01 Oct 2026

feedFedora People

Fedora Infrastructure Status: Updates and reboots on Fedora infrastructure

01 Oct 2026 8:00pm GMT

24 Sep 2026

feedFedora People

Fedora Badges: New badge: ESC member !

24 Sep 2026 7:26pm GMT

Gordon Messmer: Let applications select their dependencies

Gordon Messmer's avatar

There are a number of facts that we accept as generally true of software that, considered together, support the conclusion that applications must be given the ability to select a specific release series for their dependencies.

First, we understand that software is typically versioned, and that a sequence of releases has a beginning and and end.

Diagram of an application release

Furthermore, we understand that applications use shared libraries and other types of dependencies, which share the same basic characteristics. Shared libraries are also versioned, with a finite maintenance window.

Diagram of an application release's dependencies

In addition to those characteristics, an application's dependencies share one more characteristic, which is that the dependencies were released before the application.

Diagram of an application release's dependencies' age

Dependencies aren't meaningfully different from applications. They may also have dependencies, and when they do, those dependencies will typically have been released earlier, in turn.

Diagram of an application release's dependencies' dependencies

And, like applications, dependencies typically follow stable release practices. So, for example, at any given time, the developers of a hypothetical "libEtc" may be supporting multiple releases.

Diagram of a dependency's release cycle

Which brings us to build system requirements. At a given point in time, there may be applications that rely specifically on libEtc's 1.2 release series. Even if the 1.3 series is intended to be compatible, there might be changes in undefined behavior which are not compatible with that application.

At the same time, there may be applications that require libEtc's 2.0 release series.

Diagram of a an application and dependencies at release branch time

In some cases, incompatible versions of a single component can be installed in parallel, using distinct path prefixes or distinct file names in the same prefixes. But that's not always the case. Some languages don't make parallel installation simple or idiomatic. Even fewer do so for parallel installation of components that are intended to be backward compatible upgrades, like libEtc 1.2 and 1.3.

For those reasons, many applications will bundle the specific versions of components against which they have been tested, and with which they are known to be compatible. Bundling is not merely easiest, but necessary in many cases.

Applications might bundle their dependencies in a shared prefix (i.e. "/opt/…" in FHS), or they may bundle them by shipping as a container image (including a Flatpak image). But in order to support the build process for those applications, a build system must supply the versions they need, which means that a build system must not flatten component release streams at build time.

24 Sep 2026 12:00am GMT

23 Sep 2026

feedFedora People

Guillaume Kulakowski: Portainer 3.0 : virage entreprise et Kubernetes : pourquoi mon passage à Arcane était la bonne décision

23 Sep 2026 10:52am GMT

Fedora Magazine: Installing Fedora 45 on Stratis storage

Fedora Magazine's avatar

The Anaconda installer in Fedora 45 will introduce a new option for storage configuration: Stratis, a modern solution for local storage management.

Stratis isn't a completely new technology, it uses existing tools and technologies like device mapper, LUKS, and XFS and integrates them into an easy to use package. The idea is to provide modern storage features while hiding the often complex logic behind them. Adding support to the installer brings these features even closer to Fedora users.

There are only two basic structures or layers you need to know when working with Stratis: pools and filesystems. Pools represent an abstract layer on top of existing block devices (disks, partitions, RAID arrays etc.). A pool can consist of one or more devices (for systems with multiple disks, for example). Features like encryption or over-provisioning are also configured on the pool level. Multiple filesystems can be created on the pool. These are devices that will serve as your root or home volumes. Some additional features supported by Stratis include snapshots, caching, and for encrypted pools, multiple unlocking methods like TPM or Clevis/Tang. Caching and encryption without a passphrase are not currently supported by Anaconda, but these can be easily enabled after the installation.

Management of Stratis devices can be done using the stratis command. For more information, check our older, but still valid, article Getting started with Stratis or the Stratis project how-to.

Installation using Web UI

The new web-based user interface for the Anaconda installer currently doesn't allow selecting which type of storage technology will be used for the automated and guided partitioning options. The storage layout you will get depends on the Fedora variant you choose to install. But if you want to use Stratis, you still have an option in the graphical installation. Any storage layout can be created manually using the Cockpit storage module, which is integrated into the installer. To enter it, simply select the If none of the options above apply… option on the Installation Destination step.

Installation method page in the Anaconda installer

The Cockpit storage module supports a wide variety of storage configurations and Stratis is one of the supported technologies. Do not forget that with manual partitioning, you need to create all required partitions so first create partitions required for booting (/boot and /boot/efi or biosboot, based on your system configuration). After that, simply create a new Stratis pool from the menu.

Local storage menu in the manual partitioning editor

Creating stratis pool

After selecting a name for the pool and the disk (or disks) it will be placed on, you can decide whether to enable encryption and over-provisioning for the pool. Over-provisioning allows allocation of more space for the filesystems created on the pool. Similarly to how LVM thin provisioning and Btrfs work. With over-provisioning enabled, there is no need to worry about running out of space in root with still plenty of free space in /home. It also allows greater flexibility when using snapshots. On the other hand, you actually need to be aware that you don't really have terabytes of space and you need to make sure you won't actually run out of space on your disk. Both encryption and over-provisioning can also be enabled or disabled after the installation.

Creating Stratis pool in the manual partitioning

Creating stratis filesystems

With the new pool created, you now need to add some filesystems to it. You'll most likely want the standard two separate filesystems for your / and /home. But you can also create a separate filesystem for your /var, for example.

If you enable over-provisioning on your pool, you can also decide to not specify sizes for the filesystems and use the 1 TiB default size with over-provisioning or set a size limit for the filesystem to prevent it from automatically growing if you ever run out of space.

Creating Stratis filesystem in the manual partitioning

Using the configured layout

With all the filesystems created, you can Return to installation. Anaconda will check the created devices to make sure all requirements are met and return you to the Installation destination page where a new Use configured storage option will be preselected with the devices that were just created.

Confirmation dialog with validated storage layout in the manual partitioning
Using configured storage in the Anaconda installer

That is the storage part of the installation done. You can double-check on the Review and install page that everything is correctly set and start the installation.

Summary of the installer configuration before starting the installation

Installation using kickstart

For advanced users who wish to use automated installations, full kickstart support for Stratis is also available. Both automatic and manual partitioning are available via kickstart.

Automatic partitioning is simple: the existing autopart command can be used with -type=stratis to create the default Stratis storage layout fully automatically. A storage section in kickstart, for setting up an encrypted Stratis layout, could look like this:

zerombr
clearpart --all --initlabel
autopart --type=stratis --encrypted --passphrase="passphrase"

Manual partitioning requires building the entire storage layout manually from bottom up. Two new Stratis kickstart commands were added: stratispool for creating and managing Stratis pools and stratisfs for creating and managing Stratis filesystems. Usage of these commands and most of the options are similar to how kickstart partitioning works with LVM. An example of a more advanced Stratis layout can be found below.

reqpart
part /boot --fstype=ext4 --size=500
part stratis.01 --size=1 --grow --ondisk=vda
part stratis.02 --size=1 --grow --ondisk=vdb
stratispool fedora stratis.01 stratis.02
stratisfs / --name=root --poolname=fedora --size=5000 --grow
stratisfs /home --name=home --poolname=fedora --size=1 --grow

Here we are creating a pool called fedora on top of two disks, vda and vdb, with two filesystems. One called root for / and a second called home for /home. The -grow tells the installer to use all available free space when creating the devices. For more details about the commands see the kickstart documentation.

Conlusion

The newly introduced Stratis support in Anaconda offers an easy way to take advantage of the modern storage features offered by Stratis. With the Web UI support available through Cockpit storage, you can now easily use Stratis on your system. We plan to simplify the process even more in future releases and enable even more advanced Stratis features.

