/srv/irclogs.ubuntu.com/2025/02/11/#ubuntu-meeting.txt

=== JanC is now known as Guest7443
=== JanC is now known as Guest4906
=== JanC is now known as Guest5649
sarnoldgood morning15:30
cpaelzer#startmeeting Weekly Main Inclusion Requests status15:30
meetingologyMeeting started at 15:30:39 UTC.  The chair is cpaelzer.  Information about MeetBot at https://wiki.ubuntu.com/meetingology15:30
meetingologyAvailable commands: action, commands, idea, info, link, nick15:30
cpaelzerPing for MIR meeting - didrocks joalif slyon sarnold cpaelzer jamespage ( dviererbe )15:30
jbichao/15:30
cpaelzer#topic current component mismatches15:30
slyono/15:30
cpaelzerMission: Identify required actions and spread the load among the teams15:30
cpaelzer#link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg15:30
cpaelzer#link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg15:30
joalifo/15:30
cpaelzergiven the number of MIR cases in my inbox I assume a lot today ...15:31
slyonflexparser (from python-pint) are ready for promotion as of today (needs AA)15:31
cpaelzerthanks slyon, let me open and enqueue them15:31
cpaelzerflexcache as well?15:32
slyonthat would be https://launchpad.net/bugs/2089037 and https://launchpad.net/bugs/208903615:32
-ubottu:#ubuntu-meeting- Launchpad bug 2089037 in flexparser (Ubuntu) "[MIR] flexparser" [Undecided, Fix Committed]15:32
slyonyes15:32
-ubottu:#ubuntu-meeting- Launchpad bug 2089036 in flexcache (Ubuntu) "[MIR] flexcache" [Undecided, Fix Committed]15:32
slyonflexcache has been ready for a while IIRC15:32
cpaelzerI see, and it was me saying so :-)15:32
cpaelzerthe rest is known/old and being worked on15:32
cpaelzerexcept15:32
cpaelzerxdg-desktop-portal -> fonts-inter15:33
jbichahow do you want that handled? it's only a dev package with the font dependency15:33
slyonIt's a recommends, so should probably be dropped or use an Extra-Exclude15:33
slyonjbicha: can you Extra-Exclude the -dev package?15:33
jbichayes15:34
cpaelzergreat15:34
slyonthx!15:34
cpaelzerI've asked renan to summarize me the ruby-* path as he is looking into these15:34
cpaelzerhopefully I can tell you next week the steps there15:34
cpaelzer#topic New MIRs15:34
cpaelzerMission: ensure to assign all incoming reviews for fast processing15:34
cpaelzer#link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir15:34
cpaelzerthree to review15:35
cpaelzerhttps://bugs.launchpad.net/ubuntu/+source/rust-gst-plugin-gtk4/+bug/209780415:35
-ubottu:#ubuntu-meeting- Launchpad bug 2097804 in rust-gst-plugin-gtk4 (Ubuntu) "[MIR] rust-gst-plugin-gtk4" [Undecided, New]15:35
cpaelzerhttps://bugs.launchpad.net/ubuntu/+source/libva/+bug/209780015:35
-ubottu:#ubuntu-meeting- Launchpad bug 2097800 in libva (Ubuntu) "[MIR] libva" [Undecided, New]15:35
cpaelzerhttps://bugs.launchpad.net/ubuntu/+source/libsass/+bug/209558215:35
-ubottu:#ubuntu-meeting- Launchpad bug 2095582 in libsass (Ubuntu) "[MIR] libsass" [Undecided, New]15:35
cpaelzerstarting with libsass - some css magic I guess15:35
slyonI can take one15:35
joalifi'm working on python-libsass15:35
cpaelzerright joalif15:35
joalifI could take libsass15:35
jbichaI still need to vendor the rust package in the next few days but I thought I ought to at least get it in the queue15:35
cpaelzeroh I see, because it is the same overall topic15:36
cpaelzerthanks joalif15:36
joalifyup15:36
cpaelzerslyon: ugly rust or ugly video codecs - what do you prefer?15:36
slyonheh, whatever. Let me take rust-gst-plugin-gtk415:37
slyon(and ACK jbicha, I'll start looking into it early next week to give some headroom)15:37
cpaelzerok and the libva story for me15:37
jbichathank you15:37
cpaelzerI know that years ago I wanted it myself, so you have +1 karma credit for requesting it15:37
cpaelzer#topic Incomplete bugs / questions15:38
cpaelzerMission: Identify required actions and spread the load among the teams15:38
cpaelzer#link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir15:38
cpaelzertop three was updated right before the meeting15:38
cpaelzerreading ...15:38
jbichapapers is NEW but 25.10 material at this point and is also rusty and needs to be vendored15:39
slyonraspi-utils and ubuntu-x1e-settings are only status updates. getting close but not yet ready15:39
cpaelzerok, so this isn't ready yet and will be NEW once it is15:39
cpaelzeryes slyon^15:39
cpaelzerglad they are on the way and going well so far15:39
cpaelzerlibcamera and nbd (also by the Rpi people) should be promotable soon, just waiting for them to show up in mismatches15:40
cpaelzer#topic Process/Documentation improvements15:40
cpaelzerMission: Review pending process/documentation pull-requests or issues15:40
cpaelzer#link https://github.com/canonical/ubuntu-mir/pulls15:40
cpaelzer#link https://github.com/canonical/ubuntu-mir/issues15:40
cpaelzerall drafts/old15:41
cpaelzer#topic MIR related Security Review Queue15:41
