/srv/irclogs.ubuntu.com/2024/11/12/#ubuntu-meeting.txt

slyono/15:32
sarnoldgood morning15:32
jbichao/15:33
slyondo we have any MIR quorum today?15:33
sarnoldit's looking like no, heh15:34
joalifo/15:34
sarnoldclassic irc, say something, and there's a counterexample immediately :)15:34
slyonhaha, not sure if c_paelzer is around... let me get this started.15:35
joalif:D15:35
sarnold#startmeeting Weekly Main Inclusion Requests status15:35
meetingologyMeeting started at 15:35:12 UTC.  The chair is sarnold.  Information about MeetBot at https://wiki.ubuntu.com/meetingology15:35
meetingologyAvailable commands: action, commands, idea, info, link, nick15:35
sarnoldPing for MIR meeting - didrocks joalif slyon sarnold cpaelzer jamespage ( eslerm dviererbe )15:35
sarnold#topic current component mismatches15:35
sarnoldMission: Identify required actions and spread the load among the teams15:35
sarnold#link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg15:35
sarnold#link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg15:35
sarnoldwow so much qt615:35
slyonI pushed some seed changes to hopefully get rid of the qt5 & qt6 trees earlier today.15:36
sarnoldwoot15:36
slyonAlso I cleaned up the sbuild->mmdebstrap and investigated libgit2 (more about this in AOB)15:36
jbichathere was a request for an archive admin to demote new gpgme binaries for qt615:36
sarnoldtmux to jemalloc, server team ..15:36
slyonjbicha: do you have a reference?15:36
slyonI added extra includes for the new libqgpgme* packages15:37
sarnoldi'm always skeptical of packages that "need" a fancy malloc, I hope this can be cleaned up. (nothing against jemalloc..)15:37
slyon*extra-excludes15:37
jbichaslyon: https://irclogs.ubuntu.com/2024/11/03/%23ubuntu-release.html#t18:3815:37
slyonthx15:37
slyoncpaelzer: should investigate/delegate tmux15:37
sarnoldlibgit2 -> node-undici looks to be foundations, too? perhaps the http parser gizmo has a new requirement? I had the impression that there might be a good replacement for the http gizmo they were using, so there might be a very nice outcome there..15:38
sarnoldpython-osprofiler -> python-jaeger-client looks like openstack, is that one for jamespage to either file MIRs (my guess) or remove the dep?15:39
slyonsarnold: Yes, I updated the attached MIR bug report. lining out 3 options, and would like to get some security team insights about the different approaches15:39
sarnoldslyon: oh sweet :)15:39
sarnoldplucky kernel seed feels like an aa thing to handle, another one for cpaelzer in a free moment?15:39
sarnoldpython-pint -> flexcache and flexparser, feels like another jamespage thing to drive15:40
slyonack, or maybe the kernel team themselves? Not sure who handles those usually, but they tend to go away after a while :)15:40
sarnoldslyon: lol yes :)15:40
sarnoldlogcheck->esmtp feels like it'd be nice to take off the graph this cycle, through whatever means :)15:40
jamespagesarnold: probably - I'll take a look this week15:41
sarnoldjamespage: thanks :)15:41
sarnoldso .. that leaves the various unapproved MIRs .. we should probably try to figure out where each one of those is at, and see if they need assignment, or a poke, etc15:42
sarnoldhttps://bugs.launchpad.net/ubuntu/+source/jpeg-xl/+bug/2070882 and https://bugs.launchpad.net/ubuntu/+source/highway/+bug/2070807 -- looks like these are back to jbicha for the moment15:42
-ubottu:#ubuntu-meeting- Launchpad bug 2070882 in jpeg-xl (Ubuntu) "[MIR] jpeg-xl" [Undecided, New]15:42
slyonACK, we probably want the original MIR reviewer to validate/update the case15:42
-ubottu:#ubuntu-meeting- Launchpad bug 2070807 in highway (Ubuntu) "[MIR] highway" [Undecided, New]15:42
sarnoldhttps://bugs.launchpad.net/ubuntu/+source/libgit2/+bug/2080872 is looking for advice, so please everyone give this a look and advise :) https://bugs.launchpad.net/ubuntu/+source/libgit2/+bug/208087215:43
-ubottu:#ubuntu-meeting- Launchpad bug 2080872 in node-undici (Ubuntu) "replace unmaintained http-parser dependency with llhttp" [Undecided, New]15:43
jbichaI believe jpeg-xl & highway are ready. architecture-properties also15:43
sarnoldhttps://bugs.launchpad.net/ubuntu/+source/architecture-properties/+bug/208096515:43
-ubottu:#ubuntu-meeting- Launchpad bug 2080965 in architecture-properties (Ubuntu) "[MIR] architecture-properties" [Low, New]15:43
slyonjoalif: can you double-check jpeg-xl15:44
slyon?15:44
sarnoldjbicha: could you add comments to the bugs with the current states? I thought jpeg-xl might still be waiting on security review? (but I haven't really looked in N weeks)15:44
slyonI will double-check highway15:44
slyonand I will double-check architecture properties15:44
sarnoldarchitecture-properties confuses me, there's a bunch of i386 discussion there, but I thought this package was mostly about indicating 64 bit in general, or which flavor of amd64 instruction sets it supports?15:45
sarnoldwell, I might as well put that in the bug, I may not be the only one curious :)15:46
slyonsarnold: I think it also provides some "is-32bit" / "is-64bit" (or alike) conditions15:47
slyonso would be good to have on i38615:47
jbichaslyon: oops, jpeg-xl is blocked for security review, which means highway doesn't need to be promoted yet15:47
