Originally published at: Infra and RelEng Update - Week 26 – Fedora Community Blog
This is a weekly report from the I&R (Infrastructure & Release Engineering) Team. We provide you both infographic and text version of the weekly report. If you just want to quickly look at what we did, just look at the infographic. If you are interested in more in depth details look below the infographic.
Week: 23 June – 27 June 2025
Infrastructure & Release Engineering
The purpose of this team is to take care of day to day business regarding CentOS and Fedora Infrastructure and Fedora release engineering work.
It’s responsible for services running in Fedora and CentOS infrastructure and preparing things for the new Fedora release (mirrors, mass branching, new namespaces etc.).
List of planned/in-progress issues
Fedora Infra
- In progress:
- no Matrix notifications from FMN since June 15
- [FMTS] TLS certificate for gitlab-centos service is about to expire in 30 days
- Decommission provisioning.fp.org
- Planned Outage – Datacenter Move outage – 2025-06-30 01:00 UTC
- Please register my testing instance of Fedora Infrastructure apps to OIDC
- Forgejo: Owner access to @jflory7 for @CommOps
- Move copr_hypervisor group from iptables to nftables
- tmpwatch removed from ansible
- please don’t remove enrolled centos machines from IPA in staging
- RFR: Requesting a new FAS Group: Phosh SIG
- Link in staging distgit instance leads to prod auth
- re-add datagrepper nagios checks (and add to zabbix?)
- Fix logrotate on kojipkgs01/02
- 2025 datacenter move (IAD2->RDU3)
- Broken link for STG IPA CA certificate, needed for staging CentOS Koji cert
- [CommOps] Open Data Hub on Communishift
- retire easyfix
- Deploy Element Server Suite operator in staging
- Pagure returns error 500 trying to open a PR on https://src.fedoraproject.org/rpms/python-setuptools-gettext
- maubot-meetings bot multi line paste is cut
- Move OpenShift apps from deploymentconfig to deployment
- The process to update the OpenH264 repos is broken
- httpd 2.4.61 causing issue in fedora infrastructure
- Support allocation dedicated hosts for Testing Farm
- EPEL minor version archive repos in MirrorManager
- Add fedora-l10n pagure group as an admin to the fedora-l10n-docs namespace projects
- vmhost-x86-copr01.rdu-cc.fedoraproject.org DOWN
- Add yselkowitz to list to notify when ELN builds fail
- Cleaning script for communishift
- Move from iptables to firewalld
- Port apps to OIDC
- Help me move my discourse bots to production?
- Migration of registry.fedoraproject.org to quay.io
- Done:
- the-new-hotness not filing bugzilla tickets for new releases from anitya
- TLS certificate for copr-dist-git.fedorainfracloud.org expired
- [FAS] summer-coding sponsors update
- Unable to SSH into homedir on fedorapeople.org
- serif instead of sans-serif font on the fedora login page if open sans not installed
- SSH and Git HTTPS access both blocked – Unable to contribute from Japan
- Authentication failure with Pagure Personal Access Token for git push
- redeploy aws proxies
CentOS Infra including CentOS CI
- In progress:
- expand ppc64le builders pool for Stream
- Release Improvements
- resources for OpenQA test execution
- migrate id{.stg}.centos.org to new DC
- Hardware init new RDU3 servers (part 1 / wave 0)
- Wrapper to check / create projects on GitLab using the REST API
- Prepare AWS new VPC for isolated builders
- [spike] : investigating options/alternatives for the upcoming DC move
- Done:
Release Engineering
- In progress:
- F39 Archives are still not cleaned up
- Fedora-KDE-42-1.1-x86_64-CHECKSUM has wrong ISO filename
- F40 end of life
- Fix OpenH264 tagging issues
- Turn EPEL minor branching scripts into playbooks
- Mass retirement of packages with uninitialized rawhide branch
- 300+ F42FTBFS bugzillas block the F41FTBFS tracker
- Packages that have not been rebuilt in a while or ever
- Send compose reports to a to-be-created separate ML
- Could we have fedoraproject-updates-archive.fedoraproject.org for Rawhide?
- Investigate and untag packages that failed gating but were merged in via mass rebuild
- a few mass rebuild bumps failed to git push – script should retry or error
- Package retirements are broken in rawhide
- Update pungi filters
- Implement checks on package retirements
- Untag containers-common-0.57.1-6.fc40
- Provide stable names for images
- Packages that fail to build SRPM are not reported during the mass rebuild bugzillas
- When orphaning packages, keep the original owner as co-maintainer
- Create an ansible playbook to do the mass-branching
- RFE: Integration of Anitya to Packager Workflow
- Fix tokens for ftbfs_weekly_reminder. script
- Update bootloader components assignee to “Bootloader Engineering Team”for Improved collaboration
- Done:
- libopendmarc-devel package cannot be found in EPEL-10
- out-of-date EPEL repomd.xml references, multiple mirrors, >1 week
- Please remove the `epel10` branch from the s3fs-fuse (rpms project)
- perl-PDF-API2: Creating of branch epel10.0 was not completed
- Unretire golang-github-gookit-color
- Merge f43-python side tag into f43
- make epel10-infra tags in koji
- Please send openh264-2.6.0 to Cisco
- Grant ELN automation privilege to build “secure boot” packages
If you have any questions or feedback, please respond to this report or contact us on #apps or #admin channel on chat.fedoraproject.org.