openSUSE Release Engineering meeting 04.05.2022
All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees guillaumeg, DimStar, rbrown, lkocman, mpiala, ddemaio, maurizio (m4u).maxlin, Sarah ## Internal SUSE IT Supported distribution Guests: Martin Piala, Vojtech Pavlik Idea: openSUSE Leap as supported system by SUSE IT! Vadim G. is looking for a help to kickstart the effort. We're thinking of starting a hackweek with a Leap 15.4 spin with some preinstalled tools for SUSE environment. https://hackweek.opensuse.org/21/projects/opensuse-build-supported-by-suse-i... Our feature tracker for any issue references. https://code.opensuse.org/leap/features/issue/77 Next steps collect requirements for Minimal Viable Product I believe Vojtech could help us there. How does Rancher product portfolio fit in? Datto is using gnome-initial-setup for post-install tweaks. https://github.com/endlessm/gnome-initial-setup/blob/master/HACKING We could start there as well. However, they're already looking for some futher management tools. I believe that we do not need any 3rd party tools. Perhaps SUMA could help with post-installation management. Martin: currently supported systems by IT are Windows 10 and MacOS, we would like to change this Martin: we'd like to have pre-installed tools required for daily work. slack, teams. We have company portals for Windows10 and Mac and some of the apps can be already preinstalled for the image. Martin: we do not yet have experience for responsibility of building Linux apps and we need your help. Ideally it should be done by the end of the quarter. End of July It's not decided yet what should we use. Whether we need a script post- install. Richard: I do have a couple of questions: Which HW are we talking about? * How often will be the recommended hardware changing? Martin: We have some predefined laptops specific. 2 hardware specs (standard, power). New ones are Lenovo, we're also rotating the older Dells. Martin will discuss this with team. In the next HW rotation we should take the support of the chosen OS into consideration. * Would the best option be Leap based? And perhaps risk some of the missing hardware support? * Or should we consider something Tumbleweed based? Perhaps you will end up with something like MicroOS * Desktop. Teams, Slack would be then consumed from Flatpaks. lkocman: I recommend to consider two approaches: provide root password to the user or not. For less technical users it would be preferred if SUSE it would do most of the changes. Martin: For IT are also preferred these two options, one with admin access (here the user is responsible for the setup), and another with limited permissions, where IT is responsible for maintenance + the laptop must be enrolled (most probably in VMware Workspace One, currently under research). ## Leap Leap Micro 5.2 is RC! We've also progressed on release-notes-leap-micro (Thanks cboltz and Lukas) https://doc.opensuse.org/release-notes/x86_64/openSUSE/LeapMicro/5.2/ Rework of LeapMicro get-o-o layout community worked on overview for Leap Micro https://etherpad.opensuse.org/p/weeklymeeting20220505#L51 We should also consider single page layout MicroOS and backport overview changes as well https://github.com/openSUSE/get-o-o/pull/87 A lot of changes from SLE 15 SP4 post-RC. Removing snapshot at this point in time was not so good choice in the end. Some more changes will be taken in today, tomorrow. Mass rebuild is planned in next few days (Friday/Saturday). Maint snapshot for SLE 15 SP4 on Sunday. We need to be able to finish the RC build, that's not possible now. Leap Desktop/Workstation workshop is next week! 50+ people have signed up for workshop https://www.reddit.com/r/openSUSE/comments/udr5ly/desktop_workshop_for_next_... - syncup with Scott and Yi Fan prior the acutal workshop Looking for drivers who could help us "kickstart the initial workshop". Long story We need some people who already know what to do (how lucid works, create some initial topics) to inspire others. Interesting last minute feature for laptop customizations. (Big thanks Dirk) I'll see what would be easily adoptable. SLED is interested as well. https://code.opensuse.org/leap/features/issue/75 ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 108 failed, 10 unresolvable (last week: 123/11) https://tinyurl.com/ysy4nnnz * GNOME 42.1 shipped in snapshot 0501 (snapshot 0429 and 0430 were blocked due to dracut) * KDE Plasma 5.24.5 staged - ready for either 0504 or 0505 * Meson 0.62 is staged - another round of 'syntax validation getting stricter' (not too many issues seen though) * GCC12 as default compiler still staged, results are looking very good (Staging QA all passed, waiting for the final go) lkocman: I hope that Alp will adopt to the new default(s) as well. Mentioned the llvm situation in Leap 15.X GPG Key to sign packages/repos is planned to be updated to be a 4096/RSA key (implementation schedule pending) Tracker bug : https://bugzilla.suse.com/show_bug.cgi?id=1199184 OBS seems to have some hard time finding workers for ceph and kernel builds: very frequently, staging projects are blocked by waiting for the 4 same packages still being scheduled (ceph, kernel-default, kernel-vanilla, kernel-debug) (constraints limit to 18 (ceph) resp 24 (kernels) workers) ## Richard (Kubic/MicroOS) Started Discussion with the Kubic community about winding down the Kubic project and focusing more attention on MicroOS (and MicroOS Desktop) - https://lists.opensuse.org/archives/list/kubic@lists.opensuse.org/thread/23O... For those currently on Kubic, Kubernetes atop MicroOS is best addressed with using k3s/RKE direct from Rancher. Whether we need tooling/documentation to help with potential migrations is an open question. lkocman: This topic was raised also on the community meeting. Isn't Kubic the only Kubernetes and CNCF certified distro that we have now? Richard: depends on your definition of 'we' - CNCF certification is specific to the Kubernetes that is part of Kubic. Rancher k3s supports MicroOS and is itself CNCF certified, so 'we' will still have that. lkocman: The question that popped up was how to get the k3s running on Leap Micro. I did share the whitepaper for SLE Micro 5.1. Richard: this should just work with 5.2+. Objecting to the Leap Micro get.opensuse.org page overstating it's case at the expense of other openSUSE Projects that address the same use cases - https://github.com/openSUSE/get-o-o/issues/88 MicroOS (GNOME) Desktop has a fresh community effort to get out of beta, possibly by writing a fresh notification tool for transactional- updates instead of relying on PackageKit. Join the Telegram/Matrix MicroOS Desktop channel to join the effort. Podman 4.0.x now working perfectly Working on various interesting MicroOS research tracks: - kiwi-less/container first VM image building Status: POC - nerdctl support in toolbox Status: Broken prototype - buildkit and its limit as a container builder - TW-to-MicroOS conversion - curl-minimal and making it default (like Fedora) Status: Investigating - Re-arranging Factory so products like MicroOS can build with different PrjConf than Tumbleweed - MicroOS Desktop using TIU instead of transactional-update (ie. remove all individual rpm package management) (research not sure if it's worth updating docs yet) Please ping rbrown@suse.com if you are interested/have opinions on any of the above, feedback/thoughts/existing knowledge is welcome. ## Max Leap Micro * Have a look repotred Leap Micro selfinstall has different behavior compare to SLEM on openqa, it should boot iso instead of raw image for the testing, bsc#1197877 * Removed beta flag Leap 15.4 * Look into python-certbot bug, the culprit is: python-pyopenssl in SLE15 SP4 has been updated to version 20, it's requiring python- cryptography > 3.2 however we had 2.8 in SLE, the minimal requirement can not filled, this should affected many packages rely on pyopenssl, bsc#1198851 (There is a SLE maintenance request for python-cert*, but it's a major version bump) Marcus does not recommend forking package in Leap as there are other SLE python modules that will depend on it. * Removed snapshot repo * Preparing 15.4 RC build Lubos will send an annoucement that RC will be delayed because of incoming changes from SLE 15 SP4. * Build fail stats in Leap 15.4: 20 build fails, 0 unresolvables lkocman: I'll open individual bugs for remaining build failures. Santiago mentioned that he'll have more free cycles for Leap/openQA this week. I'll reach out to him regarding focus on the migration scenarios. ## Guillaume - Arm Tumbleweed: * Rolling again * Upcoming GCC 12 tested for aarch64: https://build.opensuse.org/project/show/home:dirkmueller:branches:openSUSE:F... Leap 15.4: * aarch64: * Issue with Numpy/openBLAS fixed: https://bugzilla.suse.com/show_bug.cgi?id=1198885 * armv7: * Enlightenment package still fails in rpmlint check (missing whitelist?): https://bugzilla.opensuse.org/show_bug.cgi?id=1194047 lkocman: will reach out to simotek and Wolfgang * scc product class looks wrong (Marina/Marcus) (for all non-intel arches). x86_64 has OPENSUSE-BETA while for the others the class is SLES-ARM64-BETA, SLES-PPC-BETA, SLES-Z-BETA. https://sd.suse.com/servicedesk/customer/portal/1/SD-82355 (Internal, Ticket with SCC team, team lead is aware of the request). Request is now resolved. (lkocman: Correction trello shows me that 2/4 items are still pending). SCC team confirmed that this is done. I did check non- intel arches and they seem to all use OPENSUSE-BETA. Leap Micro 5.2: * SR to add Default-SelfInstall image for aarch64: https://build.opensuse.org/request/show/974751 Lubos will open a JIRA for 5.3. I'll ask if it would be option for 5.2 as well. lkocman to check if we could remove the firefox tests from the 42.X/15.0 upgrade test suite. It doesn't seem to happen outside of that (same for TW). lkocman will try to look into this ## Sarah - s390x SUSE has shutdown 3 LPARs because of performance issues Issue has been also reported to the CTO for ZSystems of IBM Tumbleweed: * Is rolling openSUSE Leap Beta: * no issues at the moment * maven issues are existing -> discussions about upgrading the Java version or how to fix it lkocman: slightly related topic, should we perhaps re-consider recommended memory amount in Release Notes? I think we still recommend something like 2G minimal / 4G or 8G optimal. * KDE for s390x adopted ## Doug * TSP * Solution seems to be found * No update on status on when it can be implemented * Community Meeting * Discussion/workshop planned for community meetings on May 10 & 12 to discuss successor of Leap * https://lists.opensuse.org/archives/list/project@lists.opensuse.org/thread/K... * oSC22 * Will cancel all talks on confrimed by May 6 * Schedule mostly complete * Ordering badge and signage * Setting up venueless platform * Slides need to be 16x9 * OSCAL oSC22 * Will start creating schedule * Reached out to people to confirm their talks * GSoC * 4 proposals ranked for May 12 deadline Installfest in CZ. CfP deadline was Monday midnight: MicroOS Leap and Leap Micro D-Installer talks were submitted ## Dirk Not available lkocman: Thanks for the framework laptop setup We're not currently listed as framework laptop compatible distro https://gist.github.com/cornfeedhobo/8f32430dc6c52b9a4776df91701b1d96 * switched obs-arm-11 worker to aio=io_uring away from aio=threads which appears to reduce I/O cost (bsc#1197746), which caused issues on x86_64. still chasing that down. * did a full rebuild of openSUSE:Factory:ARM as Guillaume was away and openqa was broken anyway :) did introduce more issues than it fixed it appears * Still to work rust 1.59 / ghc issues on armv6 and armv7: all have the same root cause, use of SWP/SWPB instructions which is imperfectly emulated by the aarch64 host kernel. works fine with armv6/v7 kernel. * looked into gcc11 build failures In backlog: https://code.opensuse.org/leap/features/issue/17 ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marina or Marcus, Maurizio (m4u)) - Marcus: 15.4 is set up channel wise, updates will go in testing occasionaly, if you need more ping me, no openqa setup yet lkocman: could you please help me with cleanup of maintenance tasks in https://progress.opensuse.org/projects/opensuse-leap-15-4/issues/gantt lkocman: will contact Jan Stehlik. Santi (PO for the topic) mentioned he'll work on it. lkocman: messaged Jan - Marcus: 15.3 openQA is ok again. lkocman: (still pending) will open a release notes entry for a change Security Advisory identification TODO Marcus: could you give me example of old and new values? - Marina and Maurizio: SLE-PackageHub overlaps (https://github.com/openSUSE/openSUSE-release-process/issues/71) work in progress following the initial list of overlapping packages (https://progress.opensuse.org/issues/106610#note-3). More incidents are under QA. Work is going on and under control (and tracked internally as jsc#MSC-303). Already released: (AH PERFECT!) SUSE:Maintenance:22929:265929 (babl libbabl-0_1-0 typelib-1_0-Babl-0_1) SUSE:Maintenance:23000:266006 (MozillaThunderbird enigmail) SUSE:Maintenance:23009:266004 (freerdp freerdp-devel freerdp-proxy libfreerdp2 libgsm) -> libgsm1 was missing in PH making freerdp not installable SUSE:Maintenance:22928:266007 (argyllcms csync libcsync0 libcsync- plugin-sftp libcsync-plugin-smb) SUSE:Maintenance:23015:267052 (gfbgraph-devel libgfbgraph-0_2-0 typelib-1_0-GFBGraph-0_2 librest gcr) -> librest, gcr and libgoa are needed too for making gfbgraph installable SUSE:Maintenance:23334:268316 (gutenprint gutenprint-devel) SUSE:Maintenance:23486:268867 (hp-drive-guard, upower) --> needs libupower-glib3 SUSE:Maintenance:23487:268897 (liba52-0 liba52-devel) SUSE:Maintenance:23506:268899 (libdvdread4 libdvdread-devel) Meet product security at the openSUSE Conference. There are about 3 talks on the maintenance and security topics. Come and say Hello! ## Adrian - OBS Not present feedback loop on mirrored submissions doesn't workstation. Lubos wills end an email with an example to Marco and Adrian. (Sent last week) Marco has reached out to me regarding the mirroring. He has example(s) from SUSE:SLE-15:SP4:GA
Hey! Did read up on this now, has had too much to do earlier this week, and started working a bit on the Swedish Translations of the Leap 15.4 Release notes, and @Johan Dot <jonte1@gmail.com> promised to continue to work on them later today :) On Thu, May 5, 2022 at 3:56 PM Lubos Kocman <lubos.kocman@suse.com> wrote:
All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting
## Attendees guillaumeg, DimStar, rbrown, lkocman, mpiala, ddemaio, maurizio (m4u).maxlin, Sarah
## Internal SUSE IT Supported distribution
Guests: Martin Piala, Vojtech Pavlik
Idea: openSUSE Leap as supported system by SUSE IT! Vadim G. is looking for a help to kickstart the effort. We're thinking of starting a hackweek with a Leap 15.4 spin with some preinstalled tools for SUSE environment.
https://hackweek.opensuse.org/21/projects/opensuse-build-supported-by-suse-i...
Our feature tracker for any issue references. https://code.opensuse.org/leap/features/issue/77
Next steps collect requirements for Minimal Viable Product I believe Vojtech could help us there.
How does Rancher product portfolio fit in?
Datto is using gnome-initial-setup for post-install tweaks. https://github.com/endlessm/gnome-initial-setup/blob/master/HACKING We could start there as well. However, they're already looking for some futher management tools. I believe that we do not need any 3rd party tools. Perhaps SUMA could help with post-installation management.
Martin: currently supported systems by IT are Windows 10 and MacOS, we would like to change this Martin: we'd like to have pre-installed tools required for daily work. slack, teams. We have company portals for Windows10 and Mac and some of the apps can be already preinstalled for the image. Martin: we do not yet have experience for responsibility of building Linux apps and we need your help. Ideally it should be done by the end of the quarter. End of July
It's not decided yet what should we use. Whether we need a script post- install.
Richard: I do have a couple of questions:
Which HW are we talking about? * How often will be the recommended hardware changing? Martin: We have some predefined laptops specific. 2 hardware specs (standard, power). New ones are Lenovo, we're also rotating the older Dells. Martin will discuss this with team. In the next HW rotation we should take the support of the chosen OS into consideration. * Would the best option be Leap based? And perhaps risk some of the missing hardware support? * Or should we consider something Tumbleweed based? Perhaps you will end up with something like MicroOS * Desktop. Teams, Slack would be then consumed from Flatpaks.
lkocman: I recommend to consider two approaches: provide root password to the user or not. For less technical users it would be preferred if SUSE it would do most of the changes. Martin: For IT are also preferred these two options, one with admin access (here the user is responsible for the setup), and another with limited permissions, where IT is responsible for maintenance + the laptop must be enrolled (most probably in VMware Workspace One, currently under research).
## Leap
Leap Micro 5.2 is RC!
We've also progressed on release-notes-leap-micro (Thanks cboltz and Lukas) https://doc.opensuse.org/release-notes/x86_64/openSUSE/LeapMicro/5.2/
Rework of LeapMicro get-o-o layout community worked on overview for Leap Micro https://etherpad.opensuse.org/p/weeklymeeting20220505#L51 We should also consider single page layout MicroOS and backport overview changes as well https://github.com/openSUSE/get-o-o/pull/87
A lot of changes from SLE 15 SP4 post-RC. Removing snapshot at this point in time was not so good choice in the end. Some more changes will be taken in today, tomorrow. Mass rebuild is planned in next few days (Friday/Saturday). Maint snapshot for SLE 15 SP4 on Sunday. We need to be able to finish the RC build, that's not possible now.
Leap Desktop/Workstation workshop is next week! 50+ people have signed up for workshop
https://www.reddit.com/r/openSUSE/comments/udr5ly/desktop_workshop_for_next_... - syncup with Scott and Yi Fan prior the acutal workshop Looking for drivers who could help us "kickstart the initial workshop". Long story We need some people who already know what to do (how lucid works, create some initial topics) to inspire others.