If you run into any issues or have feedback, both the Anaconda and Stratis teams would love to hear from you.

23 Sep 2026 8:00am GMT

Fedora Infrastructure Status: Fedora Copr outage - updating servers

23 Sep 2026 6:00am GMT

22 Sep 2026

feedFedora People

Remi Collet: 📝 Valkey version 9.2

Remi Collet's avatar

RPMs of Valkey version 9.2 are available in the remi-modular repository for Fedora ≥ 43 and Enterprise Linux ≥ 8 (RHEL, Alma, CentOS, Rocky...).

⚠️ Warning: this is a pre-release version not ready for production use.

1. Installation

Packages are available in the valkey:remi-9.1 module stream.

1.1. Using dnf4 on Enterprise Linux

# dnf install https://rpms.remirepo.net/enterprise/remi-release-<ver>.rpm
# dnf module switch-to valkey:remi-9.2/common

1.2. Using dnf5 on Fedora

# dnf install https://rpms.remirepo.net/fedora/remi-release-<ver>.rpm
# dnf module reset  valkey
# dnf module enable valkey:remi-9.2
# dnf install valkey

The valkey-compat-redis compatibility package is not available in this stream. If you need the Redis commands, you can install the redis package.

2. Modules

Some optional modules are also available:

These packages are weak dependencies of Valkey, so they are installed by default (if install_weak_deps is not disabled in the dnf configuration).

The Modules are automatically loaded after installation and service (re)start.

3. Future

Valkey also provides a set of modules, which may be submitted for the Fedora official repository.

ℹ️ Notices:

4. Statistics

valkey

22 Sep 2026 6:50am GMT

21 Sep 2026

feedFedora People

Aurélien Bompard: From September 14 to September 20

Aurélien Bompard's avatar

Across the Fedora project, community groups are heavily focused on three overarching initiatives this week. First, following the successful launch of the Fedora 45 Beta, teams spanning Release Engineering, Quality, Infrastructure, and various desktop variants (like GNOME and KDE) are actively organizing test weeks, managing freeze exceptions, triaging blocker bugs, and rolling out a broad reduction in release-blocking legacy storage criteria in preparation for the Fedora 45 Final release. Second, a massive cross-group strategic effort has kicked off to unify the CoreOS working group and the Atomic Initiative; these teams are establishing centralized communication channels, Forgejo boards, and Architectural Decision Records (ADRs) to develop a shared base image for IoT, desktop, and server deliverables. Finally, nearly every Special Interest Group and committee is actively debating consent policies for automated LLM data collection used in weekly community reports, with many teams specifically opting their Matrix chat channels out of the summaries to preserve informal, welcoming spaces for newcomers. Alongside these major efforts, developers are collectively managing the oo7-daemon secrets service transition, executing mass package orphanings for non-responsive maintainers, and handling systemic version bumps for core packages like LLVM and libxml2.

Announcements

The highly anticipated Fedora 45 Beta has been officially released, as detailed across the main discussion topic, a community cross-post, the announce mailing list, and the devel-announce mailing list. Early adopters upgrading via rpm-ostree with RPM Fusion repositories should anticipate some manual workaround requirements, and users have reported temporary download delays while mirrors synchronize. In tandem, the Fedora Linux Asahi Remix 45 Beta is now available, bringing the latest changes to Apple Silicon hardware. In other general news, a recent guide outlines BTRFS boot failure and GUI methods for system recovery using live ISOs, while a post-event report from Data Con LA 2026 highlights a highly successful joint booth with openSUSE showcasing offline local AI, which will help shape a new Small Events Standard Operating Procedure (SOP) for the community.

For contributors looking for active engagement opportunities, the QA team is hosting the CoreOS 45 Test Week starting September 21, calling for community help to verify the upcoming release before it hits stable streams. Additionally, Fedora Podcast 060 announced a major leadership transition: Shaun McCance is stepping in as the new Fedora Community Architect as Justin Wheeler transitions into an AI Alignment role. The podcast team is also actively seeking a volunteer producer to assist behind the scenes with episode scheduling and guest management.

Council

This week, the Council discussed the kickoff for the unification of the CoreOS working group and the Atomic Initiative. The initiative aims to create a shared base image supporting various downstream needs (IoT, desktops, servers, automotive). The team established a dual meeting cadence, a unified Matrix channel, and a new Forgejo board for tracking. Additionally, the Council concluded their evaluation of a temporary private issues process for Fedora Forge and fixed a minor formatting bug in their ticket template.

The Council confirmed that the new temporary workaround for filing private issues on Fedora Forge satisfies their requirements. They also noted that issue locking can be utilized for public-read, restricted-comment scenarios. With these processes validated, the related ticket was closed.

Decisions

Contribution opportunities

Learn more about the Council team.

FESCo

This week, FESCo focused on finalizing updates for Fedora 45 ahead of the final freeze and managing non-responsive maintainers. Key actions included approving a major late-stage security update for libxml2 as an Updates Policy Exception, enforcing deadlines for the LLVM 23 update, and limiting the oo7 Secrets Service Provider transition to exclude KDE for this cycle.

Additionally, a massive wave of package orphanings was initiated due to a non-responsive maintainer, though several developers have already stepped up to adopt critical packages. A severe bug regarding kmscon breaking display managers by holding DRM master was also identified and proposed as a release blocker.

Decisions

Contribution opportunities

Learn more about the FESCo team.

Packaging Committee

The Packaging Committee focused heavily this week on simplifying the snapshot versioning guidelines after an incorrect package versioning incident broke an upgrade path for bluez and caused inappropriately waived openQA test failures (discussed in Ticket #1569). The committee recognized that having six different acceptable formats for snapshot versions causes confusion and leads to mistakes that break user upgrades.

During their weekly meeting, the committee decided to begin simplifying these rules. They agreed to completely drop the legacy "snapshot-in-release" format from the main guidelines and move it to a historical reference page. Additionally, Ticket #1570 was opened to discuss standardizing on a single "snapshot-in-version" format going forward. The committee also noted its support for potential policy changes that would require QA team approval to waive certain critical openQA tests, such as version regression checks.

Decisions

Learn more about the Packaging Committee team.

Mindshare

This week, Mindshare and CommOps focused heavily on upcoming events, particularly organizing the Fedora 45 Release Party, while also navigating significant internal governance challenges. The Mindshare Committee is dealing with a troubling decline in meeting attendance and ticket curation speed, prompting a dedicated effort to diagnose and correct the lack of participation.

Meanwhile, multiple event support requests for Q3 and Q4 were triaged, with approvals moving forward for Texas Linux Fest and Software Freedom Day Bukidnon. Alongside event planning, community discussions touched on the project's stance regarding LLM/gen-AI models and proposed policies around AI summarization of community Matrix channels.

Decisions

Contribution opportunities

Learn more about the Mindshare team.

Fedora Join

This week, the Fedora Join group focused on communication strategies, newcomer privacy, and refining the contributor onboarding experience. A notable discussion involved evaluating how the group's public data is summarized by automated tools; the team opted to exclude their Matrix channel from LLM-generated weekly reports to maintain a relaxed, informal space crucial for welcoming newcomers.

Additionally, the group is working on improving contribution pathways. This includes defining a new ticket status to track users who successfully route their contributions directly to upstream projects, and gathering feedback for the Docs team to highlight both technical and non-technical contribution opportunities on the Fedora Docs frontpage. A proposal to establish regular synchronous meetings was also evaluated but remains on hold pending greater member interest.

Decisions

Contribution opportunities

Learn more about the Fedora Join team.

Workstation / GNOME

During this week, the Workstation / GNOME group discussed changes to default packages, release blocking criteria, and upcoming Fedora 45 features. Key topics included the ongoing migration to the new oo7-daemon for secret management, which encountered integration issues in the F45 beta, and discussions surrounding third-party repository policies. The group also evaluated multiple user proposals regarding default packages and installer behavior.

