Fedora Release Engineering meeting summary for 2015-03-23/win 34
by Dennis Gilmore
======================================
#fedora-meeting-1: RELENG (2015-03-23)
======================================
Meeting started by dgilmore at 16:51:20 UTC. The full logs are available
at
http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-23/releng.2015-...
.
Meeting summary
---------------
* init process (dgilmore, 16:51:28)
* #5931 [Proposal] Move new branch and unretire requests to pkgdb2
(dgilmore, 16:53:28)
* LINK: https://fedorahosted.org/rel-eng/ticket/5931 (dgilmore,
16:53:35)
* #6047 handle packages that are retired only in Branched but not
Rawhide (dgilmore, 17:00:02)
* LINK: https://fedorahosted.org/rel-eng/ticket/6047 (dgilmore,
17:00:11)
* #5886 need method for distributing urgent fixes... urgently
(dgilmore, 17:06:03)
* LINK: https://fedorahosted.org/rel-eng/ticket/5886 (dgilmore,
17:06:11)
* #5870 rawhide signing (dgilmore, 17:32:53)
* LINK: https://fedorahosted.org/rel-eng/ticket/5870 (dgilmore,
17:32:59)
* #6110 allow sudo for sysadmin-releng on sign bridges (dgilmore,
17:34:29)
* LINK: https://fedorahosted.org/rel-eng/ticket/6110 (dgilmore,
17:34:35)
* ACTION: change sudoers on sigul-bridge boxes (dgilmore, 17:34:54)
* Secondary Architectures updates (dgilmore, 17:35:09)
* Secondary Architectures update - ppc (dgilmore, 17:35:10)
* in much better shape, Aplha RC's happening (dgilmore, 17:36:09)
* Secondary Architectures update - s390 (dgilmore, 17:36:18)
* Secondary Architectures update - arm (dgilmore, 17:36:34)
* RC's happening, ghc looks to be fixed soon (dgilmore, 17:37:54)
* Open Floor (dgilmore, 17:41:10)
Meeting ended at 17:46:52 UTC.
Action Items
------------
* change sudoers on sigul-bridge boxes
Action Items, by person
-----------------------
* **UNASSIGNED**
* change sudoers on sigul-bridge boxes
People Present (lines said)
---------------------------
* dgilmore (126)
* nirik (26)
* pbrobinson (23)
* pingou (17)
* Corey84 (16)
* lmacken (15)
* masta (10)
* tyll (6)
* zodbot (5)
* jwb (4)
* jreznik (1)
* bochecha (0)
* sharkcz (0)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
9 years, 1 month
Fedora QA Devel Meeting Minutes
by Tim Flink
=================================
#fedora-meeting-1: fedora-qadevel
=================================
Minutes: http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-23/fedora-qadev...
Minutes (text): http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-23/fedora-qadev...
Log: http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-23/fedora-qadev...
Meeting summary
---------------
* Role Call (tflink, 14:00:40)
* Status Updates (tflink, 14:02:25)
* kparal's status update (kparal, 14:03:22)
* download caching is now pushed in develop (kparal, 14:03:31)
* LINK: https://phab.qadevel.cloud.fedoraproject.org/D266 (kparal,
14:03:31)
* resultsdb_api now supports logging and logs network errors (kparal,
14:03:45)
* LINK: https://phab.qadevel.cloud.fedoraproject.org/D313 (kparal,
14:03:45)
* LINK: https://phab.qadevel.cloud.fedoraproject.org/D314 (kparal,
14:03:45)
* the gtk spinner performance issue (mainly OpenQA related) has been
reported a being discussed here: (kparal, 14:04:05)
* LINK: https://bugzilla.gnome.org/show_bug.cgi?id=746535 (kparal,
14:04:05)
* LINK: https://bugzilla.redhat.com/show_bug.cgi?id=1204242 (kparal,
14:04:05)
* now playing with testcloud (kparal, 14:04:17)
* mkrizek status report (mkrizek, 14:06:29)
* re-deployed dev machine to f21 with tflink (mkrizek, 14:06:36)
* various infra fixes (mkrizek, 14:06:41)
* continued research on using paramiko as remote execution tool, ETA
tomorrow/wednesday (mkrizek, 14:06:46)
* jskladan's status update (jskladan, 14:07:42)
* no updates - spent too much time reviewing patches, tinkering with
OpenQA/Testdays app, and understanding logging (jskladan, 14:07:42)
* Testday app needs either a https certificate (how do we get those?)
or change of DNS name (jskladan, 14:07:42)
* ACTION: jskladan needs to grab some tickets (jskladan, 14:07:42)
* tflink status update (tflink, 14:10:20)
* assisted in redeploy of taskotron-dev as f21 (tflink, 14:10:37)
* initial work on replacing project makefiles with something more
capable (tflink, 14:10:37)
* worked on getting new tool for running playbooks deployed in infra
(tflink, 14:10:37)
* found example of failing depcheck, having trouble reproducing
(tflink, 14:10:37)
* Open Floor (tflink, 14:12:10)
Meeting ended at 14:16:10 UTC.
Action Items
------------
* jskladan needs to grab some tickets
Action Items, by person
-----------------------
* jskladan
* jskladan needs to grab some tickets
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* tflink (31)
* kparal (22)
* mkrizek (8)
* jskladan (7)
* zodbot (4)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
9 years, 1 month
Fedora Chinese Meeting Minutes (2015-03-20)
by Zamir Sun
Hi all,
The IRC meeting minutes yesterday are available at the links below.
Thanks everyone for attending the meeting.
In the meeting we mainly talked about offline events and Fedora-zh
repo. Please review the proposed ideas and actions.
The next IRC meeting will be held on next Friday (2015-03-20). Please
come and join the discussion if you can!
http://meetbot.fedoraproject.org/fedora-zh/2015-03-20/fedora-zh.2015-03-2...
Minutes (text):
http://meetbot.fedoraproject.org/fedora-zh/2015-03-20/fedora-zh.2015-03-2...
Log:
http://meetbot.fedoraproject.org/fedora-zh/2015-03-20/fedora-zh.2015-03-2...
==================
#fedora-zh Meeting
==================
Meeting started by alick at 13:01:30 UTC. The full logs are available at
http://meetbot.fedoraproject.org/fedora-zh/2015-03-20/fedora-zh.2015-03-2...
.
Meeting summary
---------------
* Roll Call 报到 (alick, 13:03:24)
* topic: Offline events 线下活动 (alick, 13:05:18)
* topic: fedora-zh package repo (alick, 13:05:27)
* topic: github/fzug (alick, 13:05:40)
* topic: Fedora GSoC (alick, 13:08:39)
* Offline Events 线下活动 (alick, 13:10:16)
* ACTION: alick zsun contact local community in Shanghai (alick,
13:16:50)
* LINK:
http://beijinglug.org/index.php?option=com_content&view=article&id=777:ed...
(alick, 13:17:55)
* EFD Beijing is just tomorrow (alick, 13:18:54)
* fedora-zh package repo (alick, 13:25:51)
* LINK:
https://github.com/FZUG/Copr/wiki/%E4%B8%AD%E6%96%87%E7%A4%BE%E5%8C%BACop...
