# 20220615_F37-FCOS-Changes *Output generated by and [stored alongside](https://pagure.io/fork/dustymabe/fedora-pgm/pgm_scripts/blob/dusty-fcos-changes/f/changes/FCOS-changes.md.orig) ([with modifications](https://pagure.io/fork/dustymabe/fedora-pgm/pgm_scripts/blob/dusty-fcos-changes/f/changes/FCOS-changes.md)) [this](https://pagure.io/fork/dustymabe/fedora-pgm/pgm_scripts/blob/dusty-fcos-changes/f/changes/genFCOSChanges.sh) script in a fork of the [pgm_scripts repo](https://pagure.io/fedora-pgm/pgm_scripts).* --- **Fedora 37 Accepted System-Wide Changes** ([wiki source](https://fedoraproject.org/wiki/Releases/37/ChangeSet#Fedora_Linux_37_Accepted_System-Wide_Changes)) 101. ✔️[DNS Over TLS](https://fedoraproject.org/wiki/Changes/DNS_Over_TLS) - Fedora will attempt to use DNS over TLS (DoT) if supported by configured DNS servers. - Tracking bug: [#1889901](https://bugzilla.redhat.com/show_bug.cgi?id=1889901) - **NOTES**: jl: no special considerations necessary for FCOS, but be on the lookout for DNS-related fallout 101. ✔️[DNF/RPM Copy on Write enablement for all variants](https://fedoraproject.org/wiki/Changes/RPMCoW) - RPM Copy on Write provides a better experience for Fedora Users as it reduces the amount of I/O and offsets CPU cost of package decompression. RPM Copy on Write uses reflinking capabilities in btrfs, which is the default filesystem starting from Fedora 33 for most variants. Note that this behavior is not being turned on by default for this Change. - Tracking bug: [#1915976](https://bugzilla.redhat.com/show_bug.cgi?id=1915976) - **NOTES**: jl: this path of librpm is not used by rpm-ostree. the whole download and unpack path is ostree native and has different tradeoffs. good to keep track of this conceptually, but nothing for FCOS to do here. 101. ✔️[Python 3.11](https://fedoraproject.org/wiki/Changes/Python3.11) - Update the Python stack in Fedora from Python 3.10 to Python 3.11, the newest major release of the Python programming language. - Tracking bug: [#2016048](https://bugzilla.redhat.com/show_bug.cgi?id=2016048) - **NOTES**: jl: we don't ship Python. but might be worth going over Python 3.11 release notes for Python-based codebases like cosa for e.g. deprecations. 101. ✔️[Drop NIS(+) support from PAM](https://fedoraproject.org/wiki/Changes/drop_NIS_support_from_PAM) - This change is about dropping user-authentication using NIS(+) from PAM. - Tracking bug: [#2021660](https://bugzilla.redhat.com/show_bug.cgi?id=2021660) - **NOTES**: jl: may affect users who use NIS+? likely not though. If so, we should direct them to e.g. LDAP or FreeIPA as the Change proposal suggests. so overall, skip. 101. ✔️[Retire the NIS(+) user-space utility programs](https://fedoraproject.org/wiki/Changes/retire_NIS_user_space_utils) - This change is about retiring the ypbind, yp-tools, and ypserv packages, and removal of the {nis,yp}domainname user-space utility programs from the hostname package. - Tracking bug: [#2022386](https://bugzilla.redhat.com/show_bug.cgi?id=2022386) - **NOTES**: jl: may affect users who use NIS+? likely not though. If so, we should direct them to e.g. LDAP or FreeIPA as the Change proposal suggests. so overall, skip. 101. ✔️[ELN-Extras](https://fedoraproject.org/wiki/Changes/ELN-Extras) - ELN-extras will be a new build target and compose similar in behavior to ELN, but closer to EPEL in function. It will be a place to prepare and maintain packages that may be desired for EPEL N+1 while RHEL N+1 is still being incubated in ELN. - Tracking bug: [#2028161](https://bugzilla.redhat.com/show_bug.cgi?id=2028161) - **NOTES**: jl: not directly relevant to FCOS. 101. ✔️[RetireARMv7](https://fedoraproject.org/wiki/Changes/RetireARMv7) - Retire the ARMv7 architecture AKA arm32 or armhfp architecture. - Tracking bug: [#2028172](https://bugzilla.redhat.com/show_bug.cgi?id=2028172) - Notes: DWM: FCOS doesn't ship ARMv7. Nothing to do. 101. ✔️[MinGW toolchain update](https://fedoraproject.org/wiki/Changes/F37MingwEnvToolchainUpdate) - Update the MinGW toolchain to the latest upstream stable releases. - Tracking bug: [#2060050](https://bugzilla.redhat.com/show_bug.cgi?id=2060050) - **NOTES**: DWM: skipping MinGW environment and toolchain update because it's a Windows cross-compiler, not relevant. 