedora.im>

18:05:14

However, not everybody is so happy to celebrate #Bergfest, or to see it as having the hardest part of the week behind them. #MittelfingerMittwoch shows people giving the finger to the Mittwoch, a horrible day, in the middle of the week!

<@salimma:fedora.im>

18:05:14

<@salimma:fedora.im>

18:05:14

#MittelfingerMittwoch

<@tdawson:fedora.im>

18:05:26

Hi Neil Hanlon

<@tdawson:fedora.im>

18:05:36

!topic EPEL Issues https://pagure.io/epel/issues

<@nhanlon:beeper.com>

18:05:38

hey Troy, hope you're doing well :)

<@tdawson:fedora.im>

18:05:43

!link https://pagure.io/epel/issues?tags=meeting&status=Open

<@tdawson:fedora.im>

18:06:26

Looks like we dont' have any open issues this week ... so moving on.

<@tdawson:fedora.im>

18:06:39

And yep, I'm doing well this week.

<@smooge:fedora.im>

18:06:43

hello

<@tdawson:fedora.im>

18:06:48

!topic EPEL 10

<@tdawson:fedora.im>

18:06:55

Hello Stephen J Smoogen

<@tdawson:fedora.im>

18:07:05

!link https://hackmd.io/q6TNkYjJT82EtzhlyPGpog

<@tdawson:fedora.im>

18:08:10

Beyond all the busy compiling everyone has been doing, do we have any EPEL 10 stuff we want to discuss?

<@salimma:fedora.im>

18:09:06

someone asked for hypothesis, which will be a doozy to bring up

<@smooge:fedora.im>

18:09:13

the usual? when will it be released :)?

<@salimma:fedora.im>

18:09:19

but probably useful at some point (but not critical, you can just disable tests)

<@jrichardson:matrix.org>

18:09:28

I filed an issue with the Fedora-CI team to create an epel10 profile, so hopefully soon we'll have dist-git test and installability working

<@tdawson:fedora.im>

18:09:28

I do have one thing if nobody else is going to bring it up. It's dealing with the packages in Bodhi that are sitting in Pending.

<@dherrera:fedora.im>

18:09:38

Carl George doesn't seem to be here, I've been sending some PRs on fedpkg to make it more aware of minors and stuff :)

<@salimma:fedora.im>

18:09:40

not soon enough, and too soon

<@carlwgeorge:matrix.org>

18:10:00

!hi

<@zodbot:fedora.im>

18:10:02

Carl George (carlwgeorge) - he / him / his

<@carlwgeorge:matrix.org>

18:10:03

sorry, lost track of time

<@salimma:fedora.im>

18:10:04

we can clear that up manually too, right? but it does seem to catch people by surprise

<@tdawson:fedora.im>

18:10:45

Ya, we can clean it up manually. I was just wondering if we had a time frame we'd do it at? 7 days, 5 days?

<@salimma:fedora.im>

18:11:00

doing it right after each meeting seems useful

<@salimma:fedora.im>

18:11:06

so we get a reminder to do it :)

<@carlwgeorge:matrix.org>

18:11:06

i've got things staged to switch epel10 to rawhide-style composes

<@carlwgeorge:matrix.org>

18:11:17

!link https://pagure.io/pungi-fedora/pull-request/1341

<@salimma:fedora.im>

18:11:18

neat

<@carlwgeorge:matrix.org>

18:11:23

!link https://pagure.io/fedora-infra/ansible/pull-request/2230

<@salimma:fedora.im>

18:11:23

so hopefully not a problem for much longer

<@tdawson:fedora.im>

18:11:49

Carl George: So that means that they'll just automatically go from pending -> testing -> stable?

<@carlwgeorge:matrix.org>

18:11:58

i think once we get those landed, and make sure they work, that things will work smoothly until we're ready to disable automatic updates

<@carlwgeorge:matrix.org>

18:12:02

yup

<@salimma:fedora.im>

18:12:05

https://bodhi.fedoraproject.org/releases/EPEL-10.0 for those who want to follow along

<@salimma:fedora.im>

18:12:17

only one currently unpushed, I just hit push

<@carlwgeorge:matrix.org>

18:12:20

like we had before we turned on the bodhi composes, just with a working repo

<@carlwgeorge:matrix.org>

18:12:36

i actually think those skip testing and go straight to stable

<@jonathanspw:fedora.im>

18:12:53

!hi

<@zodbot:fedora.im>

18:12:54

Jonathan Wright (jonathanspw)

<@carlwgeorge:matrix.org>

18:13:20

the desired state is an empty testing repo, automatic updates going straight to stable, composed once a day to a "stable" repo

