2024-04-01 15:01:09 <@adamwill:fedora.im> !startmeeting Quality
2024-04-01 15:01:10 <@meetbot:fedora.im> Meeting started at 2024-04-01 15:01:09 UTC
2024-04-01 15:01:10 <@meetbot:fedora.im> The Meeting name is 'Quality'
2024-04-01 15:01:14 <@adamwill:fedora.im> !topic Roll Call
2024-04-01 15:01:18 <@nhanlon:beeper.com> !hi 
2024-04-01 15:01:20 <@zodbot:fedora.im> Neil Hanlon (neil) - he / him / his
2024-04-01 15:01:22 <@adamwill:fedora.im> who's around for quality fun?
2024-04-01 15:01:23 <@nhanlon:beeper.com> morning, fedorians
2024-04-01 15:01:34 <@nhanlon:beeper.com> or, whatever $time it is
2024-04-01 15:01:37 <@nielsenb:fedora.im> !hi
2024-04-01 15:01:38 <@zodbot:fedora.im> Brandon Nielsen (nielsenb)
2024-04-01 15:01:50 <@pboy:fedora.im> !hi
2024-04-01 15:01:51 <@zodbot:fedora.im> Peter Boy (pboy)
2024-04-01 15:02:54 <@nielsenb:fedora.im> I'm going to need everyone to cryptographically verify their xz installations before we can continue
2024-04-01 15:03:40 <@adamwill:fedora.im> Brandon Nielsen: cryptographically speaking I am *totally* trustworthy ALL PRAISE OUR GLORIOUS LEADER *ahem*
2024-04-01 15:03:44 <@jeffiscow:fedora.im> hello
2024-04-01 15:04:14 <@geraldosimiao:matrix.org> !hi
2024-04-01 15:04:16 <@zodbot:fedora.im> Geraldo S. Simião Kutz (geraldosimiao) - he / him / his
2024-04-01 15:04:30 <@farribeiro:matrix.org> !hi
2024-04-01 15:04:32 <@zodbot:fedora.im> Fábio Ribeiro (farribeiro) - he / him / his
2024-04-01 15:04:37 <@coremodule:fedora.im> !hi
2024-04-01 15:04:38 <@tflink:fedora.im> !hi
2024-04-01 15:04:39 <@zodbot:fedora.im> Geoffrey Marr (coremodule)
2024-04-01 15:04:39 <@zodbot:fedora.im> Tim Flink (tflink)
2024-04-01 15:05:05 <@jeffiscow:fedora.im> wait is !hi a server command?
2024-04-01 15:05:16 <@nhanlon:beeper.com> -----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQTvdBw7ReozAoY7yvtwW8Iew8cPNAUCZgrNGwAKCRBwW8Iew8cP
NPJyAP41hNq3BSGFG1I9n+ZKHe79qUIYJ0qz4JkJJv+/r6hfdQEAwHhr3ye1GDD4
kP2SOCk8aCCcVr+NzwtN4IHelMpKMgQ=
=soxa
-----END PGP SIGNATURE-----
2024-04-01 15:05:26 <@jeffiscow:fedora.im> !hi
2024-04-01 15:05:27 <@zodbot:fedora.im> jeff bucher (jeffiscow) - he / him / his
2024-04-01 15:05:44 <@nhanlon:beeper.com> part of meetbot, yea. i think it's required if you want your words to be logged
2024-04-01 15:06:19 <@tablepc:matrix.org> Good moring
2024-04-01 15:06:23 <@adamwill:fedora.im> Neil Hanlon: that definitely looks like a signature. this guy checks out
2024-04-01 15:06:24 <@farribeiro:matrix.org> It is not necessary
2024-04-01 15:06:29 <@adamwill:fedora.im> (that's how you use GPG, right?)
2024-04-01 15:06:41 <@nhanlon:beeper.com> Ack. thank you for clarifying
2024-04-01 15:06:45 <@nhanlon:beeper.com> amen
2024-04-01 15:06:59 <@coremodule:fedora.im> see, I'm verified too
2024-04-01 15:07:13 <@adamwill:fedora.im> alright, well, good thing we're all so highly security conscious around here
2024-04-01 15:07:23 <@adamwill:fedora.im> !topic Previous meeting follow-up
2024-04-01 15:07:33 <@nhanlon:beeper.com> you certainly are not!