Notable outcomes from these discussions include the Fedora Quality team reducing the list of release-blocking storage interfaces to exclude outdated hardware, and the working group voting to approve the 1Password third-party repository while deciding to retain gamemode in the default Workstation installation.

Decisions

Contribution opportunities

Learn more about the Workstation / GNOME team.

KDE

This week, the KDE group focused on core system components, beta testing, and future desktop defaults. A significant update for the broader Linux community is the complete removal of the X11 launcher in the newly available KDE Plasma 6.8 Beta. Additionally, the QA team has officially reduced the list of release-blocking storage interfaces for the Fedora installer, deprecating older technologies like PATA, Hardware/Firmware RAID, and Fibre Channel from blocker status.

On the desktop side, discussions are ongoing regarding replacing kwallet with the Rust-based oo7-daemon, though this change is officially deferred for KDE due to integration hurdles. There was also a community proposal to make Collabora the default office suite instead of LibreOffice, but it requires substantial packaging work before formal consideration. Finally, an issue was raised regarding system freezes under heavy memory pressure on Fedora Kinoite, where systemd-oomd fails to trigger appropriately.

Decisions

Contribution opportunities

Learn more about the KDE team.

Server

The Fedora Server Working Group finalized a significant change to the Fedora 45 release criteria, agreeing to remove release-blocking status for several outdated or untestable storage interfaces (including PATA, parallel SCSI, and Hardware RAID) during installation. These hardware interfaces will now be handled on a case-by-case basis. Meanwhile, testing for the Fedora 45 Beta is nearly complete, though a severe, unresolved regression remains regarding LVM partition types for KVM guest and ARM images.

In addition, the group made substantial structural progress on its Ansible support project, deciding to transition their playbooks and roles into a formal Ansible Collection. They have officially claimed the fedoraserver namespace on Ansible Galaxy and are actively preparing to release their core setup utilities under the fedoraserver.general collection, with plans to also provide it as a Copr RPM.

Decisions

Contribution opportunities

Learn more about the Server team.

Infrastructure

Fedora 45 Beta was successfully released on September 15, and the associated infrastructure freeze was lifted the following day. The next freeze for the F45 Final release is scheduled to begin on October 6. In preparation for the final release, a significant planned outage for mass updates, reboots, firmware upgrades, and database migrations is scheduled for October 1 at 21:00 UTC, which is expected to last approximately 5 hours.

Routine operations this week handled several service hiccups, including intermittent 503 errors on Koji caused by httpd crashes, and a PostgreSQL OOM crash affecting Bodhi and src.fedoraproject.org due to heavy scraper traffic. The team also expanded disk space on several key servers and began reinstalling specific x86 builders due to BTRFS inode exhaustion.

Decisions

Contribution opportunities

Learn more about the Infrastructure team.

Release Engineering

Fedora 45 Beta was successfully released this week. This process involved resolving staging path issues, signing the IoT Beta compose, generating release torrents, and processing Bodhi stable pushes for F45 blockers and freeze exceptions.

In infrastructure news, the team resolved a recurring issue that caused Rawhide ostree builds to fail due to missing commits, tracing it to a race condition with the fedora-ostree-pruner job. Additionally, pungi and koji-image-builder were updated on the production compose hosts and builders to prepare for the boot.iso modernization change proposal.

Decisions

Contribution opportunities

Learn more about the Release Engineering team.

Quality

The Quality team successfully approved and shipped the Fedora 45 Beta (Beta-1.3) this week, officially kicking off the Fedora 45 Final phase. The team held its regular meeting and a blocker review meeting, accepting one Final Blocker and four Final Freeze Exceptions. A major update to the release criteria was also finalized: the proposal to reduce the list of release-blocking storage interfaces was officially implemented, removing legacy and untestable interfaces like PATA, SCSI, and hardware/firmware RAID from the blocking criteria.

Test days were a major focus this week: the KDE Plasma 6.7 test week is ongoing, the CoreOS F45 test week is scheduled for September 21-25, and an Anaconda F45 features test week is planned for September 28 to October 2. Behind the scenes, the team continued working on CI infrastructure, including planning the migration of tests away from Jenkins, fixing a bug in the installability test pipeline, and tweaking rpmlint configurations.

Decisions

Contribution opportunities

Learn more about the Quality team.

Websites and Apps

This week, the Websites and Apps team heavily focused on optimizing website performance by migrating beta download pages from client-side JavaScript execution to static Server-Side Rendering (SSR). This change, successfully rolled out for several pages including Spins and Labs, significantly improves initial page load times. In addition, the team addressed routing issues, such as fixing a broken redirect for the Kinoite sub-site.

Other discussions included a forum proposal to build a web-based interactive package dependency visualizer to help users understand why certain dependencies (like openh264) are pulled in by dnf. The team also approved the inclusion of their communication channels in the LLM-powered weekly project reports.

Decisions

Contribution opportunities

Learn more about the Websites and Apps team.

Design

The Design team successfully launched the new How to Join and FAQ pages as part of the Fedora Design Docs Revamp project, and completed their review of design repositories migrated from Pagure. While the weekly meeting in the Design Matrix Room was canceled due to low attendance, async collaboration continued on various tickets.

The EPEL Steering Committee officially approved their new member badge designed by the team. Meanwhile, new work has kicked off, including a high-priority request for F45 Virtual Release Party graphics and ongoing user experience research for Project Resistor. The team is actively welcoming community contributions for the upcoming F46 Wallpaper and a custom avatar for the Matrix Moderation Bot.

Decisions

Contribution opportunities

Learn more about the Design team.

Docs

This week, the Docs group focused heavily on modernizing site infrastructure and improving community engagement and discoverability. Key themes across the four active tickets included making the documentation more accessible to both human contributors and artificial intelligence, as well as enhancing the reliability of the site's automated builds.

Notable progress was made on planning a modern design for the Docs homepage, which aims to introduce clear, high-contrast calls to action for new contributors. In parallel, the team debated providing summaries of their Matrix channel to This Week in Fedora via an LLM bot, and discussed adding llms.txt discovery indexes to help AI agents parse the site efficiently. Furthermore, a simple monitoring solution was deployed to catch stalled documentation builds.

Decisions

Contribution opportunities

Learn more about the Docs team.

Internationalization

This week, the Internationalization group received a ticket regarding data collection for the LLM-powered "This Week in Fedora" weekly report. The author outlined the planned data sources, which include the i18n, trans, and trans-announce mailing lists, the issue tracker, and Matrix meeting channels. Per a decision made last week, general chat messages in #l10n and #i18n will be excluded. The author is currently seeking confirmation on these sources and asking if any additional platforms (such as RSS feeds) should be included in the collection.

Learn more about the Internationalization team.

Legal

The Legal team continued to discuss the Copr hosting question regarding packages that build against proprietary software, specifically the NVIDIA CUDA toolkit. Maintainers requested clarification on whether compiled artifacts could be distributed under open-source licenses if they do not directly bundle the proprietary library.

However, respondents in a follow-up thread cautioned against this approach. They noted that compiling against proprietary C/C++ headers often inadvertently embeds proprietary functional code into the resulting binary. Due to the unfeasibility of auditing headers at every version update to ensure no proprietary code is included, it was suggested that such software should be packaged in third-party repositories like RPMFusion rather than Fedora proper or Copr.

Learn more about the Legal team.

EPEL

This week, the EPEL group expedited an ffmpeg update in EPEL 9 to resolve Qt 6 build issues stemming from the LLVM 22 update in CentOS Stream 9. Several administrative cleanups were also announced, including the sunsetting of the defunct epel-packagers-sig mailing list and the planned retirement of the unused rust-libz-rs-sys package.