<@music:fedora.im>

18:13:36

!hi

<@zodbot:fedora.im>

18:13:37

Benjamin Beasley (music) - he / him / his

<@tdawson:fedora.im>

18:14:02

Hi Jonathan Wright and music

<@tdawson:fedora.im>

18:15:38

Actually Michel Lind 🎩 , I see 10 or 11 that are sitting in Pending

<@salimma:fedora.im>

18:15:49

huh

<@tdawson:fedora.im>

18:16:02

https://bodhi.fedoraproject.org/updates/?releases=EPEL-10.0&status=pending

<@salimma:fedora.im>

18:16:05

oh I need to view all

<@salimma:fedora.im>

18:16:21

and filter by pending, yeah

<@carlwgeorge:matrix.org>

18:16:50

once the compose is working, i plan to go over these and make sure everything has moved to stable, either automatically or manually

<@tdawson:fedora.im>

18:17:11

Thank you.

<@carlwgeorge:matrix.org>

18:17:45

i think that's everything i had for epel10, hopefully by next week we'll be in the desired state, but no promises

<@tdawson:fedora.im>

18:18:50

I'm just excited that we're already almost to 500 packages, and I've just barely started my KDE stuff.

<@tdawson:fedora.im>

18:19:04

Any other epel10 stuff before we move on?

<@carlwgeorge:matrix.org>

18:19:15

yeah, we're on pace to have a nice content set by the time we officially launch

<@rcallicotte:fedora.im>

18:19:28

awesome

<@tdawson:fedora.im>

18:19:41

!topic Old Business

<@tdawson:fedora.im>

18:20:01

I do have one quick old business item

<@tdawson:fedora.im>

18:20:40

I have opened a ticket for the EPEL2RHEL epel10 stuff. It has been aqnowledged, but I think it won't get done before the next sprint, so a couple of weeks.

<@tdawson:fedora.im>

18:21:14

Hopefully we don't get any more EPEL2RHEL for epel10 bugs before then. But if we do, we can close them.

<@tdawson:fedora.im>

18:21:32

I have opened a ticket for the EPEL2RHEL epel10 stuff. It has been acknowledged, but I think it won't get done before the next sprint, so a couple of weeks.

<@carlwgeorge:matrix.org>

18:21:51

technically they could point that to https://dl.fedoraproject.org/pub/epel/10/Everything/x86_64/ for their check now, that is the expected repo path even after the pending changes

<@tdawson:fedora.im>

18:22:20

Yep, that is where I pointed them to.

<@carlwgeorge:matrix.org>

18:22:29

i haven't been talking up the existence of that directory because i don't want anyone to count on it yet, but for epel2rhel it's probably fine

<@tdawson:fedora.im>

18:22:52

I figured that would be for CentOS Stream stuff in the future, and that would be what we want them checking against.

<@tdawson:fedora.im>

18:24:08

music: I just realized I didn't ask you if you had anything you wanted to discuss.

<@music:fedora.im>

18:24:30

I have a question that I posed in Fedora EPEL and Neil Hanlon invited me to bring over here. Is it a good time?

<@carlwgeorge:matrix.org>

18:24:44

probably better for open floor

<@carlwgeorge:matrix.org>

18:24:55

it's epel10 but not actually related to the epel10 bringup

<@music:fedora.im>

18:24:59

agreed, it’s an open floor thing if you have one

<@carlwgeorge:matrix.org>

18:25:05

more of a general -epel thing

<@tdawson:fedora.im>

18:25:35

music: You'll be first in the queue when we get to Open Floor

<@tdawson:fedora.im>

18:25:46

Do we have any other Old Business?

<@nhanlon:beeper.com>

18:26:09

🤷‍♂️ whatever the group thinks is best. didnt mean to leave you astray, @music

<@carlwgeorge:matrix.org>

18:26:20

epel 8 modular is still hanging around https://pagure.io/releng/issue/11292

<@carlwgeorge:matrix.org>

18:26:44

looks like we still need the testing repos archived, then mm can be updated, then we can drop all the things from the main mirrors

<@tdawson:fedora.im>

18:27:34

Do we have ticket(s) for archiving the testing repos? And ... do we usually archive testing repos? I thought they just went away.

<@carlwgeorge:matrix.org>

18:28:20

https://archive.fedoraproject.org/pub/archive/epel/testing/

<@nirik:matrix.scrye.com>

18:28:25

I think we have been... but we could decide to not

<@carlwgeorge:matrix.org>

18:28:46

if we don't archive it, then we just need to remove those repos from mm

<@tdawson:fedora.im>

18:28:53

I'm ok either way, I've just never noticed we archived them.

<@carlwgeorge:matrix.org>

18:28:53

doesn't really matter to me

<@tdawson:fedora.im>

18:31:11

Anyone up for creating the issue to archive or remove it? We'll leave it to whoever wants to do the issue.

<@carlwgeorge:matrix.org>

18:31:28

i think it's fine to keep working it in this issue

<@nirik:matrix.scrye.com>

18:31:37

no need for more tickets.

