20:00:06 #startmeeting EPEL (2022-08-24) 20:00:06 Meeting started Wed Aug 24 20:00:06 2022 UTC. 20:00:06 This meeting is logged and archived in a public location. 20:00:06 The chair is tdawson. Information about MeetBot at https://fedoraproject.org/wiki/Zodbot#Meeting_Functions. 20:00:06 Useful Commands: #action #agreed #halp #info #idea #link #topic. 20:00:06 The meeting name has been set to 'epel_(2022-08-24)' 20:00:08 #meetingname epel 20:00:08 The meeting name has been set to 'epel' 20:00:09 #chair nirik tdawson pgreco carlwgeorge salimma dcavalca dherrera gotmax[m] 20:00:09 Current chairs: carlwgeorge dcavalca dherrera gotmax[m] nirik pgreco salimma tdawson 20:00:11 #topic aloha 20:00:18 .hello robert 20:00:19 rsc: robert 'Robert Scheck' 20:00:23 .hi 20:00:24 carlwgeorge: carlwgeorge 'Carl George' 20:00:26 Hi rsc 20:00:29 .hi 20:00:30 jcpunk: jcpunk 'Pat Riehecky' 20:00:30 Hi carlwgeorge 20:00:38 Hi jcpunk 20:00:50 * carlwgeorge waves at jcpunk 20:01:00 * jcpunk waves back 20:01:10 It feels like I've just seen ya'll. 20:01:35 .hi 20:01:36 pgreco: pgreco 'Pablo Sebastian Greco' 20:01:48 Hi pgreco 20:01:59 .hi 20:02:00 rcallicotte: rcallicotte 'Robby Callicotte' 20:02:04 on a zoom call in parallel 20:02:12 cool! 20:02:37 morning 20:02:37 Hi rcallicotte 20:02:42 Morning nirik 20:03:05 .hello dcavalca 20:03:05 davide: dcavalca 'Davide Cavalca' 20:03:23 Hi davide 20:03:41 devconf seemed like a lot of fun from the live streams 20:05:04 It was the first devconf I'd gone to. Ya, I think it was pretty fun. It was nice physically being around people. 20:05:13 #topic EPEL Issues https://pagure.io/epel/issues 20:05:15 https://pagure.io/epel/issues?tags=meeting&status=Open 20:05:38 There are two open issues. 20:06:00 I'm going to start with the one relating to jcpunk first 20:06:08 .epel 190 20:06:09 tdawson: Issue #190: Keep everything for 30 days after EOL - epel - Pagure.io - https://pagure.io/epel/issue/190 20:06:13 the basic goal is to try and get the work required by the infra folks into a sort of "common expectations". They've got to manage the RHEL subscriptions used for the koji build roots and I'd like to have some sort of official statement from both groups that consume the RHEL bits for builds on when they'd like the subscriptions to expire (which will lock the builds, but that could be done earlier) 20:07:23 For Stream, we'd like folks to be able to finish some bits that may appear near the end of the subscription 20:08:08 yeah, I am not sure this makes sense for the way we have things setup 20:08:44 Understood, I'm mostly trying to make sure that I've explored the idea - not trying to change EPEL policy 20:08:47 well, I guess it could... 20:09:08 basically, when a RHEL version goes EOL we disable everything in koji and move the repos to archive/ 20:09:45 tacitly it is a question of "how fast after EOL" do these things happen 20:10:03 the specific timetable isn't really specified anywhere I found 20:10:32 true. Usually it's pretty fast in fedora/epel land... at least the disabling part. 20:11:07 is there any harm to delaying this by 30 days? 20:11:39 It really irks the releng in me... letting people build against EOL things and distribute them. 20:12:46 "you don't need to hurry and move to a supported OS... take an extra 30 days when who knows what issues that can never be fixed pile up on you" 20:13:11 :) 20:13:30 if I'm reading the issue right, the spirit of this is meant to allow for folks to do last-minute builds to adjust for stuff that might have landed in RHEL in the final week 20:13:40 davide: +1 20:13:46 that was my intent 20:13:51 jcpunk: How likely is that to happen? 20:14:02 so, as smooge notes when we move things to archive, mirrormanager keeps working fine for them. 20:14:16 On that front, I can't predict when RHEL Eng publishes things 20:14:16 if the desire is to just build against things that should work fine... 20:14:41 if the desire is for epel builds / composes / updates to still be enabled, thats the part I don't care for. ;) 20:15:28 This breaks down into a few real bits, when should the RHEL subscriptions expire and when should the tags get locked 20:15:44 when the tags get locked, things should move to archive 20:17:11 I'm not totally sure how Infra manages the RHEL subscriptions for the build roots, but they are effectively the ones that asked me to try and get a clear set of "what we'd like to see" for those subscriptions 20:17:13 sure. IMHO that should be on EOL day or close to it. ;) 20:17:29 jcpunk: you mean centos infra? or ? 