=== ghostcube_ is now known as ghostcube === JanC is now known as Guest45177 === JanC_ is now known as JanC [14:57] BenC: you around for the DMB meeting? [14:58] o/ [15:00] bdmurray: hey! You around? [15:00] * Odd_Bloke is here. [15:00] sil2100: I am [15:00] * nacc too [15:01] That's four then. We have quorum I think? [15:02] bdmurray: would you chair please, as you're next in line after infinity and BenC? [15:02] bdmurray: would you feel strong enough today to chair the meeting? Since infinity and BenC are not here, you'd be the next alpha-wise [15:02] sil2100: yep [15:03] #startmeeting DMB meeting [15:03] Meeting started Mon Aug 29 15:03:22 2016 UTC. The chair is bdmurray. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [15:03] Available commands: action commands idea info link nick === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | DMB meeting | Current topic: [15:03] #topic Review of previous action items === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | DMB meeting | Current topic: Review of previous action items [15:03] Thanks! [15:03] cyphermox: any news on the Mate package changes? === jcastro_ is now known as jcastro [15:05] done! [15:05] I'm updating the packagesets now [15:05] Does anybody know if infinity made the changes for GunnarHj and Otto? [15:06] I don't know [15:06] but I could do the LP team changes for Otto if necessary [15:06] I sorted Otto. [15:06] I did all three of my actions on the agenda. [15:07] Oh, sorry. [15:07] There was an infinity task to actually add Otto's PPU. [15:07] I haven't/can't do that. [15:08] And it appears nobody has PPU to mariadb-10.0 yet. [15:08] Okay, lets leave infinity's two items on there but if cyphermox could sort out Ott's access that would be great. [15:08] AIUI, it needs a TB member. [15:09] rbasak: Okay, I think infinity is out for the week. I'll try to find one to help then. [15:09] Thanks! [15:10] #topic Package Set/Per Package Uploader Applications === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | DMB meeting | Current topic: Package Set/Per Package Uploader Applications [15:10] bdmurray: https://lists.ubuntu.com/archives/devel-permissions/2016-August/000951.html is relevant, if an alternative TB member is found. [15:10] #subtopic Daniel Watkins / ubuntu-cloud packageset [15:10] o/ [15:11] #subtopic Daniel Watkins / ubuntu-cloud packageset [15:12] Odd_Bloke: could you introduce your self and your work? [15:12] Sure. [15:13] I'm Dan Watkins, I'm a member of the Canonical Certified Public Cloud team. We're responsible for the images produced at cloud-images.ubuntu.com, and the images that are published in to the major public clouds. [15:14] We're a small team, so everyone is generally responsible for everything, but my backgroun is in Python, so I do a lot of work with cloud-init. [15:14] Looking at your upload history, how do you feel about your experience with Debian packaging? [15:14] The tools in the ubuntu-cloud pacakageset are used primarily in cloud applications, so are directly applicable to the work we do. [15:15] Since most of your uploads were either patches or code-changes (in livecd-rootfs for instance) [15:15] I'm not the most experienced packager, but I am confident in Python packages. [15:15] WHich make up a decent chunk of these packages. [15:17] I have done work in other packages, just not to the same extent. [15:17] So I would expect to look for support in cases where I'm not fully confident in the changes that I'm looking to make. [15:17] (I believe that people I've worked with would vouch for my ability to identify when I need to look for support. :) [15:18] Fair enough, it's best to always ask when you're not sure how to deal with something [15:19] Absolutely; we work with the kernel and foundations team a lot (for non-packaging work), so I'm used to liaising with others when necessary. [15:20] Though, of course, the aim would be to reduce those cases over time. :) [15:20] rbasak, cyphermox: Do you have any questions? [15:21] No questions. [15:22] I've worked with Odd_Bloke over the years, most recently at a week-long sprint last month. [15:22] Odd_Bloke: do you know what is the current state of the archive? Given upload rights now, could you currently upload stuff without question? [15:22] So I have an understanding of his technical capabilities, etc. [15:22] cyphermox: Nope, we're feature-frozen at the moment. [15:23] right, that's really all I wanted to hear about :) [15:23] no more questions [15:23] No questions here as well [15:24] #vote for Daniel Watkins ubuntu-cloud packageset upload rights [15:24] Please vote on: for Daniel Watkins ubuntu-cloud packageset upload rights [15:24] Public votes can be registered by saying +1, +0 or -1 in channel, (for private voting, private message me with 'vote +1/-1/+0 #channelname) [15:25] +1 [15:25] +1 received from rbasak [15:25] Generally I would prefer to see a bit more uploads before giving PPU rights, but since the package-set is fairly small and not super-dangerous (especially that it's all managed by his team) + the endorsements, I would say: [15:25] +1 [15:25] +1 received from sil2100 [15:25] +1 [15:25] +1 received from cyphermox [15:25] +1 [15:25] +1 received from bdmurray [15:26] #endvote [15:26] Voting ended on: for Daniel Watkins ubuntu-cloud packageset upload rights [15:26] Votes for:4 Votes against:0 Abstentions:0 [15:26] Motion carried [15:26] sil2100: I beg to disagree about not so dangerous. some packages there have the potential of breaking boot for cloud images :) [15:26] Yes, I did feel that the number of uploads was pretty low. I feel that he just made it over the line for PPU. [15:26] Odd_Bloke: congratulations! [15:26] \o/ [15:26] cyphermox: sure, but as said, it's all his job right? ;) [15:26] (well, a limited packageset) [15:26] sil2100: well, yes [15:27] Thanks all. :) [15:27] bdmurray: please could you assign actions? The three things I think are required are: add to ~ubuntu-dev if not already; add to packageset ACL, and announce (to the news team and in the devel-permissions thread at a minimum). [15:28] rbasak: to myself? [15:28] or to me [15:28] +1 on adding exact actions, this way we won't forget about stuff [15:28] To whomever we nominate :) [15:28] Yeah we agreed on assigning actions to avoid missing stuff a few meetings ago. [15:28] I'm volunteering. [15:28] #action cyphermox to add Odd_Bloke to ubuntu-dev [15:28] ACTION: cyphermox to add Odd_Bloke to ubuntu-dev [15:29] #action cyphermox to add Odd_Bloke to ubuntu-cloud packageset [15:29] ACTION: cyphermox to add Odd_Bloke to ubuntu-cloud packageset [15:29] I don't mind three things being inside one action FWIW; I just identified three things in case they get split :) [15:29] #action cyphermox to announce the result of Odd_Bloke's application [15:29] ACTION: cyphermox to announce the result of Odd_Bloke's application [15:29] Thank you! [15:30] #topic adding libdumbnet and zerofree to the ubuntu-cloud packageset === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | DMB meeting | Current topic: adding libdumbnet and zerofree to the ubuntu-cloud packageset [15:30] Odd_Bloke: Could you talk about that briefly? [15:31] These are packages that were pulled in to main as a result of open-vm-tools being pulled in to main. [15:31] Which is in the ubuntu-cloud packageset. [15:31] My team is the bug supervisor for bugs in them. [15:31] For both of those, yes? [15:31] So it seems like they naturally belong in the same packageset. [15:32] Yep, for both. [15:32] Since looking at the packages themselves I wasn't sure if those were typically cloud-oriented, one of them was a Recommends of open-vm-tools [15:33] Also, I saw that basically almost all development for those happens in Debian [15:33] Yeah, I don't anticipate these being a regular upload. [15:34] But having upload rights to packages that our team has volunteered to maintain would make that job easier if a case ever did come up where an Ubuntu upload were needed. :) [15:36] Do we need to vote on this? I'm okay with it. [15:36] AIUI, it only needs one DMB member to +1 it. No vote required. [15:37] Ok, if you guys are ok with it then I'll add those to the packageset [15:38] I'm not sure [15:38] I have a hard time deciding how zerofree is cloud-specific ? [15:38] I originally wanted to do that but I didn't feel like it's the right way [15:38] Hence my doubts above [15:38] So I wanted to discuss it here [15:39] Does a package need to be specific to the goals of a particular packageset as a requirement to add it to that packageset? [15:39] Or would that just be a reason to have it in multiple packagesets? [15:39] zerofree isn't cloud-specific, but it is used