tracker: Fedora 42 changes considerations

[marmijo]

Output generated by and stored alongside (with modifications) this script in a fork of the pgm_scripts repo.

---

Fedora 42 Accepted System-Wide Changes (wiki source)

101. ✔️ Update Zlib-ng to version 2.2.x
     • Update Zlib-ng on Fedora 42 to version 2.2.x. Currently, Fedora distributes Zlib-ng 2.1.7.
     • Tracking bug: #2325880
     • NOTES:
       • TR: FCOS ships zlib-ng-compat. This should come as an update for us. Nothing specific to do.
       • MA: Change is out of order because the tracking bug was created after this list was created.
102. ✔️ DNF/RPM Copy on Write enablement for all variants
     • RPM Copy on Write provides a better experience for Fedora Users as it reduces the amount of I/O and offsets CPU cost of package decompression. RPM Copy on Write uses reflinking capabilities in btrfs, which is the default filesystem starting from Fedora 33 for most variants. Note that this behavior is not being turned on by default for this Change.
     • Tracking bug: #1915976
     • NOTES: JL: This path of librpm is not used by rpm-ostree. The whole download and unpack path is ostree native and has different tradeoffs. Good to keep track of this
103. ✔️ Modernize Live Media
     • Modernize the live media by switching to the "new" live environment setup scripts provided by livesys-scripts and leverage new functionality in dracut to enable support for automatically enabling persistent overlays when flashed to USB sticks.
     • Tracking bug: #2139918
     • NOTES: DWM: This shouldn't affect FCOS. FCOS has its own live media separate from this process.
104. ✔️ Anaconda WebUI for Fedora Workstation by default
     • The new PatternFly-based UI has been developed by the Anaconda team for some time now and we would like to make it available for users of Fedora to enhance and modernize installation experience. As the first step in this user adoption process, we are targeting Fedora Workstation only.
     • Tracking bug: #2231339
     • NOTES: DWM: FCOS doesn't use an anaconda based installer. (JL: ...yet)
105. ✔️ Remove Python Mock Usage
     • python-mock has been deprecated since Fedora 34 - 6 releases ago, but is still in use in many packages. We plan to go through the remaining usages and clean them up, with the goal of retiring python-mock from Fedora.
     • Tracking bug: #2258085
     • NOTES: MA: FCOS doesn't ship python (yet), so this should have no impact.
106. Enable systemd service hardening features for default system services 👉 Tracker: Harden all our systemd units #1662
     • Improve security by enabling some of the high level systemd security hardening settings that isolate and sandbox default system services.
     • Tracking bug: #2260082
     • NOTES: MA: Effort is tracked in Tracker: Harden all our systemd units #1662
107. Unify /usr/bin and /usr/sbin 👉 Investigate what's needed for "Unify /usr/bin and /usr/sbin" Fedora change #1759
     • The /usr/sbin directory becomes a symlink to bin, which means paths like /usr/bin/foo and /usr/sbin/foo point to the same place. /bin and /sbin are already symlinks to usr/bin and usr/sbin, so effectively /bin/foo and /sbin/foo also point to the same place. /usr/sbin will be removed from the default $PATH. The same change is also done to make /usr/local/sbin point to bin, effectively making /usr/local/bin/foo and /usr/local/sbin/foo point to the same place. The definition of %_sbindir will be changed to %_bindir, so packages will start using the new directory after a rebuild without any further action. Maintainers may stop using %_sbindir, but don't need to.
