meetingminutes March 2015

meetingminutes@lists.fedoraproject.org

24 participants
96 discussions

Fedora Release Engineering meeting summary for 2015-03-23/win 34
by Dennis Gilmore 23 Mar '15

23 Mar '15

====================================== #fedora-meeting-1: RELENG (2015-03-23) ====================================== Meeting started by dgilmore at 16:51:20 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-23/releng.2015-03… . Meeting summary --------------- * init process (dgilmore, 16:51:28) * #5931 [Proposal] Move new branch and unretire requests to pkgdb2 (dgilmore, 16:53:28) * LINK: https://fedorahosted.org/rel-eng/ticket/5931 (dgilmore, 16:53:35) * #6047 handle packages that are retired only in Branched but not Rawhide (dgilmore, 17:00:02) * LINK: https://fedorahosted.org/rel-eng/ticket/6047 (dgilmore, 17:00:11) * #5886 need method for distributing urgent fixes... urgently (dgilmore, 17:06:03) * LINK: https://fedorahosted.org/rel-eng/ticket/5886 (dgilmore, 17:06:11) * #5870 rawhide signing (dgilmore, 17:32:53) * LINK: https://fedorahosted.org/rel-eng/ticket/5870 (dgilmore, 17:32:59) * #6110 allow sudo for sysadmin-releng on sign bridges (dgilmore, 17:34:29) * LINK: https://fedorahosted.org/rel-eng/ticket/6110 (dgilmore, 17:34:35) * ACTION: change sudoers on sigul-bridge boxes (dgilmore, 17:34:54) * Secondary Architectures updates (dgilmore, 17:35:09) * Secondary Architectures update - ppc (dgilmore, 17:35:10) * in much better shape, Aplha RC's happening (dgilmore, 17:36:09) * Secondary Architectures update - s390 (dgilmore, 17:36:18) * Secondary Architectures update - arm (dgilmore, 17:36:34) * RC's happening, ghc looks to be fixed soon (dgilmore, 17:37:54) * Open Floor (dgilmore, 17:41:10) Meeting ended at 17:46:52 UTC. Action Items ------------ * change sudoers on sigul-bridge boxes Action Items, by person ----------------------- * **UNASSIGNED** * change sudoers on sigul-bridge boxes People Present (lines said) --------------------------- * dgilmore (126) * nirik (26) * pbrobinson (23) * pingou (17) * Corey84 (16) * lmacken (15) * masta (10) * tyll (6) * zodbot (5) * jwb (4) * jreznik (1) * bochecha (0) * sharkcz (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 0

Fedora QA Devel Meeting Minutes
by Tim Flink 23 Mar '15

23 Mar '15

================================= #fedora-meeting-1: fedora-qadevel ================================= Minutes: http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-23/fedora-qadevel… Minutes (text): http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-23/fedora-qadevel… Log: http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-23/fedora-qadevel… Meeting summary --------------- * Role Call (tflink, 14:00:40) * Status Updates (tflink, 14:02:25) * kparal's status update (kparal, 14:03:22) * download caching is now pushed in develop (kparal, 14:03:31) * LINK: https://phab.qadevel.cloud.fedoraproject.org/D266 (kparal, 14:03:31) * resultsdb_api now supports logging and logs network errors (kparal, 14:03:45) * LINK: https://phab.qadevel.cloud.fedoraproject.org/D313 (kparal, 14:03:45) * LINK: https://phab.qadevel.cloud.fedoraproject.org/D314 (kparal, 14:03:45) * the gtk spinner performance issue (mainly OpenQA related) has been reported a being discussed here: (kparal, 14:04:05) * LINK: https://bugzilla.gnome.org/show_bug.cgi?id=746535 (kparal, 14:04:05) * LINK: https://bugzilla.redhat.com/show_bug.cgi?id=1204242 (kparal, 14:04:05) * now playing with testcloud (kparal, 14:04:17) * mkrizek status report (mkrizek, 14:06:29) * re-deployed dev machine to f21 with tflink (mkrizek, 14:06:36) * various infra fixes (mkrizek, 14:06:41) * continued research on using paramiko as remote execution tool, ETA tomorrow/wednesday (mkrizek, 14:06:46) * jskladan's status update (jskladan, 14:07:42) * no updates - spent too much time reviewing patches, tinkering with OpenQA/Testdays app, and understanding logging (jskladan, 14:07:42) * Testday app needs either a https certificate (how do we get those?) or change of DNS name (jskladan, 14:07:42) * ACTION: jskladan needs to grab some tickets (jskladan, 14:07:42) * tflink status update (tflink, 14:10:20) * assisted in redeploy of taskotron-dev as f21 (tflink, 14:10:37) * initial work on replacing project makefiles with something more capable (tflink, 14:10:37) * worked on getting new tool for running playbooks deployed in infra (tflink, 14:10:37) * found example of failing depcheck, having trouble reproducing (tflink, 14:10:37) * Open Floor (tflink, 14:12:10) Meeting ended at 14:16:10 UTC. Action Items ------------ * jskladan needs to grab some tickets Action Items, by person ----------------------- * jskladan * jskladan needs to grab some tickets * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * tflink (31) * kparal (22) * mkrizek (8) * jskladan (7) * zodbot (4) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 0

Fedora Chinese Meeting Minutes (2015-03-20)
by Zamir Sun 21 Mar '15

21 Mar '15

Hi all, The IRC meeting minutes yesterday are available at the links below. Thanks everyone for attending the meeting. In the meeting we mainly talked about offline events and Fedora-zh repo. Please review the proposed ideas and actions. The next IRC meeting will be held on next Friday (2015-03-20). Please come and join the discussion if you can! http://meetbot.fedoraproject.org/fedora-zh/2015-03-20/fedora-zh.2015-03-20-… Minutes (text): http://meetbot.fedoraproject.org/fedora-zh/2015-03-20/fedora-zh.2015-03-20-… Log: http://meetbot.fedoraproject.org/fedora-zh/2015-03-20/fedora-zh.2015-03-20-… ================== #fedora-zh Meeting ================== Meeting started by alick at 13:01:30 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-zh/2015-03-20/fedora-zh.2015-03-20-… . Meeting summary --------------- * Roll Call 报到 (alick, 13:03:24) * topic: Offline events 线下活动 (alick, 13:05:18) * topic: fedora-zh package repo (alick, 13:05:27) * topic: github/fzug (alick, 13:05:40) * topic: Fedora GSoC (alick, 13:08:39) * Offline Events 线下活动 (alick, 13:10:16) * ACTION: alick zsun contact local community in Shanghai (alick, 13:16:50) * LINK: http://beijinglug.org/index.php?option=com_content&view=article&id=777:educ… (alick, 13:17:55) * EFD Beijing is just tomorrow (alick, 13:18:54) * fedora-zh package repo (alick, 13:25:51) * LINK: https://github.com/FZUG/Copr/wiki/%E4%B8%AD%E6%96%87%E7%A4%BE%E5%8C%BACopr%… (alick, 13:28:30) * LINK: https://github.com/FZUG/Copr/issues/5 (alick, 13:29:04) * IDEA: 中文社区repo允许打包开源驱动/内核模块 (zsun, 13:48:47) * github/fzug (zsun, 13:51:25) * IDEA: hold more packaging workshop in every meetup (tonghuix, 13:56:23) * ACTION: zsun ask cicku about adding a less priviledged group in github/fzug (zsun, 13:58:33) * ACTION: alick zsun and others make a namelist of all member in github/fzug (zsun, 14:00:26) * GSoC (zsun, 14:02:54) * LINK: https://fedoraproject.org/wiki/GSOC_2015 (zsun, 14:03:23) * open floor (zsun, 14:13:10) Meeting ended at 14:19:47 UTC. Action Items ------------ * alick zsun contact local community in Shanghai * zsun ask cicku about adding a less priviledged group in github/fzug * alick zsun and others make a namelist of all member in github/fzug Action Items, by person ----------------------- * alick * alick zsun contact local community in Shanghai * alick zsun and others make a namelist of all member in github/fzug * hers * alick zsun and others make a namelist of all member in github/fzug * zsun * alick zsun contact local community in Shanghai * zsun ask cicku about adding a less priviledged group in github/fzug * alick zsun and others make a namelist of all member in github/fzug * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * zsun (76) * alick (48) * tonghuix (38) * tvvocold (17) * microcai (14) * zodbot (10) * endle (8) * BadGirl (3) * isyangxin (1) * Pany (0) * touparx (0) * tiansworld (0) * hers (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 1

