### Description of request every request to www.fedoraproject.org returns 403 when the Referer is https://www.fedoraproject.org/ (any path), pages included. the browser sends that when the page loads its own css, so the www site shows up as raw html, and clicking any internal link gets a 403 pag...

Another saturday, time for another recap of interesting things in longer form. ## RHEL10 database migrations I managed to migrate all but one database server in staging. No particular problems with those and they are all on postgresql 18 now with data page checksums enabled (well, except the single mariadb instance, and it's on 10.11.18). Hopefully I can get the production ones done in the next outage we have (probibly the week before final freeze). The last staging database server is more interesting: db-datanommer01.stg This is using timescaledb on top of postgres and is currently the rhel9 default version: 13. After looking around, I think this one is doable, but needs another step: * sync a data backup off the existing server * upgrade it to postgresql 16 * enable data page checksums * install a new rhel10 vm * sync the data to it * upgrade to 18 * install the correct timescaledb extension * take down the old instance and swap in the new I think this will all work, just an extra 13->16 jump. I will try it out in staging next week. I'm also a bit worried about how long it will take to generate all those checksums. The datanommer db's are really large. However, if we can do it I would love to as it's a very nice feature. Doing staging should at least give us an idea. ## Fedora 45 Beta is go for release next tuesday ( 2026-09-15 ) Looks like we are go for fedora 45 beta next week. I hope everyone will test it out and help us iron out any problems before the final release. As always, comment on the fediverse:

This week seemed to have a lot of small irq's all around. That said, I did make some progress on a few things: ## RHEL10 migrations: databases Next up on the migration train: databases. It turns out we already had one database server in staging moved to rhel10, but it was using the default postgresql 16 and since I am going to the trouble to migrate things to a new os, might as well move them to newer postgresql too. postgresql 18 makes data page checksums default. You can disable them at startup if you really want to, but they seem like a really good idea to enable. So, I took db-koji01.stg down and added checksums and it took around 45minutes. Not super great, but not nearly as bad as it could be. Then, the upgrade to 18 was super fast and painless. I did some work in our ansible repo to set up rhel10 hosts with postgresql18 to start with and created a db-fas02.stg to migrate that to. The rest of these servers will follow basically this pattern: * Setup a rhel10/postgresql18 02 vm for each server * Sync data from rhel9 one. * Stop rhel9 one (OUTAGE) * Sync data again from rhel9 one. * Enable data page checksums * Migrate from 16 to 18 * Profit I hope to get the staging ones all done next week and find any issues, then we can look at scheduling an outage after Beta freeze to do all the production ones. ## Laptop Battery replacement My lenovo slim7x battery was getting pretty pathetic. It was 2 years old and it's max full capacity was something like 35% of design full and sometimes it was now refusing to charge without a reboot. So, I ordered a new battery and installed it this last week. This laptop is anoying to work on because, while there are screws on the bottom panel, it's also held on by clips. So you have to pry it off and it sounds like you are breaking it while doing so. Anoying. Also on this laptop they routed all the cables around the battery. The battery has cable guides all around it. So, to replace the battery you have to move all those cables carefully and slide the old battery out and new one in, along with unplugging the bluetooth and wifi antennas, and disconnecting/connecting the battery connector. I did manage to do it, but it took more time that I thought it would. While I had the machine open I swapped the windows drive I had back in and updated the firmware (which there's no way to do from linux). It was quite a pain. windows took quite a while to notice that it was not 2024 and that it should check what _current_ updates were available. Did manage it in the end. I don't know what effect the newer firmware has, everything still works the same as far as I can tell. ## Fedora 45 beta rc's We have started making rc's for beta. That sure reads weird, but if you are able, please do test and file bugs. ## Authentication issues There's one weird auth issue I am aware of. Thats where services with keytabs are sometimes getting permission denied. It seems to be somehow some differing config on two of our ipa servers. Thats being tracked in https://forge.fedoraproject.org/infra/tickets/issues/13539 I am not aware of any other issues remaining. So, if you hit something, please do file a ticket and include enough information for us to try and fix it. ie, time/date, exactly what you were trying to login to, exactly what error message you got, etc. As always, comment on the fediverse:

Time for another saturday weekly recap in longer form. ## RHEL10 migrations Bunch more progress of various machines over the last week or two, and we are down to: * torrent01 (didn't manage to get this before beta freeze, will after) * mailman/lists ( https://forge.fedoraproject.org/infra/tickets/issues/13519 ) * database servers ( https://forge.fedoraproject.org/infra/tickets/issues/13517 ) * rabbitmq servers ( https://forge.fedoraproject.org/infra/tickets/issues/13383 ) Nice to finish this off soon. ## Authentication woes... over? I am hopefull that we have solved the last of our auth issues late this week. There's a lot of moving parts in our authentication stack: ipa servers on the backend, noggin on the frontend (accounts.fedoraproject.org), ipsilon for identity provider (id.fedoraproject.org). All of these have had various issues recently, but we have worked through them and I did some tuning of ipsilon on thursday that seems to have really helped. If you are still seeing any issue, please add exactly what you were trying to login to/do and time/date to our tracking ticket. ( https://forge.fedoraproject.org/infra/tickets/issues/13482 ) ## Fedora 45 Beta infrastructure freeze We are in beta freeze now, so hopefully that will keep things a bit quieter and we can catch up on work in staging and docs and other like things. As always, comment on the fediverse: