Policy for provenpackagers

Provenpackagers are members of the provenpackager group. In addition to the rights granted to members of packager, provenpackagers are able to commit changes to packages they do not own or maintain. They are a group of skilled package maintainers who are experienced in a wide variety of package types and who are familar with:

Provenpackagers lend a hand when help is needed, always with a desire to improve the quality of Fedora. Prior to making changes, provenpackagers should try to communicate with owners of a package in bugzilla, dist-git pull requests, IRC, matrix, or email. They should be careful not to change other people’s packages needlessly and try to do the minimal changes required to fix problems, as explained more in depth in Who is Allowed to Modify Which Packages. To exclude a package from provenpackagers access, you have to open a ticket at FESCo issue tracker and explain why provenpackagers should not have access to it. FESCo will discuss about and vote on your request in one of its weekly meetings.

Provenpackagers SHOULD have two-factor-authentication (2FA) enabled for their FAS accounts.

Becoming provenpackager

To become a member of the 'provenpackager' group, the procedure is the following:

  1. File a ticket in the FESCo issue tracker indicating why you wish to become a provenpackager.

  2. A FESCo member will send an e-mail to the sponsors, so they are aware about the ticket.

  3. Sponsors vote in the FESCo ticket.

  4. You must get at least 3 positive votes from sponsors with no negative votes, over a one week review period, to be approved.

  5. If you haven’t been approved after one week, FESCo will vote (normal FESCo voting mechanism applies).

Maintaining provenpackager status

Around the branch day in each release cycle, the Fedora Program Manager will audit the membership of the provenpackager group. Members of the group who have not submitted a koji build in the last six months will be contacted via their @fedoraproject.org email address to verify that they should remain in the the group. If they do not acknowledge within two weeks, they will be removed from the provenpackager group.