16:01:09 #startmeeting Fedora QA meeting 16:01:09 Meeting started Mon Feb 20 16:01:09 2023 UTC. 16:01:09 This meeting is logged and archived in a public location. 16:01:09 The chair is adamw. Information about MeetBot at https://fedoraproject.org/wiki/Zodbot#Meeting_Functions. 16:01:09 Useful Commands: #action #agreed #halp #info #idea #link #topic. 16:01:09 The meeting name has been set to 'fedora_qa_meeting' 16:01:27 thanks! 16:01:59 * chromebittin is here 16:02:00 #meetingname fedora-qa 16:02:00 The meeting name has been set to 'fedora-qa' 16:02:08 #topic Roll Call 16:02:12 chromebi1tin: hey, good to see you 16:03:29 * coremodule is here 16:04:16 and can help with some testing again once i got a computer with a non broken CPU, my Haswell Refresh i7-4790K is being stupid (but my little brother has a spare Ryzen system) dad just need to help him move an 1tb m1 SSD to his new modern Intel system from 2020-2022 then i am getting his 2017-2018 system to replace my 2013-2014 one 16:04:38 so been doing less testing for some weeks/months 16:04:51 haha, the struggle is real 16:05:26 my houseguest brought his motherboard+CPU with him but it wasn't working when he got here so he got a new one, i was hoping to steal his old one to upgrade my gaming/test box but it doesn't work for me either :/ 16:05:31 well not fun with a desktop that randomly freezes 16:05:42 :( 16:06:10 ah, that sucks 16:06:36 kparal, sumantro, lruzicka, tflink (@tflink:fedora.im): anyone else around for meeting fun times? 16:07:43 did hear in the Fedora Flatpak meeting that i was in for a bit as i was early for this one next composes will get GNOME 44 Beta :) also Kernel 6.2 released upstream any plans for test days? (but maybe talk about that when we get there) 16:08:00 amigadave been hard at working packing the gnome 44 beta 16:08:12 * tflink[m] is here 16:09:19 excellent, you count 16:09:19 welp, let's get rolling 16:09:20 i have a feeling there's something for the Stuff Adam Forgot To Do list 16:09:24 #topic Previous meeting follow-up 16:09:45 * kparal is here 16:10:11 * SumantroMukherje is on phone but here 16:10:44 16:37:56 #action adamw to send out mail asking folks to vote on blockers in tickets 16:10:47 sending emails? 16:11:14 #info "adamw to send out mail asking folks to vote on blockers in tickets" - yeah, uh, I forgot. I'll do it later! I promise! this is also what I keep saying about all those boxes in the garage 16:11:23 #action adamw to send out mail asking folks to vote on blockers in tickets 16:12:16 #topic Fedora 38 status 16:13:03 #info F38 has branched, openQA update test gating is enabled, beta freeze starts in ~22 hours 16:13:32 GNOME 44 Beta in composes later this week 16:13:35 we have one proposed blocker and one accepted blocker for beta, so not too scary 16:13:41 adamw, does the freeze mean we will start blocker review meetings next week? 16:13:48 or this week? 16:13:54 chromebi1tin: not without a freeze exception it won't be. ;) 16:14:21 coremodule: think its ongoing right now according to: https://communityblog.fedoraproject.org/fridays-fedora-facts-2023-07/ 16:14:31 coremodule: i tend to time the blocker meetings more around how many proposed blockers there are than a strict timing, but yeah, closer we get to release, more likely we need one 16:14:34 adamw: oh ok, guess i did missunderstood kalev then 16:15:56 okay, cool. just trying to see if ill be on pto for the first one and someone else will get the joy of being the secretary :) 16:16:02 adamw: so not any blocker meeting today? 16:16:04 if folks can vote on the proposed blocker at https://pagure.io/fedora-qa/blocker-review/issue/1033 it'd be great, though it does seem a bit subtle, i need to talk to kde team about it 16:16:21 chromebi1tin: i didn't announce one for today, no. there's only one proposed beta blocker to vote on 16:16:27 ah alright 16:16:46 there are four proposed finals, though. so i guess if we don't deal with those by ticket votes, i'll schedule a meeting next week 16:17:01 Works for me! 16:18:01 so, things don't look too bad for beta, but we do have a lurking issue for final which kparal has wisely started making noise about early: https://bugzilla.redhat.com/show_bug.cgi?id=2170878 16:18:24 it's on the proposed final blocker list, but it's a pretty big squishy "issue" so i thought it was worth calling out directly so people are aware and we can talk about anything we want to do about it 16:18:55 ngompa asked me to file a fesco blocker proposal, but I'm waiting for the moment 16:18:55 basically, the issue is this: in f38 the crypto policy is tightened such that dnf/rpm don't accept SHA-1 signed packages by default. unfortunately this means if you have any already