16:00:07 #startmeeting Infrastructure (2023-09-14) 16:00:07 Meeting started Thu Sep 14 16:00:07 2023 UTC. 16:00:07 This meeting is logged and archived in a public location. 16:00:07 The chair is nirik. Information about MeetBot at https://fedoraproject.org/wiki/Zodbot#Meeting_Functions. 16:00:07 Useful Commands: #action #agreed #halp #info #idea #link #topic. 16:00:07 The meeting name has been set to 'infrastructure_(2023-09-14)' 16:00:07 #meetingname infrastructure 16:00:07 The meeting name has been set to 'infrastructure' 16:00:07 #chair nirik zlopez nb bodanel dtometzki jnsamyak lenkaseg patrikp 16:00:07 #info Agenda is at: https://board.net/p/fedora-infra 16:00:07 #info About our team: https://docs.fedoraproject.org/en-US/cpe/ 16:00:07 Current chairs: bodanel dtometzki jnsamyak lenkaseg nb nirik patrikp zlopez 16:00:08 #info Fedora Infra documentation: https://docs.fedoraproject.org/en-US/infra 16:00:09 #topic ahoy! 16:00:16 .hi 16:00:18 dtometzki: dtometzki 'Damian Tometzki' 16:00:36 .hi 16:00:38 zlopez: zlopez 'Michal Konecny' 16:01:12 * nirik will wait until 5after for folks to wander in. ;) 16:03:20 two min more ⏲️ 16:03:38 it is nice to join the meeting after some busy weeks 16:03:55 welcome back. ;) 16:04:05 Oh, there's a hourglass emoji... ⏳ 16:04:32 Which client do you use Kevin? 16:05:00 hexchat for irc. (for emoji's I'm using gnome-characters to find them and copy, then just paste into hexchat) 16:05:08 ok, shall we get started then? 16:05:13 .hi 16:05:14 darknao: darknao 'Francois Andrieu' 16:05:15 +1 16:05:20 #topic New folks introductions 16:05:20 #info This is a place where people who are interested in Fedora Infrastructure can introduce themselves 16:05:20 #info Getting Started Guide: https://fedoraproject.org/wiki/Infrastructure/GettingStarted 16:05:31 any new folks today want to give a quick intro? 16:06:01 seems not... 16:06:08 #topic Next chair 16:06:08 #info magic eight ball says: 16:06:08 #info chair 2023-09-21 phsmoura 16:06:08 #info chair 2023-09-28 pcreech 16:06:09 #info chair 2023-10-05 ? 16:06:17 anyone interested in the 10-05 meeting char? 16:06:28 i will take 10-05 16:06:36 thanks dtometzki ! 16:06:53 #topic announcements and information 16:06:54 #info CPE Infra&Releng EU-hours team has a Monday through Thursday 30 minute meeting going through tickets at 0730 UTC in #centos-meeting 16:06:54 #info CPE Infra&Releng NA-hours team has a Monday through Thursday 30 minute meeting going through tickets at 1800 UTC in #fedora-meeting-3 16:06:54 #info we are in f39 beta freeze 16:06:54 #info next go/nogo for f39 beta is September 14 16:06:59 any other announcements? 16:07:08 The go/nogo is in about 53min... 16:07:50 Not new but it's been a minute since I last attended. 16:08:03 hey austinpowered. welcome back. 16:08:29 thanks 16:08:41 care to give a short intro/what your interest are, etc? 16:09:53 Offically, I'm retired. But I still have quite the homelab and a strong interest in DevOps and security. 16:10:41 Oh, FYI, I haven't seen much more feedback from the flock workshop/onboarding/etc discussion, so I think soon I am going to see about getting our docs.stg site to update from a staging branch and start making those changes, once they look reasonable, just merge back in to push to prod. 16:10:54 austinpowered: great! 16:11:20 feel free to ask questions or chime in whenever you like... 16:12:19 lets move to oncall... 16:12:22 #topic Oncall 16:12:22 #info https://fedoraproject.org/wiki/Infrastructure/Oncall 16:12:22 #info https://docs.fedoraproject.org/en-US/cpe/day_to_day_fedora/ 16:12:22 ## .oncalltakeeu .oncalltakeus 16:12:22 #info nirik is on call from 2023-09-08 to 2023-09-14 16:12:23 #info zlopez is on call from 2023-09-15 to 2023-09-21 16:12:25 #info pcreech is on call from 2023-09-22 to 2023-09-28 16:12:27 #info ? is on call from 2023-09-29 to 2023-10-05 16:12:32 Anyone interested in taking the oncall that last week? 16:12:49 i will take it 16:13:18 excellent 16:13:38 #info Summary of last week: (from current oncall ) 16:13:53 No oncall pings. 16:14:19 .oncalltakeeu 16:14:19 zlopez: Kneel before zod! 16:14:21 #topic Monitoring discussion [nirik] 16:14:22 #info https://nagios.fedoraproject.org/nagios 16:14:22 #info Go over existing out items and fix 16:14:53 mailman01 is right at the disk alert threshold. 16:15:03 so it alerts, then logs rotate and it's ok, then... 16:15:12 I guess we could adjust the limit there 16:15:57 some copr power8 boxes are locking up... we aren't sure fully why 16:16:12 otherwise it's been pretty quiet 16:16:43 Thats nice 16:16:53 always 16:17:25 zlopez: you good to talk about quay.io/registry today? 16:18:07 Yes, I am 16:18:13 Where is today's go/nogo meeting supposed to take place? 