20:00:12 #startmeeting EPEL (2023-08-09) 20:00:12 Meeting started Wed Aug 9 20:00:12 2023 UTC. 20:00:12 This meeting is logged and archived in a public location. 20:00:12 The chair is tdawson. Information about MeetBot at https://fedoraproject.org/wiki/Zodbot#Meeting_Functions. 20:00:12 Useful Commands: #action #agreed #halp #info #idea #link #topic. 20:00:12 The meeting name has been set to 'epel_(2023-08-09)' 20:00:13 #meetingname epel 20:00:13 The meeting name has been set to 'epel' 20:00:15 #chair nirik tdawson pgreco carlwgeorge salimma dcavalca dherrera gotmax23 smooge 20:00:15 Current chairs: carlwgeorge dcavalca dherrera gotmax23 nirik pgreco salimma smooge tdawson 20:00:16 #topic aloha 20:00:25 .hi 20:00:26 dherrera: dherrera 'Diego Herrera' 20:00:34 Hi dherrera 20:00:44 .hi 20:00:45 carlwgeorge: carlwgeorge 'Carl George' 20:00:51 Hi carlwgeorge 20:01:18 .hi 20:01:19 rcallicotte: rcallicotte 'Robby Callicotte' 20:01:40 Hi rcallicotte 20:03:10 we're getting a slow start today, 20:03:38 no problemo 20:04:31 I imagine that people are still acclimating from their travels / jetlag? 20:05:05 Well, the two people who commented on my saying that matrix was down, aren't here. 20:05:06 blech 20:05:11 #topic End Of Life (EOL) 20:05:12 .hello2 20:05:12 .hi 20:05:13 RHEL 7 / epel-7 will go EOL on 2024-06-30 20:05:14 CentOS Stream 8 / epel-8-next goes EOL in 2024-05-31 20:05:15 Son_Goku: Sorry, but user 'Son_Goku' does not exist 20:05:16 CentOS Stream 9 / epel-9-next goes EOL in 2027-05-31 20:05:18 neil: neil 'Neil Hanlon' 20:05:20 .hi 20:05:21 Son_Goku: Sorry, but user 'Son_Goku' does not exist 20:05:24 .hello ngompa 20:05:24 Hi neil 20:05:24 Son_Goku: ngompa 'Neal Gompa' 20:05:36 Hello Son_Goku ... you exist to us. :) 20:05:55 * Son_Goku is not a fan of being on IRC again 20:06:14 * dherrera neither 20:06:26 #topic EPEL Issues https://pagure.io/epel/issues 20:06:28 https://pagure.io/epel/issues?tags=meeting&status=Open 20:06:57 We have one issue this week 20:07:10 .epel 241 20:07:11 tdawson: Issue #241: Proposed incompatible security update for llhttp in EPEL9 - epel - Pagure.io - https://pagure.io/epel/issue/241 20:07:26 I'm so happy someone is following the process properly for once 20:07:37 We still have a week before we vote on it, but I just wanted to get it there. 20:08:05 Son_Goku: I totally agree. And they have details for what will happen if it passes, and if it doesn't. 20:09:24 seems straightforward 20:09:31 .hi 20:09:32 jonathanspw: jonathanspw 'Jonathan Wright' 20:09:50 I'm leaning towards +1'ing it ... but again, we have a week, so I'll wait until next week. 20:09:55 Hi jonathanspw 20:10:07 morning. 20:10:13 Looks like an easy +1 for me 20:10:16 Morning nirik 20:10:47 yeah, I'm +1 to it from a quick reading 20:11:04 ditto, +1 from me 20:11:35 It especially helps that fesco has already given it a +1 20:11:46 i like to think less, yes 20:12:04 Anything before we move on? 20:13:00 #topic Old Business 20:13:17 Does anyone have any old business they want to bring up? 20:13:23 i've got one small thing for awareness 20:13:43 carlwgeorge: Go for it. 20:14:20 the dnf team has a draft pr up for implementing $releasever_minor in dnf5 20:14:22 https://github.com/rpm-software-management/dnf5/pull/800 20:14:28 oh nice. 20:14:48 of course it's not going to be too usefull for quite a while, but great to have it none the less. 20:15:01 very nice 20:15:02 while they've said that dnf5 isn't going into rhel10, they also said they plan to do the same for dnf4 20:15:04 thank you for the link 20:15:28 Ya!! 20:15:30 .hello robert 20:15:31 rsc: robert 'Robert Scheck' 20:15:33 so in theory we could have that available for epel10 and avoid doing %transfiletrigger stuff to make our own variable 20:15:36 Hello rsc 20:15:39 oh, if it's landing on dnf4 we could use it, right? 20:15:46 https://github.com/rpm-software-management/dnf5/issues/710#issuecomment-1661647610 20:15:58 dherrera: yup 20:16:57 also a dnf4 implementation opens up the possibility of backporting it to rhel9 (although i still think retrofitting minor-versioned branches/repos to epel9 will be more trouble than it's worth) 20:17:05 carlwgeorge: If we get that, will CentOS Stream still be pointing at 10 ? 20:17:39 yes, as it wouldn't have a minor defined 20:18:00 carlwgeorge: ok 20:18:06 so 10 would be for cs, 10.x would be for rhel 20:18:31 still a draft pr, but progress i wanted to bring up. that's all i have for old biz. 20:18:39 Ya ... even if we have that in 9 ... I agree with you, it wouldn't be worth the trouble. 20:18:58 carlwgeorge: Thanks for the update. 