Additionally, the EPEL Steering Committee approved a new badge design for its members and evaluated a proposal for LLM-powered data collection of group activities. The committee decided to opt out of data collection for their main Matrix channel while deferring the decision on other sources to a future meeting. Development work also continued with updates to mock-core-configs for CentOS Stream and AlmaLinux Kitten EPEL 10 chroots.

Decisions

Contribution opportunities

Learn more about the EPEL team.

ELN

The ELN SIG held a meeting this week. The group announced that the Content Resolver is now based on dnf5, making it significantly faster and allowing for more frequent updates. They also reported that recent weekend composes failed due to llvm and libxml2 soname bumps, but the issues were resolved by building compatibility versions.

In addition, attendees noted ongoing upstream discussions regarding the unification of Bootc and CoreOS, and will monitor for any implications for ELN. Finally, the group issued a reminder that with the Fedora 45 feature freeze now past, any changes targeted at RHEL 11 must land in Rawhide as soon as possible.

Decisions

Learn more about the ELN team.

Atomic

The primary focus of the Atomic group this week was the kickoff of the unification between the CoreOS working group and the Atomic Initiative. This strategic shift aims to create a shared base image supporting various downstream needs (such as IoT, desktops, and servers) while establishing unified community structures, including shared meetings, issue trackers, and a single Forgejo board. Central to this effort is the immediate goal of building a Minimum Viable Project (MVP) for an initial unified bootable image, while complex architectural debates-such as whether to support both Ignition and cloud-init-are being moved to an Architectural Decision Record (ADR) repository.

In addition to the unification efforts, the community engaged in a lively discussion regarding the Anaconda installer's handling of EFI System Partitions (ESPs) in multi-boot scenarios, weighing the benefits of dedicated ESPs against firmware limitations. Technical work across the trackers included addressing missing /run/ostree-booted checks for composefs backend compatibility, improving trademark compliance workflows for derivative bootc images, and removing redundant packages from Silverblue. Finally, the group evaluated modifying their data collection permissions for LLM-powered weekly reports, opting to exclude Matrix chat channels from future summaries.

Decisions

Contribution opportunities

Learn more about the Atomic team.

CoreOS

This week, the Fedora CoreOS team focused heavily on preparing for the Fedora 45 CoreOS Test Week (September 21-25) and rolling out the rebased next stream to Fedora Linux 45. The F45 beta brings features like native Butane support in Ignition and chunked container images for better layer reuse, while preparations are well underway to address incoming bug reports and document major changes.

Additionally, the community formally kicked off the CoreOS and Atomic Initiative Unification working group to discuss merging their outputs and community structures, starting with base image alignment. To resolve ongoing boot partition space constraints, the team also made the strategic decision to drop all Device Tree Blobs (DTBs) on aarch64 builds for F45.

Decisions

Contribution opportunities

Learn more about the CoreOS team.

IoT

The Fedora IoT Working Group focused on reviewing Koji composes and OpenQA test results for Fedora IoT 44, 45, and 46, which all generally look good despite a few expected minor issues. In notable news for the broader community, the Fedora IoT 45 Beta has been officially released. Additionally, the group's CI pipeline is now running green following recent fixes, and routine cleanup of older issues took place.

Decisions

Learn more about the IoT team.

ARM

This week, the Fedora ARM group focused on troubleshooting Wi-Fi regressions on the Raspberry Pi 5, specifically regarding WPA3 support and the latest brcmfmac firmware. The group was also invited to the upcoming Fedora 45 Blocker Review meeting and received a request for consent regarding the automated collection of their communications for an LLM-generated weekly community report.

Contribution opportunities

Learn more about the ARM team.

Hummingbird

This week, the Hummingbird group focused on the proposed unification of the CoreOS working group and the Atomic Initiative. To ensure all stakeholders could participate in the unification kickoff discussions, the regular Hummingbird community meeting scheduled for September 17 was canceled (URL). The unification effort aims to build a shared base image for IoT, desktop, server, and automotive use cases, and the community has begun defining the Minimum Viable Project (MVP) and restructuring their communication channels (URL).

Decisions

Contribution opportunities

Learn more about the Hummingbird team.

Kernel

Aurelien Bompard reached out to the Kernel group to discuss data collection for an LLM-powered weekly report called "This Week in Fedora." The goal of the report is to summarize group activities, foster newcomer participation, and highlight requests for help. He is requesting the group's consent to collect public data from their mailing list and Discourse tags, as well as their public Matrix channel.

Learn more about the Kernel team.

AI & ML

The AI & ML group engaged in a robust discussion this week regarding the alignment of various LLM and generative AI models with Fedora's open-source values, specifically weighing raw AI performance against software freedom. This was sparked by a proposal to set up an "Olmo" 32B-Instruct Fedora playground and expanded into a broader forum debate about whether Fedora needs to standardize on a model for potential centralized inference infrastructure.

In other activity, a prototype of newly proposed build tools was successfully utilized to package vLLM on Fedora. Additionally, the group discussed including their Matrix channel data in the automated "This Week in Fedora" LLM-generated reports. While some concerns about chat privacy were raised, the group is leaning toward a trial inclusion provided there is clear signage and communication in the room.

Contribution opportunities

Learn more about the AI & ML team.

RISC-V

This week, the RISC-V group focused heavily on preparing for upcoming Fedora releases and evaluating future architectural baselines. The Fedora 45 rebuild is largely complete with key kernel updates landed, and massive rebuilding for Fedora 46 is now underway. The team is also actively investigating bootstrapping Fedora ELN (Enterprise Linux Next) for RISC-V, which will provide downstream distributions with vital configuration previews.

Additionally, discussions began on transitioning the Fedora architecture baseline from RV64GC to RVA23. The group plans to keep the existing ABI while defaulting the toolchain (GCC/LLVM) to RVA23 to maintain compatibility. Finally, the group successfully coordinated with upstream LLVM to address failing test suites and submitted a proposal to host the RISC-V microconference at FOSDEM.

Decisions

Learn more about the RISC-V team.

Security

The Security SIG cancelled their September 17 meeting, postponing discussions on allowing LLM data collection for weekly reports to September 24. A major focus this week was addressing the poor quality of CVE reports swamping Bugzilla and causing maintainer fatigue. Red Hat Product Security provided an in-depth look at their transition to a new koji-sbom scanning pipeline, which relies strictly on RPM metadata rather than source code analysis, significantly reducing false positives for unshipped code, interpreters, and dynamically linked libraries.

Contribution opportunities

Learn more about the Security team.

NeuroFedora

The NeuroFedora Special Interest Group reviewed a recent orphaned packages report this week and adopted several dependencies to keep them maintained in the distribution. To reduce unnecessary maintenance burdens, the team decided to drop some leaf packages and break a test-dependency chain, allowing a few test-related packages to be gracefully retired. Additionally, group members expressed support for having NeuroFedora's public data collected and summarized for the "This Week in Fedora" automated weekly report.

Decisions

Contribution opportunities

Learn more about the NeuroFedora team.

Go

A ticket was opened to discuss the collection of the Go group's data for "This Week in Fedora," an LLM-powered weekly report. The author confirmed that while the #golang chat channel will not be collected based on prior feedback, they plan to collect data from the golang and go-sig mailing lists, the issue tracker, and Matrix meeting channels. Feedback is requested from the group to approve these sources and identify any additional platforms to track.

Decisions

Contribution opportunities

Learn more about the Go team.

Perl

This week, the Perl group focused entirely on routine package maintenance, including version updates, test corrections, and compliance fixes. All 15 mailing-list posts were automated notifications representing pull requests that were successfully opened and merged by package maintainers.

