updates from april meeting

1 files changed, 155 insertions, 0 deletions

diff --git a/meeting-logs/20060420.txt b/meeting-logs/20060420.txt
new file mode 100644
index 0000000..18e250d
--- /dev/null
+++ b/meeting-logs/20060420.txt
@@ -0,0 +1,155 @@
+19:00 <@g2boojum> Thank you all for being here.  Today's agenda includes (1) Google's Summer of Code, (2) an update on portage gpg signing, and (3) the usual developer floor.  We'll start w/ the Summer of Code.  gerrynjrserver?
+19:00 -!- spb [n=spb@gentoo/developer/spb] has joined #gentoo-council
+19:00 -!- g2boojum changed the topic of #gentoo-council to: meeting at 1900UTC (proxies swift->fox2mike vapier->josejx az->uberlord||halcy0n agriffis->g2boojum) | Topic: Google SOC
+19:00 < gerrynjrserver> well, I'd like to propose that gentoo sign up to join google's summer of code
+19:01 < gerrynjrserver> if done, it would fall under the fairly new userrel subproject
+19:01 < gerrynjrserver> seems like it will be an excellent pr opportunity and would possibly allow us to get some fresh, energetic developers in
+19:02 < gerrynjrserver> I would definitely be willing to take on a lead position for this project
+19:02 -!- agriffis [n=agriffis@gentoo/developer/agriffis] has joined #gentoo-council
+19:02 -!- mode/#gentoo-council [+o agriffis] by ChanServ
+19:02 <@agriffis> hey g2boojum, I made it back in time (I think)
+19:02 <@Koon> g2boojum: impostor !
+19:02 <@agriffis> heh
+19:02  * agriffis just walked in
+19:02  * g2boojum continues to chair the meeting, but no longer votes.
+19:03 < gerrynjrserver> this would entail overviewing proposed projects, maintianing a page of ideas developers have proposed, as well as keeping a list of possible mentors
+19:03 <@agriffis> if you'd like, I can just duck back out :-)
+19:03 < gerrynjrserver> would also ensure student summer of coders get thier review mid way
+19:03 < gerrynjrserver> process shoould go this way
+19:03 < gerrynjrserver> -students should be familiar with gentoo
+19:03 <@Koon> gerrynjrserver: is there a point in catacting Google before we get a final list of projects ?
+19:03 <@Koon> contacting
+19:04 < gerrynjrserver> yes
+19:04 < gerrynjrserver> contact has actually already been made
+19:04 <@g2boojum> gerrynjrserver: You're willing to be Gentoo's "organization administrator", then? (http://code.google.com/soc/mentorfaq.html#2)
+19:04 < gerrynjrserver> g2boojum: indeed
+19:04 <@g2boojum> agriffis: No, please do stay!
+19:04 < gerrynjrserver> contact has been mde by the userrel project, as it was thought that if we wait, it would be too late
+19:04 < gerrynjrserver> and considering gentoo is shooting down most applications now, it was probably a wise decision
+19:05 < nattfodd> s/gentoo/google/
+19:05 < gerrynjrserver> (only 4 seats now remain, and we still do not yet know if we have been accepted)
+19:05 < gerrynjrserver> but, we have not yet received a "denial" notice as most other new signups have received
+19:05 < gerrynjrserver> nattfodd: thanks 8-)
+19:05 <@Koon> gerrynjrserver: OK. When should the final list of projects be sent ? May 1st ?
+19:06 < gerrynjrserver> yes
+19:06 < gerrynjrserver> the following week students will be allowed to submit thier applications as well as ideas
+19:06 < nattfodd> we also need a firm list of mentors by then
+19:06 < gerrynjrserver> nattfodd: yes
+19:07 <@g2boojum> Okay, any other questions from council members?
+19:08 <@Koon> gerrynjrserver: Like I said, I approve that project, but a look on the list of proposed projects would be nice, even if I trust you to remove the non-worthy ones
+19:08 < gerrynjrserver> Koon: of course
+19:08 < gerrynjrserver> i've jsut been notified that gentoo is still on the "maybe" list
+19:08 < gerrynjrserver> with two seats available
+19:09 < gerrynjrserver> so.. still nto shot down
+19:09 < gerrynjrserver> *not
+19:09 < gerrynjrserver> (thanks christel)
+19:09 <@g2boojum> Otherwise I'm going to suggest a vote on giving this an official "go-ahead".