installed, you get a pretty bad experience, and some very popular third-party packages are SHA-1 signed 16:19:16 (it's not just about SHA-1) 16:19:19 kparal: in a way i feel like that might be the way to go 16:19:39 oh, it's not? 16:19:39 well DSA and similar as well 16:19:46 I know almost nothing about crypto 16:20:02 so I'm just waiting the acronyms like I understand them 16:20:04 *waiving 16:20:09 ah ok, so more than just one algorithm but basically the same issue 16:20:12 heh 16:20:38 yes, Chrome repo key is also signed with DSA, so allowing just SHA1 doesn't help 16:20:42 it's just which scary bit of math is used to do the 'this is really the same thing / really signed by this person' magic. some of those maths aren't scary enough any more, apparently. 16:21:33 so, yeah. i kinda feel like neal might have the right idea 16:22:07 guess its not as easy as telling Google to sign with SHA-256 or SHA-512 :p 16:22:10 dealing with this through the regular blocker process feels a bit tricky. like we don't have an obvious criterion for it, so we'd have to judo one, and if we judo one, we're gonna get into a dumb debate about what needs to change to satisfy the criterion 16:22:16 whereas if we just send it through fesco, fesco can say exactly what they want to happen 16:22:17 right, I'm just waiting if somebody tells me that I have it all wrong. If nobody does, asking fesco might be a good move 16:22:25 sounds reasonable 16:23:24 my spitball idea would be some kind of "forward only" scenario - the requirement would only be enforced for *newly installed* packages, existing packages signed with older keys would be grandparented in 16:23:25 but no idea how practical that is on a technical level 16:23:40 Panu responded to a similar request that it's complicated 16:23:46 fun 16:23:50 isn't complicated what we pay him for? :D 16:24:51 I asked for his opinion in the bug report, let's see 16:25:11 it does lead to the question "what about updates", too 16:25:33 do you let existing SHA-1 packages be updated to new versions that are still SHA-1 signed? 16:25:46 anyhoo. yeah, just wanted to flag it up and let people know where we're going with it currently 16:25:51 anyone have any thoughts/ideas around that? 16:26:32 poke Google and Microsoft, if somebody has long enough fingers 16:27:27 i'm not sure how long they are, but i'll poke someone at the Googs 16:27:49 * neil goes back to lurking 16:27:57 yeah, obviously it's going to help any resolution to this if we can get them to update the damn packages asap at least 16:28:22 thanks 16:28:31 neil: you can also reference this summary: https://ask.fedoraproject.org/t/popular-third-party-rpms-fail-to-install-update-remove-due-to-security-policies-verification/31594 16:28:46 ty. will do :) 16:29:31 #info kparal wisely foresaw that tightened package crypto requirements would cause major problems with popular third-party packages, see https://bugzilla.redhat.com/show_bug.cgi?id=2170878 , this is currently going through the normal blocker process but we may well send it through the fesco blocker process if nobody speaks up to say our understanding is incorrect 16:29:56 alright, anything else on f38? 16:30:43 nothing here 16:31:04 not from me 16:31:20 Nothing here 16:31:25 #topic Test Day / community event status 16:31:31 SumantroMukherje take it away 16:31:39 indeed 16:31:52 also any Kernel 6.2 test days planned? 16:32:33 I waa sick and didn't check the QA tracker . I will in a few hours. 16:32:54 For the kernel 6.2 though , jforbes: do you have any update?? 16:33:01 We have a lot of test days olanned 16:33:06 * planned 16:33:11 just landed in Koji for F38 Branched and Rawhide 16:33:38 And we will be going through changeset shortly!! 16:33:49 I intend to do an onboarding soon 16:34:00 SumantroMukherje: other than https://pagure.io/fedora-qa/issue/729 ? 16:35:01 ah thanks jforbes was that i was looking for :) 16:35:07 Nah this is the one!! 16:35:46 #info sumantro has been off sick so we don't have all dates and details nailed down yet, but several test days are in the pipeline, including GNOME, i18n, Clour, CoreOS, IoT, kernel 6.2 and dnf5 16:35:50 er, cloud. 16:35:57 Yess 16:36:13 Probably the anaconda web installer as well 16:36:19 #undo 16:36:19 Removing item from minutes: INFO by adamw at 16:35:46 : sumantro has been off sick so we don't have all dates and details nailed down yet, but several test days are in the pipeline, including GNOME, i18n, Clour, CoreOS, IoT, kernel 6.2 and dnf5 16:36:40 #info sumantro has been off sick so we don't have all dates and details nailed down yet, but several test days are in the pipeline, including GNOME, i18n, Cloud, CoreOS, IoT, kernel 6.2, dnf5, and probably the anaconda web installer 16:36:50 #info we're also hoping to run an onboarding session soon 16:37:34 That's all from my side 16:38:01 thanks sumantro 16:38:09 any notes/questions on this topic? 