[15:59]  * slangasek waves
[15:59] <sil2100> o/
[16:00] <philroche> \o
[16:01] <slangasek> #startmeeting
[16:01] <meetingology> Meeting started Thu Jan 25 16:01:00 2018 UTC.  The chair is slangasek. Information about MeetBot at http://wiki.ubuntu.com/meetingology.
[16:01] <meetingology> Available commands: action commands idea info link nick
[16:01] <slangasek> [TOPIC] Lightning round
=== meetingology changed the topic of #ubuntu-meeting to: Lightning round
[16:01] <slangasek> $ echo $(shuf -e slangasek bdmurray xnox tdaitx doko sil2100 rbalint infinity cyphermox mwhudson rcj philroche Odd_Bloke tribaal fginther juliank)
[16:01] <slangasek> doko slangasek cyphermox mwhudson bdmurray rcj Odd_Bloke fginther philroche xnox sil2100 juliank rbalint tribaal infinity tdaitx
[16:01] <slangasek> and doko is out today
[16:01]  * Odd_Bloke is running late from a previous meeting, if he could be deferred to the end of the round.
[16:01] <slangasek> so I win!
[16:01] <slangasek> Odd_Bloke: ack
[16:01] <rbalint> o/
[16:02] <slangasek>  * at product sprint in cape town last week, and off M-W this week, so little to report
[16:02] <slangasek>  * continuing engagement around Spectre+Meltdown
[16:02] <slangasek> cyphermox:
[16:02] <slangasek> (done)
[16:02] <cyphermox> I'm not done yet
[16:02] <sil2100> Oh, looks like slangasek said that cyphermox is done
[16:02] <sil2100> ;)
[16:02] <cyphermox> MIR:
[16:02] <cyphermox> - review rdma-core
[16:02] <cyphermox> bionic:
[16:02] <cyphermox> - discuss further netcfg fixes for hostname preseeding with slashd
[16:03] <cyphermox> netplan:
[16:03] <cyphermox> y
[16:03] <cyphermox> argh
[16:03] <cyphermox> - fixup for Ryan's port-priority update
[16:03] <cyphermox> - migrate netplan to github
[16:03] <cyphermox> - release 0.33 (highlight)
[16:03] <cyphermox> - setup per-commit CI
[16:03] <cyphermox> shim-review:
[16:03] <cyphermox> - review Blancco shim
[16:03] <cyphermox> - review IGEL's shim
[16:03] <cyphermox> xenial:
[16:03] <cyphermox> - grub2 net NIC selection fix
[16:03] <cyphermox> other stuff:
[16:03] <cyphermox> - code-review for rcj's initramfs-compression fix for ubuntu-cpc
[16:03] <cyphermox> - discuss netplan and juju interaction for /e/n/i fix
[16:03] <cyphermox> (done) (done)
[16:03] <cyphermox> hmm, looks like I need to fix my xslt for that highlight
[16:04] <slangasek> cyphermox, sil2100: speculative execution via IRC?  because I entered those lines in the correct order ;)
[16:04] <slangasek> bdmurray:
[16:04] <slangasek> bdmurray is off
[16:04] <slangasek> rcj:
[16:04] <sil2100> ;)
[16:05] <rcj>  - Publication of new cloud release images in response to Spectre-related kernel
[16:05] <rcj>  updates
[16:05] <rcj> - cloud-image build system engineering
[16:05] <rcj> (done)
[16:05] <fginther> * CVE-2017-5754 related image publication
[16:05] <fginther>   - Monitoring and performing some manual operations to publish images
[16:05] <fginther>   - Fixed an issue that was causing an image build failure
[16:05] <fginther> * Performed some End-of-Life updates for zesty
[16:05] <ubottu> Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5754)
[16:05] <fginther> * Development work for automated image publication to a partner cloud
[16:05] <fginther> * Identified some firewall updates needed for external endpoint changes
[16:06] <fginther> (done)
[16:06] <philroche> * Cloud image build system maintenance
[16:06] <philroche> * Spectre CVE cloud image delivery
[16:06] <philroche> (done)
[16:06] <slangasek> xnox is out
[16:06] <slangasek> sil2100:
[16:06] <sil2100> - Once again a lot of respin kernel SRUs
[16:06] <sil2100> - Regular SRU reviews and releases
[16:06] <sil2100> - Handling the release of xenial 16.04.4 language-pack updates
[16:06] <sil2100> - Preparing the base bionic language packs for upload
[16:06] <sil2100> - Fixing my broken kernel-sru bot instance
[16:06] <sil2100> - Preparing and uploading grub2 for vt.handoff=1 switch (with testing)
[16:06] <sil2100>   * Also looking into what the vt.handoff kernel code actually does
[16:06] <sil2100> - Checking some autopkgtest failures for some xenial python-defaults landings
[16:06] <sil2100> - Working on some NBS:
[16:06] <sil2100>   * Sending patch for debian-cd to Debian
[16:06] <sil2100>   * Trying to remove NBS dep from activemq - package FTBFS
[16:06] <sil2100> - 16.04.4 discussions
[16:06] <sil2100> (done)
[16:07] <slangasek> juliank:
[16:07] <juliank> * updated the distro a bit - 13 "new" merges & syncs (since last meeting): zsh, transmission (CVE-2018-5702), aptitude, brltty (bug 1741070), readline (sync), slang2, strace, gnutls28, kbd, wget, valgrind, dash, curl
[16:07] <juliank> * 3 other simple uploads: ppc64-diag (bug 1744707), lsvpd (bug 1741070), lshw (bug 1741070) - simple backlog growth prevention.
