openSUSE Release Engineering meeting 02.08.2023

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees DimStar,Guillaume_G, Eugenio, Sarah, RBrown, Lubos, Max Special Guest: Eugenio regarding xcdchk replacement ## Eugenio (xcdchk replacement in SLE) xcdchk is a tool that looks at the RPMs in built installation medias in order to gather infos and differences between two (or more) builds. Although it has been decided to keep using it for SLE15-SP6, a question arose on whether to switch to something like openSUSE's factory- package-news in future. So I would like to ask about known limitations (like support for retrieving differences between past builds) and if you would be open to contributions from the SLE side to perhaps make the output more in line with the current xcdchk. Might be a fun hackweek project :) dimstar: we could add second parameter to diff against different BASE version and a target should be easy. lkocman: side-note dmach wrote a very nice "compose-diff" tool working based on productmd/json metadata. OBS team has obsgendiff. Somebody already has to scan builds and upload data to repology, I think that working with single json/yaml rather, than keep on scanning the tree would make it easeier for everyone. Dimstar: I think that the current script takes the metadata from DVD. Dirk: I don't see that current xcdchk does not scan trees. lkocman: Perhaps other extensions have media too. DimStar: obsgendiff was disabled as it delayed builds by at least 30minutes on all arches. Max: I believe that it was in the end enabled only on Leap. Dirk: xcdchk does not mask email addresses while factory-news does. Perhaps we need an option for that too. ## Leap The next hackweek will take place in the week of 6th November. All reported feature requests against 15.6 were processed. https://code.opensuse.org/leap/features Filed several tasks regarding remaining setup of 15.6 (for QA, IT, autobuild, etc). So we give team enough heads up to e.g. plan for the openqa/maint setup around Beta timeframe, especially with all the work on ALP. openSUSE-repos https://news.opensuse.org/2023/07/31/try-out-cdn-with-opensuse-repos/ was published Big thanks to Michael Andres and Dirk for the review I'd like to integrate nvidia repo with it, but I'm not sure if there is an good way to handle transition correctly. But then nobody so far complained about manual revert for the old-style repos https://github.com/openSUSE/openSUSE-repos/issues/28 Aside from that Dirk and Andrii suggested to go http by default. There was some pushback from Darix etc. Dirk: It is an intermediate problem. There is only a very few mirrors left which are http-only. There are some mirrors that are ipv6 only. Dirk the end goal is that we should switch to https. Dirk: The adoption went quite up thanks to the effort (currently ~ 10k hits/minute) LeapMicro 5.5 built setup basically done, everything is building. changes were synced from SLEM5.5 Alpha2 A little change is needed to use the 15 SP5 install-images without further changes https://github.com/openSUSE/installation-images/pull/651 Need to work on the QA setup and later get-o-o ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 67 failed 0 unresolvable (last week: 87 failed, 5 unresolvable) https://tinyurl.com/ysy4nnnz * kernel 6.4.6 (with ZenBleed fix) was part of snapshot 0727 * KDE Plasma 5.27.7 in Staging * libxml2 2.11.x blocked, as it breaks things like perl-XML-LibXML, * fmt 10 blocked, as it breaks mariadb boo#1213219, ceph boo#1213217 Max: Trouble with the new product-builder update. Adrian announced change, however, there were still some issues as expected. Bug reports were opened https://bugzilla.opensuse.org/show_bug.cgi?id=1213893. ppc64 has issue with qemu/aggregate. Check was disabled in product- builder everywhere so we can get a new snapshot. duplicate packagelist: https://paste.opensuse.org/pastes/406636eb2b3a particular issue with noarch binary: THE package in Factory:NonFree has different noarch version binary package in i586/x86_64 buil Dimstar: the situation with qemu got a lot more complex. We do import binaries etc. Dirk: I would really not recommend to disable it, it will cause issues with mirrors. Is this issue only with TW or Leap too? Max: it's only on TW. Dirk: Is chromium the only thing that we need to fix before re-enabling the flag? Dirk: the issue is only with noarch packages that have the same release number. Max: if you disable the release check it will ignore only the lower version ones. ## Richard (Aeon) Richard's been needing to focus on SUSE ALP topics more than Aeon Really wants to get Aeon's own media out soon, likely to throw it into openSUSE:Factory as openSUSE:ALP will need more time Researching using systemd-homed which would likely be ideal for Aeon, but gnome-initial-setup will need some patches CSL Concept as documented here is likely to be incorporated going forward https://en.opensuse.org/Portal:Aeon/DevelopmentThoughts Discussions with possioble new Aeon security maintainer to basically augment the SUSE Security team so Aeon can diverge in limited areas (eg more