101. ✔️[Boost 1.78 upgrade](https://fedoraproject.org/wiki/Changes/F37Boost178) - This change brings Boost 1.78 to Fedora. This will mean Fedora ships with a recent upstream Boost release. - Tracking bug: [#2062915](https://bugzilla.redhat.com/show_bug.cgi?id=2062915) - **NOTES**: DWM: skipping Boost 1.78 upgrade because it should be contained to the build system (making sure dependent packages compile) 101. (⚠) [Signed RPM Contents](https://fedoraproject.org/wiki/Changes/Signed_RPM_Contents) - We want to add signatures to individual files that are part of shipped RPMs. - Tracking bug: [#2076296](https://bugzilla.redhat.com/show_bug.cgi?id=2076296) - **NOTES**: **jlebon**: Nothing required of us for this but we may want to take advantage. IMA-related features in the future. Colin already started doing some work for this in rpm-ostree (https://github.com/coreos/rpm-ostree/pull/3610). See also recent ostree-composefs work: https://blogs.gnome.org/alexl/2022/06/02/using-composefs-in-ostree/ 101. (✓) [Changes/LegacyXorgDriverRemoval](https://fedoraproject.org/wiki/Changes/LegacyXorgDriverRemoval) - This change removes the xorg-x11-drv-vesa and xorg-x11-drv-fbdev driver packages, and associated support code from the xorg-x11-server-Xorg package. - Tracking bug: [#2078921](https://bugzilla.redhat.com/show_bug.cgi?id=2078921) - **NOTES**: DWM: FCOS doesn't ship a graphical desktop. This shouldn't affect us. 101. ️(✓) [RPM 4.18](https://fedoraproject.org/wiki/Changes/RPM-4.18) - Update RPM to the 4.18 release. - Tracking bug: [#2079029](https://bugzilla.redhat.com/show_bug.cgi?id=2079029) - **NOTES**: DMW: Nothing in particular jumps out that we need to update. 4.18 alpha has been in rawhide since april and our rawhide stream is building fine. 101. (✓) [Drop i686 builds of jdk8,11,17 and latest (18) rpms from f37 onwards](https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs) - java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk and java-latest-openjdk packages will no longer build i686 subpackages - Tracking bug: [#2083750](https://bugzilla.redhat.com/show_bug.cgi?id=2083750) - **NOTES**: LB: we don't ship i686 images/packages in FCOS 101. (✓) [Node.js 18.x by default](https://fedoraproject.org/wiki/Changes/Nodejs18) - The latest release of Node.js to carry a 30-month lifecycle is the 18.x series. As with 16.x, 14.x, 12.x, 10.x and 8.x before it, Fedora 37 will carry 18.x as the default Node.js interpreter for the system. The 16.x, and 14.x interpreters will remain available as non-default module streams. - Tracking bug: [#2087185](https://bugzilla.redhat.com/show_bug.cgi?id=2087185) - **NOTES**: LB: we don't ship NodeJS 101. (✓) [Perl 5.36](https://fedoraproject.org/wiki/Changes/perl5.36) - A new perl 5.36 version brings a lot of changes done over a year of development. Perl 5.36 will be released in May 28th 2022. See perldelta for more details about new release. - Tracking bug: [#2088002](https://bugzilla.redhat.com/show_bug.cgi?id=2088002) - **NOTES**: **LB**: we don't ship Perl 101. (⚠) [Strong crypto settings: phase 3, forewarning 1/2](https://fedoraproject.org/wiki/Changes/StrongCryptoSettings3Forewarning1) - Cryptographic policies will be tightened in Fedora 38-39, SHA-1 signatures will no longer be trusted by default. Fedora 37 specifically doesn't