=== JanC_ is now known as JanC [14:31] o/ [14:31] o/ [14:32] good morning [14:32] o/ [14:33] ok, I think this is only us, let me lead the meeting [14:34] #startmeeting Weekly Main Inclusion Requests status [14:34] Meeting started at 14:34:24 UTC. The chair is didrocks. Information about MeetBot at https://wiki.ubuntu.com/meetingology [14:34] Ping for MIR meeting - didrocks joalif slyon sarnold cpaelzer jamespage ( eslerm dviererbe ) [14:34] Available commands: action, commands, idea, info, link, nick [14:34] #topic current component mismatches [14:34] Mission: Identify required actions and spread the load among the teams [14:34] #link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg [14:34] #link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg [14:34] c-m-p: I don’t see anything new, the whole mm/pp stack is in discussion with the desktop team [14:35] c-m: all good too, nothing to add [14:35] #topic New MIRs [14:35] Mission: ensure to assign all incoming reviews for fast processing [14:35] #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir [14:36] the status is incorrect on all of them [14:36] jbicha: please, look at https://github.com/canonical/ubuntu-mir for the correct status, it should be New once ready for review [14:36] is it? the process states section has "new/confirmed" even on step 1 [14:37] oh, I still had the old wiki version in mind :) [14:37] In this case, I specifically chose Confirmed, but LP automatically upgrades bugs to Confirmed if someone clicks "this affects me" :/ [14:37] ah, that was maybe why it was changed to it [14:37] ok, my bad then :) [14:38] sorry for the false ping [14:38] ok, so we need to split them [14:38] but as I’m the only non security member here, I think nobody else can take any other? [14:39] and I don’t want to assign for joalif or jamespage with them being away [14:39] the 5 packages are fairly similar to each other [14:39] I can take a second for the next pulse but can’t act more, I already have one [14:39] yeah, at this point it's probably just a question of "how many does didrocks want?" :) [14:40] sarnold: we agreed with management to take 2 by pulse [14:40] this pulse was already full, so next pulse, I already have 1 [14:40] heh [14:40] + another one [14:40] sounds like the start of the cycle, indeed [14:40] but it means I can’t take anymore for the next 2 pulses [14:40] sorry 2 weeks* [14:41] so meh, let’s do that, and maybe that will convince people to add more people to the MIR team :) [14:41] I think libglibmm is the one making more sense, isn’t it jbicha? [14:41] that's fine with me to start there [14:42] oh it actually depends on libsigc++-3.0 though [14:42] jbicha: I see that most of them have a bunch of lintian warnings, some could be fixed if we are working on debian, is it the case? [14:42] libsig actually has a symbols file already :) [14:42] \o/ [14:43] my opinion is that the lintian warnings are harmless, but yes I can fix things in Debian if needed [14:43] jbicha: at worst with lintian override? that way, you get a clean list, and when a new one is introduced, you will notice it rather than being list in the existing list [14:43] thanks! [14:43] ok, taking libsigc++ first [14:44] if joalif or jamespage reads afterwards, please, take one on the list ^ [14:44] "national-encoding"? [14:45] #topic Incomplete bugs / questions [14:45] Mission: Identify required actions and spread the load among the teams [14:45] #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir [14:45] sarnold: I try to ignore m4 files [14:45] jbicha: ahh, apparently, as did I, I saw the 'x86_64-linux-gnu' and assumed it was an .so :) [14:46] ok, on the incomplete list, only tagging and other in progress comments as far as I can see [14:46] let’s move on [14:46] duktape assigned to band_ali, probably for todos? [14:46] right [14:46] and cargo, similar, tagged [14:46] yep [14:46] #topic Process/Documentation improvements [14:46] Mission: Review pending process/documentation pull-requests or issues [14:46] #link https://github.com/canonical/ubuntu-mir/pulls [14:46] #link https://github.com/canonical/ubuntu-mir/issues [14:47] unsure I will have time to go to your PR dviererbe this week, but nice to see this work! [14:47] No problem :) [14:48] I think for typos, an approval from a peer is enough to