minimization · rlemosor · Mar 3, 2025 · Mar 3, 2025 · Mar 4, 2025 · Mar 4, 2025
diff --git a/configs/mingw-pkg-config-exclusion.yaml b/configs/mingw-pkg-config-exclusion.yaml
@@ -3,7 +3,7 @@ version: 1
 data:
   name: MinGW pkg-config exclusion
   description: mingw packages that should not be included.
-  maintainer: sst_virtualization
+  maintainer: rhel-sst-virtualization
   unwanted_packages:
     - mingw32-pkg-config
     - mingw64-pkg-config

diff --git a/configs/mingw-pkgs-exclusion.yaml b/configs/mingw-pkgs-exclusion.yaml
@@ -3,7 +3,7 @@ version: 1
 data:
   name: Mingw Exclusion List
   description: mingw packages that should not be included.
-  maintainer: sst_virtualization_spice
+  maintainer: rhel-sst-virtualization_spice
   unwanted_packages:
     # mingw-spice-gtk
     - mingw32-spice-gtk3

diff --git a/configs/rhel-8-appstream-comps-performance.yaml b/configs/rhel-8-appstream-comps-performance.yaml
@@ -4,7 +4,7 @@ data:
   labels:
     - eln
     - c10s
-  maintainer: sst_pt_pcp
+  maintainer: rhel-sst-pt-pcp
   name: Comps group performance for rhel-8-appstream
   packages:
     - grafana

diff --git a/configs/rhel-ssg-idm--ansible-freeipa.yaml b/configs/rhel-ssg-idm--ansible-freeipa.yaml
@@ -0,0 +1,12 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: FreeIPA Ansible collection
+  description: Ansible roles and modules to install, uninstall and manage FreeIPA
+  maintainer: rhel-ssg-idm
+  packages:
+    - ansible-freeipa
+    - ipa-selinux # rich dependency that is otherwise unmet
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--freeipa-client-samba.yaml b/configs/rhel-ssg-idm--freeipa-client-samba.yaml
@@ -0,0 +1,13 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: FreeIPA Client - Samba domain member
+  description: Samba domain member on FreeIPA client
+  maintainer: rhel-ssg-idm
+  packages:
+    - ipa-client
+    - ipa-client-samba
+    - ipa-selinux # rich dependency that is otherwise unmet
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--freeipa-client.yaml b/configs/rhel-ssg-idm--freeipa-client.yaml
@@ -0,0 +1,12 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: FreeIPA Client - minimal
+  description: FreeIPA client
+  maintainer: rhel-ssg-idm
+  packages:
+    - ipa-client
+    - ipa-selinux # rich dependency that is otherwise unmet
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--freeipa-server-dc.yaml b/configs/rhel-ssg-idm--freeipa-server-dc.yaml
@@ -0,0 +1,14 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: FreeIPA Server - Domain Controller
+  description: FreeIPA Server - Domain Controller
+  maintainer: rhel-ssg-idm
+  packages:
+    - ipa-server
+    - ipa-server-trust-ad
+    - ipa-healthcheck
+    - ipa-selinux # rich dependency that is otherwise unmet
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--freeipa-server-full.yaml b/configs/rhel-ssg-idm--freeipa-server-full.yaml
@@ -0,0 +1,15 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: FreeIPA Server - Full
+  description: FreeIPA Server - all modules
+  maintainer: rhel-ssg-idm
+  packages:
+    - ipa-server
+    - ipa-server-trust-ad
+    - ipa-server-dns
+    - ipa-healthcheck
+    - ipa-selinux # rich dependency that is otherwise unmet
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--freeipa-server.yaml b/configs/rhel-ssg-idm--freeipa-server.yaml
@@ -0,0 +1,12 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: FreeIPA Server - minimal
+  description: FreeIPA server
+  maintainer: rhel-ssg-idm
+  packages:
+    - ipa-server
+    - ipa-selinux # rich dependency that is otherwise unmet
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--freeradius-server.yaml b/configs/rhel-ssg-idm--freeradius-server.yaml
@@ -0,0 +1,17 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: FreeRADIUS Server
+  description: An open source implementation of RADIUS, the IETF protocol for AAA (Authorisation, Authentication, and Accounting).
