openSUSE Release Engineering meeting 22.06.2022
All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees guillaumeg, rbrown, lkocman, DocB,DimStar, ddemaio, dirk, sbahling NEXT MEETING WILL BE AFTER HACKWEEK which is 6th July (CZ has a public holiday on 6th) ## SUSE IT - Rado | Martin POC (something lkocman played on in train from OSCcon feel free to contribute) https://build.opensuse.org/project/show/home:mpiala:suse-it-infra Richard has working firstboot for MicroOS Desktop with gnome-initial- setup: https://download.opensuse.org/repositories/home:/RBrownSUSE:/microos:/selfin... https://hackweek.opensuse.org/21/projects/opensuse-build-supported-by-suse-i... lkocman: please make sure that current TODOs are listed on the page, so people can jump on it next week (hackweek). Requirements: full disk encryption lkocman's todo: working first-boot Official project by autobuild https://build.opensuse.org/project/show/isv:SUSE:suse-it-infra Shall we consider yast2-firstboot. Richard: the system facing stuff works well in yast2-firsboot, but the desktop part not so much (language for GNOME). SUMA demo - at the moment, there are two major issues in SUMA. okta integration and availability for public internet. (upstream https://github.com/uyuni-project/) https://www.suse.com/products/suse-manager/ Rado: Management of devices need to be integated with OKTA. In case SUSE IT will not find any other solution, SUMA and feature integration sounds like a way to go. ## Leap 15.4 retro spective is open at survey.opensuse.org. Closes today ignite-o-o - need to build container in OBS, perhaps I'll find time during hackweek SLE Micro update channel for Leap Micro Build is in openQA Marcus: http://download.opensuse.org/update/leap-micro/5.2/sle/ new repo fed with SLE Micro updates Have to update https://en.opensuse.org/Portal:LeapMicro/Lifecycle Topic from SUMA based installations which seem to have a problem with our repositories injected via openSUSE-release. https://bugzilla.opensuse.org/show_bug.cgi?id=1200446 we're preparing Leap 15.3 / 15.4 profiles for a customer for use in a non-Internet-connected environment (installation via SuMa). We have all required channels, but the openSUSE-release RPM unconditionally introduces repositories with download.opensuse.org URLs, two of them activated... hence stage 2 of the autoyast install reports errors on repository refresh, which we cannot disable via autoyast settings. Jiri suggested I get in touch with you. Current work-around is to "sed"- disable the repos in a chroot-script, but I'd rather see a solution (maybe in terms of a pattern all packages can follow), i.e. the post- install script of openSUSE-release detecting autoyast and then deactivating any repository it introduces (or not even add the repos at all, without breaking "rpm -V"). Jiri offered to help with his views on this (just mentioning it here...). Perhaps a topic for Leap 15.4 QU1? (from Jens - the one who reported this): If there's a "proper" way to detect that installation is via autoyast: In postinstall, change the "enabled=1" to "enabled=0" for all added repos. They're added as config files, so they'll be reported as "modifed", but I'd prefer this over removing the files alltogether in post-install (rpm -V then would report them as *missing*). OTOH, conditionally *creating* these files in post-install might be an option, but that would change the behaviour: Currently, an "rpm -qf" would report ownership for these files, while dynamically created files will be owner-less (the latter is the same as with the other repositories created during installation, so it would be ok with me. But if you insist on keeping as close to GM as possible, just disabling the repos would be the way to go). lkocman: I'm still thinking of a service to deliver these repositories compared to current file definitions ... we wanted it for Jump. 15.5 is ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 343 failed, 9 unresolvable (2 weeks ago: 383/12) https://tinyurl.com/ysy4nnnz * SELinux 3.4 passed staging, but with staging being a subset of the full product tests, a bunch of issues showed up after merging SELinux 3.4 into Factory. Most notably 'podman not working' Snapshots 0620+ blocked until either SELinux reverted or a proper fix can be found Dirk: we need to unblock ourselves before hackweek. GPG Key to sign packages/repos is planned to be updated to be a 4096/RSA key (implementation schedule pending) Tracker bug : https://bugzilla.suse.com/show_bug.cgi?id=1199184 ## Richard (MicroOS) MicroOS/Kubic patterns tidied up, patterns-containers now only includes podman, all kubernetes/crio related stuff is in patterns-kubernetes Kubernetes 1.24 is on the way to Factory, but having a bit of a bumpy ride through the more lightweight, non-Kubic process Tallow being dropped from Factory due to abandonment upstream and inabilty to work with nftables and firewalld TW-BCI-containers being resubmitted today after all prep work done properly this time ## Max SLE Micro 5.3 Alpha will be soon, we should already create a setup in OBS lkocman: todo roadmap Leap 15.5 setup can definitely wait after hackweek. * Preparing some improvements for the next release. Filing tickets for the openSUSE-release-process github repo * Locked Leap and Backports project * Raspberry Pi USB Boot problems * We could track it as a known issue in RN (Otherwise it's already listed in Raspberry PI HCL section on wiki) * Candidate for 15.4 QU1 respin is ^ as well as the wlan0 issue https://bugzilla.suse.com/show_bug.cgi?id=1186677 ## Guillaume - Arm Tumbleweed: * llvm9 added back as an overlay for ghc-bootstrap which still requires it for aarch64 and armv6/7, but binutils-gold would also be needed, but have been dropped: https://bugzilla.opensuse.org/show_bug.cgi?id=1199897 * Last Kubic DVD iso (from 25th of May) built is still available at http://download.opensuse.org/ports/aarch64/tumbleweed/iso/ Should we now clean it up? Leap 15.4: * armv7: Same as last week * Enlightenment package not built before the lock of the project (was still failing in rpmlint check due to a missing whitelist). maybe provide it via update channel? https://bugzilla.opensuse.org/show_bug.cgi?id=1194047 Has to be already a maintenance update. Leap Micro 5.2: * Default-SelfInstall: PR available https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/14890 for openQA: https://progress.opensuse.org/issues/110845 lkocman: let's pull it into our current build the one enabling SLE micro update channels ALP: aarch64 images not yet enabled in devel:LEO/images. Lubos: Just an update form a meeting with Marco Varlese, seems like the ProofOfConcept will officially have only x86_64 in scope. That doesn't block us from working on remaining architectures. Guillaume: We should make sure all the tools are multi-archs friendly Discussion with Frederic was tracked here https://etherpad.opensuse.org/p/weeklymeeting20220621 fcrozat@ jsrain@ could use feedback Yi Fan (Driver of Desktop WG) will be on our Tuesday's weekly meeting after hackweek (6th of July 16:30 CEST). ## Sarah - s390 lessons in parallel A new OpenJDK 17 is available for testing. If all is ok, then we can make it as a default. We have to build additionally a JDK 17 based on OpenJ9 for mainframe environments. I have asked IBM for feedback and they prefer the Semeru Runtimes. Communication: https://lists.opensuse.org/archives/list/zsystems@lists.opensuse.org/thread/... Tumbleweed: * Is rolling openSUSE Leap 15.4: * no issues We want to participate as a mentoring org (as the s390x team) at the Open Source Day. Application accepted We will have a BBQ party within our team at the end of June. ## Doug * Last day to take the survey about Leap. * Events * OSCAL oSC22 complete * Uploaded a few videos Waiting on more from oSC22 to be uploaded lkocman: great news! people were already asking about it * GSoC * Projects started * First evaluations due July 29 at 18:00 UTC ## Dirk * nothing important to share ## Wolfgang (Package Hub), Scott Bahling SLE 12 SP5 PH request to add supervisor https://bugzilla.suse.com/show_bug.cgi?id=1200415 - SR created: https://build.opensuse.org/request/show/983452 Getting several reports of missing packages from PH 15 SP4. Noticed that there are about 1300 packages removed from Backports 15 SP4 vs SP3. Need to investigate why we are missing so many. Let's revisit this after hackweek, lubos will make a meeting ## Maintenance team (Marina or Marcus, Maurizio (m4u)) Leap Micro 5.2 update channel was mentioned above. No integration tests in place. The only concern is about rpm dependency issues. 15.4 Update openQA was setup this week Staff is moving as usual. Stuff? or is the staff physically moving to new SUSE building? ;-) - Marcus: 15.4 is set up channel wise, updates will go in testing occasionaly, if you need more ping me, no openqa setup yet lkocman: could you please help me with cleanup of maintenance tasks in https://progress.opensuse.org/projects/opensuse-leap-15-4/issues/gantt lkocman: will contact Jan Stehlik. Santi (PO for the topic) mentioned he'll work on it. lkocman: messaged Jan Jan confirmed with me that they're on it. lkocman: (still pending) will open a release notes entry for a change Security Advisory identification TODO Marcus: could you give me example of old and new values? - Marina and Maurizio: SLE-PackageHub overlaps (https://github.com/openSUSE/openSUSE-release-process/issues/71) work in progress following the initial list of overlapping packages (https://progress.opensuse.org/issues/106610#note-3). More incidents are under QA. Work is going on and under control (and tracked internally as jsc#MSC-303). Already released: (AH PERFECT!) SUSE:Maintenance:22929:265929 (babl libbabl-0_1-0 typelib-1_0-Babl-0_1) SUSE:Maintenance:23000:266006 (MozillaThunderbird enigmail) SUSE:Maintenance:23009:266004 (freerdp freerdp-devel freerdp-proxy libfreerdp2 libgsm) -> libgsm1 was missing in PH making freerdp not installable SUSE:Maintenance:22928:266007 (argyllcms csync libcsync0 libcsync- plugin-sftp libcsync-plugin-smb) SUSE:Maintenance:23015:267052 (gfbgraph-devel libgfbgraph-0_2-0 typelib-1_0-GFBGraph-0_2 librest gcr) -> librest, gcr and libgoa are needed too for making gfbgraph installable SUSE:Maintenance:23334:268316 (gutenprint gutenprint-devel) SUSE:Maintenance:23486:268867 (hp-drive-guard, upower) --> needs libupower-glib3 SUSE:Maintenance:23487:268897 (liba52-0 liba52-devel) SUSE:Maintenance:23506:268899 (libdvdread4 libdvdread-devel) (we need to re-check after hackweek) ## Adrian - OBS not available any requests during hackweek need to set priority as urgent
participants (1)
-
Lubos Kocman