openSUSE Release Engineering meeting 08.02.2023 - openSUSE Factory

10 Feb 2023


      All meeting minutes can be found here: 
https://etherpad.opensuse.org/p/ReleaseEngineering-meeting
Meeting is hosted here 
https://meet.opensuse.org/ReleaseEngineeringMeeting
## Attendees
DimStar, ddemaio, bittin, rbrown, Sarah, maxlin, Axel, lkocman, Adrian
## Leap
Code submission deadline for SLES 15 SP5 Beta4 is today (Jan 25th) at 
15:00.
Leap Builds were stuck on 
https://bugzilla.opensuse.org/show_bug.cgi?id=1207395 and previously 
https://bugzilla.suse.com/show_bug.cgi?id=1206718
Due to this we were not able to produce a decent build that would give 
us good idea about quality. I'm bit worried that the actual beta release 
might be delayed.
Cisco openh264 setup is finialized on our side 
https://news.opensuse.org/2023/01/24/opensuse-simplifies-codec-install/
## openSUSE Tumbleweed
openSUSE:Factory build fail stats: 199 failed 1 unresolvable (two weeks 
ago: 217 / 16)
   https://tinyurl.com/ysy4nnnz
* openSSL 3 has become the default in Snapshot 0202 (problems when users 
have openssl-devel installed)
* glibc 2.37 has been submitted for inclusion; Staging looks reasonably 
good so far. This might be one of the fastest glibc updates seen in the 
last years
* Staging:H Ruby 3.2 made some progress, only 1 more yast build fails 
(y2-packager)
* Staging:K tests KDE Plasma 5.27 beta
* Staging:L has a few failures collected:
     * gpg2: breaks gpgme
     * ant and xmlgraphics-common: breaking ant-antlr and xmlgraphics-fop
* Staging:M test to also build python311 modules
* Staging:O: preparation work to identify the minimal list of 'i586' 
builds to enable in openSUSE:Factory to allow wine/steam to 
build/install (currently 992 packages, and counting; big part of it is 
for rpmlint and such things)
* Staging:Gcc7: early experiments to set GCC 13 as distro compiler
i586 carve-out from Factory
=> Automatic migration kicked off with snapshot 0201. The first 'zypper 
dup' after changing the repo could include a bunch of 'package 
downgrades' as the rebuild counters are not synced across projects.
By end of March, we expect all users to have completed the migration (at 
least one zypper dup to get the new repos configured), as by then we 
disable build/publish of i586 packages (except the ~1800 identified in 
Staging:O - target was wine there)
## Richard (MicroOS)
Presentations at FOSDEM about MicroOS Desktop and MicroOS
https://www.youtube.com/watch?v=4WuYGcs0t6I "I was wrong about 
Flatpak, AppImage, and Snap"
https://video.fosdem.org/2023/H.1308%20(Rolin)/image_linux_secureboot_suse_m... 
"openSUSE MicroOS Design"
https://fosdem.org/2023/schedule/event/image_linux_secureboot_converging_pac... 
"Converging image and package based OS updates"
Desktop-GNOME: Ready for Release, but not released
Technically everything is working and release quality in MicroOS 
GNOME. NO KNOWN BLOCKERS! \o/
Not yet formally released
Tests are needed
PR/Marketing needed
Desktop-KDE: Still Alpha, discussions about maybe considering it Beta, 
in the hands of the (lone) main maintainer.
Next Steps after release
1. mod-check
Working on a "mod-check" tool to report the following to users
List of installed (1st party) packages, with comparisions to both an 
upstream pristine list and previous snapshots
Automatically reset official packages to that upstream pristine 
list, or previous snapshots
Any 3rd party packages and their origin
Any known unsupported configurations/alterations and offer remedies 
if possible
lkocman: is quite interested in this, as we'll be in position in 
migration leap 15.X to ALP based community offering
mod-check doesn't really 'check' as much as planned at the moment, 
instead going way further and effectively reinstalling MicroOS Desktop 
(GNOME) in place, making that new snapshot the new boot target. This 
will be awesome for any user who wants to 'freshen' up an otherwise 
heavily altered MicroOS Desktop, or when major Tumbleweed/MicroOS 
changes occur that otherwise cant be easily modeled in patterns. It also 
potentially could be a method of migrating non-transactional systems to 
a transactional one. Heavy testing/development underway..and possibly a 
rename if mod-check doesn't start actually -checking stuff soon.