Key updates involved version bumps for perl-CPAN (2.41), perl-Dist-Zilla (6.039), and perl-LWP-MediaTypes (6.05). Furthermore, maintainers addressed test stability in perl-Dist-Zilla and ensured proper open-source documentation by adding missing license files to perl-Net-DAVTalk and perl-Net-CalDAVTalk.

Decisions

Learn more about the Perl team.

Python

This week, the Python SIG welcomed a new contributor, Renato Loureiro, a UK-based student and Python developer who plans to help package and maintain Python applications. Additionally, Aurelien Bompard requested permission to include the group's public communications (mailing lists, Discourse, and the Matrix channel) in the LLM-generated "This Week in Fedora" report. A group member responded favorably, agreeing that summarizing public sources is acceptable.

Decisions

Learn more about the Python team.

Rust

The Rust group had 2 tickets this week, focusing on legacy package deprecation and community communication policies.

Members initiated a major cleanup of outdated Rust bindings for GLib and GTK4, specifically targeting the unmaintained gtk-rs-core v0.20 and gtk4-rs v0.9 packages. Tracking bugs have been filed for affected downstream applications, and third-party libraries will require updates to matching versions before the old compatibility packages can be completely removed. Additionally, the group concluded a vote on whether their communication channels could be collected for an LLM-powered weekly report. The SIG reached a consensus to allow the ingestion of mailing lists, Discourse posts, and ticket trackers, but opted out of including their Matrix chat channel history due to its casual and ephemeral nature. Detailed discussions can be found in the package cleanup ticket and the LLM data collection ticket.

Decisions

Contribution opportunities

Learn more about the Rust team.

Other Discussions

Package updates

New contributor introductions

All contribution opportunities

For community members with Quality Assurance & Testing skills, there are numerous highly accessible ways to contribute to upcoming releases. Volunteers can participate in formal test events like the KDE Plasma 6.7 Test Day, the Fedora 45 CoreOS Test Week (with discussions on the forum), and the Anaconda F45 features test week. Testers are also needed to evaluate the unstable KDE Plasma 6.8 Beta, check for graphical corruption on Intel laptops running kernel 6.19, establish reproducers for systemd-oomd freezes on Fedora Kinoite, and verify F44 to F45 dry-run distro-sync upgrades. Additionally, users can contribute performance data for tuned or expedite meetings by voting on proposed blockers for Workstation and ARM.

Contributors with Software Development & Package Maintenance skills are urgently needed to adopt orphaned packages, including low-memory-monitor, drpm, mcelog, rust-libz-rs-sys, python-openneuro, and numerous small perl-*, rubygem-*, and erlang-* libraries. Developers can also help by packaging Collabora for a future Change Proposal, updating Rust applications to newer GTK/GLib bindings (Ticket #40), or assisting Infrastructure by building ~70 EPEL10 packages and reviewing datagrepper pull requests. Web developers are invited to migrate download pages to Server-Side Rendering or build an interactive dependency tree visualizer, while experienced packagers are encouraged to assist with stalled package reviews and sponsor new contributors.

Those with Design, Writing, & Event Production skills can make a significant impact without deep technical expertise. Creatives can generate promotional graphics for the F45 Virtual Release Party, submit sketches for the F46 Wallpaper, or design a new avatar for the Matrix Moderation Bot. Writers can author the "What's New in Fedora Workstation for F45" article, update release engineering SOPs for torrents and script timing (Meeting log and Ticket #13534), or review Server documentation. Event organizers and speakers are encouraged to take on the Production & Video lead roles for the F45 Release Party (Ticket #143) or submit 10-minute talks.

Finally, anyone capable of providing General Feedback & Strategic Discussion is strongly encouraged to help shape project direction. A major ongoing effort is the CoreOS/Atomic Initiative unification; stakeholders are asked to brainstorm in this Etherpad, join the kickoff discussions, review foundational Architectural Decision Records, and share meeting availability. Broad community input is also needed to decide which LLM models best align with Fedora's principles, how to organize EPEL CVE bug trackers, and which groups to highlight on the new Docs Contribution page.

21 Sep 2026 9:06am GMT

Rénich Bon Ćirić: The Interlock Protocol: Deterministic Rails with Autonomous AI Oversight

Rénich Bon Ćirić's avatar

Earlier tonight, my desktop fired a notification: upstream had tagged a new release for one of the packages I maintain in Fedora Copr. My background auditor had caught the new release tag from an Atom feed, compared it against my local RPM spec, and alerted me.

Yet nothing was committed. Nothing was pushed. No build had queued.

Why? Because my auditor script was just that-an auditor. It was built strictly to notify, not to act. But when I sat down to fix it, I asked myself a question that every systems engineer wrestling with AI agents needs to confront: How much of this workflow should actually touch an LLM?

The Two Polar Anti-Patterns

In modern agentic automation, I see people constantly falling into one of two traps:

LLM-First Naivety (Agent Sprawl):
This is the Silicon Valley hype pattern: wrapping every routine mechanical task in an autonomous agent. You spin up an LLM to curl an archive, parse a version string with regex, bump a number in a text file, and git commit. It takes 45 seconds, burns $0.08 of API credits, risks stochastic hallucinations on simple syntax, and introduces five points of network latency to something POSIX utilities solve in 4 milliseconds.
Script-Only Fragility:
This is the old-school UNIX purist trap: writing rigid shell scripts for everything. It runs at blistering speed and zero token cost-until upstream refactors a directory, a patch rebase fails with rejects, a Go vendor hash changes, or a new binary appears that violates your RPM %files manifest. The script crashes, execution halts, and you are dragged out of deep work to manually triage a trivial packaging drift.

Both approaches are broken in production.

The sweet spot is an architectural pattern I call the Interlock Protocol.

The Philosophy: Deterministic Spine, Agentic Tripwire

In mechanical engineering and industrial safety, an interlock is a mechanism that prevents a machine from harming itself or its operator by halting execution the moment a state parameter drifts outside tolerance.

The Interlock Protocol applies this exact concept to AI systems engineering:

Note

Prime Axiom: Run deterministic rails until the end. Engage AI strictly on exception or verification.

Under this protocol, your automation has two distinct stages:

  1. Stage 1 (The Deterministic Spine): All routine operations-source retrieval, checksum validation, spec bumping, local SRPM building, static linting, and git operations-run on rigid, deterministic POSIX rails. Zero tokens are consumed on the happy path.
  2. Stage 2 (The Forensic Interlock): When-and only when-a deterministic gate trips (a non-zero exit code, a compiler error, an rpmlint failure, or a remote build failure), the harness halts, serializes a forensic payload, and dispatches an AI agent to investigate the root cause, remediate the code, and restore equilibrium.
+-----------------------------------------------------------+
|                  Deterministic Spine                      |
|                                                           |
| [Pull Remote] -> [Fetch Archive] -> [Update Spec/Config]  |
|                                            |              |
|                                            v              |
|                                  [Compile / Lint Gate]    |
+--------------------------------------------+--------------+
                                             |
                            +----------------+----------------+
                            |                                 |
                         [Success]                         [Failure]
                            |                                 |
                            v                                 v
                  [Commit & Push Remote]            +-------------------+
                                                    | Forensic Tripwire |
                                                    | - Capture Logs    |
                                                    | - Capture Diffs   |
                                                    +---------+---------+
                                                              |
                                                              v
                                                    +-------------------+
                                                    | AI Agent Dispatch |
                                                    | (Isolated Unit)   |
                                                    +---------+---------+
                                                              |
                                                    [Diagnose & Remediate]
                                                              |
                                                              v
                                                    [Re-enter Det. Gate]
                                                    (Circuit Breaker: max 2)

The Four Core Axioms

If you want to implement this in your own infrastructure, here are the four non-negotiable rules:

Axiom 1: The Deterministic Spine
If a step can be accomplished via standard utilities, compilers, or exit-code checks, it must never touch an LLM. 90% of your operational cycles should execute in milliseconds with zero tokens spent.
Axiom 2: The Forensic Tripwire
Failures must never fail silently. When a command fails, your harness intercepts the signal and captures the exact failure slice: the failed stage name, exit codes, stderr/stdout tails, remote builder logs, and the active git diff.
Axiom 3: Scoped Escalation
Never launch an open-ended conversational agent. Dispatch the agent with bounded diagnostic context, target repository paths, and an explicit, verifiable objective. Run it in an isolated supervisor unit (like a transient systemd user unit) with independent resource accounting and cgroup isolation.
Axiom 4: Zero-Trust Handback & Circuit Breakers
An AI agent's fix must never be accepted blindly. The remediation must re-enter the deterministic harness and satisfy all original verification gates (clean compile, zero lint errors, test suites) before any change is committed or pushed. Crucially, enforce a Circuit Breaker (max 1 or 2 attempts) to prevent recursive self-healing cascades if a codebase has fundamental architectural flaws.

