fedora-server
LOGS
<@pboy:fedora.im>
18:00:11
!startmeeting fedora-server
<@meetbot:fedora.im>
18:00:12
Meeting started at 2025-03-12 18:00:11 UTC
<@meetbot:fedora.im>
18:00:13
The Meeting name is 'fedora-server'
<@pboy:fedora.im>
18:00:22
!topic Welcome / roll call
<@pboy:fedora.im>
18:00:31
As usual, let's wait a moment for everybody to show up.
<@pboy:fedora.im>
18:00:31
I'll post the agenda in 2-3 minutes.
<@jwhimpel:fedora.im>
18:01:30
!hi
<@zodbot:fedora.im>
18:01:30
John Himpel (jwhimpel)
<@pboy:fedora.im>
18:02:26
Welcome John. It's sometimes a nightmare with the timezones :-)
<@mowest:fedora.im>
18:04:08
!hi
<@zodbot:fedora.im>
18:04:09
Steve Daley (mowest)
<@mowest:fedora.im>
18:04:24
Don't know how long I can stay, busy day.
<@pboy:fedora.im>
18:04:51
John Himpel: We decided last meeting to come back to the NFS Ansible project next week, so we have a bit longer time to test the actual code. Do you think you can manage to join next week? Or is it better to wait for another date?
<@pboy:fedora.im>
18:05:20
Hi mowest!
<@pboy:fedora.im>
18:05:47
Well, I think we should start now and see, how it goes.
<@pboy:fedora.im>
18:05:57
!topic Agenda
<@pboy:fedora.im>
18:06:09
!info Follow-up actions & announcements
<@pboy:fedora.im>
18:06:18
!info Server podcast
<@pboy:fedora.im>
18:06:28
!info Cockpit self-signed certificates change
<@pboy:fedora.im>
18:06:38
!info How can we achieve progress with our Ansible Support
<@pboy:fedora.im>
18:06:46
!info Open Floor
<@pboy:fedora.im>
18:06:52
Anything to add?
<@jwhimpel:fedora.im>
18:07:17
Peter Boy I should be able to make the meeting next week.
<@pboy:fedora.im>
18:07:46
Thanks! So I will plan for a longer time for this topic.
<@jwhimpel:fedora.im>
18:07:57
Can we determine the meeting time now that Daylight Savings has begun in the US?
<@pboy:fedora.im>
18:08:19
OH, I wasn't aware of the change!
<@pboy:fedora.im>
18:09:07
Yes, we use to follow the US change and will have 1 oe 2 adjustments for the European membvers.
<@mowest:fedora.im>
18:09:30
Just changed in US "Spring Forward" so today's meeting is an hour later than usual.
<@pboy:fedora.im>
18:10:01
Yes, er have to switch back to 17:00 UTC from now on.
<@pboy:fedora.im>
18:10:43
Do we still agree to switch to 17:00 UTC so it will be the same local time for everybody?
<@mowest:fedora.im>
18:10:53
For me personally it doesn't really help me if it is changed or not, in some ways this current time an hour later is better for me.
<@mowest:fedora.im>
18:11:21
But I will still try to make it if it is changes to be an hour earlier.
<@pboy:fedora.im>
18:12:22
mowest: Thanks. I think we should discuss any deviation very carefully.
<@pboy:fedora.im>
18:13:03
!agreed Server WG will switch to 17:;00 again for summer time / daylight saving
<@pboy:fedora.im>
18:13:15
Let's start.
<@pboy:fedora.im>
18:13:23
!topic 1. Follow-up actions & announcements
<@pboy:fedora.im>
18:13:36
Regarding the action, nothing new. See
<@pboy:fedora.im>
18:13:45
<@pboy:fedora.im>
18:14:10
Nothing new here from me. Any comment?
<@pboy:fedora.im>
18:14:44
I see none. Therefore
<@mowest:fedora.im>
18:14:47
Nothing from me.
<@pboy:fedora.im>
18:14:55
!topic 2. Scheduled Server podcast for March 11
<@pboy:fedora.im>
18:15:51
The podcast scheduled for yesterday is delayed, probably for one week. Due to staff shortage.
<@pboy:fedora.im>
18:16:30
So we have the opportunity to check, if someone else would like to join me (or do it alone).
<@pboy:fedora.im>
18:17:30
mowest: I think it would great if we could team up. You worked a lot on the survey. And it would we great if you give input to the podcast., I think.
<@mowest:fedora.im>
18:17:38
When would it be rescheduled for?
<@pboy:fedora.im>
18:18:28
There is no date fixed until now. We are quite flexible, because IT-Guy would record our talk and send it later.
<@mowest:fedora.im>
18:18:51
Is this time of day the best for you?
<@mowest:fedora.im>
18:19:24
I have a pretty flexible schedule except when meetings or visits or appointments are preplanned in the calendar.
