We'd like to get https://src.fedoraproject.org/rpms/python-rpm-macros/pull-request/141 merged and tagged before the mass rebuild starts. We expect to merge and build it today. This is for https://fedoraproject.org/wiki/Changes/PythonSafePath

We also need to deploy a new version of sigul for the rpm signing feature (it will also have the positive effect of massively speeding up standard rpm signing because we did some optimisation so the rpms aren't copied across the network 3 times).

We'd like to get https://src.fedoraproject.org/rpms/python-rpm-macros/pull-request/141 merged and tagged before the mass rebuild starts. We expect to merge and build it today. This is for https://fedoraproject.org/wiki/Changes/PythonSafePath

This has landed in the rawhide buildroot.

We also need to deploy a new version of sigul for the rpm signing feature (it will also have the positive effect of massively speeding up standard rpm signing because we did some optimisation so the rpms aren't copied across the network 3 times).

I'd love to do that, but I'm not sure there is time. Are things ready to upgrade?
Happy to work with Patrick or whoever to get it upgraded...

I'd love to do that, but I'm not sure there is time. Are things ready to upgrade?
Happy to work with Patrick or whoever to get it upgraded...

Absolutely, much better to engage with him directly.

Shouldn't this land (and gcc get rebuilt) before the mass rebuild?

https://src.fedoraproject.org/rpms/gcc/pull-request/25

That change was not even voted by FESCo. There is a reason changes requiring mass rebuild are to be submitted by 2022-06-28.

I worked with @puiterwijk to get ima signing working. Rawhide/f37 builds and builds in the f37-rebuild tag are being ima signed now.

There's some more builds in f37-rebuild we need to go back and sign, but we can do that tomorrow.

The mass rebuild seems to be running along now.

The f37-rebuild tag has been merged back:

https://www.scrye.com/~kevin/fedora/f37-rebuild.out