+  maintainer: rhel-ssg-idm
+  packages:
+    - freeradius
+    - freeradius-devel
+    - freeradius-doc
+    - freeradius-ldap
+    - freeradius-krb5
+    - freeradius-utils
+    - python3-freeradius
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--idm-client-tools.yaml b/configs/rhel-ssg-idm--idm-client-tools.yaml
@@ -0,0 +1,22 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: IdM Client Tools
+  description: General software for enrolling system with external Identity Management server
+  maintainer: rhel-ssg-idm
+  packages:
+    - ipa-healthcheck
+    - ipa-client-epn
+    - sssd-tools
+    - realmd
+    - adcli
+    - krb5-workstation
+    - openldap-clients
+    - tlog
+    - cockpit-session-recording
+    - gssproxy
+    - certmonger
+    - ipa-selinux # rich dependency that is otherwise unmet
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--kerberos-server.yaml b/configs/rhel-ssg-idm--kerberos-server.yaml
@@ -0,0 +1,11 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: Kerberos Server
+  description: Stand-alone Kerberos server
+  maintainer: rhel-ssg-idm
+  packages:
+    - krb5-server
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--python-gssapi.yaml b/configs/rhel-ssg-idm--python-gssapi.yaml
@@ -0,0 +1,13 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: Python GSSAPI
+  description: Tools for using GSSAPI in Python applications
+  maintainer: rhel-ssg-idm
+  packages:
+    - python3-gssapi
+    - python3-requests-gssapi
+    - python3-urllib-gssapi
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--smart-cards-unwanted.yaml b/configs/rhel-ssg-idm--smart-cards-unwanted.yaml
@@ -0,0 +1,11 @@
+document: feedback-pipeline-unwanted
+version: 1
+data:
+  name: IdM Smart Cards unwanted (RHCS specific)
+  description: Specific packages for client-side smart card enrollment on RHEL.
+  maintainer: rhel-ssg-idm
+  unwanted_packages:
+    - esc
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--smb-client.yaml b/configs/rhel-ssg-idm--smb-client.yaml
@@ -0,0 +1,18 @@
+---
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: Samba FS Client
+  description: SMB/CIFS clients to complement the built-in SMB/CIFS filesystem in Linux. These clients allow access of SMB/CIFS shares and printing to SMB/CIFS printers.
+  maintainer: rhel-ssg-idm
+  packages:
+    - samba-client
+    - cifs-utils
+    - samba-winbind
+    - samba-winbind-clients
+    - samba-winbind-krb5-locator
+    - samba-krb5-printing
+    - cepces
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--smb-server.yaml b/configs/rhel-ssg-idm--smb-server.yaml
@@ -0,0 +1,18 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: Samba FS Server
+  description: SMB/CIFS share server
+  maintainer: rhel-ssg-idm
+  packages:
+    - samba
+    - samba-client
+    - cifs-utils
+    - samba-winbind
+    - samba-winbind-clients
+    - samba-winbind-krb5-locator
+    - samba-krb5-printing
+    - ctdb
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--unwanted.yaml b/configs/rhel-ssg-idm--unwanted.yaml
@@ -0,0 +1,39 @@
+document: feedback-pipeline-unwanted
+version: 1
+data:
+  name: Unwanted Packages - ssg_idm
+  description: Packages that the Identity Management subsystem does not want to distribute in RHEL 9
+  maintainer: rhel-ssg-idm
+  unwanted_packages:
+    # Removed in RHEL 10
+    - python3-netifaces
+    # Drop support from RHEL-9 (replaced by SSSD)
+    - nss-pam-ldapd
+    # Winbind is required in Samba in RHEL-8, SSSD integrates with it directly
+    - sssd-libwbclient
+    # Removed in RHEL-8.0, see https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/deprecated_functionality#deprecated_packages
+    - sssd-secrets
+    - authconfig
+    - pam_pkcs11
+    - pam_krb5
+    - openldap-servers
+    - mod_auth_kerb
+    - python-kerberos
+    - python-krbV
+    - python-requests-kerberos
+    - mod_nss