come with any change of defaults, and this Fedora Change is an advance warning filed for extra visibility. Test your setup with TEST-FEDORA39 today and file bugs so you won't get bit by Fedora 38-39. - Tracking bug: [#2089811](https://bugzilla.redhat.com/show_bug.cgi?id=2089811) - **NOTES**: **LB**: we may want to check how much we will be impact by this in F38/F39 101. (✓) [Python: Add -P to default shebangs](https://fedoraproject.org/wiki/Changes/PythonSafePath) - The -P flag will be added to the Python shebang macros (%{py3_shbang_opts}, %{py3_shebang_flags}, ...). Packages that adhere to those macros will change their Python shebangs from #! /usr/bin/python3 -s to #! /usr/bin/python3 -sP and as a result, will no longer have the directory of the script (such as /usr/bin) in sys.path. An opt-out mechanism exists. - Tracking bug: [#2090866](https://bugzilla.redhat.com/show_bug.cgi?id=2090866) - **NOTES**: LB: we don't ship Python packages 101. (⚠) [BIOS boot.iso with GRUB2](https://fedoraproject.org/wiki/Changes/BIOSBootISOWithGrub2) - Modify lorax-generic-templates to use GRUB2 when booting the boot.iso on BIOS systems, instead of syslinux. Upstream syslinux development is dead, and the Fedora maintainer would like to drop the package from the distribution. GRUB2 works as a replacement in most situations and continues to have upstream support. - Tracking bug: [#2092065](https://bugzilla.redhat.com/show_bug.cgi?id=2092065) - **NOTES**: **LB**: I think we'd like to do this move too, in coreos-assembler and FCOS-config. Also consider what happens for RHCOS. 101. (✓) [Install Using GPT on x86_64 BIOS by Default](https://fedoraproject.org/wiki/Changes/GPTforBIOSbyDefault) - This Change makes it so that Fedora Linux systems installed on legacy x86 BIOS systems will get GPT partitioning by default instead of legacy MBR partitioning. This makes x86 BIOS installs more similar to x86 UEFI installs. - Tracking bug: [#2092091](https://bugzilla.redhat.com/show_bug.cgi?id=2092091) - **NOTES**: **LB**: We do already have this kind of disk layout in FCOS. --- **Fedora 37 Accepted Self-Contained Changes** ([wiki source](https://fedoraproject.org/wiki/Releases/37/ChangeSet#Fedora_Linux_37_Accepted_Self-Contained_Changes)) 201. (✓) [glibc 32 Build Adjustments](https://fedoraproject.org/wiki/Changes/glibc32_Build_Adjustments) - The glibc32 package is a special package used by gcc and a few other packages to work around the lack of RPM multilib repository support in Koji. It is difficult to maintain, and the current approach raises questions regarding (L)GPL compliance. - Tracking bug: [#1598524](https://bugzilla.redhat.com/show_bug.cgi?id=1598524) - **NOTES**: jl: none of our components use glibc32 AFAIK, so should be good to skip. 201. (✓) [Modular GNOME Keyring services](https://fedoraproject.org/wiki/Changes/ModularGnomeKeyring) - The monolithic daemon provided by GNOME Keyring will be split into dedicated sub-daemons, so that they can be consistently managed by systemd. - Tracking bug: [#1899998](https://bugzilla.redhat.com/show_bug.cgi?id=1899998) - **LB**: we don't ship these GNOME services in FCOS 201. (✓) [Wayland by Default for SDDM](https://fedoraproject.org/wiki/Changes/WaylandByDefaultForSDDM) - Change the default display server mode for SDDM to use a Wayland-based greeter rather than an X11-based one. - Tracking bug: [#2050378](https://bugzilla.redhat.com/show_bug.cgi?id=2050378) - **LB**: we don't ship `sddm` in FCOS 201. (✓) [Python Dist RPM provides to only provide PEP503-normalized names](https://fedoraproject.org/wiki/Changes/PythonDistPEP503ProvidesOnly) - The legacy python3dist(NAME) and python3.11dist(NAME) RPM provides with dots (.) in NAME will no longer be automatically provided. NAME will only be normalized according to PEP 