<@nirik:matrix.scrye.com>

18:31:39

please

<@tdawson:fedora.im>

18:31:46

:) OK

<@carlwgeorge:matrix.org>

18:32:14

i was mainly bringing it up for awareness under old biz, we can move on now

<@tdawson:fedora.im>

18:32:31

OK, any other Old Business?

<@tdawson:fedora.im>

18:33:18

!topic General Issues / Open Floor

<@tdawson:fedora.im>

18:33:27

music: Your first, go for it.

<@tdawson:fedora.im>

18:34:46

Oh, I hope we didn't loose music

<@carlwgeorge:matrix.org>

18:35:12

if we did i can summarize the question and answer it, so it's in the meeting log for him later

<@music:fedora.im>

18:35:52

So given that `zlib-ng` is in EL10, but only builds the `-compat*` subpackages (API/ABI compatible drop-in for classic `zlib`), https://tiny.distro.builders/view-srpm--view-c10s--zlib-ng.html – am I correct that this is a case of https://docs.fedoraproject.org/en-US/epel/epel-policy-missing-sub-packages/#missing\_un-built\_sub-packages, and I should ask the `zlib-ng` maintainers to request a `zlib-ng-epel` package and use it to provide the non-compat subpackages, i.e. `zlib-ng` and `zlib-ng-devel`?

<@yselkowitz:fedora.im>

18:36:32

or request that zlib-ng{,-devel} are added to CRB?

<@conan_kudo:matrix.org>

18:36:41

yes

<@carlwgeorge:matrix.org>

18:36:45

first step would be to file an issue to ask for zlib-ng and zlib-ng-devel to be shipped. if it can, that will be the easiest solution.

<@conan_kudo:matrix.org>

18:36:52

I would recommend requesting zlib-ng be added to RHEL base first

<@carlwgeorge:matrix.org>

18:37:38

if the answer is no, or you want it in the meantime while waiting for an answer, then it would be appropriate to request a new zilb-ng-epel source package in epel, that creates zlib-ng and zlib-ng-devel

<@carlwgeorge:matrix.org>

18:37:55

this is covered in more depth here https://docs.fedoraproject.org/en-US/epel/epel-policy-missing-sub-packages/

<@music:fedora.im>

18:38:02

Is that a make a red hat account and figure out how to use jira thing?

<@conan_kudo:matrix.org>

18:38:08

yes

<@carlwgeorge:matrix.org>

18:38:23

i kinda want to rework that page to mention the issue approach first, and the -epel approach as the backup plan

<@conan_kudo:matrix.org>

18:38:40

music: https://docs.centos.org/en-US/stream-contrib/quickstart/#_1_file_an_issue

<@decathorpe:fedora.im>

18:38:43

if you don't have an account yet, I can file that ticket (if I can navigate between Scylla and Charybdis , erm, JIRA)

<@decathorpe:fedora.im>

18:38:55

(since it's me who originally encountered that zlib-ng is missing)

<@tdawson:fedora.im>

18:39:25

Instead of the "Short Team" "Long Term" ... that sounds like a good idea.

<@carlwgeorge:matrix.org>

18:39:33

since nothing current requires libz-ng.so.2 in c10, my guess is that the answer will be no, but better to be sure. the rhel maintainer may be planning on adding it for isvs to use, or they may be surprised that it's not already included

<@music:fedora.im>

18:40:04

I need to file an issue about `llhttp` being an old version with a known CVE anyway, so I guess I have to bite the bullet and finally make a Red Hat account either way…

<@carlwgeorge:matrix.org>

18:40:13

if we do have to go the zlib-ng-epel route, i can help with that

<@salimma:fedora.im>

18:40:23

oof. how bad a CVE?

<@music:fedora.im>

18:41:14

https://nodejs.org/en/blog/vulnerability/april-2024-security-releases/#http-request-smuggling-via-content-length-obfuscation---cve-2024-27982---medium

<@music:fedora.im>

18:41:45

I’m told that it’s still bundled (and up to date) in the shipped nodejs packages, but the standalone llhttp is relevant for eventually adding `python-aiohttp` to EPEL10.

<@decathorpe:fedora.im>

18:42:28

also for libgit2 (is it bundled there too?)

<@carlwgeorge:matrix.org>

18:42:45

nope, libgit2 links against it

<@carlwgeorge:matrix.org>

18:43:22

had to learn that in a panic with the rpmautospec mess last week

<@tdawson:fedora.im>

18:43:34

I've been told (cuz I already opened a ticket on it) that libgit2 will NOT be in RHEL10 ... oh, and I see it's already in EPEL 10.

<@tdawson:fedora.im>

18:43:57

Sorry ... I misunderstood what was said, disregard me.

