2025-04-09 18:01:19 <@tdawson:fedora.im> !startmeeting EPEL (2025-04-2)
2025-04-09 18:01:21 <@meetbot:fedora.im> Meeting started at 2025-04-09 18:01:19 UTC
2025-04-09 18:01:21 <@meetbot:fedora.im> The Meeting name is 'EPEL (2025-04-2)'
2025-04-09 18:01:25 <@salimma:fedora.im> !hi
2025-04-09 18:01:26 <@zodbot:fedora.im> Michel Lind (salimma) - he / him / his
2025-04-09 18:01:28 <@tdawson:fedora.im> !meetingname epel
2025-04-09 18:01:28 <@tdawson:fedora.im> !topic aloha
2025-04-09 18:01:29 <@meetbot:fedora.im> The Meeting Name is now epel
2025-04-09 18:01:37 <@rcallicotte:fedora.im> !hi
2025-04-09 18:01:38 <@zodbot:fedora.im> Robby Callicotte (rcallicotte) - he / him / his
2025-04-09 18:01:54 <@tdawson:fedora.im> Hi Michel Lind UTC-6 and Robby Callicotte 
2025-04-09 18:02:27 <@conan_kudo:matrix.org> !hi
2025-04-09 18:02:29 <@zodbot:fedora.im> Neal Gompa (ngompa) - he / him / his
2025-04-09 18:03:20 <@nirik:matrix.scrye.com> morning
2025-04-09 18:03:42 <@dherrera:fedora.im> !hi
2025-04-09 18:03:43 <@zodbot:fedora.im> Diego Herrera (dherrera) - he / him / his
2025-04-09 18:04:07 <@tdawson:fedora.im> Morning nirik 
2025-04-09 18:04:14 <@tdawson:fedora.im> Hi Conan Kudo and Diego Herrera 
2025-04-09 18:05:32 <@carlwgeorge:fedora.im> !hi
2025-04-09 18:05:33 <@zodbot:fedora.im> Carl George (carlwgeorge) - he / him / his
2025-04-09 18:05:43 <@tdawson:fedora.im> Hi Carl George 
2025-04-09 18:05:57 <@tdawson:fedora.im> !link https://pagure.io/epel/issues?tags=meeting&status=Open
2025-04-09 18:05:57 <@tdawson:fedora.im> !topic EPEL Issues https://pagure.io/epel/issues
2025-04-09 18:06:13 <@davide:cavalca.name> !hi
2025-04-09 18:06:15 <@zodbot:fedora.im> Davide Cavalca (dcavalca) - he / him / his
2025-04-09 18:06:24 <@tdawson:fedora.im> Hi Davide Cavalca 
2025-04-09 18:06:38 <@tdawson:fedora.im> We have two issues ... I'm hopefully going to pick the shorted one first.
2025-04-09 18:06:48 <@tdawson:fedora.im> !epel 324
2025-04-09 18:06:49 <@zodbot:fedora.im> 
2025-04-09 18:06:49 <@zodbot:fedora.im> ● **Opened:** 3 weeks ago by carlwgeorge
2025-04-09 18:06:49 <@zodbot:fedora.im> ● **Last Updated:** a day ago
2025-04-09 18:06:49 <@zodbot:fedora.im> ● **Assignee:** carlwgeorge
2025-04-09 18:06:49 <@zodbot:fedora.im> **epel #324** (https://pagure.io/epel/issue/324):**EPEL 10 minor version upgrade path**
2025-04-09 18:07:25 <@tdawson:fedora.im> Carl George: I've seen progress ... would you like to expand on what's happened, and happening.
2025-04-09 18:08:00 <@carlwgeorge:fedora.im> so the plan we laid out is mostly implemented.  everything in mirrormanager is done.
2025-04-09 18:08:24 <@carlwgeorge:fedora.im> the epel-release changes are here https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-c37fe4fbd9
2025-04-09 18:08:57 <@carlwgeorge:fedora.im> once that moves to stable, i'll tag the same build for epel10.1 to avoid the symlink churn problem we previously discussed
2025-04-09 18:09:45 <@carlwgeorge:fedora.im> i've got a pr open to tweak the wording on the branches doc since we're not publishing to a pub/epel/10 repo anymore https://pagure.io/epel/pull-request/326#
2025-04-09 18:09:48 <@carlwgeorge:fedora.im> i've got a pr open to tweak the wording on the branches doc since we're not publishing to a pub/epel/10 repo anymore https://pagure.io/epel/pull-request/326
2025-04-09 18:11:38 <@carlwgeorge:fedora.im> the last piece i think will be putting the 10 symlink back, which i plan to do today at 5pm my time (about four hours) to give mirrors a full 48 hours to sync the 10 directory removal
2025-04-09 18:12:11 <@carlwgeorge:fedora.im> looking forward to all of this being done and going back to just adding packages 😀
2025-04-09 18:12:34 <@tdawson:fedora.im> Yep ... it needed to be done, but I agree, it will be nice to have it finished.