     • Tracking bug: #2267022
     • NOTES: MA: See: tracker: Fedora 41 changes considerations #1714 (comment)
     • NOTES: MA: Status update requeted https://gitlab.com/fedora/bootc/tracker/-/issues/29#note_2220666613
108. ✔️ LLVM 19
     • Update all llvm sub-projects in Fedora Linux to version 19.
     • Tracking bug: #2293629
     • NOTES: (copied from f41) JL: Not sure if any CoreOS packages use LLVM currently, but should be transparent if so
109. ✔️ Anaconda as native Wayland application
     • Currently, Anaconda is still an X11 application, which we would like to fix and make Anaconda Wayland native application to allow us drop of the X11 dependencies from installation ISO images. However, this change is not just a simple switch and we need to do some adjustments during the path which will impact user experience.
     • Tracking bug: #2307282
     • NOTES: MA: This won't affect FCOS
110. ✔️ Setuptools 74+
     • Update to a new upstream release of python-setuptools that is not completely compatible with previous releases. Most notably, version 72.0.0 removed support for the setup.py test command (deprecated for 5 years). This is a breaking change and Fedora packages that use the setup.py test command during the build need to be adapted to use a different test runner, such as unittest, pytest, etc. There might be other breaking changes. We estimate 142 to 196 Fedora Rawhide packages to fail to build due to this upgrade (as of Sep 2024).
     • Tracking bug: #2319387
     • NOTES: MA: FCOS doesn't ship python (yet), so this should have no impact.
111. ✔️ Adjust java/java-devel requires to multi-vendor JDK world and replace legacy JDKs by third party Eclipse Temurin repositories
     • Adjust java/java-devel provides/requires to multivendor world and obsolete all non-system LTS JDKs (java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk in time of writing) by appropriate, properly integrating, RPMs from Eclipse Adoptium repositories.
     • Tracking bug: #2319402
     • NOTES: MA: FCOS doesn't ship java, so this should have no impact.
112. ✔️ Retire zbus v1
     • The packages for v1 of the zbus crate (and the packages for v2 of the zvariant crate) will be retired from Fedora 42. Dependent packages are to be ported to a non-obsolete version of these libraries (i.e. zbus v4 or v5) or to be retired as well.
     • Tracking bug: #2325879
     • NOTES: TR: Should be transparent, but we'll watch for issues affecting the nmstate package.
113. ✔️ NumPy2
     • Update the numpy package from 1.x to 2.x (1.26.4 to 2.1.3 currently).
     • Tracking bug: #2332647
     • NOTES: MA: Should not affect FCOS
114. ✔️ Anaconda Web UI partitioning
     • The Anaconda OS installer project needs to have a new approach for partitioning with the new web UI. This approach needs to be easy to control for users who don’t understand details of the Linux storage but still allows more complex requirements.
     • Tracking bug: #2332648
     • NOTES: MA: Should not affect FCOS
115. ✔️ Ruby 3.4
     • Ruby 3.4 is the latest stable version of Ruby. Many new features and improvements are included for the increasingly diverse and expanding demands for Ruby. With this major update from Ruby 3.3 in Fedora 41 to Ruby 3.4 in Fedora 42, Fedora becomes the superior Ruby development platform.
     • Tracking bug: #2335929
     • NOTES: MA: Does not impact FCOS
116. ✔️ KTLS implementation for GnuTLS
     • Acceleration of GnuTLS with software Kernel TLS (KTLS)
     • Tracking bug: #2130000