merge [14:48] ooo is there an easy way to see the rendered flowchart? [14:48] Just go to my repo [14:48] https://github.com/dviererbe/ubuntu-mir/tree/modernize-process-states-overview [14:48] dviererbe: ah! [14:48] \o/ [14:48] that’s nice, I didn’t know that was rendered by GH! [14:49] I just learned about that this week [14:49] just used mermaid today and rendered a svg… [14:49] so ok, I have some PR to open :) [14:50] ok, let’s move to the next section [14:50] #topic MIR related Security Review Queue [14:50] Mission: Check on progress, do deadlines seem doable? [14:50] Some clients can only work with one, some with the other escaping - the URLs point to the same place. [14:50] #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir [14:50] #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=[MIR]&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir [14:50] Internal link [14:50] - ensure your teams items are prioritized among each other as you'd expect [14:50] - ensure community requests do not get stomped by teams calling for favors too much [14:50] #link https://warthogs.atlassian.net/jira/software/c/projects/SEC/boards/594 [14:50] sarnold: anything to mention at this point? [14:51] didrocks: eslerm finished cpdb-libs last week \o/ :) and we've assigned tasks around [14:51] ironic that for once, you are more on the security side than the reviewer side :p [14:51] I'm working on dbus-broker [14:51] oh, that will make seb128 happy [14:51] someone signed up for cargo, but since it is incomplete I'll suggest other cargo dependencies [14:52] unsure we got a conclusion on the maintaince side yet [14:52] yeah [14:52] ok, so good progress on that front :) [14:52] #topic Any other business? [14:52] the one missing piece from dbus-daemon does seem like a large risk.. [14:52] exactly [14:53] and we need to know where we are heading to, to prevent doing a MIR security review check for nothing [14:53] we're not interested in *two* running dbus daemons, one for system and one for user [14:53] I could hold off for now [14:53] maybe check with seb128 first, as he was the one checking with foundation IIRC [14:54] apart from breaking dbus (oh wait… broker, not breaker :p) anything else to note? [14:54] I'll ping ~mir-security-review-priority on MM [14:54] sounds good to me [14:54] I think eslerm ought to continue onwards; dbus is an integral part of everything, and getting issues with it sorted out as early as possible seems like a good approach [14:54] I'll just do what Seth suggests :D [14:54] ack! [14:55] and even if we decide to stick with what we've got because it meets gdm's needs, maybe we'll find useful things for upstream to work on before we return [14:56] oh yes! we missed the .../issues/ section earlier [14:56] https://github.com/canonical/ubuntu-mir/issues [14:56] I just added one about team members :) and eslerm added one a few days ago https://github.com/canonical/ubuntu-mir/issues/22 [14:56] -ubottu:#ubuntu-meeting- Issue 22 in canonical/ubuntu-mir "re-ACK after a set time period" [Open] [14:56] https://github.com/canonical/ubuntu-mir/issues/24 has been "opened" for years [14:56] -ubottu:#ubuntu-meeting- Issue 24 in canonical/ubuntu-mir "More team members" [Open] [14:57] yeah, agreed on 22, but it’s also blocked on 24 still [14:57] anyway, I think we should discuss processes when more team members are around, wdyt? [14:57] +1 [14:57] +1 [14:57] now that it's written down somewhere, I can trust cpaelzer will be annoyed enough by it to try to drive that through to an answer of how we do this :) [14:57] heh, sounds good! [14:58] that's it for me [14:58] ok, going once… [14:58] going twice… [14:58] and here we go! Thanks everyone :) [14:58] thanks didrocks, dviererbe, eslerm, jbicha :) [14:58] #endmeeting [14:58] Meeting ended at 14:58:40 UTC. Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2023/ubuntu-meeting.2023-05-30-14.34.moin.txt [14:58] Thanks everyone! [14:58] thanks for hosting didrocks \o/ [14:58] yw! Have a good week [18:56] o/ [18:57] o/ [19:00] hey! :) [19:00] seb128: o/ you're up to chair I think? [19:00] yes [19:01] #startmeeting Technical Board [19:01] Meeting started at 19:01:04 UTC. The chair is seb128. Information about MeetBot at https://wiki.ubuntu.com/meetingology [19:01] Available commands: action, commands, idea, info, link, nick [19:01] #topic Action Review [19:02] ups [19:02] #topic Apologies [19:02] I don't see any on the list/wiki [19:02] Lukasz doesn't seem to be online though [19:03] anyway, let's move one [19:03] * vorlon waves [19:03] #topic Action Review [19:03] ACTION: amurray to follow up with backporters team on Mattia's draft charter proposal [19:03] amurray, did you get a reply since the previous meeting? [19:03] No - I've sent two emails to the backporters team asking them to ack mattia's proposal but had no response still [19:04] :-/ [19:04] :-( [19:04] At the last meeting I said this: [19:04] It'd be nice to see a conclusion on this. I wonder if it would be appropriate to set a deadline at some point, and if no reply then we just use the current draft and call it done. I wouldn't mind it being long eg. months, but it'd be nice to have _some_ end point. [19:04] I'm +1 with that [19:04] We've already adjusted the draft to their suggestion, dropping what I had originally proposed. [19:05] also +1 [19:05] Could we agree that this draft becomes final at some future date now, and encourage the backporters team to engage with us if they disagree? [19:05] I agree - how about I send one more follow-up later today and stipulate that if we get no response within another 2 weeks (that would be over 1 month since my original email asking for their ack) then this will become final [19:05] eg. two months from today, so 30 July. [19:05] Sure. [19:06] I think that should be the default. We want the involved teams to be on board with what we rule, but if they're not going to engage, it's the TB who has the authority here [19:06] I'm easy on the actual date as long as we set one :) [19:06] I was going to suggest start of July, seems similar timeframe [19:06] Sounds like we're all on the same page, so as amurray is driving I suggest he sets the date as he feels appropriate. [19:06] +1 [19:07] sure - I prefer going with say 2 weeks to avoid this dragging on much longer [19:07] Sure [19:08] so June 13 ? [19:08] FWIW, we should also work with some of the other teams to establish some similar documentation. I'm not trying to single out the backporters team here! In the past few years, questions have arisen on the scope of the DMB's role, as well as AAs. [19:09] I suggest June 12th - that way it falls just before the next TB meeting [19:09] +1 [19:10] Though, to be clear, I don't think it should take a further TB meeting to agree. We're agreeing it now :) [19:10] (but I welcome further discussion at a TB meeting should it arise) [19:10] indeed - but this way at that meeting we have a clear outcome with any luck [19:11] #agreed amurray to send one more follow-up later today to the backporters team and stipulate that if we get no response before June 12th then this will become final [19:11] AGREED: amurray to send one more follow-up later today to the backporters team and stipulate that if we get no response before June 12th then this will become final [19:11] also means that if there is any feedback given on the current draft we can quickly ratify those changes [19:12] seb128: o/ [19:12] k, let's move on? [19:12] rbasak, yes? [19:12] Minor point: "if we get no response before" -> that sounds like if they respond, then it won't become final. [19:12] how do I edit an agreed? :p [19:13] But I think we just agreed to make it final regardless, on 12 June, unless the TB (and only the TB) decide otherwise before that date. [19:13] You can use #undo [19:13] #undo [19:13] Removing item from minutes: AGREED [19:13] Then #agreed something else [19:13] thanks [19:14] #agreed amurray to send one more follow-up later today to the backporters team and stipulate that we set June 12th as the limit for changes to the draft unless the TB decides otherwise [19:14] AGREED: amurray to send one more follow-up later today to the backporters team and stipulate that we set June 12th as the limit for changes to the draft unless the TB decides otherwise [19:15] better? [19:15] Sure [19:15] Thanks [19:15] thanks! [19:15] moving on [19:15] ACTION: seb128 to help draft an exception to the "must build on all architectures" requirement for snaps [19:15] I'll discuss the status of the draft in a bit. [19:15] But we're a bit blocked on this now :-/ [19:16] sorry, I've still been struggling