FamNA meeting minutes 3-19-2015
by Andrew Ward 19 Mar '15

19 Mar '15

All, Please review our meeting minutes from 19 March 2015 Minutes: http://meetbot.fedoraproject.org/fedora-meeting/2015-03-20/famna.2015-03-20… Minutes (text): http://meetbot.fedoraproject.org/fedora-meeting/2015-03-20/famna.2015-03-20… Log: http://meetbot.fedoraproject.org/fedora-meeting/2015-03-20/famna.2015-03-20… V/R Andrew Ward award3535(a)fedoraproject.org award3535(a)tds.net award3535(a)gmail.com

1 0

Summary/Minutes from today's Fedora Infrastructure meeting (2015-03-19)
by Kevin Fenzi 19 Mar '15

19 Mar '15

============================================ #fedora-meeting: Infrastructure (2015-03-19) ============================================ Meeting started by nirik at 18:00:00 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2015-03-19/infrastructure.2… . Meeting summary --------------- * aloha (nirik, 18:00:01) * New folks introductions / Apprentice feedback (nirik, 18:00:01) * announcements and information (nirik, 18:04:24) * datanommer performance enhancements complete in production, resulting in significant speed gains. - ralph (nirik, 18:04:52) * new zodbot feature deployed: karma+fedmsg plugin - ralph (nirik, 18:04:52) * new zodbot feature deployed: more granular meetbot fedmsg messages - ralph (nirik, 18:04:52) * converted another mirrorlist server to mirrormanager2 - kevin (nirik, 18:04:52) * new OS instance is ready, we are now migrating persitent_cloud.yml and then we will deploy dev instance of Copr and test on real world data, then we do final reprovision - msuchy (nirik, 18:04:52) * new mirrormanager2 release - pingou (nirik, 18:04:56) * new pkgdb2 release (1.24), pushed to staging - testers welcome - pingou (nirik, 18:04:58) * progit nicely progressing: http://209.132.184.222/progit/issues?tags=0.1 - pingou (nirik, 18:05:00) * fixed packaging and other small issues for new rbac-playbook (ansible_utils) - tflink (nirik, 18:05:04) * puppet changes have been pushed, configuration has been migrated. new script will be usable shortly - tflink (nirik, 18:05:06) * starting to redeploy taskotron on f21 (dev complete), planning to revisit el7 migration later - tflink (nirik, 18:05:09) * waiting for hardware to arrive in PHX2 - smooge (nirik, 18:05:12) * Ipsilon put in staging (again), please test - puiterwijk (nirik, 18:05:14) * Update Fedora Infrastructure Apprentice wiki with Ansible ticket workflow - mhurron (nirik, 18:06:57) * ACTION: nirik to work with mhurron to create a ansible.txt for new folks (nirik, 18:14:20) * Shut off pkgdb2's emails? - pingou (nirik, 18:15:50) * LINK: https://lists.fedoraproject.org/pipermail/scm-commits/Week-of-Mon-20150316/… (nirik, 18:17:09) * ACTION: pingou to make sure scm-commits user can post pkgdb changes to scm-commits list, then disable native emails. (nirik, 18:19:09) * db performance/tuning - kevin (nirik, 18:19:36) * Learn about sigul (our rpm signing server) - kevin (nirik, 18:27:19) * LINK: https://fedorahosted.org/sigul/ (nirik, 18:28:57) * LINK: https://git.fedorahosted.org/cgit/sigul.git/tree/ (nirik, 18:34:07) * LINK: https://git.fedorahosted.org/cgit/sigul.git/tree/src/double_tls.py (threebean, 18:34:36) * Open Floor (nirik, 18:43:46) Meeting ended at 18:47:51 UTC. Action Items ------------ * nirik to work with mhurron to create a ansible.txt for new folks * pingou to make sure scm-commits user can post pkgdb changes to scm-commits list, then disable native emails. Action Items, by person ----------------------- * mhurron * nirik to work with mhurron to create a ansible.txt for new folks * nirik * nirik to work with mhurron to create a ansible.txt for new folks * pingou * pingou to make sure scm-commits user can post pkgdb changes to scm-commits list, then disable native emails. * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * nirik (123) * threebean (25) * pingou (19) * mhurron (10) * puiterwijk (9) * dotEast2015 (7) * mirek-hm (6) * smooge (5) * zodbot (4) * oddshocks (3) * dcmorton (3) * dgilmore (2) * andreasch (1) * tflink (1) * roshi (1) * abadger1999 (0) * lmacken (0) * mdomsch (0) * relrod (0) -- 18:00:00 <nirik> #startmeeting Infrastructure (2015-03-19) 18:00:00 <zodbot> Meeting started Thu Mar 19 18:00:00 2015 UTC. The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot. 18:00:00 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic. 18:00:01 <nirik> #meetingname infrastructure 18:00:01 <nirik> #topic aloha 18:00:01 <nirik> #chair smooge relrod nirik abadger1999 lmacken dgilmore mdomsch threebean pingou puiterwijk 18:00:01 <nirik> #topic New folks introductions / Apprentice feedback 18:00:01 <zodbot> The meeting name has been set to 'infrastructure' 18:00:01 <zodbot> Current chairs: abadger1999 dgilmore lmacken mdomsch nirik pingou puiterwijk relrod smooge threebean 18:00:26 * pingou here 18:00:30 * puiterwijk here 18:00:37 * oddshocks arrives 18:00:38 <dgilmore> hola 18:00:41 <andreasch> here 18:01:11 <tflink> here 18:01:12 <nirik> any new folks like to give a one-line introduction? or apprentices with questions or comments? 18:01:32 <nirik> also any last minute changes to the Gobby document would be good to do now. ;) 18:02:09 * threebean here 18:02:09 <dcmorton> Hey all, I'm Derek.. Linux Engineer at Rackspace, looking to help out with things around here.. 18:02:22 <smooge> hello 18:02:27 <smooge> hello dcmorton 18:02:37 <nirik> welcome dcmorton. :) you interested in sysadmin type things? or app development? or both? 18:03:11 * roshi is here 18:03:21 * mirek-hm is here 18:03:25 * dgilmore installs gobby 18:03:29 <dcmorton> Mostly sysadmin stuff.. do a little coding here and there when needed 18:03:53 <nirik> dcmorton: cool. see me after the meeting over in #fedora-admin and I can get you started. ;) 18:04:08 <dcmorton> nirik: thanks, sounds great 18:04:24 <nirik> #topic announcements and information 18:04:39 <nirik> I'm going to dump this weeks info out of the gobby doc... stand by 18:04:52 <nirik> #info datanommer performance enhancements complete in production, resulting in significant speed gains. - ralph 18:04:52 <nirik> #info new zodbot feature deployed: karma+fedmsg plugin - ralph 18:04:52 <nirik> #info new zodbot feature deployed: more granular meetbot fedmsg messages - ralph 18:04:52 <nirik> #info converted another mirrorlist server to mirrormanager2 - kevin 18:04:52 <nirik> #info new OS instance is ready, we are now migrating persitent_cloud.yml and then we will deploy dev instance of Copr and test on real world data, then we do final reprovision - msuchy 18:04:53 * oddshocks plugs ears 18:04:56 <nirik> #info new mirrormanager2 release - pingou 18:04:58 <nirik> #info new pkgdb2 release (1.24), pushed to staging - testers welcome - pingou 18:05:00 <nirik> #info progit nicely progressing: http://209.132.184.222/progit/issues?tags=0.1 - pingou 18:05:02 <nirik> input welcome for the new name: http://209.132.184.222/progit/issue/47 18:05:04 <nirik> #info fixed packaging and other small issues for new rbac-playbook (ansible_utils) - tflink 18:05:06 <nirik> #info puppet changes have been pushed, configuration has been migrated. new script will be usable shortly - tflink 18:05:09 <nirik> #info starting to redeploy taskotron on f21 (dev complete), planning to revisit el7 migration later - tflink 18:05:12 <nirik> #info waiting for hardware to arrive in PHX2 - smooge 18:05:14 <nirik> #info Ipsilon put in staging (again), please test - puiterwijk 18:05:16 <nirik> lets all take a min to skim and see if there's anything we want more details on. 18:06:47 <nirik> ok, moving on then 18:06:57 <nirik> #topic Update Fedora Infrastructure Apprentice wiki with Ansible ticket workflow - mhurron 18:06:57 <nirik> Specifically there is a http://infrastructure.fedoraproject.org/infra/docs/puppet.txt but not a complimentary ansible.txt 18:07:00 <nirik> mhurron: you around? 18:07:03 <mhurron> I am 18:07:27 <nirik> so, we do have a README in ansible git root... but I don't think it's really the same here. 18:08:12 <mhurron> iirc it does cover some things, but the puppet document is more structured for new users to get working on things 18:08:31 <nirik> should this be in infra-docs? or just on the apprentice page do you think? 18:08:47 <mhurron> basically thought that it needed to be updated to include the same type of workflow for ansible 18:09:33 <nirik> FWIW, I wish we could impove our new contributor workflow... but it's hard. We don't have many cycles for one on one mentoring... and we are bad at filing easyfix tickets to allow people to work on things... 18:09:41 * nirik checks that puppet doc 18:09:45 <mhurron> I don't see why it couldn't be written in a clear but general manner to be useful for anyone to refer back to, so a link on the apprentice page to infra-docs might be a good way to handle it 18:10:20 <nirik> yeaah, I see... that has a lot of intro info in it... 18:10:33 <nirik> some of that could be just in a genric git one tho 18:10:56 <mhurron> ya, it's not like it's useless 18:11:00 <nirik> setting up git, your name, etc... 18:11:48 <nirik> ok, so how best can we move forward here? I can try and update it, but we know how well that ends up going. ;) 18:12:00 <nirik> or I can try and give you info to correct it? 18:12:31 <mhurron> I am happy to do it, we can start with a quick dump of information and I can work with that to begin with 18:12:35 <nirik> lots of the puppet one is the same for ansible, but some sections are puppet specific for sure. 18:12:45 <mhurron> and from there I can come back with specific questions from there 18:13:02 <threebean> would be much appreciated 18:13:20 <nirik> sure. want me to just dump things here? or meet up after the meeting? 18:13:39 <mhurron> we can do it after 18:13:52 <nirik> mhurron: ok. I should be around. ;) 18:13:53 <mhurron> I'll be around, or you can email me if that's easier 18:14:00 <nirik> and thanks for pushing forward on this stuff. ;) 18:14:20 <nirik> #action nirik to work with mhurron to create a ansible.txt for new folks 18:14:50 <nirik> ok, anything else on this? or move on? 18:15:07 <mhurron> i'm good to move on 18:15:08 <dotEast2015> hello everyone, did I miss the intro part 18:15:12 <nirik> like I said, I would like to try and improve the new contributor flow, but I think thats a higher level discussion for the list perhaps... 18:15:31 <nirik> dotEast2015: yeah. can you hang around for the open floor at the end to add yours? 