[16:07] <juliank> * finished the multipath-tools merge, thanks cpaelzer for reviewing and testing it
[16:07] <juliank> * would like to merge some harder stuff like rsyslog or pam
[16:07] <juliank> * need to fix some regressions from the merges :(
[16:07] <ubottu> bug 1741070 in brltty (Ubuntu) "Please merge brltty (main) 5.5-4 from Debian unstable (main)" [Wishlist,Fix committed] https://launchpad.net/bugs/1741070
[16:07] <ubottu> Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5702)
[16:07] <ubottu> bug 1744707 in The Ubuntu-power-systems project "ppc64-diag fixes for Ubuntu 18.04" [High,Fix released] https://launchpad.net/bugs/1744707
[16:07] <slangasek> sil2100: kernel-sru bot?
[16:07] <sil2100> slangasek: I have a bot that pokes me whenever there's a new kernel ready for review or release
[16:07] <juliank> (done)
[16:07] <rbalint> * flash-kernel merge, waiting a test on actual hw in LP: #1690650
[16:07] <ubottu> Launchpad bug 1690650 in flash-kernel (Ubuntu) "flash kernel reports unsupported platform on rpi 2 1.2" [Undecided,Confirmed] https://launchpad.net/bugs/1690650
[16:07] <rbalint> * internal testbed setup
[16:08] <rbalint> (done)
[16:08] <slangasek> juliank: pam already has a merge in progress, please don't steal
[16:08] <sil2100> slangasek: but it got busted, mainly because my instance ran out of disk space due to the kernels, but now I'm manually autoremoving those just in case ;)
[16:08] <juliank> slangasek: awesome
[16:08] <slangasek> sil2100: if only we had some technology to autoremove unused kernels
[16:09]  * juliank wanted to ask about that later
[16:09] <sil2100> ;)
[16:09] <slangasek> tribaal:
[16:09] <rbalint> slangasek: i'm on it, :-)
[16:09] <juliank> slangasek: there's a bug about automatic autoremoval in apt from sabdfl :)
[16:10] <slangasek> no tribaal?
[16:10] <slangasek> and no infinity
[16:10] <slangasek> tdaitx:
[16:10] <tdaitx> * OpenJDK 8 security updates:
[16:10] <tdaitx>   - armhf, arm64, and s390x demanding some love (hotspot security fixes)
[16:10] <tdaitx> * Ongoing backport to OpenJDK 7
[16:10] <tdaitx> * Testing OpenJDK 9.0.4 as default openjdk
[16:10] <tdaitx>   - going albeit slow, need to free more space again
[16:10] <tdaitx> AOB:
[16:10] <tdaitx> - where should I go to debug s390x core files? is there a porter box somewhere?
[16:10] <tdaitx> - docker is a buffoon and leaves piles of btrfs subvolumes around
[16:10] <tdaitx> (done)
[16:10] <Odd_Bloke> * Similar to Steve, at product sprint and off for most of this week
[16:10] <Odd_Bloke> * Continued Meltdown/Spectre work
[16:10] <Odd_Bloke> * Adding the lxd snap to our matrix of lxd testing
[16:10] <Odd_Bloke> (done)
[16:12] <slangasek> tdaitx: there's not a formal "porter box" setup for s390x but we can get you access
[16:12] <slangasek> tdaitx: ping me after the meeting?
[16:12] <tdaitx> slangasek: sure, thanks!
[16:12] <slangasek> any questions over status?
[16:13] <slangasek> since bdmurray is off, I think we'll skip over bugs this week
[16:14] <slangasek> [TOPIC] AOB
=== meetingology changed the topic of #ubuntu-meeting to: AOB
[16:14] <slangasek> anything else?
[16:14] <sil2100> I have a question
[16:14] <sil2100> So debian-cd is holding up lynx-cur as an NBS, but I see that we never actually had an Ubuntu delata in debian-cd
[16:14] <slangasek> the nbs report is blind to alternatives and such
[16:14] <sil2100> I forwarded the patch to Debian, but should we wait for the next debian-cd release that will get synced?
[16:15] <slangasek> is it possible this is not a real blocker for removal?
[16:15] <slangasek> Depends: lynx-cur | lynx
[16:15] <sil2100> Not sure, I thought alternatives still keep the binary around
[16:15] <slangasek> so should be possible to remove
[16:15] <sil2100> Oh, this I did not know!
[16:15] <slangasek> the report could be improved
[16:16] <sil2100> slangasek: ok, then I'll just remove the binary then, since that's the only leftover
[16:16] <sil2100> phew
[16:16] <slangasek> sil2100: sounds good :)
[16:16] <sil2100> I thought I'd have to eb the bad guy to first introduce an ubuntu delta for debian-cd ;p
[16:16] <sil2100> Thanks!
[16:17] <slangasek> ok cool
[16:17] <slangasek> anything else?
[16:17] <slangasek> quick meeting
[16:17] <slangasek> everyone can get back to the fire drills in progress
[16:17] <slangasek> #endmeeting
=== meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology
[16:18] <meetingology> Meeting ended Thu Jan 25 16:17:59 2018 UTC.
[16:18] <meetingology> Minutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-01-25-16.01.moin.txt
[16:18] <slangasek> thanks!
[16:25]  * genii gathers up all the coffee mugs and plates with leftover donuts