20:18:04 err yeah, I should be more precise. the folks supplying the packages for the CentOS Community Buildsystem 20:18:43 can we clarify if this request is to build and distribute EPEL packages after eol, or just build against them/have repos avaible? 20:20:51 That would be good to clear up, because I might have written the original ticket incorrectly. 20:20:56 Mostly this is a request for very clear specific expectations for how the EPEL folks want to handle the EOL regarding the RHEL bits. Having the bits available, but the tags locked could permit some sort of emergency build of $critical_package that has a super terrible zero day that is in EPELX two days after EOL. On the one hand, folks should get off it and move to current release. On the other hand, folks tend to miss those s 20:20:56 orts of deadlines. 20:21:29 Does EPEL want to have a bit of wiggle room for that sort of use case? 20:21:45 this is compounded by the fact that the EOL might well happen near/over a holiday season 20:21:56 so folks could just not be around to respond quickly is something happens 20:22:09 IMO a 30 day leeway period here seems totally reasonable 20:22:15 I think the expectation should be that repos will always be available, but at EOL no further builds will be possible 20:22:50 Which holiday are you thinking of? All EOL are during May or June 20:22:57 30days post EOL could be a holiday or weekend. ;) 20:23:46 I was specifically thinking about the CentOS Linux 8 eol which fell across december iirc, but that could have been a oneoff 20:24:18 That was a one-off. And that wasn't a RHEL EOL. 20:24:43 I'm not sure on the world wide holiday schedule..... 20:24:54 nirik: sure, but by then you'd have had 30 days to deal with anything 20:25:10 davide: sure, but you have 10 years to know when a rhel eol is. ;) 20:25:28 the point is that if we EOL on X, and something landed in RHEL on X-2 days, there just isn't a lot of room to respond 20:25:32 and 6+ years of folks saying they'll upgrade next quarter 20:25:45 so we'd give folks a little bit of wiggle room to deal with whatever is needed to wrap things up nicely 20:26:52 I'm a little concerned this would cut into our EOL party ... would we have it at the real EOL or 30 days after? 20:26:54 to my mind, the day after EOL RHEL isn't more insecure than before, it is just that no one is looking to see what is out there any longer. There probably are security issues, but they aren't really known 20:26:54 yes, but it's never ending 20:27:04 Oh, RHEL pushed this, I need a new X build. 20:27:13 Oh, X build broke Y, I need to rebuild Y 20:27:23 I don't think the hypothetical makes sense here 20:27:59 that late in the RHEL cycle, any update would be security fix only 20:28:05 Sorry, what I said was supposed to be funny ... re-reading I see it came off as sarcastic. 20:28:29 no library changes that would require an EPEL rebuild 20:29:34 tdawson: text is bad for nuance. ;( 20:29:45 indeed, text is hard 20:29:48 Yes it is :( 20:30:10 .hello ngompa 20:30:13 Eighth_Doctor: ngompa 'Neal Gompa' 20:30:16 davide: were you involved in this request from the centos side? do you know if the intent was just to build against epel or also do epel updates? 20:30:27 hey Eighth_Doctor 20:30:36 carlwgeorge does have a very good point though. Any update in RHEL at that late in the game shouldn't be requiring rebuilds. 