with finding time for those items but rbasak started editing which pushed me to go back to it now [19:16] ACTION: seb128/amurray/sil200 to help drafting the snap-store Ubuntu-specific tracks usage [19:16] similar [19:16] ACTION: rbasak to draft a proposal of the DMB-proposed inactivity expiration policy for TB ratification [19:16] Carry this please - I've been focused on the other thing [19:16] ACTION: sil2100 to start a draft summarizing the OEM archive portion of the meeting which x-nox and TB will review, edit, and ratify before we move on to figuring out the next step [19:17] Carry again I guess, as he's not here [19:17] Lukasz is not around today so that's another carry over [19:17] #topic Scan the mailing list archive for anything we missed (standing item) [19:17] nothing recent on the list [19:17] I see some emails from amurray :-P [19:17] lol [19:17] #topic Check up on community bugs and techboard bugs [19:18] Oh, did we lose the progress item on the third party repository requirements doc in general? I'd like to discuss that please. [19:18] same [19:19] rbasak, I was expecting that it come as an AOB since we don't have a specific item on the agenda for it [19:19] ack [19:19] but yes we should add it back as an action [19:19] #info No new community bug activity [19:19] #topic Select a chair for the next meeting [19:20] next would be vorlon and if we follow the ordering on the launchpad page Lukasz as a backup [19:21] #info vorlon will chair next, with sil2100 as backup [19:21] * vorlon nods [19:21] #topic third party repository requirements status update [19:21] rbasak, ^ [19:22] I have been working on the doc and I think it's ready. Apart from the appendices and the wording of the "build on all architectures exception" for the desktop packages that I think, we agree we need. [19:22] fwiw I have another topic for AOB after this [19:22] Next, I'd like to publish this for wider feedback. [19:22] Before I do that, could the TB please review the main body of the document and check you're happy with it? [19:22] Perhaps we could give all TB members an opportunity to do that before our next meeting? [19:22] sounds good to me [19:22] rbasak: so I noticed there is nothing in the document regarding testability- ie. how do we integrate a seeded snap with britney? [19:23] And unless there are any further comments from the TB, I'll present that as the TB's draft position, pending further feedback. [19:23] amurray: I'm not sure I follow [19:24] do we want to stipulate that a seeded snap must be able to be tested / have some tests that can be run to ensure it is "stable" before being released? [19:24] I think we should definitely do those things. But I'm not sure it should be within the scope of this doc - just as we leave the specifics of how to test debs up to Ubuntu developers. [19:25] For example a package can be a deb in the Ubuntu archive with no tests whatsoever - that's currently permitted, even if it's not best practice. [19:25] well we have a MIR process, it sort of opens the question of it should apply to snaps that we want seeded [19:25] Currently the MIR team may decide to permit something in main without tests though, without involvement of the TB. [19:26] So in my mind, for a seeded snap, we're leaving that kind of decision to the Ubuntu developer making the change (in the seed, presumably). [19:26] It's a good question though. [19:27] I don't want to be too specific here - but I do want to make sure that we can maintain quality for any third party packages and I see testing as a big part of that [19:27] Do you think we should require something? And if so, would we require this for debs as well? [19:27] amurray: I see your concern addressed by "Proposed requirement C: the package maintainer agrees to maintain the package for the lifetime of the Ubuntu release" already [19:27] And the paragraph that says "the precise meaning of "maintain", is enforced by trust only" [19:28] IOW - we agree that this is important, but we aren't dictating the specifics [19:28] agreed w/ rbasak on this [19:28] but should a pre-installed snap get a +1 from the MIR team? [19:29] I like that idea but think we should discuss it with the MIR team first to make sure they're comfortable taking on that duty [19:30] for debs we have britney and proposed-migration