+19:09 <@Koon> gerrynjrserver: They decide  based on the org and not the project if I understand correctly
+19:09 < gerrynjrserver> Koon: yes
+19:09 <@Koon> voting yes for the go-ahead
+19:09 < gerrynjrserver> i'd also request that a mailinglist be setup for this purpsoe
+19:10 < gerrynjrserver> if we are accepted 8-)
+19:10 <@solar> that wont be a problem. just file an -infra bug
+19:10 < gerrynjrserver> will do
+19:11 <@g2boojum> Is anybody actually opposed?
+19:11 <@agriffis> sounds okay to me
+19:11 -!- Irssi: #gentoo-council: Total of 13 nicks [7 ops, 0 halfops, 0 voices, 6 normal]
+19:11 <@JoseJX> I think it's a good idea to try to be involved.
+19:11 <@Koon> and also a good trhing that someone stepped up to organize everything
+19:12 <@g2boojum> fox2mike, seemant?
+19:12 <@Koon> good ideas are common, good ideas with people to support them is better
+19:12 < gerrynjrserver> Koon: thanks for the compliment 8-)
+19:14 <@solar> just try todo it right and not get us rejected from future SoC events for failing to follow up properly this summer. try accept ideas that are realistic and benefit *linux* vs just say gentoo.
+19:14 < gerrynjrserver> solar: I will try
+19:14 <@seemant> I'm all for it,
+19:14 <@seemant> but yes @ solar's caveats
+19:15 <@g2boojum> Okay, that's a strong majority.  Moving on to the next item, gpg signing in portage.  Koon?
+19:15 <@Koon> gerrynjrserver: ideally, a backup organizer would be good, in case Real Life [tm] sucks you away
+19:15 < gerrynjrserver> Koon: i've got christel 8-)
+19:16 < gerrynjrserver> as a co-lead
+19:16 < nattfodd> and there's also bonsaikitten_ and me ready to help wherever needed
+19:16 < gerrynjrserver> nattfodd: nod
+19:16 <@Koon> We were supposed to do regular updates on progress on the portage tree signing functionality
+19:16 <@Koon> There is not much progress to report on. It's a good idea but it lacks someone to push it
+19:17 <@solar> status on it as far as I understand is still at a stalled process. The method of trust itself is not being solved
+19:17 <@Koon> We @security still receive new bugs on that problem
+19:17 <@Koon> solar: we are still waiting on key policy and web of trust
+19:18 <@fox2mike> hey
+19:18 <@g2boojum> Koon: I thought the council was drafting the key policy and web-of-trust.
+19:18 <@fox2mike> sorry, I was fiddling with NetworkManager :|
+19:18 <@Koon> I would go back to the simple-but-better-than-nothing one, since robbat2 didn't follow up on his proposal
+19:18 <@fox2mike> g2boojum: here now, representing Swift
+19:18 <@g2boojum> fox2mike: Thanks, good to have you.
+19:19 <@Koon> The simple-but-better-than-nothing was discussed in a previous managers meeting from before the council time
+19:20 <@fox2mike> g2boojum: and I'm for the SoC thingy (if I'm allowed to express opinion on Swift's behalf) :)
+19:20 <@Koon> master key distributed with media and downloadable from the web used to authenticate the dev keyring
+19:20 <@g2boojum> fox2mike: Absolutely.  Thanks.
+19:20 <@Koon> no need to enter complicated mutual signing if we can't even do that one
+19:21 <@Koon> and dev keyring maintained by devrel
+19:22 <@g2boojum> Anybody else have anything to add on signing?
+19:22 <@Koon> I just can't see any success here without someone stepping up to lead that part
+19:22 <@Koon> unfortunately I already have trouble in doing my current job so I won't do it
+19:23 <@g2boojum> Koon: Someone on the council, or just someone in general?
+19:23 <@seemant> wouldn't it be ideal for a security team member to take the lead on it?
+19:23 <@Koon> I'd say someone in general, with bones to take the usual -dev discussions there are when we discuss signing
+19:24 <@Koon> seemant: there isn't much availability in the sec team, same as me
+19:24 < nattfodd> what would it imply?
+19:24 <@Koon> Even if recitment is in progress with a few promising peeps
+19:24 <@Koon> recruitment
+19:25 <@seemant> Koon: and is there remaining development needed on the portage side of things?
+19:25 <@seemant> or at this point is it just choosing a system and implementing a policy?
+19:25 <@Koon> nattfodd: do proper GLEPs and take the heat from gentoo-dev (saying do your own GLEP and have the council choose rather than trying to please everyone)
+19:25 <@seemant> oh
+19:25 <@solar> yes. eclasses are not signed. repoman still allows unsigned commits. and the entire portage tree is not signed
+19:26 <@solar> now if we are using a single key. then it sounds like devs should not have to worry about signing at all. and it's all done from the cvs commit hooks
+19:26 <@g2boojum> seemant: The portage folks are waiting on a policy to finish implementation.  There's a framework in place, though.
