Infra and RelEng Update - Week 15

[lenkaseg (Lenka Segura)]

Originally published at: Infra and RelEng Update - Week 15 – Fedora Community Blog

This is a weekly report from the I&R (Infrastructure & Release Engineering) Team. We provide you both infographic and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.

Week: 7th April – 11th April 2025

Infrastructure & Release Engineering

The purpose of this team is to take care of day to day business regarding CentOS and Fedora Infrastructure and Fedora release engineering work.
It’s responsible for services running in Fedora and CentOS infrastructure and preparing things for the new Fedora release (mirrors, mass branching, new namespaces etc.).
List of planned/in-progress issues

Fedora Infra

• In progress:
  • redeploy aws proxies
  • Disable self-serve project creation on pagure.io
  • Link in staging distgit instance leads to prod auth
  • re-add datagrepper nagios checks (and add to zabbix?)
  • Fix logrotate on kojipkgs01/02
  • 2025 datacenter move (IAD2->RDU3)
  • Broken link for STG IPA CA certificate, needed for staging CentOS Koji cert
  • [CommOps] Open Data Hub on Communishift
  • retire easyfix
  • Add StartInstanceRefresh permission for fedora-ci-testing-farm user in AWS
  • Deploy Element Server Suite operator in staging
  • Pagure returns error 500 trying to open a PR on https://src.fedoraproject.org/rpms/python-setuptools-gettext
  • Create a POC integration in Konflux for fedora-infra/webhook-to-fedora-messaging
  • maubot-meetings bot multi line paste is cut
  • setup ipa02.stg and ipa03.stg again as replicas
  • Manage our new testing.farm domain via AWS Route53
  • Add support for creating RDS instances under `testing-farm-` prefix
  • Move OpenShift apps from deploymentconfig to deployment
  • The process to update the OpenH264 repos is broken
  • httpd 2.4.61 causing issue in fedora infrastructure
  • Support allocation dedicated hosts for Testing Farm
  • EPEL minor version archive repos in MirrorManager
  • Add fedora-l10n pagure group as an admin to the fedora-l10n-docs namespace projects
  • vmhost-x86-copr01.rdu-cc.fedoraproject.org DOWN
  • Add yselkowitz to list to notify when ELN builds fail
  • Cleaning script for communishift
  • Setup RISC-V builder(s) VM in Fedora Infrastructure
  • Move from iptables to firewalld
  • Port apps to OIDC
  • Help me move my discourse bots to production?
  • rhel9 adoption
  • Replace Nagios with Zabbix in Fedora Infrastructure
  • Migration of registry.fedoraproject.org to quay.io
• Done:
  • EPEL-10.0 returns 404
  • Docs: Antora not building new versions of some docs
  • Need OIDC credentials for fedora magazine in prod
  • an aarch64 builder is experiencing issues with networking
  • Problem with cloning via ssh keys
  • OTP locked me out of my account

CentOS Infra including CentOS CI

• In progress:
  • Missing s390x extras/extras-common repo
  • Ensuring ansible automation in place can manage/control el10 nodes
  • Retire Public CI SIG
  • [spike] : investigating ppc64le kvm host option with el9/el10 (for Power10)
  • (Cloud SIG) OKDerator CI/CD space
  • [spike] : investigating needed deps (poetry) for duffy on el9
  • Onboarding new infra SIG member
  • Migrate main backup storage pool to different hardware
  • [spike] : investigating options/alternatives for the upcoming DC move
  • Add kiwi to CentOS Stream Koji
  • Testing Jenkins – c10s x86_64 metal doesn’t provision
  • Release Improvements
• Done:
  • Increase Storage capacity for koji built artifacts
  • Missing btrfs-progs package in kiwi-build group in hyperscale10s-images-*-el10s tags
  • Decommission Leaseweb sponsored machine

Release Engineering

• In progress:
  • Accidentally created a branch in `rust-tonic-types`
  • Mass retirement of packages with uninitialized rawhide branch
  • Please send openh264-2.6.0 to Cisco
  • 300+ F42FTBFS bugzillas block the F41FTBFS tracker
  • Packages that have not been rebuilt in a while or ever
  • Send compose reports to a to-be-created separate ML
  • .sqlite metadata missing in f41-updates and f41-updates-testing repositories
  • Could we have fedoraproject-updates-archive.fedoraproject.org for Rawhide?
  • Investigate and untag packages that failed gating but were merged in via mass rebuild
  • a few mass rebuild bumps failed to git push – script should retry or error
  • Package retirements are broken in rawhide
  • Implement checks on package retirements
  • Untag containers-common-0.57.1-6.fc40
  • Provide stable names for images
  • Packages that fail to build SRPM are not reported during the mass rebuild bugzillas
  • When orphaning packages, keep the original owner as co-maintainer
  • Create an ansible playbook to do the mass-branching
  • RFE: Integration of Anitya to Packager Workflow
  • Fix tokens for ftbfs_weekly_reminder. script
  • Update bootloader components assignee to “Bootloader Engineering Team”for Improved collaboration
• Done:
  • Stalled EPEL package: python-google-auth-oauthlib
  • Unretire unshield
  • openh264 pkgs for Epel10
  • Unretire rust-size
  • Untag gnome-shell-extension-background-logo-48.0-1.fc43
  • Unorphan workrave
  • F42 stable push requests

If you have any questions or feedback, please respond to this report or contact us on #redhat-cpe channel on matrix.