15:30 <cpaelzer> #startmeeting Weekly Main Inclusion Requests status 15:30 <meetingology> Meeting started at 15:30:39 UTC. The chair is cpaelzer. Information about MeetBot at https://wiki.ubuntu.com/meetingology 15:30 <meetingology> Available commands: action, commands, idea, info, link, nick 15:30 <cpaelzer> ping slyon, didrocks, sarnold, joalif, jamespage for MIR meeting 15:30 <joalif> o/ 15:31 <didrocks999> hey 15:31 <cpaelzer> #topic Review of previous action items 15:31 <slyon> o/ 15:31 <cpaelzer> we had none - other than the assigned reviews 15:31 <cpaelzer> #topic current component mismatches 15:31 <cpaelzer> Mission: Identify required actions and spread the load among the teams 15:31 <cpaelzer> #link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg 15:31 <cpaelzer> #link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg 15:31 <sarnold> good morning 15:32 <ahasenack> ndctl in that report is a mess, vorlon asked me to look into it 15:33 <sarnold> I can't spot it.. did you already de-mess it? :) 15:33 <cpaelzer> TBH I do not even see ndctl in there 15:33 <ahasenack> his words were 15:33 <ahasenack> <vorlon> ahasenack: coherent accelerator vs compute express link? wheeee 15:33 <ahasenack> <vorlon> ahasenack: I will trust you to sort this 15:33 <cpaelzer> does it go by another name here, i do not see it in the .svg 15:34 <ahasenack> I didn't demess it yet 15:34 <cpaelzer> then maybe someone else did 15:34 <cpaelzer> I see nothing new in the normal mismatches 15:34 <ahasenack> I guess they removed it from proposed 15:34 <cpaelzer> and a few in -proposed 15:34 <ahasenack> something happened, ndctl is today in jammy release 15:34 <ahasenack> that wasn't the case yesterday 15:34 <cpaelzer> \o/ 15:35 <cpaelzer> -proposed shows libreoffic -> epiphany-browser and IIRC didrocks wanted to have a look 15:35 <cpaelzer> any news there? 15:35 <didrocks> yes, the issue appeared when debian version was synced in ubuntu. Asked the maintainer, should be fixed with next libreoffice version (hopefully this/next week) 15:35 <didrocks> basically, debian assumed we had firefox-esr, and then, by the alternatives order, epiphany is picked 15:35 <cpaelzer> ok, so for that one we just wait then 15:35 <didrocks> indeed 15:36 <cpaelzer> heat -> python3-vitrageclient -> twitter-bootstrap3 is openstack - jamespage 15:37 <cpaelzer> jamespage: any news on that, I saw the upload that pulls in python3-vitrageclient, but will you really go for twitter-bootstrap3 or will there be another upload cutting the dependency? 15:37 <cpaelzer> while waiting for jamespage another candidate for didrocks 15:37 <cpaelzer> xwayland -> libxcvt 15:37 <didrocks> putting it in my caddy of things to look at :) 15:38 <cpaelzer> is Desktop aware of that as far as you know? 15:38 <cpaelzer> ah ok, if you need a look that is fine 15:38 <cpaelzer> we will see if it is gone next week :-) 15:38 <cpaelzer> all others are known cases AFAICS (or known false positives) 15:38 <didrocks> yeah, I’m not working too much on transitions/gnome/xorg stack (actually, desktop is still not the ones doing Xorg uploads) 15:39 <cpaelzer> hehe 15:39 <cpaelzer> TIL - but you are ok to check this case are you? 15:39 <didrocks> sure sure 15:39 <cpaelzer> jamespage: please chime in later when you see the questions - we will go on ... 15:39 <cpaelzer> #topic New MIRs 15:39 <cpaelzer> Mission: ensure to assign all incoming reviews for fast processing 15:39 <cpaelzer> #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir 15:40 <cpaelzer> https://bugs.launchpad.net/ubuntu/+source/libapache2-mod-auth-openidc/+bug/1959722 15:40 <ubottu> Launchpad bug 1959722 in libapache2-mod-auth-openidc (Ubuntu) "[MIR] libapache2-mod-auth-openidc" [Undecided, New] 15:40 <cpaelzer> just one that needs a review 15:40 <cpaelzer> oh BTW since I gave you credit - didrocks did you have a chance last week to complete cargo? 15:40 <cpaelzer> looking for a volunteer to review this libapache case 15:41 <joalif> I can take the new one 15:41 <cpaelzer> thank you joalif ! 15:41 <slyon> I could to the review for joalif 15:41 <joalif> np :) 15:41 <slyon> (if needed) 15:41 <joalif> thanks! 