openSUSE Release Engineering minutes January 26

All meeting minutes can be found here:
https://etherpad.opensuse.org/p/ReleaseEngineering-meeting
Meeting is hosted here
https://meet.opensuse.org/ReleaseEngineeringMeeting

## Attendees

rbrown, DimStar, lkocman, dirk, wengel, DocB, ddemaio

**THE MEETING ON 1ST of FEBRUARY WILL BE SKIPPED DUE TO HACKWEEK**
https://hackweek.opensuse.org/

## Leap

Code submission deadline for SLES 15 SP5 Beta4 is today (Jan 25th) at
15:00.

Leap Builds were stuck on
https://bugzilla.opensuse.org/show_bug.cgi?id=1207395 and previously
https://bugzilla.suse.com/show_bug.cgi?id=1206718 
Due to this we were not able to produce a decent build that would give
us good idea about quality. I'm bit worried that the actual beta
release might be delayed.

Cisco openh264 setup is finialized on our side
https://news.opensuse.org/2023/01/24/opensuse-simplifies-...

## openSUSE Tumbleweed

openSUSE:Factory build fail stats: 217 failed 16 unresolvable (last
week: 21 / 24)
  https://tinyurl.com/ysy4nnnz

* Staging:H Ruby 3.2 made some progress, only 3 more yast build fails
(y2-config-management, y2-packager, y2-storage-ng)
* Staging:L has a few failures collected:
    * boost: breaks libreoffice (incl. libetonyek)
    * gpg2: breaks gpgme
    * ant and xmlgraphics-common: breaking ant-antlr and xmlgraphics-
fop
* Staging:M test to also build python311 modules
* Staging:N openssl-3-as-default testing: almost ready! All build fails
have been fixed (or are in the queue)
* Staging:O: preparation work to identify the minimal list of 'i586'
builds to enable in openSUSE:Factory to allow wine/steam to
build/install (currently 992 packages, and counting; big part of it is
for rpmlint and such things)
* Staging:Gcc7: early experiments to set GCC 13 as distro compiler

* openSUSE:Factory has switched to a 4k RSA key
  * https://news.opensuse.org/2023/01/23/new-4096-bit-signing...
  * osc build (with chroot) complains about missing keys (we did not do
a full rebuild, osc gets the 4k project key, RPMs are signed with the
2k key. workaround: use osc build --vm-type=kvm (setup oscrc to have
sufficient ram and disk size; I use 2GB of RAM and 10GB disk for most
cases)

i586 carve-out from Factory
=> Migration (manual so far) is possible for users. The first 'zypper
dup' after changing the repo could include a bunch of 'package
downgrades' as the rebuild counters are not synced across projects.
Automatic migration of users (by means of openSUSE-release) will happen
by end of January (giving the braves ones time to test and report
issues before we mass-switch)

## Richard (MicroOS) 

Desktop-GNOME: The Road to Release:
transactional-update-notifier is in Factory! WIP making it configured
by default
Working on a "mod-check" tool to report the following to users
List of installed (1st party) packages, with comparisions to both an
upstream pristine list and previous snapshots
Automatically reset official packages to that upstream pristine list,
or previous snapshots
Any 3rd party packages and their origin
Any known unsupported configurations/alterations and offer remedies if
possible

mod-check doesn't really 'check' as much as planned at the moment,
instead going way further and effectively reinstalling MicroOS Desktop
(GNOME) in place, making that new snapshot the new boot target. This
will be awesome for any user who wants to 'freshen' up an otherwise
heavily altered MicroOS Desktop, or when major Tumbleweed/MicroOS
changes occur that otherwise cant be easily modeled in patterns. It
also potentially could be a method of migrating non-transactional
systems to a transactional one. Heavy testing/development underway..and
possibly a rename if mod-check doesn't start actually -checking stuff
soon.