(alick, 13:28:30)
* LINK: https://github.com/FZUG/Copr/issues/5 (alick, 13:29:04)
* IDEA: 中文社区repo允许打包开源驱动/内核模块 (zsun, 13:48:47)
* github/fzug (zsun, 13:51:25)
* IDEA: hold more packaging workshop in every meetup (tonghuix,
13:56:23)
* ACTION: zsun ask cicku about adding a less priviledged group in
github/fzug (zsun, 13:58:33)
* ACTION: alick zsun and others make a namelist of all member in
github/fzug (zsun, 14:00:26)
* GSoC (zsun, 14:02:54)
* LINK: https://fedoraproject.org/wiki/GSOC_2015 (zsun, 14:03:23)
* open floor (zsun, 14:13:10)
Meeting ended at 14:19:47 UTC.
Action Items
------------
* alick zsun contact local community in Shanghai
* zsun ask cicku about adding a less priviledged group in github/fzug
* alick zsun and others make a namelist of all member in github/fzug
Action Items, by person
-----------------------
* alick
* alick zsun contact local community in Shanghai
* alick zsun and others make a namelist of all member in github/fzug
* hers
* alick zsun and others make a namelist of all member in github/fzug
* zsun
* alick zsun contact local community in Shanghai
* zsun ask cicku about adding a less priviledged group in github/fzug
* alick zsun and others make a namelist of all member in github/fzug
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* zsun (76)
* alick (48)
* tonghuix (38)
* tvvocold (17)
* microcai (14)
* zodbot (10)
* endle (8)
* BadGirl (3)
* isyangxin (1)
* Pany (0)
* touparx (0)
* tiansworld (0)
* hers (0)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
9 years, 1 month
Summary/Minutes from today's Fedora Infrastructure meeting (2015-03-19)
by Kevin Fenzi
============================================
#fedora-meeting: Infrastructure (2015-03-19)
============================================
Meeting started by nirik at 18:00:00 UTC. The full logs are available at
http://meetbot.fedoraproject.org/fedora-meeting/2015-03-19/infrastructure...
.
Meeting summary
---------------
* aloha (nirik, 18:00:01)
* New folks introductions / Apprentice feedback (nirik, 18:00:01)
* announcements and information (nirik, 18:04:24)
* datanommer performance enhancements complete in production,
resulting in significant speed gains. - ralph (nirik, 18:04:52)
* new zodbot feature deployed: karma+fedmsg plugin - ralph (nirik,
18:04:52)
* new zodbot feature deployed: more granular meetbot fedmsg messages
- ralph (nirik, 18:04:52)
* converted another mirrorlist server to mirrormanager2 - kevin
(nirik, 18:04:52)
* new OS instance is ready, we are now migrating persitent_cloud.yml
and then we will deploy dev instance of Copr and test on real world
data, then we do final reprovision - msuchy (nirik, 18:04:52)
* new mirrormanager2 release - pingou (nirik, 18:04:56)
* new pkgdb2 release (1.24), pushed to staging - testers welcome -
pingou (nirik, 18:04:58)
* progit nicely progressing:
http://209.132.184.222/progit/issues?tags=0.1 - pingou (nirik,
18:05:00)
* fixed packaging and other small issues for new rbac-playbook
(ansible_utils) - tflink (nirik, 18:05:04)
* puppet changes have been pushed, configuration has been migrated.
new script will be usable shortly - tflink (nirik, 18:05:06)
* starting to redeploy taskotron on f21 (dev complete), planning to
revisit el7 migration later - tflink (nirik, 18:05:09)
* waiting for hardware to arrive in PHX2 - smooge (nirik, 18:05:12)
* Ipsilon put in staging (again), please test - puiterwijk (nirik,
18:05:14)
* Update Fedora Infrastructure Apprentice wiki with Ansible ticket
workflow - mhurron (nirik, 18:06:57)
* ACTION: nirik to work with mhurron to create a ansible.txt for new
folks (nirik, 18:14:20)
* Shut off pkgdb2's emails? - pingou (nirik, 18:15:50)
* LINK:
https://lists.fedoraproject.org/pipermail/scm-commits/Week-of-Mon-2015031...
(nirik, 18:17:09)
* ACTION: pingou to make sure scm-commits user can post pkgdb changes
to scm-commits list, then disable native emails. (nirik, 18:19:09)
* db performance/tuning - kevin (nirik, 18:19:36)
* Learn about sigul (our rpm signing server) - kevin (nirik, 18:27:19)
* LINK: https://fedorahosted.org/sigul/ (nirik, 18:28:57)
* LINK: https://git.fedorahosted.org/cgit/sigul.git/tree/ (nirik,
18:34:07)
* LINK:
https://git.fedorahosted.org/cgit/sigul.git/tree/src/double_tls.py
(threebean, 18:34:36)
* Open Floor (nirik, 18:43:46)
Meeting ended at 18:47:51 UTC.
Action Items
------------
* nirik to work with mhurron to create a ansible.txt for new folks
* pingou to make sure scm-commits user can post pkgdb changes to
scm-commits list, then disable native emails.
Action Items, by person
-----------------------
* mhurron
* nirik to work with mhurron to create a ansible.txt for new folks
* nirik
* nirik to work with mhurron to create a ansible.txt for new folks
* pingou
* pingou to make sure scm-commits user can post pkgdb changes to
scm-commits list, then disable native emails.
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* nirik (123)
* threebean (25)
* pingou (19)
* mhurron (10)
* puiterwijk (9)
* dotEast2015 (7)
* mirek-hm (6)
* smooge (5)
* zodbot (4)
* oddshocks (3)
* dcmorton (3)
* dgilmore (2)
* andreasch (1)
* tflink (1)
* roshi (1)
* abadger1999 (0)
* lmacken (0)
* mdomsch (0)
* relrod (0)
--
18:00:00 <nirik> #startmeeting Infrastructure (2015-03-19)
18:00:00 <zodbot> Meeting started Thu Mar 19 18:00:00 2015 UTC. The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot.
18:00:00 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
18:00:01 <nirik> #meetingname infrastructure
18:00:01 <nirik> #topic aloha
18:00:01 <nirik> #chair smooge relrod nirik abadger1999 lmacken dgilmore mdomsch threebean pingou puiterwijk
18:00:01 <nirik> #topic New folks introductions / Apprentice feedback
18:00:01 <zodbot> The meeting name has been set to 'infrastructure'
18:00:01 <zodbot> Current chairs: abadger1999 dgilmore lmacken mdomsch nirik pingou puiterwijk relrod smooge threebean
18:00:26 * pingou here
18:00:30 * puiterwijk here
18:00:37 * oddshocks arrives
18:00:38 <dgilmore> hola
18:00:41 <andreasch> here
18:01:11 <tflink> here
18:01:12 <nirik> any new folks like to give a one-line introduction? or apprentices with questions or comments?
18:01:32 <nirik> also any last minute changes to the Gobby document would be good to do now. ;)
18:02:09 * threebean here
18:02:09 <dcmorton> Hey all, I'm Derek.. Linux Engineer at Rackspace, looking to help out with things around here..
