/srv/irclogs.ubuntu.com/2022/07/05/#ubuntu-meeting.txt

didrockscpaelzer: I will be away during the MIR meeting but available 30 minutes afterward. So, I will read the scrollback13:07
cpaelzerok, thanks didrocks13:14
cpaelzerdidrocks: did you have time to have a look at the new rust rules?13:15
cpaelzeras I'll need to call for a vote on them13:15
cpaelzerand if not yet, maybe you can look now and leave a vote on the PR?13:15
didrockscpaelzer: yeah, doing now13:33
cpaelzerawesome13:41
cpaelzergetting ready slowly but surely ...14:28
sarnoldgood morning14:30
slyono/14:30
cpaelzer#startmeeting Weekly Main Inclusion Requests status14:30
meetingologyMeeting started at 14:30:33 UTC.  The chair is cpaelzer.  Information about MeetBot at https://wiki.ubuntu.com/meetingology14:30
meetingologyAvailable commands: action, commands, idea, info, link, nick14:30
cpaelzerPing for MIR meeting - didrocks joalif slyon sarnold cpaelzer jamespage14:30
cpaelzerhello everyone14:30
joalifo/14:30
cpaelzerFYI didrocks has a conflict but will read backlog later14:30
cpaelzerso we will assign almost everything to him *evilgrin*14:31
cpaelzer#topic current component mismatches14:31
cpaelzerMission: Identify required actions and spread the load among the teams14:31
cpaelzer#link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg14:31
cpaelzer#link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg14:31
cpaelzerthe lintian explosion is starting to be covered by stubs and approved MIRs14:31
slyonnothing new as far as I can tell14:31
cpaelzerisoburn and co are ongoing and covered14:31
slyonI created lintian stubs. those approved (old) MIRs are probably useless and should be unassigned14:32
cpaelzeryep, nothing new from my POV either14:32
slyonI had one questrion wrt false positives.14:32
slyonbut maybe we can discuss this during AOB14:32
cpaelzershoot14:32
cpaelzerah ok14:32
cpaelzerthen AOB14:32
cpaelzer#topic New MIRs14:32
cpaelzerMission: ensure to assign all incoming reviews for fast processing14:32
cpaelzer#link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir14:32
slyonplzip & lzlib are my false positives to be discussed later14:33
cpaelzerok14:33
cpaelzerthen https://bugs.launchpad.net/ubuntu/+source/libisofs/+bug/197795914:33
ubottuLaunchpad bug 1977959 in usb-creator (Ubuntu) "[MIR] libisoburn, libburn, libisofs" [Undecided, New]14:33
cpaelzerthis was reviewed by diddledani14:33
cpaelzersorry14:33
cpaelzerdidrocks:14:33
slyonlibisoburn, libburn, libisofs is for didrocks to have a look at. I think everything is resolved and this should be a MIR team ACK14:33
diddledanidamn, I thought I was useful then!14:33
cpaelzeryes slyon I also think this is a re-evaluation if all required todos are covered14:33
slyonACK14:34
cpaelzerdo I hear that you will do that re-check slyon?14:34
sarnolddiddledani :)14:34
cpaelzerand keeping plzip for AOB discussion ...14:34
cpaelzer#topic Incomplete bugs / questions14:34
cpaelzerMission: Identify required actions and spread the load among the teams14:34
cpaelzer#link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir14:34
slyonit's all good IMO, but I wanted to leave it for didrocks as he did the initial review and I don't want to override his decision14:34
slyonshould be quick, though14:34
cpaelzerok, then we consider it pre-checked and didrocks gets the task to check if he agrees14:35
cpaelzerif yes, then assign seucrity or mark it as approved for the archive admins14:35
cpaelzergoing to incomplete cases then14:35
cpaelzertwo recent updates14:35
cpaelzeripmitool entered seucrity queue14:36
cpaelzerI have an update there that we have automated tests which we think we can add14:36
cpaelzerwas only recommended, but still more tests = better14:36
slyonlintian is just a MIR stub & update-excuse bug for now14:36
cpaelzerthere is an ipmi simulator which can be used for some14:36
cpaelzerand ack on lintian*14:36
cpaelzerTL;DR nothing to act or assign here14:36
cpaelzer#topic MIR related Security Review Queue14:36
cpaelzerMission: Check on progress, do deadlines seem doable?14:36
cpaelzer#link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir14:37
cpaelzersarnold: has anything left the queue in the last week?14:37
sarnoldcpaelzer: I believe only telegraf -- it's hard to call that a win, but it's one fewer in the queue..14:37
cpaelzeryeah14:37
cpaelzersarnold: in terms of non-progress - at what date do you want me to make the same noisy call to security management that got jammy reviews fixed last minute?14:38
cpaelzergiven that many have 7 weeks left (scheduled for feature freeze)14:39
cpaelzerI think it is time that I ask this ... sorry14:39
cpaelzeror do you expect you can get your new helping hands that you mentioned in the past to help you to get some of these cases done soon?14:40
sarnoldcpaelzer: probably about two weeks -- we're doing onboarding for two new team members last week and this week, the holiday weekend is in the past :(, so it should be a bit of a slow return to work..14:40
sarnoldcpaelzer: it is reassuring to see the 'in progress' cards on jira :)14:40
cpaelzerok, let us then consider - if in two weeks we still see none cleared I'll take the sad job of ringing bells wherever I can14:40
sarnoldthanks :D14:40
cpaelzerwith the current load I can skip the internal queue14:41
cpaelzerwe get to ...14:41
cpaelzer#topic Any other business?14:41
slyonwrt the lintian component-mismatch, plzip & lzlib seem to be false positives, as described here: https://bugs.launchpad.net/ubuntu/+source/lzlib/+bug/198066314:41
