#meeting-3:fedoraproject.org log

<@jnsamyak:matrix.org>

15:00:22

!startmeeting RELENG (2025-04-21)

<@meetbot:fedora.im>

15:00:25

Meeting started at 2025-04-21 15:00:22 UTC

<@meetbot:fedora.im>

15:00:25

The Meeting name is 'RELENG (2025-04-21)'

<@jnsamyak:matrix.org>

15:00:27

!meetingname releng

<@meetbot:fedora.im>

15:00:29

The Meeting Name is now releng

<@nirik:matrix.scrye.com>

15:00:33

morning

<@jnsamyak:matrix.org>

15:00:34

!chair nirik jnsamyak patrikp amedvede

<@jnsamyak:matrix.org>

15:00:43

!info Meeting is 60 minutes MAX. At the end of 60, it stops.

<@smilner:fedora.im>

15:00:46

!hi

<@zodbot:fedora.im>

15:00:47

None (smilner)

<@jnsamyak:matrix.org>

15:00:49

<@jnsamyak:matrix.org>

15:00:49

!info Agenda is at https://hackmd.io/vm6biLBcTYKtkQUH5kQkmw.

<@jnsamyak:matrix.org>

15:01:12

Howdy, happy easter folks! How's everyone doing? Sugar rushhed anyone? :3

<@jnsamyak:matrix.org>

15:01:38

!info there is a holiday today at most of europe so less people will be active

<@nirik:matrix.scrye.com>

15:01:43

just ☕here so far

<@amedvede:fedora.im>

15:01:53

!hi

<@zodbot:fedora.im>

15:01:54

Anton Medvedev (amedvede)

<@jnsamyak:matrix.org>

15:02:07

nirik: and i finished my dinner hehehe

<@jnsamyak:matrix.org>

15:02:21

funny, aleast at flock we will be having meals together :D

<@amedvede:fedora.im>

15:02:24

cant wait for 🛌

<@jnsamyak:matrix.org>

15:03:24

drum roll before we go to the first topic on the agenda today

<@jnsamyak:matrix.org>

15:03:32

🥁

<@jnsamyak:matrix.org>

15:03:36

!topic Init process

<@jnsamyak:matrix.org>

15:03:41

<@jnsamyak:matrix.org>

15:03:41

Do we have anything for the init? Any blockers/tasks/issues/requests/features that need releng intervention?

<@nirik:matrix.scrye.com>

15:04:28

I wanted to mention that I fixed cosmic-atomic updates composes over the weekend. we missed a few steps there. ;(

<@smilner:fedora.im>

15:05:08

nirik: what got missed? I'm on it so I'm curious :-D

<@jnsamyak:matrix.org>

15:05:15

this weekend ngompa opened an issue that Fedora-WSL for F42 are being composed with F43 content - I fixed it today, but it should be okay with the next conmpose

<@jnsamyak:matrix.org>

15:05:21

if it gets reopened

<@jnsamyak:matrix.org>

15:05:28

what did we miss?

<@nirik:matrix.scrye.com>

15:05:43

https://pagure.io/fedora-infra/ansible/c/d4f15818ef0e34a46d485ceb07775cea39f5eb40?branch=main

<@nirik:matrix.scrye.com>

15:05:50

https://pagure.io/fedora-infra/ansible/c/c581b790993e6ef514bf512b0882877a8755b343?branch=main

<@nirik:matrix.scrye.com>

15:06:12

needed to be added as a variant... and needed signing setup for it's updates...

<@jnsamyak:matrix.org>

15:06:22

the new variant changesss!