20:30:44 indeed 20:31:11 Conan Kudo: I remember some discussion of this, but I'm fuzzy on the details 20:31:15 * Eighth_Doctor is catching up on scrollback 20:31:55 on the CentOS side, I would expect as long as folks can continue doing builds in CBS against RHEL (and EPEL) after the EOL for a little bit, we'd probably be ok 20:31:57 so the only thing it would allow for would be for epel updates independent of RHEL for x days after the RHEL EOL 20:32:00 EPEL is mirrored into CBS infrastructure, so this should not be an issue 20:32:42 the ticket request does not make sense for public use perspective 20:32:48 neither for CentOS Stream 9 nor EPEL 20:32:57 because MirrorManager will just be repointed to archive endpoints 20:33:07 yeah, smooge noted that in the ticket 20:33:22 I'm really looking for "do we have common expectations" and the CentOS docs for what those are for CBS are what I'm writing now. The EPEL policies say "after EOL" but I'm really looking for something more specific. 20:33:23 if CentOS Stream 8 is onboarded into MirrorManager, then this will also apply there 20:34:00 we can stop allowing builds after 30 days, but typically it gets done within a week or so, unless there's an infra freeze going on 20:34:20 jcpunk: I would say "assume builds are stopped at EOL" 20:34:43 having really clear expectations could theoretically help "infra freeze" folks schedule their bits 20:34:56 RHEL eols are a big event, we usually do them the day of... but moving to archive might be a few days later. 20:34:57 there will be no infra freezes in parallel with RHEL EOLs if they follow the pattern going forward, since May is after Fedora releases are out 20:35:02 ending EPEL 30 days after would essentially match the Fedora release policy of N+2+1 month 20:35:25 the Fedora release policy is mostly how I landed on "30 days" 20:35:35 but they own the whole os 20:35:42 * nirik is really not in favor, but will do it everyone else is. 20:36:17 * jcpunk accepts whatever EPEL thinks is best for their workflow 20:36:36 I can go either way, but I'm standing by nirik on this. 20:37:16 that might not necessarily be a bad idea to ensure all the pending updates are flushed and frozen 20:37:43 Can you get something into https://docs.fedoraproject.org/en-US/epel/epel-policy/ that is unambiguous? 20:37:49 it's also going to confuse a bunch of people... "hey, my EOL rhel7 box just got some updates... wth?" 20:37:56 I tend to agree more with nirik, especially since there's no public access harm 20:38:09 Words are hard today ... that came out wierd too. I'm going to vote for what nirik wants. Since he is most likely the person to do it. And if he changes his mind, I'll follow it over too. 20:38:15 if we were doing something crazy like yoinking the content from MirrorManager, then a delay is appropriate 20:38:17 but we're not 20:38:29 yeah, repos should always be available... even after eol... 20:39:03 as a matter of course, I fundamentally disagree with how CentOS historically handled EOLs and I expect that with MirrorManager and c9s, they'll follow the way EPEL and Fedora do 20:39:36 the public access harm that CentOS inflicted in the past is something I never want to see Fedora do 20:40:16 since we don't do that, I think we should just document that updates are cut off EOD on EOL day for RHEL 20:40:35 we can flush the last days of updates and allow no more 20:40:42 and tags are by EOD of EOL day 20:40:57 So long as I've got clear doc on that, I'm happy 20:41:39 s/tags are/tags are locked/ 20:42:03 So ... we're in agreement? 20:42:08 agreed, I think the important part here is getting whatever we end up settling on codified so folks know what the expectations are 20:42:19 and having it written somewhere I can find 20:42:46 that seens like a reasonable expectation 20:42:46 Anyone volunteering to update the docs? 20:43:26 what the heck. I can. 20:43:33 * nirik adds to his todo 20:43:48 <3 thanks nirik 20:44:13 I'd say this ticket is settled 20:44:34 And ... the other issue is on retiring ... 20:45:07 Since the first issue took a while, and the retiring issue is having a disucssion on email, are we ok skipping it this week? 20:45:56 * gotmax[m] is kind of here now 20:46:13 retiring issue? oh for retiring packages 20:46:29 I would anticipate that being a long discussion, so yeah 20:46:34 Although my laptop is dead, so forgive phone typos 20:46:54 gotmax[m]: Are you ok keeping the dicussion in emails for another week? 20:47:03 Sure 20:47:18 Thanks. 