16:30:13 #startmeeting fedora_coreos_meeting 16:30:13 Meeting started Wed Jul 6 16:30:13 2022 UTC. 16:30:13 This meeting is logged and archived in a public location. 16:30:13 The chair is dustymabe. Information about MeetBot at https://fedoraproject.org/wiki/Zodbot#Meeting_Functions. 16:30:13 Useful Commands: #action #agreed #halp #info #idea #link #topic. 16:30:13 The meeting name has been set to 'fedora_coreos_meeting' 16:30:18 #topic roll call 16:30:22 .hi 16:30:23 dustymabe: dustymabe 'Dusty Mabe' 16:30:48 .hello jasonbrooks 16:30:51 jbrooks: jasonbrooks 'Jason Brooks' 16:31:01 .hi 16:31:03 ravanelli: ravanelli 'Renata Ravanelli' 16:31:07 .hello2 16:31:08 jlebon: jlebon 'None' 16:31:24 .hi 16:31:25 jmarrero: jmarrero 'Joseph Marrero' 16:31:42 .hi 16:31:43 gursewak: gursewak 'Gursewak Singh' 16:31:49 .hi 16:31:52 jdoss: jdoss 'Joe Doss' 16:32:27 .hi 16:32:28 lorbus: lorbus 'Christian Glombek' 16:32:45 #chair jbrooks ravanelli jlebon jmarrero gursewak jdoss lorbus 16:32:45 Current chairs: dustymabe gursewak jbrooks jdoss jlebon jmarrero lorbus ravanelli 16:32:56 .hi 16:32:57 mnguyen: mnguyen 'Michael Nguyen' 16:33:08 I have a meeting overlap in 30 so I might be in and out here. 16:33:29 jdoss +1 16:33:34 ok let's get started 16:33:42 #topic Action items from last meeting 16:33:46 * cverna to open ticket for FCOS as an edition and update 16:33:49 * jlebon to open investigation tickets for the IMA/FIDO changes 16:33:59 this was from two meetings ago (last week's meeting was canceled) 16:35:02 sorry, I was away for a while. let's re-action mine 16:35:19 #action jlebon to open investigation tickets for the IMA/FIDO changes 16:35:34 .hi 16:35:35 lucab: lucab 'Luca BRUNO' 16:36:06 .hi 16:36:07 walters: walters 'Colin Walters' 16:36:42 #info there was an existing ticket for becoming an edition (https://github.com/coreos/fedora-coreos-tracker/issues/915) and cverna opened a ticket related to becoming an edition (https://github.com/coreos/fedora-coreos-tracker/issues/1239). 16:37:09 we also filed a change request to try to make it happen this time: https://fedoraproject.org/wiki/Changes/FedoraCoreOS 16:37:31 we can move on to meeting topics now 16:37:42 #topic New Package Request: Crash 16:37:46 #link https://github.com/coreos/fedora-coreos-tracker/issues/1238 16:38:02 cverna++ 16:38:02 jlebon: Karma for cverna changed to 2 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:38:49 as travier mentions in comment #1 to this issue: "Due to the size of the kernel debuginfo packages, it is extremely unlikely that this will ever be included in the image." 16:39:16 basically the crash program needs kernel-debuginfo installed in order to do analysis IIUC 16:39:29 Ugh 16:40:49 If they are having issues, they should just layer the kernel-debuginfo and debug their specific problems. 16:41:35 jdoss: I think I agree. though it looks like they are coming from the OKD world where maybe that isn't as obvious to them how to do 16:42:17 I think there is a followup here that we could do (documenting this specific workflow), but before we start discussing that 16:42:30 does anyone want to advocate FOR inclusion of crash? 16:43:33 mic check.. is this thing on? 16:44:08 not me 16:44:11 it's on :) 16:44:15 I think it was a "no one" :) 16:44:16 :) 16:44:45 (not directly related, but I think we already had the same discussion for OCP/RHCOS and we may already have some instructions/steps there) 16:44:47 ok let's move to a secondary topic then.. should we document this workflow for a user 16:45:35 on how to debug kernel problems/ 16:45:39 ?* 16:45:41 this would be a great candidate (I think) for some documentation that uses `toolbox` to install the necessary packages inside the toolbox container and analyzing the crashdump 16:45:45 It's worth documenting, and it sounds like steps from ocp/rhcos could be reused 16:46:27 does anyone have a link to those steps? 16:46:55 I guess this fits into https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-kernel-crashes/ 16:47:25 lucab: indeed. We'd extend that documentation 16:47:28 dustymabe: let me see if I can find again the RFE/Jira, if I'm not actually mis-remembering 16:48:03 i guess there's nothing actually FCOS-specific to this, right? 16:48:25 jlebon: i.e. could apply to silverblue too? 16:48:28 cool to have this be in our docs, though could be interesting to have it upstream too if there's a good place for it 16:48:41 s/too/instead/ 16:48:41 or any fedora variant, yeah 16:48:52 (adding debugging tools into a toolbox container also applies to yum-based systems) 16:49:10 the "how to find matching debuginfo" part, I think that depends on distro/repos layout 16:49:22 dustymabe: i meant upstream crash, but Fedora-level makes more sense since... yes what lucab said 16:49:24 yeah. I'm cool with putting the steps somewhere else and linking to them from our docs 16:50:22 it's possible the debuginfod work in Fedora would make this really streamlined 16:50:58 #proposed We don't think including the crash program in Fedora CoreOS is extremely useful because it needs the kernel-debuginfo packages in order to do crash dump analysis and you can grab crash at the same time those packages are downloaded. Though, we do think it would be useful to document how to do the crashdump analysis from say a toolbox container. 