that enforces a level of quality on SRUs (assuming there are dep8 tests etc) by doing automated testing - if cups becomes a snap, how do we make sure it doesn't regress on updates in future releases? a lot of stuff depends on cups so I see this as important (as a topical example) [19:30] I have no objection to a process requirement to get a review from some appropriate team [19:30] But whether that's the TB, the MIR team, or some new kind of snap-MIR team, is an open question I think. [19:31] Another option might be to start softer - by requiring such changes to be announced eg. to ubuntu-devel@ and be done before eg. feature freeze. That would allow the TB to object, but without the friction of a team requiring an approval. [19:32] Or indeed to give some notice before doing it [19:32] (or committing to doing it) [19:33] amurray: would that address your concern with your cups example? [19:33] yes I think that would work [19:34] thanks [19:34] So I'm open to any of the above. I would add it as a snap-specific policy requirement in the document (so into appendix C) [19:34] Which of those options should I take? [19:35] Personally I think I'd favour "soft, with notice" if that works for everyone? [19:35] +1 [19:36] +1 [19:36] +1 [19:37] I'll write that up then. Thanks! [19:37] thank you :) [19:37] So, to summarise, homework for the TB: you have until the next meeting to study the doc and raise any other concerns you may have at the next meeting. [19:38] And I'll write up the "snap MIR" process (just notice) requirement into appendix C. [19:38] Any other comments on this topic for today? [19:38] none from me [19:39] #agreed the TB members have until the next meeting to review the third party repository requirements document and raise concerns [19:39] AGREED: the TB members have until the next meeting to review the third party repository requirements document and raise concerns [19:39] #topic AOB [19:39] vorlon, ? [19:40] last meeting we talked about the question of core teams governance [19:40] I had just sent an email to the private thread, which I understood folks had the action to review and reply to? [19:40] I haven't seen any responses yet :) [19:40] Oh, right [19:41] IIRC, we said we'd make it public today? [19:41] yes, in fact I wanted to mention that, it's another of those action items I failed at acting on [19:41] going back to meeting log to see what we said [19:41] would people be ok to postpone until the next meeting? [19:42] https://irclogs.ubuntu.com/2023/05/16/%23ubuntu-meeting.html#t19:10 [19:42] Lukasz hasn't been around/commented on it [19:42] Sure. The thread hasn't had any activity recently. Perhaps we could agree that all further discussion on that topic can be expected to be public? [19:42] weeks were given and no objections were raised, so maybe "replay the thread but publicly" is the correct next action here? [19:42] +1 [19:42] wfm [19:42] +1 [19:43] in which case I guess it would be an action for seb128 to kick it off? :) [19:43] if I correctly understand what is meant by "replay" [19:43] That was my wording IIRC, and yes I think you do. [19:44] #agreed seb128 to resend 'core teams governance' email to the public techboard list [19:44] AGREED: seb128 to resend 'core teams governance' email to the public techboard list [19:44] Because if seb128 posts it, then I can provide basically the same reply I did privately, and then the public will be able to follow my position/opinion on it. [19:44] #undo [19:44] Removing item from minutes: AGREED [19:44] #agreed seb128 to resend the 'core teams governance' email to the public techboard list [19:44] AGREED: seb128 to resend the 'core teams governance' email to the public techboard list [19:44] any other AOB? [19:45] nothing from me [19:45] nor me [19:45] None from me. [19:45] ok, it's a wrap then, thanks everyone! [19:45] Thank you all for a productive meeting! [19:45] #endmeeting [19:45] Meeting ended at 19:45:21 UTC. Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2023/ubuntu-meeting.2023-05-30-19.01.moin.txt [19:45] (heh "any other AOB" :) [19:45] thanks, all! [19:45] sarnold, :p [19:45] sarnold: "AOOB" [19:45] lol [19:45] thanks folks === Bashing-1m is now known as Bashing-om === bdrung_ is now known as bdrung === JanC is now known as Guest503 === JanC_ is now known as JanC