18:15:42 <dotEast2015> sure 18:15:50 <nirik> #topic Shut off pkgdb2's emails? - pingou 18:15:54 <nirik> pingou: you added this? 18:15:57 <pingou> yes 18:16:09 <pingou> just asking if we should update PKGDB2_EMAIL_NOTIFICATION = True to False in prod 18:16:29 <nirik> pingou: one thing we might need before we can do that... 18:16:31 <puiterwijk> +1, we have FMN now 18:16:45 <nirik> the scm-commits user to post to scm-commits? I think those all go there too don't they? 18:17:05 <pingou> they do yes 18:17:09 <nirik> https://lists.fedoraproject.org/pipermail/scm-commits/Week-of-Mon-20150316/… 18:17:19 <pingou> threebean: iirc I read you were looking at this no? 18:17:30 <nirik> if we have that in place, +1 18:17:32 <threebean> yeah, I stepped back to fix problems with the fedmsg git hook first 18:17:37 <pingou> ok 18:18:00 <pingou> so once we've done it we can adjust the config in ansible (and restart apache) 18:18:01 <nirik> threebean: but for pkgdb it should be ok to make that user now? 18:18:05 * threebean nods 18:18:07 <nirik> or you want to wait for pkgs? 18:18:12 <pingou> maybe we can couple this with the move of 1.24 to prod? 18:18:13 <threebean> no, that can move ahead. sure 18:18:46 <nirik> sounds good, we can get everything lined up out of meeting. 18:18:56 <pingou> cool 18:19:09 <nirik> #action pingou to make sure scm-commits user can post pkgdb changes to scm-commits list, then disable native emails. 18:19:27 <nirik> anything else on this? 18:19:32 <pingou> not for me 18:19:36 <nirik> #topic db performance/tuning - kevin 18:19:50 <nirik> I just added this... wanted to talk about that postgres change that threebean did for datanommer... 18:19:56 <threebean> oo 18:19:59 <nirik> do we want to do all our other dbs? 18:20:03 <smooge> YES 18:20:06 <pingou> threebean++ on that btw! 18:20:06 <nirik> and why is it not auto-doing them? 18:20:13 <smooge> We want threebean to do every database 18:20:17 <nirik> yeah! it was a big big win. 18:20:19 <pingou> lol 18:20:35 <threebean> heh, there's two halves to it. one is really app-specific 18:20:53 <threebean> it involves going through the schema and looking for columns that would benefit from adding an index to it 18:21:06 <smooge> you removed all my SELECT * FROM * WITH * | sytem 'grep ...'? 18:21:06 <nirik> yeah, thats gonna have to be longer term I think... 18:21:08 <threebean> note that adding an index doesn't always make things better. sometimes it makes things worse depending on how the column is used. 18:21:44 <threebean> the other more general half, we can look at doing everywhere... this is that our autovacuum-launcher daemon is never actually vacuuming our tables. 18:21:58 <threebean> I don't know why yet.. but there's a way to turn up the logging for it so we can see. 18:22:07 <nirik> ok, perhaps test on db01.stg ? 18:22:19 <nirik> and does this need an outage? or can we do it live? 18:22:28 <threebean> can do it live (the vacuuming stuff, no prob) 18:22:41 <threebean> adding indexes usually means downtime since its an ALTER TABLE kind of thing 18:23:00 <nirik> yeah. 18:23:28 <nirik> ok, I can try and poke at it. would be great to make things faster before freeze. 18:23:34 <puiterwijk> threebean: doing a full vacuum wil lrequire downtime 18:23:40 <puiterwijk> since that gets a full lock on the tables 18:23:51 <threebean> puiterwijk: correct. but i don't see why we'd need to do a full vacuum. 18:24:00 <puiterwijk> okay, sure. just wanted to point it out 18:24:05 * threebean nods 18:24:11 <puiterwijk> wasn't sure which you used 18:24:21 <threebean> just 'VACUUM ANALYZE;' 18:24:29 <puiterwijk> ah, okay. that should be no problem indeed. 18:25:07 <threebean> if people didn't catch it, robyduck had a script that made tons of queries against datagrepper to try and determine which ambassadors are active and which are not 18:25:08 <nirik> excellent. ;) 18:25:23 <threebean> he reports that it used to take 2 days and 18 hours to run. it only takes 13 minutes now. 18:25:34 <puiterwijk> wow. that's quite a bit better :) 18:26:04 <nirik> yeah, crazy. 18:26:10 * mirek-hm claps hands 18:26:31 <oddshocks> slightly improved, at least 18:26:48 <nirik> ok, anything else on this one? I just wanted to discuss it a bit and see if we can do it more. ;) 18:27:19 <nirik> #topic Learn about sigul (our rpm signing server) - kevin 18:27:30 <nirik> I thought I would talk today about our rpm signing server a bit. 18:27:48 <threebean> (real quick on the last point) getting the auto-vacuuming working would be great. if someone gets to it before I do, can you take some kind of measurement of the existing databases before and after so we can see what kind of difference it makes 18:28:09 <threebean> (eom) 18:28:12 <nirik> First a disclaimer: I haven't delved into the code, so I might be incorrect or mistaken about my understanding of things, so take everything here with a grain of salt... ;) 18:28:39 <nirik> Fedora uses a all software rpm package signing server called sigul. It's at fedorahosted.org for the code: 18:28:57 <nirik> https://fedorahosted.org/sigul/ 18:29:19 <nirik> it's not gotten a lot of maint over the last few years, but there's some proposals around Google Summer of Code to improve aspects of it. 18:29:29 <nirik> Thats thru the releng folks mentoring. 18:29:42 <nirik> Basically there's 3 machines involved. 18:29:59 <nirik> 1. An end user machine or one of the releng machines that runs a client. 18:30:15 <nirik> 2. A "bridge". This is sign-bridge01 in our infrastructure. 18:30:33 <nirik> 3. A "vault". This is sign-vault03 and sign-vault04 in our infrastructure. 18:30:39 <nirik> secondary arches have their own versions of these. 18:31:04 <nirik> The client talks to the bridge. The server talks to the bridge. The client and server don't talk directly, they always go thru the bridge. 18:31:48 <nirik> There's permissions for each key. Every user has their own passphrases for each key. 18:32:21 <mirek-hm> and the protocol is AFAIK propietary and very very paranoid 18:32:22 <nirik> The server has it's own passphrase (entered at startup). It needs this + the users passphrase to unlock the key to sign something. Without both it can't. 18:32:41 <nirik> mirek-hm: well, it's 100% open source... ;) you can look at it, but it's very dense python... 18:32:55 <nirik> it's also pretty tied to koji. 18:33:10 <mirek-hm> I mean our own implementation, not normal TLS 18:33:27 <threebean> whoah. really? 18:33:34 <nirik> A client asks to sign a package, the bridge checks that they have access to the key, that their passphrase is right, the vault signs it, and the bridge writes the signed thing to koji usually. 18:33:38 <nirik> no, it's all open source. 18:34:07 <nirik> https://git.fedorahosted.org/cgit/sigul.git/tree/ 18:34:17 <nirik> we aren't running anything other than that. ;) 18:34:36 <threebean> https://git.fedorahosted.org/cgit/sigul.git/tree/src/double_tls.py 18:34:57 <nirik> It's got a number of issues... it doesn't rotate logs right, it's error handling is poor (the vault can start with the wrong key, it won't work and it won't tell you the key was wrong) 18:35:04 <nirik> it needs gpg1. 18:35:24 <nirik> but it does work. ;) 18:35:45 <nirik> The vaults are physical servers that don't run sshd. So, they must be accessed via management console. 18:35:56 <nirik> The bridge is a vm. 18:36:40 * nirik tries to think of what else to add. 18:36:53 <nirik> Any questions on the setup or anything? 18:37:09 <nirik> oh, the bridge used to also need a passphrase at startup. 18:37:17 <mirek-hm> there is one disadvantage of sigul, you have to copy whole RPM or (image) to signing machine and then copy the data back, which is tons of data. In comparsion the Copr use obs-sign where you create digest from rpm (the same way as gpg does) this short digest is sent to signer and signed based on that digest and only signature is sent back which is then inserted to rpm 18:37:45 <nirik> turns out that this didn't add any security really, so we removed it. Anyone in sysadmin-main should be able to restart it now (but there is a process so ask for that first) 18:38:05 <nirik> mirek-hm: yeah, all the data slinging is pretty slow sometimes. 18:38:20 <threebean> nirik: any chance of moving that bridge restart process into a playbook? 18:38:31 <nirik> especially when you get a package like texlive src.rpm or 0ad data or webkitgtk4-debuginfo 18:38:40 <nirik> threebean: we could yeah... 18:38:55 <pingou> +1 for the playbook 18:38:59 <nirik> basically has to kill existing processes, then run the server with some options, then hit return at the passphrase prompt 18:39:14 <nirik> you still get a prompt, even tho the passphrase is 'return' 18:39:18 <pingou> (even if it is only in the private repo) 18:39:43 <nirik> I can see about making a playbook, sounds like a good idea. 18:40:08 <nirik> Oh, thats another problem it has... it has a 'batch mode', but it causes the bridge to lock up, needing restart. ;) 18:40:55 <mirek-hm> the private keys are located on vault machines and there is AFAIK some offline backup in some bank tresor, is this correct? 18:41:26 <nirik> the keys are on the 2 vault machines and yes, there are further encrypted backups. 18:42:03 <nirik> but note those keys are not just there. You need both the server passphrase and a valid user passphrase that has access to that key to decrypt it so you can sign something with it. 18:42:15 <nirik> the vault by itself cannot. 18:42:19 <nirik> nor the user. 18:42:44 <threebean> cool :) 18:42:50 <nirik> Anyhow, I hope we see improvements in things from GSoC, but we will see. 18:43:01 <pingou> when you say the server passphrase, which server is it? 18:43:14 <nirik> pingou: the one needed at startup on the vault. 18:43:15 <puiterwijk> pingou: vault 18:43:20 <pingou> ok 18:43:46 <nirik> #topic Open Floor 18:43:52 <pingou> so when you start the process on the vault (from the client, via the bridge), you enter your own pw to unlock the key 18:43:55 <nirik> dotEast2015: you still around? want to introduce yourself? 18:44:03 <nirik> pingou: yep. 18:44:07 <dotEast2015> sure 18:44:11 <pingou> and the passphrase of the server/application signing in the vault 18:44:18 <dotEast2015> Hello everyone, my name is ali elkhalidi and I am working as a linux systems engineer and I would like to help and contribute to the Fedora infrastructure 18:44:23 <pingou> thanks nirik helps understanding :) 18:44:39 <nirik> pingou: and each key has it's own pw. or can. The server passphrase was entered when it was started up last. 18:44:57 <nirik> dotEast2015: welcome. ;) You more interested in sysadmin or application devel type things? 18:45:03 <dotEast2015> nirik: thanks 18:45:15 <dotEast2015> nirik: sysadmin 18:45:50 <nirik> cool. see me after the meeting over in #fedora-admin and I can help you get started. ;) 18:46:00 <nirik> Does anyone have any other items for open floor? 18:46:16 <dotEast2015> nirik: will do. thanks 18:47:11 <nirik> ok then, lets all get back 15min of our day and end the meeting now? ;) 18:47:19 <threebean> +1 18:47:51 <nirik> #endmeeting

