/srv/irclogs.ubuntu.com/2024/04/16/#ubuntu-meeting.txt

=== JanC is now known as Guest310
=== pushkarnk1 is now known as pushkarnk
=== pushkarnk1 is now known as pushkarnk
=== pushkarnk1 is now known as pushkarnk
=== pushkarnk1 is now known as pushkarnk
=== dviererbe1 is now known as dviererbe
=== dviererbe1 is now known as dviererbe
=== dviererbe1 is now known as dviererbe
cpaelzero/14:30
jbichao/14:30
slyono/14:30
joalifo/14:30
seb128o/14:31
sarnoldgood morning14:31
eslerm_o/14:31
cpaelzer#startmeeting Weekly Main Inclusion Requests status14:32
meetingologyMeeting started at 14:32:03 UTC.  The chair is cpaelzer.  Information about MeetBot at https://wiki.ubuntu.com/meetingology14:32
meetingologyAvailable commands: action, commands, idea, info, link, nick14:32
cpaelzerPing for MIR meeting - didrocks joalif slyon sarnold cpaelzer jamespage ( eslerm dviererbe )14:32
cpaelzeractually almost everyone said hi already14:32
cpaelzerlet us start14:32
cpaelzer#topic current component mismatches14:32
cpaelzerMission: Identify required actions and spread the load among the teams14:32
cpaelzer#link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg14:32
cpaelzer#link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg14:32
acibaO/14:32
cpaelzerfirst trace-cmd and libtraceevent14:32
cpaelzertrace-cmd ready14:33
cpaelzerlibtraceevent ready as well14:33
slyonI think those are ready, but pending libtracefs, which still sees some tests issues on s390x & ppc64el14:33
cpaelzercan be promoted14:33
cpaelzerany opposing opinions?14:33
slyonwould it be OK to skip those architectures?14:33
cpaelzerI was going by the "all required TODOs" - thanks for reminding me14:34
slyon+1 for promoting trace-cmd + libtraceevent already. That would reduce the component mismatches already14:34
sarnoldare we suggesting to leave them buggy or change the arch: lines to remove those buggy arches?14:34
slyonit's already a mismatch, so .. meh14:34
cpaelzerwe do not really promote just some arches14:34
slyonI do not mean in promotion, but in the MIR test requirements14:34
slyoncc adrien14:34
cpaelzerI'm failing to find the test issues in the logs that are linked on libtracefs14:37
dviererbeo/14:38
cpaelzerI think if we not build this for ppc64 and s390x IBM and IBM users would be rather unhappy14:38
sarnoldhi dviererbe14:38
cpaelzerthe question is can it be fixed later14:38
cpaelzeror not14:38
cpaelzeris there new insight in that?14:38
slyonIMO we should still build it, but just accept ppc64el and s390x autopkgtest failing (for now) – to be fixed later14:38
slyonat least now we know that it's broken on ppc64el and s390x, whereas before (without tests) it was just broken14:39
sarnoldhttps://autopkgtest.ubuntu.com/packages/libtracefs -- some fails here?14:39
slyonsarnold: we just have the superficial test in the archive, still. adrien added _actual_ tests in his PPA, but those fail on ppc and s390x14:40
sarnoldahh14:40
cpaelzernow things make sense again14:40
slyonsee two latest comments on https://bugs.launchpad.net/ubuntu/+source/libtracefs/+bug/205192514:40
-ubottu:#ubuntu-meeting- Launchpad bug 2051925 in libtracefs (Ubuntu) "[MIR] promote libtracefs as a trace-cmd dependency" [Undecided, Incomplete]14:40
cpaelzerI think under those conditions, and given the time let us promote it but please commit to continue working with upstream and IBM to fix it14:40
slyonwe're on it already and it will show up in our usual proposed-migration report14:41
slyonadrien: Can you get the current tests uploaded into noble-proposed?14:41
cpaelzeryeah - and with then then promoting it14:41
adrienslyon: I'm preparing the MR right now14:42
adrienI'm also backlogging here (I arrived a minute ago)14:42
slyoncool, thanks. So let's move it to "In Progress" for now?14:42
cpaelzerit is already in mismatches14:42
cpaelzerso someone else would not understand why not fix comitted14:42
slyonoh right14:42
adrienI also updated the LP bug not long ago so some of you might have to refresh the page14:42
cpaelzerslyon: you might do a summary what we decided here as a comment14:42