Interesting last minute feature for laptop customizations. (Big thanks Dirk) I'll see what would be easily adoptable. SLED is interested as well. https://code.opensuse.org/leap/features/issue/75
## openSUSE Tumbleweed
openSUSE:Factory build fail stats: 108 failed, 10 unresolvable (last week: 123/11) https://tinyurl.com/ysy4nnnz
* GNOME 42.1 shipped in snapshot 0501 (snapshot 0429 and 0430 were blocked due to dracut) * KDE Plasma 5.24.5 staged - ready for either 0504 or 0505 * Meson 0.62 is staged - another round of 'syntax validation getting stricter' (not too many issues seen though) * GCC12 as default compiler still staged, results are looking very good (Staging QA all passed, waiting for the final go) lkocman: I hope that Alp will adopt to the new default(s) as well. Mentioned the llvm situation in Leap 15.X
GPG Key to sign packages/repos is planned to be updated to be a 4096/RSA key (implementation schedule pending) Tracker bug : https://bugzilla.suse.com/show_bug.cgi?id=1199184
OBS seems to have some hard time finding workers for ceph and kernel builds: very frequently, staging projects are blocked by waiting for the 4 same packages still being scheduled (ceph, kernel-default, kernel-vanilla, kernel-debug) (constraints limit to 18 (ceph) resp 24 (kernels) workers)
## Richard (Kubic/MicroOS)
Started Discussion with the Kubic community about winding down the Kubic project and focusing more attention on MicroOS (and MicroOS Desktop) -
https://lists.opensuse.org/archives/list/kubic@lists.opensuse.org/thread/23O... For those currently on Kubic, Kubernetes atop MicroOS is best addressed with using k3s/RKE direct from Rancher. Whether we need tooling/documentation to help with potential migrations is an open question. lkocman: This topic was raised also on the community meeting. Isn't Kubic the only Kubernetes and CNCF certified distro that we have now? Richard: depends on your definition of 'we' - CNCF certification is specific to the Kubernetes that is part of Kubic. Rancher k3s supports MicroOS and is itself CNCF certified, so 'we' will still have that. lkocman: The question that popped up was how to get the k3s running on Leap Micro. I did share the whitepaper for SLE Micro 5.1. Richard: this should just work with 5.2+.
Objecting to the Leap Micro get.opensuse.org page overstating it's case at the expense of other openSUSE Projects that address the same use cases - https://github.com/openSUSE/get-o-o/issues/88
MicroOS (GNOME) Desktop has a fresh community effort to get out of beta, possibly by writing a fresh notification tool for transactional- updates instead of relying on PackageKit. Join the Telegram/Matrix MicroOS Desktop channel to join the effort.
Podman 4.0.x now working perfectly
Working on various interesting MicroOS research tracks: - kiwi-less/container first VM image building Status: POC - nerdctl support in toolbox Status: Broken prototype - buildkit and its limit as a container builder - TW-to-MicroOS conversion - curl-minimal and making it default (like Fedora) Status: Investigating - Re-arranging Factory so products like MicroOS can build with different PrjConf than Tumbleweed - MicroOS Desktop using TIU instead of transactional-update (ie. remove all individual rpm package management) (research not sure if it's worth updating docs yet) Please ping rbrown@suse.com if you are interested/have opinions on any of the above, feedback/thoughts/existing knowledge is welcome.
## Max
Leap Micro * Have a look repotred Leap Micro selfinstall has different behavior compare to SLEM on openqa, it should boot iso instead of raw image for the testing, bsc#1197877 * Removed beta flag
Leap 15.4 * Look into python-certbot bug, the culprit is: python-pyopenssl in SLE15 SP4 has been updated to version 20, it's requiring python- cryptography > 3.2 however we had 2.8 in SLE, the minimal requirement can not filled, this should affected many packages rely on pyopenssl, bsc#1198851 (There is a SLE maintenance request for python-cert*, but it's a major version bump) Marcus does not recommend forking package in Leap as there are other SLE python modules that will depend on it. * Removed snapshot repo * Preparing 15.4 RC build Lubos will send an annoucement that RC will be delayed because of incoming changes from SLE 15 SP4. * Build fail stats in Leap 15.4: 20 build fails, 0 unresolvables lkocman: I'll open individual bugs for remaining build failures.
Santiago mentioned that he'll have more free cycles for Leap/openQA this week. I'll reach out to him regarding focus on the migration scenarios.
## Guillaume - Arm
Tumbleweed: * Rolling again * Upcoming GCC 12 tested for aarch64:
https://build.opensuse.org/project/show/home:dirkmueller:branches:openSUSE:F...
Leap 15.4: * aarch64: * Issue with Numpy/openBLAS fixed: https://bugzilla.suse.com/show_bug.cgi?id=1198885 * armv7: * Enlightenment package still fails in rpmlint check (missing whitelist?): https://bugzilla.opensuse.org/show_bug.cgi?id=1194047 lkocman: will reach out to simotek and Wolfgang * scc product class looks wrong (Marina/Marcus) (for all non-intel arches). x86_64 has OPENSUSE-BETA while for the others the class is SLES-ARM64-BETA, SLES-PPC-BETA, SLES-Z-BETA. https://sd.suse.com/servicedesk/customer/portal/1/SD-82355 (Internal, Ticket with SCC team, team lead is aware of the request). Request is now resolved. (lkocman: Correction trello shows me that 2/4 items are still pending). SCC team confirmed that this is done. I did check non- intel arches and they seem to all use OPENSUSE-BETA.
Leap Micro 5.2: * SR to add Default-SelfInstall image for aarch64: https://build.opensuse.org/request/show/974751 Lubos will open a JIRA for 5.3. I'll ask if it would be option for 5.2 as well.
lkocman to check if we could remove the firefox tests from the 42.X/15.0 upgrade test suite. It doesn't seem to happen outside of that (same for TW). lkocman will try to look into this
## Sarah - s390x
SUSE has shutdown 3 LPARs because of performance issues Issue has been also reported to the CTO for ZSystems of IBM
Tumbleweed: * Is rolling
openSUSE Leap Beta: * no issues at the moment
* maven issues are existing -> discussions about upgrading the Java version or how to fix it
lkocman: slightly related topic, should we perhaps re-consider recommended memory amount in Release Notes? I think we still recommend something like 2G minimal / 4G or 8G optimal. * KDE for s390x adopted
## Doug * TSP * Solution seems to be found * No update on status on when it can be implemented * Community Meeting * Discussion/workshop planned for community meetings on May 10 & 12 to discuss successor of Leap *
https://lists.opensuse.org/archives/list/project@lists.opensuse.org/thread/K... * oSC22 * Will cancel all talks on confrimed by May 6 * Schedule mostly complete * Ordering badge and signage * Setting up venueless platform * Slides need to be 16x9 * OSCAL oSC22 * Will start creating schedule * Reached out to people to confirm their talks * GSoC * 4 proposals ranked for May 12 deadline
Installfest in CZ. CfP deadline was Monday midnight: MicroOS Leap and Leap Micro D-Installer
talks were submitted
## Dirk
Not available
lkocman: Thanks for the framework laptop setup We're not currently listed as framework laptop compatible distro https://gist.github.com/cornfeedhobo/8f32430dc6c52b9a4776df91701b1d96
* switched obs-arm-11 worker to aio=io_uring away from aio=threads which appears to reduce I/O cost (bsc#1197746), which caused issues on x86_64. still chasing that down. * did a full rebuild of openSUSE:Factory:ARM as Guillaume was away and openqa was broken anyway :) did introduce more issues than it fixed it appears * Still to work rust 1.59 / ghc issues on armv6 and armv7: all have the same root cause, use of SWP/SWPB instructions which is imperfectly emulated by the aarch64 host kernel. works fine with armv6/v7 kernel. * looked into gcc11 build failures
In backlog: https://code.opensuse.org/leap/features/issue/17
## Wolfgang (Package Hub), Scott Bahling
Not available
## Maintenance team (Marina or Marcus, Maurizio (m4u))
- Marcus: 15.4 is set up channel wise, updates will go in testing occasionaly, if you need more ping me, no openqa setup yet lkocman: could you please help me with cleanup of maintenance tasks in https://progress.opensuse.org/projects/opensuse-leap-15-4/issues/gantt lkocman: will contact Jan Stehlik. Santi (PO for the topic) mentioned he'll work on it. lkocman: messaged Jan - Marcus: 15.3 openQA is ok again.
lkocman: (still pending) will open a release notes entry for a change Security Advisory identification TODO Marcus: could you give me example of old and new values?
- Marina and Maurizio: SLE-PackageHub overlaps (https://github.com/openSUSE/openSUSE-release-process/issues/71) work in progress following the initial list of overlapping packages (https://progress.opensuse.org/issues/106610#note-3). More incidents are under QA. Work is going on and under control (and tracked internally as jsc#MSC-303). Already released: (AH PERFECT!) SUSE:Maintenance:22929:265929 (babl libbabl-0_1-0 typelib-1_0-Babl-0_1) SUSE:Maintenance:23000:266006 (MozillaThunderbird enigmail) SUSE:Maintenance:23009:266004 (freerdp freerdp-devel freerdp-proxy libfreerdp2 libgsm) -> libgsm1 was missing in PH making freerdp not installable SUSE:Maintenance:22928:266007 (argyllcms csync libcsync0 libcsync- plugin-sftp libcsync-plugin-smb) SUSE:Maintenance:23015:267052 (gfbgraph-devel libgfbgraph-0_2-0 typelib-1_0-GFBGraph-0_2 librest gcr) -> librest, gcr and libgoa are needed too for making gfbgraph installable SUSE:Maintenance:23334:268316 (gutenprint gutenprint-devel) SUSE:Maintenance:23486:268867 (hp-drive-guard, upower) --> needs libupower-glib3 SUSE:Maintenance:23487:268897 (liba52-0 liba52-devel) SUSE:Maintenance:23506:268899 (libdvdread4 libdvdread-devel)
Meet product security at the openSUSE Conference. There are about 3 talks on the maintenance and security topics. Come and say Hello!
## Adrian - OBS
Not present
feedback loop on mirrored submissions doesn't workstation. Lubos wills end an email with an example to Marco and Adrian. (Sent last week) Marco has reached out to me regarding the mirroring. He has example(s) from SUSE:SLE-15:SP4:GA
Excellent. Thank you Luna and Johan. I appreciate the info and thanks for the help in translating. Looks like there are a few translations started at https://en.opensuse.org/Release_announcement_15.4 v/r Doug ________________________________ From: Luna Jernberg <droidbittin@gmail.com> Sent: Sunday, May 8, 2022 12:39 PM To: Lubos Kocman <lubos.kocman@suse.com>; Douglas DeMaio <Douglas.DeMaio@suse.com>; Douglas DeMaio <Douglas.DeMaio@suse.com>; Johan Dot <jonte1@gmail.com>; bittin <bittin@opensuse.org>; Martin Jernberg <droidbittin@gmail.com>; opensuse-project <opensuse-project@opensuse.org>; project@lists.opensuse.org <project@lists.opensuse.org> Cc: factory@lists.opensuse.org <factory@lists.opensuse.org>; results@suse.de <results@suse.de> Subject: Re: openSUSE Release Engineering meeting 04.05.2022 Hey! Did read up on this now, has had too much to do earlier this week, and started working a bit on the Swedish Translations of the Leap 15.4 Release notes, and @Johan Dot<mailto:jonte1@gmail.com> promised to continue to work on them later today :) On Thu, May 5, 2022 at 3:56 PM Lubos Kocman <lubos.kocman@suse.com<mailto:lubos.kocman@suse.com>> wrote: All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees guillaumeg, DimStar, rbrown, lkocman, mpiala, ddemaio, maurizio (m4u).maxlin, Sarah ## Internal SUSE IT Supported distribution Guests: Martin Piala, Vojtech Pavlik Idea: openSUSE Leap as supported system by SUSE IT! Vadim G. is looking for a help to kickstart the effort. We're thinking of starting a hackweek with a Leap 15.4 spin with some preinstalled tools for SUSE environment. https://hackweek.opensuse.org/21/projects/opensuse-build-supported-by-suse-i... Our feature tracker for any issue references. https://code.opensuse.org/leap/features/issue/77 Next steps collect requirements for Minimal Viable Product I believe Vojtech could help us there. How does Rancher product portfolio fit in? Datto is using gnome-initial-setup for post-install tweaks. https://github.com/endlessm/gnome-initial-setup/blob/master/HACKING We could start there as well. However, they're already looking for some futher management tools. I believe that we do not need any 3rd party tools. Perhaps SUMA could help with post-installation management. Martin: currently supported systems by IT are Windows 10 and MacOS, we would like to change this Martin: we'd like to have pre-installed tools required for daily work. slack, teams. We have company portals for Windows10 and Mac and some of the apps can be already preinstalled for the image. Martin: we do not yet have experience for responsibility of building Linux apps and we need your help. Ideally it should be done by the end of the quarter. End of July It's not decided yet what should we use. Whether we need a script post- install. Richard: I do have a couple of questions: Which HW are we talking about? * How often will be the recommended hardware changing? Martin: We have some predefined laptops specific. 2 hardware specs (standard, power). New ones are Lenovo, we're also rotating the older Dells. Martin will discuss this with team. In the next HW rotation we should take the support of the chosen OS into consideration. * Would the best option be Leap based? And perhaps risk some of the missing hardware support? * Or should we consider something Tumbleweed based? Perhaps you will end up with something like MicroOS * Desktop. Teams, Slack would be then consumed from Flatpaks. lkocman: I recommend to consider two approaches: provide root password to the user or not. For less technical users it would be preferred if SUSE it would do most of the changes. Martin: For IT are also preferred these two options, one with admin access (here the user is responsible for the setup), and another with limited permissions, where IT is responsible for maintenance + the laptop must be enrolled (most probably in VMware Workspace One, currently under research). ## Leap Leap Micro 5.2 is RC! We've also progressed on release-notes-leap-micro (Thanks cboltz and Lukas) https://doc.opensuse.org/release-notes/x86_64/openSUSE/LeapMicro/5.2/ Rework of LeapMicro get-o-o layout community worked on overview for Leap Micro https://etherpad.opensuse.org/p/weeklymeeting20220505#L51 We should also consider single page layout MicroOS and backport overview changes as well https://github.com/openSUSE/get-o-o/pull/87 A lot of changes from SLE 15 SP4 post-RC. Removing snapshot at this point in time was not so good choice in the end. Some more changes will be taken in today, tomorrow. Mass rebuild is planned in next few days (Friday/Saturday). Maint snapshot for SLE 15 SP4 on Sunday. We need to be able to finish the RC build, that's not possible now. Leap Desktop/Workstation workshop is next week! 50+ people have signed up for workshop https://www.reddit.com/r/openSUSE/comments/udr5ly/desktop_workshop_for_next_... - syncup with Scott and Yi Fan prior the acutal workshop Looking for drivers who could help us "kickstart the initial workshop". Long story We need some people who already know what to do (how lucid works, create some initial topics) to inspire others. Interesting last minute feature for laptop customizations. (Big thanks Dirk) I'll see what would be easily adoptable. SLED is interested as well. https://code.opensuse.org/leap/features/issue/75 ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 108 failed, 10 unresolvable (last week: 123/11) https://tinyurl.com/ysy4nnnz * GNOME 42.1 shipped in snapshot 0501 (snapshot 0429 and 0430 were blocked due to dracut) * KDE Plasma 5.24.5 staged - ready for either 0504 or 0505 * Meson 0.62 is staged - another round of 'syntax validation getting stricter' (not too many issues seen though) * GCC12 as default compiler still staged, results are looking very good (Staging QA all passed, waiting for the final go) lkocman: I hope that Alp will adopt to the new default(s) as well. Mentioned the llvm situation in Leap 15.X GPG Key to sign packages/repos is planned to be updated to be a 4096/RSA key (implementation schedule pending) Tracker bug : https://bugzilla.suse.com/show_bug.cgi?id=1199184 OBS seems to have some hard time finding workers for ceph and kernel builds: very frequently, staging projects are blocked by waiting for the 4 same packages still being scheduled (ceph, kernel-default, kernel-vanilla, kernel-debug) (constraints limit to 18 (ceph) resp 24 (kernels) workers) ## Richard (Kubic/MicroOS) Started Discussion with the Kubic community about winding down the Kubic project and focusing more attention on MicroOS (and MicroOS Desktop) - https://lists.opensuse.org/archives/list/kubic@lists.opensuse.org/thread/23O... For those currently on Kubic, Kubernetes atop MicroOS is best addressed with using k3s/RKE direct from Rancher. Whether we need tooling/documentation to help with potential migrations is an open question. lkocman: This topic was raised also on the community meeting. Isn't Kubic the only Kubernetes and CNCF certified distro that we have now? Richard: depends on your definition of 'we' - CNCF certification is specific to the Kubernetes that is part of Kubic. Rancher k3s supports MicroOS and is itself CNCF certified, so 'we' will still have that. lkocman: The question that popped up was how to get the k3s running on Leap Micro. I did share the whitepaper for SLE Micro 5.1. Richard: this should just work with 5.2+. Objecting to the Leap Micro get.opensuse.org<http://get.opensuse.org> page overstating it's case at the expense of other openSUSE Projects that address the same use cases - https://github.com/openSUSE/get-o-o/issues/88 MicroOS (GNOME) Desktop has a fresh community effort to get out of beta, possibly by writing a fresh notification tool for transactional- updates instead of relying on PackageKit. Join the Telegram/Matrix MicroOS Desktop channel to join the effort. Podman 4.0.x now working perfectly Working on various interesting MicroOS research tracks: - kiwi-less/container first VM image building Status: POC - nerdctl support in toolbox Status: Broken prototype - buildkit and its limit as a container builder - TW-to-MicroOS conversion - curl-minimal and making it default (like Fedora) Status: Investigating - Re-arranging Factory so products like MicroOS can build with different PrjConf than Tumbleweed - MicroOS Desktop using TIU instead of transactional-update (ie. remove all individual rpm package management) (research not sure if it's worth updating docs yet) Please ping rbrown@suse.com<mailto:rbrown@suse.com> if you are interested/have opinions on any of the above, feedback/thoughts/existing