cpaelzerMission: Check on progress, do deadlines seem doable?15:41
cpaelzerSome clients can only work with one, some with the other escaping - the URLs point to the same place.15:41
cpaelzer#link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir15:41
cpaelzer#link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=[MIR]&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir15:42
cpaelzerInternal link15:42
cpaelzer- ensure your teams items are prioritized among each other as you'd expect15:42
cpaelzer- ensure community requests do not get stomped by teams calling for favors too much15:42
cpaelzer#link https://warthogs.atlassian.net/jira/software/c/projects/SEC/boards/59415:42
cpaelzerWe have been waiting on a few and sarnold mentioned to have new people as in good=resourece and as in unexperienced15:42
cpaelzerhow is it going sarnold?15:42
sarnoldcpaelzer: it's going well :) I'm optimistic again :)15:42
cpaelzernice to hear that15:42
sarnoldcpaelzer: the feature-freeze crunch has me a little worried but we've got much of our queue assigned and folks are making progress15:43
cpaelzerGiven the reviews we assigned we should assume the usual "few more"15:43
sarnold*nod*15:43
cpaelzerbut making progress is all we need15:43
cpaelzerthanks15:43
cpaelzerKeep it up and pass our thanks to your security cohort!15:43
sarnoldwill do :) thanks15:43
cpaelzer#topic Any other business?15:44
cpaelzerI have one on our docs, anything else?15:44
sarnoldnone here15:44
joalifi have a couple of questions15:44
cpaelzerjoalif first please15:44
joalifdoes css makes to the list of 'parse data formats linke xml, json etc' ?15:44
jbicha.15:44
cpaelzerthe question is rarely "what data it is" like CSS in this case, but more is it controlled externally15:45
cpaelzerthis is for python-libsass I guess right15:45
joalifwhich would then require a sec review15:45
joalifyes more of libsass tbh15:45
cpaelzerso if the usage model is controlled program calls API, libsass renders CSS - I'd say that is not external control15:45
cpaelzerif you'd point it to a webpage and it would read the CSS from it, that would be parsing data with external control15:46
joalifthe python-libsass is merely a wrapper all the parser seems to be done by lisbass c++ lib15:46
cpaelzerTODO: - does not parse data formats (files [images, video, audio,15:46
cpaelzerTODO:   xml, json, asn.1], network packets, structures, ...) from15:46
cpaelzerTODO:   an untrusted source.15:46
cpaelzerthis is the rule you go for, and the important bit is "from an untrusted source"15:47
joalifiiuc it can parse data provided by user so I would consider it with external control15:47
cpaelzerso look at the usage model and decide, my gut feeling says it might be fine15:47
slyonI'd probably go with sec-review for libsass c++ lib (as it can presumably consume any input), not necessarily for the python-libsass "wrapper"15:47
joalifI agree slyon15:47
cpaelzerumm15:48
cpaelzeryou made me click on the projects15:48
cpaelzerfirst paragraph15:48
cpaelzerWarning: LibSass is deprecated. While it will continue to receive maintenance releases indefinitely, there are no plans to add additional features or compatibility with any new CSS or Sass features. Projects that still use it should move onto Dart Sass.15:48
joalifand yes15:48
cpaelzerwho is requesting that and why, was that from openstack horizon?15:48
sarnoldow15:48
joalifthat would be the second question15:48
joalifupstream has decided so15:49
joalifi assume they are aware15:49
slyonwe migh cycle that back to jamespage ^15:49
cpaelzerjamespage: ^^ I think you have to make a call on this, this is more for the owning team to make an argument - not joalif as the MIR reviewer15:49
jamespagesure - let me dig - this was a bit of a surprise change from the upstream project15:50
cpaelzerthanks jamespage15:50
cpaelzerthe argument I look for is either "Oh we didn't see let us instead do ..." or "we really have to do ..., because convincing ...."15:50
jamespageI know that this is more recently supported than the previous modules used for the same function15:50
cpaelzerso it is discontinued, but not as long?15:50
jamespagebasically yes15:51
cpaelzerplease have a hug from me, but it isn't super convincing yet :-)15:51
sarnold> Dart Sass is the primary implementation of Sass, which means it gets new features before any other implementation. It’s fast, easy to install, and it compiles to pure JavaScript15:51
sarnoldI'm liking libsass more and more all the time :)15:52
cpaelzerwell, I see something complex or a hard call that makes no one too happy coming15:52
sarnoldhah, yes15:52
cpaelzerbut let us leave that to jamespage to prepare the way to go for next tme15:52
cpaelzertime15:52
cpaelzerjoalif: both questions covered?15:52
joalifyup15:52
sarnoldjbicha :)15:52
joalifthank you all!15:52