slyonWill do.14:43
cpaelzerthanks14:43
cpaelzerGoing on to get more cases discussed14:43
cpaelzerfrom the proposed mismatches14:43
cpaelzerpython-boto3 and botocore and s3transfer14:43
adrienthanks14:43
cpaelzerI've done a review on all of them, but the cases were not yet fully ready for a post and since then I'm debugging the beta14:43
cpaelzerI can post my reviews in a bit, but here the TL;DR14:44
cpaelzerboto3 abd botocore are fine - they mostly lack tests which aciba is working on right now14:45
cpaelzerthe important thing is that they replace something much worse14:45
cpaelzerthe old version has been discontinued by upstream ages ago and isn't compatible with the python in noble14:45
cpaelzerSo we have two options:14:45
cpaelzerremember: they are ok once the tests land, but need security review then14:46
cpaelzera) schedule a security review, but let them in now14:46
cpaelzerb) do not promote them in time for noble14:46
cpaelzerI do not consider an asap review it the next hours a fair ask for @security14:46
slyonIs this a release blocker?14:47
cpaelzermy argument for (a) would be that all that is proposed while not yet having a review is replacing code that is much older and worse14:47
slyonI assume the issue is that we do not want to support the old unmaintained thing for 10+ years?14:47
cpaelzerit is a maintenance concern14:47
cpaelzeraciba: who joined works on it the last few days14:47
slyonI have a tendency towards (a) as well, but this is cutting corners with security review..14:47
cpaelzerit is not breaking the release, hence no strict blocker - but it would be much much better14:48
cpaelzersarnold:  or eslerm_ what do you think about (a) vs (b)14:48
sarnoldthere's apparently some new code in here, too "Whilst looking at the package with Alberto, we found that python3-s3transfer, one of the boto3's runtime dependencies, is in Universe, too."14:48
cpaelzeryep, the old python-boto did it all by itself14:48
cpaelzerupstream broke that up in individual libs to do these things14:48
sarnoldmoving from boto to boto3 on its own isn't *too* worrying. I'm unhappy that this is only discovered this week but I can kinda understand how we got here. but dragging in a whole new s3 support layer is big ask in the final week.14:49
sarnoldis this the old boto s3 support split out?14:49
sarnolddoes anything else use this s3 support?14:49
cpaelzerAFAICS boto3 and botocore are split out evolutions14:49
cpaelzers3transfer is only used by boto14:50
sarnolddo we actually care about s3 for simplestreams?14:50
cpaelzerin fact it is only considered to be useful in boto3 as they evolve together14:50
sarnoldcan we stub it out?14:50
cpaelzeraciba: ^^ ?14:50
acibaI think we can, I superficially grep cpc and mass code and they do not use it14:51
cpaelzerI assume the problem is that we might beak other users of that library if we'd remove s3 from boto314:51
acibabut I am not 100% sure14:51
sarnoldhmm. good point. sigh.14:51
cpaelzerall those three are the newer set of libs14:51
cpaelzerand it would allow to demote the old unmaintained one14:51
cpaelzerthat is kind of what makes me suggest to let them in and demote the old14:52
cpaelzerand schedule but not wait for the security review14:52
sarnoldiff you can do both operations in the same minute...14:52
cpaelzerthe code isn't new - it is just universe -> main14:52
cpaelzeryeah - I can do both at once once ready14:52
cpaelzerwaiting for the tests by aciba14:52
cpaelzerwe'd like to get this out of proposed by ~tomorrow I'd assume to not be in the way of RC images14:53
cpaelzeraciba: can you get tests done by mid day tomorrow?14:53
sarnoldI think I'm coming around to your way of thinking, but I'm not real keen on "just wait until the last week" being used as a way to get beyond the MIR process.14:53
eslerm_^14:53
cpaelzersarnold: I agree, but have no better option14:53
acibaI have 3 MRs up, adding build tests and autopkg test, I am verifying autopkgtest work14:53
sarnoldcpaelzer: I mean, the kernel team had their kernels yanked from the upcoming release due to missing deadlines14:53
