14:59:29 #startmeeting Server Working Group Weekly Meeting (2014-05-27) 14:59:29 Meeting started Tue May 27 14:59:29 2014 UTC. The chair is sgallagh. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:59:29 Useful Commands: #action #agreed #halp #info #idea #link #topic. 14:59:32 #topic roll call 14:59:35 #chair sgallagh mizmo nirik davidstrauss stefw adamw simo tuanta mitr 14:59:35 Current chairs: adamw davidstrauss mitr mizmo nirik sgallagh simo stefw tuanta 14:59:50 Who do we have today? 14:59:57 morning 15:00:21 .hellomynameis tuanta 15:00:21 .hellomynameis adamwill 15:00:21 tuanta: tuanta 'Truong Anh Tuan' 15:00:24 adamw: adamwill 'Adam Williamson' 15:00:28 good evening :) 15:01:06 stefw is on vacation this week and next. 15:01:22 mizmo_afk notified me that she will be late (if she makes it at all today) 15:01:36 Hello folks. 15:01:42 greetings 15:01:45 * davidstrauss is back from Burning Flipside. 15:01:47 hi all 15:02:33 Welcome, folks! I see we have a few new faces 15:02:48 hi all 15:02:57 * alefattorini is a new face ;-) 15:03:07 hello 15:03:12 Hey all - i'm Tim K from the list :) 15:03:18 * davidep is a new face 15:03:23 * tdk2fe anothe rnew face 15:03:39 hi all 15:03:44 good afternoon (gmt+2) 15:03:46 #topic Introductions 15:04:00 * alefattorini is from NethServer with davidep gsanchietti and filippoc 15:04:05 So we have some new participants this week. Mind giving yourselves a one-sentence intro? 15:04:46 * tdk2fe lives in St Louis (heart of the US) and wants to actually take action on helping out with a SIG 15:05:41 * nirik waves to all the new folks. 15:05:45 * gsanchietti from Italy, involved in CentOS SLS SIG 15:05:57 ciao 15:06:13 welcome, folks! 15:06:13 hello all 15:06:43 Ok, let's list today's agenda. 15:06:47 #topic Agenda 15:06:50 #info Agenda Topic: CentOS Simple Linux Server SIG 15:06:53 #info Agenda Topic: Release Engineering 15:06:57 #info Agenda Topic: Branding and Logos 15:07:08 We'll start with the SLS SIG. 15:07:14 #topic CentOS Simple Linux Server SIG 15:07:23 pcbaldwin/pete is from Canada, works with ClearOS and involved in CentOS SLS SIG 15:07:32 and a slow typist. 15:07:34 #link http://wiki.centos.org/SpecialInterestGroup/SLS 15:07:45 pcbaldwin: Sorry, didn't mean to cut you off. 15:07:53 * danofsatx-work is here.....was getting coffee 15:08:44 great to actually converse in real time as opposed to email ;) 15:09:06 So as I understand it, the CentOS Simple Linux Server SIG is trying to build a turnkey server, not dissimilar to what we're trying to do with Server Roles in Fedora 15:09:30 Yes 15:09:35 Given that CentOS is a downstream of Fedora, it seemed prudent to involve them in the discussions 15:09:45 Hopefully we can build something together that will work for all of us. 15:10:11 Both ClearOS and NethServer have a working released ISO 15:10:16 how far along is SLS? 15:10:47 also, how much integration is involved? or is it more just putting the server bits on one media, etc? 15:11:15 the SIG is being evaluated by CentOS 15:12:03 the SIG has plans to release some variants, more or less tailored to various scenarios 15:12:53 we need to define some goals, i.e. server roles and software needed 15:13:24 so, the idea is sort of to have an image which just gives you a ready-to-go web server or mail server or directory server or whatever? 15:14:02 now the image is centos, with an interface to add software 15:14:27 we would like to have only one image, and make it easy to extend the system 15:15:03 this is what a MacGuyver sysadmin would like :-) 15:15:21 I'm referring to Persona #1 15:15:32 one server, many purposes 15:16:27 * sgallagh nods 15:16:38 ok, so it's pretty similar to our design 15:17:07 Fedora Server has broader scope,maybe, but the ideas are really similar 15:17:43 we have achieved something with custom built software, but the technology behind Fedora is appealing 15:18:26 Our goal is to build an extensible framework for roles, which we can expand on as we go. 15:18:27 cockpit and some of our integration ideas are pretty tied to systemd, etc... so I would expect it might be hard to just port our stuff to centos5/6... but 7 should be completely doable. ;) 15:18:35 what is 'Persona #1'? 