Some small Sourceware updates

Posted May 29, 2025 1:55 UTC (Thu) by mjw (subscriber, #16740)
Parent article: Glibc project revisits infrastructure security

Thanks, that is a good overview of the current state. We really should update the Sourceware infrastructure security page with recent updates on the isolated services and the pull-request server, which turned into forge.sourceware.org (an experiment with Forgejo) also hosted in the Red Hat Community Cage on a separate VM now.

The opportunity to move to separate containers or VMs is not (just) because of the move to a new datacenter, but because Red Hat has been so generous to host an extra (bigger) server in the new community cage for us. That server will be installed before the move. So we have some time to setup the services on a new setup on a server big enough to run multiple VMs. And then we have three physical servers in the new place, after the existing servers also move there, to have extra redundancy.

to post comments

Some small Sourceware updates

Posted Jun 1, 2025 23:11 UTC (Sun) by mjw (subscriber, #16740) [Link]

The article is correct that the https://sourceware.org/sourceware-security-vision.html#plans page hadn't been updated for some time. There are some updates now. Also we added a sponsor@sourceware.org address to https://sourceware.org/donate.html in case people want to talk about sponsoring, donating hardware, services, etc.

We do like to not be totally dependent on corporate sponsorship, so we also take individual donations and grants. And encourage people to become Software Freedom Conservancy sustainers https://sfconservancy.org/sustainer/ and/or donate to the OSU Open Source Lab https://osuosl.org/donate