2025-04-09 18:12:51 <@tdawson:fedora.im> (says the person who hasn't done any of the work)
2025-04-09 18:13:22 <@carlwgeorge:fedora.im> i know you're absorbing some of the impact of rh internal folks asking about this, that helps
2025-04-09 18:14:11 <@tdawson:fedora.im> I also found that removing the epel10 link breaks CRB  (CentOS SIG) builds ... but ... eh ... it's just two days.
2025-04-09 18:14:40 <@carlwgeorge:fedora.im> i saw one comment about it being "pretty bad this wasn't already dealt with", and i'm like, how did any of this work when epel8 came out months after rhel8
2025-04-09 18:14:44 <@salimma:fedora.im> yeah, some of our systemd devs were asking about it earlier this week
2025-04-09 18:15:15 <@smooge:fedora.im> Carl George: very little did work and I was providing private rpms for people
2025-04-09 18:15:20 <@carlwgeorge:fedora.im> oh that's a good call out, apparently cbs uses the mirror baseurl directly, not mirrormanager or a local mirror
2025-04-09 18:15:54 <@carlwgeorge:fedora.im> i'm sure that was stressful
2025-04-09 18:16:16 <@smooge:fedora.im> nah.. I had nothing but love and affection
2025-04-09 18:16:22 <@nirik:matrix.scrye.com> oof. Can we convince them to move to the metalink?
2025-04-09 18:16:28 <@carlwgeorge:fedora.im> anyone happen to know how often the fcix mirrors sync?  they're the only ones i've found so far that don't have the 10 directory gone
2025-04-09 18:16:29 <@nirik:matrix.scrye.com> (but there's probibly reasons)
2025-04-09 18:16:36 <@smooge:fedora.im> cbs is koji
2025-04-09 18:16:52 <@nirik:matrix.scrye.com> oh, I read that as csb... sorry
2025-04-09 18:16:54 <@smooge:fedora.im> and an old version and didn't work well with metalink at one point
2025-04-09 18:17:12 <@carlwgeorge:fedora.im> that's a question for @arrfab
2025-04-09 18:17:30 <@smooge:fedora.im> no I think its a question for koji :)
2025-04-09 18:18:14 <@carlwgeorge:fedora.im> it's fine, as troy said it's a temporary problem that will go away soon
2025-04-09 18:18:18 <@nirik:matrix.scrye.com> it won't work there.
2025-04-09 18:18:29 <@nirik:matrix.scrye.com> koji has no concept of metalink processing.
2025-04-09 18:18:32 <@tdawson:fedora.im> I figure the link will get back before CBS Koji would get fixed ... so ya ... Fabian has alot on his plate right now.
2025-04-09 18:19:43 <@tdawson:fedora.im> Beyond the link ... and perhaps another pair of eyes on the documentation (my re-write isn't the best) ... anything else to report?
2025-04-09 18:19:47 <@carlwgeorge:fedora.im> anyone else want to +1 the epel-release update?  i wouldn't mind manually kicking off a compose to push it so i can do the manual tagging step right after
2025-04-09 18:20:18 <@tdawson:fedora.im> Oh, I had a RHEL 10.0 machine I was going to test it on ... then I'll +1 it if nobody else has.
2025-04-09 18:20:49 <@carlwgeorge:fedora.im> i guess technically i can already push it to stable
2025-04-09 18:21:24 <@salimma:fedora.im> I need to set up a RHEL 10 machine this week
2025-04-09 18:22:05 <@tdawson:fedora.im> Thank you very much Carl (and anyone who worked with you) for getting this done.  It is greatly appreciated.
2025-04-09 18:22:24 <@tdawson:fedora.im> I'm going to move on to the next issue, because I'm betting it's going to take some time.
2025-04-09 18:22:40 <@tdawson:fedora.im> !epel 320
2025-04-09 18:22:41 <@zodbot:fedora.im> **epel #320** (https://pagure.io/epel/issue/320):**Proposing (semi-)incompatible update of fish to version 3.7.x for EPEL 9**
2025-04-09 18:22:41 <@zodbot:fedora.im> ● **Opened:** a month ago by salimma
2025-04-09 18:22:41 <@zodbot:fedora.im> ● **Last Updated:** a day ago
2025-04-09 18:22:41 <@zodbot:fedora.im> ● **Assignee:** Not Assigned
2025-04-09 18:22:41 <@zodbot:fedora.im> 
2025-04-09 18:23:08 <@tdawson:fedora.im> Michel Lind UTC-6: Do you mind starting us off on that.