16:18:21 #fedora-meeting 16:18:49 #topic Learning topic 16:19:03 take it away! 16:19:05 oops 16:19:29 So let's start 16:19:29 take it away! 16:20:02 I recently started to investigate if the registry.fedoraproject.org could be moved to quay.io 16:20:42 For anybody who wants to read it later the whole investigation is documented here: https://fedora-arc.readthedocs.io/en/latest/registry_to_quay/index.html 16:21:40 The reason for move is to use the features the quay.io has available and get rid of our own hosted registry, which is not that well maintained 16:22:35 The whole investigation was split in three parts: Flatpaks, Toolbx containers and Fedora Base/Minimal/CoreOS containers 16:23:09 Let's start with the Base/Minimal images for example 16:23:47 Here is the workflow for those containers https://fedora-arc.readthedocs.io/en/latest/_images/container_workflow_registry.drawio.png 16:24:03 As you can see with F39 there is a lot changes 16:24:36 It's not using OSBS anymore, but it's for now bypassing Bodhi 16:25:42 This made the investigation much simpler, because the only thing that needs to change currently is the releng script which is located here https://pagure.io/releng/blob/main/f/scripts/sync-latest-container-base-image.sh 16:27:08 In case of Bodhi the change is simple enough, just change where the Bodhi is pushing the container images and from where 16:28:03 In case of OSBS the change is more complex, there is dockercfg file which needs to be updated and it's need to be deployed in specific playbook 16:28:30 Here is the dockercfg file https://pagure.io/fedora-infra/ansible/blob/main/f/files/osbs/dockercfg-production-secret.j2 and here is the playbook https://pagure.io/fedora-infra/ansible/blob/main/f/playbooks/groups/osbs/setup-worker-namespace.yml 16:28:55 This is all about the Base/Minimal/Core OS container images 16:30:02 In case of toolbx images the situation is mostly same, there is just toolbox CLI tool that needs to be updated as well, because the registry.fedoraproject.org is hardcoded in it 16:31:18 And last part were the flatpaks 16:32:31 In case of flatpaks the workflow is like this https://fedora-arc.readthedocs.io/en/latest/_images/flatpaks_workflow_registry.drawio.png 16:33:09 This will change with the F39, where the flatpaks will no longer use OSBS, but the koji-flatpak plugin 16:33:42 Which is easy to change, we just need to adjust configuration file for it https://pagure.io/fedora-infra/ansible/blob/main/f/roles/koji_builder/templates/flatpak.conf 16:34:10 The OSBS and Bodhi change will be the same as in case of containers 16:35:23 We will probably decommision OSBS in future, when it will no longer be needed and flatpaks are in phase of migrating from OSBS 16:36:07 So in case of flatpaks we also need to adjust proxies to point to quay.io instead of registry.fedoraproject.org 16:36:36 yeah, imho, we should keep registry.fp.o, just redirect it 16:36:41 And there is also flatpak-indexer which creates metadata for flatpaks https://github.com/owtaylor/flatpak-indexer 16:36:49 nirik: Understood 16:37:25 Ok, that was the investigation and how the setup should look on the quay.io side 16:38:00 thanks for doing that investigation.... 16:38:03 So we should have four namespaces: staging-candidate, staging, production-candidate, production 16:38:49 The staging ones will be for staging builds, just to test out things before going to production, and the production is well... for production :-) 16:39:36 nirik: Do we plan to keep all the content on the registry? 16:40:09 so, i filed a ticket about that... 16:40:30 currently we don't delete anything at all from prod 16:40:50 but we likely should. 16:40:57 or discuss it at least 16:41:42 And a last note, I will have a meeting with the quay.io folks next week on Friday, they look happy to host the things for us :-) 16:42:06 https://pagure.io/fedora-infrastructure/issue/11512 16:42:09 nirik: +1, it would be nice to free the resources for something else 16:42:58 feel free to add me if you would like me on that meeting... 16:43:16 I don't think I have anything else to had, we will probably start working on that after F39 release 16:43:35 sounds reasonable 16:44:13 nirik: I will add you as optional for the meeting 16:44:23 thanks 16:44:40 Do we know what amount of traffic we had for registry.fedoraproject.org? 16:44:43 any questions or comments or discussion? 16:45:43 zlopez++ 16:45:43 patrikp: Karma for zlopez changed to 1 (for the release cycle f39): https://badges.fedoraproject.org/tags/cookie/any 16:46:05 zlopez++ 16:46:06 we have logs, but not sure how to get traffic stats 16:46:08 thanks zlopez 16:46:41 zlopez++ 16:46:41 austinpowered: Karma for zlopez changed to 2 (for the release cycle f39): https://badges.fedoraproject.org/tags/cookie/any 16:47:14 ok, anything else on this, or shall we move to open floor? 16:47:20 nirik: I will try to ask flatpak folks, if they don't watch it 16:47:23 zlopez++ 16:47:23 dtometzki: Karma for zlopez changed to 3 (for the release cycle f39): https://badges.fedoraproject.org/tags/cookie/any 16:48:09 sounds good 16:48:15 #topic Open Floor 16:48:40 anyone have anything for open floor? questions, comments, favorite coin? 16:49:15 Favorite coin? The ones in my pocket usually :D 16:50:06 I like the susan b anthony 1$ us coin... 16:50:19 it's almost the same size as a quarter and confuses everyone. 16:51:22 anyhow, thanks for coming everyone! 16:51:27 #endmeeting