Desktop-friendly SELinux booleans) lkocman: we have some features for home-only encryption. systemd-homed would be a big help in that direction. https://code.opensuse.org/leap/features/issue/113 ## Richard (ALP Architecture) ALP-Leap-Replacement meeting minutes - https://etherpad.opensuse.org/p/weeklymeeting20230725 Planning on releasing the poll discussed last week shortly ## Max * Re-enabled all archs build, but s390x build power is quite low * Merged more package update from 15.5:Update and Backports:SLE-15- SP5:Update I believe 15-SP6 is still not open for SRs. Or at least it was mentioned on Monday's standup. ## Guillaume - Arm Tumbleweed: * Rolling * gcc13 bug leading to build failure of highway (and maybe more) - A fix is available in master branch of GCC and need to be backported to GCC13 - https://bugzilla.opensuse.org/show_bug.cgi?id=1213647 * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). It has been sent upstream for review, so it is progressing - https://bugzilla.suse.com/show_bug.cgi?id=1211297 Leap: * 15.5 aarch64: kernel oops seen on openQA aarch64 workers - https://bugzilla.opensuse.org/show_bug.cgi?id=1213620 * 15.5: port for armv7: containers are currently not building/created. Dirk mentioned that driver in 15.4 was the k3s team. ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server Note: I will miss all next meetings in August. See you in September. ## Sarah - s390x Tumbleweed * running Leap: * running Enablement topics: * MPI is enabled for LLVM (IBMer has forgotten his enablement stuff on the PC) * package calc is running on s390x * package adios2 has required an additional build dependency for libffi-devel * waitingSubmissisions with fixes for gtkd and gnu-cobol: https://build.opensuse.org/request/show/1098832 (SR edited and waiting for approval again) https://bugzilla.opensuse.org/show_bug.cgi?id=1209438 Information about builds: * less build nodes available because of data center migration -> longer waiting time for successful builds ## Doug Not available * Sponsorship of LinuxFest NorthWest from previous pre-covid sponsorship carries forward this year * Contact ddemaio if plan to attend or want to run a booth * https://linuxfestnorthwest.org/ * openSUSE Conference 2023 videos complete * Thank you c3voc & openSUSE Video Team * Scheduling video posts on social media * Project Clarity * Establishing a clear understanding of projects within the openSUSE Project umbrella and how new project will be identified, verified to be part of the openSUSE Project * Board will be taking this on (Rancher and Uyuni/SUSE Manager) was discussed in the board meeting earlier this week) * openSUSE.Asia Summit * Registrations 4, Submissions 5 * Talks can be onsite or virtual (recorded). * Deadline is August 20. * Submit your proposal at https://events.opensuse.org/ * openALT / Fall 2023 (invoice based) sponsorship approved by Anicka (10k CZK) - Dirk reminded us about OSCC still having some budget available * Trying to troubleshoot one TSP payments * Community meeting * Worked on project clarity & enhancing info on https://en.opensuse.org/openSUSE:How_to_contribute_to_Factory * EL Collaboration Meeting changed to once a month. Next is August 31 * GSoC * Mid-term evaluations complete with 100% Friday, July 14, by 18:00 UTC * openSUSE Boxes * Two companies are thinking about restarting with Start-Up Booklet * Stakeholders informed * Need to schedule followup meeting w/netitwork Static * Still need future storage location * AI topics (static) * Scraping of info & how it might affect costs is being dicussed by board * Dirk: There is a OSCC meetup today touching the topic * Board looking into using AI to help with possible moderation *** ddemaio will be unavailable for this meeting until the August 9 meeting starting next week ## Dirk Further troubleshooting and tuning of CDN configuration. Currently enabled in NA, SA and Africa. ## Wolfgang (Package Hub), Scott Bahling Not available Project openSUSE:Backpors:SLE-15-SP6 created in OBS (currently build disabled because of AC issues in SRV1, more build workers will be added latest tomorrow) Creating release package for SP6 (SUSE:Backports:SLE-15-SP6) today in IBS ## Maintenance team (Marcus or Maurizio (m4u)) Not available No big news Firefox needs updates of dependencies before it can be updated to the current version (Security fixes) libzypp update in 15.5 was fixed by releasing missing dependency. libzypp issue that can be properly addressed only with respin of DVD. See section above for more details. openQA is OK currently. (snapper was fixed) Some 15.5 updates from between freeze and GA need to be released, WIP for Marcus Key rotation: Migration with changed 4k key. Current autoimport solution is not ideal. Marcus will work on update of the opensuse-build-key https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS OBS build power is back to normal after fixing misconfiguration which kept workers busy. Servers for OBS is moving to new datacenters until the end of the month of July AC problems in Nüremberg with openQA servers ## Open Floor
participants (1)
-
Lubos Kocman