15:18:52 https://fedoraproject.org/wiki/Server/Personas 15:18:58 ah ty 15:20:03 7 for sure 15:20:36 we have working systems on 6, not going to change now :-) 15:20:49 yeah. :) 15:21:50 we have to evaluate cockpit 15:22:05 Right now, we're hacking together the first version of the role API 15:22:43 twoerner is designing the D-BUS API (around which we plan to wrap at least one remote API), so it would be a real benefit to get some concrete use-cases and design input there. 15:22:52 do you have a link to code? 15:23:08 filippoc: Still on the drawing board 15:23:24 filippoc: no, not yet 15:23:41 I'd like to suggest that we schedule a separate meeting on this topic, since I think it will consume more than the available time in this meeting. 15:23:50 sounds reasonable 15:23:52 agreed 15:24:37 yes 15:25:04 filippoc: I'll send out a whenisgood request to the server mailing list shortly, if you and any of your cohorts who want to participate could respond to it, that'll help 15:25:26 will do 15:25:28 cohorts. i like that. 15:25:55 hoplites :) 15:26:03 me too, even if I don't know the meaning :-) 15:26:05 filippoc: Since I can tell you've researched us probably more than I have had time to research you, do you see any obvious places where we don't align and should watch out for? 15:26:53 "a cohort is a group of subjects who have shared a particular event together during a particular time span" (Thanks, Wikipedia) 15:27:14 :) 15:27:44 maybe we can difference within used stacks 15:27:54 for example you are planning to use firewalld 15:28:09 and we are using shorewall 15:28:28 will the API provide and abstraction layer? 15:28:45 Interesting 15:28:59 We were not originally planning to do so, but that's perhaps worth keeping in mind. 15:29:03 you mean abstraction on a component? 15:29:11 yes 15:29:14 or a function? 15:29:21 maybe both 15:29:27 gsanchietti: there is only very limited abstraction for the firewall planned so far... 15:29:31 gsanchietti: why the choice of shorewall, btw? 15:29:43 gsanchietti: ports and services 15:30:25 twoerner: can be a very good starting point. Something like: this service need port 1234 open 15:30:34 gsanchietti: this is provided by firewalld 15:31:25 gsanchietti: firewalld provides not only ports, but also services, these are a collection of ports, netfilter helpers and destination addresses 15:31:38 yes. I don't know firewalld very well, but does it provides something like traffic shaping (like shorewall does) 15:32:01 gsanchietti: no.. there is no traffic shaping support in firewalld atm 15:32:31 if the server has "Gateway Role", maybe you need something a little bit more expressive than firewalld 15:32:51 maybe it's not your target :) 15:33:21 I think we’ve been assuming Fedora Server to be an endpoint, in a data center with dedicated (hardware?) network infrastructure 15:33:46 mitr: ok, it sounds reasonable 15:33:54 we work more on premises 15:34:13 Right, we haven't really considered the "router" role, but I wouldn't necessarily rule it out. 15:34:21 (Nor would I expend resources working on it right now) 15:34:32 That doesn’t _prohibit_ a gateway use case/role, but the more expressive firewall/shaping functionality would probably be a part of that specific role rather than of the universal role infrastructure. 15:34:49 (… which doesn’t really resolve the assumed firewalld/shorewall conflict, though) 15:34:57 yeah 15:35:11 ok, but each Role can extend the API, right? 15:35:14 well, we don't have to resolve it right now, just be aware of it 15:35:37 gsanchietti: yes 15:36:29 good, I think this is make less important the problem about abstracting the API 15:37:12 * danofsatx-work is currently in the process building two F20 routers, with NetworkManager and firewalld. 