2025-04-09 18:23:16 <@salimma:fedora.im> hi! yes
2025-04-09 18:23:46 <@salimma:fedora.im> so - TL;DR there is a CVE affecting fish before 3.6.2 - it's just a DOS so fish rates it 3.9 iirc but NVD rates it a 6
2025-04-09 18:24:31 <@salimma:fedora.im> I listed the breaking changes on the ticket if we go all the way to 3.7 - it's probably not much. Carl has tried backporting the fix and finds it non-trivial - after backporting two patches that look relevant the tests are still failing
2025-04-09 18:24:48 <@salimma:fedora.im> so... I'm ok either way we decide, but if we decide to disallow the update, I'm asking what to do with the CVE bug
2025-04-09 18:25:17 <@conan_kudo:matrix.org> let's just update it
2025-04-09 18:25:21 <@carlwgeorge:fedora.im> !link https://nvd.nist.gov/vuln/detail/CVE-2023-49284
2025-04-09 18:26:08 <@carlwgeorge:fedora.im> CLOSED DEFERRED or CLOSED WONTFIX both would work, if we decide against the update
2025-04-09 18:26:41 <@salimma:fedora.im> hmm so if we want to know what CVE bugs are not fixed we need to search for those two I guess
2025-04-09 18:26:58 <@conan_kudo:matrix.org> I think NVD's assessment is more accurate
2025-04-09 18:27:30 <@conan_kudo:matrix.org> the low complexity and high impact
2025-04-09 18:27:50 <@conan_kudo:matrix.org> the low complexity and high impact rating makes sense to me
2025-04-09 18:28:32 <@carlwgeorge:fedora.im> the difference in the nvd and fish ratings are the availability rating (high vs low)
2025-04-09 18:29:13 <@conan_kudo:matrix.org> confidentiality too
2025-04-09 18:29:21 <@conan_kudo:matrix.org> C and A go from low to high in NVD
2025-04-09 18:29:31 <@carlwgeorge:fedora.im> oh yeah, one more character in that string i missed
2025-04-09 18:30:42 <@carlwgeorge:fedora.im> i'm still a 0 on this, i wouldn't block it but i don't think it's necessary
2025-04-09 18:31:07 <@carlwgeorge:fedora.im> for the rating specifics i lean towards trusting the fish devs over nvd
2025-04-09 18:31:50 <@tdawson:fedora.im> I'm also a 0 on it ... which is why I've been quiet.
2025-04-09 18:32:08 <@salimma:fedora.im> so ... anyone else, please vote or raise your concern?
2025-04-09 18:32:11 <@tdawson:fedora.im> If I look at the discussion, it looks like there are 3 for it, and 2 neutral.
2025-04-09 18:32:33 <@salimma:fedora.im> I'm an implicit +1 I guess
2025-04-09 18:33:30 <@tdawson:fedora.im> I'd feel better if there were 1 more for, but 3 is the majority right now.
2025-04-09 18:34:11 <@salimma:fedora.im> Davide Cavalca: / Jonathan Wright ?
2025-04-09 18:34:16 <@salimma:fedora.im> Davide is fixing lunch IIRC
2025-04-09 18:35:00 <@davide:cavalca.name> I don't have any strong feelings about this tbh 
2025-04-09 18:35:05 <@tdawson:fedora.im> :)
2025-04-09 18:35:25 <@tdawson:fedora.im> Well, I'm going to call it, it has the majority, even if Jonathan was against it.
2025-04-09 18:35:45 <@conan_kudo:matrix.org> +1 from me in case it isn't counted already from the ticket
2025-04-09 18:36:48 <@tdawson:fedora.im> !agreed Proposal to upgrade fish in epel9 to the latest 3.x version has passed 3(+1) 0(-1) 3(0) with one not voted.
2025-04-09 18:37:48 <@tdawson:fedora.im> Michel Lind UTC-6: Did you want me to update the issue with the vote, or do you want to do it?
2025-04-09 18:37:53 <@salimma:fedora.im> alright, thanks. just wanted closure either way but this is mildly good news :)
2025-04-09 18:37:56 <@salimma:fedora.im> I'll update, thanks
2025-04-09 18:38:06 <@tdawson:fedora.im> Sounds good.  Moving on.