18:02:22 <smooge> hello
18:02:27 <smooge> hello dcmorton
18:02:37 <nirik> welcome dcmorton. :) you interested in sysadmin type things? or app development? or both?
18:03:11 * roshi is here
18:03:21 * mirek-hm is here
18:03:25 * dgilmore installs gobby
18:03:29 <dcmorton> Mostly sysadmin stuff.. do a little coding here and there when needed
18:03:53 <nirik> dcmorton: cool. see me after the meeting over in #fedora-admin and I can get you started. ;)
18:04:08 <dcmorton> nirik: thanks, sounds great
18:04:24 <nirik> #topic announcements and information
18:04:39 <nirik> I'm going to dump this weeks info out of the gobby doc... stand by
18:04:52 <nirik> #info datanommer performance enhancements complete in production, resulting in significant speed gains. - ralph
18:04:52 <nirik> #info new zodbot feature deployed: karma+fedmsg plugin - ralph
18:04:52 <nirik> #info new zodbot feature deployed: more granular meetbot fedmsg messages - ralph
18:04:52 <nirik> #info converted another mirrorlist server to mirrormanager2 - kevin
18:04:52 <nirik> #info new OS instance is ready, we are now migrating persitent_cloud.yml and then we will deploy dev instance of Copr and test on real world data, then we do final reprovision - msuchy
18:04:53 * oddshocks plugs ears
18:04:56 <nirik> #info new mirrormanager2 release - pingou
18:04:58 <nirik> #info new pkgdb2 release (1.24), pushed to staging - testers welcome - pingou
18:05:00 <nirik> #info progit nicely progressing: http://209.132.184.222/progit/issues?tags=0.1 - pingou
18:05:02 <nirik> input welcome for the new name: http://209.132.184.222/progit/issue/47
18:05:04 <nirik> #info fixed packaging and other small issues for new rbac-playbook (ansible_utils) - tflink
18:05:06 <nirik> #info puppet changes have been pushed, configuration has been migrated. new script will be usable shortly - tflink
18:05:09 <nirik> #info starting to redeploy taskotron on f21 (dev complete), planning to revisit el7 migration later - tflink
18:05:12 <nirik> #info waiting for hardware to arrive in PHX2 - smooge
18:05:14 <nirik> #info Ipsilon put in staging (again), please test - puiterwijk
18:05:16 <nirik> lets all take a min to skim and see if there's anything we want more details on.
18:06:47 <nirik> ok, moving on then
18:06:57 <nirik> #topic Update Fedora Infrastructure Apprentice wiki with Ansible ticket workflow - mhurron
18:06:57 <nirik> Specifically there is a http://infrastructure.fedoraproject.org/infra/docs/puppet.txt but not a complimentary ansible.txt
18:07:00 <nirik> mhurron: you around?
18:07:03 <mhurron> I am
18:07:27 <nirik> so, we do have a README in ansible git root... but I don't think it's really the same here.
18:08:12 <mhurron> iirc it does cover some things, but the puppet document is more structured for new users to get working on things
18:08:31 <nirik> should this be in infra-docs? or just on the apprentice page do you think?
18:08:47 <mhurron> basically thought that it needed to be updated to include the same type of workflow for ansible
18:09:33 <nirik> FWIW, I wish we could impove our new contributor workflow... but it's hard. We don't have many cycles for one on one mentoring... and we are bad at filing easyfix tickets to allow people to work on things...
18:09:41 * nirik checks that puppet doc
18:09:45 <mhurron> I don't see why it couldn't be written in a clear but general manner to be useful for anyone to refer back to, so a link on the apprentice page to infra-docs might be a good way to handle it
18:10:20 <nirik> yeaah, I see... that has a lot of intro info in it...
18:10:33 <nirik> some of that could be just in a genric git one tho
18:10:56 <mhurron> ya, it's not like it's useless
18:11:00 <nirik> setting up git, your name, etc...
18:11:48 <nirik> ok, so how best can we move forward here? I can try and update it, but we know how well that ends up going. ;)
18:12:00 <nirik> or I can try and give you info to correct it?
18:12:31 <mhurron> I am happy to do it, we can start with a quick dump of information and I can work with that to begin with
18:12:35 <nirik> lots of the puppet one is the same for ansible, but some sections are puppet specific for sure.
18:12:45 <mhurron> and from there I can come back with specific questions from there
18:13:02 <threebean> would be much appreciated
18:13:20 <nirik> sure. want me to just dump things here? or meet up after the meeting?
18:13:39 <mhurron> we can do it after
18:13:52 <nirik> mhurron: ok. I should be around. ;)
18:13:53 <mhurron> I'll be around, or you can email me if that's easier
18:14:00 <nirik> and thanks for pushing forward on this stuff. ;)
18:14:20 <nirik> #action nirik to work with mhurron to create a ansible.txt for new folks
18:14:50 <nirik> ok, anything else on this? or move on?
18:15:07 <mhurron> i'm good to move on
18:15:08 <dotEast2015> hello everyone, did I miss the intro part
18:15:12 <nirik> like I said, I would like to try and improve the new contributor flow, but I think thats a higher level discussion for the list perhaps...
18:15:31 <nirik> dotEast2015: yeah. can you hang around for the open floor at the end to add yours?
18:15:42 <dotEast2015> sure
18:15:50 <nirik> #topic Shut off pkgdb2's emails? - pingou
18:15:54 <nirik> pingou: you added this?
18:15:57 <pingou> yes
18:16:09 <pingou> just asking if we should update PKGDB2_EMAIL_NOTIFICATION = True to False in prod
18:16:29 <nirik> pingou: one thing we might need before we can do that...
18:16:31 <puiterwijk> +1, we have FMN now
18:16:45 <nirik> the scm-commits user to post to scm-commits? I think those all go there too don't they?
18:17:05 <pingou> they do yes
18:17:09 <nirik> https://lists.fedoraproject.org/pipermail/scm-commits/Week-of-Mon-2015031...
18:17:19 <pingou> threebean: iirc I read you were looking at this no?
18:17:30 <nirik> if we have that in place, +1
18:17:32 <threebean> yeah, I stepped back to fix problems with the fedmsg git hook first
18:17:37 <pingou> ok
18:18:00 <pingou> so once we've done it we can adjust the config in ansible (and restart apache)
18:18:01 <nirik> threebean: but for pkgdb it should be ok to make that user now?
18:18:05 * threebean nods
18:18:07 <nirik> or you want to wait for pkgs?
18:18:12 <pingou> maybe we can couple this with the move of 1.24 to prod?
18:18:13 <threebean> no, that can move ahead. sure
18:18:46 <nirik> sounds good, we can get everything lined up out of meeting.
18:18:56 <pingou> cool
18:19:09 <nirik> #action pingou to make sure scm-commits user can post pkgdb changes to scm-commits list, then disable native emails.
18:19:27 <nirik> anything else on this?
18:19:32 <pingou> not for me
18:19:36 <nirik> #topic db performance/tuning - kevin
18:19:50 <nirik> I just added this... wanted to talk about that postgres change that threebean did for datanommer...