15:38:06 gsanchietti: Well, firewall rules may be a bit of a special case 15:38:24 Because up to now, we've been assuming that the API will manage firewall rules for a Role 15:38:40 But if the Role itself *is* all about firewall rules, it doesn't align quite clearly. 15:38:48 Something to consider and discuss in the other meeting. 15:38:49 sorry - newbie question - which API are you referring to? 15:39:02 sgallagh: ok 15:39:11 tdk2fe: We're building a new public API for managing Server Roles. 15:39:24 There will be a separate meeting on it; I just sent out the whenisgood request to the server list. 15:39:52 I think this has been a good start, but I think we should reserve some of the meeting for the other agenda items. 15:40:40 filippoc, gsanchietti, et. al: Thank you very much for joining us today. I think we have a great opportunity to work together. 15:41:19 #topic Release Engineering 15:42:07 I don't know if dgilmore is around, but we wanted to determine what changes (if any) we will need in Anaconda or the compose for Fedora Server 21 15:43:27 Originally, we were expecting that we'd need an extension to Anaconda to support the server roles, but I now believe we can avoid (or minimize) this by taking advantage of one-time systemd units to deal with things on first boot (probably separate from the firstboot environment, since we may need to run after that stuff is all set up) 15:43:39 yeah. If he's not we should sync up out of meeting and talk about it. 15:44:17 we still need a variant comps, presumably, with just the package sets we want to offer from 'our' netinst image 15:44:24 So the real questions that remain are how we present the installer (particularly on netinst). Do we expect to have separate branding and a completely unique install tree + comps.xml? 15:44:28 and the different default filesystem config 15:45:04 so, on the netinstall... 15:45:05 Right, I forgot about the fs default. That alone probably mandates a separate tree. 15:45:27 do we want 'our' netinstall to offer everything? or just fedora server groups? 15:46:03 Will there be any non-Product netinstall? 15:46:24 There was talk of base doing one at one point, but I am not sure where that stands. 15:46:29 mitr: adamw's QA mail from yesterday strongly implies there would be. 15:46:33 workstation and cloud likely don't want/need one. 15:46:35 But I have no idea who would own that if they do 15:46:37 sgallagh: let's say 'assumes', not implies. 15:46:42 ok 15:46:46 sgallagh: as it's not my job to decide that. :P 15:46:59 Fair enough 15:47:13 I would think that if that tree was going to exist, the Base Design WG would own it. 15:47:22 And I think they explicitly stated they're not building install media 15:47:25 I'd personally prefer to minimise number of things we need to test, but if we need a seperate thing for good reasosns then we do 15:47:28 But I'd have to double-check 15:47:56 well, it's just that we've been saying all along that the products are sort of 'over-the-top' additions to 'generic Fedora' 15:48:09 yes and no 15:48:10 does that jibe with a Fedora 21 that has no generic install media of any kind? 15:48:19 That doesn't mean that "generic Fedora" has to be installable. 15:48:24 hrm 15:48:29 OTOH with our current limited scope, we do need a way to install things that are not (yet) roles, for this to be useful for much more servers, and very lilkely also offer a desktop. At that point there might not be too much of a difference between a Fedora Server and a very generic netinstall? 15:48:31 Just that you can start from any Product and then mix and match as you wish 15:48:35 i think people are kinda assuming it does, but it's something for fesco to kick around, i guess. 15:48:40 mitr: yeah 15:49:04 also, if we do seperate trees for each product, we have the fun of fedup. 