How I Put This into Practice

Tonight, I implemented the Interlock Protocol across my Fedora Copr packaging pipeline.

First, my auditor (fedora-copr-sync.bash) checks upstream GitHub Atom feeds for my packages (like obscura, d2, and lavinmq). When an update is detected, it doesn't just ping me; it dispatches my new updater script:

# Triggered asynchronously via systemd-run --user
fedora-copr-update.bash --watch obscura 0.2.3

The script runs Stage 1:

  1. Pulls remote changes and verifies the git tree is clean.

  2. Bumps the version in obscura.spec.

  3. Runs spectool -g to fetch the new release archive.

  4. Replaces the old tarball in git (for personal staging repositories) and stages the spec.

  5. Runs rpmlint on the spec (enforcing 0 errors).

  6. Builds the source RPM locally with rpmbuild -bs and validates the SRPM.

  7. Commits the deterministic release:

    feat(packaging): update obscura to 0.2.3
    
    Signed-off-by: Rénich Bon Ćirić <renich@evalinux.com>
    
  8. Pushes to GitLab over SSH and queues the build across all Fedora and CentOS Stream chroots in Copr.

Notice that on the happy path, there is no AI co-author trailer-because no AI was involved. It ran at pure hardware speed.

What Happens When the Build Breaks?

Here is where the Interlock trips. Suppose upstream introduced an incompatible C flag, or a Go package failed to re-vendor, or a patch rejected with .rej files, or a remote Copr builder failed in Rawhide.

In a pure script, the job dies. In an LLM-first setup, you waste tokens watching an agent fumble through 20 minutes of compilation.

Under the Interlock Protocol, the failure immediately trips Stage 2:

# Inside fail_and_dispatch()
systemd-run --user \
   --unit="agy-copr-fix-${PKG}-${TIMESTAMP}" \
   --description="Antigravity Interlock Auto-Fix for ${PKG}" \
   agy \
      --add-dir "${PKG_DIR}" \
      --dangerously-skip-permissions \
      --mode accept-edits \
      --effort high \
      --print \
      --prompt "${DIAGNOSTIC_PAYLOAD}"

Because it runs under systemd-run --user:

  • The parent process exits cleanly without hanging the supervisor or timer.

  • The agent inherits active SSH credentials (via the systemd user session's SSH_AUTH_SOCK) so it can push verified fixes.

  • Its thinking trace, tool executions, and stderr stream directly to journald.

  • When a remote Copr build fails, the harness automatically downloads and decompresses the remote build.log.gz from the failed chroot, extracting the exact compilation failure so the agent isn't guessing blind.

  • The agent reads the failure, rebases the patch or updates the spec, validates the fix locally against rpmlint and rpmbuild -bs, and commits with the proper human-agent co-authorship trailer:

    feat(packaging): update obscura to 0.2.3
    
    - Remediate compiler flag incompatibility in spec
    - Rebase 0001-btls-sys-fix.patch against upstream 0.2.3
    
    Signed-off-by: Rénich Bon Ćirić <renich@evalinux.com>
    Co-authored-by: Antigravity <antigravity@google.com>
    
  • The agent pushes to the remote repo, resubmits the Copr build, and notifies me on the desktop when the build is back in the green.

The Second Mode: Interlock-Verify

While tonight's focus was on Interlock-Resolve (self-healing exceptions), the Interlock Protocol also defines a second mode: Interlock-Verify.

In this mode, all deterministic checks pass, but the pipeline halts at a semantic boundary to allow an AI agent to perform non-computable qualitative evaluation:

  • Security Attestation: Auditing AST diffs for unintended supply-chain anomalies before package signing.
  • Changelog Semantic Consistency: Verifying that commit messages and user-facing changelogs actually reflect the underlying code diffs.
  • Breaking Change Auditing: Scanning exported API symbols for subtle semantic breaks that type-checkers might miss.

If the audit passes, the release gate unlocks and publication proceeds. If the agent flags an issue, execution halts for human review-with maintainers retaining a deterministic override flag (e.g. --bypass-interlock-verify) to handle false positives.

Conclusion

AI agents are phenomenal reasoners, but terrible conveyor belts.

Don't use an LLM to turn a bolt that POSIX tools have been turning reliably for fifty years. Build rigid, lightning-fast deterministic rails for your happy path, instrument forensic tripwires at your failure boundaries, and unleash your AI agents where their cognitive capabilities actually matter: diagnosing root causes, adapting code, and verifying intent.

Deterministic till the end. AI on exception. That is the Interlock Protocol.

21 Sep 2026 2:55am GMT

19 Sep 2026

feedFedora People

Kevin Fenzi: misc fedora bits: third week of sep 2026

Kevin Fenzi's avatar Scrye into the crystal ball

A somewhat busy week for me, so lets get into it..

RHEL10 Database migrations

So, I had finished off all the staging databases except for one the week before, so I spent a fair bit of time this last week looking at the last one. It's a pretty fun case, our db-datanommer.

This is the database that stores all the messages that go accross our message bus and allows you to search them via datagrepper. Because of the nature of the data in it, it uses the timescaledb extention on top of postgres. It's currently (in both staging and production) a rhel9 vm with postgresql 13 and timescaledb 2.10.1.

Before getting into the fun set of constraints, I'll mention that I am a paranoid sysadmin. This means I always think about 'what would happen if this migration fails there, or there' So I strongly prefer to leave something in a state where I can backout to it if something goes wrong. So, in this case I strongly prefered to just leave the existing vm alone an dmigrate to a new one, and if something blows up, can just move back to the old one.

So, the constraints were pretty fun here:

  • timescaledb has a handy chart about which versions support which postgres versions. 2.10.1 doesn't support 16 or 18. No versions support both 13 and 18. 1 version does support both 13 and 16 however.

  • rhel9 actually has postgresql-16 available, but as a module. Because it's a module it makes it hard to build normal rpms against it.

  • dump and restore of the db would take way way way too long as a pg_dumpall (sql) dump. The pg_dump formats would be faster, but not all that much because timescaledb doesn't work with -j (N jobs) on restore.

  • rhel10 has postgresql16 (default) and 18 available as seperate packages.

  • When you upgrade from 16 to 18, you need to either enable data page checksums (running a tool over the db's) or make 18 start without them. They sound like a really good idea though, so I wanted to enable them

So, in order to do this under all my constraints it would require 3 vm's: The current one (untouched), another rhel9 one to sync the data to, upgrade timescaledb on, then sync that to a rhel10 one to upgrade to 16 and then another timescaledb upgrade and upgrade from 16 to 18.

In the end though, it seems like timescaledb upgrades are pretty smooth and easy, so I decided (at least in staging) to just upgrade timescaledb to 2.13.1 (which supports both 13 and 16). That allows no intermediate rhel9 vm.