2. YaST-less installation media with FDE by default
Bugs still WIP
osinfo-db still doesn't recognise MicroOS as a seperate distribution 
- debates with upstream ongoing
## Max
Leap 15.5
* The orphan package issue occurred in the last Leap build should be 
fixed, the problem should disappear in the next build
* KDE updates is still pending in staging project, it has been just 
missing the legal review, but KDE staging now has a lot of build fails, 
need to update those pending submissions to a working version if 
qt/kdelibs update already accepted into SLE15, will talk to Antonio
** Correction: recheck it, it turned out the contrary, KDE staging have 
got updated, but qt/kdelibs part is pending for SLE15 SP5
* I'll file the last pacakge updater from Factory to Backports, after we 
entering Beta phase I'll not trigger that updater
## Guillaume - Arm
Not available
Tumbleweed:
     * Blocked due to a broken binutils patch for armv7. Will be 
unblocked by https://build.opensuse.org/request/show/1060656
     * WiFi works again on RPi3/4 (and other systems): 
https://bugzilla.suse.com/show_bug.cgi?id=1206697
     * Pointer Authentication issue, seen in zypper has been fixed: 
https://bugzilla.suse.com/show_bug.cgi?id=1206684
     * NVIDIA: tester with aarch64 server and NVIDIA card wanted
         - Proprietary drivers are now available for aarch64 (only G06): 
https://download.nvidia.com/opensuse/tumbleweed/
         - New opengpu driver also available in OBS: 
https://build.opensuse.org/project/monitor/X11:Drivers:Video
lkocman to check on who is the aarch64 + nvidia effort blocked on. I 
recall that there was a chosen point of contact.
Leap:
     * 15.5 aarch64: covered by Leap section above
     * 15.5 armv7: no blocker
ALP:
     * No aarch64 specific issues
WSL:
     * Works with x86 emulator since appx installer is x86-64, but this 
is not really an issue since arm64 Win11 includes x86 emulator by 
default.
Steps documented on the wiki to install the appx from download.o.o: 
https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server
## Sarah - s390x
Tumbleweed
* Tumbleweed is rolling
Leap:
* tests are failing because of timeout: Last year there was a SLE bug 
report (not accessible for the community)
* qore updated, but qore-doc is included in qore and should be manually 
removed from factory:
https://build.opensuse.org/request/show/1063674?notification_id=37988455
Sarah needs a help on the request^ => fixed
Presentation at FOSDEM about Linux Distributions Collaboration and 
Upstream Collaboration in the Linux Distributions Working Group at the 
Open Mainframe Project: 
https://fosdem.org/2023/schedule/event/open_mainframe_project/
-> CentOS Stream want to join and there is the requirement for an equal 
Working Group for PowerPC
Sarah will give the next presentation (via Accenture) at Chemnitzer 
Linuxtage. They want to represent also the Open Source Projects 
Accenture employees are contributing to.
## Doug
* Need to order marketing material for CLT & SCALE
* GSoC
* Application submitted
* Completed meetup
* New projects added
* oSC23
* Waiting on contract signature (in legal review)
* 20 registered, 13 submissions
lkocman: did send an experimental e-thank yous. Did it work?
Axel: issue with the time on the email. lkocman will look into it.
* FOSDEM
* Good turnout
* Thank you to all the volunteers who helped with the booth
* Find videos at https://video.fosdem.org/2023/
* 
https://ftp.fau.de/fosdem/2023/UA2.114%20(Baudoux)/containerised_apps.webm
* 
https://ftp.fau.de/fosdem/2023/UA2.114%20(Baudoux)/open_mainframe_project.we...
* Taking care of TSP requests
* FLOSS Weekly https://twit.tv/shows/floss-weekly
* Podcast scheduled this evening
## Dirk
Not available
* Initial x86_64-v3 glibc hwcaps package has landed in Factory (libxmlb 
- visible in GNOME repositories openqa runs)
* Determine list of extra shared libraries to enable (likely all 
compression and media decoding libraries (libpng, jpeg and so on)
* Helped with OpenSSL 3.x switch and Python 3.11 modules enablement
* Starting to draft 
https://en.opensuse.org/openSUSE:OpenSUSE_Tumbleweed_Maintainer_Policy 
(draft, will be announced on the mailing list when ~ ready)
DimStar: ~150 python modules are currently failing with 3.11, a lot of 
fallout is expected.