acibaI think I could, assuming I have someone reviewing, pushing to -proposed14:54
cpaelzerand they add it back as we speak14:54
cpaelzerI'm unsure - should we vote14:55
cpaelzerthis isn't perfect and clean . otherwise we would have settled by now14:55
cpaelzerbut even time for the meeting runs out :-/14:55
sarnoldheh :(14:55
cpaelzerso to get conclusion on this non-easy case ...14:55
sarnoldyeah, I'm fine with a vote14:55
sarnoldbut I'd like us to consider how to avoid this situation in future cycles14:56
cpaelzerI guess we can be sure that noboday wanted or planned for this14:56
eslerm_I would really like to see an unmaintained package leave main, otoh there is not time to review and s3 is something that certainly needs security review14:56
cpaelzerthe problem is that simplestreams being in an ownership nimbus between teams14:56
cpaelzerCalling for a vote +1 to let it in under the mentioned constraints (add tests, schedule security review, follow up on findings) -1 to keep the deprecated old python-boto14:57
cpaelzer+1 (for a lack of a better option)14:57
slyon+1 (same)14:57
sarnold+1 (but grumpy about it)14:57
eslerm_+/- 0 (non-vote)14:57
cpaelzerjoalif: didrocks: around?14:57
joalifsorry in other meeting as well, +114:58
cpaelzerthanks14:58
* cpaelzer is sad that there is nothing better14:58
cpaelzerbut thanks for everyones understanding14:58
cpaelzerand thanks aciba to pick this up in the first place14:58
cpaelzeror we would not even have that option to discuss14:58
acibathanks!14:58
cpaelzeraciba: I'll later complete and post my review14:58
cpaelzerand let you know if there is something big other than waiting for tests14:59
sarnoldaciba: aye, yes, please don't take this personally. it's better to find and point it out. i'm just dissapointed that we didn't find this in the previous N cycles.14:59
cpaelzerI'd then bring it up in tomorrow daily release meeting14:59
=== dviererbe1 is now known as dviererbe
cpaelzerto get an ack by release folks before moving it in (or killing it if they object)14:59
acibasweet thanks. yeah, totally not taken as personally!14:59
cpaelzerso the target to be ready is 4pm CET14:59
cpaelzerI think we are out of time15:00
cpaelzerjust quickly the lists ...15:00
cpaelzer#topic New MIRs15:00
cpaelzerMission: ensure to assign all incoming reviews for fast processing15:00
cpaelzer#link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir15:00
cpaelzeras I said all boto cases to me15:00
cpaelzermsgraph ?15:00
slyonI think that should be ready for promotion. See https://bugs.launchpad.net/ubuntu/+source/msgraph/+bug/2060035/comments/5 for the libgoa-* confusion15:01
-ubottu:#ubuntu-meeting- Launchpad bug 2060035 in msgraph (Ubuntu) "[MIR] msgraph" [Undecided, Confirmed]15:01
slyonWe should actually drop the libgoa-* requirement instead, due to not being relevant anymore15:01
cpaelzerand security review in15:01
eslerm_also https://github.com/canonical/ubuntu-mir/issues/5415:01
-ubottu:#ubuntu-meeting- Issue 54 in canonical/ubuntu-mir "Remove libgoa from the upstream redflags" [Open]15:01
cpaelzerso state "in-progress" then?15:01
cpaelzerI didn't see it in mismatches15:02
slyonyes. Also needs a team bug-subscriber15:02
* slyon adding a comment15:02
cpaelzeralready done15:02
slyonok15:02
cpaelzer#topic Incomplete bugs / questions15:02
cpaelzerMission: Identify required actions and spread the load among the teams15:02
cpaelzer#link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir15:02
cpaelzeronyl the dmarc case15:03
cpaelzerwhich was the huge tree15:03
cpaelzerI'm afraid we can't change all in one day15:03
cpaelzerreading ...15:03
eslerm_I reached out to the developers concerning https://github.com/rjbs/Email-MIME/issues/66 but have not heard back15:06
-ubottu:#ubuntu-meeting- Issue 66 in rjbs/Email-MIME "DoS on excessive or deeply nested parts" [Open]15:06
eslerm_likely deserves a CVE regardless15:07
cpaelzerran out of time and into concurrent meetings15:08
cpaelzersorry15:08
cpaelzerlet us skip docs and GH issues - not much there15:09
