/srv/irclogs.ubuntu.com/2023/02/14/#ubuntu-meeting.txt

slyon\o15:27
eslerm_o/15:28
slyonc_paelzer is currently away (at the airport). He asked me to run the meeting today.15:28
slyon#startmeeting Weekly Main Inclusion Requests status15:29
meetingologyMeeting started at 15:29:21 UTC.  The chair is slyon.  Information about MeetBot at https://wiki.ubuntu.com/meetingology15:29
meetingologyAvailable commands: action, commands, idea, info, link, nick15:29
slyonPing for MIR meeting - didrocks joalif slyon sarnold c_paelzer jamespage eslerm15:29
slyon#topic current component mismatches15:30
slyonMission: Identify required actions and spread the load among the teams15:30
slyon#link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg15:30
slyon#link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg15:30
slyonLet's start with -proposed (it's pretty crowded)15:30
joalifo/15:30
eslerm_good morning o/15:30
slyondevscripts: I created a draft MIR for libdigest-md5-file-perl to hand it out to the foundations team15:31
jamespageo/15:31
sarnoldgood morning15:31
slyondevscripts: libswitch-perl has been in main in the past15:31
slyonI wonder if we can just re-propote it? It's looking pretty healty from a quick sanity check15:31
slyonbug #78560715:31
-ubottu:#ubuntu-meeting- Bug 785607 in libswitch-perl (Ubuntu) "[MIR] new perl-modules recommendations" [Undecided, Fix Released] https://launchpad.net/bugs/78560715:31
didrockshey15:32
slyonI guess this is a question for didrocks, jamespage or maybe sarnold if we did have some precendene on that in the past? (see my latest comment on that bug)15:32
didrocksso, in the past, that was a repromotion without question15:32
didrocksbut now, we have stricter requirements15:33
didrocksin term of testing and so on15:33
slyontesting is covered for this one15:33
didrocksso, I would reask for a template + a full review if the package was promoted before those requirements15:33
slyonOK15:33
didrocksjust for a sanity check15:33
slyonI will hand it out to the team then.15:33
slyonthanks15:33
didrocksyw15:33
slyoncontinuting with c-m-p15:33
slyonlogcheck and the seeds are false-positives15:33
slyonlibsub-quote-perl: I dropped that recommend an hour ago, so it should vanish from the report15:34
sarnold\o/15:34
slyonceilometer: looking good, I think we can promote python-xmltodict. But we'll talk about that in our "updates" section15:34
slyoncups-browserd: boths deps pending security review15:35
slyonflashrom: I dropped the new libjaylink dependency/functionality (until somebody in Ubuntu actually wants to use it). So it should vanish, too15:35
slyonjaraco.text: this is with the openstack-team to fix things (cc jamespage)15:36
slyonnetplan.io: mdurl & mardown-it-py are pending security review15:36
jamespageack re jaraco.text15:36
slyonrich: this should be tagged for security review, too (cc sarnold, eslerm_) - see my latest comment on the bug15:36
slyonpkgconf: looking good, ready for promotion. I prepared a seed change eralier today, to switch pkg-config -> pkgconf. Pending review from my teammates15:37
slyonlicensecheck: pending MIR by a collegue of mine15:37
slyonpolicykit-1: pending sec-review15:37
slyonfor c-m: nothing new. libsub-quote-perl got resolved in -proposed as stated earlier15:38
slyon#topic New MIRs15:38
slyonMission: ensure to assign all incoming reviews for fast processing15:38
slyon#link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir15:38
didrocks\o/15:38
sarnoldslyon: we may have skipped non-proposed15:38
slyonNothing \o/ (we might still have some work left from last week)15:39
didrocks(and yes)15:39
slyonsarnold: "for c-m: nothing new. libsub-quote-perl got resolved in -proposed as stated earlier" (see above)15:39
sarnoldoh! I see it now15:39
slyon#topic Incomplete bugs / questions15:39
slyonMission: Identify required actions and spread the load among the teams15:39
slyon#link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir15:39
slyonbug #200727915:39
-ubottu:#ubuntu-meeting- Bug 2007279 in devscripts (Ubuntu) "[MIR] libdigest-md5-file-perl (dependency of devscripts)" [Undecided, Triaged] https://launchpad.net/bugs/200727915:40
slyon(draft to be handed out to the foundations team to fill the template)15:40
slyonbug #200308315:40
-ubottu:#ubuntu-meeting- Bug 2003083 in libstring-license-perl (Ubuntu) "[MIR] libstring-license-perl" [Undecided, Incomplete] https://launchpad.net/bugs/200308315:40
slyondraft to be filled by the foundations team (tracking update)15:40
