2024-08-28 18:00:30 <@tdawson:fedora.im> !startmeeting EPEL (2024-08-28) 2024-08-28 18:00:31 <@meetbot:fedora.im> Meeting started at 2024-08-28 18:00:30 UTC 2024-08-28 18:00:31 <@meetbot:fedora.im> The Meeting name is 'EPEL (2024-08-28)' 2024-08-28 18:00:37 <@tdawson:fedora.im> !meetingname epel 2024-08-28 18:00:37 <@tdawson:fedora.im> !topic aloha 2024-08-28 18:00:38 <@meetbot:fedora.im> The Meeting Name is now epel 2024-08-28 18:00:50 <@jrichardson:matrix.org> !hi 2024-08-28 18:00:52 <@zodbot:fedora.im> James Richardson (jrichardson) 2024-08-28 18:01:00 <@rcallicotte:fedora.im> !hi 2024-08-28 18:01:02 <@zodbot:fedora.im> Robby Callicotte (rcallicotte) - he / him / his 2024-08-28 18:01:25 <@nirik:matrix.scrye.com> morning 2024-08-28 18:01:47 <@davide:cavalca.name> !hi 2024-08-28 18:01:49 <@zodbot:fedora.im> Davide Cavalca (dcavalca) - he / him / his 2024-08-28 18:02:02 <@conan_kudo:matrix.org> !hi 2024-08-28 18:02:04 <@zodbot:fedora.im> Neal Gompa (ngompa) - he / him / his 2024-08-28 18:02:30 <@dherrera:fedora.im> !hi 2024-08-28 18:02:31 <@zodbot:fedora.im> Diego Herrera (dherrera) - he / him / his 2024-08-28 18:02:39 <@salimma:fedora.im> !hi 2024-08-28 18:02:40 <@zodbot:fedora.im> Michel Lind (salimma) - he / him / his 2024-08-28 18:02:54 <@nhanlon:beeper.com> !hi 2024-08-28 18:02:56 <@zodbot:fedora.im> Neil Hanlon (neil) - he / him / his 2024-08-28 18:03:18 <@nhanlon:beeper.com> 2024-08-28 18:03:18 <@nhanlon:beeper.com> happy* wednesday, folks 2024-08-28 18:03:18 <@nhanlon:beeper.com> __*needs citation__ 2024-08-28 18:03:41 <@salimma:fedora.im> I believe in Germany there is a tradition to celebrate midweek 2024-08-28 18:03:46 <@salimma:fedora.im> in parts of Germany I should say 2024-08-28 18:04:36 <@tdawson:fedora.im> Hi Davide Cavalca Conan Kudo Diego Herrera Michel Lind 🎩 James Richardson and Robby Callicotte 2024-08-28 18:04:47 <@salimma:fedora.im> https://blogs.transparent.com/german/what-mittwoch-means/ 2024-08-28 18:05:01 <@tdawson:fedora.im> Morning nirik 2024-08-28 18:05:14 <@salimma:fedora.im> 2024-08-28 18:05:14 <@salimma:fedora.im> > n Germany, this “hump day” is known as das Bergfest (the mountain party). A Bergfest is normally a Fest (celebration) half-way through a project, to celebrate the accomplishments so-far. The work week, then, is seen as a week-long project to overcome, from the difficult Monday and Tuesday to the easier Thursday and Friday, with at the peak the Wednesday. 2024-08-28 18:05:14 <@salimma:fedora.im> In this sense, Mittwoch actually is the middle of the work week! 2024-08-28 18:05:14 <@salimma:fedora.im> However, not everybody is so happy to celebrate #Bergfest, or to see it as having the hardest part of the week behind them. #MittelfingerMittwoch shows people giving the finger to the Mittwoch, a horrible day, in the middle of the week! 2024-08-28 18:05:14 <@salimma:fedora.im> 2024-08-28 18:05:14 <@salimma:fedora.im> #MittelfingerMittwoch 2024-08-28 18:05:26 <@tdawson:fedora.im> Hi Neil Hanlon 2024-08-28 18:05:36 <@tdawson:fedora.im> !topic EPEL Issues https://pagure.io/epel/issues 2024-08-28 18:05:38 <@nhanlon:beeper.com> hey Troy, hope you're doing well :) 2024-08-28 18:05:43 <@tdawson:fedora.im> !link https://pagure.io/epel/issues?tags=meeting&status=Open 2024-08-28 18:06:26 <@tdawson:fedora.im> Looks like we dont' have any open issues this week ... so moving on. 2024-08-28 18:06:39 <@tdawson:fedora.im> And yep, I'm doing well this week. 2024-08-28 18:06:43 <@smooge:fedora.im> hello 2024-08-28 18:06:48 <@tdawson:fedora.im> !topic EPEL 10 2024-08-28 18:06:55 <@tdawson:fedora.im> Hello Stephen J Smoogen 2024-08-28 18:07:05 <@tdawson:fedora.im> !link https://hackmd.io/q6TNkYjJT82EtzhlyPGpog 2024-08-28 18:08:10 <@tdawson:fedora.im> Beyond all the busy compiling everyone has been doing, do we have any EPEL 10 stuff we want to discuss? 