Bugs still WIP
osinfo-db still doesn't recognise MicroOS as a seperate distribution -
debates with upstream ongoing

Working on YaST-less installation media with FDE by default

## Max

Leap Micro 5.4
* The project has been bootstrapped
* The missing bits
** Tweak Leap specific patches
** Enable pkglistgen
lkocman: is on it

Leap 15.5
* The fixed kernel for bsc#1206718 has got merged to SLE15-SP5(just
yesterday) 
* Build stats in Backports(x86_64): 8 unresolvables, 59 fails(last
week: 8 unresolvables, 54 fails)

## Guillaume - Arm

Tumbleweed:
    * Blocked due to a broken binutils patch for armv7. Will be
unblocked by https://build.opensuse.org/request/show/1060656
    * WiFi works again on RPi3/4 (and other systems):
https://bugzilla.suse.com/show_bug.cgi?id=1206697
    * Pointer Authentication issue, seen in zypper has been fixed:
https://bugzilla.suse.com/show_bug.cgi?id=1206684
    * NVIDIA: tester with aarch64 server and NVIDIA card wanted
        - Proprietary drivers are now available for aarch64 (only G06):
https://download.nvidia.com/opensuse/tumbleweed/
        - New opengpu driver also available in OBS:
https://build.opensuse.org/project/monitor/X11:Drivers:Video

lkocman to check on who is the aarch64 + nvidia effort blocked on. I
recall that there was a chosen point of contact.
Leap:
    * 15.5 aarch64: covered by Leap section above
    * 15.5 armv7: no blocker

ALP:
    * No aarch64 specific issues

WSL: 
    * Works with x86 emulator since appx installer is x86-64, but this
is not really an issue since arm64 Win11 includes x86 emulator by
default.
Steps documented on the wiki to install the appx from download.o.o:
https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openS...


## Sarah - s390x

Tumbleweed
* kdump is fixed (with calibrate.conf by SLE because of blocked builds
for s390x)
-> Tumbleweed is rolling again
Leap:
* tests are failing because of timeout (my next ToDo)
    
* qore updated


Question:
    What should we do with packages buildable only on s390x and not on
x86?
    Example:
   
https://build.opensuse.org/package/show/home:AdaLovelace:...
    
lkocman: I'd start with a bug against the package, then let's agree on
next steps with maintainer.
Please use bug against openSUSE.org choose 3rd party package. Can be
used for anything that is from OBS.

## Doug
* articles
* 4096 bit RSA signing key published (thx to mmeissner)
* openh264 article published
* openSUSE Community booth at CLT2023
lkocman: Do we have some sort of list/calendar with events  where
openSUSE is usually present?
* GSoC
* Updating GSoC wiki pages
* New projects being added
* Additional admins added
* Application nearly complete. 
* Need to complete "How many potential mentors have agreed to mentor
this year?"
* Workshop to finalize projects & application scheduled for on Feb. 7
(deadline at 18:00 UTC)
* oSC23
* Waiting on contract signature (in legal review)
* 13 registered, 9 submissions
* FOSDEM
* Booth in Building/Hall H (we have traditionally be in Building/Hall
K)
* Bus has 29 sign ups
* Passangers to be briefed on bus departure location
* Contact ddemaio if you're in Nuremberg and want to take the bus to
FOSDEM. Space may be limited.
* FLOSS Weekly
* Test call on 26.01
* Podcast scheduled for Feb. 8


## Dirk

* Initial x86_64-v3 glibc hwcaps package has landed in Factory (libxmlb
- visible in GNOME repositories openqa runs)
* Determine list of extra shared libraries to enable (likely all
compression and media decoding libraries (libpng, jpeg and so on)
* Helped with OpenSSL 3.x switch and Python 3.11 modules enablement
* Starting to draft
https://en.opensuse.org/openSUSE:OpenSUSE_Tumbleweed_Main...
(draft, will be announced on the mailing list when ~ ready)
DimStar: ~150 python modules are currently failing with 3.11, a lot of
fallout is expected.
(enabling 3.11 will roughly double those numbers judging from the
current devel project state)

* Continued work on SUSE:ALP:RISCV 
* force published 15.4 and 15.5 for armv7 builds, openqa builds have
been triggered it appears it is set to do post-release testing?
* qemu/libseccomp 15.5 failure still in investigation
 Biggest speedup can be observed by switching zlib to zlib-ng, so
looked into fixing the build failures caused by switching to zlibo-ng-
compat

## Wolfgang (Package Hub), Scott Bahling

Discussion about moving ipxe package to SLE and release ipxe-bootimgs
for x86_64 and aarch64 to HPC-Module (SLE-15-SP5). Needs to be accepted
by Michal Svec. If that is the case ipxe will be removed from
openSUSE:Backports:SLE-15-SP5 and subpackage ipxe-bootimgs for ppc64le
and s390x will be released via subpackages repository.