knowledge is welcome. ## Max Leap Micro * Have a look repotred Leap Micro selfinstall has different behavior compare to SLEM on openqa, it should boot iso instead of raw image for the testing, bsc#1197877 * Removed beta flag Leap 15.4 * Look into python-certbot bug, the culprit is: python-pyopenssl in SLE15 SP4 has been updated to version 20, it's requiring python- cryptography > 3.2 however we had 2.8 in SLE, the minimal requirement can not filled, this should affected many packages rely on pyopenssl, bsc#1198851 (There is a SLE maintenance request for python-cert*, but it's a major version bump) Marcus does not recommend forking package in Leap as there are other SLE python modules that will depend on it. * Removed snapshot repo * Preparing 15.4 RC build Lubos will send an annoucement that RC will be delayed because of incoming changes from SLE 15 SP4. * Build fail stats in Leap 15.4: 20 build fails, 0 unresolvables lkocman: I'll open individual bugs for remaining build failures. Santiago mentioned that he'll have more free cycles for Leap/openQA this week. I'll reach out to him regarding focus on the migration scenarios. ## Guillaume - Arm Tumbleweed: * Rolling again * Upcoming GCC 12 tested for aarch64: https://build.opensuse.org/project/show/home:dirkmueller:branches:openSUSE:F... Leap 15.4: * aarch64: * Issue with Numpy/openBLAS fixed: https://bugzilla.suse.com/show_bug.cgi?id=1198885 * armv7: * Enlightenment package still fails in rpmlint check (missing whitelist?): https://bugzilla.opensuse.org/show_bug.cgi?id=1194047 lkocman: will reach out to simotek and Wolfgang * scc product class looks wrong (Marina/Marcus) (for all non-intel arches). x86_64 has OPENSUSE-BETA while for the others the class is SLES-ARM64-BETA, SLES-PPC-BETA, SLES-Z-BETA. https://sd.suse.com/servicedesk/customer/portal/1/SD-82355 (Internal, Ticket with SCC team, team lead is aware of the request). Request is now resolved. (lkocman: Correction trello shows me that 2/4 items are still pending). SCC team confirmed that this is done. I did check non- intel arches and they seem to all use OPENSUSE-BETA. Leap Micro 5.2: * SR to add Default-SelfInstall image for aarch64: https://build.opensuse.org/request/show/974751 Lubos will open a JIRA for 5.3. I'll ask if it would be option for 5.2 as well. lkocman to check if we could remove the firefox tests from the 42.X/15.0 upgrade test suite. It doesn't seem to happen outside of that (same for TW). lkocman will try to look into this ## Sarah - s390x SUSE has shutdown 3 LPARs because of performance issues Issue has been also reported to the CTO for ZSystems of IBM Tumbleweed: * Is rolling openSUSE Leap Beta: * no issues at the moment * maven issues are existing -> discussions about upgrading the Java version or how to fix it lkocman: slightly related topic, should we perhaps re-consider recommended memory amount in Release Notes? I think we still recommend something like 2G minimal / 4G or 8G optimal. * KDE for s390x adopted ## Doug * TSP * Solution seems to be found * No update on status on when it can be implemented * Community Meeting * Discussion/workshop planned for community meetings on May 10 & 12 to discuss successor of Leap * https://lists.opensuse.org/archives/list/project@lists.opensuse.org/thread/K... * oSC22 * Will cancel all talks on confrimed by May 6 * Schedule mostly complete * Ordering badge and signage * Setting up venueless platform * Slides need to be 16x9 * OSCAL oSC22 * Will start creating schedule * Reached out to people to confirm their talks * GSoC * 4 proposals ranked for May 12 deadline Installfest in CZ. CfP deadline was Monday midnight: MicroOS Leap and Leap Micro D-Installer talks were submitted ## Dirk Not available lkocman: Thanks for the framework laptop setup We're not currently listed as framework laptop compatible distro https://gist.github.com/cornfeedhobo/8f32430dc6c52b9a4776df91701b1d96 * switched obs-arm-11 worker to aio=io_uring away from aio=threads which appears to reduce I/O cost (bsc#1197746), which caused issues on x86_64. still chasing that down. * did a full rebuild of openSUSE:Factory:ARM as Guillaume was away and openqa was broken anyway :) did introduce more issues than it fixed it appears * Still to work rust 1.59 / ghc issues on armv6 and armv7: all have the same root cause, use of SWP/SWPB instructions which is imperfectly emulated by the aarch64 host kernel. works fine with armv6/v7 kernel. * looked into gcc11 build failures In backlog: https://code.opensuse.org/leap/features/issue/17 ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marina or Marcus, Maurizio (m4u)) - Marcus: 15.4 is set up channel wise, updates will go in testing occasionaly, if you need more ping me, no openqa setup yet lkocman: could you please help me with cleanup of maintenance tasks in https://progress.opensuse.org/projects/opensuse-leap-15-4/issues/gantt lkocman: will contact Jan Stehlik. Santi (PO for the topic) mentioned he'll work on it. lkocman: messaged Jan - Marcus: 15.3 openQA is ok again. lkocman: (still pending) will open a release notes entry for a change Security Advisory identification TODO Marcus: could you give me example of old and new values? - Marina and Maurizio: SLE-PackageHub overlaps (https://github.com/openSUSE/openSUSE-release-process/issues/71) work in progress following the initial list of overlapping packages (https://progress.opensuse.org/issues/106610#note-3). More incidents are under QA. Work is going on and under control (and tracked internally as jsc#MSC-303). Already released: (AH PERFECT!) SUSE:Maintenance:22929:265929 (babl libbabl-0_1-0 typelib-1_0-Babl-0_1) SUSE:Maintenance:23000:266006 (MozillaThunderbird enigmail) SUSE:Maintenance:23009:266004 (freerdp freerdp-devel freerdp-proxy libfreerdp2 libgsm) -> libgsm1 was missing in PH making freerdp not installable SUSE:Maintenance:22928:266007 (argyllcms csync libcsync0 libcsync- plugin-sftp libcsync-plugin-smb) SUSE:Maintenance:23015:267052 (gfbgraph-devel libgfbgraph-0_2-0 typelib-1_0-GFBGraph-0_2 librest gcr) -> librest, gcr and libgoa are needed too for making gfbgraph installable SUSE:Maintenance:23334:268316 (gutenprint gutenprint-devel) SUSE:Maintenance:23486:268867 (hp-drive-guard, upower) --> needs libupower-glib3 SUSE:Maintenance:23487:268897 (liba52-0 liba52-devel) SUSE:Maintenance:23506:268899 (libdvdread4 libdvdread-devel) Meet product security at the openSUSE Conference. There are about 3 talks on the maintenance and security topics. Come and say Hello! ## Adrian - OBS Not present feedback loop on mirrored submissions doesn't workstation. Lubos wills end an email with an example to Marco and Adrian. (Sent last week) Marco has reached out to me regarding the mirroring. He has example(s) from SUSE:SLE-15:SP4:GA
Will attend the meeting live today :) On Sun, May 8, 2022 at 12:39 PM Luna Jernberg <droidbittin@gmail.com> wrote:
Hey!
Did read up on this now, has had too much to do earlier this week, and started working a bit on the Swedish Translations of the Leap 15.4 Release notes, and @Johan Dot <jonte1@gmail.com> promised to continue to work on them later today :)
On Thu, May 5, 2022 at 3:56 PM Lubos Kocman <lubos.kocman@suse.com> wrote:
All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting
## Attendees guillaumeg, DimStar, rbrown, lkocman, mpiala, ddemaio, maurizio (m4u).maxlin, Sarah
## Internal SUSE IT Supported distribution
Guests: Martin Piala, Vojtech Pavlik
Idea: openSUSE Leap as supported system by SUSE IT! Vadim G. is looking for a help to kickstart the effort. We're thinking of starting a hackweek with a Leap 15.4 spin with some preinstalled tools for SUSE environment.
https://hackweek.opensuse.org/21/projects/opensuse-build-supported-by-suse-i...
Our feature tracker for any issue references. https://code.opensuse.org/leap/features/issue/77
Next steps collect requirements for Minimal Viable Product I believe Vojtech could help us there.
How does Rancher product portfolio fit in?
Datto is using gnome-initial-setup for post-install tweaks. https://github.com/endlessm/gnome-initial-setup/blob/master/HACKING We could start there as well. However, they're already looking for some futher management tools. I believe that we do not need any 3rd party tools. Perhaps SUMA could help with post-installation management.
Martin: currently supported systems by IT are Windows 10 and MacOS, we would like to change this Martin: we'd like to have pre-installed tools required for daily work. slack, teams. We have company portals for Windows10 and Mac and some of the apps can be already preinstalled for the image. Martin: we do not yet have experience for responsibility of building Linux apps and we need your help. Ideally it should be done by the end of the quarter. End of July
It's not decided yet what should we use. Whether we need a script post- install.