2024-08-28 18:09:06 <@salimma:fedora.im> someone asked for hypothesis, which will be a doozy to bring up 2024-08-28 18:09:13 <@smooge:fedora.im> the usual? when will it be released :)? 2024-08-28 18:09:19 <@salimma:fedora.im> but probably useful at some point (but not critical, you can just disable tests) 2024-08-28 18:09:28 <@jrichardson:matrix.org> I filed an issue with the Fedora-CI team to create an epel10 profile, so hopefully soon we'll have dist-git test and installability working 2024-08-28 18:09:28 <@tdawson:fedora.im> I do have one thing if nobody else is going to bring it up. It's dealing with the packages in Bodhi that are sitting in Pending. 2024-08-28 18:09:38 <@dherrera:fedora.im> Carl George doesn't seem to be here, I've been sending some PRs on fedpkg to make it more aware of minors and stuff :) 2024-08-28 18:09:40 <@salimma:fedora.im> not soon enough, and too soon 2024-08-28 18:10:00 <@carlwgeorge:matrix.org> !hi 2024-08-28 18:10:02 <@zodbot:fedora.im> Carl George (carlwgeorge) - he / him / his 2024-08-28 18:10:03 <@carlwgeorge:matrix.org> sorry, lost track of time 2024-08-28 18:10:04 <@salimma:fedora.im> we can clear that up manually too, right? but it does seem to catch people by surprise 2024-08-28 18:10:45 <@tdawson:fedora.im> Ya, we can clean it up manually. I was just wondering if we had a time frame we'd do it at? 7 days, 5 days? 2024-08-28 18:11:00 <@salimma:fedora.im> doing it right after each meeting seems useful 2024-08-28 18:11:06 <@salimma:fedora.im> so we get a reminder to do it :) 2024-08-28 18:11:06 <@carlwgeorge:matrix.org> i've got things staged to switch epel10 to rawhide-style composes 2024-08-28 18:11:17 <@carlwgeorge:matrix.org> !link https://pagure.io/pungi-fedora/pull-request/1341 2024-08-28 18:11:18 <@salimma:fedora.im> neat 2024-08-28 18:11:23 <@carlwgeorge:matrix.org> !link https://pagure.io/fedora-infra/ansible/pull-request/2230 2024-08-28 18:11:23 <@salimma:fedora.im> so hopefully not a problem for much longer 2024-08-28 18:11:49 <@tdawson:fedora.im> Carl George: So that means that they'll just automatically go from pending -> testing -> stable? 2024-08-28 18:11:58 <@carlwgeorge:matrix.org> i think once we get those landed, and make sure they work, that things will work smoothly until we're ready to disable automatic updates 2024-08-28 18:12:02 <@carlwgeorge:matrix.org> yup 2024-08-28 18:12:05 <@salimma:fedora.im> https://bodhi.fedoraproject.org/releases/EPEL-10.0 for those who want to follow along 2024-08-28 18:12:17 <@salimma:fedora.im> only one currently unpushed, I just hit push 2024-08-28 18:12:20 <@carlwgeorge:matrix.org> like we had before we turned on the bodhi composes, just with a working repo 2024-08-28 18:12:36 <@carlwgeorge:matrix.org> i actually think those skip testing and go straight to stable 2024-08-28 18:12:53 <@jonathanspw:fedora.im> !hi 2024-08-28 18:12:54 <@zodbot:fedora.im> Jonathan Wright (jonathanspw) 2024-08-28 18:13:20 <@carlwgeorge:matrix.org> the desired state is an empty testing repo, automatic updates going straight to stable, composed once a day to a "stable" repo 2024-08-28 18:13:36 <@music:fedora.im> !hi 2024-08-28 18:13:37 <@zodbot:fedora.im> Benjamin