Ausnahme gefangen: SSL certificate problem: certificate is not yet valid ๐Ÿ“Œ CentOS Blog: Git Forge Requirements ODF

๐Ÿ  Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeitrรคge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden รœberblick รผber die wichtigsten Aspekte der IT-Sicherheit in einer sich stรคndig verรคndernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch รผbersetzen, erst Englisch auswรคhlen dann wieder Deutsch!

Google Android Playstore Download Button fรผr Team IT Security



๐Ÿ“š CentOS Blog: Git Forge Requirements ODF


๐Ÿ’ก Newskategorie: Unix Server
๐Ÿ”— Quelle: blog.centos.org

About this document

This document lays out a problem statement, requirements, and constraints according to theย Open Decision Framework. The aim is to arrive at a transparent decision about the future of a git forge for the communities that represent the platforms that the Community Platform Engineering (CPE) team manages. Those communities are the CentOS and Fedora platforms and also include the Red Hat Enterprise Linux (RHEL) platform from a tooling and integration perspective. This document is the first in a series of documents capturing the conversation about the problems we face and driving the conversation to implement the decisions captured.

Problem

The problem statement for this ODF can be broken down into a number of disctinct problems. They are listed in no particular order or priority:

CPE Mission Statement

The Community Platform Engineering (CPE) team have aย mission statementย to support the infrastructure and services that build and deliver platform artifacts. The mission statement aims to focus the teamโ€™s work from overcommitting to work, running multiple projects in a disconnected manner and to ultimately provide focus and value for our Communities. The remit of the team needed to be defined to allow the team to both manage the workload and the expectations.
Using this definition, the current git forge, Pagure, does not align with what CPE can focus on from both a roadmap development perspective and the operational requirements that such a service demands long term. While Pagure was historically driven by the CPE team, developing a gitforge is outside of building and delivering platform artifacts. [See the later sections for more focus on this.] A self-hosted and self-developed git forge is not required to build and deliver platform artifacts.
While we can make exceptions to the mission statement, we first need to know why we should consider a specific exception. This helps justify the inclusion and subsequent prioritisation of work. We recognise that Pagure is deeply integrated into our daily workflows and is used extensively by the Community. This is the reason the CPE team has not re-examined this commitment, and is a primary driver to openly discuss the teamโ€™s and communityโ€™s requirements for a git forge.

Development work on Pagure

The CPE team has been unable to commit a development team to Pagure for several months now. This situation is unlikely to change based on our current known priorities.
Historically, Pagure was maintained by individuals (including members of the Fedora community who arenโ€™t on the CPE team) where spare cycles allowed. However, CPEโ€™s mode of working is now that of feature teams, removing the siloed contributions in favour of building sustainable team practices. The featureย roadmapย for Pagure, however, cannot be executed solely by the CPE team, since the feature requests need to be weighed against the teamโ€™s other priorities.
Pagure represents one app out of our current ownership of 100+ code bases. Therefore progression of the roadmap is not guaranteed and certainly not at the pace seen previously. Similarly, bug fixes and enhancements are currently on a best-effort basis. The code is therefore frozen from a functionality perspective pending the outcome of this ODF.

Operational considerations of Pagure

Every line of code and application CPE supports as a team has a cost burden for maintenance and uptime. Pagure is highly-connected to numerous services that are critical to successfully running services that CPE and the community need and support. Therefore, the team must look at long term maintenance including bug fixes and server maintenance as requirements.

At the same time, integrations that already exist in Pagure may need to be created for another git forge, which is a cost as well. This also needs to be fully considered by the team as part of the requirement gathering.

Another major consideration to operationally own an application is its performance and scalability. A git forge may have key requirements for uptime, availability and responsiveness for end users. The current scalability profile of Pagure is unlikely to substantially change as it is resourced today โ€“ while the consumption profile of the user base and interconnected applications is likely to increase.

History of gathering requirements

TThe original purpose of Pagure was to mirror the functionality of popular git forge solutions that were available at the time (when most were nascent). Pagureโ€™s feature enhancements were driven by community needs and the teamโ€™s viewpoint of where a git forge should go. The team has not solicited requirements in a holistic way from its users and the community, and its internal customers have mainly consisted of the team itself.

