The current version of trafficserver packaged for Fedora is very old, outdated, and has several unfixed CVEs. The package is FTBFS since Fedora 25. I tried to contact the owner / maintainer @janfrode of that package several times with no response.
As I do not have any interest in the package itself nor the time to update it to a recent version, but the FTBFS blocks the finalization for two of my F30 changes, I want to retire the trafficserver package. Alternatively you can give me the ownership of all of his packages, so I can retire trafficserver and find new maintainers for the rest.
CC'ing: @nb as they is the sponsor of @janfrode.
Koji builds of the package: https://koji.fedoraproject.org/koji/packageinfo?packageID=13558
RHBZ request for response (blocking all bugs / CVEs on the package): https://bugzilla.redhat.com/show_bug.cgi?id=1666720
RHBZ tracking bugs of my changes: https://bugzilla.redhat.com/show_bug.cgi?id=1666033 https://bugzilla.redhat.com/show_bug.cgi?id=1670735
Mailing lists tickets: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/PA2LNDFYAREGYK75EPNOZRX5CJNOI5R6/#PA2LNDFYAREGYK75EPNOZRX5CJNOI5R6 https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/XQQDADS6CMNNWYRNOZQAXHEGG7OPEXFA/#XQQDADS6CMNNWYRNOZQAXHEGG7OPEXFA
trafficserver should be retired by the FTBFS policy anyway, so +1 to retire it (it's a leaf)
also +1 to orphaning rest of the packages:
Everything else listed at https://src.fedoraproject.org/user/janfrode is not in the main admin relationship with @janfrode.
Metadata Update from @churchyard: - Issue tagged with: nonresponsive maintainer
+1 to orphan
+1 to retirement of trafficserver and orphaning of other packages.
Since the mod_auth_token package seems to need low maintainance, you can transfer it to me directly instead of orphaning it.
mod_auth_token
+1 to retirement of trafficserver and transfer of mod_auth_token
This is approved.
Yet somebody needs to do this. @kevin can do it, but if he's not available, please open a @releng ticket.
Created issues with @releng:
trafficserver has been retired. This ticket can be closed then.
Metadata Update from @kevin: - Issue close_status updated to: Accepted - Issue status updated to: Closed (was: Open)
Hi All,
I see that the primary reason that this package was retired was because of an un-responsive maintainer. The upstream project is well documented, has been making regular releases and has a active community. I am interested in working to reactivate this package, and become its maintainer.
I have a fair amount of experience with Apache Traffic Server, and as part of my $DAYJOB, i do build and maintain rpm's of trafficserver for RHEL/CentOS on my organizations internal repo's. Even though it is for my internal repos, i try to follow the EPEL packaging guidelines, and am happy to do the work required to repackage the current supported versions as per the fedora packaging guidelines(with a little bit of advice and guidance from the pro's, of course).
Regards R. K. Rajeev.
Hello R. K.,
I am glad you are interested. This ticket is where the package was orphaned. If you'd like to reintroduce trafficserver into Fedora, you need to become a Fedora packager first. The process is documented in https://fedoraproject.org/wiki/Join_the_package_collection_maintainers
Login to comment on this ticket.