jbicha'automake' is now built by automake-1.17 so it needs to be promoted to main with bug subscriber & automake-1.16 removed15:53
cpaelzerslyon: that sounds foundation'ish - since they have no new representative yet would you ping them?15:53
slyonI can15:53
jbichathank you15:53
cpaelzerok, my topic is for now just probing your opinions15:54
cpaelzerI'm trying to allocate time to modernize archive admin documentation next cycle, when prepping that a bit myself and Sally felt that we might want to move MIR process into the same as it is 98% archive management related topic15:54
cpaelzerhere is the question now ...15:55
cpaelzerwould you mind if I re-host the content of https://github.com/canonical/ubuntu-mir into a different project, likely with a more limited admin set?15:55
cpaelzerwe'd all be contributors, and AAs can merge the PRs (or similar)15:55
sarnoldAAs feel like a very limited resource15:56
cpaelzerThis isn't fully defined, but I wanted to hear if you'd appreciate being co-located with all the other archive management or if you'd object15:56
slyonwfm, we've been going through the PR workflow for all the changes anyway (and have AA on the MIR team to help resolve our cases)15:56
cpaelzersarnold: so far i'm merging the PRs, being an AA15:56
sarnoldcpaelzer: hah, so it's no actual change then? :)15:56
cpaelzerkind of15:57
jbichaare you talking about switching to a readthedocs platform now too?15:57
joalifi dont mind moving it anywhere as long as it's easy to find :p15:57
cpaelzeryes, it would come (if it goes the way I think of it now) in a GH/RTD approach including the full diataxis split15:57
cpaelzerour current page would become ~4 1. explanation 2. howto file 3. how to review 4. meeting15:58
cpaelzerA lot is unclear still, but it is time to modernize the AA wiki page a lot15:58
cpaelzerand then we felt it would be odd if just the MIR descriptions live elsewhere15:59
cpaelzeras slyon said, we already do issues/PRs15:59
cpaelzerso nothing on that would change15:59
sarnoldi'm not exactly opposed to it, but I don't love the diataxis "now you have four to a dozen pages to search to find the thing you're looking for"16:00
cpaelzerCan I send you to Daniele for that discussion? :-)16:00
sarnoldplease no :)16:00
cpaelzerI can promise to keep the MIR elements cohesive and well findable16:01
cpaelzerlots of experience with the server guide docs by now, there are ways like landing and index pages allowing to make it not appear to spread out while getting the benefit of the split16:01
jbichathat 4-page outline sounds fine with me. +1 to joalif's vote :)16:02
sarnoldour little thing is just so much smaller than eg server docs16:02
sarnoldI can certainly appreciate that the aa docs feels like a good place for it to live16:02
sarnoldand if it's mostly you do the work anyway and you don't mind, sure :) but when you're no longer on the mir team, will the remaining AAs be up for it?16:03
slyonpeople would do PRs as usual, we just need AA to click the merge button, which IMO is fine, as we also need AA to click the "promote" button in our workflow16:04
sarnoldif we'll always have an AA on the MIR team, because of course we would, then yeah that's probably fine16:05
cpaelzerhehe16:05
cpaelzerthank you for the pre-discussion16:05
cpaelzerI hear some reasonable "please watch out for ..." and opinions, but no show-stoppers16:06
cpaelzerthank you16:06
cpaelzerclosing the meeting now, ...16:06
cpaelzeranything else?16:06
joalifnothing from me16:06
cpaelzerok, here some usual entropy for you to count down16:06
cpaelzer3221816:06
cpaelzer2518416:07
cpaelzer1561116:07
cpaelzerendmeeting16:07
sarnoldthanks cpaelzer, all :)16:07
cpaelzerand once more16:07
cpaelzer#endmeeting16:07
meetingologyMeeting ended at 16:07:17 UTC.  Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2025/ubuntu-meeting.2025-02-11-15.30.moin.txt16:07
slyonnothing, thanks cpaelzer, all!16:07
sarnoldfive-digit entropy today, very good value!16:07
cpaelzeryeah, good old entropy isn't what it used to be :-P16:07
joalifthanks cpaelzer, all :)16:07
sarnold:D16:08
cpaelzerthe shirt is on my shortlist :-)16:08
sarnoldheh, I still giggle thinking of hueterhunde every now and then :)16:09
cpaelzerYep Hütehunde is still fine, but sadly the sleeves unravel16:10
cpaelzerso I'm rarely wearing it nowadays16:10
sarnoldaww :(16:10
cpaelzerBut I keep up the mission of bringing entertaining shirt content16:10
didrockscpaelzer: agreed on the doc merge (even if that doesn’t change anything for me personnally ofc), but I prefer less repo and I think all release management / ubuntu specific things should be colocated (probably at the same place than the SRU doc actually)16:17
cpaelzerdidrocks: sadly the SRU docs have gone to launchpad git with a lot of arcane magic to make it work16:56
cpaelzerI prefer modern non-arcane things16:57

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!