<@jnsamyak:matrix.org>

15:06:45

thanks for looking into it

<@nirik:matrix.scrye.com>

15:06:57

no worries. should be flowing now

<@nirik:matrix.scrye.com>

15:07:09

Steve: you should see updates now. ;)

<@jnsamyak:matrix.org>

15:07:16

nirik++ I should have looked better when i was doing the varaint checks, one more thing to add to sop

<@zodbot:fedora.im>

15:07:19

jnsamyak has already given cookies to kevin during the F42 timeframe

<@jnsamyak:matrix.org>

15:07:22

for checklist

<@jnsamyak:matrix.org>

15:08:36

Anton Medvedev: since you are here, could you share your retirement check PR progress that you wanted folks to review? Or is it done?

<@nirik:matrix.scrye.com>

15:09:14

also, any news on openh264? or any thoughts how we can move it forward?

<@jnsamyak:matrix.org>

15:09:43

last time i followed it up about this with patrik is, that we didn't hear anything back from the cisco team

<@jnsamyak:matrix.org>

15:10:31

so really not sure how to go forward with this, not sure if patrikp has tried reaching out again? I can check tomorrow if not, I'll ask him to poke again or I'll reply to that email.

<@jnsamyak:matrix.org>

15:10:55

the old way is shipping the tarballs in fragments :3

<@nirik:matrix.scrye.com>

15:10:59

yeah, we should definitely ping again, or try more people

<@smilner:fedora.im>

15:11:18

Yeah, and the old way isn't working as it did before through email 😦

<@jnsamyak:matrix.org>

15:11:32

I said the same thing, I'll check on the progress there once he is back in tomorrow

<@jnsamyak:matrix.org>

15:11:38

yeah

<@amedvede:fedora.im>

15:11:49

yop, now the functionality is done, the problem was that proccesing for 1 package took a lot of time (1min) I optimized the solution and now it 30 sec, there is space for further optimization but It will require to create API that contain package list from all manifests, but not sure if its needed, so now waiting for confirmation

<@nirik:matrix.scrye.com>

15:11:56

I guess I could offer to send from my home address... no outgoing filters here.

<@jnsamyak:matrix.org>

15:13:37

from whom? and where is the code to it - the fedpkg?

<@jnsamyak:matrix.org>

15:13:40

from whom? and where is the code to it - the fedpkg pr?

<@amedvede:fedora.im>

15:14:05

!releng 11957

<@zodbot:fedora.im>

15:14:09

● **Opened:** a year ago by adamwill

<@zodbot:fedora.im>

15:14:09

**releng #11957** (https://pagure.io/releng/issue/11957):**Implement checks on package retirements**

<@zodbot:fedora.im>

15:14:09

<@zodbot:fedora.im>

15:14:09

● **Last Updated:** a week ago

<@zodbot:fedora.im>

15:14:09

● **Assignee:** amedvede

<@amedvede:fedora.im>

15:14:30

I have send a link to PR in comments

<@amedvede:fedora.im>

15:15:12

from anyone in issue tracker

<@jnsamyak:matrix.org>

15:15:30

did you try pinging anyone?

<@jnsamyak:matrix.org>

15:15:42

Can you link the PR here as well please:

<@jnsamyak:matrix.org>

15:15:55

<@jnsamyak:matrix.org>

15:15:55

Private S3 bucket (AWS/GCP): Upload the file to a bucket with access limited to Cisco’s email/IPs. We could also created time based URLs.

<@jnsamyak:matrix.org>

15:15:55

Red Hat's own internal file drop services (like filedrop.redhat.com)

<@jnsamyak:matrix.org>

15:15:55

nirik: I was exploring the other ways but not sure how open-sourcy way it is, but i guess we should not care about it since it is meant to be private

<@amedvede:fedora.im>

15:16:14

https://pagure.io/fedpkg/pull-request/579

<@amedvede:fedora.im>

15:16:19

sure

<@nirik:matrix.scrye.com>

15:16:48

yeah, lots of options if they would let us know what would actually work for them. ;)

<@jnsamyak:matrix.org>

15:17:15

!info Anton's blocked on the review from this couple of weeks, so if folks are free please review are welcome - https://pagure.io/fedpkg/pull-request/579

<@jnsamyak:matrix.org>

15:17:58

nirik: yeah that makes sense, I could just offer them solutions for them to choose might make there life easier

<@nirik:matrix.scrye.com>

15:18:23

yeah, I am not sure what their limitations are tho...