Richard: I do have a couple of questions:
Which HW are we talking about? * How often will be the recommended hardware changing? Martin: We have some predefined laptops specific. 2 hardware specs (standard, power). New ones are Lenovo, we're also rotating the older Dells. Martin will discuss this with team. In the next HW rotation we should take the support of the chosen OS into consideration. * Would the best option be Leap based? And perhaps risk some of the missing hardware support? * Or should we consider something Tumbleweed based? Perhaps you will end up with something like MicroOS * Desktop. Teams, Slack would be then consumed from Flatpaks.
lkocman: I recommend to consider two approaches: provide root password to the user or not. For less technical users it would be preferred if SUSE it would do most of the changes. Martin: For IT are also preferred these two options, one with admin access (here the user is responsible for the setup), and another with limited permissions, where IT is responsible for maintenance + the laptop must be enrolled (most probably in VMware Workspace One, currently under research).
## Leap
Leap Micro 5.2 is RC!
We've also progressed on release-notes-leap-micro (Thanks cboltz and Lukas) https://doc.opensuse.org/release-notes/x86_64/openSUSE/LeapMicro/5.2/
Rework of LeapMicro get-o-o layout community worked on overview for Leap Micro https://etherpad.opensuse.org/p/weeklymeeting20220505#L51 We should also consider single page layout MicroOS and backport overview changes as well https://github.com/openSUSE/get-o-o/pull/87
A lot of changes from SLE 15 SP4 post-RC. Removing snapshot at this point in time was not so good choice in the end. Some more changes will be taken in today, tomorrow. Mass rebuild is planned in next few days (Friday/Saturday). Maint snapshot for SLE 15 SP4 on Sunday. We need to be able to finish the RC build, that's not possible now.
Leap Desktop/Workstation workshop is next week! 50+ people have signed up for workshop
https://www.reddit.com/r/openSUSE/comments/udr5ly/desktop_workshop_for_next_... - syncup with Scott and Yi Fan prior the acutal workshop Looking for drivers who could help us "kickstart the initial workshop". Long story We need some people who already know what to do (how lucid works, create some initial topics) to inspire others.
Interesting last minute feature for laptop customizations. (Big thanks Dirk) I'll see what would be easily adoptable. SLED is interested as well. https://code.opensuse.org/leap/features/issue/75
## openSUSE Tumbleweed
openSUSE:Factory build fail stats: 108 failed, 10 unresolvable (last week: 123/11) https://tinyurl.com/ysy4nnnz
* GNOME 42.1 shipped in snapshot 0501 (snapshot 0429 and 0430 were blocked due to dracut) * KDE Plasma 5.24.5 staged - ready for either 0504 or 0505 * Meson 0.62 is staged - another round of 'syntax validation getting stricter' (not too many issues seen though) * GCC12 as default compiler still staged, results are looking very good (Staging QA all passed, waiting for the final go) lkocman: I hope that Alp will adopt to the new default(s) as well. Mentioned the llvm situation in Leap 15.X
GPG Key to sign packages/repos is planned to be updated to be a 4096/RSA key (implementation schedule pending) Tracker bug : https://bugzilla.suse.com/show_bug.cgi?id=1199184
OBS seems to have some hard time finding workers for ceph and kernel builds: very frequently, staging projects are blocked by waiting for the 4 same packages still being scheduled (ceph, kernel-default, kernel-vanilla, kernel-debug) (constraints limit to 18 (ceph) resp 24 (kernels) workers)
## Richard (Kubic/MicroOS)
Started Discussion with the Kubic community about winding down the Kubic project and focusing more attention on MicroOS (and MicroOS Desktop) -
https://lists.opensuse.org/archives/list/kubic@lists.opensuse.org/thread/23O... For those currently on Kubic, Kubernetes atop MicroOS is best addressed with using k3s/RKE direct from Rancher. Whether we need tooling/documentation to help with potential migrations is an open question. lkocman: This topic was raised also on the community meeting. Isn't Kubic the only Kubernetes and CNCF certified distro that we have now? Richard: depends on your definition of 'we' - CNCF certification is specific to the Kubernetes that is part of Kubic. Rancher k3s supports MicroOS and is itself CNCF certified, so 'we' will still have that. lkocman: The question that popped up was how to get the k3s running on Leap Micro. I did share the whitepaper for SLE Micro 5.1. Richard: this should just work with 5.2+.
Objecting to the Leap Micro get.opensuse.org page overstating it's case at the expense of other openSUSE Projects that address the same use cases - https://github.com/openSUSE/get-o-o/issues/88
MicroOS (GNOME) Desktop has a fresh community effort to get out of beta, possibly by writing a fresh notification tool for transactional- updates instead of relying on PackageKit. Join the Telegram/Matrix MicroOS Desktop channel to join the effort.
Podman 4.0.x now working perfectly
Working on various interesting MicroOS research tracks: - kiwi-less/container first VM image building Status: POC - nerdctl support in toolbox Status: Broken prototype - buildkit and its limit as a container builder - TW-to-MicroOS conversion - curl-minimal and making it default (like Fedora) Status: Investigating - Re-arranging Factory so products like MicroOS can build with different PrjConf than Tumbleweed - MicroOS Desktop using TIU instead of transactional-update (ie. remove all individual rpm package management) (research not sure if it's worth updating docs yet) Please ping rbrown@suse.com if you are interested/have opinions on any of the above, feedback/thoughts/existing knowledge is welcome.
## Max
Leap Micro * Have a look repotred Leap Micro selfinstall has different behavior compare to SLEM on openqa, it should boot iso instead of raw image for the testing, bsc#1197877 * Removed beta flag
Leap 15.4 * Look into python-certbot bug, the culprit is: python-pyopenssl in SLE15 SP4 has been updated to version 20, it's requiring python- cryptography > 3.2 however we had 2.8 in SLE, the minimal requirement can not filled, this should affected many packages rely on pyopenssl, bsc#1198851 (There is a SLE maintenance request for python-cert*, but it's a major version bump) Marcus does not recommend forking package in Leap as there are other SLE python modules that will depend on it. * Removed snapshot repo * Preparing 15.4 RC build Lubos will send an annoucement that RC will be delayed because of incoming changes from SLE 15 SP4. * Build fail stats in Leap 15.4: 20 build fails, 0 unresolvables lkocman: I'll open individual bugs for remaining build failures.
Santiago mentioned that he'll have more free cycles for Leap/openQA this week. I'll reach out to him regarding focus on the migration scenarios.
## Guillaume - Arm
Tumbleweed: * Rolling again * Upcoming GCC 12 tested for aarch64:
https://build.opensuse.org/project/show/home:dirkmueller:branches:openSUSE:F...
Leap 15.4: * aarch64: * Issue with Numpy/openBLAS fixed: https://bugzilla.suse.com/show_bug.cgi?id=1198885 * armv7: * Enlightenment package still fails in rpmlint check (missing whitelist?): https://bugzilla.opensuse.org/show_bug.cgi?id=1194047 lkocman: will reach out to simotek and Wolfgang * scc product class looks wrong (Marina/Marcus) (for all non-intel arches). x86_64 has OPENSUSE-BETA while for the others the class is SLES-ARM64-BETA, SLES-PPC-BETA, SLES-Z-BETA. https://sd.suse.com/servicedesk/customer/portal/1/SD-82355 (Internal, Ticket with SCC team, team lead is aware of the request). Request is now resolved. (lkocman: Correction trello shows me that 2/4 items are still pending). SCC team confirmed that this is done. I did check non- intel arches and they seem to all use OPENSUSE-BETA.
Leap Micro 5.2: * SR to add Default-SelfInstall image for aarch64: https://build.opensuse.org/request/show/974751 Lubos will open a JIRA for 5.3. I'll ask if it would be option for 5.2 as well.
lkocman to check if we could remove the firefox tests from the 42.X/15.0 upgrade test suite. It doesn't seem to happen outside of that (same for TW). lkocman will try to look into this
## Sarah - s390x
SUSE has shutdown 3 LPARs because of performance issues Issue has been also reported to the CTO for ZSystems of IBM
Tumbleweed: * Is rolling
openSUSE Leap Beta: * no issues at the moment
* maven issues are existing -> discussions about upgrading the Java version or how to fix it
lkocman: slightly related topic, should we perhaps re-consider recommended memory amount in Release Notes? I think we still recommend something like 2G minimal / 4G or 8G optimal. * KDE for s390x adopted
## Doug * TSP * Solution seems to be found * No update on status on when it can be implemented * Community Meeting * Discussion/workshop planned for community meetings on May 10 & 12 to discuss successor of Leap *
https://lists.opensuse.org/archives/list/project@lists.opensuse.org/thread/K... * oSC22 * Will cancel all talks on confrimed by May 6 * Schedule mostly complete * Ordering badge and signage * Setting up venueless platform * Slides need to be 16x9 * OSCAL oSC22 * Will start creating schedule * Reached out to people to confirm their talks * GSoC * 4 proposals ranked for May 12 deadline
Installfest in CZ. CfP deadline was Monday midnight: MicroOS Leap and Leap Micro D-Installer
talks were submitted
## Dirk
Not available
lkocman: Thanks for the framework laptop setup We're not currently listed as framework laptop compatible distro https://gist.github.com/cornfeedhobo/8f32430dc6c52b9a4776df91701b1d96
* switched obs-arm-11 worker to aio=io_uring away from aio=threads which appears to reduce I/O cost (bsc#1197746), which caused issues on x86_64. still chasing that down. * did a full rebuild of openSUSE:Factory:ARM as Guillaume was away and openqa was broken anyway :) did introduce more issues than it fixed it appears * Still to work rust 1.59 / ghc issues on armv6 and armv7: all have the same root cause, use of SWP/SWPB instructions which is imperfectly emulated by the aarch64 host kernel. works fine with armv6/v7 kernel. * looked into gcc11 build failures
In backlog: https://code.opensuse.org/leap/features/issue/17
## Wolfgang (Package Hub), Scott Bahling
Not available
## Maintenance team (Marina or Marcus, Maurizio (m4u))
- Marcus: 15.4 is set up channel wise, updates will go in testing occasionaly, if you need more ping me, no openqa setup yet lkocman: could you please help me with cleanup of maintenance tasks in https://progress.opensuse.org/projects/opensuse-leap-15-4/issues/gantt lkocman: will contact Jan Stehlik. Santi (PO for the topic) mentioned he'll work on it. lkocman: messaged Jan - Marcus: 15.3 openQA is ok again.