Beasley (music) - he / him / his 2024-08-28 18:14:02 <@tdawson:fedora.im> Hi Jonathan Wright and music 2024-08-28 18:15:38 <@tdawson:fedora.im> Actually Michel Lind 🎩 , I see 10 or 11 that are sitting in Pending 2024-08-28 18:15:49 <@salimma:fedora.im> huh 2024-08-28 18:16:02 <@tdawson:fedora.im> https://bodhi.fedoraproject.org/updates/?releases=EPEL-10.0&status=pending 2024-08-28 18:16:05 <@salimma:fedora.im> oh I need to view all 2024-08-28 18:16:21 <@salimma:fedora.im> and filter by pending, yeah 2024-08-28 18:16:50 <@carlwgeorge:matrix.org> once the compose is working, i plan to go over these and make sure everything has moved to stable, either automatically or manually 2024-08-28 18:17:11 <@tdawson:fedora.im> Thank you. 2024-08-28 18:17:45 <@carlwgeorge:matrix.org> i think that's everything i had for epel10, hopefully by next week we'll be in the desired state, but no promises 2024-08-28 18:18:50 <@tdawson:fedora.im> I'm just excited that we're already almost to 500 packages, and I've just barely started my KDE stuff. 2024-08-28 18:19:04 <@tdawson:fedora.im> Any other epel10 stuff before we move on? 2024-08-28 18:19:15 <@carlwgeorge:matrix.org> yeah, we're on pace to have a nice content set by the time we officially launch 2024-08-28 18:19:28 <@rcallicotte:fedora.im> awesome 2024-08-28 18:19:41 <@tdawson:fedora.im> !topic Old Business 2024-08-28 18:20:01 <@tdawson:fedora.im> I do have one quick old business item 2024-08-28 18:20:40 <@tdawson:fedora.im> I have opened a ticket for the EPEL2RHEL epel10 stuff. It has been aqnowledged, but I think it won't get done before the next sprint, so a couple of weeks. 2024-08-28 18:21:14 <@tdawson:fedora.im> Hopefully we don't get any more EPEL2RHEL for epel10 bugs before then. But if we do, we can close them. 2024-08-28 18:21:32 <@tdawson:fedora.im> I have opened a ticket for the EPEL2RHEL epel10 stuff. It has been acknowledged, but I think it won't get done before the next sprint, so a couple of weeks. 2024-08-28 18:21:51 <@carlwgeorge:matrix.org> technically they could point that to https://dl.fedoraproject.org/pub/epel/10/Everything/x86_64/ for their check now, that is the expected repo path even after the pending changes 2024-08-28 18:22:20 <@tdawson:fedora.im> Yep, that is where I pointed them to. 2024-08-28 18:22:29 <@carlwgeorge:matrix.org> i haven't been talking up the existence of that directory because i don't want anyone to count on it yet, but for epel2rhel it's probably fine 2024-08-28 18:22:52 <@tdawson:fedora.im> I figured that would be for CentOS Stream stuff in the future, and that would be what we want them checking against. 2024-08-28 18:24:08 <@tdawson:fedora.im> music: I just realized I didn't ask you if you had anything you wanted to discuss. 2024-08-28 18:24:30 <@music:fedora.im> I have a question that I posed in Fedora EPEL and Neil Hanlon invited me to bring over here. Is it a good time? 2024-08-28 18:24:44 <@carlwgeorge:matrix.org> probably better for open floor 2024-08-28 18:24:55 <@carlwgeorge:matrix.org> it's epel10 but not actually related to the epel10 bringup 2024-08-28 18:24:59 <@music:fedora.im> agreed, it’s an open floor thing if you have one 2024-08-28 18:25:05 <@carlwgeorge:matrix.org> more of a general -epel thing 2024-08-28 18:25:35 <@tdawson:fedora.im> music: You'll be first in the queue when we get to Open Floor 2024-08-28 18:25:46 <@tdawson:fedora.im> Do we have any other Old Business? 