Hey!

Did read up on this now, has had too much to do earlier this week, and started working a bit on the Swedish Translations of the Leap 15.4 Release notes, and @Johan Dot promised to continue to work on them later today :)

On Thu, May 5, 2022 at 3:56 PM Lubos Kocman <lubos.kocman@suse.com> wrote:
All meeting minutes can be found here:
https://etherpad.opensuse.org/p/ReleaseEngineering-meeting
Meeting is hosted here
https://meet.opensuse.org/ReleaseEngineeringMeeting

## Attendees
guillaumeg, DimStar, rbrown, lkocman, mpiala, ddemaio, maurizio
(m4u).maxlin, Sarah

## Internal SUSE IT Supported distribution

Guests: Martin Piala, Vojtech Pavlik

Idea: openSUSE Leap as supported system by SUSE IT!
Vadim G. is looking for a help to kickstart the effort.
We're thinking of starting a hackweek with a Leap 15.4 spin with some
preinstalled tools for SUSE environment.
https://hackweek.opensuse.org/21/projects/opensuse-build-supported-by-suse-it

Our feature tracker for any issue references.
https://code.opensuse.org/leap/features/issue/77

Next steps collect requirements for Minimal Viable Product
I believe Vojtech could help us there.

How does Rancher product portfolio fit in?

Datto is using gnome-initial-setup for post-install tweaks.
https://github.com/endlessm/gnome-initial-setup/blob/master/HACKING
We could start there as well. However, they're already looking for some
futher management tools.
I believe that we do not need any 3rd party tools. Perhaps SUMA could
help with post-installation management.

Martin: currently supported systems by IT are Windows 10 and MacOS, we
would like to change this
Martin: we'd like to have pre-installed tools required for daily work.
slack, teams.
We have company portals for Windows10 and Mac and some of the apps can
be already preinstalled for the image.
Martin: we do not yet have experience for responsibility of building
Linux apps and we need your help.
Ideally it should be done by the end of the quarter. End of July

It's not decided yet what should we use. Whether we need a script post-
install.

Richard: I do have a couple of questions:

Which HW are we talking about?
* How often will be the recommended hardware changing?
Martin: We have some predefined laptops specific.  2 hardware specs
(standard, power). New ones are Lenovo, we're also rotating the older
Dells.
Martin will discuss this with team. In the next HW rotation we should
take the support of the chosen OS into consideration.
* Would the best option be Leap based? And perhaps risk some of the
missing hardware support?
* Or should we consider something Tumbleweed based? Perhaps you will
end up with something like MicroOS
* Desktop. Teams, Slack would be then consumed from Flatpaks.

lkocman: I recommend to consider two approaches: provide root password
to the user or not. For less technical users it would be preferred if
SUSE it would do most of the changes.
Martin: For IT are also preferred these two options, one with admin
access (here the user is responsible for the setup), and another with
limited permissions, where IT is responsible for maintenance + the
laptop must be enrolled (most probably in VMware Workspace One,
currently under research).

## Leap

Leap Micro 5.2 is RC!

We've also progressed on release-notes-leap-micro (Thanks cboltz and
Lukas)
https://doc.opensuse.org/release-notes/x86_64/openSUSE/LeapMicro/5.2/

Rework of LeapMicro get-o-o layout
community worked on overview for Leap Micro
https://etherpad.opensuse.org/p/weeklymeeting20220505#L51
We should also consider single page layout MicroOS and backport
overview changes as well
https://github.com/openSUSE/get-o-o/pull/87


A lot of changes from SLE 15 SP4 post-RC. Removing snapshot at this
point in time was not so good choice in the end. Some more changes will
be taken in today, tomorrow. Mass rebuild is planned in next few days
(Friday/Saturday). Maint snapshot for SLE 15 SP4 on Sunday.
We need to be able to finish the RC build, that's not possible now.

Leap Desktop/Workstation workshop is next week!
50+ people have signed up for workshop
https://www.reddit.com/r/openSUSE/comments/udr5ly/desktop_workshop_for_next_gen_leap/
- syncup with Scott and Yi Fan prior the acutal workshop
Looking for drivers who could help us "kickstart the initial workshop".
Long story We need some people who already know what to do (how lucid
works, create some initial topics) to inspire others.

Interesting last minute feature for laptop customizations. (Big thanks
Dirk) I'll see what would be easily adoptable. SLED is interested as
well.
https://code.opensuse.org/leap/features/issue/75


## openSUSE Tumbleweed

openSUSE:Factory build fail stats: 108 failed, 10 unresolvable (last
week: 123/11)
  https://tinyurl.com/ysy4nnnz

* GNOME 42.1 shipped in snapshot 0501 (snapshot 0429 and 0430 were
blocked due to dracut)
* KDE Plasma 5.24.5 staged - ready for either 0504 or 0505
* Meson 0.62 is staged - another round of 'syntax validation getting
stricter' (not too many issues seen though)
* GCC12 as default compiler still staged, results are looking very good
(Staging QA all passed, waiting for the final go)
lkocman: I hope that Alp will adopt to the new default(s) as well.
Mentioned the llvm situation in Leap 15.X

