DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 59TAxeXl1724857
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 637223858CD1
Date: Wed, 29 Oct 2025 11:59:04 +0100
To: cygwin AT cygwin DOT com
Subject: Sourceware infrastructure updates for Q3 2025
Message-ID: <20251029105904.GS26406@gnu.wildebeest.org>
MIME-Version: 1.0
Content-Disposition: inline
User-Agent: Mutt/1.5.21 (2010-09-15)
From: Mark Wielaard via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Mark Wielaard <mark AT klomp DOT org>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

Sourceware infrastructure community updates for Q3 2025

  Keep Sourceware worry-free, friendly and independent by donating
  https://sourceware.org/donate.html support our fiscal sponser SFC
  https://sfconservancy.org/sustainer and/or support OSUOSL for
  hosting Free Software projects like ours https://osuosl.org/donate/

Every quarter we provide a summary of news about Sourceware and
roadmap updates https://sourceware.org/sourceware-25-roadmap.html

  - Forge updates
  - Cyber Security FAQ updates
  - GCC automated documentation snapshots
  - Moving, upgrading and isolating services in new datacenter
  - Signed-commit census leaderboard
  - Sourceware Organization, Contact and Open Office hours

= Forge updates

  We had a productive discussion about the forge experiment at
  Cauldron.
  https://inbox.sourceware.org/20251015214031 DOT GP30855 AT gnu DOT wildebeest DOT org

  As a result we are trying to remove the experimental label and make
  the setup more production ready. An important step was done by Frank
  and Claudio who setup forge-stage.sourceware.org which is completely
  Ansible managed and where we can test out new configurations before
  enabling them on the main forge (this new staging server already
  runs in the new datacenter - see below).

  Thanks to Mark forge.sourceware.org now also has an Actions server
  for people to define x86_64 container workflows. Christophe got
  check_GNU_style.py and git_check_commit.py working as an action on
  merge requests. The Linaro-CI now polls the forge for open PRs and
  checks if it has already executed the tests. If not, it triggers
  builds in Linaro Jenkins, using Linaro Arm machines and reports the
  results in the MR.

  Claudio has installed batrachomyomachia which can sent MRs to the
  patches mailinglists for review. Projects can now also experiment
  with issues, wikis and projects (kanban boards) for forge repos. We
  don't really want to have to support those, but for new projects it
  might be interesting to try them out. And Richard has proposed a
  label system for merge requests that should also help the workflow
  automation.

  See https://gcc.gnu.org/wiki/ForgeExperiment

= Cyber Security FAQ updates
  https://sourceware.org/cyber-security-faq.html

  Sourceware, together with the Software Freedom Conservancy, keeps
  track of proposed cyber security regulations. We analyze and give
  recommendations for policies to adopt by hosted projects. And
  provide practical suggestions for specific Secure Software
  Development practices to implement.

  This quarter we updated our Cyber Security FAQ with the following
  items:

  - Added a reference to an explanation of the Trump executive order
    to rewrite NIST SP 800-218 (SSDF) and remove the attestation
    requirement.

  - Added a link to the FSFE EU CRA presentation for SFC Member
    Projects. Might be interesting if you want more background info on
    the CRA.

  - Sample CRA request reply template. If you have to reply to those
    companies asking about the CRA and you like them to contribute
    back. https://sourceware.org/cyber-security-faq.html#eu-cra-reply

= GCC automated documentation snapshots

  Cannot wait till the generation of the nightly gcc online
  documentation? There is now an hourly gcc docs snapshots builder:
  https://snapshots.sourceware.org/gcc/docs/latest

  Thanks to Aarsen there is now a gen_gcc_docs.sh script that runs in
  a container that can build all GCC documentation. You can use the
  same script to generate all gcc docs locally. Hopefully this can in
  the future also create the onlinedocs so more processes like these
  can be isolated (see below).

