infrastructure September 2025

infrastructure@lists.fedoraproject.org

15 participants
13 discussions

VDO
by Miroslav Suchý 04 Jul '26

04 Jul '26

After I seen the talk about VDO: https://www.youtube.com/watch?v=7CGr5LEAfRY I went ahead and tried it. I tried it on small (12GB) sample of Copr data and I saved 20-30% data. I then deployed it on production server retrace.fedoraproject.org and saved there 15% out of 2TB. Several notes: The RPM packages are only available for RHEL. Recently the public github has been updated with version of VDO, which should work on Fedora. No RPM available for Fedora yet though. Here are my notes: # vdo create --name=vdo1 --device=/dev/vdb --vdoLogicalSize=1T # mkfs.ext4 /dev/mapper/vdo1 Some slides suggest to use -E discard. This is not needed for new volumes. See vdo-devel mailing list for reasoning. # mount -o discard /dev/mapper/vdo1 /mnt/a Probably best scenario is to create vdo on whole disk and then make PV from whole VDO disk and put LVM on top of that. When you already have data, you cannot convert your disk to VDO. You need create new VDO disk, format it, mount it and copy the data. In my case, due limited space for migration I created a small LVM volume "vdosrv": # lvcreate -L 80G -n vdosrv vol0 I converted it to VDO which claims to have 2TB of vitual total size # vdo create --name=srv18 --device=/dev/vol0/vdosrv --vdoLogicalSize=2T # mkfs.ext4 /dev/mapper/srv18 See how many space is *actually* free. # vdostats # mkdir /mnt/srv18 # mount -o discard /dev/mapper/srv18 /mnt/srv18 Now I moved some data from old volume to /mnt/srv18. I shrank the FS of old volume, I shrank the old LV. And then I enlarged the new LV. # lvresize -L +400G /dev/vol0/vdosrv and let know vdo that it can use the new space: # vdo growPhysical -n srv18 I repeated this several times. I have to say that my experience is so far good. I hope that my notes help someone. Miroslav

10 14

[Fedocal] Reminder meeting : F43 Beta Go/No-Go
by amoloney＠redhat.com 06 Oct '25

06 Oct '25

Dear all, You are kindly invited to the meeting: F43 Beta Go/No-Go on 2025-09-18 from 17:00:00 to 19:00:00 UTC The meeting will be about: Please join fedora-meeting on Matrix in #fedora-meeting @ 1700 UTC for the Fedora Linux 43 Beta Go/No-Go meeting. For more information on this meeting, please visit https://fedoraproject.org/wiki/Go_No_Go_Meeting Source: https://calendar.fedoraproject.org//meeting/11119/

1 0

FBR: Update fedora-kernel-btrfs@ alias to current people
by Neal Gompa 16 Sep '25

16 Sep '25

Hey folks, I've proposed a pull request[0] to update the fedora-kernel-btrfs@ alias to the current people tracking Btrfs issues. Josef Bacik left the kernel community[1] (and thus btrfs development), so having him getting the emails is not useful for us. I would like this[0] to be merged and released ASAP so that the alias remains useful. What does everyone think? Can we do it? [0]: https://pagure.io/fedora-infra/ansible/pull-request/2845 [1]: https://hachyderm.io/@josefbacik/115111769723183990 -- 真実はいつも一つ！/ Always, there's only one truth!

2 1

Call for testing: anubis in staging
by Kevin Fenzi 16 Sep '25

16 Sep '25

Hello everyone. I've been working in the last week or so on enabling anubis in our infrastructure. It's not fully done yet, but I'd like to ask folks to help us test in staging. For those that don't know, anubis ( github.com/TecharoHQ/anubis ) is a firewall/web utility that 'weighs' connections and blocks or accepts them based on a variety of rules. Hopefully only blocking bad actors that are scraping content and allowing through humans. The following sites are enabled currently (I based this on network load they are getting): https://stg.pagure.io https://bodhi.stg.fedoraproject.org https://koji.stg.fedoraproject.org https://lists.stg.fedoraproject.org https://koschei.stg.fedoraproject.org https://forge.stg.fedoraproject.org Please do note that since these are staging services, they use your account / credentials from https://accounts.stg.fedoraproject.org not your production one. Please let me know if you run into any issues you think might be related to anubis. I would like to enable the production versions of all these sites after freeze. We are still getting a massive pile of ai scraping and it's causing undue load all around. Things left to do: - Make sure no one sees anything glaring in staging. - Currently I am using the copr/anubis role in staging, but I'd like to move that to a top level role and make it flexable enough that sites can set their own env variables or other config options. - I need to finish up a SOP on anubis, although there is really not a lot of things we need to do with it normally. kevin