<@jnsamyak:matrix.org>

15:18:57

totally the restrictions are unware feels like a mine field 💣️

<@jnsamyak:matrix.org>

15:19:01

<@jnsamyak:matrix.org>

15:19:36

But anyways that all for init - I'll move to the next topic in 2 mins if we don't have anything

<@amedvede:fedora.im>

15:21:27

dont you know how long time it will take to put ssh key to the system?

<@amedvede:fedora.im>

15:21:41

like i saved new ssh to account.fedora

<@amedvede:fedora.im>

15:21:59

but still cant ssh to batcave for example

<@jnsamyak:matrix.org>

15:22:06

it should have worked by now?

<@nirik:matrix.scrye.com>

15:22:25

there's a short delay for sssd caching... I think it's 10min?

<@jnsamyak:matrix.org>

15:22:30

Did you check the Kerberos conf, etc?

<@amedvede:fedora.im>

15:22:45

yop, did everything by the guide

<@jnsamyak:matrix.org>

15:23:15

Can you share what's the error now?

<@amedvede:fedora.im>

15:23:28

the same

<@amedvede:fedora.im>

15:23:51

debug1: re-parsing configuration

<@amedvede:fedora.im>

15:23:51

debug1: Reading configuration data /etc/ssh/ssh_config.d/20-systemd-ssh-proxy.conf

<@amedvede:fedora.im>

15:23:51

debug1: Reading configuration data /etc/ssh/ssh_config

<@amedvede:fedora.im>

15:23:51

OpenSSH_9.9p1, OpenSSL 3.2.4 11 Feb 2025

<@amedvede:fedora.im>

15:23:51

```amedvede@fedora:~$ ssh -vv amedvede@bodhi-backend01.iad2.fedoraproject.org

<@amedvede:fedora.im>

15:23:51

debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf

<@amedvede:fedora.im>

15:23:51

debug1: Reading configuration data /etc/ssh/ssh_config.d/30-libvirt-ssh-proxy.conf

<@amedvede:fedora.im>

15:23:51

debug1: Reading configuration data /etc/ssh/ssh_config.d/20-systemd-ssh-proxy.conf

<@amedvede:fedora.im>

15:23:51

debug1: Reading configuration data /etc/ssh/ssh_config

<@amedvede:fedora.im>

15:23:51

debug2: match found

<@amedvede:fedora.im>

15:23:51

debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config

<@amedvede:fedora.im>

15:23:51

debug2: resolving "bodhi-backend01.iad2.fedoraproject.org" port 22

<@amedvede:fedora.im>

15:23:51

ssh: Could not resolve hostname bodhi-backend01.iad2.fedoraproject.org: Name or service not known

<@amedvede:fedora.im>

15:23:51

amedvede@fedora:~$

<@amedvede:fedora.im>

15:23:51

```

<@amedvede:fedora.im>

15:23:51

debug1: configuration requests final Match pass

<@amedvede:fedora.im>

15:23:51

debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config

<@amedvede:fedora.im>

15:23:51

debug2: match not found

<@amedvede:fedora.im>

15:23:51

debug2: checking match for 'final all' host bodhi-backend01.iad2.fedoraproject.org originally bodhi-backend01.iad2.fedoraproject.org

<@amedvede:fedora.im>

15:23:51

debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf

<@amedvede:fedora.im>

15:23:51

debug1: Reading configuration data /etc/ssh/ssh_config.d/30-libvirt-ssh-proxy.conf

<@amedvede:fedora.im>

15:23:51

debug2: checking match for 'final all' host bodhi-backend01.iad2.fedoraproject.org originally bodhi-backend01.iad2.fedoraproject.org

<@smooge:fedora.im>

15:24:52

that isn't a key problem that is a .config problem

<@nirik:matrix.scrye.com>

15:25:57

yeah. check https://docs.fedoraproject.org/en-US/infra/sysadmin_guide/sshaccess/

<@smooge:fedora.im>

15:26:44

IdentityFile ~/.ssh/<<change this>>

<@smooge:fedora.im>

15:26:44

User <<change this>>

<@smooge:fedora.im>

15:26:44

VerifyHostKeyDNS yes

<@smooge:fedora.im>

15:26:44

Host *.iad2.fedoraproject.org

<@smooge:fedora.im>

15:26:44

User <<change this>>

<@smooge:fedora.im>

15:26:44

HostName %h

<@smooge:fedora.im>

15:26:44

ProxyCommand ssh -q bastion02.fedoraproject.org /usr/bin/nc %h 22

<@smooge:fedora.im>

15:26:44

IdentityFile ~/.ssh/id_fedora_rsa

<@smooge:fedora.im>

15:26:44

```

<@smooge:fedora.im>

15:26:44

Host bastion-iad01.fedoraproject.org bastion-iad02.fedoraproject.org bastion01.fedoraproject.org bastion02.fedoraproject.org

<@smooge:fedora.im>

15:26:44

```

<@smooge:fedora.im>

15:26:44

Something like (but look at the link nirik gave first)

<@smooge:fedora.im>

15:26:44

ProxyCommand none

<@jnsamyak:matrix.org>

15:26:59

Anton Medvedev: yep check for ~/.ssh/config

<@jnsamyak:matrix.org>

15:27:07

that should do the trick

<@smooge:fedora.im>

15:27:09

```

<@smooge:fedora.im>

15:27:09

Something like (but look at the link nirik gave first)

<@smooge:fedora.im>

15:27:09

<@smooge:fedora.im>

15:27:09

```

<@smooge:fedora.im>

15:27:09

Host bastion-iad01.fedoraproject.org bastion-iad02.fedoraproject.org bastion01.fedoraproject.org bastion02.fedoraproject.org

<@smooge:fedora.im>

15:27:09

User <<change this>>

<@smooge:fedora.im>

15:27:09

ProxyCommand none

<@smooge:fedora.im>

15:27:09

IdentityFile ~/.ssh/<<change this>>

<@smooge:fedora.im>

15:27:09

VerifyHostKeyDNS yes

<@smooge:fedora.im>

15:27:09

Host *.iad2.fedoraproject.org

<@smooge:fedora.im>

15:27:09

User <<change this>>

<@smooge:fedora.im>

15:27:09

HostName %h

<@smooge:fedora.im>

15:27:09

ProxyCommand ssh -q bastion02.fedoraproject.org /usr/bin/nc %h 22

<@smooge:fedora.im>

15:27:09

IdentityFile ~/.ssh/<<change this>>

<@jnsamyak:matrix.org>

15:27:20

make sure to put your fas username

<@jnsamyak:matrix.org>

15:29:27

okay let's move on Anton Medvedev if you still face an issue we will bring it to open floor or if we run out of time always feel free to discuss this in releng channel

<@jnsamyak:matrix.org>

15:29:40

!topic Scheduled actions coming up in the next week.

<@jnsamyak:matrix.org>

15:29:46

!info Here we list/discuss anything about items that are due to be done in the next week.