18:19:56 <threebean> oo
18:19:59 <nirik> do we want to do all our other dbs?
18:20:03 <smooge> YES
18:20:06 <pingou> threebean++ on that btw!
18:20:06 <nirik> and why is it not auto-doing them?
18:20:13 <smooge> We want threebean to do every database
18:20:17 <nirik> yeah! it was a big big win.
18:20:19 <pingou> lol
18:20:35 <threebean> heh, there's two halves to it. one is really app-specific
18:20:53 <threebean> it involves going through the schema and looking for columns that would benefit from adding an index to it
18:21:06 <smooge> you removed all my SELECT * FROM * WITH * | sytem 'grep ...'?
18:21:06 <nirik> yeah, thats gonna have to be longer term I think...
18:21:08 <threebean> note that adding an index doesn't always make things better. sometimes it makes things worse depending on how the column is used.
18:21:44 <threebean> the other more general half, we can look at doing everywhere... this is that our autovacuum-launcher daemon is never actually vacuuming our tables.
18:21:58 <threebean> I don't know why yet.. but there's a way to turn up the logging for it so we can see.
18:22:07 <nirik> ok, perhaps test on db01.stg ?
18:22:19 <nirik> and does this need an outage? or can we do it live?
18:22:28 <threebean> can do it live (the vacuuming stuff, no prob)
18:22:41 <threebean> adding indexes usually means downtime since its an ALTER TABLE kind of thing
18:23:00 <nirik> yeah.
18:23:28 <nirik> ok, I can try and poke at it. would be great to make things faster before freeze.
18:23:34 <puiterwijk> threebean: doing a full vacuum wil lrequire downtime
18:23:40 <puiterwijk> since that gets a full lock on the tables
18:23:51 <threebean> puiterwijk: correct. but i don't see why we'd need to do a full vacuum.
18:24:00 <puiterwijk> okay, sure. just wanted to point it out
18:24:05 * threebean nods
18:24:11 <puiterwijk> wasn't sure which you used
18:24:21 <threebean> just 'VACUUM ANALYZE;'
18:24:29 <puiterwijk> ah, okay. that should be no problem indeed.
18:25:07 <threebean> if people didn't catch it, robyduck had a script that made tons of queries against datagrepper to try and determine which ambassadors are active and which are not
18:25:08 <nirik> excellent. ;)
18:25:23 <threebean> he reports that it used to take 2 days and 18 hours to run. it only takes 13 minutes now.
18:25:34 <puiterwijk> wow. that's quite a bit better :)
18:26:04 <nirik> yeah, crazy.
18:26:10 * mirek-hm claps hands
18:26:31 <oddshocks> slightly improved, at least
18:26:48 <nirik> ok, anything else on this one? I just wanted to discuss it a bit and see if we can do it more. ;)
18:27:19 <nirik> #topic Learn about sigul (our rpm signing server) - kevin
18:27:30 <nirik> I thought I would talk today about our rpm signing server a bit.
18:27:48 <threebean> (real quick on the last point) getting the auto-vacuuming working would be great. if someone gets to it before I do, can you take some kind of measurement of the existing databases before and after so we can see what kind of difference it makes
18:28:09 <threebean> (eom)
18:28:12 <nirik> First a disclaimer: I haven't delved into the code, so I might be incorrect or mistaken about my understanding of things, so take everything here with a grain of salt... ;)
18:28:39 <nirik> Fedora uses a all software rpm package signing server called sigul. It's at fedorahosted.org for the code:
18:28:57 <nirik> https://fedorahosted.org/sigul/
18:29:19 <nirik> it's not gotten a lot of maint over the last few years, but there's some proposals around Google Summer of Code to improve aspects of it.
18:29:29 <nirik> Thats thru the releng folks mentoring.
18:29:42 <nirik> Basically there's 3 machines involved.
18:29:59 <nirik> 1. An end user machine or one of the releng machines that runs a client.
18:30:15 <nirik> 2. A "bridge". This is sign-bridge01 in our infrastructure.
18:30:33 <nirik> 3. A "vault". This is sign-vault03 and sign-vault04 in our infrastructure.
18:30:39 <nirik> secondary arches have their own versions of these.
18:31:04 <nirik> The client talks to the bridge. The server talks to the bridge. The client and server don't talk directly, they always go thru the bridge.
18:31:48 <nirik> There's permissions for each key. Every user has their own passphrases for each key.
18:32:21 <mirek-hm> and the protocol is AFAIK propietary and very very paranoid
18:32:22 <nirik> The server has it's own passphrase (entered at startup). It needs this + the users passphrase to unlock the key to sign something. Without both it can't.
18:32:41 <nirik> mirek-hm: well, it's 100% open source... ;) you can look at it, but it's very dense python...
18:32:55 <nirik> it's also pretty tied to koji.
18:33:10 <mirek-hm> I mean our own implementation, not normal TLS
18:33:27 <threebean> whoah. really?
18:33:34 <nirik> A client asks to sign a package, the bridge checks that they have access to the key, that their passphrase is right, the vault signs it, and the bridge writes the signed thing to koji usually.
18:33:38 <nirik> no, it's all open source.
18:34:07 <nirik> https://git.fedorahosted.org/cgit/sigul.git/tree/
18:34:17 <nirik> we aren't running anything other than that. ;)
18:34:36 <threebean> https://git.fedorahosted.org/cgit/sigul.git/tree/src/double_tls.py
18:34:57 <nirik> It's got a number of issues... it doesn't rotate logs right, it's error handling is poor (the vault can start with the wrong key, it won't work and it won't tell you the key was wrong)
18:35:04 <nirik> it needs gpg1.
18:35:24 <nirik> but it does work. ;)
18:35:45 <nirik> The vaults are physical servers that don't run sshd. So, they must be accessed via management console.
18:35:56 <nirik> The bridge is a vm.
18:36:40 * nirik tries to think of what else to add.
18:36:53 <nirik> Any questions on the setup or anything?
18:37:09 <nirik> oh, the bridge used to also need a passphrase at startup.
18:37:17 <mirek-hm> there is one disadvantage of sigul, you have to copy whole RPM or (image) to signing machine and then copy the data back, which is tons of data. In comparsion the Copr use obs-sign where you create digest from rpm (the same way as gpg does) this short digest is sent to signer and signed based on that digest and only signature is sent back which is then inserted to rpm
18:37:45 <nirik> turns out that this didn't add any security really, so we removed it. Anyone in sysadmin-main should be able to restart it now (but there is a process so ask for that first)
18:38:05 <nirik> mirek-hm: yeah, all the data slinging is pretty slow sometimes.
18:38:20 <threebean> nirik: any chance of moving that bridge restart process into a playbook?
18:38:31 <nirik> especially when you get a package like texlive src.rpm or 0ad data or webkitgtk4-debuginfo
18:38:40 <nirik> threebean: we could yeah...
18:38:55 <pingou> +1 for the playbook
18:38:59 <nirik> basically has to kill existing processes, then run the server with some options, then hit return at the passphrase prompt
18:39:14 <nirik> you still get a prompt, even tho the passphrase is 'return'
18:39:18 <pingou> (even if it is only in the private repo)
18:39:43 <nirik> I can see about making a playbook, sounds like a good idea.
18:40:08 <nirik> Oh, thats another problem it has... it has a 'batch mode', but it causes the bridge to lock up, needing restart. ;)
18:40:55 <mirek-hm> the private keys are located on vault machines and there is AFAIK some offline backup in some bank tresor, is this correct?
18:41:26 <nirik> the keys are on the 2 vault machines and yes, there are further encrypted backups.
18:42:03 <nirik> but note those keys are not just there. You need both the server passphrase and a valid user passphrase that has access to that key to decrypt it so you can sign something with it.
18:42:15 <nirik> the vault by itself cannot.
18:42:19 <nirik> nor the user.
18:42:44 <threebean> cool :)
18:42:50 <nirik> Anyhow, I hope we see improvements in things from GSoC, but we will see.
18:43:01 <pingou> when you say the server passphrase, which server is it?
18:43:14 <nirik> pingou: the one needed at startup on the vault.
18:43:15 <puiterwijk> pingou: vault
18:43:20 <pingou> ok
18:43:46 <nirik> #topic Open Floor
18:43:52 <pingou> so when you start the process on the vault (from the client, via the bridge), you enter your own pw to unlock the key
18:43:55 <nirik> dotEast2015: you still around? want to introduce yourself?
18:44:03 <nirik> pingou: yep.
18:44:07 <dotEast2015> sure
18:44:11 <pingou> and the passphrase of the server/application signing in the vault
18:44:18 <dotEast2015> Hello everyone, my name is ali elkhalidi and I am working as a linux systems engineer and I would like to help and contribute to the Fedora infrastructure
18:44:23 <pingou> thanks nirik helps understanding :)
18:44:39 <nirik> pingou: and each key has it's own pw. or can. The server passphrase was entered when it was started up last.
18:44:57 <nirik> dotEast2015: welcome. ;) You more interested in sysadmin or application devel type things?
18:45:03 <dotEast2015> nirik: thanks
18:45:15 <dotEast2015> nirik: sysadmin
18:45:50 <nirik> cool. see me after the meeting over in #fedora-admin and I can help you get started. ;)
18:46:00 <nirik> Does anyone have any other items for open floor?
18:46:16 <dotEast2015> nirik: will do. thanks
18:47:11 <nirik> ok then, lets all get back 15min of our day and end the meeting now? ;)
18:47:19 <threebean> +1
18:47:51 <nirik> #endmeeting
9 years, 1 month
Summary/Minutes from today's FPC Meeting (2015-03-19 17:00 - 17:50 UTC)
by James Antill
======================
#fedora-meeting-1: fpc
======================
Meeting started by geppetto at 17:01:20 UTC. The full logs are available
at
http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-19/fpc.2015-03-...
.
Meeting summary
---------------
* Roll Call (geppetto, 17:01:20)
* Schedule (geppetto, 17:04:45)
* LINK:
https://lists.fedoraproject.org/pipermail/packaging/2015-March/010506.html
(geppetto, 17:04:47)
* #511 Change request: Package Guidelines: DevAssistant (geppetto,
17:05:01)
* LINK: https://fedorahosted.org/fpc/ticket/511 (geppetto, 17:05:07)
* LINK:
https://fedoraproject.org/w/index.php?title=User%3ATradej%2FDraft%
3APackaging%3ADAP&diff=406424&oldid=401659
… is the diff (geppetto, 17:06:14)
* ACTION: DevAssistant change for license files (+1:5, 0:0, -1:0)
(geppetto, 17:08:07)
* #512 Java guidelines change (geppetto, 17:08:21)
* LINK: https://fedorahosted.org/fpc/ticket/512 (geppetto, 17:08:30)
* ACTION: Java guidelines remove using EE APIs section (+1:5, 0:0,
-1:0) (geppetto, 17:11:41)
* #513 Use python -Es in shbang (geppetto, 17:11:52)
* LINK: https://fedorahosted.org/fpc/ticket/513 (geppetto, 17:11:57)
* ACTION: Mandatory use of -s in she-bang of python programs (+1:5,
0:0, -1:0) (geppetto, 17:26:28)
* ACTION: tibbs Will work on macros to vote on next week. (geppetto,
17:32:22)
* LINK: https://bugzilla.redhat.com/show_bug.cgi?id=953704 (tibbs|w,
17:32:42)
* #325 Temporary bundling exception of yajl library (geppetto,
17:34:57)
* LINK: https://fedorahosted.org/fpc/ticket/325 (geppetto, 17:34:59)
* ACTION: No bundling exception of yajl library, someone just create a
compat-yajil1 or even yajil1 fork/whatever package. (geppetto,
17:45:26)
* Or become the upstream maintainer :) (geppetto, 17:45:59)
* Open Floor (geppetto, 17:46:49)
Meeting ended at 17:51:24 UTC.
Action Items
------------
* DevAssistant change for license files (+1:5, 0:0, -1:0)
* Java guidelines remove using EE APIs section (+1:5, 0:0, -1:0)
* Mandatory use of -s in she-bang of python programs (+1:5, 0:0, -1:0)
* tibbs Will work on macros to vote on next week.
* No bundling exception of yajl library, someone just create a
compat-yajil1 or even yajil1 fork/whatever package.
Action Items, by person
-----------------------
* tibbs
* tibbs Will work on macros to vote on next week.
* **UNASSIGNED**
* DevAssistant change for license files (+1:5, 0:0, -1:0)
* Java guidelines remove using EE APIs section (+1:5, 0:0, -1:0)
* Mandatory use of -s in she-bang of python programs (+1:5, 0:0, -1:0)
* No bundling exception of yajl library, someone just create a
compat-yajil1 or even yajil1 fork/whatever package.
People Present (lines said)
---------------------------
* geppetto (66)
* tibbs|w (43)
* orionp (18)
* mbooth (9)
* zodbot (7)
* SmootherFrOgZ (6)
* sgallagh (1)
* tibbs (0)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
9 years, 1 month
EMEA Ambassadors Meeting Minutes 2015-03-18
by Jiri Eischmann
Hi,
we had another regular EMEA ambassadors meeting. It lasted for 1 hour and 25 minutes and 16 ambassadors attended. You can find more in the summary and minutes:
Meeting summary
Roll Call (sesivany, 21:00:12)
Announcements (sesivany, 21:04:39)
Fedora 22 Alpha was released last week. (sesivany, 21:06:48)
http://fedoramagazine.org/fedora-22-alpha-released/ (sesivany, 21:07:21)
http://fedoramagazine.org/your-chance-to-contribute-in-fedora-22-developm... (sesivany, 21:08:27)
F22 test days are scheduled, promote them in your local communities. (sesivany, 21:09:41)
Fedora Magazine has a new look - http://www.fedoramagazine.org (sesivany, 21:10:30)
Requests (sesivany, 21:12:35)
https://fedorahosted.org/emea-swag-tracking/report/1?page=1&sort=ticket&a... (sesivany, 21:14:00)
#467 - Funding for OSCAL 2015 (sesivany, 21:15:29)
https://fedoraproject.org/wiki/OSCAL_2015 (giannisk, 21:18:58)
AGREED: The ticket #467 has been approved. (sesivany, 21:21:49)
Funding request for Robert Scheck for CLT 2015 (sesivany, 21:22:46)
https://fedorahosted.org/emea-swag-tracking/ticket/466 (sesivany, 21:22:55)
AGREED: The ticket #466 has been approved. (sesivany, 21:25:20)
Funding request for shipping Mohamed Fawzy Ambassador t-shirt (sesivany, 21:26:25)
AGREED: the ticket #464 has been approved. (sesivany, 21:36:03)
Events (sesivany, 21:55:01)
https://fedoraproject.org/wiki/CATScope14 (Mohamed_Fawzy, 21:55:41)
Openfloor (sesivany, 22:06:27)
Minutes: http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/emea_ambassado...