16:38:54 I just noticed this ticket and it's somewhat related: https://pagure.io/fedora-workstation/issue/359 16:39:38 I guess we should discuss with Allan there and find a way to make GNOME testing smoother this cycle 16:39:43 * SumantroMukherje logs the ticket number 16:39:51 being discussed in #fedora-workstation atm 16:40:03 yeah, that's the one i was asking you to look at when you get a minute, sumantro 16:40:13 if you've got a lot on your plate, we could spread the load a little too 16:40:14 kparal: Last release i wrote down a bunch of test cases. 16:40:34 Adamw , i will take it! 16:40:53 I think the one where Sumantro Mukherjee is requested is this one: https://pagure.io/fedora-workstation/issue/329 16:40:58 there is an outstanding suggestion by me to go through the results from the last test week and update some test cases, there were several 'bug' reports which were clearly the result of test cases that needed updating 16:41:08 oh yeah, there are two 16:42:03 kparal: on the 359 topic, are you planning to do a round of torture testing gnome apps again?> 16:42:18 sumantro: wdyt about the idea of dropping the GNOME RC test week? it does make sense to me 16:42:45 adamw: I never plan to do that, it just happens when I'm trying to verify one fix or another 😄 16:43:06 #info there are a couple of outstanding workstation wg tickets that relate to our testing events: https://pagure.io/fedora-workstation/issue/359 and https://pagure.io/fedora-workstation/issue/329 16:43:16 I'd like to find those bugs earlier this time, but you know how it works... 16:43:18 kparal: i guess what i'm saying is, if we're gonna do it let's do it soon, so they don't get mad at us :P 16:43:24 adamw @adamwill:fedora.im: like make it a day or make it go away ? ;) 16:43:37 some of the bugs from previous cycles are still outstanding, i believe 16:44:07 there is always something more important than gnome-photos, to the very last day 😄 I'll try 16:44:27 gnome-music ;) 16:45:10 kparal: or you could just try *even less* and not launch them at all ;) 16:45:10 🤔 16:45:23 That's actually a real problem , bugs not getting fixed and then we pushing release after release 16:45:46 yeah, well, it's a "let's agree on what really must get fixed" problem, i guess 16:46:02 i asked workstation wg to invite us to the meeting where they discuss the ticket 16:46:07 Yes that works 16:46:30 will miss it on the bus on my way home from new $dayjob when their meetings is 16:47:51 alrighty 16:47:53 #topic Open floor 16:47:56 any other business, folks? 16:48:15 * chromebittin does not have anything 16:49:25 * SumantroMukherje met Rishi and we talked about writing the toolbx criteria for WS WG 16:49:41 * SumantroMukherje also needs channel rights for #test-day:fedoraproject.org 16:49:50 Pleas bless!! 16:50:55 who needs channel rights? you do? rishi does? 16:51:06 and, er, what rights? 16:51:11 irc? matrix? 16:51:17 * rishi[m] waves 16:51:19 i suppose this is a bit of a grey area :D 16:51:22 hey rishi 16:51:23 guessing Matrix 16:51:50 I am just lurking after the Flatpak SIG met. I didn't realize that you guys will want to discuss Toolbx today. :) 16:52:12 * rishi[m] is on Matrix right now 16:52:25 But I don't think I need any rights. :P 16:53:24 I do adamw @adamwill:fedora.im: 16:53:26 rishi (@rishi:gnome.org): it's the open floor section, anything goes :P 16:53:32 thanks to you and sumantro for working on that 16:53:52 sumantro: ah, okay. matrix side? irc side? 16:54:00 for setting topics and things? 16:54:07 i don't actually know how that works with the bridging 16:55:09 Sure. Did you have anything specific to ask me? 16:55:37 I know that sumantro wanted to be a co-maintainer for container/fedora-toolbox and rpms/toolbox. 16:55:54 can't think of anything right now 16:56:16 Since he isn't in the 'packager' group, yet, I need to dig up the process to get him in through the co-maintainer fast track. 16:57:21 ah, yeah, i don't remember how that goes either 16:59:41 "sumantro: ah, okay. matrix side?..." <- Yea that 16:59:46 For setting topics 17:00:11 time 17:00:16 alright, i'll see if i can talk to the matrix admins about how that all works 17:00:18 rishi[m]: I guess we gotta do a lottt of RTFM 17:00:20 and yes, that's time 17:00:40 ⏰ 17:00:43 #action adamw to read up on how the matrix/irc bridging works for topic setting, and get sumantro appropriate rights to set topics on both sides in the test day channel 17:00:56 +1 17:02:06 +1 17:03:36 endmeeting ? 17:04:20 yup 17:04:21 thanks, everyone 17:04:21 #endmeeting