     • NOTES: TR: The change explicitly notes that it will be disabled by default, it should not impact us. Interested folks could add documentation on how to use it and configure it with Ignition.
117. RPM Support For Systemd Sysusers.d 👉 F42: Investigate RPM sysusers change (adapt Zincati RPM to it) #1864
     • RPM supports creating users and groups according to configuration provided in sysusers.d snippets shipped in package payload.
     • Tracking bug: #2337007
118. ✔️ Automated onboarding to Packit release automation for new packages
     • To ease the onboarding process for package maintainers and their release workflows, we propose to automatically create pull requests with the initial Packit configuration file for newly created projects at src.fedoraproject.org. Once merged, this configuration will enable Packit to automate the release process, reducing repetitive tasks for maintainers.
     • Tracking bug: #2337008
     • NOTES: TR: We are already in the process of on-boarding our packages to packit so there is nothing more to do.
119. ✔️ Golang 1.24
     • Update of Go (golang package) to the upcoming version 1.24 in Fedora 42.
     • Tracking bug: #2337583
     • NOTES: TR: We generally mostly keep up with golang versions upstream so that should be fine, no specific action.
120. ✔️ Tcl/Tk 9.0
     • Tcl/Tk rebase to version 9. There are some major incompatibilities and it's unrealistic to port all depending packages, thus the compat Tcl/Tk 8 packages will be provided.
     • Tracking bug: #2337584
       0 NOTES: TR: FCOS doesn't ship, so this should have no impact.
121. ✔️ Managing expired PGP keys in DNF5
     • Implementing new logic in DNF5 to remove expired and obsolete repository keys from the system.
     • Tracking bug: #2337585
     • NOTES: TR: Should not impact FCOS.
122. ✔️ LLVM 20
     • Update all llvm sub-projects in Fedora Linux to version 20.
     • Tracking bug: #2337586
     • NOTES: TR: General update that should not impact FCOS.
123. ✔️ Firewalld IPv6_rpfilter default to loose on Workstations
     • Default firewalld to using IPv6_rpfilter=loose for Workstation installs.
     • Tracking bug: #2337587
     • NOTES: TR: This is for the Workstation edition only apparently and FCOS doesn't ship firewalld.
124. ✔️ GNU Toolchain Update (gcc 15, binutils 2.44, glibc 2.41, gdb 15+)
     • Update the Fedora 42 GNU Toolchain to gcc 15, binutils 2.44, glibc 2.41 and gdb 15+.
     • Tracking bug: #2337588
     • NOTES: TR: General toolchain update that should not be an issue.
125. Protobuf 5.x/6.x
     • Update Protobuf to the latest version (5.x), and 6.x if it arrives in time before freeze in Q1 2025. Note that Protobuf's versioning is complicated, C++ and Python are at version 5, other language bindings at version 4, and they all embed the version of protoc; we are using the C++ version here so we can reference its support policy.
     • Tracking bug: #2341815
126. Unification of boot loader updates, phase 1
     • Begin the process of using single tool (likely bootupd) for most boot loader updates, especially grub and shim. This decouples package installation, e.g., via rpm transaction, from actual update in /boot and /boot/efi. This change does not affect zipl and systemd-boot.
     • Tracking bug: #2342224
127. GNOME Shell extension Dependency Generator
     • Implement a dependency generator for GNOME Shell extensions that would make the binary RPM depend on the correct versions of GNOME Shell
     • Tracking bug: #2342225
128. Koji uses Red Hat Image Builder locally
     • Switch the Red Hat Image Builder-built images in Koji to not build through a service, but locally.
     • Tracking bug: #2342235

