/srv/irclogs.ubuntu.com/2018/07/30/#ubuntu-meeting.txt

slashdo/14:58
rbasako/15:00
jbichao/15:00
tsimonq2o/15:03
rbasakWe have quorum. Who will chair?15:03
rbasakI have a meeting at quarter past the hour. Though I think I can probably multitask, I would like to avoid chairing in case I hold things up then.15:03
sil2100I'm around but busy with .515:04
sil2100Very busy15:04
tsimonq2I have a meeting that was scheduled for now but the other individual is late... so no guarantees.15:04
slashdWe have an applicant today I think15:05
rbasakblackboxsw: here?15:05
jbichaum, I guess I can chair15:05
jbichagive me a moment to look up the commands15:05
jbicha#startmeeting15:06
meetingologyMeeting started Mon Jul 30 15:06:16 2018 UTC.  The chair is jbicha. Information about MeetBot at http://wiki.ubuntu.com/meetingology.15:06
meetingologyAvailable commands: action commands idea info link nick15:06
blackboxswhello hello rbasak15:06
blackboxswyep, just back from 2 week vacation o/15:06
slashdjbicha, I can chair the next one, I never did it yet.15:06
tsimonq2I can take the one after that then.15:06
jbicha#topic Review of previous action items15:07
=== meetingology changed the topic of #ubuntu-meeting to: Review of previous action items
jbicha* cyphermox to sort out ML / IRC channel accesses15:07
jbichaI believe that's all taken care of15:07
jbicha#topic Package Set / Per Package Uploader Applications15:08
=== meetingology changed the topic of #ubuntu-meeting to: Package Set / Per Package Uploader Applications
jbicha#subtopic blackboxsw requesting PPU for cloud-init & curtin15:08
jbicha#link https://wiki.ubuntu.com/ChadSmith/DeveloperPerPackageUploadApplication15:09
blackboxswthanks jbicha.15:09
jbichablackboxsw: could you start by introducing yourself? :)15:09
blackboxswcertainly...15:09
blackboxswI'm a member of the Canonical server team and work closely with Scott Ryan and Josh as primary contributors of cloud-init and curtin  upstream15:10
blackboxswI've been at Canonical since Nov 2011 and worked with Landscape, Charm Curtin and cloud-init15:11
blackboxswsorry typo..  Landscape, maas juju, openstack curtin and cloud-init in my time here.15:11
blackboxswI love system management problems and improving enterprise software to make it easier to use and understand.15:12
blackboxswI've been exclusively on the ubuntu server team since Apr 2017 I believe and focused solely on cloud-init and curtin.15:12
blackboxswprior to Canonical I was at HP in the open source and linux lab setting up system management on HP Itanium and ProLiant as well as HP cloud infrastructure(devops)15:13
blackboxswalso, a soccer fan, and former competitive ultimate frisbee player  :)15:14
jbichablackboxsw: I'm looking at https://launchpad.net/~chad.smith/+uploaded-packages and I see 2 uploads for cloud-init (and SRUs) and 2 for curtin15:14
blackboxswjbicha: that view only shows latest of any packege/series  since Debian's retirement of alioth  we couldn't search upload history well for ubuntu packages so I wrote a script to help folks15:15
slashdjbicha, there is more than that here: https://udd.debian.org/cgi-bin/ubuntu-sponsorships.cgi?render=html&sponsor=&sponsor_search=name&sponsoree=Chad+Smith&sponsoree_search=name15:15
jbichaI think normally the DMB expects more sponsored uploads before granting direct upload rights15:15
blackboxswit's linked from my proposal let me get it15:15
blackboxswand please feel free to use the script :)15:15
blackboxswfor others since that app is dead15:15
blackboxswjbicha: https://wiki.ubuntu.com/ChadSmith/PackageUploads15:15
blackboxswI thought about writing a simple web microservice to host basically the same querystring search terms as the old   ubuntu-sponsorships.cgi which no longer exists15:16
blackboxswI may get to that soon, but vacation got in the way :)15:17
blackboxswahh thanks for th enew link for ubuntu-sponsorships.... I thought it was dead and gone15:17
blackboxswsorry,  launchpad seems to limit the uploaded-packages view to only the latest release per series15:18
blackboxswslashd: I hadn't known about that app showing up. thanks15:18
slashdblackboxsw, yw15:18
blackboxswhey ahasenack15:19
ahasenackfly on the wall15:19
slashdblackboxsw, can you tell me a few thing things you would look at as a sponsor before uploading a patch in the upload queue and why ?15:19