503. E.g. on Fedora 36 a package provides both python3dist(ruamel-yaml) and python3dist(ruamel.yaml), on Fedora 37+ it will only provide python3dist(ruamel-yaml) (and similarly, python3.11dist(ruamel-yaml)). - Tracking bug: [#2052217](https://bugzilla.redhat.com/show_bug.cgi?id=2052217) - **LB**: we don't ship Python in FCOS 201. (✓) [MinGW UCRT target](https://fedoraproject.org/wiki/Changes/F37MingwUCRT) - This proposal is to add the UCRT target & support from Fedora to the MinGW cross-toolchains. - Tracking bug: [#2055254](https://bugzilla.redhat.com/show_bug.cgi?id=2055254) - **NOTES**: **LB**: mingw is not a concern for FCOS 201. (✓) [MinGW OpenSSL 3.x update](https://fedoraproject.org/wiki/Changes/F37MingwOpenSSL3) - Update OpenSSL for MinGW to version 3.x - Tracking bug: [#2055724](https://bugzilla.redhat.com/show_bug.cgi?id=2055724) - **NOTES**: **LB**: mingw is not a concern for FCOS 201. (⚠) [Enable read only /sysroot for Fedora Silverblue & Kinoite](https://fedoraproject.org/wiki/Changes/Silverblue_Kinoite_readonly_sysroot) - This change is about enabling an opt-in ostree feature that re-mounts /sysroot as read only to avoid accidental changes. - Tracking bug: [#2060976](https://bugzilla.redhat.com/show_bug.cgi?id=2060976) - **NOTES**: **LB**: we did this in FCOS early on, but we never migrated older instances 201. (✓) [Encourage Dropping Unused / Leaf Packages on i686](https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval) - Package maintainers are empowered to stop building their packages for i686 — especially if supporting this architecture requires significant investment of time or resources. This will not apply to packages which are still depended on by other i686 packages, or which get used in a "multilib" context (i.e. for running 32-bit applications on x86_64). Dropping i686 architecture support from a leaf package will no longer be considered a breaking change, will not require any announcements, or tracker bugs. - Tracking bug: [#2069738](https://bugzilla.redhat.com/show_bug.cgi?id=2069738) - jl: we don't explicitly try to support i686, though we do build it by default for various components. we could look at explicitly disabling it, or just ride the wave until Fedora itself turns it off. 201. (⚠) [Support FIDO Device Onboarding](https://fedoraproject.org/wiki/Changes/FIDODeviceOnboarding) - Package and enable the FIDO Device Onboarding software stack for Zero Touch Onboarding on Fedora IoT. - Tracking bug: [#2075529](https://bugzilla.redhat.com/show_bug.cgi?id=2075529) - **LB**: not exactly the same, but we may look into this and possibly file a feature-request for ourselves for Ignition 201. (✓) [Build Fedora IoT Artifacts with osbuild](https://fedoraproject.org/wiki/Changes/IoTArtifactsWithOSBuild) - Build the key Fedora IoT artifacts such as the raw images and the traditional anaconda installer with osbuild. - Tracking bug: [#2075530](https://bugzilla.redhat.com/show_bug.cgi?id=2075530) - **NOTES**: **LB**: IoT specific 201. (✓) [Haskell GHC 9.0 & Stackage LTS 19](https://fedoraproject.org/wiki/Changes/Haskell_GHC_9.0_&_Stackage_19) - The GHC Haskell compiler will be updated from major version 8.10 to 9.0, and Haskell packages will be updated from Stackage LTS 18 to LTS 19 versions. - Tracking bug: [#2080355](https://bugzilla.redhat.com/show_bug.cgi?id=2080355) - **NOTES**: **LB**: we don't ship GHC in FCOS 201. (✓) [Replace jwhois package with whois for Fedora Workstation](https://fedoraproject.org/wiki/Changes/Replace_jwhois_with_whois_in_Fedora_Workstation) - Fedora Workstation product core group includes jwhois package. Replace it with whois package which is more actively developed. - Tracking bug: [#2081764](https://bugzilla.redhat.com/show_bug.cgi?id=2081764) - **NOTES**: SA: we don't ship jwhois