---

Fedora 42 Accepted Self-Contained Changes (wiki source)

201. ✔️ mkosi-initrd
     • mkosi-initrd is an alternative builder for initrds. It will be packaged in Fedora, so that users can use it to build initrds locally. A kernel-install plugin will be provided to build the initrd when a kernel package is installed. As a stretch goal, initrds will be build in koji and delivered via rpm packages. As a further stretch goal, pre-built initrds will be used in Unified Kernel Images that can be delivered via rpm packages.
     • Tracking bug: #2203221
     • NOTES: MA: No immediate action needed as FCOS builds it's own initrd for now
202. ✔️ Enable auto-updates by default in Fedora Kinoite
     • On Fedora Kinoite, Plasma Discover supports automatically updating the system in a safe fashion via rpm-ostree staged updates. We want users to benefit from bug fixes and updates in general by default thus we want to enable auto-updates by default. Users will still have the option of disabling that or tuning the frequency at which updates happen.
     • Tracking bug: #2233192
     • NOTES: MA: Should not impact FCOS
203. ✔️ Add bpfman to Fedora
     • bpfman: An eBPF Manager bpfman operates as an eBPF manager, focusing on simplifying the deployment and administration of eBPF programs. Its notable features encompass:
     • Tracking bug: #2271633
     • NOTES: JL: This is transparent to FCOS
204. Confidential Virtualization Host with AMD SEV-SNP 👉 Tracker: Confidential Virtualization Host with AMD SEV-SNP #1777
     • This enables Fedora virtualization hosts to launch confidential virtual machines using AMD's SEV-SNP technology. Confidential virtualization prevents admins with root shell access, or a compromised host software stack, from accessing memory of any running guest. SEV-SNP is an evolution of previously provided SEV and SEV-ES technologies providing stronger protection and unlocking new features such as a secure virtual TPM.
     • Tracking bug: #2298853
     • NOTES: MA: comment was added clarifying that this change is about running as a SEV-SNP host: Tracker: Confidential Virtualization Host with AMD SEV-SNP #1777 (comment)
205. ✔️ Reduce the amount of "dontaudit" rules pertaining to unlabeled_t
     • Reduce the amount of rules that prevent reporting of SELinux denials pertaining to unlabeled_t. This could influence the amount of SELinux-related logs on some systems, but will not cause any new permission denials.
     • Tracking bug: #2300338
     • NOTES: TR: Does not look like this will impact FCOS.
206. ✔️ Enable Drm Panic
     • Drm_panic is a new feature in the Linux kernel that displays a panic screen when a kernel panic occurs. This proposal is to enable DRM_PANIC in the Fedora kernel, to improve the kernel panic user experience.
     • Tracking bug: #2309205
     • NOTES: TR: Should be transparent to FCOS.
207. ✔️ Tomcat 10.1.x
     • This change involves upgrading the Apache Tomcat application server from versions 9.0.x to 10.1.x. This update will enhance the application server's performance, security, and support for the latest specifications. The affected packages include tomcat and related libraries and services that rely on the Tomcat server for web application deployment and management.
     • Tracking bug: #2309206
     • NOTES: TR: FCOS doesn't ship Tomcat
208. ✔️ Integrate FEX in Fedora Linux
     • FEX is a fast emulator that allows one to run x86 and x86-64 binaries on an AArch64 Linux host. FEX requires a number of supporting components, including a RootFS image, and integration with muvm to support 16k page-size hosts. The purpose of this Change is to integrate FEX itself and its supporting components into Fedora Linux, to provide a delightful out-of-box experience for users that want to run x86 and x86-64 binaries on their aarch64 systems. This also includes integration into the AArch64 Fedora KDE spin as a non-blocking component of the spin.
     • Tracking bug: #2318566
     • NOTES: TR: Nothing to do for now, but we'll revisit if requests come in
209. ✔️ PHP 8.4
     • Update the PHP stack in Fedora to the latest version 8.4.x
     • Tracking bug: #2318567
     • NOTES: TR: FCOS doesn't include PHP
210. ✔️ Distributing Kickstart Files as OCI Artifacts
     • Fedora distributed as bootable container ships via OCI registry. Installation is typically done by conversion into a VM image or ISO installer via osbuild (image builder), however, booting from network is a useful workflow for bare-metal fleet deployments. Required files to perform such installation are not available in the OCI repository that could be fetched from registry in a similar manner as the bootable container.
     • Tracking bug: #2320145
     • NOTES: TR: Does not impact FCOS
211. ✔️ Enabling composefs by default for Atomic Desktops
     • We want to enable composefs by default for Fedora Atomic Desktops. This makes the root mount of the system (/) a truly read only filesystem, increasing the system integrity and robustness. This is the first step toward a full at runtime verification of filesystem integrity.