15:41 <cpaelzer> slyon: you'll be her "if in doubt ask" buddy :-) 15:41 <cpaelzer> #topic Incomplete bugs / questions 15:41 <cpaelzer> Mission: discuss the recent activity to identify any follow up action 15:41 <cpaelzer> #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir 15:42 <cpaelzer> rust has a discussion ongoing, I have done the review 15:42 <cpaelzer> I saw schopin answered, but had no time to read the answer yet 15:42 <cpaelzer> just saw the mail in my inbox 15:42 <cpaelzer> cargo will be done by didrocks in a bit 15:42 <schopin> cpaelzer: tldr: progress on many items but the big one (LLVM) is still pending 15:42 <cpaelzer> thanks for that TL;DR 15:42 <didrocks> cpaelzer: yeah, couldn’t even start looking at it until now 15:42 <didrocks> but still plan for this one :) 15:43 <cpaelzer> since I've kept schopin busy with rustc that is ok :-) 15:43 <cpaelzer> FRR is recently incomplete and I've brought ahasenack here with me to talk about it 15:43 <cpaelzer> https://bugs.launchpad.net/ubuntu/+source/frr/+bug/1951834 15:43 <ubottu> Launchpad bug 1951834 in frr (Ubuntu) "[MIR]: frr" [Critical, Incomplete] 15:43 <ahasenack> o/ 15:43 <cpaelzer> sarnold: we will need everyone, but especially you for this 15:43 <cpaelzer> This is mostly done from an MIR review POV with one exception 15:44 <ahasenack> let me try to find the original quagga mir 15:44 <didrocks> indeed, ahasenack quickly addressed most of the concerns :) 15:44 <cpaelzer> sarnold: the question that is still open is "does it need a security review or does it get a fast pass" 15:44 <didrocks> right! 15:44 <cpaelzer> didrocks: he always does, when you see his name be prepared for quick answers to your review :-) 15:44 <didrocks> heh :-) 15:44 <cpaelzer> sarnold: here the situation: 15:44 * ahasenack didn't find the quagga mir, maybe it was born in main 15:44 <cpaelzer> 1. quagga is a discontinued project 15:44 <cpaelzer> 2. FRR is the fork and continuation 15:45 <cpaelzer> 3. So the code is the same, but very much evolved since then 15:45 <didrocks> ahasenack: you’re correct, first upload was in main: https://launchpad.net/ubuntu/+source/quagga/+publishinghistory?batch=75&direction=backwards&start=225 15:45 <cpaelzer> 4. Security asked us to switch those for jammy to be able to long term support it 15:45 <cpaelzer> 5. We would not have checked a new quagga version (with the same changes) 15:46 <ahasenack> this is the original frr release, from 2017: https://frrouting.org/release/2.0/ 15:46 <cpaelzer> So the question to you sarnold, does this go onto your not too small pile of reviews-with-deadline or does this get a fast pass by you? 15:47 <cpaelzer> We (MIR team) are happy with both, but me (Server team) and me (pity for your review queue) want to recommend a fast pass 15:47 <sarnold> cpaelzer: I'm inclined to say we should give it the fast pass. :( we just really don't have the capacity to look at everything, and quagga is a known sad situation 15:47 <ahasenack> https://bugs.launchpad.net/ubuntu/+source/frr/+bug/1951834 for my MIR reveiew 15:47 <ubottu> Launchpad bug 1951834 in frr (Ubuntu) "[MIR]: frr" [Critical, Incomplete] 15:47 <cpaelzer> ok ahasenack, here you have it - fast pass it will be for "special csae + capacity" 15:47 * ahasenack better subscribe to its bugs then 15:47 <ahasenack> also in debian 15:47 <ahasenack> stay on top of it 15:47 <cpaelzer> ahasenack: this is still blocked on libyang2 15:47 <cpaelzer> ahasenack: but other than that it is ready 15:48 <ahasenack> yes, I'll get to that one next then 15:48 <sarnold> thanks cpaelzer, ahasenack :) 15:48 <ahasenack> let me just quickly check if I have questions about libyang2 15:48 <ahasenack> well, it does need a security review 15:48 <ahasenack> hi sarnold ;) 15:48 <sarnold> ohello :) 15:49 <ahasenack> ok, better dep8, deal with gcc warnings 15:49 <ahasenack> easy 15:49 <cpaelzer> I updated the FRR bug status and left a comment 15:50 <cpaelzer> To complete the list of recent incompletes - https://bugs.launchpad.net/ubuntu/+source/v4l2-relayd/+bug/1958109 got reviewed by slyon and is now back with the reporter 15:50 <ubottu> Launchpad bug 1958109 in OEM Priority Project "[MIR] v4l2-relayd" [High, In Progress] 15:50 <cpaelzer> Before I go on - are we ok with FRR / Libyang2 for now or are there open questions here? 15:51 <ahasenack> I'll address the libyang2 comments, but will be blocked on a security review 15:51 <cpaelzer> o 15:51 <cpaelzer> ok 15:51 <cpaelzer> #topic MIR related Security Review Queue 15:51 <cpaelzer> Mission: Check on progress, do deadlines seem doable? 