So, thats the plan, but there's more gotchas I hit along the way:

  • When upgrading from 13 to 16, you have to also have timescaledb from the 13 install installed in the right place for the upgrader to use it.

  • You also need to modify the template postgresql.conf file the upgrader users to enable timescaledb, or else when it upgrades it blows up at the end because there's a missing extension.

  • Both those last 2 things apply for 16 to 18 too.

  • The upgrader also helpfully tells you to look at some log when things fail, but it's the log from the data dir it JUST DELETED BECAUSE IT FAILED! I ended up reading those logs by running the upgrader under strace. :(

After all that, I think I have a process now. I was going to do the staging one friday, but I made a stupid mistake (putting the 13 timescaledb.so in the wrong dir) so I ran out of time. Will move it monday.

Mass firmware update/mass reboot/database migrations

So, with the last database server sorted in staging, time to get production done. We are tenatively planning an outage for 2026-10-01, the thursday before final freeze. Hopefully we can get all the databases done then.

https://forge.fedoraproject.org/infra/tickets/issues/13563

Scrapers?

Of course this will jinx things, but things have been reasonably quiet on the scraper front of late. There was some activity where they were hitting our wiki really hard, but luckily it was reasonably easy to block them in that case. It did cause problems for other services however as it caused our proxy network to hit max connections.

Otherwise it's been quite nice not to have to battle them day to day so much.

As always, comment on the fediverse: https://fosstodon.org/@nirik/117299904300111203

19 Sep 2026 9:21pm GMT

17 Sep 2026

feedFedora People

Akashdeep Dhar: From Livestream To Library: Publishing Flock To Fedora’s Session Recordings

Akashdeep Dhar's avatar

Intro

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings

After months of good old fashioned struggle with Google Drive and YouTube Studio, we were finally able to prepare the video sessions from the 2025 and 2026 Flock To Fedora event livestreams. These are now released to our YouTube and PeerTube communities. This article describes the details of the entire process that got us from the raw footage to the final uploads. It documents all our learnings along the way from the vendor selection to the FFMPEG configurations!

The Famous Last Words

While I was on my way back from Prague, after participating in Flock To Fedora 2026, I thought to myself - "Uploading the session recordings to YouTube should not be that difficult, right?". I was, of course, very humbled when I instinctively reached out to (erstwhile Fedora Community Architect) Justin Wheeler to obtain the livestream files. I was very surprised to find that there indeed was an existing process, so I did not necessarily have to reinvent the wheel.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
Recording Spreadsheets - Flock 2025

A couple years back, Adrian Edwards had worked on the tooling to more or less streamline slicing, thumbnailing, metadataing (are those actual words?) and uploading to our YouTube channel. There were, of course, changes to be made on the documented processes, but since the uploads for the 2025 events were partially done, that was a good starting point. We were yet to receive those from the 2026 events so I had some time to acclimate to the existing methods.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
Recording Spreadsheets - Flock 2026

Defective Detective

Of course, the first roadblock was as foundationally trivial as having wrong paths for the footage grouping. Flock To Fedora 2025 occurred during four days (i.e. 04th June 2025 to 07th June 2025) and across four distinct tracks (i.e. Plenary, Topaz, Opal and Quartz). This meant I had to untangle the messily organized footage files. As we were already a year late to upload the Flock To Fedora 2025 recordings, we knew that we could take some time to do it right.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
YouTube Playlist - Flock 2025

I onboarded Shounak Dey, a fellow Fedora Infrastructure contributor who had previously helped me with the Fedora Badges Revamp Project, to help me out with this. He was able to maintain spreadsheets for the footage files and their corresponding mappings. That allowed us to quickly move to the next step. While I initially started using SponsorBlock to annotate the video timestamps, I quickly reverted back to manually eyeballing them using VLC Media Player.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
Google Drive - Flock 2025

More Hands, Quick Hands

Delegation was key here. While Shounak worked on manually annotating the video timestamps, I focussed on slicing sessions from the footage files using the LosslessCut application. With Adrian's Python scripts coming in the clutch and Justin giving the necessary access to Shounak, the only thing holding us back was the network bandwidth at that time. We earmarked some changes for the documentation updates, but we had to keep those for later when the processing was complete.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
Configuring Tracks - LosslessCut Application

Justin and I were planning on a phased video release model, with sessions coming out on PeerTube first, before coming to YouTube. The videos being released gradually on both the platforms would ensure that we were able to retain the audience footfall and general relevance. In between - we had to bide our time if we wanted to succeed. I was gradually getting back to my day job as I worked through my event report for the Flock To Fedora 2026 conference.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
Configuring Outputs - LosslessCut Application

Where Are Those Templates?

The processing scripts and relevant documentation were available, however, I had to go looking for the thumbnail templates. It did not help that those files were on a separate repository, thus making it difficult for some contributors not as involved as us to be able to discover them organically. Shounak kept jotting down the improvements to the documentation that he would make once we were done with processing livestreams for both 2025 and 2026.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
Thumbnail Template - Flock 2026

What did not help was the buggy nature of the InkScape plugin for generating thumbnails using the discovered template called NextGenerator Addon. Honestly, I was at my wits end - as I was no designer and had no idea how to tailor fit the generated templates from the flaky extension. With some help from Emma Kidney and Madeline Peck, we were able to drive it home as they began working on the templates for the 2026's edition of the Flock To Fedora 2026 event.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
Thumbnail Proposal - Flock 2026

Lay of the Land

By the last week of June 2026, we had received the footage files from Flock To Fedora 2026. I had access to the Fedora Project's YouTube channel, from back in the Fedora Websites And Apps days, and had begun uploading the sessions while marking them as unlisted. The learning ordeal from the footage processing of Flock 2025 gave us enough idea about how to proceed. This sped things up significantly once we were done with the growing pains of the required tooling.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
YouTube Playlist - Flock 2026

I focused on uploading the 2025 slices on Google Drive for Justin to be able to upload them later onto PeerTube. At the same time Shounak stepped up to participate in the Marketing Team as an official member. There were some missing recordings that we pursued with Dorota Volavkova for multiple weeks. This was in vain and we ultimately settled for the lower quality YouTube VODs. We were more or less gradually closing on the finish line with this entire initiative. Or at least, so we thought…

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
Google Drive - Flock 2026

No Audio? No Problemo!

This week we faced a new problem! About ten of our uploaded videos from Flock To Fedora 2025 did not have an audio playback in them. The audio tracks from the source files were unable to be muxed into the MP4 format. We had to losslessly convert the PCM format audio to the AAC format first. This came to our attention from a YouTube viewer's comment message. We had to resort to unlisting the affected videos and uploading them as a separate entry.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
LosslessCut highlighting muxing exceptions

With Shounak pushing his documentation changes, I worked through this problem since this had to resolve as soon as possible. Late uploads for 2025 was already bad enough. We did not want the affected videos to create a new problem. After spending almost half a day learning FFMPEG's configs and documenting those, I was able to put it back into Justin's hands to reschedule the release of the (now fixed) session recordings.

From Livestream To Library: Publishing Flock To Fedora’s Session Recordings
Shounak's suggested documentation changes

Outro

One of the (rather unarguably) best ways to fix a problem is to first face the problem itself before rolling up your sleeves to resolve it. What I initially thought would be a very atomic and less influential contribution method ended up touching a wide part of Fedora Project's community processes. Not only were we able to get these videos out for 2025 and 2026, but we were also able to mark a path forward for those who come after us wanting to do this for future events.

This article was originally posted on Fedora Magazine on 09th September 2026.

17 Sep 2026 6:30pm GMT

Fedora Community Blog: Fedora at Data Con LA 2026: Open Source & Local AI

Fedora Community Blog's avatar

On Saturday, August 22, 2026, the Fedora Project joined forces with openSUSE at Data Con LA 2026, hosted on the campus of California State University, Long Beach (CSULB).