Minutes (text): http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/emea_ambassado...
Log: http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/emea_ambassado...
The next meeting will be on April 1st.
Jiri
9 years, 1 month
Re: Schedule for Wednesday's FESCo meeting (2015-03-18 at 18UTC)
by Kevin Fenzi
===================================
#fedora-meeting: FESCO (2015-03-18)
===================================
Meeting started by nirik at 18:00:05 UTC. The full logs are available at
http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/fesco.2015-03-...
.
Meeting summary
---------------
* init process (nirik, 18:00:06)
* #1419 provenpackager request (FAS - nonamedotc) (nirik, 18:01:56)
* LINK: https://fedorahosted.org/fesco/ticket/1419 (nirik, 18:01:56)
* AGREED: request is approved (+5, 0, 0) (nirik, 18:04:51)
* LINK: https://fedorahosted.org/fesco/ticket/1312 (nirik, 18:06:49)
* #1312: F22 System Wide Change: Replace Yum With DNF -
http://fedoraproject.org/wiki/Changes/ReplaceYumWithDNF (nirik,
18:07:40)
* LINK: https://fedorahosted.org/fesco/ticket/1312 (nirik, 18:07:41)
* please add stakeholders to ticket and see if we can gather consensus
before next meeting (nirik, 18:12:08)
* continue in ticket with proposals, etc. (nirik, 18:26:30)
* Next weeks chair (nirik, 18:26:33)
* paragan to chair next week (nirik, 18:27:32)
* Open Floor (nirik, 18:27:36)
* FOSCo is starting up over the next few weeks. IRC: #fedora-outreach
Trac/ticketing: https://fedorahosted.org/fosco (nirik, 18:37:24)
Meeting ended at 18:43:04 UTC.
Action Items
------------
Action Items, by person
-----------------------
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* nirik (65)
* ajax (20)
* decause (16)
* mitr (14)
* dgilmore (11)
* thozza (9)
* paragan (8)
* jwb (8)
* zodbot (7)
* rishi (5)
* sgallagh (3)
* jreznik (3)
* mattdm (3)
--
18:00:05 <nirik> #startmeeting FESCO (2015-03-18)
18:00:05 <zodbot> Meeting started Wed Mar 18 18:00:05 2015 UTC. The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot.
18:00:05 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
18:00:06 <nirik> #meetingname fesco
18:00:06 <nirik> #chair ajax dgilmore jwb mitr nirik paragan rishi thozza sgallagh
18:00:06 <nirik> #topic init process
18:00:06 <zodbot> The meeting name has been set to 'fesco'
18:00:06 <zodbot> Current chairs: ajax dgilmore jwb mitr nirik paragan rishi sgallagh thozza
18:00:11 <mitr> Hello
18:00:16 <paragan> Hi
18:00:37 <sgallagh> Hello
18:00:49 <jwb> i am here-ish
18:01:07 * jreznik will try to be around if needed by FESCo :)
18:01:12 <nirik> short meeting today hopefully. ;)
18:01:18 <thozza> hi all
18:01:26 * decause waves
18:01:46 <nirik> ok, lets go ahead and get started.
18:01:53 <nirik> hello decause. ;)
18:01:56 <nirik> #topic #1419 provenpackager request (FAS - nonamedotc)
18:01:56 <nirik> https://fedorahosted.org/fesco/ticket/1419
18:01:56 <nirik> .fesco 1419
18:01:58 <zodbot> nirik: #1419 (provenpackager request (FAS - nonamedotc)) – FESCo - https://fedorahosted.org/fesco/ticket/1419
18:01:58 <decause> nirik: hi there :)
18:02:10 <nirik> so, by our policy this didn't get 3 +1s in a week so it goes to meeting....
18:02:18 <nirik> sgallagh voted +1 in ticket
18:02:32 * mattdm is lurking
18:03:09 <nirik> any other votes? I'm +1 (as I was in the ticket)
18:03:39 <ajax> +1
18:03:53 <mitr> +1, considering the variety of different kinds of packages
18:04:05 <thozza> sure, I'm +1
18:04:51 <nirik> #agreed request is approved (+5, 0, 0)
18:05:05 <nirik> ok, do we want to discuss the dnf vs yum ticket? or leave it for next week?
18:05:43 <thozza> I would leave the discussion in the ticket for now
18:05:57 <thozza> I'm not sure if there is anything to discuss for F22
18:06:13 <thozza> we already agreed we don't want dnf-yum to be installed by default in F22
18:06:35 <nirik> ok, we can bring up next week if there's proposals in ticket.
18:06:37 <ajax> remind me which ticket that is?
18:06:49 <nirik> https://fedorahosted.org/fesco/ticket/1312
18:06:54 <nirik> .fesco 1312
18:06:55 <zodbot> nirik: #1312 (F22 System Wide Change: Replace Yum With DNF - http://fedoraproject.org/wiki/Changes/ReplaceYumWithDNF) – FESCo - https://fedorahosted.org/fesco/ticket/1312
18:07:24 <thozza> ahh, there are new comments I didn't see
18:07:33 <paragan> yes there are :)
18:07:35 <nirik> lets touch on it then I suppose...
18:07:40 <nirik> #topic #1312: F22 System Wide Change: Replace Yum With DNF - http://fedoraproject.org/wiki/Changes/ReplaceYumWithDNF
18:07:41 <nirik> https://fedorahosted.org/fesco/ticket/1312
18:07:41 <nirik> .fesco 1312
18:07:42 <zodbot> nirik: #1312 (F22 System Wide Change: Replace Yum With DNF - http://fedoraproject.org/wiki/Changes/ReplaceYumWithDNF) – FESCo - https://fedorahosted.org/fesco/ticket/1312
18:07:48 <mitr> nirik: If we do go with the dnf-yum-in-/usr/bin/yum rote, we should do so very soon. But that proposal has been only 5 hours ago, so getting all information an everybody involved today is probably impossible.
18:08:02 <nirik> mitr: yeah.
18:08:28 <paragan> yes if we need to propose any such changes good to implement it soon
18:08:47 <ajax> you'd think PackageKit-command-not-found would cover this already
18:08:50 <nirik> in particular I'd like to hear what the yum folks have to say...
18:09:00 <mitr> I’d say: Make sure jzeleny, dgilmore, and whoever else we can think of, is Cc:ed, ask for specific feedback on this plan, and aim to get a decision in the ticket before the next meeting.
