15:00:14 <mboddu> #startmeeting RELENG (2020-07-14)
15:00:14 <zodbot> Meeting started Tue Jul 14 15:00:14 2020 UTC.
15:00:14 <zodbot> This meeting is logged and archived in a public location.
15:00:14 <zodbot> The chair is mboddu. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:00:14 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
15:00:14 <zodbot> The meeting name has been set to 'releng_(2020-07-14)'
15:00:14 <mboddu> #meetingname releng
15:00:14 <zodbot> The meeting name has been set to 'releng'
15:00:14 <mboddu> #chair nirik sharkcz pbrobinson pingou mboddu dustymabe ksinny jednorozec
15:00:14 <zodbot> Current chairs: dustymabe jednorozec ksinny mboddu nirik pbrobinson pingou sharkcz
15:00:15 <mboddu> #topic init process
15:00:27 <nirik> morning
15:01:43 <jednorozec> hello
15:03:17 <mboddu> How is it going guys?
15:04:13 <nirik> hard to tell yet, just sat down. ;)
15:06:18 <jednorozec> well, I have just noticed that half of the nodejs stack is going to be probably retired
15:07:25 <mboddu> jednorozec: Due to no maintainer or non buildable?
15:07:37 <jednorozec> mboddu, maintainer
15:07:42 <mboddu> nirik: I am not seeing any fires yet, thats good :)
15:07:47 <mboddu> jednorozec: Okay
15:07:53 <mboddu> Well, lets get started
15:07:56 <mboddu> #topic #9577 Fedora Media Writer 4.1.6 released
15:08:04 <mboddu> #link https://pagure.io/releng/issue/9577
15:08:28 <mboddu> nirik: You are up
15:08:35 <mboddu> Any luck with the win cert?
15:09:14 <nirik> we got it now.
15:09:22 <nirik> but I haven't done anything further with it.
15:09:55 <nirik> do we have a sop on this stuff? or do I need to dig thru old irc logs?
15:10:55 <nirik> ah, we do
15:10:58 <mboddu> nirik: Well, there is a SOP but its for old style
15:11:01 <nirik> https://docs.pagure.org/releng/sop_fedora_media_writer.html
15:11:03 <mboddu> As in virtual cert
15:11:32 <mboddu> nirik: Did you get a physical copy or ?
15:12:06 <mboddu> I mean physical USB with cert in it or ?
15:12:12 <nirik> what do you mean? it's in an email from digicert. ;)
15:12:26 <nirik> yes, they email certs/keys
15:12:32 <mboddu> Huh?
15:12:47 <mboddu> There goes the security :P
15:14:06 <nirik> well, it's encrypted smtp... but yeah
15:14:19 <nirik> anyhow, if you like I can get you a copy.
15:14:30 <nirik> and jednorozec if he likes
15:15:15 <mboddu> nirik: Sure, that would help
15:15:22 <mboddu> Based on https://en.sklep.certum.pl/data-safety/code-signing-certificates/certum-ev-code-sigining.html
15:15:36 <mboddu> "Certum EV Code Signing Suite contains: USB token combining a smart card reader and a Micro-SD card slot, cryptographic smart card, instructions."
15:15:44 <mboddu> That is what we used before
15:16:29 <mboddu> And I thought they are not allowing any distribution of certs using virtual means, its all hardware (USB) distributions
15:16:39 <nirik> ah, thats all old.
15:17:41 <mboddu> Okay
15:18:34 <mboddu> Anyway...
15:19:11 <mboddu> #topic nirik was able to get a hold of the windows signing cert, he will try to sign the FMW deliverables when he gets a chance
15:19:18 <mboddu> #undo
15:19:18 <zodbot> Removing item from minutes: <MeetBot.items.Topic object at 0x7f5b1b284950>
15:19:29 <mboddu> #info nirik was able to get a hold of the windows signing cert, he will try to sign the FMW deliverables when he gets a chance
15:19:57 <nirik> the mac one will be more anoying probibly.
15:22:11 <jednorozec> nirik, send the cert my way as well, please.
15:22:27 <nirik> jednorozec: sure, whats you rh address again?
15:22:34 <jednorozec> nirik, thrcka@redhat
15:22:49 <mboddu> nirik: Yeah, I have never done mac signing
15:23:38 <nirik> mboddu: well, my mini has been in a box for years... hopefully it still works and I can remember any passwords I set on it to login. ;)
15:24:12 <mboddu> nirik: Exactly same problem and I dont even have my mini with me
15:25:05 <nirik> do either of you have a windows machine to test the exe?
