Originally published at: Infra and RelEng Update - Week 20 2025 – Fedora Community Blog
This is a weekly report from the I&R (Infrastructure & Release Engineering) Team. We provide you both infographic and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.
Week: 12th – 16th May 2025
Infrastructure & Release Engineering
The purpose of this team is to take care of day to day business regarding CentOS and Fedora Infrastructure and Fedora release engineering work.
It’s responsible for services running in Fedora and CentOS infrastructure and preparing things for the new Fedora release (mirrors, mass branching, new namespaces etc.).
List of planned/in-progress issues
Fedora Infra
- In progress:
- Switching openqa stg to nftables
- docs.fedoraproject.org timeouts from Mauritius
- Move copr_hypervisor group from iptables to nftables
- tmpwatch removed from ansible
- please don’t remove enrolled centos machines from IPA in staging
- wiki upgrade before f40 eol
- redeploy aws proxies
- Disable self-serve project creation on pagure.io
- Link in staging distgit instance leads to prod auth
- re-add datagrepper nagios checks (and add to zabbix?)
- Fix logrotate on kojipkgs01/02
- 2025 datacenter move (IAD2->RDU3)
- Broken link for STG IPA CA certificate, needed for staging CentOS Koji cert
- [CommOps] Open Data Hub on Communishift
- retire easyfix
- Deploy Element Server Suite operator in staging
- Pagure returns error 500 trying to open a PR on https://src.fedoraproject.org/rpms/python-setuptools-gettext
- maubot-meetings bot multi line paste is cut
- setup ipa02.stg and ipa03.stg again as replicas
- Move OpenShift apps from deploymentconfig to deployment
- The process to update the OpenH264 repos is broken
- httpd 2.4.61 causing issue in fedora infrastructure
- Support allocation dedicated hosts for Testing Farm
- EPEL minor version archive repos in MirrorManager
- Add fedora-l10n pagure group as an admin to the fedora-l10n-docs namespace projects
- vmhost-x86-copr01.rdu-cc.fedoraproject.org DOWN
- Add yselkowitz to list to notify when ELN builds fail
- Cleaning script for communishift
- Move from iptables to firewalld
- Port apps to OIDC
- Help me move my discourse bots to production?
- Replace Nagios with Zabbix in Fedora Infrastructure
- Migration of registry.fedoraproject.org to quay.io
- Done:
- fedoraproject.org returns 404
- `proxy35.fedoraproject.org` returns 404 for metalink URL
- remove me as maintainer or co-maintainer from all packages
- SSH pubkey synchronization issue of src.fedoraproject.org
- accounts.fedoraproject.org is not responding
- dm-zoned-tools & zonefs-tools: I am not inactive…
- Unexpected sys_age = -1 in count me stats
- FAS dumpy is spamming folks on matrix, please block the account and ban from matrix
- Spam in devel list
- [FMTS] TLS certificate for centos-odcs-private-queue service is about to expire in 30 days
- [FMTS] TLS certificate for centos-odcs service is about to expire in 30 days
- FedoraQA – Blockerbugs – OIDC setup
- Inactive packagers for the F42 cycle
- FedoraQA – Testdays – OIDC setup
- Create a POC integration in Konflux for fedora-infra/webhook-to-fedora-messaging
CentOS Infra including CentOS CI
- In progress:
- Release Improvements
- CentOS Stream mirror centos-stream.koyanet.lv rsync access change
- Create new tags for oVirt 4.5 on CentOS Stream 10
- Wrapper to check / create projects on GitLab using the REST API
- Write a script to cleanup Duffy DB after retiring a pool
- Missing s390x extras/extras-common repo
- [spike] : investigating ppc64le kvm host option with el9/el10 (for Power10)
- [spike] : investigating needed deps (poetry) for duffy on el9
- [spike] : investigating options/alternatives for the upcoming DC move
- Done:
- deploy new fedora-messaging TLS certs for ODCS
- install koji-image-builder-cli on Jenkins runner
- fix the selinux mock label issue
- download.autosd.sig.centos.org DNS update
- [Virt SIG] create tags/targets for CentOS Stream 10 kvm ppc64le
- Sponsored machine to be migrated/reinstalled
- create Oauth2 tokens for testing instance for OpenQA CentOS stream testing purposes
- Add proposed-updates c9s and c10s tags to hyperscale9s and hyperscale10s tags
- Ensuring ansible automation in place can manage/control el10 nodes
- (Cloud SIG) OKDerator CI/CD space
- Modify ansible roles for nftables
Release Engineering
- In progress:
- F42 Post Release Cleanup
- Fix OpenH264 tagging issues
- Turn EPEL minor branching scripts into playbooks
- Mass retirement of packages with uninitialized rawhide branch
- Please send openh264-2.6.0 to Cisco
- 300+ F42FTBFS bugzillas block the F41FTBFS tracker
- Packages that have not been rebuilt in a while or ever
- Send compose reports to a to-be-created separate ML
- Could we have fedoraproject-updates-archive.fedoraproject.org for Rawhide?
- Investigate and untag packages that failed gating but were merged in via mass rebuild
- a few mass rebuild bumps failed to git push – script should retry or error
- Package retirements are broken in rawhide
- Update pungi filters
- Implement checks on package retirements
- Untag containers-common-0.57.1-6.fc40
- Provide stable names for images
- Packages that fail to build SRPM are not reported during the mass rebuild bugzillas
- When orphaning packages, keep the original owner as co-maintainer
- Create an ansible playbook to do the mass-branching
- RFE: Integration of Anitya to Packager Workflow
- Fix tokens for ftbfs_weekly_reminder. script
- Update bootloader components assignee to “Bootloader Engineering Team”for Improved collaboration
- Done:
- at-spi2-core updates pushed in wrong order
- Please add Fedora-ELN-WSL-Base to eln tag
- Untag 7zip-24.09-2.fc43 and 7zip-24.09-3.fc43
- Orphan python-migrate
- failing builds on an i686 koji builder (>2^32 inode numbers in btrfs again?)
- Stalled EPEL package request: python-nltk
- Please tag EPEL 10 Haskell builds also into epel10.1
- consider adding iot iso image to torrents
If you have any questions or feedback, please respond to this report or contact us on #redhat-cpe channel on matrix.