slyonbug #200257615:40
-ubottu:#ubuntu-meeting- Bug 2002576 in python-xmltodict (Ubuntu) "[MIR] python-xmltodict" [Undecided, In Progress] https://launchpad.net/bugs/200257615:40
slyonThis got security ACK15:40
slyonand MIR ACK. it's being pulled in already by ceilometer15:41
slyonopenstack team is subscribed15:41
slyonso I think it's ready for promotion15:41
slyondidrocks: could you handle this?15:41
sarnoldack15:41
didrockssure15:41
slyonthx!15:41
slyonand that's all for recent updates15:41
slyon#topic MIR related Security Review Queue15:42
slyonMission: Check on progress, do deadlines seem doable?15:42
slyon#link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir15:42
slyon#link https://warthogs.atlassian.net/jira/software/c/projects/SEC/boards/59415:42
slyonsarnold: how are things looking?15:42
sarnoldmm, is log4cplus overlooked / neglected?15:42
sarnoldhttps://bugs.launchpad.net/ubuntu/+source/log4cplus/+bug/2003549  -- currently unassigned, I'm wondering if this ought to be back on the server team15:43
-ubottu:#ubuntu-meeting- Launchpad bug 2003549 in log4cplus (Ubuntu) "[MIR] promote log4cplus to main as a isc-kea dependency" [Undecided, Incomplete]15:43
slyonlog4cplus is older than last week's meeting.15:43
slyon(and pending input from the MIR reporter)15:43
sarnoldathos: ^^ https://bugs.launchpad.net/ubuntu/+source/log4cplus/+bug/200354915:43
sarnoldthere we go, now my conscience is clean :)15:43
slyonsarnold: nice. I've also assigned the bug accordingly15:44
sarnoldso, security queue, I'm feeling good with our current position; this is the closest we've bbeen to getting things done before feature freeze, ever :)15:44
slyonthat's very nice to hear. Kudos to the security team!15:44
sarnoldthere's enough on our plate that I don't think *everything* will be done before feature freeze, but it's hard to guess where exactly the misses might be :(15:44
didrocksyes, this is great to hear :)15:44
sarnoldanyway, this feels good. thanks everyone for the help :)15:45
slyoncould we get this into the security queue: https://bugs.launchpad.net/ubuntu/+source/rich/+bug/2003570 ?15:45
-ubottu:#ubuntu-meeting- Launchpad bug 2003570 in rich (Ubuntu) "[MIR] rich" [Undecided, New]15:45
slyon(still fine post-ff, but should be this cycle)15:45
didrockssarnold: just be informed that I’m assigning the cups* transition to the security. I feel the first promotion to main were done before the MIR process was created. There are quite some gaps and some components are quite critical (running as root, setuid, parsing data format)15:45
eslerm_maybe, could you review SEC-1640 privately in JIRA?15:46
didrockseven if it’s monitored for CVE, I think it’s the right time for a re-review15:46
sarnoldhmm, I wonder if we should re-poke upstream, how long ago was that?15:47
eslerm_almost a week now15:47
eslerm_I could assign CVEs and move on with review15:48
eslerm_pcs is taking my priority currently though15:48
sarnolddidrocks: with a project that mature and (i'm guessing underresourced) it might be a challenge to get sweeping architectural changes of the sort that we'd expect from projects these days :( setuid executables parsing things isj ust a horrible feeling..15:48
sarnoldI've gotten the impression completing the pcs stack is our top priority at the moment, I think that should continue15:49
sarnoldbut a quick re-poke of upstream is cheap enough / easy enough15:49
eslerm_can do15:49
slyonwho will do that poking of upstream?15:49
slyonthank you!15:49
slyon#topic Any other business?15:50
sarnoldrich https://warthogs.atlassian.net/browse/SEC-169415:50
sarnoldnone here15:50
slyonsarnold: thanks!15:50
didrocksnothing here, thanks!15:51
joalifnone15:51
eslerm_none either15:51
slyonalright folks, that's all for today :) o/15:51
slyon#endmeeting15:51
meetingologyMeeting ended at 15:51:50 UTC.  Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2023/ubuntu-meeting.2023-02-14-15.29.moin.txt15:51
sarnoldthanks slyon, all :)15:51
joalifthanks slyon, all :)15:51
didrocksthanks15:51
eslerm_thanks slyon, bye all o/15:52
athossarnold, slyon: I adressed the log4cplus required TODOs a week ago. I am waiting ofr a team review before uploading it (https://code.launchpad.net/~athos-ribeiro/ubuntu/+source/log4cplus/+git/log4cplus/+merge/437047). In the mean time, we are addressing th kea TODOs15:56
athossorry for the lack of communication in the bug though :) I linked the MP there15:56
slyonthanks for the update athos!15:59
