[15:27] \o [15:28] o/ [15:28] c_paelzer is currently away (at the airport). He asked me to run the meeting today. [15:29] #startmeeting Weekly Main Inclusion Requests status [15:29] Meeting started at 15:29:21 UTC. The chair is slyon. Information about MeetBot at https://wiki.ubuntu.com/meetingology [15:29] Available commands: action, commands, idea, info, link, nick [15:29] Ping for MIR meeting - didrocks joalif slyon sarnold c_paelzer jamespage eslerm [15:30] #topic current component mismatches [15:30] Mission: Identify required actions and spread the load among the teams [15:30] #link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg [15:30] #link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg [15:30] Let's start with -proposed (it's pretty crowded) [15:30] o/ [15:30] good morning o/ [15:31] devscripts: I created a draft MIR for libdigest-md5-file-perl to hand it out to the foundations team [15:31] o/ [15:31] good morning [15:31] devscripts: libswitch-perl has been in main in the past [15:31] I wonder if we can just re-propote it? It's looking pretty healty from a quick sanity check [15:31] bug #785607 [15:31] -ubottu:#ubuntu-meeting- Bug 785607 in libswitch-perl (Ubuntu) "[MIR] new perl-modules recommendations" [Undecided, Fix Released] https://launchpad.net/bugs/785607 [15:32] hey [15:32] I guess this is a question for didrocks, jamespage or maybe sarnold if we did have some precendene on that in the past? (see my latest comment on that bug) [15:32] so, in the past, that was a repromotion without question [15:33] but now, we have stricter requirements [15:33] in term of testing and so on [15:33] testing is covered for this one [15:33] so, I would reask for a template + a full review if the package was promoted before those requirements [15:33] OK [15:33] just for a sanity check [15:33] I will hand it out to the team then. [15:33] thanks [15:33] yw [15:33] continuting with c-m-p [15:33] logcheck and the seeds are false-positives [15:34] libsub-quote-perl: I dropped that recommend an hour ago, so it should vanish from the report [15:34] \o/ [15:34] ceilometer: looking good, I think we can promote python-xmltodict. But we'll talk about that in our "updates" section [15:35] cups-browserd: boths deps pending security review [15:35] flashrom: I dropped the new libjaylink dependency/functionality (until somebody in Ubuntu actually wants to use it). So it should vanish, too [15:36] jaraco.text: this is with the openstack-team to fix things (cc jamespage) [15:36] netplan.io: mdurl & mardown-it-py are pending security review [15:36] ack re jaraco.text [15:36] rich: this should be tagged for security review, too (cc sarnold, eslerm_) - see my latest comment on the bug [15:37] pkgconf: looking good, ready for promotion. I prepared a seed change eralier today, to switch pkg-config -> pkgconf. Pending review from my teammates [15:37] licensecheck: pending MIR by a collegue of mine [15:37] policykit-1: pending sec-review [15:38] for c-m: nothing new. libsub-quote-perl got resolved in -proposed as stated earlier [15:38] #topic New MIRs [15:38] Mission: ensure to assign all incoming reviews for fast processing [15:38] #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir [15:38] \o/ [15:38] slyon: we may have skipped non-proposed [15:39] Nothing \o/ (we might still have some work left from last week) [15:39] (and yes) [15:39] sarnold: "for c-m: nothing new. libsub-quote-perl got resolved in -proposed as stated earlier" (see above) [15:39] oh! I see it now [15:39] #topic Incomplete bugs / questions [15:39] Mission: Identify required actions and spread the load among the teams [15:39] #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir [15:39] bug #2007279 [15:40] -ubottu:#ubuntu-meeting- Bug 2007279 in devscripts (Ubuntu) "[MIR] libdigest-md5-file-perl (dependency of devscripts)" [Undecided, Triaged] https://launchpad.net/bugs/2007279 [15:40] (draft to be handed out to the foundations team to fill the template) [15:40] bug #2003083 [15:40] -ubottu:#ubuntu-meeting- Bug 2003083 in libstring-license-perl (Ubuntu) "[MIR] libstring-license-perl" [Undecided, Incomplete] https://launchpad.net/bugs/2003083 [15:40] draft to be filled by the foundations team (tracking