cpaelzerimportant to not miss if anyone was waiting might be15:09
cpaelzer#topic Any other business?15:09
slyonThis is the libgoa-* issue: https://github.com/canonical/ubuntu-mir/issues/5415:09
cpaelzerno more special cases from me15:09
-ubottu:#ubuntu-meeting- Issue 54 in canonical/ubuntu-mir "Remove libgoa from the upstream redflags" [Open]15:09
sarnoldof the list of packages at the end of comment 29 on Bug #2023971 only libemail-simple-perl wasn't in main already, and that's got a MIR ack15:09
-ubottu:#ubuntu-meeting- Bug 2023971 in libmail-dmarc-perl (Ubuntu) "[MIR] libmail-dmarc-perl" [High, Incomplete] https://launchpad.net/bugs/202397115:09
slyonplease everybody take a look after the meeting and give your feedback on GitHub.15:09
eslerm_libyuv needs a security reviewer still15:09
sarnoldI completely forgot to do the nbd-client review from last week :( sorry.15:10
slyoneslerm_: on libyuv, Final Freeze should be fine as the latest possible deadline. vpa1977 is preparing the packaging changes in parallel15:10
dviererbeIs there any action needed from me for the seedchange of dotnet6/8 on mantic jammy?15:10
sarnolddviererbe: did you submit a merge request for the seed?15:10
eslerm_I'll see if we can get a reviewer assigned asap15:10
slyoneslerm_: thanks!15:10
sarnoldhttps://git.launchpad.net/~ubuntu-core-dev/ubuntu-seeds/+git/ubuntu/commit/?id=000b7f04d17867dd38b8f94f54d594aff4d274f115:11
-ubottu:#ubuntu-meeting- Commit 000b7f0 in ~ubuntu-core-dev/ubuntu-seeds/+git/ubuntu "Add dotnet8 to additional supported languages."15:11
slyonsarnold: yes we did that15:11
slyonIt just needs an AA to promote it. (But it might be hidden from reports, due to being a retroactive promotion)15:12
slyondviererbe: I assume poking AAs about it is your best bet15:12
sarnoldaha, cool; that entire end of the world is pretty hazy :) i'm not sure what else was necessary, I just knew this step remained, hehe15:12
sarnoldyeah, I think pop into #ubuntu-release and mention it and see if anyone's around15:13
dviererbeOh.. sorry I see it is merged now. My last update was that it still needs review... waiting on AA then15:14
slyondviererbe: waiting might not be enough, though. As the reports only show things about devel/noble. So it might need active pokes to make people look at it15:15
didrocks(back, waow a lot of backlog!)15:15
sarnoldhey didrocks :)15:16
didrockso/15:16
sarnolddviererbe: you may have missed: < slyon> dviererbe: waiting might not be enough, though. As the reports only show things about devel/noble. So it might need active pokes to make people look at it15:17
sarnolderr, dviererbe1 rather ^^15:18
=== dviererbe1 is now known as dviererbe
slyonsarnold: I'll forward that bit to him on internal channels .)15:19
slyon:)15:19
dviererbesarnold: Okay poking an AA then. (My internet connection is currently not the best :/)15:20
slyonnvm15:20
sarnoldheh yeah, ping timeouts from irc means something is in pretty bad shape, it's a very forgiving protocol :)15:20
sarnoldmy guess is this meeting has run its course, I propose we end it here :)15:21
sarnold315:22
sarnold215:22
sarnold115:22
sarnold#endmeeting15:22
meetingologyMeeting ended at 15:22:07 UTC.  Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2024/ubuntu-meeting.2024-04-16-14.32.moin.txt15:22
eslerm_o/15:22
sarnoldthanks cpaelzer, all :)15:22
slyonthanks all! o/15:22
didrocksthanks! I’ll finish backlogging :)15:22
dviererbeThanks everyone!15:22
sarnoldgood luck, hehe :)15:22
acibathanks all!15:22
cpaelzerok then15:34
cpaelzerengind15:34
cpaelzer#endmeeting15:34
cpaelzernice, thanks sarnold for already doing it :-)15:34
cpaelzerthese weeks should not be seen by a stress doctor :-)15:34
adrienI did some last minute cleanups for libtracefs so I'm going to give this another round of test to make sure I didn't introduce syntax errors15:51
adrienhttps://code.launchpad.net/~adrien-n/ubuntu/+source/libtracefs/+git/libtracefs/+merge/46443415:55
adrienand I'll call it EOD, at least until the PPA builds and the tests run15:55

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!