20:19:05 Does anyone else have any old business? 20:19:47 holy crap wow 20:19:56 * Son_Goku just saw the dnf5 PR 20:21:48 #topic General Issues / Open Floor 20:22:31 Does anyone have anything for Open Floor? 20:23:10 i've got a thing for this too 20:23:26 Go for it 20:24:11 caddy is a webserver that i maintain in fedora and epel. v1 and v2 have a different config file format, so i've left epel7 on v1. i was hoping to keep it there unless there was some highly rated cve affecting it. 20:24:53 I'm guessing something happened? 20:24:55 * neil can smell where this is going 20:25:00 CVE for a web server ... ha ... that never happens. 20:25:06 lul 20:25:18 well i thought i could clear one lower rated cve by rebuilding it with a slightly different bundled go-yaml. i thought it all went well, but got busy and didn't actually test the update myself before it hit stable. 20:25:53 turns out the newer golang version it was built with (as compared to when it was last built) resulted in a binary that segfaults. 20:26:06 ouch 20:26:12 lovely. ;( 20:26:16 yikes 20:26:49 i've asked upstream for help, but i'm guessing they're going to tell me to buzz off because they have no interest in making caddy v1 work with golang 1.19 20:27:05 it might be the time to just bite the bullet 20:27:32 i'm honestly embarrassed because users could reasonable be mad at me with "did you even try to run this" 20:27:42 it happens... 20:28:03 pity there's no way to go back to the older one... well, not without trickery. 20:28:21 options at this point i think: 1) get caddy 1.0.5 working with some combination of golang 1.19 and quic-go (the problematic library), 2) retire the epel7 package, or 3) incompat update to v2 20:28:28 carlwgeorge: Isn't that a feature. It fixes the CVE if it doesn't run. ;) 20:28:36 * carlwgeorge snorts 20:28:47 * Son_Goku sighs 20:28:49 nirik: so tell me about this trickery...untagging the latest build? 20:28:53 4) trickery... ie, untag the broken one and bodhi is then lying when it says it's stable... 20:28:57 yeah 20:29:15 i'm ok with that as a stop gap measure to at least make new installs not broken 20:29:19 and anyone who upgraded to it will have to manually downgrade tho 20:29:23 nirik: that could be fixed using SQL on the database? 20:29:30 (Bodhi) 20:29:52 nirik: it's this one if you want to do that (or i can file a releng ticket) https://koji.fedoraproject.org/koji/buildinfo?buildID=2263240 20:29:53 anything is possible with enough leverage 20:31:05 it would be good to get an ack here if thats desired. We don't usually do that... it causes a lot of confusion... but it might be warented in this case. 20:31:33 i get why folks want the latest golang in epel7, but in this case it kinda screwed me over as caddy is sensitive to what version of golang it's built with 20:31:49 a ticket would be good. (at least for tracking) 20:31:54 * carlwgeorge nods 20:32:26 i think most likely outcome is i just retire the epel7 package outright 20:32:35 and an epel-announce post for people who need to downgrade... and a comment on the bodhi update about it and... ;) 20:33:01 there is an upstream copr with v2 for anyone that absolutely needs it, which i'll mention in the post 20:34:26 so perhaps retirement is best... 20:36:35 i'll try to finish up a plan by next week and report back 20:36:45 anyone else got any open floor items? 20:37:24 just a quick FYI... 20:37:53 If anyone happens to have been traveling this last week or so to a conference, you might consider taking a covid test just in case. ;) 20:39:05 Related to that ... it was good to see many of you in person last week. 20:39:22 yeah, lovely to meet in person... 20:39:38 yeah a few cases have been popping up. my test monday when i got home was negative. hope everyone else is lucky as well. 20:40:34 my wife's getting me a test right now.. 20:40:37 woke up with a sore throat :\ 20:40:50 but yes, it was great to meet and/or see y'all ! 20:41:29 i know i overloaded jonathanspw's memory banks with "oh yeah this face is this username" 20:41:48 *laughs* 20:41:53 was great meeting everyone for sure :) 20:42:27 Yep, I had alot of that. So many faces that totally didn't look like what I thought they did. 20:43:29 Anything else for the Open Floor? 20:43:55 not from I, at least 20:44:00 nothing from me. 20:44:45 Thank you all for comming. And thank you all for all you do for EPEL and it's comminity. 20:44:53 I'll talk to you next week, if not sooner. 20:44:57 cheers! take care folks 20:45:00 bye y'all :) 20:45:01 thanks for running things tdawson! 20:45:03 have a good rest of the week all! 20:45:08 #endmeeting