2024-04-01 15:07:39 <@nielsenb:fedora.im> Of all the signatures I've seen, those are certainly some of them
2024-04-01 15:08:18 <@adamwill:fedora.im> !info no specific action items to follow up from last meeting
2024-04-01 15:08:41 <@tablepc:matrix.org> did I miss something I was I didn't have to use my credentials this time.
2024-04-01 15:09:36 <@adamwill:fedora.im> tablepc: you didn't miss anything
2024-04-01 15:09:43 <@adamwill:fedora.im> !topic Fedora 40 status and Final planning
2024-04-01 15:10:10 <@adamwill:fedora.im> !info Beta was released last week, seems to be going fine
2024-04-01 15:10:24 <@tablepc:matrix.org> Workstatin 40 looks good to me none of the blockers of freezes have shown up here
2024-04-01 15:10:52 <@adamwill:fedora.im> !info Final freeze is tomorrow (2024-04-02), first go/no-go date is 2024-04-11
2024-04-01 15:11:03 <@sumantrom:fedora.im> I am using F40 for a while now and things work fine for me 
2024-04-01 15:11:04 <@adamwill:fedora.im> the schedule is very tight because we don't push the final dates when we slip beta, these days
2024-04-01 15:11:28 <@adamwill:fedora.im> so just be aware that we're nearly into the final grind already :) given this it's v. important to do validation testing on nightlies
2024-04-01 15:13:04 <@adamwill:fedora.im> any other notes on f40?
2024-04-01 15:13:33 <@geraldosimiao:matrix.org> Here at may baremetal notebook it is fine
2024-04-01 15:13:37 <@geraldosimiao:matrix.org> F40 KDE
2024-04-01 15:13:51 <@geraldosimiao:matrix.org> Here at my baremetal notebook it is fine
2024-04-01 15:14:26 <@geraldosimiao:matrix.org> Adam, it is a good ideia to register here the XZ problem?
2024-04-01 15:14:32 <@geraldosimiao:matrix.org> at this meeting?
2024-04-01 15:14:36 <@geraldosimiao:matrix.org> for the records
2024-04-01 15:14:44 <@adamwill:fedora.im> there's a topic for that next
2024-04-01 15:14:49 <@geraldosimiao:matrix.org> ok
2024-04-01 15:14:50 <@geraldosimiao:matrix.org> fine
2024-04-01 15:14:56 <@farribeiro:matrix.org> On my laptop I'm using silverbue 40 and it's Fine 
2024-04-01 15:15:02 <@pboy:fedora.im> Server works well, apart from problems with keyboard navigation in Anaconda. But nobody seems to care about that
2024-04-01 15:16:00 <@geraldosimiao:matrix.org> lruzicka: found an interesting bug at KDE... https://bugs.kde.org/show_bug.cgi?id=484176
2024-04-01 15:17:53 <@adamwill:fedora.im> Peter Boy: i don't think it's that nobody cares, but people have to prioritize :( what was the bug report again?
2024-04-01 15:18:14 <@jeffiscow:fedora.im> yeah 40 workstation has been great on my laptop and desktop dual booted with win 11 other than me tring to install Nvida drivers...
2024-04-01 15:18:40 <@geraldosimiao:matrix.org> now F40 workstation have a bug on loupe
2024-04-01 15:18:57 <@geraldosimiao:matrix.org> it cannot open imege files such as jpg and png...
2024-04-01 15:19:02 <@pboy:fedora.im> If you have  to install server without  a mouse (sometimes the case in rack installations) you are out of luck.
2024-04-01 15:19:12 <@geraldosimiao:matrix.org> the package is already at stable repo
2024-04-01 15:19:18 <@geraldosimiao:matrix.org> it cannot open image files such as jpg and png...
2024-04-01 15:19:26 <@farribeiro:matrix.org> Also in my pc
2024-04-01 15:19:29 <@geraldosimiao:matrix.org> https://bugzilla.redhat.com/show_bug.cgi?id=2272149
2024-04-01 15:19:45 <@adamwill:fedora.im> geraldosimiao: yep, we've got that proposed as a blocker
2024-04-01 15:19:50 <@pboy:fedora.im> Its nearly impossoble to  select a language or to go step by step tjhrougt the installation topics.