(enabling 3.11 will roughly double those numbers judging from the 
current devel project state)
* Continued work on SUSE:ALP:RISCV
* force published 15.4 and 15.5 for armv7 builds, openqa builds have 
been triggered it appears it is set to do post-release testing?
* qemu/libseccomp 15.5 failure still in investigation
  Biggest speedup can be observed by switching zlib to zlib-ng, so looked 
into fixing the build failures caused by switching to zlibo-ng-compat
## Wolfgang (Package Hub), Scott Bahling
Not available
Discussion about moving ipxe package to SLE and release ipxe-bootimgs 
for x86_64 and aarch64 to HPC-Module (SLE-15-SP5). Needs to be accepted 
by Michal Svec. If that is the case ipxe will be removed from 
openSUSE:Backports:SLE-15-SP5 and subpackage ipxe-bootimgs for ppc64le 
and s390x will be released via subpackages repository.
Need to sync with Max regarding the package list for subpackages 
repository for SLE-15-SP5 when he is back from vacation.
15 SP5 Package HUB channel is set up. Stefan did initial testing and 
looks good.
Some packages are still missing, this is on agenda for today and next 
week.
The workshop regarding Package HUB equivalent for ALP
Lubos will schedule a call with wolfgang and Scott to ensure that 
they're in loop for the High Level requirements document.
https://en.opensuse.org/openSUSE:ALP/Workgroups/Community/Workshops/Consumig...
Package Hub for SLE-15-SP5 product definition added and SCC is currently 
picking it up so it will be ready for testing with the beta of 
SLE-15-SP5
## Maintenance team (Marcus or Maurizio (m4u))
Fixed a long standing issue with gnome-music that was blocking openqa 
for a long time.
15.4 is working
5.3 is working
15.5 setup TBD (Mid-to-End February would be preferred).
lkocman needs to do official 15.5 Maint setup request beta in ~2 weeks
Nothing worrysome, preannoucement for 15.3 EOL was sent to mainling list 
End of December 2022.
There were three chromium updates in single week.
lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, 
as it seems we will not produce. As this was the last release which you 
could still get on a physical media.
Lkocman: anything against decomissioning it?
Configuration setup problem for Maintenance of Leap 15.4 maintenance 
updates / openQA
Marcus regarding Leap 15.4 Image respin - package set will change, we do 
need to refresh the packagelist
* Lubos to talk to Jan Stehlik, we can't put all on Marcuses shoulder.
https://etherpad.opensuse.org/p/ReleaseEngineering-20221110-maintenance-disc...
Confirmation that QA/QA-maint team will oversee the setup (issues)
Lubos: I was asked to provide requirements for the QA team. Mostly for 
the GA/current release but also for the update.  Lubos will make wiki 
with requirements (something like maintenance plan perhaps). Marcus will 
review it.
* Leap Micro 5.3 maint setup done
ffmpeg - (still unsolved) possible file conflict on the next update, no 
idea how to avoid vendor switching at the moment.
Removing the patch on the openSUSE side (that might contain security 
fixes) or releasing update on the packman side could fix the issue.
Lubos to give Marcus some working contact for the team.
## Adrian - OBS
Heads up: working on spdx sbom data generation for containers
After changing the signing key of Factory without rebuilding the 
distribution "osc build" using
chroot builds run into the problem that gpg verification of the rpm's 
failed.
To tell osc to use also the old gpg key we introduced a temporary 
openSUSE:Tumbleweed:OldKey project. We will remove this project again 
after full rebuild of Factory.
This should work for all arches. Users get additional question if they 
want to trust the additional project once.
This solves the issue for people who build against 
openSUSE:Tumbleweed/standard or openSUSE:Factory/snapshot. It does not 
solve it when building against openSUSE:Factory/standard directly (not 
the default in OBS).
Dirk: Recommended solution is to use the kvm build (add `build-type = 
kvm` to your ~/.oscrc)
Adrian: Agreed that we should aim for switching the osc default here 
(also wanted by security team). Still some issues to solve to make it 
more convinient.
## Project maintainer work flow Status
* Base policy to be developed
Background on topic found at 
https://etherpad.opensuse.org/p/ReleaseEngineering-20221221
For me it comes down to a matter of communication.
A note like 'thx for your SR, I think we should adapt the following ' or 
' we are reviewing your SR, and quite stuck with work...' could already 
change a lot. Silence for more then 4 week is clearly a perfect way to 
annoy contributors.
And the question should be asked if those unresponsive maintainers are 
still willing to maintain their projects. Or they may even not be active 
anymore, another discussion we are having