GPG Key to sign packages/repos is planned to be updated to be a
4096/RSA key (implementation schedule pending)
 Tracker bug :  https://bugzilla.suse.com/show_bug.cgi?id=1199184

OBS seems to have some hard time finding workers for ceph and kernel
builds: very frequently, staging projects are blocked by waiting for
the 4 same packages still being scheduled (ceph, kernel-default,
kernel-vanilla, kernel-debug) (constraints limit to 18 (ceph) resp 24
(kernels) workers)

## Richard (Kubic/MicroOS)

Started Discussion with the Kubic community about winding down the
Kubic project and focusing more attention on MicroOS (and MicroOS
Desktop) -
https://lists.opensuse.org/archives/list/kubic@lists.opensuse.org/thread/23ODJTP4PLGC3HWFQNA2MD4ETFSNW4KV/
For those currently on Kubic, Kubernetes atop MicroOS is best addressed
with using k3s/RKE direct from Rancher. Whether we need
tooling/documentation to help with potential migrations is an open
question.
lkocman: This topic was raised also on the community meeting. Isn't
Kubic the only Kubernetes and CNCF certified distro that we have now?
Richard: depends on your definition of 'we' - CNCF certification is
specific to the Kubernetes that is part of Kubic. Rancher k3s supports
MicroOS and is itself CNCF certified, so 'we' will still have that.
lkocman: The question that popped up was how to get the k3s running on
Leap Micro. I did share the whitepaper for SLE Micro 5.1. Richard: this
should just work with 5.2+.

Objecting to the Leap Micro get.opensuse.org page overstating it's case
at the expense of other openSUSE Projects that address the same use
cases - https://github.com/openSUSE/get-o-o/issues/88

MicroOS (GNOME) Desktop has a fresh community effort to get out of
beta, possibly by writing a fresh notification tool for transactional-
updates instead of relying on PackageKit. Join the Telegram/Matrix
MicroOS Desktop channel to join the effort.

Podman 4.0.x now working perfectly

Working on various interesting MicroOS research tracks:
    - kiwi-less/container first VM image building Status: POC
    - nerdctl support in toolbox Status: Broken prototype
    - buildkit and its limit as a container builder
    - TW-to-MicroOS conversion
    - curl-minimal and making it default (like Fedora) Status:
Investigating
    - Re-arranging Factory so products like MicroOS can build with
different PrjConf than Tumbleweed
    - MicroOS Desktop using TIU instead of transactional-update (ie.
remove all individual rpm package management) (research not sure if
it's worth updating docs yet)
Please ping rbrown@suse.com if you are interested/have opinions on any
of the above, feedback/thoughts/existing knowledge is welcome.

## Max

Leap Micro
* Have a look repotred Leap Micro selfinstall has different behavior
compare to SLEM on openqa, it should boot iso instead of raw image for
the testing, bsc#1197877
* Removed beta flag

Leap 15.4
* Look into python-certbot bug, the culprit is: python-pyopenssl in
SLE15 SP4 has been updated to version 20, it's requiring  python-
cryptography > 3.2 however we had 2.8 in SLE, the minimal requirement
can not filled, this should affected many packages rely on pyopenssl,
bsc#1198851 (There is a SLE maintenance request for python-cert*, but
it's a major version bump)
Marcus does not recommend forking package in Leap as there are other
SLE python modules that will depend on it.
* Removed snapshot repo
* Preparing 15.4 RC build
Lubos will send an annoucement that RC will be delayed because of
incoming changes from SLE 15 SP4.
* Build fail stats in Leap 15.4: 20 build fails, 0 unresolvables
lkocman: I'll open individual bugs for remaining build failures.

Santiago mentioned that he'll have more free cycles for Leap/openQA
this week. I'll reach out to him regarding focus on the migration
scenarios.

## Guillaume - Arm

Tumbleweed:
    * Rolling again
    * Upcoming GCC 12 tested for aarch64:
https://build.opensuse.org/project/show/home:dirkmueller:branches:openSUSE:Factory:Staging:Gcc7

Leap 15.4:
    * aarch64:
        * Issue with Numpy/openBLAS fixed:
https://bugzilla.suse.com/show_bug.cgi?id=1198885
    * armv7:
        * Enlightenment package still fails in rpmlint check (missing
whitelist?): https://bugzilla.opensuse.org/show_bug.cgi?id=1194047
        lkocman: will reach out to simotek and Wolfgang
    * scc product class looks wrong (Marina/Marcus) (for all non-intel
arches). x86_64 has OPENSUSE-BETA while for the others the class is
SLES-ARM64-BETA, SLES-PPC-BETA, SLES-Z-BETA.
https://sd.suse.com/servicedesk/customer/portal/1/SD-82355 (Internal,
Ticket with SCC team, team lead is aware of the request). Request is
now resolved. (lkocman: Correction trello shows me that 2/4 items are
still pending). SCC team confirmed that this is done. I did check non-
intel arches and they seem to all use OPENSUSE-BETA.