+19:27 <@Koon> seemant: On that subject there are as much possibilities and proposals as there are people subscribed on -dev. And proposals are usually non-compatible. But telling people to formalize it in GLEP usually results in 0 GLEPs
+19:27 <@JoseJX> How many devs are signing now?
+19:27 < nattfodd> Koon: I might be interested in doing that
+19:27 < nattfodd> just need to go through those -dev discussions
+19:27 <@solar> 60% of the tree is signed afaik
+19:28 <@Koon> solar: we would still use dev keys, the master key would just authenticate the dev keyring, which would be downloaded with portage
+19:28 <@Koon> that was the plan back then, and I still have to see a better and simpler proposal
+19:29 <@Koon> emerge --sync would verify integrity of the dev keyring as part of the sync process
+19:29 <@Koon> using a trusted master key seeded by install media / web download
+19:29 <@Koon> you can even update the master key that way
+19:30 <@Koon> nattfodd: you should also look back at those old managers meetings logs
+19:30 <@Koon> where the thing was sorted out after the last -dev flamefest on the subject
+19:31 < nattfodd> Koon: will do
+19:31 <@Koon> back then the problem was "how do we maintain the keyring" and LDAP fud
+19:31 <@seemant> nattfodd: do we assume you're taking this on?
+19:31 <@g2boojum> Okay, then that discussion can move to the mailing list.  Open floor for devs (not that it wasn't already).
+19:32 <@Koon> seemant: he will at least consider the option of taking this on :)
+19:32 -!- g2boojum changed the topic of #gentoo-council to: meeting at 1900UTC (proxies swift->fox2mike vapier->josejx az->uberlord||halcy0n agriffis->g2boojum) | Topic: Signing drifing into an open floor.
+19:32 < nattfodd> seemant: not yet, I have no background on this topic so need to check first that I *can* do it
+19:32 < nattfodd> but I'll try to
+19:34 <@Koon> nattfodd: if you need some details feel free to send an email my way
+19:34 <@Koon> No more questions ?
+19:35 < nattfodd> Koon: ok, I'll certainly do that
+19:35 <@solar> I have no open questions and I wish you guys good luck getting gentoo-SoC off the ground.
+19:36 <@g2boojum> Any other topics?
+19:36 < christel> sorry, i was er, doing soc stuff for one of my other projects, yes, i believe its a good idea to go for it (lots of free pr and all that) and i'm afraid that due to it being 4 places left at time of applying and things occsionally taking a while around here i er, took a seemant advice and went a backway :)
+19:36 <@fox2mike> any update on anoncvs/svn? Last I heard it was ready?
+19:36 <@Koon> nattfodd: it's mostly a job of coordinating a lot of people : devrel for the keyring and key policy (expiration, length...), portage guys to improve integration etc
+19:36 <@Koon> also the releng team to include master key in...
+19:36 <@g2boojum> fox2mike: ask infra?
+19:37 <@Koon> sounds a little like "Mission: Impossible" so good luck, Jim
+19:37 < christel> as for SoC status, they are hoping to let us know if accepted or declined by monday :)
+19:37 <@fox2mike> g2boojum: been doing that for months now
+19:38 < tove> i am still curious if there will be a trustees election this year. maybe one of the trustees here knows?
+19:38 <@Koon> There will be a council election for sure... we were talking of using the same timeframe as last year, voting over July-August
+19:38  * solar votes for everybody that's already a trustee to remain one
+19:38 <@g2boojum> tove: Wrong forum, but yes, there will.  I'll send out an e-mail to -nfp this weekend.
+19:39 < tove> g2boojum: why should this be the wrong forum?
+19:39 <@Koon> because we don't touch trstee stuff, it's slimy
+19:39 <@g2boojum> tove: Because the Gentoo Council and the Gentoo Foundation are completely separate entities.
+19:40 <@seemant> tove: trustees and council have different areas of responsibility -- as such this meeting is a council (development) meeting, rather than a foundation one
+19:40  * Koon disappears
+19:41 <@g2boojum> Anything else?
+19:41 <@g2boojum> Going...
+19:41 -!- tove [n=tove@p54A61CF9.dip0.t-ipconnect.de] has quit ["leaving"]
+19:41 <@g2boojum> Going...
+19:41 <@seemant> Gone
+19:41 <@solar> thanks g2boojum and others
+19:41 <@g2boojum> Meeting adjourned.  Thanks for coming.
+--- Log closed Thu Apr 20 19:42:09 2006