blackboxswslashd: I'm all about tooling and generating documented, repetitive results. So, most of the work I'm doing for cloud-init and curtin is to improving tooling and automated documentation around our SRU upload process. Limit our SRU exceptions by making our automated and manual testing  simpler and faster so we can cover more integration friction points15:22
blackboxswI've started extending tooling to allow us to launch instances on various clouds for integration testing, improved our customer visible documentation content on cloudinit.readthedocs.orc and curtin.readthedocs.org and been the primary driver and test validation developer during most of the last 5 cloud-init srus.15:24
blackboxswwhat I'm hoping to do is keep smoser out of the equation when we actually have to physically upload the bits after SRU validation has passed on all platforms. :)15:24
blackboxswwe can't have a single point of failure on curtin or cloud-init and I want to allow us to have more than one person who can fix the products of critical public-facing issues arise15:25
blackboxswin case someone gets sick. which scott never does :)15:26
slashdblackboxsw, good where would you look for a package stuck in -proposed for more than 2 weeks for instance ?15:27
blackboxswalso, I've started building a history of our SRU validation tests which help us better collect and document scripts developed to test certain feature aspects and results  so we can leverage them into some of our automated tooling.   https://github.com/cloud-init/ubuntu-sru/tree/master/2018062015:28
blackboxswI collect that content for each SRU so when we get enough use-cases we can develop integration tests that cover certain features in our  CI.15:28
tsimonq2blackboxsw: After slashd's question, where would you go to look if an SRU has regressed and has not been fully phased in?15:29
blackboxswslashd: not sure if you were asking about queues15:29
blackboxswI generally check the following during SRU process: ttps://launchpad.net/ubuntu/bionic/+queue?queue_state=1&queue_text=cloud-init15:29
blackboxswhttps://launchpad.net/ubuntu/bionic/+queue?queue_state=1&queue_text=cloud-init    for each series under test15:29
slashdblackboxsw, the package has is built in -proposed, verification-done-$RELEASE, the 7 days waiting is done, but package doesn't move into -update for instance15:30
blackboxswif something was stuck there I'd bing in ubuntu-devel channel so ask for assistance15:30
blackboxswI normally also look over the age and related bugs @ https://people.canonical.com/~ubuntu-archive/pending-sru.html15:30
slashdblackboxsw, thanks15:30
tsimonq2blackboxsw: Thanks.15:30
blackboxswfor each series I've targeted, make sure that I've tagged those bugs accordingly once I finish attaching validation results15:31
* rbasak has a couple of questions when you're ready15:31
blackboxswso I thought there was an sru regresson tag like sru-verification-failed if I did hit a regression bug during testing15:32
blackboxswlike"verification-failed-$RELEASE"15:32
blackboxswper https://wiki.ubuntu.com/StableReleaseUpdates15:32
blackboxswtsimonq2: was that your question? I would tag it sru-verification-failed to ensure it didn't get phased in.15:34
blackboxswor just the pending-sru.html dashboard as the place to validate status of a queued sryu15:34
blackboxswor just the pending-sru.html dashboard as the place to validate status of a queued sru15:34
blackboxswrbasak: fire away15:34
tsimonq2blackboxsw: Correct, but let's say an SRU team member lets it into -updates. It goes through a phasing process before actually being landed to all users.15:34
tsimonq2Where do you find the status of that?15:35
* rbasak holds on15:35
blackboxswahh. I actually don't know where to look for that15:35
blackboxswrmadison tells me once package has actually published to -updates... but hmm15:36
tsimonq2blackboxsw: For future reference, https://people.canonical.com/~ubuntu-archive/phased-updates.html and http://www.murraytwins.com/blog/?p=127 are worth looking into.15:37
tsimonq2That's it for me.15:37
blackboxswI can find that the package is in accepted state in https://launchpad.net/ubuntu/bionic/+queue?queue_state=4&queue_text=cloud-init   ... but hmm15:37
jbichablackboxsw: btw, see https://wiki.ubuntu.com/StableReleaseUpdates#Phasing15:37
blackboxswahh good deal, bookmarking now thanks tsimonq215:37