2024-04-01 15:20:12 <@jeffiscow:fedora.im> oh yeah I ran into that also
2024-04-01 15:20:34 <@pboy:fedora.im> Its nearly impossoble to  select a language or to go step by step tjhrougt the installation topics. https://bugzilla.redhat.com/show_bug.cgi?id=2271368
2024-04-01 15:20:47 <@nielsenb:fedora.im> Loupe isn't the default though, is it?
2024-04-01 15:21:03 <@adamwill:fedora.im> yeah, it is
2024-04-01 15:21:07 <@adamwill:fedora.im> since 40
2024-04-01 15:21:11 <@nielsenb:fedora.im> Ah
2024-04-01 15:21:55 <@tablepc:matrix.org> Didn't know it was the default. I'll test it from now on.
2024-04-01 15:22:27 <@adamwill:fedora.im> Peter Boy: er, that's not a test line. it's a search/filter box.
2024-04-01 15:22:31 <@geraldosimiao:matrix.org> just click at the images on nautilus, it opens loupe
2024-04-01 15:24:55 <@tablepc:matrix.org> Thanks
2024-04-01 15:25:49 <@adamwill:fedora.im> alrighty
2024-04-01 15:26:06 <@adamwill:fedora.im> !topic xz compromise discussion
2024-04-01 15:26:51 <@farribeiro:matrix.org> the most controversial topic of the last few days
2024-04-01 15:28:30 <@adamwill:fedora.im> !info there was a very significant compromise of the xz compression library. builds known to be potentially vulnerable to the currently-known exploit vector are 5.6.0-1.fc40, 5.6.0-2.fc40, 5.6.0-1.fc41, 5.6.1-1.fc41 , 5.6.0-2.eln136 , 5.6.1-1.eln136
2024-04-01 15:29:08 <@adamwill:fedora.im> if you ever ran an affected build, the current official advice is to cease use of that system
2024-04-01 15:30:03 <@adamwill:fedora.im> we are leaning on the rh security team to come up with permanent guidance, they seem to still be evaluating (I suspect part of the work here is checking for the potential of other compromises caused by the malicious identity, besides the original known one)
2024-04-01 15:30:53 <@farribeiro:matrix.org> my system had these packages downgraded
2024-04-01 15:31:17 <@adamwill:fedora.im> i don't have anything else specific on this, but figured folks might have thoughts/questions
2024-04-01 15:31:24 <@geraldosimiao:matrix.org> I was running one of these since 03/03
2024-04-01 15:32:04 <@tablepc:matrix.org> Is rebuilds the way this is being delt with in 40?
2024-04-01 15:32:32 <@jeffiscow:fedora.im> so we should completely wipe the the Harddrive?
2024-04-01 15:32:37 <@farribeiro:matrix.org> I think we were all using each other, which was in beta
2024-04-01 15:32:40 <@adamwill:fedora.im> tablepc: so far, the response was to issue an update that goes back to 5.4.x (using an epoch bump)
2024-04-01 15:33:13 <@adamwill:fedora.im> tablepc: that's https://bodhi.fedoraproject.org/updates/FEDORA-2024-d02c7bb266 . it is now stable and in composes, so fresh f40 installs should not be affected
2024-04-01 15:33:46 <@tablepc:matrix.org> Thanks
2024-04-01 15:33:52 <@geraldosimiao:matrix.org> it wasn't in the beta iso, but since beta uses testing repos, ass soon as one installed it and run dnf upgrade it upgraded to the affected version.
2024-04-01 15:34:01 <@geraldosimiao:matrix.org> it wasn't in the beta iso, but since beta uses testing repos, as soon as one installed it and run dnf upgrade it upgraded to the affected version.
2024-04-01 15:34:09 <@adamwill:fedora.im> the advice to stop using affected systems is because if you actually *were* compromised by this, updating the system is not going to be enough. any system which was compromised has to be treated as permanently infected and redeployed from scratch
2024-04-01 15:34:43 <@adamwill:fedora.im> but i think, right now, we are still evaluating the exact factors around how likely it is any compromises actually occurred
2024-04-01 15:35:26 <@adamwill:fedora.im> folks have suggested various constraints on how the *known* vector worked (ssh accessibility, the name of the executable, and stuff) and I think those are still being evaluated
2024-04-01 15:35:40 <@tablepc:matrix.org> Ah the advantages of testing on dedicated hardware.
2024-04-01 15:35:43 <@geraldosimiao:matrix.org> but only systems that used ssh to connect to other machines in that timeframe, right?
