All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees rbrown, DimStar, lkocman, dirk, wengel, DocB, ddemaio **THE MEETING ON 1ST of FEBRUARY WILL BE SKIPPED DUE TO HACKWEEK** https://hackweek.opensuse.org/ ## Leap Code submission deadline for SLES 15 SP5 Beta4 is today (Jan 25th) at 15:00. Leap Builds were stuck on https://bugzilla.opensuse.org/show_bug.cgi?id=1207395 and previously https://bugzilla.suse.com/show_bug.cgi?id=1206718 Due to this we were not able to produce a decent build that would give us good idea about quality. I'm bit worried that the actual beta release might be delayed. Cisco openh264 setup is finialized on our side https://news.opensuse.org/2023/01/24/opensuse-simplifies-codec-install/ ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 217 failed 16 unresolvable (last week: 21 / 24) https://tinyurl.com/ysy4nnnz * Staging:H Ruby 3.2 made some progress, only 3 more yast build fails (y2-config-management, y2-packager, y2-storage-ng) * Staging:L has a few failures collected: * boost: breaks libreoffice (incl. libetonyek) * gpg2: breaks gpgme * ant and xmlgraphics-common: breaking ant-antlr and xmlgraphics- fop * Staging:M test to also build python311 modules * Staging:N openssl-3-as-default testing: almost ready! All build fails have been fixed (or are in the queue) * Staging:O: preparation work to identify the minimal list of 'i586' builds to enable in openSUSE:Factory to allow wine/steam to build/install (currently 992 packages, and counting; big part of it is for rpmlint and such things) * Staging:Gcc7: early experiments to set GCC 13 as distro compiler * openSUSE:Factory has switched to a 4k RSA key * https://news.opensuse.org/2023/01/23/new-4096-bit-signing-key/ * osc build (with chroot) complains about missing keys (we did not do a full rebuild, osc gets the 4k project key, RPMs are signed with the 2k key. workaround: use osc build --vm-type=kvm (setup oscrc to have sufficient ram and disk size; I use 2GB of RAM and 10GB disk for most cases) i586 carve-out from Factory => Migration (manual so far) is possible for users. The first 'zypper dup' after changing the repo could include a bunch of 'package downgrades' as the rebuild counters are not synced across projects. Automatic migration of users (by means of openSUSE-release) will happen by end of January (giving the braves ones time to test and report issues before we mass-switch) ## Richard (MicroOS) Desktop-GNOME: The Road to Release: transactional-update-notifier is in Factory! WIP making it configured by default Working on a "mod-check" tool to report the following to users List of installed (1st party) packages, with comparisions to both an upstream pristine list and previous snapshots Automatically reset official packages to that upstream pristine list, or previous snapshots Any 3rd party packages and their origin Any known unsupported configurations/alterations and offer remedies if possible mod-check doesn't really 'check' as much as planned at the moment, instead going way further and effectively reinstalling MicroOS Desktop (GNOME) in place, making that new snapshot the new boot target. This will be awesome for any user who wants to 'freshen' up an otherwise heavily altered MicroOS Desktop, or when major Tumbleweed/MicroOS changes occur that otherwise cant be easily modeled in patterns. It also potentially could be a method of migrating non-transactional systems to a transactional one. Heavy testing/development underway..and possibly a rename if mod-check doesn't start actually -checking stuff soon. Bugs still WIP osinfo-db still doesn't recognise MicroOS as a seperate distribution - debates with upstream ongoing Working on YaST-less installation media with FDE by default ## Max Leap Micro 5.4 * The project has been bootstrapped * The missing bits ** Tweak Leap specific patches ** Enable pkglistgen lkocman: is on it Leap 15.5 * The fixed kernel for bsc#1206718 has got merged to SLE15-SP5(just yesterday) * Build stats in Backports(x86_64): 8 unresolvables, 59 fails(last week: 8 unresolvables, 54 fails) ## Guillaume - Arm Tumbleweed: * Blocked due to a broken binutils patch for armv7. Will be unblocked by https://build.opensuse.org/request/show/1060656 * WiFi works again on RPi3/4 (and other systems): https://bugzilla.suse.com/show_bug.cgi?id=1206697 * Pointer Authentication issue, seen in zypper has been fixed: https://bugzilla.suse.com/show_bug.cgi?id=1206684 * NVIDIA: tester with aarch64 server and NVIDIA card wanted - Proprietary drivers are now available for aarch64 (only G06): https://download.nvidia.com/opensuse/tumbleweed/ - New opengpu driver also available in OBS: https://build.opensuse.org/project/monitor/X11:Drivers:Video lkocman to check on who is the aarch64 + nvidia effort blocked on. I recall that there was a chosen point of contact. Leap: * 15.5 aarch64: covered by Leap section above * 15.5 armv7: no blocker ALP: * No aarch64 specific issues WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server ## Sarah - s390x Tumbleweed * kdump is fixed (with calibrate.conf by SLE because of blocked builds for s390x) -> Tumbleweed is rolling again Leap: * tests are failing because of timeout (my next ToDo) * qore updated Question: What should we do with packages buildable only on s390x and not on x86? Example: https://build.opensuse.org/package/show/home:AdaLovelace:branches:server:dat... lkocman: I'd start with a bug against the package, then let's agree on next steps with maintainer. Please use bug against openSUSE.org choose 3rd party package. Can be used for anything that is from OBS. ## Doug * articles * 4096 bit RSA signing key published (thx to mmeissner) * openh264 article published * openSUSE Community booth at CLT2023 lkocman: Do we have some sort of list/calendar with