Now in its 14th year, Data Con LA is Southern California's largest gathering of data professionals, students, and practitioners covering data science, AI/ML, and data engineering. While Data Con LA is not a traditional Linux-centric conference, our presence offered a unique, hands-on opportunity to engage a fresh audience of prospective contributors, test our event planning workflows, and showcase Fedora Workstation in action.

As part of our ongoing work to standardize the Fedora Ambassador event pipeline, this report reflects on our operational outcomes, what worked well, and key lessons learned for future event organizers.

1. A Standout Win: "A House with Many Rooms" (Co-Hosting with openSUSE)

Our standout operational victory at Data Con LA was co-locating and sharing table space side-by-side with openSUSE advocates (coordinated with Patrick Finie / mir and Drew Adams).

Rather than maintaining isolated tables, we embraced the philosophy of "A House with Many Rooms." This cross-community collaboration was an immediate force multiplier:

For future community organizers planning small-to-medium booths, establishing a shared booth with allied open source projects is an operational model we strongly recommend.

2. Demographics & Lead Engagement

Over the course of the day, our booth engaged approximately 100 visitors (110% of our initial goal), with peak traffic occurring during the post-keynote morning rush (9:30 AM - 11:00 AM) and lunch transitions (12:30 PM - 2:00 PM).

The attendee demographic offered valuable insights into the broader tech ecosystem:

3. The Technical Showcase: Local AI on Fedora Asahi Remix

To connect directly with the conference's AI/ML focus, we showcased a fully offline, containerized local AI demonstration running on an Apple Silicon laptop.

The Setup

Why It Resonated

This demonstration served as a major crowd-pleaser across two distinct attendee groups:

  1. Data Professionals & Privacy: Attendees expressed fatigue with commercial operating systems that enforce invasive telemetry and proprietary cloud AI features. Highlighting how Fedora enables private, offline LLM inference with zero data leakage resonated powerfully.
  2. Students on a Budget: CSULB students loved seeing how Linux can revive older, restricted hardware to deliver a capable, subscription-free AI workspace without requiring expensive cloud API tokens.

4. Advice & Lessons for Future Event Owners

If you are planning to organize a small event (under $150) or booth presence in the next six months, here are four practical takeaways from our experience:

  1. Design 100% Offline Demos: Campus and conference Wi-Fi networks are notoriously unreliable, firewalled, or slow. Designing our demo to run entirely inside local Podman containers without requiring an internet connection kept our booth fully functional all day without friction.
  2. Account for Outdoor Environmental Factors: Our booth was located in an outdoor expo space. During the afternoon peak heat, direct sunlight caused our demo laptop to heat up, requiring us to tuck it under banners in the shade. Recommendation: Always confirm booth coverage in advance, and pack brimmed hats, pop-up shade, or cooling accessories if outdoor placement is unavoidable.
  3. The Power of the Daily User Perspective: You do not need to be a kernel developer or upstream maintainer to staff a Fedora booth. Sharing how you use Fedora day-to-day for work, study, or home projects alleviates "imposter syndrome" and provides relatable, authentic guidance that newcomers appreciate.
  4. Keep Swag Requests Lean on Short Timelines: Because our event planning window was short, we kept our Forgejo Mindshare swag request focused strictly on high-impact essentials: stickers, case badges, and pens. Podman and Fedora logo stickers drew in decision-makers and students alike.

5. Next Steps & Wrap-Up

We would like to thank Patrick Finie, Drew Adams, and the openSUSE community for partnering with us, as well as the CSULB organizers for putting together a fantastic event.

Following Data Con LA, our team of Ambassadors Perry Rivera and Rob McBryde are incorporating these lessons directly into the new Small Events Standard Operating Procedure (SOP) and preparing for upcoming community participation at SCaLE. Our intention is to share and publish this information in the Fedora Docs website so that other event owners in the Fedora community may benefit from common wisdom from others who have done this work before.

The post Fedora at Data Con LA 2026: Open Source & Local AI appeared first on Fedora Community Blog.

17 Sep 2026 12:00pm GMT

Ben Cotton: What you do matters more than what you intended

Ben Cotton's avatar

This isn't an "actions speak louder than words" sort of post, although I suppose they're related thoughts. It's more about the idea that whatever you support trumps what you intended to support. It's more of an XKCD #1172 post.

On a mailing list I'm on, there was recently a thread about NOAA preparing to retire a satellite-based data transmission service called NOAAport. One person wrote:

But what I think people are missing is NOAAPort was never truly designed to serve anyone outside of NOAA. It is a service by NOAA, for NOAA, that we were lucky enough to be able to tap into because it was clear-air transmission.

Another participant responded:

Whatever its original design motivation, NOAA has knowingly operated NOAAPORT for decades as a primary public dissemination mechanism. Entire academic, commercial, emergency-management, broadcast, and value-added ecosystems were built around that availability with NOAA's knowledge and participation. After decades, its actual role matters significantly more than the original design intent.

This is an important lesson for maintaining an open source project. Whether it's a feature in the software or a service you provide, once it's there, people will expect it to remain there.

If you say a particular feature or configuration is unsupported, but then you start supporting it, it's now supported. You're allowed to change your mind, of course. You can start out not intending to support something and then later decide to do it. But if you claim you're not and you do, then you are.

This means that if you decide you're not going to support something, then you have to continue to say "no" to it whenever it comes up. Saying "no" is one of the harder things we have to do, so it's good to remind ourselves sometimes.

This post's featured photo by Maayan Nemanov on Unsplash.

The post What you do matters more than what you intended appeared first on Duck Alignment Academy.

17 Sep 2026 12:00pm GMT

Fedora Badges: New badge: TXLF 2026 !

17 Sep 2026 11:50am GMT

16 Sep 2026

feedFedora People

Fedora Magazine: CoreOS 45 Test Week

Fedora Magazine's avatar

The Fedora CoreOS and QA teams are gearing up for Fedora 45, and we need your help! We are organizing a Fedora CoreOS Test Week starting on September 21, 2026.

This event is a great opportunity for the community to test Fedora CoreOS (FCOS) based on Fedora 45 content before it officially reaches the testing and stable streams. By participating, you help us ensure a smooth and reliable experience for all users.

How does a Test Week work?

A Test Week is an event where anyone can help verify that the upcoming release works as expected. If you've been looking for a way to get started with Fedora contribution, this is the perfect entry point.

To participate, you simply need to:

The Wiki Page is your primary source of information for this event. It contains information on what to download (and from where), what and how to test, who you can contact if necessary, and where to report any bugs you may find. Once you have completed your tests, please log your results there!

Your contribution, big or small, makes a huge difference. Let's work together to make Fedora CoreOS 45 a great release. Happy testing!

16 Sep 2026 8:00am GMT

15 Sep 2026

feedFedora People

Michael Catanzaro: Privilege Escalation Vulnerabilities in NetworkManager Plugins

Michael Catanzaro's avatar

Andreas Gabriel Berbescu has reported several root privilege escalation vulnerabilities in various NetworkManager VPN plugins. If the VPN plugin is installed, then an unprivileged user can escalate to root by loading a malicious VPN configuration file:

While most obviously bad for multi-user systems, root privilege escalation is also a serious defense in depth problem for single user systems. You are vulnerable if you have the VPN plugin installed; it does not matter whether you actually use it or not.

These are not vulnerabilities in NetworkManager itself. The VPN plugins are each separate projects, with their own separate maintainers, hosted by GNOME rather than by freedesktop.org. The status of each project is a little different:

For more information on NetworkManager VPN plugins, see Josephine's VPN plugin overview and announcement.

15 Sep 2026 4:26pm GMT