     • Tracking bug: #bug))
     • NOTES:
       • TR: This is for the Atomic Desktops and we already did this in FCOS. Nothing else to do.
       • MA: change is out of order because the tracking bug was created after this list was created.
212. ✔️ Ansible 11
     • Update to Ansible 11 and Ansible Core 2.18, which no longer supports Python 2.7 and Python 3.6 target nodes, including EL 7 and EL 8 hosts.
     • Tracking bug: #2330175
     • NOTES: MA: Does not impact FCOS
213. ✔️ Xfce-4.20
     • Xfce 4.20 is a stable release with proven components, provide features to both new and power users alike. This change proposal is submitted to sync fedora packages with the latest upstream release.
     • Tracking bug: #2332653
     • NOTES: MA: Does not impact FCOS
214. ✔️ LXQt 2.1
     • Upgrade LXQt in Fedora to version 2.1.
     • Tracking bug: #2332654
     • NOTES: MA: Does not impact FCOS
215. ✔️ Retirement of PostgreSQL 15
     • PostgreSQL version 15 will be retired from Fedora 42 since there are newer versions like 16 and 17. Version 16 is already the default version (announced in PostgreSQL16 change), and version 17 would be the alternative.
     • Tracking bug: #2332655
     • NOTES: MA: Does not impact FCOS
216. ✔️ Split opendmarc with tools subpackage
     • opendmarc package includes some supporting optional binaries that are not required to configure the service.
     • Tracking bug: #2335932
     • NOTES: MA: Does not impact FCOS
217. ✔️ Replace SDL 2 with sdl2-compat using SDL 3
     • This Change proposes to replace SDL 2 with sdl2-compat, which uses SDL 3.
     • Tracking bug: #2335933
     • NOTES: MA: Does not impact FCOS
218. ✔️ Fedora COSMIC Spin
     • Create an official Fedora Spin with the upcoming COSMIC desktop environment.
     • Tracking bug: #2338435
     • NOTES: TR: A new Spin, should not impact FCOS.
219. ✔️ Retire python3.8
     • The python3.8 package will be retired without replacement from Fedora Linux 42. Python 3.8 reached upstream End of Life 2024-10-07. RHEL 8 Python 3.8 Stream has been retired since May 2023. Debian Buster had Python 3.7, Bullseye has 3.9. Ubuntu 20.04 LTS (Focal Fossa) has Python 3.8, but standard support ends in April 2025. Fedora 42 release date is in April 2025 as well.
     • Tracking bug: #2338436
     • NOTES: TR: FCOS doesn't (yet) ship Python.
220. ✔️ Deprecate gtk3-rs
     • The Rust bindings for GTK3 (and related libraries) are unmaintained upstream, and are no longer updated in lockstep with bindings for GLib and other related libraries. This Change to mark the packages for the gtk3-rs crates as deprecated reflects this status.
     • Tracking bug: #2338437
     • NOTES: TR: FCOS doesn't ship those packages.
221. ✔️ Intel Compute Runtime - Upgrade with HW cut-off
     • Intel Compute Runtime parts are currently stuck at a legacy branch that isn't undergoing an active development. Newer branches did significantly cut hardware support (for GPU Generations prior to the 12th), and the aim of this change is to do the leap of faith, and rebase intel-compute-runtime and intel-igc to the latest upstream releases, and remove compute support for Intel GPU generations released prior to 2020 (full list is available in the "Detailed Description" section here).
     • Tracking bug: #2338438
     • NOTES: TR: FCOS doesn't ship intel-compute-runtime.
222. ✔️ Stop building Atomic Desktops for PPC64LE
     • We will stop building the Fedora Atomic Desktops for the PowerPC 64 LE architecture. According to the count me statistics, we don't have any Atomic Desktops users on PPC64LE.
     • Tracking bug: #2338439
     • NOTES: TR: This is only for Atomic Desktops so should not impact FCOS.
223. ✔️ Remove pam-ssh-agent component
     • Drop pam_ssh_agent_auth component from Fedora 42
     • Tracking bug: #2338440
     • NOTES: TR: Let's add a short note to our F43 release notes for this one.
224. ✔️ Create Fedora Windows Subsystem for Linux Images
     • Recent versions of Windows support running Linux guests via Windows Subsystem for Linux (WSL). These can be distributed via tarballs, Appx packages, or via the Windows Store. The purpose of this change is to start producing Fedora images for users of WSL.
     • Tracking bug: #2338441
     • NOTES: TR: Should not impact FCOS.
225. Retire PyO3 v0.19, v0.20, and v0.21
     • The Rust SIG currently maintains five (5) versions of PyO3, the Rust bindings for CPython / PyPy. This proposal is about dropping the three oldest versions (v0.19, v0.20, and v0.21), while keeping the two most recent ones (v0.22, v0.23).
     • Tracking bug: #2341812
226. Django 5.x
     • Update the default Django stack in Fedora from 4.2 to 5.x
     • Tracking bug: #2341813
227. Deprecate python-pytest-runner
     • The python-pytest-runner (python3-pytest-runner) package will be deprecated in Fedora Linux 42. Dependent packages are encouraged to switch to using pytest directly.
     • Tracking bug: #2342231