slyonok. Let's assign it to ubuntu-security then15:48
sarnoldcool cool15:48
sarnoldhttps://people.canonical.com/~ubuntu-archive/component-mismatches.svg15:48
sarnoldall covered15:48
slyonack15:48
sarnoldmaybe we ought to swap the order of these links? heh15:48
sarnold#topic New MIRs15:49
sarnoldMission: ensure to assign all incoming reviews for fast processing15:49
sarnold#link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir15:49
sarnoldlooks like all four covered already15:49
sarnold#topic Incomplete bugs / questions15:49
sarnoldMission: Identify required actions and spread the load among the teams15:49
sarnold#link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir15:49
slyonI created tracking bug #208793715:49
-ubottu:#ubuntu-meeting- Bug 2087937 in sbuild (Ubuntu) "[MIR] mmdebstrap" [Undecided, In Progress] https://launchpad.net/bugs/208793715:50
slyonnothing actionable for us. I downgraded the Recommends in sbuild15:50
sarnoldis ther any appetite for considering a switch to mmdebstrap? I understand it's way faster than debootstrap, and if this unshare mode is nice it might also be an improvement over chroots?15:51
slyonI remember some recent discussion in Foundations about using it in ubuntu-image, which was rejected15:51
slyon(I can dig up the details, if needed)15:51
sarnoldit might be nice, I'm probably not the only one curious :)15:52
slyonI'll add a link to the LP bug15:52
joalif@slyon @jbicha wrt to jpeg-xl it needs a sec review plus highway to promoted15:52
sarnoldhttps://bugs.launchpad.net/ubuntu/+source/lenovo-wwan-unlock/+bug/2058192 is coming along nicely, it looks like they made some changes https://github.com/lenovo/lenovo-wwan-unlock/commit/255ec187a428a99710d0e44b165ee95436952830 so that's probably on me to review15:53
-ubottu:#ubuntu-meeting- Launchpad bug 2058192 in OEM Priority Project "[MIR] lenovo-wwan-unlock" [Critical, Confirmed]15:53
-ubottu:#ubuntu-meeting- Commit 255ec18 in lenovo/lenovo-wwan-unlock "An unconfined execute permission is too broad.(#31) (#32)"15:53
sarnoldhttps://bugs.launchpad.net/ubuntu/+source/linuxptp/+bug/2071717 looks like it's "back to ther reporter to handle this"? probably we can skip looking at the rest of this list15:54
-ubottu:#ubuntu-meeting- Launchpad bug 2071717 in linuxptp (Ubuntu) "[MIR] linuxptp" [Undecided, Incomplete]15:54
slyonnothing new in here ^ needs more work by the OEM team15:54
sarnold#topic Process/Documentation improvements15:54
sarnoldMission: Review pending process/documentation pull-requests or issues15:54
sarnold#link https://github.com/canonical/ubuntu-mir/pulls15:54
sarnold#link https://github.com/canonical/ubuntu-mir/issues15:54
sarnoldI seriously wish for a date from github on most recent change to a thing; anyway it feels like these are fine15:55
sarnold#topic MIR related Security Review Queue15:55
sarnoldMission: Check on progress, do deadlines seem doable?15:55
sarnoldSome clients can only work with one, some with the other escaping - the URLs point to the same place.15:55
sarnold#link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir15:55
sarnold#link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=[MIR]&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir15:55
sarnoldInternal link15:55
sarnold- ensure your teams items are prioritized among each other as you'd expect15:55
sarnold- ensure community requests do not get stomped by teams calling for favors too much15:55
sarnold#link https://warthogs.atlassian.net/jira/software/c/projects/SEC/boards/59415:55
sarnoldhmm importance sort is probably not the best (it never is)15:55
sarnoldwell, here's hoping that this cycle is more effective than last cycle.. it's sad seeing last cycle's stuff on here :(15:57
sarnoldI'm concerned about fdk-aac-free -- that code felt pretty abandoned :(15:58
sarnoldotherwise i'll try to get some traction on these15:58
sarnoldplease do make sure the items in the jira are prioritised appropriately -- we can't always handle them in priority order, since we also try to match who is available with what is available with the time available, etc..15:59
sarnoldbut it certainly helps15:59
sarnoldso..15:59
sarnold#topic Any other business?15:59
slyonsarnold: I'd like you input on option A/B/C in https://bugs.launchpad.net/ubuntu/+source/node-undici/+bug/2080872/comments/2 – doesn't need to be ad-hoc, but maybe as a comment on LP15:59
-ubottu:#ubuntu-meeting- Launchpad bug 2080872 in node-undici (Ubuntu) "replace unmaintained http-parser dependency with llhttp" [Undecided, New]15:59
sarnoldslyon: ack, thanks for the reminder :)16:00
slyonbasically, we have no proper libllhttp package, so should consider how to vendor it16:00
sarnoldoh dang, I was hoping it was "replace it with something less weird" :)16:00
slyonwell... its typescript being transpiled to C and then vendored as a shared object... tell me about weird :)16:01
sarnold*shudder*16:01
sarnoldif that's it...16:02
sarnold#endmeeting16:02
meetingologyMeeting ended at 16:02:04 UTC.  Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2024/ubuntu-meeting.2024-11-12-15.35.moin.txt16:02
sarnoldthanks all :)16:02
slyonthanks sarnold for running the meeting today!16:02
joalifthanks all :)16:02
=== nicoz- is now known as nicoz

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!