2024-08-28 18:26:09 <@nhanlon:beeper.com> 🤷‍♂️ whatever the group thinks is best. didnt mean to leave you astray, @music 2024-08-28 18:26:20 <@carlwgeorge:matrix.org> epel 8 modular is still hanging around https://pagure.io/releng/issue/11292 2024-08-28 18:26:44 <@carlwgeorge:matrix.org> looks like we still need the testing repos archived, then mm can be updated, then we can drop all the things from the main mirrors 2024-08-28 18:27:34 <@tdawson:fedora.im> Do we have ticket(s) for archiving the testing repos? And ... do we usually archive testing repos? I thought they just went away. 2024-08-28 18:28:20 <@carlwgeorge:matrix.org> https://archive.fedoraproject.org/pub/archive/epel/testing/ 2024-08-28 18:28:25 <@nirik:matrix.scrye.com> I think we have been... but we could decide to not 2024-08-28 18:28:46 <@carlwgeorge:matrix.org> if we don't archive it, then we just need to remove those repos from mm 2024-08-28 18:28:53 <@tdawson:fedora.im> I'm ok either way, I've just never noticed we archived them. 2024-08-28 18:28:53 <@carlwgeorge:matrix.org> doesn't really matter to me 2024-08-28 18:31:11 <@tdawson:fedora.im> Anyone up for creating the issue to archive or remove it? We'll leave it to whoever wants to do the issue. 2024-08-28 18:31:28 <@carlwgeorge:matrix.org> i think it's fine to keep working it in this issue 2024-08-28 18:31:37 <@nirik:matrix.scrye.com> no need for more tickets. 2024-08-28 18:31:39 <@nirik:matrix.scrye.com> please 2024-08-28 18:31:46 <@tdawson:fedora.im> :) OK 2024-08-28 18:32:14 <@carlwgeorge:matrix.org> i was mainly bringing it up for awareness under old biz, we can move on now 2024-08-28 18:32:31 <@tdawson:fedora.im> OK, any other Old Business? 2024-08-28 18:33:18 <@tdawson:fedora.im> !topic General Issues / Open Floor 2024-08-28 18:33:27 <@tdawson:fedora.im> music: Your first, go for it. 2024-08-28 18:34:46 <@tdawson:fedora.im> Oh, I hope we didn't loose music 2024-08-28 18:35:12 <@carlwgeorge:matrix.org> if we did i can summarize the question and answer it, so it's in the meeting log for him later 2024-08-28 18:35:52 <@music:fedora.im> So given that `zlib-ng` is in EL10, but only builds the `-compat*` subpackages (API/ABI compatible drop-in for classic `zlib`), https://tiny.distro.builders/view-srpm--view-c10s--zlib-ng.html – am I correct that this is a case of https://docs.fedoraproject.org/en-US/epel/epel-policy-missing-sub-packages/#missing\_un-built\_sub-packages, and I should ask the `zlib-ng` maintainers to request a `zlib-ng-epel` package and use it to provide the non-compat subpackages, i.e. `zlib-ng` and `zlib-ng-devel`? 2024-08-28 18:36:32 <@yselkowitz:fedora.im> or request that zlib-ng{,-devel} are added to CRB? 2024-08-28 18:36:41 <@conan_kudo:matrix.org> yes 2024-08-28 18:36:45 <@carlwgeorge:matrix.org> first step would be to file an issue to ask for zlib-ng and zlib-ng-devel to be shipped. if it can, that will be the easiest solution. 2024-08-28 18:36:52 <@conan_kudo:matrix.org> I would recommend requesting zlib-ng be added to RHEL base first 2024-08-28 18:37:38 <@carlwgeorge:matrix.org> if the answer is no, or you want it in the meantime while waiting for an answer, then it would be appropriate to request a new zilb-ng-epel source package in epel, that creates zlib-ng and zlib-ng-devel 2024-08-28 18:37:55 <@carlwgeorge:matrix.org> this is covered in more depth here https://docs.fedoraproject.org/en-US/epel/epel-policy-missing-sub-packages/ 2024-08-28 18:38:02 <@music:fedora.im> Is that a make a red hat account and figure out how to use jira thing? 