= Moving, upgrading and isolating services in new datacenter

  The migration of services to a bigger server in a new datacenter is
  in full swing now. Hopefully we will have migrated services by
  December 1st, after which we'll move the old servers also to the new
  datacenter. If we aren't ready then, the move will be after February
  1st 2026. https://sourceware.org/sourceware-wiki/Migration2025/

  In the new datacenter we will have multiple public ipv4 (and ipv6)
  addresses that can be used by VMs. We have currently setup 8
  separate VMs which can run services in isolation. The first two VMs
  are for the forgejo staging server forge-stage.sourceware.org and
  the debuginfod.elfutils.org services. The next VMs will probably be
  used for patchwork.sourceware.org, inbox.sourceware.org,
  builder.sourceware.org and bunsen.

= Signed-commit census leaderboard

  How is your project doing on signed commits?
  
  Analyzing branch HEAD since 2025-01-01
  cygwin-calm      32 commits  32 signed 100%   1 committers  1 signers 100%
  cygwin-setup     11 commits  11 signed 100%   1 committers  1 signers 100%
  gitsigur          5 commits   5 signed 100%   1 committers  1 signers 100%
  annobin          51 commits  42 signed  82%   2 committers  1 signers  50%
  systemtap        87 commits  70 signed  80%   5 committers  4 signers  80%
  bunsen          224 commits 177 signed  79%   2 committers  2 signers 100%
  elfutils        149 commits  53 signed  35%   4 committers  2 signers  50%
  builder          73 commits  18 signed  24%   4 committers  3 signers  75%
  lvm2            649 commits  61 signed   9%   7 committers  1 signers  14%
  newlib-cygwin   447 commits  33 signed   7%  14 committers  2 signers  14%
  gcc            7734 commits 597 signed   7% 176 committers 11 signers   6%
  glibc          1101 commits  75 signed   6%  38 committers  2 signers   5%
  debugedit        19 commits   1 signed   5%   2 committers  1 signers  50%
  libabigail      106 commits   4 signed   3%   2 committers  1 signers  50%
  binutils-gdb   3311 commits 100 signed   3%  89 committers  5 signers   5%
  bzip2             2 commits   0 signed   0%   1 committers  0 signers   0%
  dwz               9 commits   0 signed   0%   2 committers  0 signers   0%
  forge            19 commits   0 signed   0%   1 committers  0 signers   0%
  gnu-gabi          1 commits   0 signed   0%   1 committers  0 signers   0%
  insight          68 commits   0 signed   0%   1 committers  0 signers   0%
  libabigail-tests  4 commits   0 signed   0%   3 committers  0 signers   0%
  valgrind        605 commits   0 signed   0%   7 committers  0 signers   0%

= Sourceware Organization, Contact and Open Office hours

  We can be reached through irc, email and bugzilla
  https://sourceware.org/mission.html#organization

  There is also a fediverse account for for announcements, notices
  about downtime and temporary issues with our network.
  https://fosstodon.org/@sourceware

  Every second Friday of the month is the Sourceware Overseers Open
  Office hour in #overseers on irc.libera.chat from 16:00 till 17:00
  UTC. Please feel free to drop by with any Sourceware services and
  hosting questions.

  Do you or your company want to sponsor Sourceware plans financially
  https://sourceware.org/sourceware-security-vision.html#plans
  donate hardware or services then contact us at sponsor AT sourceware DOT org

  The PLC https://sourceware.org/mission.html#plc currently consists
  of 7 members. The mandatory minimum number of Members is 4. And no
  more than 2 Members may be Financially-Related to the same Entity.

  If you are interested in joining the PLC please read the
  https://sourceware.org/Conservancy-Sourceware-FSA.pdf
  Fiscal Sponsorship Agreement, the Conflict of Interest Policy
  https://sfconservancy.org/projects/policies/conflict-of-interest-policy.html
  and contact us at plc AT sourceware DOT org.

  If you rather help with more technical tasks please join the
  overseers list: https://sourceware.org/mailman/listinfo/overseers

Sourceware PLC,

 Frank Ch. Eigler, Ian Kelling, Ian Lance Taylor, Tom Tromey,
 Jon Turney, Mark J. Wielaard and Elena Zannoni


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple