21:00:48 <tdawson> #startmeeting EPEL (2020-05-15)
21:00:48 <zodbot> Meeting started Fri May 15 21:00:48 2020 UTC.
21:00:48 <zodbot> This meeting is logged and archived in a public location.
21:00:48 <zodbot> The chair is tdawson. Information about MeetBot at http://wiki.debian.org/MeetBot.
21:00:48 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
21:00:48 <zodbot> The meeting name has been set to 'epel_(2020-05-15)'
21:00:49 <tdawson> #meetingname epel
21:00:49 <zodbot> The meeting name has been set to 'epel'
21:00:51 <tdawson> #chair nirik tdawson bstinson Evolution pgreco carlwgeorge
21:00:51 <zodbot> Current chairs: Evolution bstinson carlwgeorge nirik pgreco tdawson
21:00:52 <tdawson> #topic aloha
21:00:54 <tdawson> #info Meeting is run from https://board.net/p/epel
21:01:16 * nirik waves
21:01:28 <tdawson> Hi nirik
21:01:47 <bstinson> hey all
21:01:54 <tdawson> Hi bstinson
21:01:56 <pgreco> hi hi, sorry I'm a bit late :)
21:02:03 <carlwgeorge> howdy y'all
21:02:22 <tdawson> Hi pgreco and carlwgeorge
21:03:17 * tdawson waits two more minutes for anyone else to show up.
21:05:22 <tdawson> #topic Old Business
21:05:23 <tdawson> #info What to do with epl8-playground, postponed until next week - 2020-05-22
21:05:37 <tdawson> I guess the title says it all
21:05:51 <tdawson> #info Retire zstd from epel8/epel8-playground - Done
21:05:53 <tdawson> .ticket 9442
21:06:01 <zodbot> tdawson: An error has occurred and has been logged. Please contact this bot's administrator for more information.
21:06:14 <tdawson> https://pagure.io/releng/issue/9442
21:06:27 <tdawson> I wanted to say thank you to those who did this.
21:06:37 <tdawson> I also wondered if the other packages were removed as well.
21:07:48 <tdawson> I think there were 6 packages that were now in RHEL8.2
21:08:06 <nirik> probibly need to check and file bugz on it. ;(
21:08:17 <tdawson> But, I believe zstd was the only one where the EPEL version was higher than the RHEL version.
21:10:19 <tdawson> Looks like, as of last week, it was  dwarves lmdb perl-Convert-ASN1 perl-LDAP python-psutil python3-pyxattr pyxattr whois zstd
21:10:31 <carlwgeorge> python-psutil was also higher than the rhel version
21:11:36 <tdawson> Yep
21:11:52 <tdawson> And pyxattr was the exact same version.
21:12:03 <smooge> is here now
21:12:07 <tdawson> I guess zstd got all the attention, because everyone has to have it.
21:12:09 <tdawson> Hi smooge
21:12:09 <nirik> it might be worth trying to see where the internal process is not right around this. At one point when adding packages they were supposed to check for epel ones, etc
21:12:48 <tdawson> I believe for this list, they were in EPEL to begin with, and then RHEL 8.2 the packages were added.
21:13:01 <carlwgeorge> pyxattr was newer too, 0.7.1 in epel before being retired, vs 0.5.3 in rhel 8.2
21:14:08 <carlwgeorge> psutil was actually added in 8.1 and no one noticed
21:14:10 <tdawson> Ohh ... that's right.  But it had a different name in EPEL, it's source was python3-pyxattr.
21:14:23 <nirik> yeah, but it seems very haphazard if bugs are filed or versions / upgrade path is checked
21:15:22 <carlwgeorge> lmdb was also an 8.1 addition
21:16:04 <tdawson> So, looks like we've missed this for a little bit.
21:17:41 <nirik> huh, I don't see the rhel lbdb
21:17:52 <carlwgeorge> only lmdb-libs is shipped
21:18:44 <nirik> of course.
21:18:47 * nirik sighs
21:19:05 <carlwgeorge> fun fact, pyxattr should have never been shipped, it's been in rhel8 from the beginning
21:20:19 <nirik> huh, whats the source package there?
21:20:33 <tdawson> But python3-pyxattr wasn't there at the begining
21:20:57 <nirik> there's no epel8 branch for pyxattr
21:21:18 <tdawson> EPEL8 branch is python3-pyxattr
21:21:24 <carlwgeorge> rhel: source pyxattr, python3-pyxattr subpackage
21:21:33 <carlwgeorge> epel: both python3-pyxattr
21:23:02 <nirik> yeah, that one is already blocked in epel8
21:23:45 <carlwgeorge> it went down here https://bugzilla.redhat.com/show_bug.cgi?id=1818713
21:26:27 <tdawson> OK, so that's two that were properly retired.
21:26:51 <tdawson> Anyone want to take the rest of the list?
21:27:56 <tdawson> OK, I'll take the list and make sure bugs and issues are filed for the retirement of them.
21:28:45 <tdawson> OK, I'll take the list and make sure bugs and issues are filed for the retirement of them.
21:29:24 <tdawson> #assign tdawson will follow up on the duplicate packages in EPEL8 / RHEL8
21:29:36 <tdawson> Moving on.
21:29:44 <tdawson> #info EPEL-6 is End of Life in 2020-11. It will be moved to archives in 2020-12
21:29:45 <tdawson> #info THIS IS NOT A DRILL.