18:09:13 <mattdm> fwiw I'm in favor of kevin/nirik's "middle ground" suggestion
18:09:49 * paragan also likes nirik's suggestion in ticket
18:10:34 <paragan> I have already asked dnf developers to CC themselves in that ticket, it was having Ales as CC
18:11:07 <nirik> if someone could point the packaging-team (who I think 'owns' yum ?) at this also that might be good...
18:11:42 <paragan> nirik, I already asked them
18:11:50 <mitr> Hum, /usr/lib/python2.7/site-packages/mockbuild/package_manager.py actually invokes the yum _command_
18:12:05 <mitr> paragan: Just edit the Cc:s directly
18:12:08 <nirik> #info please add stakeholders to ticket and see if we can gather consensus before next meeting
18:12:34 <paragan> Both rholy and jsilhan are in CC in that ticket
18:12:35 <nirik> mitr: sure, some things call /usr/bin/yum, some use a yum object...
18:12:49 <nirik> and mock has been ported. :)
18:13:05 <nirik> it's things like mash, pungi, etc... that still need work.
18:13:10 <jwb> i'm confused why this is just now coming up
18:13:29 <thozza> jwb: it did before
18:13:43 <sgallagh> jwb: It's coming up again because people started installing the Alpha
18:13:46 <nirik> jwb: someone filed a bug on the cloud image...
18:13:55 <jwb> we discussed this ticket like 3 times. how did anyone fail to raise these concerns in a manner that made us notice and expect dnf-yum to be the default?
18:14:05 <dgilmore> sorry i am late
18:14:39 <nirik> jwb: also, the change page still says dnf-yum will be installed, I asked them to change that in the change bug... or clarify...
18:14:46 <nirik> but I guess I should just edit the wiki.
18:14:53 <mitr> jwb: IIRC the concerns have been raised but without a proposal we could either go with no dnf-yum or delay the dnf switch.
18:15:10 <mitr> jwb: Now we have a proposal, which, if it were practical, would IMHO be so much better that reopening this is well worth it.
18:15:12 <jreznik> nirik: I can poke jsilhan tomorrow, he sits a few meters away from me
18:15:28 <nirik> cool
18:15:55 <nirik> I'm fine with no dnf-yum, but it seems others dont like that.
18:16:12 <thozza> I think it makes sense to have it there
18:16:21 <jwb> the amount of waffling and back and forth is disappointing
18:16:37 <jwb> so let's figure it out and stop doing that
18:16:57 <nirik> well, I don't think I have been waffling... I just tried to come up with something that would make more people happy.
18:17:16 <dgilmore> jwb: the only way to stop the discussion for good is to say the dnf is ready and they need to follow the original plan and rename to yum
18:17:23 <jwb> nirik, none of this information is new at all. we said we'd switch to DNF. we knew it wasn't 1:1
18:17:41 * rishi drops in & reads back log
18:17:51 <jreznik> jwb: exactly
18:17:56 <nirik> jwb: yeah. Agreed.
18:17:58 <jwb> now we're worried about it not being called yum. it wasn't called yum the first 3 times we talked about it
18:18:08 <dgilmore> there is so much investement in Fedora, RHEL, CentOS etc that changing the package installer/updater's name is never going to satisfy a large number of people
18:18:16 <nirik> jwb: I think there's some confusion tho about dnf-yum...
18:18:19 <mattdm> I don't think I'm waffling. And the original proposal said that it *might* be named yum.
18:18:52 <dgilmore> mattdm: the original plan years ago was for the re-write to be named back to yum when ready.
18:19:02 <rishi> Unfortunately I got to run home today. If we are going to vote on the dnf vs. yum issue, then you can assume that I am with the majority (whatever that is).
18:19:07 <nirik> the current approved change still says that dnf-yum will be used.
18:19:12 <dgilmore> the only way to not have a huge docs, mindshare etc cost is to follow that through
18:19:25 <nirik> "package 'dnf-yum' is installed by default. It obsoletes Yum and provides its own /usr/bin/yum, a short script that redirects to /usr/bin/dnf with an appropriate warning message that DNF is the preferred package manager now. Notice that upgrading F21 to F22 will not cause the compat package to be installed so will not disturb any upgrading users."
18:19:33 <mitr> jwb: Upstream doesn't really want it to be called yum, but several FESCo members do. It is not that surprising that DNF upstream is not spending huge amount of time on making /usr/bin/yum a possibility, nor that FESCo members take time to figure alternatives out.
18:19:59 <mitr> or s/called/available as/
18:20:04 <ajax> dgilmore: some of us remember up2date...
18:20:11 <dgilmore> ajax: :)
18:20:21 <nirik> anyhow, I am +1 to no dnf-yum, I am +1 to a dnf-yum that doesn't conflict with or obsolete yum, and -1 to one that does. ;)
18:20:25 <dgilmore> ajax: it had a huge cost and there was less investment in it
18:21:44 <mitr> So, assuming we are not deciding this now, who all needs to be on Cc:?
18:21:44 <nirik> ok, so what do we want to do today?
18:22:28 <thozza> nirik: nothing I guess :)
18:22:53 <rishi> mitr: In that case, I would lean towards upstream's judgement and never install dnf-yum.
18:23:06 <rishi> "never" == "even post-F22"
18:23:51 <dgilmore> rishi: we can never say never
18:23:55 <mitr> rishi: I think I see their viewpoint but ultimately I disagree; the breakage is just not worth it (both alone, and as a precedent/reinforcing the way we do migrations)
18:24:23 <rishi> mitr: You disagree with what? Got confused.
18:25:59 <nirik> ok, lets continue in ticket I guess and see what comes up next week?
18:26:15 <ajax> yeah
18:26:17 <sgallagh> ack
18:26:30 <nirik> #info continue in ticket with proposals, etc.
18:26:33 <nirik> #topic Next weeks chair
18:26:36 <nirik> who wants it?
18:27:20 <paragan> I can next week
18:27:27 <nirik> thanks paragan
18:27:32 <nirik> #info paragan to chair next week
18:27:36 <nirik> #topic Open Floor
18:27:40 <nirik> anything for open floor?
18:28:13 <ajax> i'd like to revisit the hardening change for F23
18:28:30 * decause raises hand for next in queue
18:28:37 <ajax> i should really have been aware that it implied -z now, which is a rather drastic change
18:28:40 <nirik> ajax: ok, you want to discuss that now? or next week?
18:29:05 <ajax> nirik: just raising awareness really. i'd like to get a concrete set of changes by next week
18:29:10 <ajax> which i'm happy to work on
18:29:25 <ajax> just want to see if that raises any red flags for anyone
18:29:39 * nirik is ok with adjusting things if we have good reason to do so.
18:29:57 <ajax> this isn't exactly apples-to-apples, but mockbuild of xorg-x11-proto-devel takes significantly longer against f23 than f22
18:30:02 <mitr> ajax: Is there a writeup anywhere of the cases that are broken by this? ISTM that this would break mostly wrong/cyclical/unusual dependency setups (which is not to say that we would be justified in ignoring them)
18:30:30 <ajax> since the build process for that package is almost entirely the time spent executing ./configure
18:30:40 <nirik> ajax: that might also be gcc changes? one of the hardening things mentioned was gcc would be slower...
