I originally posted this on Fedora Discussion [0], but I'm sharing it
here as well for awareness.
# Executive summary
EPEL 10 is expected to be launched in Q4 of 2024. You may start
noticing parts of the infrastructure coming online sooner than that.
**Please do not start creating EPEL 10 builds until we announce that
we are ready for packagers to start building.**
# Detailed description
The EPEL Steering Committee has big plans for EPEL 10. These plans
are covered in detail in the original EPEL 10 proposal [1]. I also
presented an EPEL 10 overview at the Fedora 40 release party [2]. At
a high level, we are bringing minor versions to EPEL. I encourage you
to read the proposal or watch that video for a deeper explanation.
I'm writing this post to share our planned timeline for EPEL 10, and
to set expectations for the coming months. Early CentOS Stream 10
composes are already available [3], but it hasn't been officially
launched yet because the content set is still in flux. We expect to
see the official launch announcement for CentOS Stream 10 later this
year. We intend to align the EPEL 10 launch with that, which will
give us the following approximate timeline.
- August 2024: EPEL 10 hackfest at Flock [4] (see below for more details)
- Q4 2024: expected launch of CentOS Stream 10 and EPEL 10
- Q2 2025: expected launch of RHEL 10 (three years after RHEL 9)
In the months ahead, you may notice parts of EPEL 10 infrastructure
coming online, such as build targets in Koji and releases in Bodhi.
We will need these infrastructure pieces in place to work out all of
the details of integrating minor versions. We'll send out an
announcement when EPEL 10 is ready for package maintainers to start
creating their builds. **Please do not start creating EPEL 10 builds
until we announce that we are ready for packagers to start building.**
Any builds created before this announcement may need to be discarded
and rebuilt.
I will be running an EPEL 10 Hackfest at Flock [4] in August (next
month). The plan is to work on various infrastructure pieces related
to EPEL 10. If we happen to have most of these pieces working prior
to the hackfest, we can pivot our time to adding initial packages to
EPEL 10. I hope to see you there!
[0] https://discussion.fedoraproject.org/t/epel-10-status-update/124549
[1] https://discussion.fedoraproject.org/t/epel-10-proposal/44304
[2] https://youtu.be/PxWxK5PgUuE
[3] https://lists.centos.org/hyperkitty/list/devel@lists.centos.org/thread/QCO7…
[4] https://flocktofedora.org/
--
Carl George
Hey,
Due to a couple of CVEs I'll need to rebase botan2 in EPEL 8 to a slightly less ancient version (which also brings me to [0], about which I completely forgot after I took over the botan2 package, apologies for that). I tried to cherry-pick just the necessary patches, but there's a lot of conflicts/missing or moved files/etc. due to the version difference so, in my opinion, doing a rebase is a way safer option here (and it also makes future maintenance slightly less painful, since EPEL 8 will be with us for another almost five years).
I can't rebase to the latest 2.x version, since v2.19.2 drops support for the OpenSSL provider. I don't know if anyone uses it in EPEL 8, but I don't feel comfortable dropping it so far in EPEL 8's maintenance cycle. But from the maintenance point of view this is fine, since with v2.19.1 all necessary CVE patches (and other bugfixes I cherry-picked along the way) apply cleanly.
Since the rebase also bumps libbotan-2.so from libbotan-2.so.12.12.1 to libbotan-2.so.19.19.1, packages that depend on it will need to be rebuilt, namely:
$ dnf repoquery --enablerepo "epel*" --whatrequires "libbotan-2.so*"
botan2-devel-0:2.12.1-4.el8.x86_64
corectrl-0:1.3.0-2.el8.x86_64
keepassxc-0:2.7.9-1.el8.x86_64
qca-qt5-botan-0:2.3.4-2.el8.x86_64
As I don't have provenpackage privileges, I created a side tag epel8-build-side-92634 with the rebased botan2 build (botan2-2.19.1-2.el8 ATTOW) and kindly ask the maintainers of the affected packages (CC'ed) to add their builds into it using:
$ fedpkg build --target=epel8-build-side-92634
Since this is my first multi-package build, please let me know if I messed anything up.
Thank you!
Cheeers,
Frantisek
[0] https://bugzilla.redhat.com/show_bug.cgi?id=2132492