2024-08-28 18:38:08 <@conan_kudo:matrix.org> yes 2024-08-28 18:38:23 <@carlwgeorge:matrix.org> i kinda want to rework that page to mention the issue approach first, and the -epel approach as the backup plan 2024-08-28 18:38:40 <@conan_kudo:matrix.org> music: https://docs.centos.org/en-US/stream-contrib/quickstart/#_1_file_an_issue 2024-08-28 18:38:43 <@decathorpe:fedora.im> if you don't have an account yet, I can file that ticket (if I can navigate between Scylla and Charybdis , erm, JIRA) 2024-08-28 18:38:55 <@decathorpe:fedora.im> (since it's me who originally encountered that zlib-ng is missing) 2024-08-28 18:39:25 <@tdawson:fedora.im> Instead of the "Short Team" "Long Term" ... that sounds like a good idea. 2024-08-28 18:39:33 <@carlwgeorge:matrix.org> since nothing current requires libz-ng.so.2 in c10, my guess is that the answer will be no, but better to be sure. the rhel maintainer may be planning on adding it for isvs to use, or they may be surprised that it's not already included 2024-08-28 18:40:04 <@music:fedora.im> I need to file an issue about `llhttp` being an old version with a known CVE anyway, so I guess I have to bite the bullet and finally make a Red Hat account either way… 2024-08-28 18:40:13 <@carlwgeorge:matrix.org> if we do have to go the zlib-ng-epel route, i can help with that 2024-08-28 18:40:23 <@salimma:fedora.im> oof. how bad a CVE? 2024-08-28 18:41:14 <@music:fedora.im> https://nodejs.org/en/blog/vulnerability/april-2024-security-releases/#http-request-smuggling-via-content-length-obfuscation---cve-2024-27982---medium 2024-08-28 18:41:45 <@music:fedora.im> I’m told that it’s still bundled (and up to date) in the shipped nodejs packages, but the standalone llhttp is relevant for eventually adding `python-aiohttp` to EPEL10. 2024-08-28 18:42:28 <@decathorpe:fedora.im> also for libgit2 (is it bundled there too?) 2024-08-28 18:42:45 <@carlwgeorge:matrix.org> nope, libgit2 links against it 2024-08-28 18:43:22 <@carlwgeorge:matrix.org> had to learn that in a panic with the rpmautospec mess last week 2024-08-28 18:43:34 <@tdawson:fedora.im> I've been told (cuz I already opened a ticket on it) that libgit2 will NOT be in RHEL10 ... oh, and I see it's already in EPEL 10. 2024-08-28 18:43:57 <@tdawson:fedora.im> Sorry ... I misunderstood what was said, disregard me. 2024-08-28 18:43:59 <@rcallicotte:fedora.im> neat 2024-08-28 18:44:14 <@carlwgeorge:matrix.org> did i already recap the rpmautospec stuff here last week? if not i can now if people are interested. 2024-08-28 18:44:21 <@decathorpe:fedora.im> it will not be in RHEL 10 except a dozen different versions bundled in various stuff? :) 2024-08-28 18:44:37 <@carlwgeorge:matrix.org> or just read through https://pagure.io/releng/issue/12266 2024-08-28 18:44:39 <@salimma:fedora.im> yes 2024-08-28 18:45:01 <@salimma:fedora.im> istr we talked about it but I don't remember if it was in the meeting or in EPEL and releng 2024-08-28 18:45:12 <@salimma:fedora.im> so probably good to have in the notes 2024-08-28 18:45:17 <@tdawson:fedora.im> If you can do a one or two sentence summary, that would be good for the logs. 2024-08-28 18:45:27 <@salimma:fedora.im> !info rpmautospec bootstrap problem 2024-08-28 18:45:28 <@salimma:fedora.im> !link https://pagure.io/releng/issue/12266 2024-08-28 18:47:09 <@carlwgeorge:matrix.org> fedora koji switched from rpmautospec as a koji plugin, to rpmautospec as a mock plugin. this means that rpmautospec must be installed in each mock chroot. that switched causes epel10 builds to start failing because it wasn't available yet. the change won't be reverted so now we just have to build into our sop the bootstrap steps for rpmautospec. 