tsimonq2jbicha's link too; that's where I got to both links.15:37
rbasakblackboxsw: how would you handle a feature release to cloud-init that happens after feature freeze in Ubuntu?15:38
blackboxswsince cloud-init has an SRU exception, I would go through the exception testing process for cloud-init documented here https://wiki.ubuntu.com/CloudinitUpdates15:39
blackboxswif it is a large changeset, not a single cherry pick of a bug, I would create an SRU process bug like the following...15:40
blackboxswhttps://bugs.launchpad.net/bugs/177791215:40
ubottuLaunchpad bug 1777912 in cloud-init (Ubuntu Bionic) "sru cloud-init (18.2-4-g05926e48-0ubuntu1) to (18.3-9ubuntu1)" [Medium,Fix committed]15:40
blackboxswwithin it we have to capture any ubuntu-specific functional changes made from a documentation standpoint15:41
blackboxswminimally we allow CI to cover most cases (which integration tests on lxd,ec2 and kvm platforms, and we manually integration test  on platforms like : azure, gce,  openstack15:42
blackboxswI do clean install and  upgrade testing on each platform to make sure we don't have regresssions during that process for instances or 'pets' which are upgraded15:43
blackboxsw*new* instances or 'pets'15:43
tsimonq2blackboxsw: What about in the development release of Ubuntu, prior to it being declared stable?15:44
blackboxswafter verification is done and all logs attached to the SRU bug pass, we request validation from MAAS and CDOQA15:44
blackboxswthere's an exception process that we went through this last time I thought. I'll see if I can dig that up. in this case for IBM we had a bug that needed fixing after bionic transitioned after feature freeze.15:46
blackboxswhttps://wiki.ubuntu.com/FreezeExceptionProcess15:46
rbasakOK, thanks. Second question: have you ever done an SRU that isn't a backport from a latest upstream release? Or a development upload that isn't a new upstream release?15:48
blackboxswso the FFE required an FFE bug and then a resulting set of verification steps.15:48
blackboxswrbasak: I believe I've been involved in at least two cloud-init SRUs that were cherry picks of individual bugs backported to a given series. there was content in tip that we didn't want to leak back to xenial or artful  as it changed behavior.15:50
blackboxswwe have tooling in both cloud-init and curtin to support cherry picks or upstream snapshots very easily15:50
rbasakblackboxsw: would you be able to find me an example of one of those uploads please?15:51
blackboxswdepending on the need. but for all of the content we currently allow into tip/trunk we make sure we develop a simple config switch or enable tiny patch to allow the default behavior of a feature to be preserved in the stable releases.15:51
smoser17.2-35-gf576b2a2-0ubuntu1~16.04.215:52
blackboxswrbasak: cloud-init (18.2-4-g05926e48-0ubuntu1~16.04.2) xenial-proposed; urgency=medium15:52
rbasakThanks15:52
blackboxswmy version was IBM specific changes into xenial15:53
blackboxswtrying to find others15:53
blackboxswthanks smoser15:53
blackboxswtrue and smoser's was a break that a community contribution  introduced into Google's datasource which dropped all user-data :/15:54
blackboxswso we had to patch that up quick and didn't want to leak all of tip into xenial15:54
jbichablackboxsw: maybe a bit off-topic, but… I'm familiar with cloud-init but could you explain more about what curtin is for? it's not installed by default in Ubuntu Server, is it?15:54
blackboxswjbicha: curtin is a simple/fast installer for ubuntu onto baremetal, it's primary consumer at the moment is maas.15:56
smoser(if you search for 04.2 at https://git.launchpad.net/ubuntu/+source/cloud-init/tree/debian/changelog?h=applied/ubuntu/xenial-devel you'll see many of Chad's cherry-pick uploads)15:56
blackboxswit allows you to quickly configure network and storage and deploy ubuntu images very quickly as well as passthrough additional cloud-init configuration to the target machine15:56
jbichathanks, I haven't really used MAAS much :)15:57
jbichalast call for questions…15:57
blackboxswalso it's used by the subiquity installer too (again that'll be under-the-hood for most users).15:58
jbichaok15:59
jbicha#vote Grant blackboxsw PPU for cloud-init & curtain16:00
meetingologyPlease vote on: Grant blackboxsw PPU for cloud-init & curtain16:00