<@pboy:fedora.im>
18:20:21
For me this time is fine, but some hours later (max about 6) would be fine for me, too.
<@pboy:fedora.im>
18:21:04
I have no fixed appointments at this time (all my appointments are earles when the US is sleeping :-) )
<@mowest:fedora.im>
18:21:48
My evenings get full with meetings or my sports games with the family, but I can be pretty flexible in the afternoons like at this time depended on the day. I know that Thursdays would not work, but other days have more flexibility.
<@pboy:fedora.im>
18:22:54
OK, that's great. I think, we should continue on the podcast channel an schedule a new date.
<@pboy:fedora.im>
18:23:40
John Himpel: What about you?
<@jwhimpel:fedora.im>
18:24:41
I'm suffering from a bad knee right now. Getting upstairs to my computer is quite a chore. So I am trying to limit my computer usage while the knee heals. Sorry.
<@pboy:fedora.im>
18:25:37
That's perfectly OK. There will be a next opportunity, e.g about our Ansilbe admin support project.
<@pboy:fedora.im>
18:25:49
And good luck with your knee!!!!!!!
<@pboy:fedora.im>
18:26:27
!agreed Mowest and pboy will join the next podcast about Server.
<@pboy:fedora.im>
18:26:50
OK. I think we can move on.
<@pboy:fedora.im>
18:27:02
!topic 3. Cockpit self-signed certificates change
<@pboy:fedora.im>
18:27:12
<@pboy:fedora.im>
18:28:10
My problem here is, that a log of Fedora Servers work behind a firewall router on a private network, with non-routable IP space and no official domain name.
<@pboy:fedora.im>
18:28:55
So can can't get a certificate e.g. from Let's encrypt - as far as I know. The only option are self signed certificates.
<@jwhimpel:fedora.im>
18:29:40
I use a lot of LETSENCRYPT certificates, but I don't use them for Cockpit. In fact, I very seldom use Cockpit.
<@pboy:fedora.im>
18:30:38
Yeah, although it is often very comfortable
<@mowest:fedora.im>
18:33:31
I also have all of my homelab behind a firewall and wouldn't be able to get a Let's Encrypt certificate either. I like the convenance of logging into Cockpit in the homelab. We have a Let's Encrypt certificate for our server that is exposing port 80 and 443 for our personal website and our web apps on that server so we can access those using our domain name, but to access Cockpit we use the local IP address of the servers given out by our firewall.
<@mowest:fedora.im>
18:34:52
I would imagine most homelab people like using Cockpit as a Web GUI, but I don't that most put Cockpit so it is accessible outside to the public internet. I know we don't have a desire to do that. If I'm not on the network and want to access it I would have to use Tailscale.
<@mowest:fedora.im>
18:35:13
I would imagine most homelab people like using Cockpit as a Web GUI, but I don't think that most put Cockpit so it is accessible outside to the public internet. I know we don't have a desire to do that. If I'm not on the network and want to access it I would have to use Tailscale.
<@pboy:fedora.im>
18:36:42
OK, so I think we agree, that we need a way to access Cockpit on an internal network without "official" certificates. Any objections here?
<@mowest:fedora.im>
18:37:11
Yes, I agree that we need a way to access Cockpit on an internal network.
<@jwhimpel:fedora.im>
18:37:40
Sounds good to me.
<@mowest:fedora.im>
18:37:53
I wonder how Ubuntu and other Cockpit users would look upon this change. This seems like it would affect people outside of Fedora.
<@pboy:fedora.im>
18:38:05
proposed !agreed Server WG emphasizes that we need access without official certificates for private networks.
<@pboy:fedora.im>
18:38:15
!agreed Server WG emphasizes that we need access without official certificates for private networks
<@pboy:fedora.im>
18:38:48
I'll contact the cockpit developers about that and possible alternative solutions.
<@pboy:fedora.im>
18:39:18
I think, we can proceed?
<@pboy:fedora.im>
18:39:43
topic 4. How can we achieve progress with our Ansible Support
<@pboy:fedora.im>
18:40:23
My thinking is whether we can somehow bring more speed to the project.
<@pboy:fedora.im>
18:41:26
We are currently working on one service at a time. And if we have issues with the service, we don't get progress.
<@pboy:fedora.im>
18:41:42
Sould we work on more than one service at a time?
<@pboy:fedora.im>
18:42:15
Or does that create more chaos than it helps?
<@jwhimpel:fedora.im>
18:42:20
Testers who will spot errors and suggest improvements, would be the best help and speeding things up. (My personal opinion)
<@pboy:fedora.im>
18:42:39
@John agreed!