16:51:08 ah, found the bugzilla RFE, but we didn't document the actual workflow there 16:51:28 #link https://bugzilla.redhat.com/show_bug.cgi?id=2013888 16:51:42 ack to proposal 16:52:00 You are not authorized to access bug #2013888. Womp womp 16:52:02 #undo 16:52:02 Removing item from minutes: 16:52:12 yeah unfortunately it's locked for some reason 16:52:35 OK BZ... keep your secrets 16:52:51 +1 -1 to proposed? 16:52:54 +1 16:52:56 +1 16:53:04 it contains a link to https://docs.openshift.com/container-platform/4.8/support/gathering-cluster-data.html#about-toolbox_gathering-cluster-data 16:53:17 huh, apparently it 'Provides: bundled(gdb)' which is interesting 16:53:52 there isn't much juice in that BZ anyway, it is basically a "no, please try running this containerized/in toolbox instead" 16:54:00 #agreed We don't think including the crash program in Fedora CoreOS is extremely useful because it needs the kernel-debuginfo packages in order to do crash dump analysis and you can grab crash at the same time those packages are downloaded. Though, we do think it would be useful to document how to do the crashdump analysis from say a toolbox container. 16:54:21 (sorry I didn't realize the whole ticket was private) 16:54:32 All good. 16:54:36 anyone want to volunteer to do a brief test to see if they can trigger a crash dump and use toolbox to install crash and kernel-debuginfo and analyze the crashdump? 16:54:51 and post the results to the ticket 16:54:58 * dustymabe moves on to next topic soon 16:55:36 #topic installing non-x86_64 emulators 16:55:40 #link https://github.com/coreos/fedora-coreos-tracker/issues/1237 16:56:11 TL;DR do we need to install emulators for non x86_64 16:56:53 The original reason for doing this for x86_64 was to 'allow "out of the box" access to the large inventory of containers only built for x86_64' 16:59:13 let's see who advocated for it originally 16:59:37 looks like bgilbert and travier 16:59:42 and rhatdan 17:00:09 They can't be that big right? 17:00:51 according to https://github.com/coreos/fedora-coreos-tracker/issues/1088#issuecomment-1150393245 about 12M 17:01:33 my concern here isn't as much "installing aarch64 emulator on x86_64" it's more about having a good reason too. Otherwise people start asking for every other arch on every arch 17:01:39 I'm inclined to say that we don't need to, until there is some actual user asking about that 17:01:50 dustymabe: +1 17:02:00 i.e. x86_64 now have aarch64, ppc64le, and s390x emulators 17:02:11 and same for each arch 17:02:27 I would enable people to use coreos to run more containers and test stuff. 17:02:34 It* 17:03:11 it's unlikely that anything using this will sit in the firstboot hotpath, so there is always client-side (and containerized) package layering covering this 17:03:21 jmarrero: you are right, but i think we need to weigh the tradeoffs 17:03:35 if we do include it, we should check if we really need both aarch64 and aarch64_be or if one is much more prevalent than the other 17:03:41 i think there is a much smaller percentage of users on x86_64 that want to run aarch64 containers 17:03:45 They weight about 12mb 17:04:04 jlebon: the answer is no.. I asked crobinso and he said he would accept a PR to split those two out 17:04:05 containers that are built for aarch64 are usually also built for x86_64 17:04:12 jlebon: ^^ bingo 17:04:13 dustymabe: +1 17:04:29 usually if people are building for aarch64 they are already doing it "multi-arch" anyway 17:06:08 I can see users on a non-x86_64 arch needed to run x86_64 but I think the reverse is going to be very few use-cases but this is just a guess without more data. 17:06:24 indeed 17:06:53 I am ok saying layer the package if you needed. My only example would be running podman on mac but that is aarch64 which we agreed to add the emulator for. 17:06:55 one case I can think of is if you have a development team with M1 macs targetting aarch64 EC2 isntances and some devs on your team don't have M1 macs 17:07:14 but that is a stretch 17:07:47 s/needed/need it/ 17:07:52 yeah, layering is always an option 17:08:10 #proposed We included the x86_64 emulator on non-x86_64 architectures to get access to the large library of containers that are only built for x86_64 today. We don't think there is a significant enough user base wanting aarch64/ppc64le/s390x emulators for containers built just for those architectures (usually if you are building for