Sourceware infrastructure updates for Q3 2026

Sourceware infrastructure updates for Q3 2026

[Mark Wielaard]

Sourceware infrastructure community updates for Q3 2026

Keep Sourceware independent, worry-free and friendly, sustain our
fiscal sponsor https://sfconservancy.org/sustainer or support
OSUOSL to host projects like ours https://osuosl.org/donate

  Donate directly to Sourceware https://sourceware.org/donate.html
  Or check out our Corporate Sponsorship Levels & Benefits
  https://sourceware.org/sponsor.html

Every quarter we provide a summary of news about Sourceware and
roadmap updates https://sourceware.org/sourceware-25-roadmap.html

  - Budget and fundraising milestones
  - AI scraperbot mitigations
  - Cauldron 2026
  - Signed-commit census leaderboard
  - Sourceware Organization, Contact and Open Office hours

= Budget and fundraising milestones

  At the start of the quarter we officially launched our fundraising
  and corporate sponsorship initiative "Securing the Global Supply
  Chain". Offering flexible support tiers and in-kind partnerships.

  https://sourceware.org/donate.html
  https://sourceware.org/sponsor.html

  The response has been an enormous success. In just one quarter we raised
  ~$12,000, achieving two-thirds of our annual donation and sponsorship
  targets for the 2026/2027 fiscal year. Individual contributions surged,
  bringing in ~$2,800 across 68 donations from 56 donors (averaging ~$40,
  with ~$250/month in recurring pledges).

  Three new corporate partners joined Red Hat and OSUOSL in supporting
  Sourceware:

  - Open Source Security joined as a Supply Chain Defender
  - BayLibre joined as an Infrastructure Supporter
  - SUSE joined as an Infrastructure Supporter

  Then another major donation ($5000) arrived right before Cauldron in
  October. With our budget ahead of projections we are well positioned
  to begin funding key programs https://sourceware.org/financials.html
  including direct financial support for OSUOSL, hiring contractors
  for VM migrations and service upgrades, and sponsoring upstream
  Forgejo development.

= AI scraperbot mitigations

  Over the summer Sourceware experienced persistent waves of
  aggressive AI scraperbots targeting unauthenticated web endpoints
  cgit, gitweb, bugzilla, moinmoin wikis, patchwork, and anonymous
  git-over-https clones.

  Thanks to Frank's work on the nginx connection rate limiter, Xe's
  Anubis work and advice from Fedora sysadmins, we now intercept and
  drop roughly 60% of the malicious bot traffic early. This has
  eliminated widespread 429 (Too Many Requests) errors for regular
  users. We also upgraded to Anubis v1.27.1 and tuned the javascript
  challenge difficulties to reduce browser overhead.

  We split rate limiting pools so high volume scraping on gitweb
  interfaces no longer starves git over https operations. We also
  established an automated goodguys allowlist. Active contributors who
  push over ssh, log into bugzilla, or join the Libera irc channel
  #sourceware-goodguys are automatically exempt from throttling.

= Cauldron

  There were talks about the Forge and CI Automation at the GNU Tools
  Cauldron in Prague:

  The Sourceware Forge Experiment - year 2 and onwards
  https://conf.gnu-tools-cauldron.org/prg26/talk/YZQYFQ/

  An overview of what's been achieved in the last two years and a
  discussion about where we want to go next.

  Sourceware Infrastructure Organization and Automation
  https://conf.gnu-tools-cauldron.org/prg26/talk/SVVBRS/

  Overview of available Sourceware resources, automating your CI
  processes (buildbots, try-bots, pre/post-commit-CI/CD, snapshots,
  forgejo runners, patchwork's curator, etc.). Introduction to the
  Sourceware organization and goals for next year. Discussion with
  Sourceware PLC, FSF and SFC staff.
  
https://conf.gnu-tools-cauldron.org/media/prg26/submissions/SVVBRS/resources/Sourceware-Cauldron-_7FQ0SPp.pdf

= Signed-commit census leaderboard

  How is your project doing on signed commits?

  analyzing branch HEAD since 2026-01-01
  cygwin-calm     58 commits  58 signed 100%   1 committers  1 signers 100%
  cygwin-setup    55 commits  55 signed 100%   2 committers  2 signers 100%
  profiledb        5 commits   5 signed 100%   1 committers  1 signers 100%
  annobin        200 commits 193 signed  96%   2 committers  1 signers  50%
  bunsen         282 commits 269 signed  95%   4 committers  2 signers  50%
  systemtap      398 commits 347 signed  87%   6 committers  4 signers  66%
  libabigail      78 commits  67 signed  85%   2 committers  2 signers 100%
  builder         93 commits  51 signed  54%   2 committers  1 signers  50%
  elfutils       159 commits  74 signed  46%   4 committers  3 signers  75%
  newlib-cygwin  261 commits  36 signed  13%  11 committers  1 signers   9%
  gcc           7614 commits 759 signed   9% 206 committers 17 signers   8%
  glibc          852 commits  47 signed   5%  30 committers  2 signers   6%
  binutils-gdb  3020 commits  52 signed   1%  95 committers  8 signers   8%
  valgrind       440 commits   1 signed   0%   8 committers  1 signers  12%
  lvm2          1520 commits   2 signed   0%  10 committers  1 signers  10%
  bzip2           10 commits   0 signed   0%   1 committers  0 signers   0%
  debugedit       20 commits   0 signed   0%   1 committers  0 signers   0%
  dwz              7 commits   0 signed   0%   1 committers  0 signers   0%
  forge           11 commits   0 signed   0%   1 committers  0 signers   0%
  insight         55 commits   0 signed   0%   1 committers  0 signers   0%

= Sourceware Organization, Contact and Open Office hours

  We can be reached through irc, email and bugzilla
  https://sourceware.org/mission.html#organization

  There is also the fediverse for announcements, notices, downtime or
  temporary network issues https://fosstodon.org/@sourceware

  Every second Friday of the month is the Sourceware Overseers Open
  Office hour in #overseers on irc.libera.chat at 15:00 UTC. But
  please feel free to drop by any time with any Sourceware service or
  hosting questions.

  The PLC https://sourceware.org/mission.html#plc currently consists of
  7 members. The mandatory minimum number of Members is 4. And no more
  than 2 Members may be Financially-Related to the same Entity.

  If you are interested in joining the PLC please read the
  https://sourceware.org/Conservancy-Sourceware-FSA.pdf Fiscal
  Sponsorship Agreement, the Conflict of Interest Policy
  https://sfconservancy.org/projects/policies/conflict-of-interest-policy.html
  and contact us at plc@sourceware.org.

  If you rather help with more technical tasks please join the
  overseers list: https://sourceware.org/mailman/listinfo/overseers

Sincerely the Sourceware PLC,

  Frank Ch. Eigler, Ian Kelling, Ian Lance Taylor, Tom Tromey,
  Jon Turney, Mark J. Wielaard and Elena Zannoni