ubottuLaunchpad bug 1980663 in plzip (Ubuntu) "[MIR] plzip & lzlib" [Undecided, New]14:41
cpaelzerslyon: let us talk about https://bugs.launchpad.net/ubuntu/+source/lzlib/+bug/198066314:41
cpaelzerack slyon, that is the most common type of false-positive that I know of14:42
slyonI was wondering if we should somehow track those false positives, e.g. by keeping that bug open (in NEW state) and adopt the title to something like "[MIR]... FALSE-POSITIVE" ?14:42
cpaelzerso you can set that bug to "invalid"14:42
cpaelzeroh I see14:42
cpaelzeryou mean to get them "non-white"14:42
cpaelzerWe could even consider using just ONE bug and add bug tasks14:42
slyonthat way we would not need to remember the false-positives ourselves, but would have a reference from the generated SVG14:42
slyonyes that way my idea14:42
cpaelzerthe only problem would be "what if it ever is a real dependency" but we have that problem already as we ignore some14:43
sarnoldoh I really like this "use one bug over and over" idea14:43
cpaelzerunless it gets way too many tasks launchpad is ok with that14:43
cpaelzerslyon: how about this, you can set plzip to the state/content you'd like for this14:43
cpaelzernext week we check component mismatches and how it looks14:43
cpaelzerif it "feels right" then we add all the other known cases14:43
cpaelzerwould that work for all of us?14:44
sarnoldhow many would we have? it feels like we have a dozen of these, and launchpad is unhappy at the kernel's four dozen-ish tasks..14:44
cpaelzersarnold: I've found that until ~25 things are ok14:44
sarnolddang that's lower than I thought14:44
slyonthe problem with a single bug is that we cannot have the analyis per case in the description/content14:44
sarnoldif we make a new bug every tenpackages, though, that's still a big step up14:44
cpaelzerhmm, that is true slyon14:44
cpaelzeroh well14:44
slyonif we keep it as-is, it would describe why it's a false positive. and if it would pop up as a real dependency that could be checked14:44
cpaelzerwe could have the description just have an explanation of why we have false positives14:45
cpaelzerand every PKG added can be a new comment outlining the reason14:45
slyonthat might be a nice solution.14:45
cpaelzerhow about trying this for the zip cases then14:45
slyonlet me set it up like this, and we can think about it for a bit14:45
slyonthen make a call next week14:45
cpaelzerexactly14:46
cpaelzerslyon: if you are in the mood you can also immediately add the other known cases, up to you(r available time)14:46
slyonsure14:46
cpaelzerwhich would be like xterm, esmtp IIRC14:46
cpaelzerok next topic14:47
cpaelzerwe have successfully moved to GH with our rules14:47
cpaelzerI thought it is worth to document that here as well14:47
cpaelzerit has a TOC still (top left button) and sub-anchor links work14:47
cpaelzerhttps://github.com/canonical/ubuntu-mir#mir-team-weekly-status-meeting14:47
slyonnice work, thank you!14:48
sarnoldnice :D14:48
cpaelzerand using that - as you have sen in your mail I have created a renewed PR for rust14:48
cpaelzerhttps://github.com/canonical/ubuntu-mir/pull/114:48
ubottuPull 1 in canonical/ubuntu-mir "Add rust v3" [Open]14:48
cpaelzerI'm obviously in +1 to my own proposal14:48
cpaelzerslyon: reviewed and is ok as well14:48
cpaelzerdidrocks: reviewed just before and +1 (I'll add his small feedback in a bit)14:48
cpaelzerI guess we definetly want sarnold/security to +1 and otherwise just need a majority14:49
cpaelzerif I might ask joalif / sarnold / jamespage to review that?14:49
joaliflooking14:49
cpaelzerI liked the comment of slyon as that really was as I see it quoting: "I feel like this should be landed soon to have a base to build upon. It can still be improved/adopted later on, once we processed some initial Rust packages."14:49
cpaelzerand server team has a case ready for review (including cargo.lock) once we approved the rules14:50
cpaelzerso TL;DR for now - please review this, once we have more +1 I'd merge it and we will then throw the mdevctl MIR into the ring to try it out14:51
sarnolddid the package need to go to some effort to copy the cargo.lock into the built package?14:51
cpaelzersarnold: without the tooling in place we had to essentially create the .lock file ourselves14:52
cpaelzersarnold: we have documented that in README.source as our preliminary rules ask for14:52
cpaelzerdh-cargo strips upstreams .lock files and avoids creating new ones, so until implemented there some kind of maintainer-created .lock is the only way to reasonably go14:53
cpaelzerit is not that we write it line by line, there is a command which generates it just fine14:53
joalif+114:54
cpaelzerthanks joalif - just throw that +1 as approval on the PR along any feedback if you have some14:55
cpaelzerso the task to read in detail is left for sarnold14:55
cpaelzerand for jamespage is you want (but so far openstack != rust) so you might rightfully not care much14:56
cpaelzerand by that I'd call this meeting closed14:56
cpaelzerany last important things to share?14:56
sarnoldthanks cpaelzer, all :)14:56
slyonnothing, thanks cpaelzer, all!14:56
cpaelzerok then - see you next week and happy reviewing14:56
cpaelzer#endmeeting14:56
meetingologyMeeting ended at 14:56:45 UTC.  Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2022/ubuntu-meeting.2022-07-05-14.30.moin.txt14:56
joalifthanks cpaelzer, all14:56
didrocksslyon: cpaelzer: will recheck iso/burn*15:07
slyonthanks didrocks15:09
cpaelzerthanks didrocks15:09

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!