2024-04-01 15:36:08 <@adamwill:fedora.im> and there is also the fact that the malicious identity had commit access to the project for a long period of time (and made contributions to other projects) to consider, so there has to be an evaluation of whether there are *other* attacks besides the initially-discovered one
2024-04-01 15:36:35 <@pboy:fedora.im> When will we get a new branched version? The last one is from 29.
2024-04-01 15:36:56 <@adamwill:fedora.im> right. if you ran f40 and updated it freqently, it's very likely you got an affected version at some point.
2024-04-01 15:37:45 <@adamwill:fedora.im> right. if you ran f40 and updated it freqently, it's very likely you got an affected version at some point.
2024-04-01 15:38:00 <@adamwill:fedora.im> geraldosimiao: i can't say for sure. that's what is being evaluated
2024-04-01 15:38:19 <@geraldosimiao:matrix.org> ok, noted.
2024-04-01 15:38:43 <@adamwill:fedora.im> i'm no kind of security expert, so i'm trying not to go beyond what I know for sure :)
2024-04-01 15:39:24 <@jeffiscow:fedora.im> yeah, I had it I can't say for how long, but I removed it quickly as soon as alert was posted. Thankfully, I've done a full clean install since then.
2024-04-01 15:39:42 <@adamwill:fedora.im> Peter Boy: you mean a new branched compose? I didn't look at why the last couple failed yet, friday and monday are both holidays here so i've been long-weekending :)
2024-04-01 15:39:57 <@adamwill:fedora.im> i believe the xz downgrade was already in the last compose, but let me verify that
2024-04-01 15:40:52 <@pboy:fedora.im> Yes, branched version for testing.  Ok, I remain patient
2024-04-01 15:41:38 <@adamwill:fedora.im> huh, the last few nightlies all completed, but it looks like there's a problem on openqa01 which does various things in response to nightlies (testing them, updating https://openqa.fedoraproject.org/nightlies.html , and nominating composes for testing) because none of that is happening
2024-04-01 15:41:53 <@adamwill:fedora.im> sigh, this is probably why test results weren't being reported last night too...i'd better go figure out what's going on...
2024-04-01 15:42:24 <@pboy:fedora.im> Oh, sorry for imposing work.
2024-04-01 15:43:19 <@tablepc:matrix.org> Glad I caught all that, but I gotta go now have a Great Day!
2024-04-01 15:43:54 <@adamwill:fedora.im> alright, thanks pat!
2024-04-01 15:47:56 <@adamwill:fedora.im> !topic Test Day / community event status
2024-04-01 15:48:03 <@adamwill:fedora.im> Sumantro Mukherjee: what's the score?
2024-04-01 15:48:22 <@sumantrom:fedora.im> FCOS test week starts today http://fedoraproject.org/wiki/Test_Day:Fedora_40_CoreOS
2024-04-01 15:49:33 <@sumantrom:fedora.im> Kernel Test Week was horrible ... the Kernel test app got deployed and people couldn't submit results ... https://pagure.io/fedora-qa/issue/771#comment-903726
2024-04-01 15:50:02 <@sumantrom:fedora.im> Podman and Podman 5 test week(s) went really good with decent amount of people coming in 
2024-04-01 15:50:11 <@sumantrom:fedora.im> Upgrade test day to follow soon 
2024-04-01 15:50:41 <@sumantrom:fedora.im> and DNF 5 upgrade test day with inbuilt upgrade functionality will follow 
2024-04-01 15:51:03 <@sumantrom:fedora.im> Intel Test Day will be on April 9th František Zatloukal and I will be hosting it
2024-04-01 15:51:19 <@sumantrom:fedora.im> EOM
2024-04-01 15:51:43 <@nielsenb:fedora.im> Intel test day?
2024-04-01 15:52:45 <@sumantrom:fedora.im> It is where we will be testing Intel Compute and OpenCL libs .. this is mostly for Intel OneAPI which is primary for ML and AL
2024-04-01 15:53:02 <@nielsenb:fedora.im> Cool, thanks!
2024-04-01 15:53:09 <@sumantrom:fedora.im> np np!
2024-04-01 15:53:36 <@adamwill:fedora.im> thanks sumantro!