6 8

Infrastructure meeting time change
by Kevin Fenzi 15 Sep '25

15 Sep '25

Sorry for the delay sending this out, but a few weeks ago we discussed moving the weekly infrastructure meeting to a better time. Of course no time is going to be 100% better for everyone, but for now, we decided to pin the meeting to 9am Pacific time. This means that right now, the meeting will be at 16UTC on thursday in #meeting-3:fedoraproject.org kevin

1 0

Kudos: CLE Scrum
by Michael Winters 15 Sep '25

15 Sep '25

I see that CLE has a new scrum board: https://pagure.io/fedora-infrastructure/boards/sprint-0 I just wanted to say kudos for getting that off the ground. As an *employee* I've found Scrum to be anywhere between occasionally useful and a huge waste of time, but as a *community member* I very much appreciate the visibility into the WIP and near-term backlog. This is extremely helpful for newcomers like myself to get a sense of what's happening and follow along before we decide to jump in ourselves. And even beyond onboarding, if I find myself with a few spare hours, the backlog looks like a really nice place to see where I might run with a valuable small / medium effort without having to ask around and wait for community responses (which might entirely consume my available time.) So: thank you to every CLE / CPE member for participating in that additional effort beyond the "real" work that you do. It's incredibly valuable. Michael Winters

2 1

compose-x86-01 pungi upgrade FBFR
by Adam Williamson 14 Sep '25

14 Sep '25

That's Freeze Break Forgiveness Request. supakeen noticed the first two Fedora 43 Beta candidate composes had no ARM minimal disk image. I worked out it was because compose-x86-01 was on an old version of pungi (4.9.3-1.fc42) which didn't have the osbuild support. compose-branched01 is on a newer version, so the nightly composes have been fine. So, forgetting about the freeze break, I just went ahead and updated it (to 4.10.1-1.fc42). Thus, I beg two +1s of forgiveness. ;) -- Adam Williamson (he/him/his) Fedora QA Fedora Chat: @adamwill:fedora.im | Mastodon: @adamw@fosstodon.org https://www.happyassassin.net

3 2

[Fedocal] Reminder meeting : F43 Beta Go/No-Go
by amoloney＠redhat.com 10 Sep '25

10 Sep '25

Dear all, You are kindly invited to the meeting: F43 Beta Go/No-Go on 2025-09-11 from 17:00:00 to 19:00:00 UTC The meeting will be about: Please join fedora-meeting on Matrix in #fedora-meeting @ 1700 UTC for the Fedora Linux 43 Beta Go/No-Go meeting. For more information on this meeting, please visit https://fedoraproject.org/wiki/Go_No_Go_Meeting Source: https://calendar.fedoraproject.org//meeting/11119/

1 0

Meeting Agenda Item: Introduction Laotze
by Nestor Laotze González de Abreu 09 Sep '25

09 Sep '25

Hey, I hope everything is going well. Matrix: *@laotze:fedora.im <http://fedora.im>* I'm *Laotze*, a fresh computer engineering graduate. I briefly used Fedora 38 Workstation, since then my daily driver has been Fedora i3 spin. I'm an avid reader, and also like to write. I do have a personal blog, but I am also contemplating the idea of documenting my professional journey and thoughts. I speak Spanish natively, Portuguese, and my German is growing each day. *Tools, experience and what I'd like to learn* - Python (Django, Flask, SQLAlchemy, sockets, Pytest, unittest, Tkinter, os, PyInstaller) - HTML, CSS, and Javascript - RESTful API - PostgreSQL, SQLite - Git - Bash I worked for my university in the IT department while I was getting my degree. At the time the ticketing system was paper based, so I decided to make my final year project based on that problematic. I developed a system called SISA using sockets library, tkinter for GUI, PostgreSQL as database, and PyInstaller for the executables. Besides that project, I worked daily as IT. I've been sharpening my backend skills through two web applications, a blog and a prompting generator for writing. I don't have a specific area I'd like to get involved in. I feel I still have a lot of things to learn about, later something may catch my eye. *Goals* - *Be part of and contribute to Fedora's community.* - *Familiarize myself with the workflow of Infrastructure.* I have no idea where I could help, it feels a bit daunting. I have been reading the tickets, the map of critical services, about each app, and I'm yet to read the sysadmin and developer guide. So I believe familiarizing myself with the workflow would make contributing easier. - *Learn as much as I can. *I believe one can achieve a great deal independently. However, it is through community that we truly get to grow as people and professionals, sharing experiences, knowledge, and opinions. *Initial Questions* - What things can I do to know how the team works? Besides reading the docs and attending the meetings - Is there anything would you recommend learning to facilitate participation in Infrastructure? Be it tools, concepts, or anything that comes to mind - What advice would you give? You could answer this in a professional or personal way. I see it as a way to get to know you better and share wisdom I wasn't sure if I was expected to talk more personally about myself. I'd be more than happy to answer any questions through email or a DM on Matrix. Thank you for your time, and I'm looking forward to working with everyone. *Laotze de Abreu*