lkocman: (still pending) will open a release notes entry for a change Security Advisory identification TODO Marcus: could you give me example of old and new values?
- Marina and Maurizio: SLE-PackageHub overlaps (https://github.com/openSUSE/openSUSE-release-process/issues/71) work in progress following the initial list of overlapping packages (https://progress.opensuse.org/issues/106610#note-3). More incidents are under QA. Work is going on and under control (and tracked internally as jsc#MSC-303). Already released: (AH PERFECT!) SUSE:Maintenance:22929:265929 (babl libbabl-0_1-0 typelib-1_0-Babl-0_1) SUSE:Maintenance:23000:266006 (MozillaThunderbird enigmail) SUSE:Maintenance:23009:266004 (freerdp freerdp-devel freerdp-proxy libfreerdp2 libgsm) -> libgsm1 was missing in PH making freerdp not installable SUSE:Maintenance:22928:266007 (argyllcms csync libcsync0 libcsync- plugin-sftp libcsync-plugin-smb) SUSE:Maintenance:23015:267052 (gfbgraph-devel libgfbgraph-0_2-0 typelib-1_0-GFBGraph-0_2 librest gcr) -> librest, gcr and libgoa are needed too for making gfbgraph installable SUSE:Maintenance:23334:268316 (gutenprint gutenprint-devel) SUSE:Maintenance:23486:268867 (hp-drive-guard, upower) --> needs libupower-glib3 SUSE:Maintenance:23487:268897 (liba52-0 liba52-devel) SUSE:Maintenance:23506:268899 (libdvdread4 libdvdread-devel)
Meet product security at the openSUSE Conference. There are about 3 talks on the maintenance and security topics. Come and say Hello!
## Adrian - OBS
Not present
feedback loop on mirrored submissions doesn't workstation. Lubos wills end an email with an example to Marco and Adrian. (Sent last week) Marco has reached out to me regarding the mirroring. He has example(s) from SUSE:SLE-15:SP4:GA
Will miss the meeting this week as another thing popped up, but will read the minutes about what was said later and download 15.4 Stable later that day On Wed, May 11, 2022 at 8:49 AM Luna Jernberg <droidbittin@gmail.com> wrote:
Will attend the meeting live today :)
On Sun, May 8, 2022 at 12:39 PM Luna Jernberg <droidbittin@gmail.com> wrote:
Hey!
Did read up on this now, has had too much to do earlier this week, and started working a bit on the Swedish Translations of the Leap 15.4 Release notes, and @Johan Dot <jonte1@gmail.com> promised to continue to work on them later today :)
On Thu, May 5, 2022 at 3:56 PM Lubos Kocman <lubos.kocman@suse.com> wrote:
All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting
## Attendees guillaumeg, DimStar, rbrown, lkocman, mpiala, ddemaio, maurizio (m4u).maxlin, Sarah
## Internal SUSE IT Supported distribution
Guests: Martin Piala, Vojtech Pavlik
Idea: openSUSE Leap as supported system by SUSE IT! Vadim G. is looking for a help to kickstart the effort. We're thinking of starting a hackweek with a Leap 15.4 spin with some preinstalled tools for SUSE environment.
https://hackweek.opensuse.org/21/projects/opensuse-build-supported-by-suse-i...
Our feature tracker for any issue references. https://code.opensuse.org/leap/features/issue/77
Next steps collect requirements for Minimal Viable Product I believe Vojtech could help us there.
How does Rancher product portfolio fit in?
Datto is using gnome-initial-setup for post-install tweaks. https://github.com/endlessm/gnome-initial-setup/blob/master/HACKING We could start there as well. However, they're already looking for some futher management tools. I believe that we do not need any 3rd party tools. Perhaps SUMA could help with post-installation management.
Martin: currently supported systems by IT are Windows 10 and MacOS, we would like to change this Martin: we'd like to have pre-installed tools required for daily work. slack, teams. We have company portals for Windows10 and Mac and some of the apps can be already preinstalled for the image. Martin: we do not yet have experience for responsibility of building Linux apps and we need your help. Ideally it should be done by the end of the quarter. End of July
It's not decided yet what should we use. Whether we need a script post- install.
Richard: I do have a couple of questions:
Which HW are we talking about? * How often will be the recommended hardware changing? Martin: We have some predefined laptops specific. 2 hardware specs (standard, power). New ones are Lenovo, we're also rotating the older Dells. Martin will discuss this with team. In the next HW rotation we should take the support of the chosen OS into consideration. * Would the best option be Leap based? And perhaps risk some of the missing hardware support? * Or should we consider something Tumbleweed based? Perhaps you will end up with something like MicroOS * Desktop. Teams, Slack would be then consumed from Flatpaks.
lkocman: I recommend to consider two approaches: provide root password to the user or not. For less technical users it would be preferred if SUSE it would do most of the changes. Martin: For IT are also preferred these two options, one with admin access (here the user is responsible for the setup), and another with limited permissions, where IT is responsible for maintenance + the laptop must be enrolled (most probably in VMware Workspace One, currently under research).
## Leap
Leap Micro 5.2 is RC!
We've also progressed on release-notes-leap-micro (Thanks cboltz and Lukas) https://doc.opensuse.org/release-notes/x86_64/openSUSE/LeapMicro/5.2/
Rework of LeapMicro get-o-o layout community worked on overview for Leap Micro https://etherpad.opensuse.org/p/weeklymeeting20220505#L51 We should also consider single page layout MicroOS and backport overview changes as well https://github.com/openSUSE/get-o-o/pull/87
A lot of changes from SLE 15 SP4 post-RC. Removing snapshot at this point in time was not so good choice in the end. Some more changes will be taken in today, tomorrow. Mass rebuild is planned in next few days (Friday/Saturday). Maint snapshot for SLE 15 SP4 on Sunday. We need to be able to finish the RC build, that's not possible now.
Leap Desktop/Workstation workshop is next week! 50+ people have signed up for workshop
https://www.reddit.com/r/openSUSE/comments/udr5ly/desktop_workshop_for_next_... - syncup with Scott and Yi Fan prior the acutal workshop Looking for drivers who could help us "kickstart the initial workshop". Long story We need some people who already know what to do (how lucid works, create some initial topics) to inspire others.
Interesting last minute feature for laptop customizations. (Big thanks Dirk) I'll see what would be easily adoptable. SLED is interested as well. https://code.opensuse.org/leap/features/issue/75
## openSUSE Tumbleweed
openSUSE:Factory build fail stats: 108 failed, 10 unresolvable (last week: 123/11) https://tinyurl.com/ysy4nnnz
* GNOME 42.1 shipped in snapshot 0501 (snapshot 0429 and 0430 were blocked due to dracut) * KDE Plasma 5.24.5 staged - ready for either 0504 or 0505 * Meson 0.62 is staged - another round of 'syntax validation getting stricter' (not too many issues seen though) * GCC12 as default compiler still staged, results are looking very good (Staging QA all passed, waiting for the final go) lkocman: I hope that Alp will adopt to the new default(s) as well. Mentioned the llvm situation in Leap 15.X
GPG Key to sign packages/repos is planned to be updated to be a 4096/RSA key (implementation schedule pending) Tracker bug : https://bugzilla.suse.com/show_bug.cgi?id=1199184
OBS seems to have some hard time finding workers for ceph and kernel builds: very frequently, staging projects are blocked by waiting for the 4 same packages still being scheduled (ceph, kernel-default, kernel-vanilla, kernel-debug) (constraints limit to 18 (ceph) resp 24 (kernels) workers)
## Richard (Kubic/MicroOS)
Started Discussion with the Kubic community about winding down the Kubic project and focusing more attention on MicroOS (and MicroOS Desktop) -
https://lists.opensuse.org/archives/list/kubic@lists.opensuse.org/thread/23O... For those currently on Kubic, Kubernetes atop MicroOS is best addressed with using k3s/RKE direct from Rancher. Whether we need tooling/documentation to help with potential migrations is an open question. lkocman: This topic was raised also on the community meeting. Isn't Kubic the only Kubernetes and CNCF certified distro that we have now? Richard: depends on your definition of 'we' - CNCF certification is specific to the Kubernetes that is part of Kubic. Rancher k3s supports MicroOS and is itself CNCF certified, so 'we' will still have that. lkocman: The question that popped up was how to get the k3s running on Leap Micro. I did share the whitepaper for SLE Micro 5.1. Richard: this should just work with 5.2+.