heavily in the production of cloud images. [15:40] a packageset usually has a definition that the packages should match to, at least to some degree [15:40] however, looking into the team, it looks like maybe it's fine [15:40] "Description: Packages required to create, bootstrap, use or configure Ubuntu Cloud images and their derivatives." [15:40] Packages required to create, bootstrap, use or configure Ubuntu Cloud images and their derivatives [15:40] right [15:40] that's a pretty wide description though [15:40] Yeah [15:40] It is, but it appears that the DMB has previously voted on having that wide description. [15:41] We would narrow it. That would require 4 +1s AIUI. [15:41] *could [15:41] I'm not sure also what policies we have, if we want to add packages to packagesets as-is or only if we see it makes sense, like, in anticipating actual uploads [15:41] But I'm find with that description. Odd_Bloke's team needs that sort of breadth to be useful, IMHO. [15:41] no, I'm fine with how it currently is [15:41] *fine [15:42] yeah [15:42] well, +1 for zerofree from me [15:42] just looking at libdumbnet now :) [15:42] +1 for that one too, I guess [15:42] sil2100 raises a good point, but I see no reason to object if there isn't another team paying attention to this packages (and it appears to me that there isn't). [15:43] Ok, if more experienced DMB members are ok then please add me an action item for that :) [15:43] actually, it's under core-dev and server too [15:43] What is? [15:44] well, both zerofree and libdumbnet [15:45] open-vm-tools is in the server seed. [15:45] Which pulls in libdumbnet1 too. [15:46] it's all good; should we carry on? [15:46] Though with my server team hat on, I can confirm that the server team looks to Odd_Bloke's team for any open-vm-tools related uploads. [15:46] So really it's just his team. [15:46] #action sil2100 to add libdumbnet and zerofree to ubuntu-cloud packageset [15:46] ACTION: sil2100 to add libdumbnet and zerofree to ubuntu-cloud packageset [15:47] well it really just was to see who had theoretically access to upload the packages [15:47] Thanks! [15:47] #topic Ubuntu Core Developer Applications === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | DMB meeting | Current topic: Ubuntu Core Developer Applications [15:47] not necessarily who takes the responsibility [15:47] Ah, OK. [15:47] #subtopic Nish Aravamudan [15:48] nacc: For the record could you introduce yourself and your work? [15:48] bdmurray: sure! [15:49] Hi everyone! My name is Nish Aravamudan and I'm a member of the Canonical Server team. I'm working with rbasak and cpaelzer on the release side of things for the Server Team, so helping work through bugs and issues across the distribution related to server. [15:52] I've had several uploads sponsored already, touching many packages, and have become the de facto responder to PHP7.0 bugs in 16.04 and on (and helping work through bugs in PHP5 as best I can in 14.04) [15:53] Does anybody have an questions for nacc? [15:53] I like the number of uploads, although most of those I see were rebuilds/dep-changes for the php transition, right? [15:53] I've seen quite a few SRUs for 16.04, iirc. [15:53] sil2100: yeah, probably ~400 or so were related to the PHP transition, which was pretty large. Not all were rebuilds/dep-changes, some were syncs, and a few required patches (which then I sent to Debian) [15:54] bdmurray: yeah, some of the transition and fixes to the packages themselves have come via SRU [15:54] nacc: since the list is so big (and I haven't had the time to check this), how many of those uploads you got sponsored were main packages? [15:54] I have no questions for nacc (I work with him and we speak regularly). [15:55] no questions [15:55] (I know php is, but yeah) [15:55] sil2100: a good question :) I have touched several packages in main (qemu, php itself, etc.). I apologize but I'm actually on vacation right now and not at my normal computer to search on. [15:56] Just trying to see if core-dev is a necessity here or maybe MOTU would be good enough, but possibly php here is the 'thing' [15:56] Ok, so I'll just drop one quick packaging question here: [15:57] nacc: let's say you need to rename a binary package foo into foobar in the given release [15:59] nacc: what would be the control field's you'd use to make that happen