+    - mod_revocator
+    - pam_radius
+    - freeradius-client
+    # Not supported in RHEL (https://bugzilla.redhat.com/show_bug.cgi?id=910464)
+    - samba-dc
+    # Not supported in RHEL - call libkrb5 directly instead
+    - golang-github-jcmturner-gokrb5
+    # Deprecated (see https://pypi.org/project/pytest-runner/) and vulnerable
+    # Removed dependency from IdM (https://bugzilla.redhat.com/show_bug.cgi?id=1961613)
+    - python-pytest-runner
+    # Custodia was merged into IPA, https://pagure.io/freeipa/issue/8882
+    - custodia
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-ssg-idm--web-extensions.yaml b/configs/rhel-ssg-idm--web-extensions.yaml
@@ -0,0 +1,16 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: IdM Web Extensions
+  description: Specific Apache extensions that are required for client web server IdM experience, whether it is authentication, authorization or extended identity operation
+  maintainer: rhel-ssg-idm
+  packages:
+    - mod_auth_gssapi
+    - mod_auth_openidc
+    - mod_authnz_pam
+    - mod_intercept_form_submit
+    - mod_lookup_identity
+    - keycloak-httpd-client-install
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-sst-accelerators--exclusion.yaml b/configs/rhel-sst-accelerators--exclusion.yaml
@@ -0,0 +1,18 @@
+document: feedback-pipeline-unwanted
+version: 1
+data:
+  name: Accelerators Exclusion List
+  description: Accelerators packages not required in RHEL-9
+  maintainer: rhel-sst-accelerators
+  unwanted_packages:
+    - opae
+    - opae-devel
+    - spdlog
+    - spdlog-devel
+    - catch
+    - catch-devel
+    - cli11
+    - cli11-devel
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-sst-arch-hw--unwanted.yaml b/configs/rhel-sst-arch-hw--unwanted.yaml
@@ -0,0 +1,13 @@
+document: feedback-pipeline-unwanted
+version: 1
+data:
+  name: arch hw unwanted packages
+  description: Unwanted packages no longer headed for hardware enablement
+  maintainer: rhel-sst-arch-hw
+  unwanted_packages:
+    - libdv
+    - libiec61883
+    - fxload
+  labels:
+    - eln
+    - c10s
diff --git a/configs/rhel-sst-arch-hw-.yaml b/configs/rhel-sst-arch-hw-.yaml
@@ -0,0 +1,79 @@
+document: feedback-pipeline-workload
+version: 1
+data:
+  name: arch hw packages
+  description: Packages for hardware enablement
+  maintainer: rhel-sst-arch-hw
+  packages:
+    - bluez
+    - alsa-firmware
+    - alsa-sof-firmware
+    - alsa-lib
+    - alsa-plugins-arcamav
+    - alsa-plugins-maemo
+    - alsa-plugins-oss
+    - alsa-plugins-pulseaudio
+    - alsa-plugins-samplerate
+    - alsa-plugins-speex
+    - alsa-plugins-upmix
+    - alsa-plugins-usbstream
+    - alsa-plugins-vdownmix
+    - alsa-tools-firmware
+    - alsa-ucm
+    - alsa-ucm-utils
+    - alsa-utils
+    - speexdsp
+    - hwloc
+    - pigz
+    - s390utils
+    - s390utils-se-data
+    - x3270
+  arch_packages:
+    aarch64:
+      - acpica-tools
+      - bluez-obexd
+    ppc64le:
+      - acpica-tools
+      - bluez-obexd
+      - libnxz
+      - libnxz-devel
+      - libnxz-static
+      - libocxl
+      - libocxl-devel
+    s390x:
+      - qclib
+      - qclib-devel
+      - qclib-static
+      - libica
+      - libica-devel
+      - libzdnn
+      - libzdnn-devel
+      - libzdnn-static
+      - libzfcphbaapi
+      - libzfcphbaapi-devel
+      - libzfcphbaapi-docs
+      - libzpc
+      - libzpc-devel
+      - openssl-ibmca
+      - s390utils-base
+      - s390utils-chreipl-fcp-mpath
+      - s390utils-cmsfs-fuse
+      - s390utils-core
+      - s390utils-cpacfstatsd
+      - s390utils-cpuplugd
+      - s390utils-devel
+      - s390utils-hmcdrvfs
+      - s390utils-iucvterm
+      - s390utils-mon_statd
+      - s390utils-osasnmpd
+      - s390utils-zdsfs
+      - s390utils-ziomon
+    x86_64:
+      - acpica-tools
+      - bluez-obexd
+      - mcelog
+      - tboot
+      - pcm
+  labels:
+    - eln
+    - c10s