1 0

Summary/Minutes from today's FPC Meeting (2015-03-19 17:00 - 17:50 UTC)
by James Antill 19 Mar '15

19 Mar '15

====================== #fedora-meeting-1: fpc ====================== Meeting started by geppetto at 17:01:20 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-19/fpc.2015-03-19… . Meeting summary --------------- * Roll Call (geppetto, 17:01:20) * Schedule (geppetto, 17:04:45) * LINK: https://lists.fedoraproject.org/pipermail/packaging/2015-March/010506.html (geppetto, 17:04:47) * #511 Change request: Package Guidelines: DevAssistant (geppetto, 17:05:01) * LINK: https://fedorahosted.org/fpc/ticket/511 (geppetto, 17:05:07) * LINK: https://fedoraproject.org/w/index.php?title=User%3ATradej%2FDraft% 3APackaging%3ADAP&diff=406424&oldid=401659 … is the diff (geppetto, 17:06:14) * ACTION: DevAssistant change for license files (+1:5, 0:0, -1:0) (geppetto, 17:08:07) * #512 Java guidelines change (geppetto, 17:08:21) * LINK: https://fedorahosted.org/fpc/ticket/512 (geppetto, 17:08:30) * ACTION: Java guidelines remove using EE APIs section (+1:5, 0:0, -1:0) (geppetto, 17:11:41) * #513 Use python -Es in shbang (geppetto, 17:11:52) * LINK: https://fedorahosted.org/fpc/ticket/513 (geppetto, 17:11:57) * ACTION: Mandatory use of -s in she-bang of python programs (+1:5, 0:0, -1:0) (geppetto, 17:26:28) * ACTION: tibbs Will work on macros to vote on next week. (geppetto, 17:32:22) * LINK: https://bugzilla.redhat.com/show_bug.cgi?id=953704 (tibbs|w, 17:32:42) * #325 Temporary bundling exception of yajl library (geppetto, 17:34:57) * LINK: https://fedorahosted.org/fpc/ticket/325 (geppetto, 17:34:59) * ACTION: No bundling exception of yajl library, someone just create a compat-yajil1 or even yajil1 fork/whatever package. (geppetto, 17:45:26) * Or become the upstream maintainer :) (geppetto, 17:45:59) * Open Floor (geppetto, 17:46:49) Meeting ended at 17:51:24 UTC. Action Items ------------ * DevAssistant change for license files (+1:5, 0:0, -1:0) * Java guidelines remove using EE APIs section (+1:5, 0:0, -1:0) * Mandatory use of -s in she-bang of python programs (+1:5, 0:0, -1:0) * tibbs Will work on macros to vote on next week. * No bundling exception of yajl library, someone just create a compat-yajil1 or even yajil1 fork/whatever package. Action Items, by person ----------------------- * tibbs * tibbs Will work on macros to vote on next week. * **UNASSIGNED** * DevAssistant change for license files (+1:5, 0:0, -1:0) * Java guidelines remove using EE APIs section (+1:5, 0:0, -1:0) * Mandatory use of -s in she-bang of python programs (+1:5, 0:0, -1:0) * No bundling exception of yajl library, someone just create a compat-yajil1 or even yajil1 fork/whatever package. People Present (lines said) --------------------------- * geppetto (66) * tibbs|w (43) * orionp (18) * mbooth (9) * zodbot (7) * SmootherFrOgZ (6) * sgallagh (1) * tibbs (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 0