aarch64/ppc64le/s390x you are building for all 17:08:13 architectures). We'll leave the installation of the emulators up to the user for now. 17:08:22 +1 17:08:28 +1 17:08:42 +1 17:08:53 +1 17:08:58 +1 17:09:10 #agreed We included the x86_64 emulator on non-x86_64 architectures to get access to the large library of containers that are only built for x86_64 today. We don't think there is a significant enough user base wanting aarch64/ppc64le/s390x emulators for containers built just for those architectures (usually if you are building for aarch64/ppc64le/s390x you are building for all 17:09:13 architectures). We'll leave the installation of the emulators up to the user for now. 17:09:21 #topic tracker: Fedora 37 changes considerations 17:09:26 #link https://github.com/coreos/fedora-coreos-tracker/issues/1222 17:09:34 this should be reconsidered if it's a pain point for more than a few users 17:09:52 I added some new items to the description of https://github.com/coreos/fedora-coreos-tracker/issues/1222 17:10:17 let's run through them real quick 17:10:27 subtopic 121. Build all JDKs in Fedora against in-tree libraries and with static stdc++lib 17:10:38 Skip. FCOS doesn't ship java 17:10:47 +1 17:10:55 subtopic 122. RPM Macros for Build Flags 17:11:19 I guess we could look at the packages we own to see if we want to take advantage of this? 17:12:38 i guess in future cleanups. not sure it's worth investigating for f37. 17:12:51 +1 17:13:02 skip, nothing for us to to at the distro level 17:13:15 subtopic 123. Gettext Runtime Subpackage 17:14:27 nothing for us to do.. I don't guess 17:14:48 though I guess we could consider if we need full blown gettext or can get by with gettext-runtime 17:14:59 cool, we currently ship gettext so we should benefit from this 17:15:22 I'm looking at the "Grouping of binaries" section 17:15:27 gettext-runtime: 17:15:30 envsubst gettext gettext.sh ngettext 17:15:32 gettext: 17:15:34 msgattrib msgcat msgcmp msgcomm msgconv msgen msgexec msgfilter msgfmt msggrep msginit msgmerge msgunfmt msguniq recode-sr-latin xgettext 17:16:02 it's pulled in as a dep, so would be automatic but requires that all the packages we ship that need it move over to requiring gettext-runtime IIUC 17:16:16 ahh, true 17:16:39 gettext is needed by (installed) grub2-pc-1:2.06-42.fc36.x86_64 17:16:49 that's the only one I see, though there may be more 17:16:58 anywho we don't need to do anything specific for this 17:17:03 moving on to the next subtopic 17:17:15 subtopix 124 Golang 1.19 17:17:16 ahh cool. that's a common one so I suspect will be looked at 17:17:43 anything we need to do in our Go packages for go 1.19? 17:17:59 we should add CI for it in our go-based repos 17:18:30 i'm not sure exactly what that means :) - can you handle making sure that happens? 17:18:35 or open a ticket? 17:19:04 * dustymabe assumes the mass rebuild is coming up and our rawhide stream will tell us anyway 17:19:44 i'll chat with other Ignition and Butane maintainers. we might already have a procedure to add CI once new golang minor versions are released 17:19:58 subtopic 125 Fallback Hostname 17:20:13 I submitted this proposal along with other reps from different groups :) 17:20:34 This should be no change for us, other than removing the workaround we've been using. 17:20:47 woohoo! 17:20:51 dustymabe++ 17:20:57 thanks a lot for driving that 17:21:02 subtopic 214 LLVM 15 17:21:15 skip, I don't think we have anything to do with LLVM ? 17:21:50 subtopic 215 Supplement of Server distributables by a KVM VM disk image 17:22:00 skip, limited to server working group/deliverable 17:22:08 subtopic 216 Erlang 25 17:22:36 skip, we don't use erlang that I'm aware of 17:22:55 and that's all of them 17:23:02 +1 17:23:15 any comments before I move on? will head to open floor since we're almost out of time 17:23:54 #topic open floor 17:24:32 actually probably should mention https://github.com/coreos/fedora-coreos-tracker/issues/1234 17:24:39 anything noteworthy we should mention for june? 17:25:24 I know there was just a butane release (but that landed in july) 17:25:25 i think there were a couple of releases 17:25:56 also coreos-installer and rpm-ostree 17:26:44 any other topics for open floor? 17:26:52 jdoss: jbrooks: anything exciting going on? 17:27:09 dustymabe, No :) 17:27:25 I found one more GID mismatch for "tape" group -> https://github.com/coreos/fedora-coreos-tracker/issues/1201#issuecomment-1172142703 17:27:59 how do we feel about fixing that one directly now? 17:29:07 I don't know if I'm up to speed enough to have an opinion.. maybe jlebon or travier would know better? 17:29:49 good that this bug was caught on tape 17:29:56 lol 17:30:12 * dustymabe closes out the meeting soon 17:30:17 i know at this moment you're all thinking "glad colin is in this meeting" 17:30:37 i'm always happy to have you here! 17:31:11 #endmeeting