18:30:45 <nirik> ah, nevermind then
18:30:47 <ajax> it implies that we're doing a _lot_ more work on every exec, which is consistent with -z now forcing all the bindings up front
18:31:18 <ajax> so what i'd like is basically _just_ defaulting executables to PIE
18:31:36 <ajax> it wouldn't give you "full relro" as checksec.sh has it, but
18:31:55 <ajax> mitr: not as such, but i can come up with a couple.
18:32:07 <dgilmore> ajax: would we be better off moving some flags from the hardened build into the standard cflags
18:32:09 <mitr> I should also look into at least the guile issue
18:32:16 <dgilmore> and still having the hardened option?
18:32:35 <nirik> I am reminded of: http://harald.hoyer.xyz/2015/03/05/libtool-getting-rid-of-180000-sed-forks/
18:33:11 <ajax> dgilmore: basically yeah
18:33:22 <dgilmore> ajax: I would be good with doing that
18:33:31 <ajax> anyway. i'll write it up in the ticket.
18:33:49 <ajax> hopefully with patch in hand.
18:33:58 * ajax passes the mic
18:34:06 <nirik> decause: you had something?
18:34:25 <decause> nirik: yep
18:35:44 <nirik> fire when ready. ;)
18:35:50 <decause> There is this new thing called FOSCo that is going to be spinning up over the next couple of weeks
18:36:13 <decause> in anticipation for it, we've got some infrastructure set up that I wanted to get onto your collective radars
18:36:33 <decause> there is now #fedora-outreach on freenode
18:36:47 <decause> and we just got our trac instance up at http://fedorahosted.org/fosco
18:37:18 <decause> these are the places where we'll be gathering input about (firstly) the structure of FOSCo, and then the goals/strategies/actions for the group
18:37:24 <nirik> #info FOSCo is starting up over the next few weeks. IRC: #fedora-outreach Trac/ticketing: https://fedorahosted.org/fosco
18:37:49 <nirik> cool. ;)
18:37:53 <decause> I'm still finding my way around, but thanks to threebean and lmacken I think I'm starting to tread water
18:38:08 <nirik> Anything in particular you need from FESCo at this point? or just letting us know about things...
18:39:23 <decause> nirik: mostly I'll be spending my time in the next couple of weeks listening and reading, and I would like to schedule some kind of call with FESCo folks in the near future
18:39:54 * decause has a lot of history to grok
18:40:13 <nirik> decause: ok. We are a pretty widely spread group to manage a call, but you can find most all of us on irc at various times of the day. :)
18:40:20 <decause> I'll be posting something more detailed to the mail lists in the near future, but wanted to drop by today also
18:40:33 <nirik> excellent. :) Looking forward to it.
18:40:34 <decause> s/call/irc-meeting
18:40:45 <jwb> we're here every week :)
18:40:48 <decause> :)
18:41:08 <nirik> ok, anything else decause ? or anyone else for open floor?
18:41:31 <decause> nirik: nope :)
18:42:09 <nirik> ok, will close out the meeting in a minute if nothing else.
18:43:01 <nirik> Thanks for coming everyone!
18:43:04 <nirik> #endmeeting
9 years, 1 month
Workstation WG Recap 2015-Mar-18
by Paul W. Frields
Minutes: http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/workstation.20...
Minutes (text): http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/workstation.20...
Log: http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/workstation.20...
* * *
======================================
#fedora-meeting: Fedora Workstation WG
======================================
Meeting started by stickster at 15:00:08 UTC. The full logs are
available at
http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/workstation.20...
.
Meeting summary
---------------
* Roll call! (stickster, 15:00:23)
* Symbolic icons + release criteria (stickster, 15:04:39)
* ACTION: mclasen locate the apps and launchers spec, and propose
revision on desktop@ list (stickster, 15:24:56)
* Suggestion was to add symbolic directory, possibly as subdir' to
hicolor (stickster, 15:25:22)
* Privacy policy (stickster, 15:25:45)
* LINK:
https://fedoraproject.org/wiki/User:Pfrields/PrivacyPolicyRedux
(stickster, 15:25:50)
* More policy rewrites are on the way, should have another draft
published soon (stickster, 15:30:43)
* ACTION: stickster Update list with new draft once it's ready for
review (stickster, 15:31:08)
* Open seat (stickster, 15:33:16)
* ACTION: stickster Start input gathering (via whenisgood.net) for new
meeting time. (stickster, 15:36:53)
* AGREED: Michael Catanzaro accepted for open seat (+6, -0, 2 not
present) (stickster, 15:40:23)
* ACTION: stickster Notify list and fix Workstation wiki page
(stickster, 15:40:44)
* Third party repositories (stickster, 15:41:18)
* LINK:
http://en.wikipedia.org/wiki/Usage_share_of_web_browsers#Summary_table
is interesting. (stickster, 15:48:12)
* LINK: https://repos.fedorapeople.org/repos/spot/chromium/ , F21 last
updated in january (kalev, 16:08:47)
* LINK:
https://copr.fedoraproject.org/coprs/churchyard/chromium-russianfedora/
is the other i was thinking of (jwb, 16:09:29)
* AGREED: Go for Chrome next (stickster, 16:15:39)
* ACTION: cschalle stickster work up justification for Council and
review gnome-software text for an appropriate warning to suggest
(stickster, 16:16:12)
* All Other Biznatch (stickster, 16:16:38)
Meeting ended at 16:17:51 UTC.
Action Items
------------
* mclasen locate the apps and launchers spec, and propose revision on
desktop@ list
* stickster Update list with new draft once it's ready for review
* stickster Start input gathering (via whenisgood.net) for new meeting
time.
* stickster Notify list and fix Workstation wiki page
* cschalle stickster work up justification for Council and review
gnome-software text for an appropriate warning to suggest
Action Items, by person
-----------------------
* cschalle
* cschalle stickster work up justification for Council and review
gnome-software text for an appropriate warning to suggest
* mclasen
* mclasen locate the apps and launchers spec, and propose revision on
desktop@ list
* stickster
* stickster Update list with new draft once it's ready for review
* stickster Start input gathering (via whenisgood.net) for new meeting
time.
* stickster Notify list and fix Workstation wiki page
* cschalle stickster work up justification for Council and review
gnome-software text for an appropriate warning to suggest
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* stickster (103)
* mclasen (45)
* kalev (25)
* cschalle (22)
* jwb (17)
* elad661 (9)
* rdieter (7)
* otaylor (7)
* zodbot (6)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
--
Paul W. Frields http://paul.frields.org/
gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717
http://redhat.com/ - - - - http://pfrields.fedorapeople.org/
The open source story continues to grow: http://opensource.com
9 years, 1 month
I18N meeting minutes 2015-03-18
by pravin.d.s＠gmail.com
Hi,
had nice meeting. Discussion happened on test day happening tomorrow
(19th march), workflow improvement and FAD proposal.
Thanks,
Pravin Satpute
9 years, 1 month