EMEA Ambassadors Meeting Minutes 2015-03-18
by Jiri Eischmann 18 Mar '15

18 Mar '15

Hi, we had another regular EMEA ambassadors meeting. It lasted for 1 hour and 25 minutes and 16 ambassadors attended. You can find more in the summary and minutes: Meeting summary Roll Call (sesivany, 21:00:12) Announcements (sesivany, 21:04:39) Fedora 22 Alpha was released last week. (sesivany, 21:06:48) http://fedoramagazine.org/fedora-22-alpha-released/ (sesivany, 21:07:21) http://fedoramagazine.org/your-chance-to-contribute-in-fedora-22-developmen… (sesivany, 21:08:27) F22 test days are scheduled, promote them in your local communities. (sesivany, 21:09:41) Fedora Magazine has a new look - http://www.fedoramagazine.org (sesivany, 21:10:30) Requests (sesivany, 21:12:35) https://fedorahosted.org/emea-swag-tracking/report/1?page=1&sort=ticket&asc… (sesivany, 21:14:00) #467 - Funding for OSCAL 2015 (sesivany, 21:15:29) https://fedoraproject.org/wiki/OSCAL_2015 (giannisk, 21:18:58) AGREED: The ticket #467 has been approved. (sesivany, 21:21:49) Funding request for Robert Scheck for CLT 2015 (sesivany, 21:22:46) https://fedorahosted.org/emea-swag-tracking/ticket/466 (sesivany, 21:22:55) AGREED: The ticket #466 has been approved. (sesivany, 21:25:20) Funding request for shipping Mohamed Fawzy Ambassador t-shirt (sesivany, 21:26:25) AGREED: the ticket #464 has been approved. (sesivany, 21:36:03) Events (sesivany, 21:55:01) https://fedoraproject.org/wiki/CATScope14 (Mohamed_Fawzy, 21:55:41) Openfloor (sesivany, 22:06:27) Minutes: http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/emea_ambassadors… Minutes (text): http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/emea_ambassadors… Log: http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/emea_ambassadors… The next meeting will be on April 1st. Jiri

1 0

Re: Schedule for Wednesday's FESCo meeting (2015-03-18 at 18UTC)
by Kevin Fenzi 18 Mar '15