[marmijo]

I updated the list with comments for changes that were deferred from F41.
initial comments for Fedora 42 changes

[travier]

We took a look at those changes during the 2024-11-20 community meeting. Each item and tickets will be updated independently.

[marmijo]

Updates from the community meeting on 2024-11-20

Summary of comments:

101: We ship zlib-ng-compat. This should come as an update for us. Nothing specific to do unless tests fail.
106: Already has tracker, nothing more to do at this time.
107: More discussion in tracker. A status update was requested https://gitlab.com/fedora/bootc/tracker/-/issues/29#note_2220666613
112: Should be transparent, but nmstate could be affected so we will watch it.
204: Nothing specific for us to do right now except clarify that this change is for running as a SEV-SNP Host, not a Guest.
206: Should be transparent to FCOS.
207: FCOS don't ship Tomcat
208: Nothing to do for now, but we'll revisit if requests come in
209: FCOS doesn't include PHP
210: Does not impact FCOS
211: Already completed in FCOS. Nothing else to do.

Current change considerations we're tracking:

106: Enable systemd service hardening features for default system services 👉 #1662
107: Unify /usr/bin and /usr/sbin 👉 #1759
204: Confidential Virtualization Host with AMD SEV-SNP 👉 #1777

[marmijo]

I ran the script today (2024-11-26) and no changes were reported.

[marmijo]

I ran the script and updated the list on 2024-12-18: updates

[c4rt0]

This was discussed at community meeting yesterday.
Items 113 - NumPy2 and 114 - Anaconda Web UI partitioning shouldn't affect FCOS.

[marmijo]

Updates from 2025-01-07: updates

[marmijo]

Updates from 2025-01-15: updates

[travier]

Update from today's meeting:

• 116 KTLS implementation for GnuTLS
  • The change explicitly notes that it will be disabled by default, it should not impact us. Interested folks could add documentation on how to use it and configure it with Ignition.
• 117 RPM Support For Systemd Sysusers.d
  • We might have to update zincati. Issue to be opened
  • Details in https://github.com/rpm-software-management/rpm/blob/master/docs/manual/users_and_groups.md#users-and-groups%7C
• 118 Automated onboarding to Packit release automation for new packages
  • We are already in the process of on-boarding our packages to packit so there is nothing more to do.
• 119 Golang 1.24
  • We generally mostly keep up with golang versions upstream so that should be fine, no specific action
• 120 Tcl/Tk 9.0
  • We don't ship that so should not be impacted
• 121 Managing expired PGP keys in DNF5
  • That should not impact us
• 122 LLVM 20
  • General update that should not impact us
• 123 Firewalld IPv6_rpfilter default to loose on Workstations
  • This is for the Workstation edition only apparently and we don't ship firewalld
• 124 GNU Toolchain Update (gcc 15, binutils 2.44, glibc 2.41, gdb 15+)
  • General toolchain update that should not be an issue
• 218 Fedora COSMIC Spin
  • A new Spin, should not impact us
• 219 Retire python3.8
  • We don't (yet) ship Python
• 220 Deprecate gtk3-rs
  • We don't ship those packages
• 221 Intel Compute Runtime - Upgrade with HW cut-off
  • FCOS doesn't ship intel-compute-runtime
• 222 Stop building Atomic Desktops for PPC64LE
  • This is only for Atomic Desktops so should not impact us
• 223 Remove pam-ssh-agent component
  • Let's add a short note to our F43 release notes for this one
• 224 Create Fedora Windows Subsystem for Linux Images
  • Should not impact us

[travier]

Created:

• Tracker for Fedora 42 changes to notify users #1863
• F42: Investigate RPM sysusers change (adapt Zincati RPM to it) #1864

[yasminvalim]

Update from today's FCOS community meeting:

225. Retire PyO3 v0.19, v0.20, and v0.21
It seems like this shouldn’t impact us.

125. Changes/Protobuf 5.x/6.x
We should stay aware of this change when it arrives.

126. Changes/BootLoaderUpdatesPhase1
This will probably require development work in bootupd. However, it's unlikely we’ll address it for F42, given that the branching timeline is next week. We’ve submitted it so we're aware of the issue.

127. Changes/GnomeShellExtensionDependencyGenerator
This should have no impact to FCOS.

128. Changes/KojiLocalImageBuilder
We don't use that to build our images.