<@jnsamyak:matrix.org>

15:29:52

!link https://fedorapeople.org/groups/schedule/f-43/f-43-releng-tasks.html

<@amedvede:fedora.im>

15:30:24

god bless you all

<@amedvede:fedora.im>

15:30:46

its working

<@jnsamyak:matrix.org>

15:30:49

The post release cleanup is initated by releng the ticket can be used to track the progress

<@jnsamyak:matrix.org>

15:31:08

!releng 12700

<@jnsamyak:matrix.org>

15:32:13

Anton Medvedev and patrikp wanted to gets their hands dirty so I have explained the process and assigned 3 and 4 to anton, if patrikp wanted to take above it's fine or I can do it if no one wants to pick torrents up I guess :D

<@jnsamyak:matrix.org>

15:33:49

forgot to link the f42 schedule

<@jnsamyak:matrix.org>

15:33:51

!link https://fedorapeople.org/groups/schedule/f-42/f-42-releng-tasks.html

<@jnsamyak:matrix.org>

15:34:49

The EOL for F40 is scheduled for 2025-05-13 which is in some weeks from now!

<@jnsamyak:matrix.org>

15:35:44

I'll move to the next topic in 2 mins if we don't have anything

<@zodbot:fedora.im>

15:37:05

<@zodbot:fedora.im>

15:37:05

**releng #12700** (https://pagure.io/releng/issue/12700):**F42 Post Release Cleanup**

<@zodbot:fedora.im>

15:37:05

● **Assignee:** amedvede

<@zodbot:fedora.im>

15:37:05

● **Last Updated:** 5 hours ago

<@zodbot:fedora.im>

15:37:05

● **Opened:** 5 hours ago by jnsamyak

<@jnsamyak:matrix.org>

15:38:25

!topic Tickets that need attention.

<@jnsamyak:matrix.org>

15:38:30

!info This is the time where you can bring up releng tickets to discuss if there are blockers, etc.

<@jnsamyak:matrix.org>

15:38:34

<@jnsamyak:matrix.org>

15:38:34

!link https://pagure.io/releng/issues

<@jnsamyak:matrix.org>

15:39:01

!releng 12619

<@zodbot:fedora.im>

15:39:03

● **Last Updated:** a month ago

<@zodbot:fedora.im>

15:39:03

<@zodbot:fedora.im>

15:39:03

● **Opened:** a month ago by gmanka

<@zodbot:fedora.im>

15:39:03

**releng #12619** (https://pagure.io/releng/issue/12619):**add risc-v container images to quay.io and docker.io**

<@zodbot:fedora.im>

15:39:03

● **Assignee:** Not Assigned

<@smilner:fedora.im>

15:39:45

Aren't we moving to quay?

<@jnsamyak:matrix.org>

15:40:22

yep the ticket is 2 months old so im concerned if it's even required or not

<@smilner:fedora.im>

15:40:35

Ahh abd nirik rightly asked about testing and status

<@smilner:fedora.im>

15:40:40

Ahh and nirik rightly asked about testing and status

<@jnsamyak:matrix.org>

15:40:53

okay if we decide to ship them to testing org on quay for now as an example, but how the process looks like next

<@smilner:fedora.im>

15:41:13

Great point

<@jnsamyak:matrix.org>

15:41:35

because I remember the risc-v images were shipped

<@jnsamyak:matrix.org>

15:41:40

let me find that link

<@smilner:fedora.im>

15:42:38

I wonder if Kashyap could help clarify on this.

<@jnsamyak:matrix.org>

15:43:16

I'm looking into his report but it went to redhat gitlab cee and I need to find the token to get into VPN :3

<@jnsamyak:matrix.org>

15:43:58

okay: https://kashyapc.fedorapeople.org/risc-v/announce-f42-riscv64.txt

<@jnsamyak:matrix.org>

15:44:33

those gets landed here i guess https://dl.fedoraproject.org/pub/alt/risc-v/release/42/

<@jnsamyak:matrix.org>

15:44:52

really not sure about the background process of it's creation but I guess are synced here

<@nirik:matrix.scrye.com>

15:45:45

I think there might be images, but I am not sure. ;) And they should go to fedora-testing or something since they are non official.