and not break stuff on upgrades? [15:59] *fields [16:00] sil2100: i have not done that yet myself, but I believe the general method involves dummy/transitional package named foo that depends (I think) on foobar. You'd possibly also want foobar to conflict with foo? I probably would spend some time consulting the debian manual on this and other developers to be sure :) [16:02] nacc: yeah, that's a good direction, breaks is better suited here generally instead of conflicts [16:02] And remember you'd need a Replaces too [16:02] But you'd find that in the debian manual [16:03] sil2100: ah ok; that makes sense; and of course on the replaces, sorry for forgetting that! [16:05] sil2100: anything else? [16:05] All from me [16:05] #vote Nish Aravamudan for Ubuntu Core Developer [16:05] Please vote on: Nish Aravamudan for Ubuntu Core Developer [16:05] Public votes can be registered by saying +1, +0 or -1 in channel, (for private voting, private message me with 'vote +1/-1/+0 #channelname) [16:06] +1 [16:06] +1 received from bdmurray [16:08] +1 [16:08] +1 received from cyphermox [16:11] sil2100, rbasak: ? [16:11] One moment, still thinking, give me 2 more minutes [16:12] +1 [16:12] +1 received from sil2100 [16:12] +1 I would have preferred to recuse myself, but given that everyone else here is unanimous, I'm adding my +1 so that we have a quorate vote [16:12] +1 I would have preferred to recuse myself, but given that everyone else here is unanimous, I'm adding my +1 so that we have a quorate vote received from rbasak [16:13] #endvote [16:13] Voting ended on: Nish Aravamudan for Ubuntu Core Developer [16:13] Votes for:4 Votes against:0 Abstentions:0 [16:13] Motion carried [16:13] nacc: Congratulations [16:13] nacc: congratulations! But please, whenever in doubt consult things with more experienced core-devs [16:14] Thank you everyone! [16:14] sil2100: absolutely! [16:14] sil2100: I plan on being very cautious :) [16:14] cyphermox: Do you mind also taking care of the changes for nacc? [16:14] You're doing a great job in overall but I was still a bit weary of giving so much power to someone fairly, well, unexperienced [16:14] no problem [16:14] sil2100: totally understood :) [16:15] #action cyphermox to add nacc to ubuntu-coredev and announce result of application [16:15] ACTION: cyphermox to add nacc to ubuntu-coredev and announce result of application [16:15] #topic AOB === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | DMB meeting | Current topic: AOB [16:15] But seeing all your work on php, starting off with MOTU might have been a bit of a waste of time - also, rbasak and slangasek did endorse you with details [16:16] sil2100: yeah, i've worked closely (and plan on continuing to do so) with both of them [16:16] anything else? [16:17] Okay, then. [16:17] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [16:17] Meeting ended Mon Aug 29 16:17:54 2016 UTC. [16:17] Minutes: http://ubottu.com/meetingology/logs/ubuntu-meeting/2016/ubuntu-meeting.2016-08-29-15.03.moin.txt [16:18] bdmurray: thanks for chairing! [16:18] nacc: excellent ;) [16:30] hello [16:30] #startmeeting [16:30] Meeting started Mon Aug 29 16:30:56 2016 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [16:30] Available commands: action commands idea info link nick [16:31] The meeting agenda can be found at: [16:31] [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting [16:31] [TOPIC] Weekly stand-up report === meetingology changed the topic of #ubuntu-meeting to: Weekly stand-up report [16:31] jdstrand: you're up [16:31] hi [16:31] short week this week (off friday) [16:31] last week had a few unplanned items that caused things to be pushed back a bit: discussed the shared mount for snap implementation, bunch of apparmor-easyprof-ubuntu merges, discussions where others landed the branches in silos [16:31] the apparmor-easyprof-ubuntu silos had yakkety failures in qrt and autopkgtests due to yakkety changes, so I investigated those. The qrt test faillures were due to dropping 13.10 frameworks. autopkgtests were from a click bug that others are working on [16:31] I did finish the lxd-support interface and finished working with the desktop team on browser policy. This resulted in several additional cards being added for the review tools. Those cards are almost done and hopefully I'll finish them today [16:32] this week I'm going to work on the high priority policy bugs PR, high priority interface PR reviews (eg, udisks2/pluggable-storage, docker, fwupd, systemd interaction and serial-port) [16:32] now that the shared mount for snaps is worked out, I'll explore using 'ip netns exec' with strict mode snaps [16:32] that's it from me [16:32] sbeattie: go ahead [16:32] I'm on cve triage this week [16:33] Kernel updates are in the middle of promoted to -security, so I'll be publishing the USNs for those after the meeting. [16:33] After that, I plan to go through the list for updates. [16:33] I also have some apparmor reviews to do. [16:33] That's probably my week. tyhicks? [16:35] I'm in the happy place this week (thanks to ratliff for picking up bug triage!) [16:36] I'm attempting to bring unix domain socket AppArmor mediation support back to 14.04 + hardware enablement kernel [16:37] I'll be working on seccomp complain mode [16:37] that should keep me busy along with incoming requests throughout the week [16:37] jjohansen: go ahead [16:37] I am back from LSS and I have a few cleanup items related to that. [16:38] I'll then be crying over^W^W working on fixing stacking bugs and finishing up gsettings review wi. [16:38] And if I actually get to a point where any of that is cleared or waiting for feedback will be working on finishing up what needs to be done for upstreaming [16:39] I think that is it for me [16:39] jjohansen: can you please ensure that the fix for bug 1579135 will be included in the next SRU kernel? [16:39] bug 1579135 in apparmor (Ubuntu Yakkety) "AppArmor profile reloading causes an intermittent kernel BUG" [Critical,Incomplete] https://launchpad.net/bugs/1579135 [16:40] jjohansen: we have another apparmor SRU for xenial and I'm going to hold it back until that kernel fix has been published [16:41] tyhicks: yep, that has been submitted and committed. we just need to stay ontop of the SRU process now [16:41] jjohansen: ok, thanks! [16:41] sarnold: you're up [16:41] good morning [16:41] I'm on community this week [16:42] I haven't yet looked at the backlog of reviews or updates to perform yet, so I'm not sure where the remainder of my week will be [16:42] I suspect it'ls unity8 MIRs? [16:42] yep [16:42] it'd be nice to also make progress on cboltz's huge patchset [16:43] I just now realized that that certainly falls as a 'feature', does it make sense to do a FFE for that patchset for yakkety? hrm. [16:43] sarnold: FYI, sounds like kshitij8 is working on reviewing it [16:43] yay [16:43] he knows the tools and python better than I do :) [16:44] anyway that's me [16:44] I don't know enough about that patch set to say if we need to get it into yakkety [16:44] no tab-complete for chris coulson, ratliff then? [16:44] I'm on bug triage this week. [16:44] I'll be learning the community role from sarnold this week as well. [16:45] I'm working on an update for clamav. [16:45] And poking at the Unity 8 MIRs [16:45] that's it for me, back to you tyhicks [16:45] thanks [16:45] [TOPIC] Highlighted packages === meetingology changed the topic of #ubuntu-meeting to: Highlighted packages [16:46] The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. [16:46] See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. [16:46] http://people.canonical.com/~ubuntu-security/cve/pkg/gamera.html [16:46] http://people.canonical.com/~ubuntu-security/cve/pkg/mbedtls.html [16:46] http://people.canonical.com/~ubuntu-security/cve/pkg/mediaelement.html [16:46] http://people.canonical.com/~ubuntu-security/cve/pkg/python-rsa.html [16:46] http://people.canonical.com/~ubuntu-security/cve/pkg/node-cli.html [16:46] [TOPIC] Miscellaneous and Questions === meetingology changed the topic of #ubuntu-meeting to: Miscellaneous and Questions [16:46] Does anyone have any other questions or items to discuss? [16:47] o/~ gamera is really neat gamera is full of meat o/~ [16:50] heh [16:50] jdstrand, sbeattie, jjohansen, sarnold, ratliff: Thanks! [16:50] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [16:50] Meeting ended Mon Aug 29 16:50:10 2016 UTC. [16:50] Minutes: http://ubottu.com/meetingology/logs/ubuntu-meeting/2016/ubuntu-meeting.2016-08-29-16.30.moin.txt [16:50] thanks tyhicks [16:50] thank you, tyhicks! [16:50] tyhicks: thanks! [16:51] thanks tyhicks :) === acheronuk_ is now known as acheronuk