However, we also recognize that the feature gap between Pagure and some other forges is substantial and growing. Without either a dedicated development team, or stealing resources from other priority initiatives, it will be almost impossible to close those gaps. Depending on the consumersโ€™ requirements, we recognize this could put Pagure in an untenable situation versus other solutions.

This makes gathering a full set of requirements even more critical. If we fail to capture requirements completely, this discussion is very likely to happen again, only more urgently and with less time for the team to plan and react.

Problems weโ€™re not trying to solve

Feature gap between various git forge solutions

This conversation does not focus on whether Feature X exists in Forge Y or Forge Z. Instead it focuses on functional and non functional requirements for a git forge in general.

CPE time and resourcing investment

This conversation does not focus on how the CPE team invest their time and limited resources. That is not a factor in this discussion.

CPE Mission Statement

This document does not focus on the CPE Mission Statement or whether a git forge should fit that Mission Statement.

Who is making the decision?

The decision will be made by the management of the CPE team with careful consideration of the requirements for both the Fedora and CentOS communities as well as the needs of the team. The CPE team is the group that manages the integration of services and tooling with a git forge solution on behalf of our communities, and will choose the most sustainable, functional, and scalable option to improve our workflows long term.

Choices Available

There exist three choices for such a solution. Github, Gitlab and Pagure. There are no other forges that we could find that had both the product maturity and standing in open source communities, therefore no other solutions are under consideration as the three choices here represent the main git forge solutions on the market. The team will use the requirements gathered to make an informed decision on which of the 3 to pursue.

Who has input into the decision?

Please see the section on Stakeholders below.

Objectives

Identify functional requirements of a git forge that end users and stakeholders need

The goal is to outline what is needed from the day to day perspective of:

  • Using a git forge solution.
  • Maintaining a git forge solution
  • Future proofing a git forge solution

Requirements are welcome from members of the CPE team and the groups identified as being impacted by such a decision.

Identify non-functional requirements of a git forge that end users and stakeholders need

Examples of non-functional requirements include but are not limited to performance, scalability, availability, reliability, maintability, and capacity. The goal here is to include considerations of this nature from any group impacted by this decision.

Make an informed decision on the future of our git forge solution

Upon gathering the requirements of a git forge solution, the intention is to:

  • Examine requirements gathered versus available git forges
  • Examine the cost of each forge from the CPE teams perspective. This cost is not exclusively a monetary amount and includes maintenance and development costs and trade offs versus our teams roadmap

To be clear, the outcome here may be a decision to invest heavily in Pagure to meet the requirements or it may be to opt for another git forge to meet the requirements. No option is off the table.

Who may be impacted

  • Package maintainers for Fedora, EPEL, CentOS Linux, and CentOS Stream
  • Developers of apps/services for infrastructure that integrate via Pagure
  • The CPE team
  • Developers (and users) that use Pagure for their upstream source
  • Members of the Fedora and CentOS communities who currently use Pagure as a source repository or ticket system

Who are the key stakeholders

While we apprecaited that all individual voices matter, for a more sane approach to gathering requirements we will identify key stakeholders to collate and present a singular view of their representation.

  • Fedora Council will represent the individual community members of the Fedora Project
  • CentOS Board will represent the individual community members of the CentOS Project
  • Paul Frields will represent the RHEL perspective
  • Aoife Moloney will roll up the requirements of the CPE team as our Feature Driver.

How will information be gathered and disseminated?

It is recommended that both Fedora Council and CentOS Board gather input and present their concerns in a manner that is consistent with how their communities work. The RHEL and CPE requirements will be gathered through Red Hat communication mechanisms and presented publicly via a HackMD file to ensure transparency in their source. This will be published and distributed in due course. Additionally, a live video call and associated IRC meetings will be held and advertised in advance to discuss the requirements, talk about concerns and address any questions. We want transparency to be at the heart of this decision.

Timeline of Phases

  • January 13th 2020 sharing of the ODF for consideration within CPE Team
  • January 20th 2020 sharing of the ODF for consideration to Community
  • February 10th 2020, closing of comments from stakeholders which marks the end of the Ideation Phase
  • CPE Management evaluate the requests and where necessary may instruct the CPE team to begin a Planning and Research phase to take in the inputs from the Ideation Phase
  • CPE design, develop and test proof of concept plans based on the decision made by CPE Management and share this with the Community
  • CPE closes the ODF with a decision made and a path forward for our git forge
...