15:49:05 mitr: well, there's a question whether we want to offer those at install time or not 15:49:35 adamw: If there had to be a generic Fedora, I’d expect this to primarily be a DVD rather than netinst-image (but that’s mostly a hunch) 15:50:02 adamw: true, offering say chemical lab doesn’t follow from that argument 15:50:36 mitr: i thought we'd already discounted a dvd, but anyhoo 15:50:50 * nirik would be ok with the netinstall being a generic one. If people want a specific thing to server, get the dvd/usb/whatever image. 15:51:15 * sgallagh nods. That seems reasonable 15:51:17 but it might all depend on how things are made. 15:51:33 dgilmore is planning a test compose soon... ie, stawman for how things look. 15:51:48 nirik: that kinda makes sense, but then it makes the image a little fuzzy. it's the Fedora Server network installer, but you can also use it to install Cinnamon or Electronics Lab? 15:51:54 but i don't hate it 15:51:58 dgilmore: that'd be really useful actually 15:52:04 hard to do this theoretically 15:52:27 it'd be nice to have a strawman for the fedoraproject.org download pages to go with it... 15:53:05 right, so lets defer this until we can talk with dgilmore and see a proposed layout/etc 15:53:10 OK 15:55:00 ok 15:56:07 Alright, nirik and I can try to catch up with dgilmore about this in the next couple days. Sound good? 15:56:11 yep 15:57:46 Ok, I don't think we have time for the branding topic even if mizmo_afk has turned up, unfortunately. 15:57:51 #topic Open Floor 15:58:02 Anything for open floor in the next 60 seconds? 15:58:03 very quickly: did folks see my test plan draft? any notes/issues/objections? 15:58:14 adamw: looked good to me from a quick glanceover. 15:58:16 and does anyone mind if i kick off a thread about defining release criteria and test cases for Server? 15:58:25 I skimmed it this morning, the only thing that caught my attention was the aforementioned non-Product install media 15:58:39 sgallagh: that drops right out if there turn out not to be any. 15:58:56 it looks good for me, adamw 15:59:04 thx 16:00:31 tuanta: When you find some time, could you have a chat with mizmo_afk? As our Ambassador, I'd like you involved in the branding discussions, particularly on how we can "sell" this stuff. 16:00:31 we are not going to have a generic boot.iso 16:00:33 each product will have its own 16:01:42 * twoerner has to leave now 16:01:43 I got FAmSCo meeting now 16:01:43 As a new person with a pretty solid understanding of Linux .... who should I speak with to find out where I could be useful? 16:01:48 dgilmore: thats unfortunate I think... people who want to install a varied set of things will be unhappy 16:01:55 * tuanta will see the logs later 16:02:45 tdk2fe: #fedora-server 16:03:20 that works - thanks 16:03:22 dgilmore: i don't believe Workstation is planning to have one. 16:03:26 or, if I misunderstood your question, #fedora-admin 16:03:52 well - is that for the Fedora Server SIG or the CentOS SLS SIG? 16:04:08 tdk2fe: #fedora-server is for Fedora Server 16:04:18 For SLS, probably #centos-devel for now 16:04:40 #topic Release Engineering (redux) 16:04:44 sgallagh: yes, #centos-devel for now 16:04:48 yeah, the admin channel is fedora backend. Server specific channel is, well, server. 16:04:51 I'll leave the meeting open for now 16:05:17 cool - ty 16:06:27 I need to grab lunch before my next meeting. dgilmore, nirik, adamw: please continue talking and just endmeeting when done. We have the channel reserved for another hour. 16:07:05 Does SLS have any type of tracking site similar to the Fedora project? 16:08:59 SLS now only have a wiki page: http://wiki.centos.org/SpecialInterestGroup/SLS 16:09:16 will have resources when approved by centos 16:09:37 we use centos-devel mailing list and #centos-devel 16:11:08 I'm on the list - didn't know about #centos-devel though 16:11:09 thanks 16:13:18 * nirik thinks dgilmore is pretty busy right now, perhaps we end this meeting and catch up later? 16:20:18 ok, if nothing else, will close the meeting in a minute. 16:21:56 fine by me 16:22:41 Thanks everyone 16:22:43 #endmeeting