update) [15:40] bug #2002576 [15:40] -ubottu:#ubuntu-meeting- Bug 2002576 in python-xmltodict (Ubuntu) "[MIR] python-xmltodict" [Undecided, In Progress] https://launchpad.net/bugs/2002576 [15:40] This got security ACK [15:41] and MIR ACK. it's being pulled in already by ceilometer [15:41] openstack team is subscribed [15:41] so I think it's ready for promotion [15:41] didrocks: could you handle this? [15:41] ack [15:41] sure [15:41] thx! [15:41] and that's all for recent updates [15:42] #topic MIR related Security Review Queue [15:42] Mission: Check on progress, do deadlines seem doable? [15:42] #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir [15:42] #link https://warthogs.atlassian.net/jira/software/c/projects/SEC/boards/594 [15:42] sarnold: how are things looking? [15:42] mm, is log4cplus overlooked / neglected? [15:43] https://bugs.launchpad.net/ubuntu/+source/log4cplus/+bug/2003549 -- currently unassigned, I'm wondering if this ought to be back on the server team [15:43] -ubottu:#ubuntu-meeting- Launchpad bug 2003549 in log4cplus (Ubuntu) "[MIR] promote log4cplus to main as a isc-kea dependency" [Undecided, Incomplete] [15:43] log4cplus is older than last week's meeting. [15:43] (and pending input from the MIR reporter) [15:43] athos: ^^ https://bugs.launchpad.net/ubuntu/+source/log4cplus/+bug/2003549 [15:43] there we go, now my conscience is clean :) [15:44] sarnold: nice. I've also assigned the bug accordingly [15:44] so, security queue, I'm feeling good with our current position; this is the closest we've bbeen to getting things done before feature freeze, ever :) [15:44] that's very nice to hear. Kudos to the security team! [15:44] there's enough on our plate that I don't think *everything* will be done before feature freeze, but it's hard to guess where exactly the misses might be :( [15:44] yes, this is great to hear :) [15:45] anyway, this feels good. thanks everyone for the help :) [15:45] could we get this into the security queue: https://bugs.launchpad.net/ubuntu/+source/rich/+bug/2003570 ? [15:45] -ubottu:#ubuntu-meeting- Launchpad bug 2003570 in rich (Ubuntu) "[MIR] rich" [Undecided, New] [15:45] (still fine post-ff, but should be this cycle) [15:45] sarnold: just be informed that I’m assigning the cups* transition to the security. I feel the first promotion to main were done before the MIR process was created. There are quite some gaps and some components are quite critical (running as root, setuid, parsing data format) [15:46] maybe, could you review SEC-1640 privately in JIRA? [15:46] even if it’s monitored for CVE, I think it’s the right time for a re-review [15:47] hmm, I wonder if we should re-poke upstream, how long ago was that? [15:47] almost a week now [15:48] I could assign CVEs and move on with review [15:48] pcs is taking my priority currently though [15:48] didrocks: with a project that mature and (i'm guessing underresourced) it might be a challenge to get sweeping architectural changes of the sort that we'd expect from projects these days :( setuid executables parsing things isj ust a horrible feeling.. [15:49] I've gotten the impression completing the pcs stack is our top priority at the moment, I think that should continue [15:49] but a quick re-poke of upstream is cheap enough / easy enough [15:49] can do [15:49] who will do that poking of upstream? [15:49] thank you! [15:50] #topic Any other business? [15:50] rich https://warthogs.atlassian.net/browse/SEC-1694 [15:50] none here [15:50] sarnold: thanks! [15:51] nothing here, thanks! [15:51] none [15:51] none either [15:51] alright folks, that's all for today :) o/ [15:51] #endmeeting [15:51] Meeting ended at 15:51:50 UTC. Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2023/ubuntu-meeting.2023-02-14-15.29.moin.txt [15:51] thanks slyon, all :) [15:51] thanks slyon, all :) [15:51] thanks [15:52] thanks slyon, bye all o/ [15:56] sarnold, slyon: I adressed the log4cplus required TODOs a week ago. I am waiting ofr a team review before uploading it (https://code.launchpad.net/~athos-ribeiro/ubuntu/+source/log4cplus/+git/log4cplus/+merge/437047). In the mean time, we are addressing th kea TODOs [15:56] sorry for the lack of communication in the bug though :) I linked the MP there [15:59] thanks for the update athos! [15:59] athos: aha, good good :) I was afraid this fell through the cracks, but this sounds like happy progress noises :) [16:00] oh wow, c++ symbol stuff, not the easiest to manage [16:01] nah! We are almost done with the kea TODOs now as well. I will poke some teammates for reviews on the log4cplus one. We are uploading kea in debian today or tomorrow, then I will sync it (symbols file pending, those filters....) [16:01] and nice tests, too :D [16:02] oh sweet [16:02] good luck, I hope it goes smoothly :) [16:02] :) [16:02] thx! [16:14] slyon: is pkgconf ready for promotion from the MIR team side? [16:15] oh sorry, I saw your comment on the bug [16:35] jbicha: yep. Needs a seed change (any maybe more?) feel free to give your review on the MR if you have any context [16:39] slyon: Archive Admins expect the bug to be set to Fix Committed once the MIR team is done with their review [16:40] jbicha: well.. we usually do "In Progress" -> do seed/dependency change -> "Fix Committed" (https://github.com/canonical/ubuntu-mir#process-states) [16:41] but apparently it's better to do it the other way around in this case (see MR), and I just set it to fix committed [16:41] we should wait for it to migrate to lunar-release, tho [16:41] I believe the seed change is done already; otherwise it wouldn't be on mismatches-proposed [16:42] I proposed it here, today: https://code.launchpad.net/~slyon/ubuntu-seeds/+git/platform/+merge/437267 (it's not yet merged) [16:42] maybe something else is pulling it in, too [19:58] * vorlon waves [19:58] o/ [20:00] so, wiki says rbasak is chair; but also he's declined this meeting as "out of office". Not sure if that's just an autodecline and he plans to attend [20:01] ummm also that invite hasn't been updated with current members of the TB?! [20:01] * amurray will have to leave early - in 30 mins - to drop kids at school early for sports training [20:01] oh [20:01] heh it might just be the two of us vorlon [20:02] hey [20:02] also the wiki has the date wrong and says the meeting is on the 15th in UTC ;) [20:02] seb128: hello! [20:02] oh hey seb128 [20:02] currently it's just the three of us [20:03] per established practice, if rbasak isn't joining then it would be up to seb128 to chair [20:04] should we wait a bit more for others to maybe join or get started? [20:04] 5 minutes after, if they were going to join they should be here by now [20:04] lets get started [20:05] alright [20:06] sorry I'm struggling with logs ... when was the previous meeting? [20:07] Jan 24 [20:07] I was checking for the log to get some guidance on the steps [20:07] 3 weeks ago instead of 2, sorry [20:07] ah [20:07] right [20:07] #startmeeting Ubuntu Technical Board [20:07] Meeting started at 20:07:46 UTC. The chair is seb128. Information about MeetBot at https://wiki.ubuntu.com/meetingology [20:07] Available commands: action, commands, idea, info, link, nick [20:07] #topic Apologies [20:08] sil2100 and rbasak absent but I saw no apologies on the list [20:08] no email on the list that I can see [20:09] k, let's move on [20:09] #topic Action review [20:09] ACTION: amurray to propose amended Ubuntu Backporters Team Charter [20:10] there was some activity in https://lists.ubuntu.com/archives/technical-board/2023-February/002711.html [20:10] I'm happy with what amurray has proposed, and persuaded by his arguments in response to Dan [20:10] so I am still discussing this with the backports team - waiting on a response [20:10] but no reply yet, it feels like that's not really actionable yet? [20:10] yep not actionable - lets defer [20:10] but yes, agreed that at this point it's reasonable to wait for further input [20:11] i'll keep prodding it along in the meantime and hopefully will have something more specific to report back next meeting [20:11] ACTION: seb128 to help draft an exception to the "must build on all architectures" requirement for snaps [20:12] sorry, it's still on my list but I didn't get to it yet [20:12] ACTION: seb128/amurray/sil200 to help drafting the snap-store Ubuntu-specific tracks usage [20:12] same, Lukasz isn't around, unless amurray made progress there I think we need to carry over to the next meeting [20:12] sorry I hadn't