sarnoldathos: aha, good good :) I was afraid this fell through the cracks, but this sounds like happy progress noises :)15:59
sarnoldoh wow, c++ symbol stuff, not the easiest to manage16:00
athosnah! We are almost done with the kea TODOs now as well. I will poke some teammates for reviews on the log4cplus one. We are uploading kea in debian today or tomorrow, then I will sync it (symbols file pending, those filters....)16:01
sarnoldand nice tests, too :D16:01
sarnoldoh sweet16:02
sarnoldgood luck, I hope it goes smoothly :)16:02
athos:)16:02
athosthx!16:02
jbichaslyon: is pkgconf ready for promotion from the MIR team side?16:14
jbichaoh sorry, I saw your comment on the bug16:15
slyonjbicha: yep. Needs a seed change (any maybe more?) feel free to give your review on the MR if you have any context16:35
jbichaslyon: Archive Admins expect the bug to be set to Fix Committed once the MIR team is done with their review16:39
slyonjbicha: well.. we usually do "In Progress" -> do seed/dependency change -> "Fix Committed" (https://github.com/canonical/ubuntu-mir#process-states)16:40
slyonbut apparently it's better to do it the other way around in this case (see MR), and I just set it to fix committed16:41
slyonwe should wait for it to migrate to lunar-release, tho16:41
jbichaI believe the seed change is done already; otherwise it wouldn't be on mismatches-proposed16:41
slyonI proposed it here, today: https://code.launchpad.net/~slyon/ubuntu-seeds/+git/platform/+merge/437267 (it's not yet merged)16:42
slyonmaybe something else is pulling it in, too16:42
* vorlon waves19:58
amurrayo/19:58
vorlonso, wiki says rbasak is chair; but also he's declined this meeting as "out of office".  Not sure if that's just an autodecline and he plans to attend20:00
vorlonummm also that invite hasn't been updated with current members of the TB?!20:01
* amurray will have to leave early - in 30 mins - to drop kids at school early for sports training20:01
amurrayoh20:01
amurrayheh it might just be the two of us vorlon20:01
seb128hey20:02
vorlonalso the wiki has the date wrong and says the meeting is on the 15th in UTC ;)20:02
vorlonseb128: hello!20:02
amurrayoh hey seb12820:02
vorloncurrently it's just the three of us20:02
vorlonper established practice, if rbasak isn't joining then it would be up to seb128 to chair20:03
seb128should we wait a bit more for others to maybe join or get started?20:04
vorlon5 minutes after, if they were going to join they should be here by now20:04
amurraylets get started20:04
seb128alright20:05
seb128sorry I'm struggling with logs ... when was the previous meeting?20:06
vorlonJan 2420:07
seb128I was checking for the log to get some guidance on the steps20:07
vorlon3 weeks ago instead of 2, sorry20:07
seb128ah20:07
seb128right20:07
seb128#startmeeting Ubuntu Technical Board20:07
meetingologyMeeting started at 20:07:46 UTC.  The chair is seb128.  Information about MeetBot at https://wiki.ubuntu.com/meetingology20:07
meetingologyAvailable commands: action, commands, idea, info, link, nick20:07
seb128#topic Apologies20:07
vorlonsil2100 and rbasak absent but I saw no apologies on the list20:08
seb128no email on the list that I can see20:08
seb128k, let's move on20:09
seb128#topic Action review20:09
seb128ACTION: amurray to propose amended Ubuntu Backporters Team Charter20:09
seb128there was some activity in https://lists.ubuntu.com/archives/technical-board/2023-February/002711.html20:10
vorlonI'm happy with what amurray has proposed, and persuaded by his arguments in response to Dan20:10
amurrayso I am still discussing this with the backports team - waiting on a response20:10
seb128but no reply yet, it feels like that's not really actionable yet?20:10
amurrayyep not actionable - lets defer20:10
vorlonbut yes, agreed that at this point it's reasonable to wait for further input20:10
amurrayi'll keep prodding it along in the meantime and hopefully will have something more specific to report back next meeting20:11
seb128ACTION: seb128 to help draft an exception to the "must build on all architectures" requirement for snaps20:11
seb128sorry, it's still on my list but I didn't get to it yet20:12
seb128ACTION: seb128/amurray/sil200 to help drafting the snap-store Ubuntu-specific tracks usage20:12
seb128same, Lukasz isn't around, unless amurray made progress there I think we need to carry over to the next meeting20:12
amurraysorry I hadn't made any start on that either20:12
seb128ACTION: rbasak to raise any on-going blockers with third-party seeded snap security policy20:13