events where openSUSE is usually present? * GSoC * Updating GSoC wiki pages * New projects being added * Additional admins added * Application nearly complete. * Need to complete "How many potential mentors have agreed to mentor this year?" * Workshop to finalize projects & application scheduled for on Feb. 7 (deadline at 18:00 UTC) * oSC23 * Waiting on contract signature (in legal review) * 13 registered, 9 submissions * FOSDEM * Booth in Building/Hall H (we have traditionally be in Building/Hall K) * Bus has 29 sign ups * Passangers to be briefed on bus departure location * Contact ddemaio if you're in Nuremberg and want to take the bus to FOSDEM. Space may be limited. * FLOSS Weekly * Test call on 26.01 * Podcast scheduled for Feb. 8 ## Dirk * Initial x86_64-v3 glibc hwcaps package has landed in Factory (libxmlb - visible in GNOME repositories openqa runs) * Determine list of extra shared libraries to enable (likely all compression and media decoding libraries (libpng, jpeg and so on) * Helped with OpenSSL 3.x switch and Python 3.11 modules enablement * Starting to draft https://en.opensuse.org/openSUSE:OpenSUSE_Tumbleweed_Maintainer_Policy (draft, will be announced on the mailing list when ~ ready) DimStar: ~150 python modules are currently failing with 3.11, a lot of fallout is expected. (enabling 3.11 will roughly double those numbers judging from the current devel project state) * Continued work on SUSE:ALP:RISCV * force published 15.4 and 15.5 for armv7 builds, openqa builds have been triggered it appears it is set to do post-release testing? * qemu/libseccomp 15.5 failure still in investigation Biggest speedup can be observed by switching zlib to zlib-ng, so looked into fixing the build failures caused by switching to zlibo-ng- compat ## Wolfgang (Package Hub), Scott Bahling Discussion about moving ipxe package to SLE and release ipxe-bootimgs for x86_64 and aarch64 to HPC-Module (SLE-15-SP5). Needs to be accepted by Michal Svec. If that is the case ipxe will be removed from openSUSE:Backports:SLE-15-SP5 and subpackage ipxe-bootimgs for ppc64le and s390x will be released via subpackages repository. Need to sync with Max regarding the package list for subpackages repository for SLE-15-SP5 when he is back from vacation. 15 SP5 Package HUB channel is set up. Stefan did initial testing and looks good. Some packages are still missing, this is on agenda for today and next week. The workshop regarding Package HUB equivalent for ALP Lubos will schedule a call with wolfgang and Scott to ensure that they're in loop for the High Level requirements document. https://en.opensuse.org/openSUSE:ALP/Workgroups/Community/Workshops/Consumig... Package Hub for SLE-15-SP5 product definition added and SCC is currently picking it up so it will be ready for testing with the beta of SLE-15-SP5 ## Maintenance team (Marcus or Maurizio (m4u)) Fixed a long standing issue with gnome-music that was blocking openqa for a long time. 15.4 is working 5.3 is working 15.5 setup TBD (Mid-to-End February would be preferred). Nothing worrysome, preannoucement for 15.3 EOL was sent to mainling list End of December 2022. There were three chromium updates in single week. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Configuration setup problem for Maintenance of Leap 15.4 maintenance updates / openQA Marcus regarding Leap 15.4 Image respin - package set will change, we do need to refresh the packagelist * Lubos to talk to Jan Stehlik, we can't put all on Marcuses shoulder. https://etherpad.opensuse.org/p/ReleaseEngineering-20221110-maintenance-disc... Confirmation that QA/QA-maint team will oversee the setup (issues) Lubos: I was asked to provide requirements for the QA team. Mostly for the GA/current release but also for the update. Lubos will make wiki with requirements (something like maintenance plan perhaps). Marcus will review it. * Leap Micro 5.3 maint setup done ffmpeg - (still unsolved) possible file conflict on the next update, no idea how to avoid vendor switching at the moment. Removing the patch on the openSUSE side (that might contain security fixes) or releasing update on the packman side could fix the issue. Lubos to give Marcus some working contact for the team. ## Adrian - OBS After changing the signing key of Factory without rebuilding the distribution "osc build" using chroot builds run into the problem that gpg verification of the rpm's failed. To tell osc to use also the old gpg key we introduced a temporary openSUSE:Tumbleweed:OldKey project. We will remove this project again after full rebuild of Factory. This should work for all arches. Users get additional question if they want to trust the additional project once. This solves the issue for people who build against openSUSE:Tumbleweed/standard or openSUSE:Factory/snapshot. It does not solve it when building against openSUSE:Factory/standard directly (not the default in OBS). Dirk: Recommended solution is to use the kvm build (add `build-type = kvm` to your ~/.oscrc) Adrian: Agreed that we should aim for switching the osc default here (also wanted by security team). Still some issues to solve to make it more convinient. ## Project maintainer work flow Status * Base policy to be developed Background on topic found at https://etherpad.opensuse.org/p/ReleaseEngineering-20221221 For me it comes down to a matter of communication. A note like 'thx for your SR, I think we should adapt the following ' or ' we are reviewing your SR, and quite stuck with work...' could already change a lot. Silence for more then 4 week is clearly a perfect way to annoy contributors. And the question should be asked if those unresponsive maintainers are still willing to maintain their projects. Or they may even not be active anymore, another discussion we are having