18 Mar '15

=================================== #fedora-meeting: FESCO (2015-03-18) =================================== Meeting started by nirik at 18:00:05 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/fesco.2015-03-18… . Meeting summary --------------- * init process (nirik, 18:00:06) * #1419 provenpackager request (FAS - nonamedotc) (nirik, 18:01:56) * LINK: https://fedorahosted.org/fesco/ticket/1419 (nirik, 18:01:56) * AGREED: request is approved (+5, 0, 0) (nirik, 18:04:51) * LINK: https://fedorahosted.org/fesco/ticket/1312 (nirik, 18:06:49) * #1312: F22 System Wide Change: Replace Yum With DNF - http://fedoraproject.org/wiki/Changes/ReplaceYumWithDNF (nirik, 18:07:40) * LINK: https://fedorahosted.org/fesco/ticket/1312 (nirik, 18:07:41) * please add stakeholders to ticket and see if we can gather consensus before next meeting (nirik, 18:12:08) * continue in ticket with proposals, etc. (nirik, 18:26:30) * Next weeks chair (nirik, 18:26:33) * paragan to chair next week (nirik, 18:27:32) * Open Floor (nirik, 18:27:36) * FOSCo is starting up over the next few weeks. IRC: #fedora-outreach Trac/ticketing: https://fedorahosted.org/fosco (nirik, 18:37:24) Meeting ended at 18:43:04 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * nirik (65) * ajax (20) * decause (16) * mitr (14) * dgilmore (11) * thozza (9) * paragan (8) * jwb (8) * zodbot (7) * rishi (5) * sgallagh (3) * jreznik (3) * mattdm (3) -- 18:00:05 <nirik> #startmeeting FESCO (2015-03-18) 18:00:05 <zodbot> Meeting started Wed Mar 18 18:00:05 2015 UTC. The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot. 18:00:05 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic. 18:00:06 <nirik> #meetingname fesco 18:00:06 <nirik> #chair ajax dgilmore jwb mitr nirik paragan rishi thozza sgallagh 18:00:06 <nirik> #topic init process 18:00:06 <zodbot> The meeting name has been set to 'fesco' 18:00:06 <zodbot> Current chairs: ajax dgilmore jwb mitr nirik paragan rishi sgallagh thozza 18:00:11 <mitr> Hello 18:00:16 <paragan> Hi 18:00:37 <sgallagh> Hello 18:00:49 <jwb> i am here-ish 18:01:07 * jreznik will try to be around if needed by FESCo :) 18:01:12 <nirik> short meeting today hopefully. ;) 18:01:18 <thozza> hi all 18:01:26 * decause waves 18:01:46 <nirik> ok, lets go ahead and get started. 18:01:53 <nirik> hello decause. ;) 18:01:56 <nirik> #topic #1419 provenpackager request (FAS - nonamedotc) 18:01:56 <nirik> https://fedorahosted.org/fesco/ticket/1419 18:01:56 <nirik> .fesco 1419 18:01:58 <zodbot> nirik: #1419 (provenpackager request (FAS - nonamedotc)) – FESCo - https://fedorahosted.org/fesco/ticket/1419 18:01:58 <decause> nirik: hi there :) 18:02:10 <nirik> so, by our policy this didn't get 3 +1s in a week so it goes to meeting.... 18:02:18 <nirik> sgallagh voted +1 in ticket 18:02:32 * mattdm is lurking 18:03:09 <nirik> any other votes? I'm +1 (as I was in the ticket) 18:03:39 <ajax> +1 18:03:53 <mitr> +1, considering the variety of different kinds of packages 18:04:05 <thozza> sure, I'm +1 18:04:51 <nirik> #agreed request is approved (+5, 0, 0) 18:05:05 <nirik> ok, do we want to discuss the dnf vs yum ticket? or leave it for next week? 18:05:43 <thozza> I would leave the discussion in the ticket for now 18:05:57 <thozza> I'm not sure if there is anything to discuss for F22 18:06:13 <thozza> we already agreed we don't want dnf-yum to be installed by default in F22 18:06:35 <nirik> ok, we can bring up next week if there's proposals in ticket. 18:06:37 <ajax> remind me which ticket that is? 18:06:49 <nirik> https://fedorahosted.org/fesco/ticket/1312 18:06:54 <nirik> .fesco 1312 18:06:55 <zodbot> nirik: #1312 (F22 System Wide Change: Replace Yum With DNF - http://fedoraproject.org/wiki/Changes/ReplaceYumWithDNF) – FESCo - https://fedorahosted.org/fesco/ticket/1312 18:07:24 <thozza> ahh, there are new comments I didn't see 18:07:33 <paragan> yes there are :) 18:07:35 <nirik> lets touch on it then I suppose... 18:07:40 <nirik> #topic #1312: F22 System Wide Change: Replace Yum With DNF - http://fedoraproject.org/wiki/Changes/ReplaceYumWithDNF 18:07:41 <nirik> https://fedorahosted.org/fesco/ticket/1312 18:07:41 <nirik> .fesco 1312 18:07:42 <zodbot> nirik: #1312 (F22 System Wide Change: Replace Yum With DNF - http://fedoraproject.org/wiki/Changes/ReplaceYumWithDNF) – FESCo - https://fedorahosted.org/fesco/ticket/1312 18:07:48 <mitr> nirik: If we do go with the dnf-yum-in-/usr/bin/yum rote, we should do so very soon. But that proposal has been only 5 hours ago, so getting all information an everybody involved today is probably impossible. 18:08:02 <nirik> mitr: yeah. 18:08:28 <paragan> yes if we need to propose any such changes good to implement it soon 18:08:47 <ajax> you'd think PackageKit-command-not-found would cover this already 18:08:50 <nirik> in particular I'd like to hear what the yum folks have to say... 18:09:00 <mitr> I’d say: Make sure jzeleny, dgilmore, and whoever else we can think of, is Cc:ed, ask for specific feedback on this plan, and aim to get a decision in the ticket before the next meeting. 18:09:13 <mattdm> fwiw I'm in favor of kevin/nirik's "middle ground" suggestion 18:09:49 * paragan also likes nirik's suggestion in ticket 18:10:34 <paragan> I have already asked dnf developers to CC themselves in that ticket, it was having Ales as CC 18:11:07 <nirik> if someone could point the packaging-team (who I think 'owns' yum ?) at this also that might be good... 18:11:42 <paragan> nirik, I already asked them 18:11:50 <mitr> Hum, /usr/lib/python2.7/site-packages/mockbuild/package_manager.py actually invokes the yum _command_ 18:12:05 <mitr> paragan: Just edit the Cc:s directly 18:12:08 <nirik> #info please add stakeholders to ticket and see if we can gather consensus before next meeting 18:12:34 <paragan> Both rholy and jsilhan are in CC in that ticket 18:12:35 <nirik> mitr: sure, some things call /usr/bin/yum, some use a yum object... 18:12:49 <nirik> and mock has been ported. :) 18:13:05 <nirik> it's things like mash, pungi, etc... that still need work. 18:13:10 <jwb> i'm confused why this is just now coming up 18:13:29 <thozza> jwb: it did before 18:13:43 <sgallagh> jwb: It's coming up again because people started installing the Alpha 18:13:46 <nirik> jwb: someone filed a bug on the cloud image... 18:13:55 <jwb> we discussed this ticket like 3 times. how did anyone fail to raise these concerns in a manner that made us notice and expect dnf-yum to be the default? 18:14:05 <dgilmore> sorry i am late 18:14:39 <nirik> jwb: also, the change page still says dnf-yum will be installed, I asked them to change that in the change bug... or clarify... 18:14:46 <nirik> but I guess I should just edit the wiki. 18:14:53 <mitr> jwb: IIRC the concerns have been raised but without a proposal we could either go with no dnf-yum or delay the dnf switch. 18:15:10 <mitr> jwb: Now we have a proposal, which, if it were practical, would IMHO be so much better that reopening this is well worth it. 18:15:12 <jreznik> nirik: I can poke jsilhan tomorrow, he sits a few meters away from me 18:15:28 <nirik> cool 18:15:55 <nirik> I'm fine with no dnf-yum, but it seems others dont like that. 18:16:12 <thozza> I think it makes sense to have it there 18:16:21 <jwb> the amount of waffling and back and forth is disappointing 18:16:37 <jwb> so let's figure it out and stop doing that 18:16:57 <nirik> well, I don't think I have been waffling... I just tried to come up with something that would make more people happy. 