meetingologyPublic votes can be registered by saying +1, +0 or -1 in channel, (for private voting, private message me with 'vote +1/-1/+0 #channelname)16:00
tsimonq2jbicha: You probably have to set the people that can vote first.16:01
rbasakblackboxsw is technically my colleague, though we don't cross paths much (working in different areas). I intend to follow my usual method of abstaining unless there is a unanimous vote and I need to vote to make quorum.16:01
jbicha+116:02
meetingology+1 received from jbicha16:02
blackboxswheh s/curtain/curtin :)16:02
jbichablackboxsw: I told you I wasn't familiar with it! 😳 thanks16:02
blackboxswwe'll have to get broader market adoption.... I'll add it to my list ;)16:03
tsimonq2I would typically abstain because I don't already have upload access to these packages myself, but since I think we're short enough people on the DMB for this meeting, I'll go ahead and vote.16:04
slashd+116:04
meetingology+1 received from slashd16:04
tsimonq2+116:05
meetingology+1 received from tsimonq216:05
rbasaksil2100: able to vote?16:05
sil2100One moment16:06
sil2100+116:10
meetingology+1 received from sil210016:10
jbicharbasak: ^16:11
rbasak+016:11
meetingology+0 received from rbasak16:11
jbicha#endvote16:11
meetingologyVoting ended on: Grant blackboxsw PPU for cloud-init & curtain16:11
meetingologyVotes for:4 Votes against:0 Abstentions:116:11
meetingologyMotion carried16:11
blackboxswwoot! thanks all!16:12
jbichablackboxsw: welcome :)16:12
slashdCongrats blackboxsw ! Thanks for you great work on cloud-init16:12
ahasenackcongrats blackboxsw16:12
blackboxswas always I'll continue to lean on you all if there are questions that arise ;) thanks for all the help in the past16:12
jbichathis will also grant you Ubuntu membership16:12
jbichaany volunteers to handle adding him to the appropriate groups and setting up the PPU?16:13
rbasakhttps://wiki.ubuntu.com/DeveloperMembershipBoard/KnowledgeBase#Actions_after_a_successful_application is what is needed.16:13
rbasakI'll be happy to do it.16:13
jbicha#action rbasak to handle setting up PPU for blackboxsw16:14
meetingologyACTION: rbasak to handle setting up PPU for blackboxsw16:14
jbicha#topic MOTU applications16:15
=== meetingology changed the topic of #ubuntu-meeting to: MOTU applications
jbichaUnit193's application is deferred until the next meeting.16:15
jbichaPlease see the discussion on the list about the pseudonym concern. I think we'll want that to be resolved, at least for Unit193's case, by that meeting.16:15
jbicha#topic Any other business16:15
=== meetingology changed the topic of #ubuntu-meeting to: Any other business
jbichaNext meeting is scheduled for Monday, August 13 at 19:00 UTC16:15
jbicha#endmeeting16:17
=== meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | <wxl> be nice
meetingologyMeeting ended Mon Jul 30 16:17:32 2018 UTC.16:17
meetingologyMinutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-07-30-15.06.moin.txt16:17
blackboxswthanks rbasak for the setup16:18
sil2100o/16:25
mdeslaur\o16:31
ratliff\o/16:32
ratliff#startmeeting16:32
meetingologyMeeting started Mon Jul 30 16:32:11 2018 UTC.  The chair is ratliff. Information about MeetBot at http://wiki.ubuntu.com/meetingology.16:32
meetingologyAvailable commands: action commands idea info link nick16:32
ratliffThe meeting agenda can be found at:16:32
ratliff[LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting16:32
ratliff[TOPIC] Announcements16:32
=== meetingology changed the topic of #ubuntu-meeting to: Announcements
ratliffThanks to Thinh Hoang Quoc (g4mm4) for reporting  a subdomain takeover issue with the discourse.ubuntu.com domain.16:32
ratliffYour work is very much appreciated and will keep Ubuntu users secure. Thank you!16:32
ratliffThe Ubuntu Security team is hiring. See https://grnh.se/8c0a6c1f1 for more details.16:33
ratliff[TOPIC] Weekly stand-up report16:33
=== meetingology changed the topic of #ubuntu-meeting to: Weekly stand-up report
ratliffjdstrand: you're up16:33
mdeslaurzzzzz16:35
mdeslaurok, I'll go16:35
mdeslaurI'm on community this week, and since one of my co-workers is slacking off on some beach somewhere, I'll be doing triage too16:35
jdstrandsorry16:35
mdeslaurI have some mysql updates to publish16:35
mdeslaurand an embargoed issue to test and publish too16:35
mdeslaurafter that, I'll be going down the list as usual16:36