2025-04-09 18:38:20 <@tdawson:fedora.im> !topic Old Business
2025-04-09 18:39:03 <@salimma:fedora.im> I have a quick one
2025-04-09 18:39:16 <@tdawson:fedora.im> This is very old business, but since it came up, I wanted to thank Stephen J Smoogen and nirik another time for all their epel8 work. 
2025-04-09 18:39:30 <@tdawson:fedora.im> Michel Lind UTC-6: Go for it.
2025-04-09 18:39:32 <@salimma:fedora.im> Haven't gotten round to deprecating EPEL Packagers SIG in the docs, since I was fighting with Antora for FESCo, but now that's done ish so I can file a PR this week
2025-04-09 18:40:48 <@smooge:fedora.im> cool what is the steps to delete the mailman list :)
2025-04-09 18:41:28 <@carlwgeorge:fedora.im> oh i've got an old thing, python-semantic_version
2025-04-09 18:41:38 <@carlwgeorge:fedora.im> !link https://bugzilla.redhat.com/show_bug.cgi?id=2355645
2025-04-09 18:42:08 <@carlwgeorge:fedora.im> troy asked me to file this manual ticket, and i see he linked it to the epel2rhel tracker bug
2025-04-09 18:42:28 <@carlwgeorge:fedora.im> is the automation working now to file these correctly?
2025-04-09 18:42:57 <@tdawson:fedora.im> If something goes from "buildroot only" to "released" no, it doesn't.
2025-04-09 18:43:14 <@tdawson:fedora.im> It only works on new packages.
2025-04-09 18:43:32 <@carlwgeorge:fedora.im> ah yeah i remember we talked about that nuance in the process
2025-04-09 18:44:42 <@carlwgeorge:fedora.im> so i guess if we notice this scenario, a buildroot only package getting published and it's already in epel, and no ticket gets filed, the corrective action is a manual ticket blocking the epel2rhel tracker?
2025-04-09 18:45:16 <@carlwgeorge:fedora.im> also, understood filing the bug isn't automated in that scenario, but is the retirement later on automated?
2025-04-09 18:45:22 <@tdawson:fedora.im> Carl George: After you filed that bug, I went through and filed bugs for all the other duplicate packages.  Linking them to the epel2rhel tracker.
2025-04-09 18:46:06 <@tdawson:fedora.im> I thought that's what we talked about last week, I think we do it at RHEL release times, the week or so after.
2025-04-09 18:46:23 <@tdawson:fedora.im> "it" = remove all the duplicate places that really are in RHEL.
2025-04-09 18:47:43 <@carlwgeorge:fedora.im> Is that just you doing it manually as a proven packager?
2025-04-09 18:48:22 <@tdawson:fedora.im> I'd prefer to wait till the release because ... minds change.  Johnny's been having fun putting packages back that he just barely took out, and vice versa the past couple of weeks.
2025-04-09 18:48:41 <@tdawson:fedora.im> Carl George: Yep.  I've never had time to automate it.
2025-04-09 18:49:03 <@carlwgeorge:fedora.im> fair enough, it's probably not enough to justify the time to automate it
2025-04-09 18:49:16 <@carlwgeorge:fedora.im> https://xkcd.com/1319/
2025-04-09 18:50:02 <@tdawson:fedora.im> Anything else for old business?
2025-04-09 18:50:12 <@salimma:fedora.im> I have an open floor thing for later
2025-04-09 18:50:17 <@nhanlon:beeper.com> (same)
2025-04-09 18:50:24 <@nhanlon:beeper.com> also hi! 🙂
2025-04-09 18:50:25 <@tdawson:fedora.im> OK, let's go to that.
2025-04-09 18:50:25 <@nhanlon:beeper.com> !hi
2025-04-09 18:50:27 <@zodbot:fedora.im> Neil Hanlon (neil) - he / him / his
2025-04-09 18:50:34 <@tdawson:fedora.im> !topic General Issues / Open Floor
2025-04-09 18:50:40 <@tdawson:fedora.im> Hi Neil Hanlon 
2025-04-09 18:50:46 <@tdawson:fedora.im> Michel Lind UTC-6: go for it.
2025-04-09 18:51:05 <@salimma:fedora.im> I posted announcing I plan to retire iptables-epel , first in EPEL 10 and later in EPEL 9 after more grace period, yesterday
2025-04-09 18:51:09 <@salimma:fedora.im> one sec, let me find the archive link
2025-04-09 18:51:42 <@salimma:fedora.im> any guidance on how to go about this properly? As long as I yank EPEL 10 builds before the launch, that's reasonable enough from my perspective
2025-04-09 18:51:42 <@salimma:fedora.im> 
2025-04-09 18:52:05 <@salimma:fedora.im> https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org/thread/EISFHV6764PJTF3SQESUOET3GM3O7GFY/
2025-04-09 18:52:21 <@tdawson:fedora.im> I'd do it just like any other package retirement.