18:17:16 <dgilmore> jwb: the only way to stop the discussion for good is to say the dnf is ready and they need to follow the original plan and rename to yum 18:17:23 <jwb> nirik, none of this information is new at all. we said we'd switch to DNF. we knew it wasn't 1:1 18:17:41 * rishi drops in & reads back log 18:17:51 <jreznik> jwb: exactly 18:17:56 <nirik> jwb: yeah. Agreed. 18:17:58 <jwb> now we're worried about it not being called yum. it wasn't called yum the first 3 times we talked about it 18:18:08 <dgilmore> there is so much investement in Fedora, RHEL, CentOS etc that changing the package installer/updater's name is never going to satisfy a large number of people 18:18:16 <nirik> jwb: I think there's some confusion tho about dnf-yum... 18:18:19 <mattdm> I don't think I'm waffling. And the original proposal said that it *might* be named yum. 18:18:52 <dgilmore> mattdm: the original plan years ago was for the re-write to be named back to yum when ready. 18:19:02 <rishi> Unfortunately I got to run home today. If we are going to vote on the dnf vs. yum issue, then you can assume that I am with the majority (whatever that is). 18:19:07 <nirik> the current approved change still says that dnf-yum will be used. 18:19:12 <dgilmore> the only way to not have a huge docs, mindshare etc cost is to follow that through 18:19:25 <nirik> "package 'dnf-yum' is installed by default. It obsoletes Yum and provides its own /usr/bin/yum, a short script that redirects to /usr/bin/dnf with an appropriate warning message that DNF is the preferred package manager now. Notice that upgrading F21 to F22 will not cause the compat package to be installed so will not disturb any upgrading users." 18:19:33 <mitr> jwb: Upstream doesn't really want it to be called yum, but several FESCo members do. It is not that surprising that DNF upstream is not spending huge amount of time on making /usr/bin/yum a possibility, nor that FESCo members take time to figure alternatives out. 18:19:59 <mitr> or s/called/available as/ 18:20:04 <ajax> dgilmore: some of us remember up2date... 18:20:11 <dgilmore> ajax: :) 18:20:21 <nirik> anyhow, I am +1 to no dnf-yum, I am +1 to a dnf-yum that doesn't conflict with or obsolete yum, and -1 to one that does. ;) 18:20:25 <dgilmore> ajax: it had a huge cost and there was less investment in it 18:21:44 <mitr> So, assuming we are not deciding this now, who all needs to be on Cc:? 18:21:44 <nirik> ok, so what do we want to do today? 18:22:28 <thozza> nirik: nothing I guess :) 18:22:53 <rishi> mitr: In that case, I would lean towards upstream's judgement and never install dnf-yum. 18:23:06 <rishi> "never" == "even post-F22" 18:23:51 <dgilmore> rishi: we can never say never 18:23:55 <mitr> rishi: I think I see their viewpoint but ultimately I disagree; the breakage is just not worth it (both alone, and as a precedent/reinforcing the way we do migrations) 18:24:23 <rishi> mitr: You disagree with what? Got confused. 18:25:59 <nirik> ok, lets continue in ticket I guess and see what comes up next week? 18:26:15 <ajax> yeah 18:26:17 <sgallagh> ack 18:26:30 <nirik> #info continue in ticket with proposals, etc. 18:26:33 <nirik> #topic Next weeks chair 18:26:36 <nirik> who wants it? 18:27:20 <paragan> I can next week 18:27:27 <nirik> thanks paragan 18:27:32 <nirik> #info paragan to chair next week 18:27:36 <nirik> #topic Open Floor 18:27:40 <nirik> anything for open floor? 18:28:13 <ajax> i'd like to revisit the hardening change for F23 18:28:30 * decause raises hand for next in queue 18:28:37 <ajax> i should really have been aware that it implied -z now, which is a rather drastic change 18:28:40 <nirik> ajax: ok, you want to discuss that now? or next week? 18:29:05 <ajax> nirik: just raising awareness really. i'd like to get a concrete set of changes by next week 18:29:10 <ajax> which i'm happy to work on 18:29:25 <ajax> just want to see if that raises any red flags for anyone 18:29:39 * nirik is ok with adjusting things if we have good reason to do so. 18:29:57 <ajax> this isn't exactly apples-to-apples, but mockbuild of xorg-x11-proto-devel takes significantly longer against f23 than f22 18:30:02 <mitr> ajax: Is there a writeup anywhere of the cases that are broken by this? ISTM that this would break mostly wrong/cyclical/unusual dependency setups (which is not to say that we would be justified in ignoring them) 18:30:30 <ajax> since the build process for that package is almost entirely the time spent executing ./configure 18:30:40 <nirik> ajax: that might also be gcc changes? one of the hardening things mentioned was gcc would be slower... 18:30:45 <nirik> ah, nevermind then 18:30:47 <ajax> it implies that we're doing a _lot_ more work on every exec, which is consistent with -z now forcing all the bindings up front 18:31:18 <ajax> so what i'd like is basically _just_ defaulting executables to PIE 18:31:36 <ajax> it wouldn't give you "full relro" as checksec.sh has it, but 18:31:55 <ajax> mitr: not as such, but i can come up with a couple. 18:32:07 <dgilmore> ajax: would we be better off moving some flags from the hardened build into the standard cflags 18:32:09 <mitr> I should also look into at least the guile issue 18:32:16 <dgilmore> and still having the hardened option? 18:32:35 <nirik> I am reminded of: http://harald.hoyer.xyz/2015/03/05/libtool-getting-rid-of-180000-sed-forks/ 18:33:11 <ajax> dgilmore: basically yeah 18:33:22 <dgilmore> ajax: I would be good with doing that 18:33:31 <ajax> anyway. i'll write it up in the ticket. 18:33:49 <ajax> hopefully with patch in hand. 18:33:58 * ajax passes the mic 18:34:06 <nirik> decause: you had something? 18:34:25 <decause> nirik: yep 18:35:44 <nirik> fire when ready. ;) 18:35:50 <decause> There is this new thing called FOSCo that is going to be spinning up over the next couple of weeks 18:36:13 <decause> in anticipation for it, we've got some infrastructure set up that I wanted to get onto your collective radars 18:36:33 <decause> there is now #fedora-outreach on freenode 18:36:47 <decause> and we just got our trac instance up at http://fedorahosted.org/fosco 18:37:18 <decause> these are the places where we'll be gathering input about (firstly) the structure of FOSCo, and then the goals/strategies/actions for the group 18:37:24 <nirik> #info FOSCo is starting up over the next few weeks. IRC: #fedora-outreach Trac/ticketing: https://fedorahosted.org/fosco 18:37:49 <nirik> cool. ;) 18:37:53 <decause> I'm still finding my way around, but thanks to threebean and lmacken I think I'm starting to tread water 18:38:08 <nirik> Anything in particular you need from FESCo at this point? or just letting us know about things... 18:39:23 <decause> nirik: mostly I'll be spending my time in the next couple of weeks listening and reading, and I would like to schedule some kind of call with FESCo folks in the near future 18:39:54 * decause has a lot of history to grok 18:40:13 <nirik> decause: ok. We are a pretty widely spread group to manage a call, but you can find most all of us on irc at various times of the day. :) 18:40:20 <decause> I'll be posting something more detailed to the mail lists in the near future, but wanted to drop by today also 18:40:33 <nirik> excellent. :) Looking forward to it. 18:40:34 <decause> s/call/irc-meeting 18:40:45 <jwb> we're here every week :) 18:40:48 <decause> :) 18:41:08 <nirik> ok, anything else decause ? or anyone else for open floor? 18:41:31 <decause> nirik: nope :) 18:42:09 <nirik> ok, will close out the meeting in a minute if nothing else. 18:43:01 <nirik> Thanks for coming everyone! 18:43:04 <nirik> #endmeeting