<@mowest:fedora.im>
18:44:07
I don't know if we have enough people who know and understand Ansible. I wish my son had some time. He has set up all of our web apps on our homelab server to be installed and kept up with Ansible scripts. But if we had people who could take on individual implementations that would be great and then another group that is willing to test them on their servers. (Something we could ask for help on during the podcast)
<@jwhimpel:fedora.im>
18:44:29
Most services can be configured multiple ways. Starting with a simple basic service install and configuration before a second effort to add bells and whistles would also speed things up.
<@pboy:fedora.im>
18:45:52
Ok, then let's stick to the step-by-step approach and try to organize reinforcement, e.g. on the podcast.
<@bookwar:fedora.im>
18:46:29
Is this work related to Red Hat System Roles project or is it a separate thing? https://access.redhat.com/articles/3050101
<@bookwar:fedora.im>
18:47:53
The upstream url https://linux-system-roles.github.io/
<@pboy:fedora.im>
18:48:02
@bookwar I think is is related, but does not pursue such a broad scope
<@bookwar:fedora.im>
18:48:24
I see, thanks, was just curios
<@pboy:fedora.im>
18:48:32
It is more aboud to include server specific details.
<@jwhimpel:fedora.im>
18:49:17
Been a while since I looked at Red Hat System Roles, but back then, those roles pretty much did installation. Not too much in the way of configuration. Things might have changed since then.
<@bookwar:fedora.im>
18:50:32
I am not aware of the details either, but it might be worth checking if there is a collaboration path so that both initiatives have additional visibility.
<@jwhimpel:fedora.im>
18:50:39
I was hopeful we could create roles that allow a new admin to create a set of working services that could support SMB sites. This includes configuration and interoperability.
<@pboy:fedora.im>
18:51:07
John Himpel: 1++!
<@pboy:fedora.im>
18:51:25
OK, let's go on.
<@pboy:fedora.im>
18:51:35
!topic 5. Open Floor
<@pboy:fedora.im>
18:51:54
Anything here?
<@pboy:fedora.im>
18:52:56
I would just announce, that we urgently need to resume our discussion about test strategy, testing, and QA, the next beta is approaching.
<@mowest:fedora.im>
18:53:37
Who do I contact to get data from our survey? and stats from our data?
<@jwhimpel:fedora.im>
18:54:32
I think I read the Desktop WG has a long-term goal of moving Fedora to flatpack apps. I personally would not be in favor of this, but again, that is my personal opinion.
<@pboy:fedora.im>
18:54:32
mowest: It's pboy@uni-bremen.de :-) The guy is quite busy, unfortunately.
<@mowest:fedora.im>
18:55:27
Oh, I thought we had someone else that was going to help us analyze the data and help create some reports from the data. I don't even have access to the results of the survey.
<@mowest:fedora.im>
18:55:58
I don't think that I can even look at the results on my own.
<@pboy:fedora.im>
18:56:00
mowest: Yes, we have. But we have to make the first step
<@jwhimpel:fedora.im>
18:56:47
I also see more and more Fedora distro images are being generated by KIWI. I sure would like it if we could move all of our Fedora Server images to KIWI. Then we would have a better chance of fixing and testing some of the rough edges in Fedora Server.
<@pboy:fedora.im>
18:57:03
mowest: Can we talk on Matrix tomorrow in the US evening?
<@pboy:fedora.im>
18:57:42
John Himpel: Yes, but I'm not sure, whether the create bootable iso that way, too.
<@mowest:fedora.im>
18:58:08
I am busy tomorrow till 8:00pm EST so that probably wouldn't work the best tomorrow.
<@pboy:fedora.im>
18:58:23
OK, on Friday!
<@pboy:fedora.im>
18:58:30
OK, on Friday??
<@mowest:fedora.im>
18:58:31
Friday, I'm more open.
<@mowest:fedora.im>
18:58:51
Afternoon, or late afternoon is probably best.
<@pboy:fedora.im>
18:59:25
Yes, give me a time. I'm flexible on Friday.
<@mowest:fedora.im>
19:00:56
2:00pm Friday afternoon
<@mowest:fedora.im>
19:01:05
EST
<@pboy:fedora.im>
19:01:18
OK,. 2 pm US est!?
<@pboy:fedora.im>
19:01:36
Yes, got it. I' will be available!
<@pboy:fedora.im>
19:01:51
And from our brief discussion, I understand that we need to quickly resume our discussion about our distribution media.
<@pboy:fedora.im>
19:02:42
I'll check with Nirik whether he can shed some light on the darkness.
<@pboy:fedora.im>
19:03:14
OK, time is up. Anything else before we close?
<@pboy:fedora.im>
19:03:49
I see none.
<@pboy:fedora.im>
19:04:09
So Bye and thank you for joining our meeting!
<@pboy:fedora.im>
19:04:15
See you next week.
<@pboy:fedora.im>
19:04:42
!endmeeting