21:29:51 <tdawson> #topic EPEL-7
21:29:58 <carlwgeorge> i already filed bugs for the rest of them last week
21:30:29 <tdawson> #info carlwgeorge already filed bugs for the duplicate packages.
21:30:33 <tdawson> carlwgeorge ++
21:30:35 <nirik> cool. thanks carlwgeorge
21:30:58 <tdawson> I'd give you a cookie if I could. :)
21:31:14 <carlwgeorge> it's the thought that counts i guess?  :D
21:31:37 <tdawson> Any EPEL7 issues or things to discuss?
21:31:42 <carlwgeorge> i've got an epel7 thing.  oniguruma has lots of outstanding cves, and i've proposed an incompatible upgrade on the mailing list.
21:31:48 <carlwgeorge> https://bugzilla.redhat.com/show_bug.cgi?id=1777660
21:33:04 <nirik> sounds good.
21:33:20 <pgreco> not much of a choice, imo
21:33:48 <pgreco> I mean, we don't want open cves
21:34:08 <nirik> there's just over 1000 cves in new or assigned on Fedora EPEL components.
21:34:18 <nirik> 1018
21:34:20 <tdawson> Youch
21:34:21 <smooge> ssssh
21:34:34 <smooge> you aren't allowed to break a board member so quickly
21:34:56 <carlwgeorge> selfishly i actually want that to ship php74 in ius, but the cves also matter of course
21:35:02 <smooge> he needs to gaze into the horror of Bugzilla and have it stare back into him
21:35:28 * tdawson wakes up in a daze ...
21:35:40 <tdawson> huhh ... what ... sure ... carlwgeorge ... go for it.
21:36:18 <pgreco> carlwgeorge: just make sure it builds on armhfp ;)
21:36:19 <carlwgeorge> according to the process page, after a week on the list we can vote on it here, so just a heads up for now
21:36:33 <nirik> perhaps we could try and poke the top ones when we have time. (whenever that is)
21:36:43 <nirik> 41 podofo
21:36:43 <nirik> 37 xpdf
21:36:43 <nirik> 33 asterisk
21:36:43 <nirik> 27 matio
21:36:43 <nirik> 26 nodejs
21:37:12 * smooge saw jamielinux orphaned a lot of nodejs so I think that is going to get cleaned out
21:37:22 <nirik> oh wait, thats not right
21:37:42 <tdawson> carlwgeorge: OK, I've put it on next weeks agenda.
21:37:50 <nirik> thats total bugs.
21:38:08 <nirik> CVES:      37 xpdf     26 nodejs     26 matio     26 LibRaw     25 hdf5
21:39:13 <tdawson> nirik: Do we know of the breakdown by with EPEL?  Or is that all of them together?
21:39:15 <pgreco> nirik, is that in general? or epel* versions?
21:39:23 <nirik> thats all.
21:40:26 <nirik> all packages, all active epel versions
21:40:58 <carlwgeorge> i'm curious, where are you pulling that from?
21:41:10 <nirik> just playing with bugzilla command line... :)
21:41:21 <nirik> bugzilla query -p "Fedora EPEL"  -s NEW,ASSIGNED -t CVE --outputformat "%{component}"  | sort | uniq -c | sort -nr  | less
21:42:06 <pgreco> hehe, the sequence " sort | uniq -c | sort -nr" is too damn useful... :)
21:42:06 <carlwgeorge> neat
21:43:21 <nirik> I guess that could be sort -unr ? anyhow...
21:43:38 <nirik> fine to move on, my brain is already on the weekend
21:43:49 <tdawson> OK
21:43:55 <carlwgeorge> one thing to note is that some bugs have more than one cve on them, so that's a bug count, not cve count
21:43:55 <tdawson> #topic EPEL-8
21:44:34 <tdawson> Any new EPEL8 things?
21:44:39 <nirik> true.
21:45:39 <carlwgeorge> rhel 8 ships non-modular haproxy 1.8, and the maintainer declined to ship a 2.0 module.  i'm considering if i want to wade into those waters.
21:45:51 <carlwgeorge> as an epel8 module that is
21:46:13 <tdawson> Well, we've opened the gate for that.
21:46:30 <tdawson> I know someone else wants to do a module for cmake
21:46:43 <carlwgeorge> at a minimum i'll need to be a co-maintainer on the fedora package, correct?
21:47:04 <nirik> yep.
21:47:26 <nirik> you could also do a non modular haproxy2 or something (but that could be tricky in other ways)
21:47:46 <carlwgeorge> that may be a fight, i haven't been able to get prs merged for that
21:47:59 <smooge> .whoowns xpdf
21:48:00 <zodbot> smooge: owner: spot
21:48:24 <carlwgeorge> yeah, definitely not interested in messing with a parallel package, i do enough of that elsewhere
21:48:37 <nirik> fair
21:49:08 <tdawson> Anything else for EPEL8?
21:49:42 <tdawson> #topic General Issues / Open Floor
21:51:01 <tdawson> Anything before nirik completely succombs to the weekend?
21:51:34 <nirik> b-rrrr--aaaaaa--innnssss
21:51:50 <pgreco> mmm, not here, I need my weekend now!
21:52:00 <tdawson> OK, thanks everyone for coming.
21:52:06 <tdawson> We'll talk to you next week.
21:52:16 <nirik> thanks tdawson
21:52:19 <tdawson> #endmeeting