made any start on that either [20:13] ACTION: rbasak to raise any on-going blockers with third-party seeded snap security policy [20:13] that's a carry over as well [20:13] ACTION: sil2100 to start a draft summarizing the OEM archive portion of the meeting which x-nox and TB will review, edit, and ratify before we move on to figuring out the next step [20:14] and that one [20:14] ACTION: rbasak to draft a proposal of the DMB-proposed inactivity expiration policy for TB ratification [20:14] and that one [20:14] ACTION: rbasak to create initial bugs against the LP techboard project to track third party repo and DMB expiration policies [20:14] and that one afaik... [20:15] ACTION: vorlon to reply to the Edubuntu ML thread with a description of what we need from Erich before we can proceed. [20:15] I think I did this [20:15] and that one? [20:15] ah [20:15] https://lists.ubuntu.com/archives/technical-board/2023-January/002709.html [20:15] ah, right [20:15] and on the release team side I'm taking point to shepherd it and have some MPs in progress from Eickmeyer [20:15] lgtm [20:16] k, so we are waiting for Erich to follow up now [20:17] so do I need to tell the bot that this one is to remove? [20:18] Do you need me to send an email that it's "in progress"? [20:18] Eickmeyer, I don't think so, you altready said that in your reply [20:18] seb128: no the bot wont have recorded anything - you need to use the #action prefix to get it to do that afaik [20:19] 👍️ [20:19] ^ right (wrt bot) [20:19] #action remove 'ACTION: vorlon to reply to the Edubuntu ML thread with a description of what we need from Erich before we can proceed.' item as done now [20:19] ACTION: remove 'ACTION: vorlon to reply to the Edubuntu ML thread with a description of what we need from Erich before we can proceed.' item as done now [20:20] I will do that, sorry forgot to add my name [20:20] ACTION: sil2100 to follow up with the release team to establish consensus on Joshua's official flavour status for Cinammon. [20:20] does anyone know if Lukasz did that? [20:20] sorry no [20:20] Sorry to jump in but release team responded and they approved of the seed [20:20] (if that info helps you) [20:22] yes, sil2100 did this [20:22] MPs in progress there also [20:22] great [20:23] #action seb128 remove the item about the flavour status of cinammon [20:23] ACTION: seb128 remove the item about the flavour status of cinammon [20:24] #topic mailing list archives [20:24] nothing new to discuss on the list I think [20:25] #topic Check up on community bugs (standing item) [20:25] nothing new here? [20:26] #topic Select a chair for the next meeting (next from https://launchpad.net/~techboard/+members) [20:26] vorlon, can you do the next one? [20:27] I can [20:27] fwiw the historical practice has been to record a chair and a backup chair in the wiki page, and if the indicated chair is absent they continue to be the chair for the next meeting [20:28] so you don't get out of being chair for a rotation by being absent ;) [20:28] but we don't have to be bound by that convention [20:28] sounds like rbasak is still in the hot seat then ;) [20:28] 👍 [20:28] wfm, let's do rbasak-mobile and vorlon as a backup [20:28] #topic AOB [20:29] any other topic? [20:29] nothing from me [20:29] nothing from me [20:29] I again apologize to jump in, but as I have to run in the next minute, if I may? [20:29] nor from me [20:29] ItzSwirlz, yes? [20:29] If any action wants to be taken on UCR for flavor status I suggest it be done real quickly or over ML because feature freeze is next thursday. That's all [20:30] I'm okay with more discussion on ML - that's it, hopefully 23.04 can be official so 24.04 can be an official lts [20:30] fwiw feature freeze will not be a barrier for flavor inclusion in the release [20:30] oh ok :D thanks [20:30] you do have to make the beta however! [20:30] * ItzSwirlz puts it on the *later* list [20:31] okay toodles! [20:31] anything else? [20:32] nothing from me (sorry I gotta run anyway but looks like we are about done) - thanks folks [20:33] thanks all! [20:33] #endmeeting [20:33] Meeting ended at 20:33:28 UTC. Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2023/ubuntu-meeting.2023-02-14-20.07.moin.txt [20:33] thanks!