Leap Micro 5.2:
    * SR to add Default-SelfInstall image for aarch64:
https://build.opensuse.org/request/show/974751
Lubos will open a JIRA for 5.3. I'll ask if it would be option for 5.2
as well.

lkocman to check if we could remove the firefox tests from the
42.X/15.0 upgrade test suite. It doesn't seem to happen outside of that
(same for TW).
lkocman will try to look into this

## Sarah - s390x

SUSE has shutdown 3 LPARs because of performance issues
Issue has been also reported to the CTO for ZSystems of IBM

Tumbleweed:
* Is rolling


openSUSE Leap Beta:
* no issues at the moment

* maven issues are existing -> discussions about upgrading the Java
version or how to fix it

lkocman: slightly related topic, should we perhaps re-consider
recommended memory amount in Release Notes? I think we still recommend
something like 2G minimal / 4G or 8G optimal.
* KDE for s390x adopted

## Doug
* TSP
* Solution seems to be found
* No update on status on when it can be implemented
* Community Meeting
* Discussion/workshop planned for community meetings on May 10 & 12 to
discuss successor of Leap
*
https://lists.opensuse.org/archives/list/project@lists.opensuse.org/thread/KVHDCGXU2EA2JAKCPL4XNHSCHINODTP2/
* oSC22
* Will cancel all talks on confrimed by May 6
*  Schedule mostly complete
* Ordering badge and signage
* Setting up venueless platform
* Slides need to be 16x9
* OSCAL oSC22
* Will start creating schedule
* Reached out to people to confirm their talks
* GSoC
* 4 proposals ranked for May 12 deadline

Installfest in CZ. CfP deadline was Monday midnight:
MicroOS
Leap and Leap Micro
D-Installer

talks were submitted

## Dirk

Not available

lkocman: Thanks for the framework laptop setup
We're not currently listed as framework laptop compatible distro
https://gist.github.com/cornfeedhobo/8f32430dc6c52b9a4776df91701b1d96

* switched obs-arm-11 worker to aio=io_uring away from aio=threads
which appears to reduce I/O cost (bsc#1197746), which caused issues on
x86_64. still chasing that down.
* did a full rebuild of openSUSE:Factory:ARM as Guillaume was away and
openqa was broken anyway :) did introduce more issues than it fixed it
appears
* Still to work rust 1.59 / ghc issues on armv6 and armv7: all have the
same root cause, use of SWP/SWPB instructions which is imperfectly
emulated by the aarch64 host kernel. works fine with armv6/v7 kernel.
* looked into gcc11 build failures

In backlog: https://code.opensuse.org/leap/features/issue/17

## Wolfgang (Package Hub), Scott Bahling

Not available

## Maintenance team (Marina or Marcus, Maurizio (m4u))

- Marcus: 15.4 is set up channel wise, updates will go in testing
occasionaly, if you need more ping me, no openqa setup yet
lkocman: could you please help me with cleanup of maintenance tasks in
https://progress.opensuse.org/projects/opensuse-leap-15-4/issues/gantt
lkocman: will contact Jan Stehlik. Santi (PO for the topic) mentioned
he'll work on it.
lkocman: messaged Jan
- Marcus: 15.3  openQA is ok again.

lkocman: (still pending) will open a release notes entry for a change
Security Advisory identification
TODO Marcus: could you give me example of old and new values?

- Marina and Maurizio: SLE-PackageHub overlaps
(https://github.com/openSUSE/openSUSE-release-process/issues/71) work
in progress following the initial list of overlapping packages
(https://progress.opensuse.org/issues/106610#note-3). More incidents
are under QA. Work is going on and under control (and tracked
internally as jsc#MSC-303).
Already released: (AH PERFECT!)
SUSE:Maintenance:22929:265929 (babl libbabl-0_1-0 typelib-1_0-Babl-0_1)
SUSE:Maintenance:23000:266006 (MozillaThunderbird enigmail)
SUSE:Maintenance:23009:266004 (freerdp freerdp-devel freerdp-proxy
libfreerdp2 libgsm) -> libgsm1 was missing in PH making freerdp not
installable
SUSE:Maintenance:22928:266007 (argyllcms csync libcsync0 libcsync-
plugin-sftp libcsync-plugin-smb)
SUSE:Maintenance:23015:267052 (gfbgraph-devel libgfbgraph-0_2-0
typelib-1_0-GFBGraph-0_2 librest gcr) -> librest, gcr and libgoa are
needed too for making gfbgraph installable
SUSE:Maintenance:23334:268316 (gutenprint gutenprint-devel)
SUSE:Maintenance:23486:268867 (hp-drive-guard, upower) --> needs
libupower-glib3
SUSE:Maintenance:23487:268897 (liba52-0 liba52-devel)
SUSE:Maintenance:23506:268899 (libdvdread4 libdvdread-devel)

Meet product security at the openSUSE Conference. There are about 3
talks on the maintenance and security topics. Come and say Hello!

## Adrian - OBS

Not present

feedback loop on mirrored submissions doesn't workstation. Lubos wills
end an email with an example to Marco and Adrian. (Sent last week)
Marco has reached out to me regarding the mirroring. He has example(s)
from SUSE:SLE-15:SP4:GA