20:47:32 With the limited time, I don't think we'd get very far in the discussion. 20:47:34 I was just going to add that I'm working on some improvements to the Docker packaging that would make packaging it in EPEL 9 easier. 20:47:48 I wouldn't mind branching it if I can get a co-maintainer 20:47:56 gotmax[m]: cool 20:48:09 * tdawson takes two steps back from Docker. 20:48:16 I'm just bringing it up, because there was some discussion about this in #centos 20:48:24 fyi I filed a ticket to get golist branched 20:48:29 Why? 20:48:39 did you say docker? 20:48:44 golist as part of the RHEL go-rpm-macros package 20:48:45 because otherwise most of the golang packaging stuff doesn't work in epel 20:49:04 are you sure? last I check it wasn't available at all 20:49:08 golist isn't in RHEL 20:49:09 * checked 20:49:15 I know. The RHEL maintainers installed golist to a different directory, but didn't patch the macros 20:49:25 And they still haven't fixed it 20:49:40 There is a workaround 20:49:46 is there a bugzilla I can track for this? 20:49:47 But we can also package golist 20:50:03 https://bugzilla.redhat.com/show_bug.cgi?id=2096096 is the golist one 20:50:04 huh, oh there is a bundled golist 20:50:14 I haven't had time to walk over the deps but it didn't look too bad 20:50:23 They patched up Fedora's macros and broke them in multiple ways :/ 20:50:26 Since we've only got 10 minutes left, I'm going to move on, golist or no. 20:50:38 yeah, that's another long discussion 20:50:43 yep 20:50:45 it looks pretty chainsawed 20:51:03 Look at the go-rpm-macros bugzilla component and the open PRs for more info 20:51:07 The only old business I've got it the epel survey - https://tinyurl.com/epelsurvey2022 goes until the end of august 20:51:09 Anyways... 20:51:25 #topic EPEL-7 20:51:26 CentOS 7 will go EOL on 2024-06-30 20:52:10 I did not realize we were still on Old Business... 20:52:13 I thought it was open floor 20:52:21 Sorry for getting us off track 20:53:06 Not a problem. Anything for EPEL7 ? 20:53:37 #topic EPEL-8 20:53:39 CentOS Stream 8 goes EOL in 2024-05-31 20:54:53 So, I have "-retirement party" in my notes right after this .... thus the wierd comment I said earlier ... the comment still looks wierd, but that's the reason for it. 20:55:01 #topic EPEL-9 20:55:03 CentOS Stream 9 goes EOL in 2027-05-31 20:55:48 #topic General Issues / Open Floor 20:56:02 OK ... looks like we're back on docker :) 20:56:02 for epel9, there was an unannounced incompat upgrade of re2 20:56:13 ouch 20:56:28 #info unannounced incompat upgrade of re2 required rebuilding bloaty package 20:56:28 So name bump? 20:56:30 #link https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-f063125ebb#comment-2674089 20:56:34 yeah 20:56:43 i think bloaty was the only one 20:56:50 *needing a rebuild 20:59:20 So ... hmm ... I'm a little concerned about this ... cuz the epel maintainer wasn't the person who did it. 21:00:02 yeah it's not great 21:00:15 we really don't have any recourse other than finger wagging 21:00:53 Ya ... now that I lookw I see he did a pull request .... :( and I thought it was for fedora. 21:00:54 if anyone knows that maintainer and would like to approach them to make sure they saw my bodhi comment, i'd appreciate it 21:01:27 I'll talk to them. 21:01:32 thanks 21:01:53 No, thank you for pointing it out. I should have been more diligent. I'm the epel maintainer. :( 21:02:14 Anything else before we wrap up? 21:02:26 i sent the email but please vote on https://pagure.io/epel/issue/192 21:02:36 for jonathanspw to join the epel packagers sig 21:02:48 oh, .hi 21:02:54 .hi 21:02:55 jonathanspw: jonathanspw 'Jonathan Wright' 21:03:05 Hi jonathanspw 21:04:26 It looks like there are enough votes. Does someone want to add jonathanspw ? 21:04:36 policy says to leave it open for a week 21:04:45 or did i misread it 21:05:45 Oh, sorry. I still haven't caught up on my email, I was thinking it had been a week. 21:06:37 Anyway, before I say anything else stupid ... it looks like we're over time. 21:06:59 Thank you all for comming and for the good discussions. 21:07:23 #endmeeting