Need to sync with Max regarding the package list for subpackages
repository for SLE-15-SP5 when he is back from vacation.

15 SP5 Package HUB channel is set up. Stefan did initial testing and
looks good.
Some packages are still missing, this is on agenda for today and next
week.
The workshop regarding Package HUB equivalent for ALP
Lubos will schedule a call with wolfgang and Scott to ensure that
they're in loop for the High Level requirements document.

https://en.opensuse.org/openSUSE:ALP/Workgroups/Community...

Package Hub for SLE-15-SP5 product definition added and SCC is
currently picking it up so it will be ready for testing with the beta
of SLE-15-SP5

## Maintenance team (Marcus or Maurizio (m4u))

Fixed a long standing issue with gnome-music that was blocking openqa
for a long time.

15.4 is working
5.3 is working

15.5 setup TBD (Mid-to-End February would be preferred).

Nothing worrysome, preannoucement for 15.3 EOL was sent to mainling
list End of December 2022.
There were three chromium updates in single week.


lkocman: 15.3 EOL could lead to stopping our physical Source DVD
effort, as it seems we will not produce. As this was the last release
which you could still get on a physical media.


Configuration setup problem for Maintenance of Leap 15.4 maintenance
updates / openQA
Marcus regarding Leap 15.4 Image respin - package set will change, we
do need to refresh the packagelist

* Lubos to talk to Jan Stehlik, we can't put all on Marcuses shoulder.
https://etherpad.opensuse.org/p/ReleaseEngineering-202211...
Confirmation that QA/QA-maint team will oversee the setup (issues)
Lubos: I was asked to provide requirements for the QA team. Mostly for
the GA/current release but also for the update.  Lubos will make wiki
with requirements (something like maintenance plan perhaps). Marcus
will review it.

* Leap Micro 5.3 maint setup done

ffmpeg - (still unsolved) possible file conflict on the next update, no
idea how to avoid vendor switching at the moment.
Removing the patch on the openSUSE side (that might contain security
fixes) or releasing update on the packman side could fix the issue.
Lubos to give Marcus some working contact for the team.


## Adrian - OBS

After changing the signing key of Factory without rebuilding the
distribution "osc build" using
chroot builds run into the problem that gpg verification of the rpm's
failed.
To tell osc to use also the old gpg key we introduced a temporary
openSUSE:Tumbleweed:OldKey project. We will remove this project again
after full rebuild of Factory.
This should work for all arches. Users get additional question if they
want to trust the additional project once.
This solves the issue for people who build against
openSUSE:Tumbleweed/standard or openSUSE:Factory/snapshot. It does not
solve it when building against openSUSE:Factory/standard directly (not
the default in OBS).
Dirk: Recommended solution is to use the kvm build (add `build-type =
kvm` to your ~/.oscrc)
Adrian: Agreed that we should aim for switching the osc default here
(also wanted by security team). Still some issues to solve to make it
more convinient.

## Project maintainer work flow Status
* Base policy to be developed
Background on topic found at
https://etherpad.opensuse.org/p/ReleaseEngineering-20221221

For me it comes down to a matter of communication.
A note like 'thx for your SR, I think we should adapt the following '
or ' we are reviewing your SR, and quite stuck with work...' could
already change a lot. Silence for more then 4 week is clearly a perfect
way to annoy contributors.
And the question should be asked if those unresponsive maintainers are
still willing to maintain their projects. Or they may even not be
active anymore, another discussion we are having