seb128that's a carry over as well20:13
seb128ACTION: sil2100 to start a draft summarizing the OEM archive portion of the meeting which x-nox and TB will review, edit, and ratify before we move on to figuring out the next step20:13
seb128and that one20:14
seb128ACTION: rbasak to draft a proposal of the DMB-proposed inactivity expiration policy for TB ratification20:14
seb128and that one20:14
seb128ACTION: rbasak to create initial bugs against the LP techboard project to track third party repo and DMB expiration policies20:14
seb128and that one afaik...20:14
seb128ACTION: vorlon to reply to the Edubuntu ML thread with a description of what we need from Erich before we can proceed.20:15
vorlonI think I did this20:15
seb128and that one?20:15
seb128ah20:15
vorlonhttps://lists.ubuntu.com/archives/technical-board/2023-January/002709.html20:15
seb128ah, right20:15
vorlonand on the release team side I'm taking point to shepherd it and have some MPs in progress from Eickmeyer20:15
amurraylgtm20:15
seb128k, so we are waiting for Erich to follow up now20:16
seb128so do I need to tell the bot that this one is to remove?20:17
EickmeyerDo you need me to send an email that it's "in progress"?20:18
seb128Eickmeyer, I don't think so, you altready said that in your reply20:18
amurrayseb128: no the bot wont have recorded anything - you need to use the #action prefix to get it to do that afaik20:18
Eickmeyer👍️20:19
vorlon^ right (wrt bot)20:19
seb128#action remove 'ACTION: vorlon to reply to the Edubuntu ML thread with a description of what we need from Erich before we can proceed.'  item as done now20:19
meetingologyACTION: remove 'ACTION: vorlon to reply to the Edubuntu ML thread with a description of what we need from Erich before we can proceed.'  item as done now20:19
seb128I will do that, sorry forgot to add my name20:20
seb128ACTION: sil2100 to follow up with the release team to establish consensus on Joshua's official flavour status for Cinammon.20:20
seb128does anyone know if Lukasz did that?20:20
amurraysorry no20:20
ItzSwirlzSorry to jump in but release team responded and they approved of the seed20:20
ItzSwirlz(if that info helps you)20:20
vorlonyes, sil2100 did this20:22
vorlonMPs in progress there also20:22
seb128great20:22
seb128#action seb128 remove the item about the flavour status of cinammon20:23
meetingologyACTION: seb128 remove the item about the flavour status of cinammon20:23
seb128#topic mailing list archives20:24
seb128nothing new to discuss on the list I think20:24
seb128#topic Check up on community bugs (standing item)20:25
seb128nothing new here?20:25
seb128#topic Select a chair for the next meeting (next from https://launchpad.net/~techboard/+members)20:26
seb128vorlon, can you do the next one?20:26
vorlonI can20:27
vorlonfwiw the historical practice has been to record a chair and a backup chair in the wiki page, and if the indicated chair is absent they continue to be the chair for the next meeting20:27
vorlonso you don't get out of being chair for a rotation by being absent ;)20:28
vorlonbut we don't have to be bound by that convention20:28
amurraysounds like rbasak is still in the hot seat then ;)20:28
rbasak-mobile👍20:28
seb128wfm, let's do rbasak-mobile and vorlon  as a backup20:28
seb128#topic AOB20:28
seb128any other topic?20:29
vorlonnothing from me20:29
amurraynothing from me20:29
ItzSwirlzI again apologize to jump in, but as I have to run in the next minute, if I may?20:29
seb128nor from me20:29
seb128ItzSwirlz, yes?20:29
ItzSwirlzIf any action wants to be taken on UCR for flavor status I suggest it be done real quickly or over ML because feature freeze is next thursday. That's all20:29
ItzSwirlzI'm okay with more discussion on ML - that's it, hopefully 23.04 can be official so 24.04 can be an official lts20:30
vorlonfwiw feature freeze will not be a barrier for flavor inclusion in the release20:30
ItzSwirlzoh ok :D thanks20:30
vorlonyou do have to make the beta however!20:30
* ItzSwirlz puts it on the *later* list20:30
ItzSwirlzokay toodles!20:31
seb128anything else?20:31
amurraynothing from me (sorry I gotta run anyway but looks like we are about done) - thanks folks20:32
vorlonthanks all!20:33
seb128#endmeeting20:33
meetingologyMeeting ended at 20:33:28 UTC.  Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2023/ubuntu-meeting.2023-02-14-20.07.moin.txt20:33
seb128thanks!20:33

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!