<@jnsamyak:matrix.org>

15:46:20

I think we should bring it up on discussion

<@jnsamyak:matrix.org>

15:46:26

before acting on it

<@nirik:matrix.scrye.com>

15:46:48

sure if you like

<@jnsamyak:matrix.org>

15:46:48

I can open a discussion on discussion.fpo does that sound good place or the ticket itself?

<@jnsamyak:matrix.org>

15:48:20

Any folks that want to bring up any tickets in specific?

<@nirik:matrix.scrye.com>

15:48:25

either way. We should cc the usual riscv suspects...

<@nirik:matrix.scrye.com>

15:49:51

!releng 12590

<@zodbot:fedora.im>

15:49:52

● **Opened:** 2 months ago by salimma

<@zodbot:fedora.im>

15:49:52

**releng #12590** (https://pagure.io/releng/issue/12590):**fedora-toolbox missing f42 tag, and testing still points to f38**

<@zodbot:fedora.im>

15:49:52

<@zodbot:fedora.im>

15:49:52

● **Last Updated:** 2 months ago

<@zodbot:fedora.im>

15:49:52

● **Assignee:** Not Assigned

<@nirik:matrix.scrye.com>

15:49:58

shall we just close this one?

<@jnsamyak:matrix.org>

15:50:42

++ can you close it please?

<@nirik:matrix.scrye.com>

15:51:04

yaeh, and can we close the f42 changes ones?

<@jnsamyak:matrix.org>

15:51:20

yes

<@jnsamyak:matrix.org>

15:51:27

i'll do it

<@jnsamyak:matrix.org>

15:53:10

sorry a delivery need to go but anything else before we wind up?

<@smilner:fedora.im>

15:53:51

Nothing from me

<@jnsamyak:matrix.org>

15:53:52

sure, i'll do it

<@jnsamyak:matrix.org>

15:53:58

!topic Choose next chair.

<@jnsamyak:matrix.org>

15:54:16

Any volunteers? :3

<@amedvede:fedora.im>

15:54:17

i can take next chair

<@jnsamyak:matrix.org>

15:54:38

<@jnsamyak:matrix.org>

15:54:38

!info Next chair April 28: Anton Medvedev

<@amedvede:fedora.im>

15:54:41

I can take next chair

<@jnsamyak:matrix.org>

15:54:42

Sold!

<@jnsamyak:matrix.org>

15:54:48

<@jnsamyak:matrix.org>

15:54:48

!topic Discussion / Any other business.

<@amedvede:fedora.im>

15:55:07

<@amedvede:fedora.im>

15:55:43

do we have a place where all our servers and what permition they need are listed?

<@jnsamyak:matrix.org>

15:56:52

Not sure about if we have a permission map drawn for them

<@jnsamyak:matrix.org>

15:56:52

all the servers i look here: https://pagure.io/fedora-infra/ansible/blob/main/f/inventory/inventory

<@nirik:matrix.scrye.com>

15:57:29

you can look in inventory/group_vars/groupname and see what groups are allowed to ssh to them and what groups are allowed to sudo

<@jnsamyak:matrix.org>

15:57:45

yeah

<@jnsamyak:matrix.org>

15:57:48

good one

<@jnsamyak:matrix.org>

15:57:55

nirik: you are smart :P

<@amedvede:fedora.im>

15:58:02

huge thanks

<@nirik:matrix.scrye.com>

15:58:12

sometimes. sometimes I am not. :)

<@jnsamyak:matrix.org>

15:58:30

hehe

<@jnsamyak:matrix.org>

15:59:07

Okay that's all for today then, thanks for coming in everyone! See you in the next one, rant at us with we cause a problem at releasing fedora :D

<@amedvede:fedora.im>

15:59:16

@nirik++ jnsamyak++

<@jnsamyak:matrix.org>

15:59:19

!info Thank you all for coming!

<@jnsamyak:matrix.org>

15:59:25

!endmeeting

<@smilner:fedora.im>

15:59:26

Thanks jnsamyak!