/srv/irclogs.ubuntu.com/2017/05/23/#ubuntu-meeting-2.txt

* stgraber waves15:57
mdeslauro/15:58
* slangasek waves15:58
infinity\o15:59
mdeslaurlooks like kees is MIA16:00
mdeslaurlet's get started16:00
mdeslaur#startmeeting16:00
meetingologyMeeting started Tue May 23 16:00:05 2017 UTC.  The chair is mdeslaur. Information about MeetBot at http://wiki.ubuntu.com/meetingology.16:00
meetingologyAvailable commands: action commands idea info link nick16:00
mdeslaur[topic] Action review16:00
mdeslaurinfinity, slangasek: any progress on your items?16:00
slangaseknone16:00
slangasekbut my guilt levels are rising appropriately16:01
infinityAs usual, I reminded myself of action items 5 minutes before the meeting.  I've pinged roaksoax to get the MaaS thing finally sorted.16:01
mdeslaurheh, ok16:01
infinityThe other item, I did a ninja wiki edit of s/16.04.2/16.04.3/ :P16:01
slangasekheh16:01
mdeslaurinfinity: perhaps just bump it to 16.04.5 right away? :)16:01
infinityShush you.16:01
mdeslaurhehe16:01
mdeslaur#topic Mailing list archive16:01
mdeslaurdoesn't look like there's anything new16:02
mdeslaur#topic Community bugs16:02
mdeslaurno open bugs16:02
mdeslaur#topic AOB16:02
mdeslauranyone have anything to discuss?16:02
slangaseknot I16:03
stgrabernothing here16:03
infinityCan we drop Go from the archive?16:03
infinityIf not, then I have nothing to discuss. :P16:03
mdeslaurheh16:03
mdeslaur#topic Next chair16:04
mdeslaurslangasek with stgraber as backup16:04
* slangasek nods16:04
mdeslaur#endmeeting16:04
meetingologyMeeting ended Tue May 23 16:04:37 2017 UTC.16:04
meetingologyMinutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting-2/2017/ubuntu-meeting-2.2017-05-23-16.00.moin.txt16:04
mdeslaurthanks!16:04
slangasekkees: LATE16:04
infinitykees: You missed it.16:04
keeswhoops, late16:04
keeshaha16:04
slangasek:)16:04
keessaw the "thanks" and started laughing16:04
slangasekfwiw in 2 weeks time our team is sprinting, so I may be an unreliable meeting narrator16:05
infinitykees: You have AOB before we all /part?16:05
keesinfinity: nope, all good.16:05
mdeslaurslangasek: I'll handle it if you don't show up16:05
infinitykees: You might be happy to know that we're finally PIE on all arches.16:06
slangasekmdeslaur: isn't stgraber supposed to? :)16:06
keesinfinity: \o/ \o/16:06
slangasekinfinity: has that flip been switched?16:06
slangasek(and I never got an answer to my email asking who would coordinate rebuilds)16:06
infinityslangasek: Yeah, doko got all keen and did it on Saturday, I followed up with a dpkg so the world didn't explode.16:06
keeshttps://outflux.net/ubuntu/hardening/ubuntu-hardening-5years.png16:06
slangasekok16:06
stgraberslangasek: I'll be sprinting too :)16:07
mdeslaurslangasek: won't he be at the same sprint?16:07
slangasekmdeslaur: not the same one no16:07
mdeslauroh, heh16:07
stgraberdifferent sprints, same week16:07
mdeslaurwell, we'll figure it out16:07
stgraberit was supposed to be the same sprint originally, but that didn't quite happen16:07
keesI changed how my PIE-analysis tool credited PIE packages, so there was quite a bump recently (if package is all .so's and no binaries, count as PIE. If a single ET_EXEC exists, no PIE for you)16:07
slangasekyeah, conference bookings went a bit sideways across the reorg16:08
infinitystgraber: Sadness.  I don't think we've hung out in a long while.16:08
slangasekkees: ahh ok16:08
stgraberinfinity: been a while indeed, Seville was the last one I think16:08
slangasekI was going to say, I know I didn't have *that* many in my mass-rebuild16:08
keesslangasek: this is only amd64, so it'll likely not show much change16:09
slangasekkees: I mean the mass-rebuild we did right around 17.04 release16:09
slangasekwhich is probably the second smaller tick on your graph16:09
keesoh! that likely did help, yes.16:09
slangasek(main-only)16:09
infinitykees: Any urge to run stats for i386, so we can see where we need to apply abuse?16:10
infinity(or armhf or arm64, they should all be in the same state)16:10
keesI would suspect the two steps here are rebuild and script-adjust: https://outflux.net/ubuntu/hardening/ubuntu-hardening-month.png16:10
keesinfinity: In theory I should be able to do i386, just requires some script-bashing16:11
infinityslangasek: I admit to being somewhat ignorant about the bits that need staged rebuilds.  Something to do with static linked bits?16:12
slangasekor some bash scripting?16:12
keeshttps://outflux.net/ubuntu/hardening/main/ had some unreliable data that I didn't try fixing16:12
slangasekinfinity: yes16:12
infinityI don't think I was involved in that part for the previous arches.16:12
keesbut the _current_ result is accurate, I think, for amd64 main16:12
slangasekinfinity: basically, when we turned on PIE, we had a long tail of opaque build failures that required tracking down and rebuilding static libs in order to fix16:12
keesi.e. 96% PIE16:12
slangasekand nobody really took systematic notes on this16:13
infinitykees: Nice.  I, too, am 96% pie.16:13
slangasekhahaha16:13
keeshaha16:13
slangasekso while we could just say "if it has a static lib that's not PIE, rebuild it", that's going to hit pretty much every library package in the archive instead of the ones that actually have static revdeps16:14
infinityslangasek: So, I guess maybe the next step, if we have no notes, is a rebuild test that we can unwind.16:14
slangasekinfinity: I was going to suggest doing archive analysis for -dev build-deps that don't translate into runtime deps16:15
slangasekshould we take this to #-devel? :)16:15
infinityslangasek: Sure.16:18

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!