1 0

Workstation WG Recap 2015-Mar-18
by Paul W. Frields 18 Mar '15

18 Mar '15

Minutes: http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/workstation.2015… Minutes (text): http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/workstation.2015… Log: http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/workstation.2015… * * * ====================================== #fedora-meeting: Fedora Workstation WG ====================================== Meeting started by stickster at 15:00:08 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2015-03-18/workstation.2015… . Meeting summary --------------- * Roll call! (stickster, 15:00:23) * Symbolic icons + release criteria (stickster, 15:04:39) * ACTION: mclasen locate the apps and launchers spec, and propose revision on desktop@ list (stickster, 15:24:56) * Suggestion was to add symbolic directory, possibly as subdir' to hicolor (stickster, 15:25:22) * Privacy policy (stickster, 15:25:45) * LINK: https://fedoraproject.org/wiki/User:Pfrields/PrivacyPolicyRedux (stickster, 15:25:50) * More policy rewrites are on the way, should have another draft published soon (stickster, 15:30:43) * ACTION: stickster Update list with new draft once it's ready for review (stickster, 15:31:08) * Open seat (stickster, 15:33:16) * ACTION: stickster Start input gathering (via whenisgood.net) for new meeting time. (stickster, 15:36:53) * AGREED: Michael Catanzaro accepted for open seat (+6, -0, 2 not present) (stickster, 15:40:23) * ACTION: stickster Notify list and fix Workstation wiki page (stickster, 15:40:44) * Third party repositories (stickster, 15:41:18) * LINK: http://en.wikipedia.org/wiki/Usage_share_of_web_browsers#Summary_table is interesting. (stickster, 15:48:12) * LINK: https://repos.fedorapeople.org/repos/spot/chromium/ , F21 last updated in january (kalev, 16:08:47) * LINK: https://copr.fedoraproject.org/coprs/churchyard/chromium-russianfedora/ is the other i was thinking of (jwb, 16:09:29) * AGREED: Go for Chrome next (stickster, 16:15:39) * ACTION: cschalle stickster work up justification for Council and review gnome-software text for an appropriate warning to suggest (stickster, 16:16:12) * All Other Biznatch (stickster, 16:16:38) Meeting ended at 16:17:51 UTC. Action Items ------------ * mclasen locate the apps and launchers spec, and propose revision on desktop@ list * stickster Update list with new draft once it's ready for review * stickster Start input gathering (via whenisgood.net) for new meeting time. * stickster Notify list and fix Workstation wiki page * cschalle stickster work up justification for Council and review gnome-software text for an appropriate warning to suggest Action Items, by person ----------------------- * cschalle * cschalle stickster work up justification for Council and review gnome-software text for an appropriate warning to suggest * mclasen * mclasen locate the apps and launchers spec, and propose revision on desktop@ list * stickster * stickster Update list with new draft once it's ready for review * stickster Start input gathering (via whenisgood.net) for new meeting time. * stickster Notify list and fix Workstation wiki page * cschalle stickster work up justification for Council and review gnome-software text for an appropriate warning to suggest * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * stickster (103) * mclasen (45) * kalev (25) * cschalle (22) * jwb (17) * elad661 (9) * rdieter (7) * otaylor (7) * zodbot (6) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot -- Paul W. Frields http://paul.frields.org/ gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717 http://redhat.com/ - - - - http://pfrields.fedorapeople.org/ The open source story continues to grow: http://opensource.com

1 0

I18N meeting minutes 2015-03-18
by pravin.d.s＠gmail.com 18 Mar '15

18 Mar '15

Hi, had nice meeting. Discussion happened on test day happening tomorrow (19th march), workflow improvement and FAD proposal. Thanks, Pravin Satpute

1 0

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

meetingminutes March 2015