mdeslaurthat's about it16:36
mdeslaurjdstrand: you're up16:36
jdstrandThis week I plan on working on:16:36
jdstrand- miscellaneous snapd reviews (notably, anbox, but also a few others)16:36
jdstrand- brand store snap declarations16:36
jdstrand- various followups for Debian AppArmor MR reviews16:36
jdstrand- an embargoed item16:36
jdstrand- kubernetes interface as have time16:36
jdstrandthat's it from me. who is after me, jjohansen?16:36
jjohansenI need to finish up with bug 178022716:37
jjohansenneed to look into 1783922 and report regression around bind mounts on 4.1816:37
jjohansenreview sarnold's debconf presentation16:37
ubottubug 1780227 in linux (Ubuntu Bionic) "locking sockets broken due to missing AppArmor socket mediation patches" [Critical,Triaged] https://launchpad.net/bugs/178022716:37
jjohansenI have david's mount patches to review, and mjg's packet labeling patches to review also16:38
jjohansenand I am off Wednesday and Thursday so I doubt I will get all of that done16:38
jjohansensarnold: you're up16:38
sarnoldI'm in the happy place this week; I'm going to debconf, so much travel, then conference, presentation, and then returning next week. I'm unlikely to have much traction on the xdg portal gtk backend mir, but I'll try to fit some in16:38
sarnoldthat's it for me, chrisccoulson?16:39
chrisccoulsonI've got a chromium update to do16:39
chrisccoulsonI'm also working on an embargoed issue16:39
chrisccoulsonit's a short week for me this week, but I hope to have thunderbird 60 prepared before I finish too16:40
chrisccoulsonthat's me done16:40
ratliffI'm in the happy place this week.16:40
ratliffI have internal and embargoed work to do.16:40
ratliffleosilva: your turn16:40
leosilvaI'm in the happy place this week.16:40
leosilvaI'm working on the mysql-5.5 update for precise16:41
leosilvaOther than that I'm on free season hunting new pkgs.16:41
leosilvamsalvatore: I think is your turn16:41
msalvatoreLast week I published fixes for CVE-2018-10866 and CVE-2016-10727.16:41
ubottu** <A HREF="https://cve.mitre.org/about/faqs.html#reserved_signify_in_cve_entry">RESERVED</A> ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10866)16:41
ubottucamel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an e... (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10727)16:41
msalvatoreI'm in the happy place this week.16:41
msalvatoreThis morning I published a fix for CVE-2018-10900.16:42
ubottuNetwork Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10900)16:42
msalvatoreThis week I plan to work on firming up our policies and tooling for CVE prioritization with respect to universe packages in support of Expanded ESM.16:42
msalvatoreThat's it for me. ebarretto, you're up.16:42
ebarretto- I'm in the happy place this week16:42
ebarretto- started working on package updates. The first package that I've updated went public today: libonig (trusty and xenial). Any feedback or complaints, please let us know. :)16:42
ebarretto- I am continuing on package updates, next package: capnproto.16:42
ebarretto- still catching up/learning the team tasks, processes and information16:42
ebarrettothat's it from me!16:43
ratliffthanks!16:43
ratliff[TOPIC] Highlighted packages16:43
=== meetingology changed the topic of #ubuntu-meeting to: Highlighted packages
ratliffThe Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so.16:43
ratliffSee http://people.canonical.com/~ubuntu-security/d2u/ for available merges and https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved.16:43
ratliff[TOPIC] Miscellaneous and Questions16:43
=== meetingology changed the topic of #ubuntu-meeting to: Miscellaneous and Questions
ratliffDoes anyone have any other questions or items to discuss?16:43
ratliffjdstrand, mdeslaur, jjohansen, sarnold, chrisccoulson, leosilva, msalvatore, ebarretto: Thanks!16:45
mdeslaurthanks ratliff!16:45
ratliff#endmeeting16:45
=== meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | <wxl> be nice
meetingologyMeeting ended Mon Jul 30 16:45:40 2018 UTC.16:45
meetingologyMinutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-07-30-16.32.moin.txt16:45
msalvatorethanks, ratliff16:45
leosilvathanks ratliff!16:45
jjohansenthanks ratliff16:45
sarnoldthanks ratliff!16:46
ebarrettothanks ratliff!16:49

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!