15:51 <cpaelzer> #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir 15:51 <sarnold> python-cheroot python-asgiref adsys are in progress at the moment 15:52 <cpaelzer> Glad to hear that 15:52 <cpaelzer> Adsys was in progress last time, what happened there? 15:52 <didrocks> it wasn’t, was it? 15:52 <sarnold> I finished going through the coverity issues -- there's a vast number of error checks that are skipped 15:52 <didrocks> hum? This is surprising 15:52 <sarnold> didrocks: alas it's been in progres for weeks 15:52 <cpaelzer> It was "on" or "next" as far as I remember 15:53 <didrocks> we are using go vet and error checking are all covered 15:53 <slyon> IIRC it was "no progress on adsys so far" 15:53 <didrocks> what slyon said ^ 15:53 <cpaelzer> ah ok, thanks 15:53 <cpaelzer> well we all know the list 15:53 <didrocks> sarnold: btw, 0.8 for adsys is out, it shouldn’t change the general strategy, but Mark asked explicitely the script part (in 0.8) to go through security 15:53 <slyon> sarnold: but it's good that adsys is on progress now as the release team has been asking for that 15:53 <cpaelzer> in Theory 16 days until FF and 7 cases with a deadline towards that 15:53 <cpaelzer> you can all do the dpressing math 15:54 <cpaelzer> wishing the best for sarnold and company to churn through some more 15:54 <didrocks> I think the coverity thing should be looked again, I’m happy to have preliminery results because errors are for sure all covered and linted by upstream tools 15:54 * cpaelzer hands a crate of security-engergy-drinks 15:54 <ahasenack> is adsys ours? (canonical) 15:54 <didrocks> yes 15:54 <cpaelzer> desktop driven ahasenack 15:55 <sarnold> didrocks: it's not as friendly as the web interface, but it's way easier to share the text output: https://termbin.com/hb49 15:55 <sarnold> Type: Unchecked error (SUPPRESSED_ERROR) 15:56 <cpaelzer> Ok, that seems like didrocks has some homework to check these for false-positives 15:56 <sarnold> $ grep -c SUPPRESSED_ERROR coverity.txt 15:56 <sarnold> 1442 15:56 <cpaelzer> The rest of the list is done for today 15:56 <cpaelzer> #topic Any other business? 15:56 <cpaelzer> we can continue adsys talk here 15:56 <cpaelzer> but is there anything else for this section? 15:56 <seb128> hey, I wanted to mention https://github.com/cpaelzer/ubuntu-mir/pull/5 15:56 <ubottu> Pull 5 in cpaelzer/ubuntu-mir "Tweak TBD placeholders" [Open] 15:56 <cpaelzer> thanks seb128 15:57 <seb128> it's trivial and can wait for another meeting which is less busy if you prefer 15:57 <ahasenack> I have a question, if my style of very verbose MIRs helps, or hinders, analysis 15:57 <ahasenack> (since I'm here) 15:57 <cpaelzer> it looks trivial seb128, I can merge it once I have 1-2 reviews - so everyone could a few have a look together with me? 15:58 <cpaelzer> ahasenack: I like it, I read it, and I appreciate when I find the answers in the MIR request instead of having to dig on my own 15:58 <cpaelzer> ahasenack: we have continuously extended the report template for wanting those infos 15:58 <slyon> cpaelzer: seb128: I just added my +1 for that PR#5 on github 15:58 <cpaelzer> thanks slyon 15:58 <sarnold> ahasenack: I like your very verbose MIRs :) 15:58 <seb128> slyon, thx 15:58 <cpaelzer> seb128: I'll keep the tab open and have a look myself and then merge most likely 15:58 <ahasenack> ok, thx :) 15:58 <ahasenack> I'll continue with the style then :) 15:59 <cpaelzer> next meeting is knocking on my door, closing for today 15:59 <cpaelzer> anything urgent we missed ? 15:59 <sarnold> nothing from me 15:59 <joalif> nothing 15:59 <slyon> nope 15:59 <cpaelzer> thanks then 15:59 <sarnold> thanks cpaelzer, all :) 15:59 <cpaelzer> #endmeeting