15:26:19 <mboddu> nirik: Nope :(
15:26:26 <jednorozec> I do
15:27:05 <nirik> ok, cool. might ask you to test... or if you all want to work on signing the win one I can work on the mac one.
15:27:06 <mboddu> But I can get it verified (thanks to friends) :D
15:27:42 * jednorozec has no clue about SW signing
15:27:55 <mboddu> jednorozec: https://docs.pagure.org/releng/sop_fedora_media_writer.html might help
15:28:42 <jednorozec> nirik, mboddu ok so let me try to sign and test the exe
15:28:56 <nirik> yeah, I have no idea if that process will work, but it's a place to start.
15:29:32 <jednorozec> nirik, so lets split the work.
15:29:57 <nirik> sure, sounds good to me if you all are willing...
15:30:58 <jednorozec> I will never say no to the new opportunity for hair loss!
15:31:02 <mboddu> okay, I have got access to a windows machine
15:31:03 <nirik> and we can sign/publish one independent of the other too.
15:32:03 <mboddu> jednorozec: How do you think I lost my hair :P
15:35:28 <nirik> anything else on this one?
15:37:07 <mboddu> nirik: I was searching for the login to mac mini and I couldn't find it
15:37:27 <mboddu> I have to check with Dennis again as he handed it over to me
15:37:55 <mboddu> #topic #9408 Tag ghc into EPEL8 buildroot for ghc bootstrap
15:38:02 <mboddu> #link https://pagure.io/releng/issue/9408
15:38:48 <nirik> ah yeah, I never got back around to looking at this one after the last round
15:39:15 <nirik> I changed the centos ones for the rhel ones...
15:39:53 <nirik> but that's confused koji. perhaps we should delete the external repo and re-add it? with a different name?
15:40:07 * mboddu checking how I set it up
15:43:40 <mboddu> nirik: Whats the change you made?
15:45:46 <nirik> I moved all the old directories and replaced them with new directories with the red hat rpms.
15:46:09 <nirik> so I am confused why koji would see any .centos there
15:46:46 <nirik> or the old hashes.
15:47:06 <nirik> so it must have them in the db
15:50:38 <mboddu> nirik: Since they are crb builds, you got the builds and replaced the centos rpms with these crb builds?
15:51:30 <mboddu> you got the builds from rhel*
15:51:32 <nirik> crb? but yes
15:51:59 <mboddu> Okay
15:52:16 <mboddu> I guess removing the external repo and adding it again might work
15:52:32 <mboddu> Shall I try that?
15:52:36 <nirik> worth trying... you want me to, or you want to?
15:52:55 <mboddu> nirik: I can try it
15:53:10 <nirik> cool. hopefully that does it.
15:53:14 <mboddu> #info mboddu will remove the external repo and try adding it again that might fix this
15:53:21 <mboddu> #topic Open Floor
15:53:25 <mboddu> Anybody got anything?
15:53:44 <nirik> I've added some more arm hardware back in...
15:53:52 <nirik> and rawhide compose last night was...
15:54:11 <nirik> a bit under 5 hours
15:54:26 <nirik> hopefully we can get it down some more.
15:54:48 <nirik> the 2 longest phases are:
15:54:50 <nirik> Compose phase BUILDINSTALL time: 1:57:15.
15:54:50 <nirik> Compose phase GATHER time: 2:51:24.
15:55:07 <nirik> not sure how to make them faster off hand. ;(
15:56:01 <mboddu> nirik: If we can improve caching on gather phase that might help
15:56:23 <mboddu> But yeah, thats a great jump
15:56:41 <nirik> I am not sure we are using fully the 'reuse the last compose' stuff
15:56:48 <mboddu> I dont think so
15:57:13 <mboddu> PDC was supposed to solve some of it, but thats a bust
15:57:31 <nirik> we are using some of it, but not gather_allow_reuse (false by default)
15:58:36 <nirik> not sure the implications there tho
15:58:45 <mboddu> We can look at it and check with lsedlar about it
15:59:08 <nirik> yeah. Might be worth trying a compose with it and backing it out if it casuses issues.
15:59:27 <nirik> thats all I had
16:00:02 <mboddu> Thanks nirik
16:00:18 <mboddu> We are sharp on time
16:00:29 <mboddu> Lets close it for today
16:00:33 <mboddu> Thanks everyone for joining
16:00:36 <mboddu> #endmeeting