What happens to EPEL-7 when EL-7 goes EOL
What is happening to RHEL-7
The Red Hat Enterprise Linux release cycle is fairly straight forward with releases lasting about 10 years after their initial release.
| RHEL ver | Release Date | EoMaint | EoExtended |
|---|---|---|---|
| 5 | 2007-03-15 | 2017-03-31 | 2020-11-30 |
| 6 | 2010-11-10 | 2020-11-30 | 2024-06-30 |
| 7 | 2014-06-10 | 2024-06-30 | 2028-06-30 |
| 8 | 2019-05-07 | 2029-05-?? | 2031-05-?? |
| 9 | 2022-11-08 | 2032-05-?? | 2034-05-?? |
| 10 | 2025-??-?? | 2035-??-?? | 2037-??-?? |
On June 30, 2024, Red Hat will stop doing general maintenance support of RHEL-7 and no more updates to that operating system will be available without purchasing ‘Extended Life-cycle Support’ contracts from Red Hat or similar contracts from SuSE’s Liberty Linux, Perforce’s OpenLogic, or various other consultants and companies offering various services.
What is happening to EPEL-7
The Fedora Extra Packages for Enterprise Linux (EPEL) is a repository of additional packages built against the Red Hat Enterprise Linux (RHEL) releases. When a RHEL release leaves maintenance mode and moves into ‘Extended Life-cycle Support’, the EPEL package set corresponding to that is closed and archived. No new builds or updates are done against that particular release, all bugs related to that release are closed as CANTFIX, and most mirrors will remove the content after the master mirror moves items to archives.
The usual process for closing out an EPEL release depends on how much work the central Fedora release engineering team have to deal with at the time of the RHEL EOL. In cases where a Fedora release is needing a high amount of focus, the only actions may be that new builds will be turned off on the day of the EOL, and then later other steps will be worked out. In other cases, all the actions occur fairly close together.
- A reminder email that the EOL is going to occur is sent to various
Fedora mailing lists like:
devel-announce@lists.fedoraproject.organdepel-announce@lists.fedoraproject.org. System administrators using EPEL should be following at least the second email address to see what issues may be occurring with the repository. - The Fedora Build system is a complicated tool-set and so Release Engineering have to disable the building and composing of that particular EPEL release in multiple places. Because the release cycle is so long for EPEL compared to Fedora releases, there may be inconsistencies in how things were named or done. Basically it is a slower process than with Fedora releases to make sure that the tools continue to work after an EOL.
- All bugzilla.redhat.com bugs related to that release will be closed with a short stock answer tailored for that release as ‘CANTFIX’.
- The release is now copied into the Fedora down-loaders
/pub/archive/epeltree with an appropriate name like/pub/archive/epel/7.9.2024-07-01and then symlinks are made. A week is given for the archive mirrors to catch up with this new directory tree. - The Fedora mirrormanager will be changed to point requests for
‘repo=epel-7’ to the mirrors which have
/pub/archive. - The content then will be removed from the main mirror locations of
/pub/epel/and mirrors who rsync will catch up to that in a day or so.
Usually about a week to a month after this happens, either the mailing lists or IRC will get people wondering where the content went. However in the current age of Continuous Integration and Container builds, changes in the EPEL-7 directory structure seem to cause reactions hours after they occur.
How to deal with this EOL.
The main advice I have for system administrators dealing with an End of Life operating system is the following:
- Mirror the content locally from whatever mirrors you can find. This lowers network bandwidth usage, and deals with the vagaries of archive sites removing content because they no longer can handle the load from large numbers of unexpected users.
- Work with your management on how to deal with the technical load
that these systems are going to cause.
- Budget out what extended maintenance costs for critical security fixes to services like web-servers, databases, remote logins, etc are going to take.
- Budget out what mitigations are going to be required to keep these systems from causing longer term headaches. This may be extra firewalls or additional staff needed to take over software maintenance.
- Budget out what replacements of the hardware and software to move to an operating system which has long term maintenance support.
- Actually this is a very long list and probably should be its own blog post.
End Thoughts
Dealing with End of Life software is rarely an easy task. Just realize that you aren’t alone and there are tens of millions of systems which are going to be ‘unsupported’ on July 1st. Be patient with yourself and your infrastructure as you deal with this. Good luck.