<@rcallicotte:fedora.im>

18:43:59

neat

<@carlwgeorge:matrix.org>

18:44:14

did i already recap the rpmautospec stuff here last week? if not i can now if people are interested.

<@decathorpe:fedora.im>

18:44:21

it will not be in RHEL 10 except a dozen different versions bundled in various stuff? :)

<@carlwgeorge:matrix.org>

18:44:37

or just read through https://pagure.io/releng/issue/12266

<@salimma:fedora.im>

18:44:39

yes

<@salimma:fedora.im>

18:45:01

istr we talked about it but I don't remember if it was in the meeting or in EPEL and releng

<@salimma:fedora.im>

18:45:12

so probably good to have in the notes

<@tdawson:fedora.im>

18:45:17

If you can do a one or two sentence summary, that would be good for the logs.

<@salimma:fedora.im>

18:45:27

!info rpmautospec bootstrap problem

<@salimma:fedora.im>

18:45:28

!link https://pagure.io/releng/issue/12266

<@carlwgeorge:matrix.org>

18:47:09

fedora koji switched from rpmautospec as a koji plugin, to rpmautospec as a mock plugin. this means that rpmautospec must be installed in each mock chroot. that switched causes epel10 builds to start failing because it wasn't available yet. the change won't be reverted so now we just have to build into our sop the bootstrap steps for rpmautospec.

<@salimma:fedora.im>

18:47:45

it's doubly fun because rpmautospec uses rpmautospec, right

<@carlwgeorge:matrix.org>

18:47:58

yup

<@salimma:fedora.im>

18:48:08

I'm OK with us requesting that rpmautospec and its dependencies *do not* use it

<@salimma:fedora.im>

18:48:16

might be .. an FPC or a fesco thing?

<@carlwgeorge:matrix.org>

18:48:18

eln will have more problems with this before we do, because of python3.14

<@carlwgeorge:matrix.org>

18:48:30

https://github.com/fedora-infra/rpmautospec/issues/169

<@conan_kudo:matrix.org>

18:48:35

it would have to be a FESCo request

<@salimma:fedora.im>

18:48:46

Carl George: want to submit such a requst?

<@salimma:fedora.im>

18:48:50

I'll happily vote for it

<@carlwgeorge:matrix.org>

18:49:07

the rpmautospec spec file has fallback stuff, that's not the hard part

<@carlwgeorge:matrix.org>

18:49:58

i'm gonna leave this one firmly in the hands of the rpmautospec devs to sort out

<@salimma:fedora.im>

18:50:20

fair

<@carlwgeorge:matrix.org>

18:50:38

for epel11 i'm hoping we can just override tag in eln or f46 builds to do our bootstrap, then promptly not think about it again

<@carlwgeorge:matrix.org>

18:51:05

i used f40 builds this time

<@tdawson:fedora.im>

18:52:16

Thank you for working on this.

<@tdawson:fedora.im>

18:52:59

Our time is getting a little short, is there any other Open Floor items that people wanted to bring up?

<@salimma:fedora.im>

18:54:19

probably more an 'old topic' I missed out - I closed the zeek issue and commented with our discussion results

<@tdawson:fedora.im>

18:55:02

I saw that. I'm sure the many zeek users are going to be glad that things are in place.

<@decathorpe:fedora.im>

18:56:51

short status update: Rust stack bootstrap for EPEL 10 is progressing ... but will still take a day or two

<@conan_kudo:matrix.org>

18:56:52

kiwi should be landing in EPEL 10 today :)

<@nhanlon:beeper.com>

18:56:53

feel free to throw some at me Michel Lind 🎩

<@salimma:fedora.im>

18:57:02

oh yeah, that

<@salimma:fedora.im>

18:57:11

thaks to the RH maintainer of screen for the speedy turnaround

<@salimma:fedora.im>

18:57:27

and Jerry James. everything else was straightforward thanks to ebranch and the packages being coowned by python SIG :)

<@zodbot:fedora.im>

18:57:43

neil has already given cookies to salimma during the F40 timeframe

<@tdawson:fedora.im>

18:58:17

Yah Rust 🎉 Yah Kiwi 🎉

<@zodbot:fedora.im>

18:58:42

salimma has already given cookies to decathorpe during the F40 timeframe

<@zodbot:fedora.im>

18:58:52

neil has already given cookies to decathorpe during the F40 timeframe

<@tdawson:fedora.im>

18:59:25

I think our time is spent. Thank you all for the good discussion, and for all that you do for EPEL and it's community. Especially your work on epel10.

<@tdawson:fedora.im>

18:59:34

I'll talk to ya'll next week, if not sooner.

<@rcallicotte:fedora.im>

18:59:58

bye everyone. thanks Troy Dawson

<@jrichardson:matrix.org>

19:00:14

Goodnight All, thanks Troy Dawson

<@tdawson:fedora.im>

19:00:17

!endmeeting