2024-04-01 15:53:46 <@adamwill:fedora.im> !info FCOS test week starts today: http://fedoraproject.org/wiki/Test_Day:Fedora_40_CoreOS
2024-04-01 15:54:07 <@adamwill:fedora.im> !info kernel test week went ahead recently but was affected by a breakage in the app usually used for submitting results: https://pagure.io/fedora-qa/issue/771#comment-903726
2024-04-01 15:54:35 <@adamwill:fedora.im> !info Podman test week went successfully with many results submitted: https://testdays.fedoraproject.org/events/183
2024-04-01 15:55:03 <@adamwill:fedora.im> !info Upgrade test day, dnf5 upgrade test day, and Intel test day are coming soon
2024-04-01 15:55:44 <@sumantrom:fedora.im> Also adamw , we are going to have a few video meetings as a part of FCOS test week.. 
- Tue April 2 Video Meeting Link: https://meet.google.com/uwb-enhy-evg?authuser=0
- Tue April 2 Notes Doc: https://hackmd.io/kwCRZ9fGTgWuMSh0HDwQJw?view
2024-04-01 15:56:02 <@adamwill:fedora.im> oooo
2024-04-01 15:56:07 <@sumantrom:fedora.im> Those will be the links, please join in if you are unsure of what to test :) 
2024-04-01 15:56:26 <@adamwill:fedora.im> !info there will be video meetings as part of FCOS test week! see https://meet.google.com/uwb-enhy-evg?authuser=0 and https://hackmd.io/kwCRZ9fGTgWuMSh0HDwQJw?view
2024-04-01 15:56:45 <@sumantrom:fedora.im> Thanks adamw :)
2024-04-01 15:57:43 <@adamwill:fedora.im> !topic Open floor
2024-04-01 15:57:54 <@adamwill:fedora.im> any other business, quickly? we have blocker review meeting coming up in three minutes over in #blocker-review:fedoraproject.org 
2024-04-01 15:58:02 <@nielsenb:fedora.im> https://fedoraproject.org/wiki/QA:Testcase_bluetooth_headset
2024-04-01 15:58:15 <@nielsenb:fedora.im> That testcase says my headset should reconnect automatically after reboot
2024-04-01 15:58:20 <@geraldosimiao:matrix.org> Nope 
2024-04-01 15:58:22 <@nielsenb:fedora.im> That has never happened for me, at least in Gnome
2024-04-01 15:59:03 <@nhanlon:beeper.com> nope. thanks for running adamw 
2024-04-01 15:59:11 <@farribeiro:matrix.org> nope
2024-04-01 15:59:36 <@jeffiscow:fedora.im> nothing from me

2024-04-01 16:00:30 <@adamwill:fedora.im> Brandon Nielsen: hum, thanks for the heads up...it was written back in 2018 by coremodule , do you remember if you tried that?
2024-04-01 16:00:45 <@nielsenb:fedora.im> It could just be my no-brand crappy headset
2024-04-01 16:01:06 <@nielsenb:fedora.im> I was curious what other people's experiences were
2024-04-01 16:01:31 <@nhanlon:beeper.com> I dunno that i've ever tried
2024-04-01 16:01:50 <@nielsenb:fedora.im> I always have to go into settings and click the little "connect" switch
2024-04-01 16:02:11 <@coremodule:fedora.im> Hmm, I can't remember off the top of my head. That said, I don't think my Sony XM2's auto connect after reboot to this day... I wonder if there's a regression or, (perhaps more likely), it was never supposed to work that way in the first place.
2024-04-01 16:02:25 <@jeffiscow:fedora.im> my Bluetooth speaker reconnects fine
2024-04-01 16:02:42 <@nielsenb:fedora.im> Without any interaction, after a full system reboot?
2024-04-01 16:02:54 <@coremodule:fedora.im> Okay, that's good input. Brandon Nielsen, let me dig a bit deeper and ping you after the meeting.
2024-04-01 16:03:32 <@jeffiscow:fedora.im> Logitech Z407
2024-04-01 16:03:38 <@nielsenb:fedora.im> Wonder if it's device type specific
2024-04-01 16:04:00 <@jeffiscow:fedora.im> yeah working fine
2024-04-01 16:04:58 <@jeffiscow:fedora.im> much more trouble on windows lol
2024-04-01 16:05:36 <@adamwill:fedora.im> thanks for looking into it
2024-04-01 16:05:49 <@adamwill:fedora.im> we're over time, so see you over in #blocker-review:fedoraproject.org :)
2024-04-01 16:05:51 <@adamwill:fedora.im> !endmeeting