2024-08-28 18:47:45 <@salimma:fedora.im> it's doubly fun because rpmautospec uses rpmautospec, right 2024-08-28 18:47:58 <@carlwgeorge:matrix.org> yup 2024-08-28 18:48:08 <@salimma:fedora.im> I'm OK with us requesting that rpmautospec and its dependencies *do not* use it 2024-08-28 18:48:16 <@salimma:fedora.im> might be .. an FPC or a fesco thing? 2024-08-28 18:48:18 <@carlwgeorge:matrix.org> eln will have more problems with this before we do, because of python3.14 2024-08-28 18:48:30 <@carlwgeorge:matrix.org> https://github.com/fedora-infra/rpmautospec/issues/169 2024-08-28 18:48:35 <@conan_kudo:matrix.org> it would have to be a FESCo request 2024-08-28 18:48:46 <@salimma:fedora.im> Carl George: want to submit such a requst? 2024-08-28 18:48:50 <@salimma:fedora.im> I'll happily vote for it 2024-08-28 18:49:07 <@carlwgeorge:matrix.org> the rpmautospec spec file has fallback stuff, that's not the hard part 2024-08-28 18:49:58 <@carlwgeorge:matrix.org> i'm gonna leave this one firmly in the hands of the rpmautospec devs to sort out 2024-08-28 18:50:20 <@salimma:fedora.im> fair 2024-08-28 18:50:38 <@carlwgeorge:matrix.org> for epel11 i'm hoping we can just override tag in eln or f46 builds to do our bootstrap, then promptly not think about it again 2024-08-28 18:51:05 <@carlwgeorge:matrix.org> i used f40 builds this time 2024-08-28 18:52:16 <@tdawson:fedora.im> Thank you for working on this. 2024-08-28 18:52:59 <@tdawson:fedora.im> Our time is getting a little short, is there any other Open Floor items that people wanted to bring up? 2024-08-28 18:54:19 <@salimma:fedora.im> probably more an 'old topic' I missed out - I closed the zeek issue and commented with our discussion results 2024-08-28 18:55:02 <@tdawson:fedora.im> I saw that. I'm sure the many zeek users are going to be glad that things are in place. 2024-08-28 18:56:51 <@decathorpe:fedora.im> short status update: Rust stack bootstrap for EPEL 10 is progressing ... but will still take a day or two 2024-08-28 18:56:52 <@conan_kudo:matrix.org> kiwi should be landing in EPEL 10 today :) 2024-08-28 18:56:53 <@nhanlon:beeper.com> feel free to throw some at me Michel Lind 🎩 2024-08-28 18:57:02 <@salimma:fedora.im> oh yeah, that 2024-08-28 18:57:11 <@salimma:fedora.im> thaks to the RH maintainer of screen for the speedy turnaround 2024-08-28 18:57:27 <@salimma:fedora.im> and Jerry James. everything else was straightforward thanks to ebranch and the packages being coowned by python SIG :) 2024-08-28 18:57:43 <@zodbot:fedora.im> neil has already given cookies to salimma during the F40 timeframe 2024-08-28 18:58:17 <@tdawson:fedora.im> Yah Rust 🎉 Yah Kiwi 🎉 2024-08-28 18:58:42 <@zodbot:fedora.im> salimma has already given cookies to decathorpe during the F40 timeframe 2024-08-28 18:58:52 <@zodbot:fedora.im> neil has already given cookies to decathorpe during the F40 timeframe 2024-08-28 18:59:25 <@tdawson:fedora.im> I think our time is spent. Thank you all for the good discussion, and for all that you do for EPEL and it's community. Especially your work on epel10. 2024-08-28 18:59:34 <@tdawson:fedora.im> I'll talk to ya'll next week, if not sooner. 2024-08-28 18:59:58 <@rcallicotte:fedora.im> bye everyone. thanks Troy Dawson 2024-08-28 19:00:14 <@jrichardson:matrix.org> Goodnight All, thanks Troy Dawson 2024-08-28 19:00:17 <@tdawson:fedora.im> !endmeeting