๐Ÿ“Œ CentOS Blog: Git Forge Requirements ODF


๐Ÿ“ˆ 88.18 Punkte

๐Ÿ“Œ CentOS Blog: CentOS 8 and CentOS Stream updates, and feeds.centos.org


๐Ÿ“ˆ 48.1 Punkte

๐Ÿ“Œ CentOS Seven blog: Seven.centos.org is dead .. long life to blog.centos.org !


๐Ÿ“ˆ 48 Punkte

๐Ÿ“Œ CentOS Blog: Git Forge decision


๐Ÿ“ˆ 45.84 Punkte

๐Ÿ“Œ [$] Fedora gathering requirements for a Git forge


๐Ÿ“ˆ 39.86 Punkte

๐Ÿ“Œ CentOS Blog: CentOS 8 and CentOS Stream released


๐Ÿ“ˆ 38.46 Punkte

๐Ÿ“Œ CentOS Seven blog: CentOS Linux 6 to CentOS Linux 7 Upgrade Tool


๐Ÿ“ˆ 38.46 Punkte

๐Ÿ“Œ CentOS Seven blog: CentOS Linux can only come from the CentOS Project


๐Ÿ“ˆ 38.46 Punkte

๐Ÿ“Œ CentOS Seven blog: CentOS Linux can only come from the CentOS Project


๐Ÿ“ˆ 38.46 Punkte

๐Ÿ“Œ CentOS Blog: Update: State of CentOS Linux 8, and CentOS Stream


๐Ÿ“ˆ 38.46 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Project shifts focus to CentOS Stream


๐Ÿ“ˆ 38.46 Punkte

๐Ÿ“Œ LibreOffice 5.4 unterstรผtzt OpenPGP zum Signieren von ODF-Dokumenten


๐Ÿ“ˆ 29.14 Punkte

๐Ÿ“Œ GPAC 0.7.1 odf/ipmpx_code.c ReadGF_IPMPX_RemoveToolNotificationListener memory corruption


๐Ÿ“ˆ 29.14 Punkte

๐Ÿ“Œ CVE-2015-5212 | LibreOffice/OpenOffice ODF File numeric error (USN-2793-1 / BID-77486)


๐Ÿ“ˆ 29.14 Punkte

๐Ÿ“Œ CVE-2022-43255 | GPAC 2.1-DEV-rev368-gfd054169b-master odf/odf_code.c gf_odf_new_iod memory leak (ID 2285)


๐Ÿ“ˆ 29.14 Punkte

๐Ÿ“Œ Office-Schnittstelle fรผr ODF-Dateien


๐Ÿ“ˆ 29.14 Punkte

๐Ÿ“Œ How To Convert ODF Files to PDF in Java


๐Ÿ“ˆ 29.14 Punkte

๐Ÿ“Œ CentOS Seven blog: New CentOS Atomic Host with Optional Docker 1.13


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Seven blog: Status update for CentOS Container Pipeline


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: Release for CentOS Linux 6.10 i386 and x86_64


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Pulse Newsletter, September 2018 (#1804)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Pulse Newsletter, October 2018 (#1805)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: Video from the CentOS Dojo at CERN now available


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Pulse Newsletter, November 2018 (#1806)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS 15 Birthday โ€“ Blog.CentOS.org


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Pulse Newsletter, January 2019 (#1901)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Community Newsletter, August 2019 (#1908)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Community Newsletter, July 2019 (#1907)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Community Newsletter, June 2019 (#1906)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Pulse Newsletter, May 2019 (#1905)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Pulse Newsletter, April 2019 (#1904)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: CentOS Pulse Newsletter, March 2019 (#1903)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Seven blog: Updated CentOS Vagrant Images Available (v1708.01)


๐Ÿ“ˆ 28.82 Punkte

๐Ÿ“Œ CentOS Blog: Release for CentOS Linux 7 (1908) on the x86_64 Architecture


๐Ÿ“ˆ 28.82 Punkte











matomo