Objecting to the Leap Micro get.opensuse.org page overstating it's case at the expense of other openSUSE Projects that address the same use cases - https://github.com/openSUSE/get-o-o/issues/88
MicroOS (GNOME) Desktop has a fresh community effort to get out of beta, possibly by writing a fresh notification tool for transactional- updates instead of relying on PackageKit. Join the Telegram/Matrix MicroOS Desktop channel to join the effort.
Podman 4.0.x now working perfectly
Working on various interesting MicroOS research tracks: - kiwi-less/container first VM image building Status: POC - nerdctl support in toolbox Status: Broken prototype - buildkit and its limit as a container builder - TW-to-MicroOS conversion - curl-minimal and making it default (like Fedora) Status: Investigating - Re-arranging Factory so products like MicroOS can build with different PrjConf than Tumbleweed - MicroOS Desktop using TIU instead of transactional-update (ie. remove all individual rpm package management) (research not sure if it's worth updating docs yet) Please ping rbrown@suse.com if you are interested/have opinions on any of the above, feedback/thoughts/existing knowledge is welcome.
## Max
Leap Micro * Have a look repotred Leap Micro selfinstall has different behavior compare to SLEM on openqa, it should boot iso instead of raw image for the testing, bsc#1197877 * Removed beta flag
Leap 15.4 * Look into python-certbot bug, the culprit is: python-pyopenssl in SLE15 SP4 has been updated to version 20, it's requiring python- cryptography > 3.2 however we had 2.8 in SLE, the minimal requirement can not filled, this should affected many packages rely on pyopenssl, bsc#1198851 (There is a SLE maintenance request for python-cert*, but it's a major version bump) Marcus does not recommend forking package in Leap as there are other SLE python modules that will depend on it. * Removed snapshot repo * Preparing 15.4 RC build Lubos will send an annoucement that RC will be delayed because of incoming changes from SLE 15 SP4. * Build fail stats in Leap 15.4: 20 build fails, 0 unresolvables lkocman: I'll open individual bugs for remaining build failures.
Santiago mentioned that he'll have more free cycles for Leap/openQA this week. I'll reach out to him regarding focus on the migration scenarios.
## Guillaume - Arm
Tumbleweed: * Rolling again * Upcoming GCC 12 tested for aarch64:
https://build.opensuse.org/project/show/home:dirkmueller:branches:openSUSE:F...
Leap 15.4: * aarch64: * Issue with Numpy/openBLAS fixed: https://bugzilla.suse.com/show_bug.cgi?id=1198885 * armv7: * Enlightenment package still fails in rpmlint check (missing whitelist?): https://bugzilla.opensuse.org/show_bug.cgi?id=1194047 lkocman: will reach out to simotek and Wolfgang * scc product class looks wrong (Marina/Marcus) (for all non-intel arches). x86_64 has OPENSUSE-BETA while for the others the class is SLES-ARM64-BETA, SLES-PPC-BETA, SLES-Z-BETA. https://sd.suse.com/servicedesk/customer/portal/1/SD-82355 (Internal, Ticket with SCC team, team lead is aware of the request). Request is now resolved. (lkocman: Correction trello shows me that 2/4 items are still pending). SCC team confirmed that this is done. I did check non- intel arches and they seem to all use OPENSUSE-BETA.
Leap Micro 5.2: * SR to add Default-SelfInstall image for aarch64: https://build.opensuse.org/request/show/974751 Lubos will open a JIRA for 5.3. I'll ask if it would be option for 5.2 as well.
lkocman to check if we could remove the firefox tests from the 42.X/15.0 upgrade test suite. It doesn't seem to happen outside of that (same for TW). lkocman will try to look into this
## Sarah - s390x
SUSE has shutdown 3 LPARs because of performance issues Issue has been also reported to the CTO for ZSystems of IBM
Tumbleweed: * Is rolling
openSUSE Leap Beta: * no issues at the moment
* maven issues are existing -> discussions about upgrading the Java version or how to fix it
lkocman: slightly related topic, should we perhaps re-consider recommended memory amount in Release Notes? I think we still recommend something like 2G minimal / 4G or 8G optimal. * KDE for s390x adopted
## Doug * TSP * Solution seems to be found * No update on status on when it can be implemented * Community Meeting * Discussion/workshop planned for community meetings on May 10 & 12 to discuss successor of Leap *
https://lists.opensuse.org/archives/list/project@lists.opensuse.org/thread/K... * oSC22 * Will cancel all talks on confrimed by May 6 * Schedule mostly complete * Ordering badge and signage * Setting up venueless platform * Slides need to be 16x9 * OSCAL oSC22 * Will start creating schedule * Reached out to people to confirm their talks * GSoC * 4 proposals ranked for May 12 deadline
Installfest in CZ. CfP deadline was Monday midnight: MicroOS Leap and Leap Micro D-Installer
talks were submitted
## Dirk
Not available
lkocman: Thanks for the framework laptop setup We're not currently listed as framework laptop compatible distro https://gist.github.com/cornfeedhobo/8f32430dc6c52b9a4776df91701b1d96
* switched obs-arm-11 worker to aio=io_uring away from aio=threads which appears to reduce I/O cost (bsc#1197746), which caused issues on x86_64. still chasing that down. * did a full rebuild of openSUSE:Factory:ARM as Guillaume was away and openqa was broken anyway :) did introduce more issues than it fixed it appears * Still to work rust 1.59 / ghc issues on armv6 and armv7: all have the same root cause, use of SWP/SWPB instructions which is imperfectly emulated by the aarch64 host kernel. works fine with armv6/v7 kernel. * looked into gcc11 build failures
In backlog: https://code.opensuse.org/leap/features/issue/17
## Wolfgang (Package Hub), Scott Bahling
Not available
## Maintenance team (Marina or Marcus, Maurizio (m4u))
- Marcus: 15.4 is set up channel wise, updates will go in testing occasionaly, if you need more ping me, no openqa setup yet lkocman: could you please help me with cleanup of maintenance tasks in https://progress.opensuse.org/projects/opensuse-leap-15-4/issues/gantt lkocman: will contact Jan Stehlik. Santi (PO for the topic) mentioned he'll work on it. lkocman: messaged Jan - Marcus: 15.3 openQA is ok again.
lkocman: (still pending) will open a release notes entry for a change Security Advisory identification TODO Marcus: could you give me example of old and new values?
- Marina and Maurizio: SLE-PackageHub overlaps (https://github.com/openSUSE/openSUSE-release-process/issues/71) work in progress following the initial list of overlapping packages (https://progress.opensuse.org/issues/106610#note-3). More incidents are under QA. Work is going on and under control (and tracked internally as jsc#MSC-303). Already released: (AH PERFECT!) SUSE:Maintenance:22929:265929 (babl libbabl-0_1-0 typelib-1_0-Babl-0_1) SUSE:Maintenance:23000:266006 (MozillaThunderbird enigmail) SUSE:Maintenance:23009:266004 (freerdp freerdp-devel freerdp-proxy libfreerdp2 libgsm) -> libgsm1 was missing in PH making freerdp not installable SUSE:Maintenance:22928:266007 (argyllcms csync libcsync0 libcsync- plugin-sftp libcsync-plugin-smb) SUSE:Maintenance:23015:267052 (gfbgraph-devel libgfbgraph-0_2-0 typelib-1_0-GFBGraph-0_2 librest gcr) -> librest, gcr and libgoa are needed too for making gfbgraph installable SUSE:Maintenance:23334:268316 (gutenprint gutenprint-devel) SUSE:Maintenance:23486:268867 (hp-drive-guard, upower) --> needs libupower-glib3 SUSE:Maintenance:23487:268897 (liba52-0 liba52-devel) SUSE:Maintenance:23506:268899 (libdvdread4 libdvdread-devel)
Meet product security at the openSUSE Conference. There are about 3 talks on the maintenance and security topics. Come and say Hello!
## Adrian - OBS
Not present
feedback loop on mirrored submissions doesn't workstation. Lubos wills end an email with an example to Marco and Adrian. (Sent last week) Marco has reached out to me regarding the mirroring. He has example(s) from SUSE:SLE-15:SP4:GA
participants (3)
-
Douglas DeMaio -
Lubos Kocman -
Luna Jernberg