4 4

Meeting Agenda Item: Introduction: Michael Winters
by Michael Winters 03 Sep '25

03 Sep '25

Hey y'all. Unemployed SRE here, looking to join the ranks. @mwinters:fedora.im and hoping to see you in this Thursday's meeting (September 4). I'm currently in US Central time. Onboarding is always the hardest part, and it's why I hadn't joined previously -- it's too difficult to build the necessary context across small slices of time. But I'm hoping to do that now as quickly as I can with my current excess of spare time, because that will (hopefully) enable me to make ongoing contributions even after I'm employed again. So, apologies that I'll be pretty noisy for a bit. I'm going to try real hard to pay back your investment. Here are the vitals: - Skills - SRE - I've been using "other people's computers" since before they became weather formations. Sometimes lots of them. - Historical focus on reliable and scalable app architectures, but reliability is also QA, CI/CD, PM, Finops, etc etc. So I've done some of all of that. - I feel I'm obligated to say "Kubernetes" here. I'm OpenShift-curious but the licensing prohibits curiosity. - Some leadership stuff like spearheading SLO adoption. - Recently started exploring kernel internals and eBPF. - I know my ARP from my ARPA. (Not a networking expert but no stranger to RFCs.) - Programming - Basically any common language except .NET, most recently Go and Rust. Never found a good reason to use a functional language but always wanted to. - Mostly backends and systems-level stuff (e.g. tooling), but I can commit web UI war crimes if ordered. - Lots of OSS contributions but never to a distro. - People - I feel strongly that technology *is* people. I see the strength of that symbiosis as core to the outcomes, so I'm often focused on smoothing out the bumps for others when my boss would rather I be shipping features. (Have I mentioned that I'm unemployed?) Docs, sweeping the floors, etc. - I love to teach. I've been told that I'm good at it. - I was briefly the wrong kind of journalist, and then an editor. So maybe some Magazine contributions eventually? Or at least some pedantry on tap. - Infosec - A lifelong interest but never a career focus. I did get a CISSP though, so I can tell you all about Bell-Lapadula. And I've had to operate in some highly-regulated environments and work through some audits. "Security-minded"? - Familiar enough with OAuth, OIDC, LDAP, etc. but no Active Directory. Might still be able to install Netware 4.11. - Goals - My only real goal right now is to learn the ropes as quickly as possible and make at least one actual contribution ASAP. Sort of a "new contributor smoke test." That said, I've found a lot of bumps along the way so far in onboarding, and I think some of those fall under infra so I'll likely start there. - I'm curious about the Zabbix migration since I've had to do a lot of observability in the past. This is also a great opportunity to understand where things are and why they are that way. (The full answer to "Why Zabbix?" is probably "see also: our entire infra history".) - Initial Questions - I have so many, I think I'm exceeding the capacity of folks in Matrix. So I'm planning to start dumping those Q's here on the list or into Discourse where they might be treated more like a queue. My actual question here: is that the recommended approach? (Aside from RTFM'ing as hard as I can?) - A number of the onboarding bumps that I want to smooth out are in the infra docs, and those docs say that I need to be an apprentice to make a PR to the docs ... is that correct? If so, how can we proceed since I'm the newest noob around? Thanks for reading all of this, and looking forward to working with you all! Feel free to email me or DM on Matrix if you want to connect. Michael Winters

4 3

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure September 2025