Forge & Forge dist-git update [22-sep-2026]

The Forge team has been busy over the past couple of weeks. Here’s what we’ve been working on:

Dist-Git Migration Planning

We’ve completed the foundational planning work for migrating Fedora’s dist-git infrastructure from Pagure to Forgejo. This involved a comprehensive analysis of all 43,425 packages across our five namespaces (rpms, flatpaks, modules, container, and tests), documenting the current Pagure permission model (#47), and designing how permissions and ACLs will work in Forgejo. We’ve created a complete design for the organization structure and team mappings (#48), and branch protection rules (#49) that will preserve the workflows packagers are familiar with while taking advantage of Forgejo’s capabilities. All of this planning documentation is available on the dist-git migration wiki at Making sure you're not a bot!

SSH Key Synchronization

SSH keys from FAS now automatically sync to Forge when you log in via OIDC (#723). This feature is currently deployed to our staging environment (https://stg.forge.fedoraproject.org) for testing only and is not yet available on production. Once validated, it will make it much easier to use Forge without manually managing SSH keys in multiple places.

Automated Backups

We’ve implemented a fully automated backup solution for dist-git running on OpenShift (#744, #746, #747). Previously, backups required manual intervention using pod access, but the new system runs scheduled backups automatically and transfers them to durable external storage. This eliminates a manual operational task and provides a solid foundation for when dist-git goes into production.

Private Issues Development

We’ve continued work on the private issues feature, which will enable sensitive security and infrastructure discussions on Forge. Recent work has focused on fixing comment functionality (#705), resolving backend errors, and improving the UI to ensure private issues are visually distinct in notifications and throughout the interface (#713, #711, #712, #782). Several UI improvements and test coverage additions are currently in code review.

Infrastructure and Maintenance

We’ve doubled the size of our runner VM to support approximately 30 concurrent Forgejo Actions runners (#783), which prevents timeouts during high-load periods. We’ve also packaged Forgejo 15.0.8 and 15.0.9 LTS releases (#787, #791) for Fedora repositories and rebased our main branch on the latest upstream (#785).

For more details, see the full overview at Making sure you're not a bot!

Links:

Thanks,

The Forge Team

2 Likes

@ryanlerch, thank you for the update and for working on this! Re. the distgit planning topic, I see a few gaps in the ACL structure doc. Is this still in draft form or are you looking for feedback? If so, where would you like feedback posted?

Also, for future distgit-related topics/announcements, it’d be good to cross-post them to the devel@ list since that’s where packaging-related discussion primarily happens. FESCo also has tickets to track the dist-git and Bugzilla replacement work.

I left feedback in Making sure you're not a bot!. If that’s not the right place, let me know.