2025-04-09 18:52:24 <@salimma:fedora.im> TL;DR it's really hard to maintain this as a companion -epel package, *and* it turns out it's not necessary for anyone on stock kernels
2025-04-09 18:52:27 <@conan_kudo:matrix.org> you'd just retire it like you would in Fedora
2025-04-09 18:52:53 <@salimma:fedora.im> yeah. just want to double check that nobody sees any concern here before I proceed, thanks
2025-04-09 18:52:55 <@carlwgeorge:fedora.im> https://docs.fedoraproject.org/en-US/epel/epel-policy-retirement/#process_no_time_or_desire
2025-04-09 18:53:14 <@salimma:fedora.im> FYI we plan to just build this in Hyperscale in the fb-only repo, start with the Fedora package and just bump the epoch
2025-04-09 18:53:26 <@salimma:fedora.im> (because we happen to .. not be able to use nftables for.. reasons)
2025-04-09 18:53:44 <@salimma:fedora.im> no time or desire and also this is useless
2025-04-09 18:54:33 <@tdawson:fedora.im> Moving on while we have time .... Neil Hanlon go for it.
2025-04-09 18:55:25 <@nhanlon:beeper.com> My thing is quick and can continue off-meeting... basically I wanted to ask @Michel Lind UTC-6 about https://bugzilla.redhat.com/show_bug.cgi?id=2356480 and if he had any recollection of what we talked about re: mistune in the past. i feel like it has been a "problem child" but I can't really remember exactly. It also has epel-packagers-sig on it, so, perhaps some action needs to be taken there?
2025-04-09 18:55:53 <@salimma:fedora.im> the problem with mistune08 in the past is it's really hard to do python compat packages
2025-04-09 18:55:59 <@salimma:fedora.im> because site-packages is not versioned
2025-04-09 18:56:05 <@salimma:fedora.im> so just packaging *one* mistune is fine
2025-04-09 18:56:12 <@nhanlon:beeper.com> Ah. Okay.. then this should be fine 😃
2025-04-09 18:56:18 <@salimma:fedora.im> yeah, mistune08 is cursed
2025-04-09 18:56:25 <@salimma:fedora.im> Miro had to help fix a bunch of corner cases
2025-04-09 18:56:37 <@nhanlon:beeper.com> TY! Does it still need packagers-sig? or should just wait for that to be dropped in due time?
2025-04-09 18:57:49 <@salimma:fedora.im> no, we should never add epel-packagers-sig
2025-04-09 18:57:58 <@salimma:fedora.im> feel free to add python-sig or another relevant SIG
2025-04-09 18:58:08 <@salimma:fedora.im> the guidelines for that should be up in a few days as a PR
2025-04-09 18:58:27 <@nhanlon:beeper.com> awesome. i'll wait for those then ask miro to remove the epel-packagers-sig, while it's on my mind
2025-04-09 18:58:28 <@conan_kudo:matrix.org> python-packagers-sig, as python-sig is dead
2025-04-09 18:58:47 <@salimma:fedora.im> I think keeping epel-packagers-sig on packages for now is fine if it's already there
2025-04-09 18:58:49 <@nhanlon:beeper.com> python-packagers-sig is on it already, so it's just cleanup
2025-04-09 18:59:02 <@nhanlon:beeper.com> aight, then i'll ignore it 😃
2025-04-09 18:59:07 <@salimma:fedora.im> we want to start sending them to more targeted SIGs and then do a cleanup later, but blocking access at this point seems sily
2025-04-09 18:59:14 <@salimma:fedora.im> all that work for no gain :)
2025-04-09 18:59:20 <@salimma:fedora.im> yes, this one
2025-04-09 18:59:31 <@nhanlon:beeper.com> Heard! 🙂
2025-04-09 18:59:41 <@tdawson:fedora.im> We're at the end of our time.   Thank you all for all the good discussions, decisions, and work that ya'll do for EPEL and the EPEL community.
2025-04-09 18:59:54 <@nhanlon:beeper.com> Thanks for running @Troy Dawson !
2025-04-09 18:59:56 <@nirik:matrix.scrye.com> thanks Troy Dawson!
2025-04-09 19:00:09 <@tdawson:fedora.im> I'll talk to ya'll next week, if not sooner.
2025-04-09 19:00:30 <@tdawson:fedora.im> !endmeeting