19:04:31 #startmeeting Fedora Cloud SIG 19:04:31 Meeting started Wed Feb 25 19:04:31 2015 UTC. The chair is kushal. Information about MeetBot at http://wiki.debian.org/MeetBot. 19:04:31 Useful Commands: #action #agreed #halp #info #idea #link #topic. 19:04:43 #meetingname Fedora Cloud SIG 19:04:43 The meeting name has been set to 'fedora_cloud_sig' 19:04:51 #topic Roll call 19:04:53 .hello roshi 19:04:54 roshi: roshi 'Mike Ruckman' 19:04:57 .hellomynameis kushal 19:04:59 kushal: kushal 'Kushal Das' 19:05:08 .hellomynameis jzb 19:05:09 jzb: jzb 'Joe Brockmeier' 19:05:43 .fas rtnpro 19:05:45 rtnpro: rtnpro 'Ratnadeep Debnath' 19:07:08 oddshocks, number80 ? 19:07:26 #chair rtnpro jzb roshi 19:07:26 Current chairs: jzb kushal roshi rtnpro 19:07:54 I am with a huge lag 19:08:20 it's alright, we don't notice :p 19:08:34 I just assumed you were slow typing 19:08:41 haha 19:08:58 #topic Action items from last meeting 19:09:08 There is none I guess. 19:09:22 let's give somebody an action item to have an action item this week 19:09:26 yeah, there wasn't any 19:10:22 moving on 19:11:08 #topic dockerfiles #84 19:12:00 any update on this one? 19:12:26 * jzb is looking for the ticket 19:13:00 I played with docker files over the weekend 19:13:06 might do a write up on my blog 19:13:20 roshi, please go ahead, we can tweet/retweet :) 19:13:20 trying to containerize chrome to manage it's memory usage 19:14:11 roshi, ah, that would be painful :) 19:14:11 roshi: ask Jim Perrin 19:14:18 roshi: he's managed to containerize Wine/IE 19:14:24 it's ... well, sort of evil 19:14:43 I have an article done for Fedora Magazine that I need to polish and publish 19:14:48 I'll do that tomorrow 19:15:48 hey kushal 19:15:51 sorry for delay. 19:15:53 scollier, welcome :) 19:16:02 scollier, no problem, we are just starting. 19:16:05 EOF for me on that topic. 19:16:37 scollier, any pointers for publicizing Fedora dockerfiles? 19:17:40 kushal, aside from the typical social media, not really. Each time a dockerfile gets modified or added, I generally tweet about it. at one time i wrote a blog post for each dockerfile, but i don't do that anymore. 19:17:50 scollier, okay. 19:17:52 kushal, i think an entry in the fedora-magizne 19:18:05 with regards to, where we need help, and encouraging contributions would be nice. 19:18:09 scollier, that would be nice, roshi is doing a blog post in the coming days. 19:18:49 kushal, i think having the basic dockerfiles are nice 19:18:52 at some point 19:19:06 scollier, yup, they give ideas on how to start. 19:19:07 i'd like to see some folks actually putting together multi-container apps. 19:19:10 scollier: I can send you what I have 19:19:15 and even orchestrating with k8s. 19:19:30 that would show some real value. IMO. 19:19:30 scollier: see if there's room to expand the "where we need help" part 19:19:35 jzb, ack 19:19:55 Moving to next topic then 19:20:01 #topic Getting sha256sum published for the cloud images #93 19:20:06 do we have any tools for Fedora packagers? 19:20:14 (containerized)? 19:20:21 kushal: soorry 19:20:23 er, sorry 19:20:24 jzb, not that I remember. 19:20:28 K 19:20:32 jzb, now that's a GREAT suggestion. 19:20:33 jzb, my bad, please go ahead. 19:20:33 * jzb makes a note that might be a good start 19:20:50 for folks who are packaging rpms, maybe create containers as well :) 19:20:55 scollier: charity begins at home, right? 19:20:58 where it makes sense. 19:21:02 scollier, jzb :) 19:21:03 * dustyaway is late 19:21:30 dustymabe, welcome ;) 19:21:39 kushal: thanks! 19:21:53 dustymabe: howdy 19:22:08 jzb: :) 19:22:20 So for #93, systemd wants in the way Ubuntu does, we have a different style for the last 10 years already. 19:22:38 Wondering how to put that nicely on the ticket, can anyone help me on that part? 19:23:10 kushal: I'm not sure I followed that 19:23:34 jzb, so we have these checksum files https://getfedora.org/en/static/checksums/Fedora-Cloud-Images-x86_64-21-CHECKSUM 19:23:38 for a long time. 19:24:14 jzb, systemd wants them to be renamed as sha256sums and they want the gpg sig to be in a different file 19:24:48 jzb, that will break the way we do release engineering for the last 10 years or so, also someone has to fix many scripts (i guess). 19:25:10 kushal: this only applies to cloud images, or...? 19:25:13 jzb, because this is the standard way for creating checksums in other parts of the release 19:25:19 jzb, he only wants for cloud 19:25:41 kushal: yeah. I don't know why they can't just parse out the sig to verify signature and parse out the sum to verify the download file 19:26:02 dustymabe, can you please ask that in the ticket? :) 19:26:08 sure 19:26:12 dustymabe, thanks :) 19:26:15 kushal: I think this would be classified as a system-wide change and something that would probably need to be held to F23 19:26:35 jzb, yup, that is also true. 19:26:36 I understand he is going for a standard thing to download but it would be better if his tool was more accomodating 19:26:53 I don't disagree that we should have a standard name 19:27:28 it'd be a lot easier to have a script that checks things if the name is always sha256sums than somethign-something-CHECKSUMS 19:27:43 jzb: I agree 19:27:49 but really - the tooling would come from infrastructure, or rel-eng, not us? 19:27:52 jzb, yup, I am okay with the first part, but not sure about keeping sig in a different file. 19:28:01 jzb, Yes. 19:28:03 so the ask is really to them. 19:28:03 jzb: but we could have both 19:28:08 dustymabe: sure 19:28:26 we could have Fedora-Cloud-Images-x86_64-21-CHECKSUM 19:28:43 and then also SHA256SUMS that is a symlink or something 19:29:02 dustymabe: look at you being all problem solving and stuff 19:29:11 :) 19:29:14 :) 19:29:19 Can we move to next topic? 19:29:24 kushal: sure 19:29:32 yep 19:29:33 #topic Fedora Magazine Post: How to Use Dockerfiles #87 19:29:49 I guess we already discussed this part. 19:29:51 done, I just need to polish and add a few lines 19:30:33 EOF 19:30:59 Okay. 19:31:03 Moving to next then. 19:31:23 #topic Producing Updated Cloud/Atomic Images #94 19:31:49 just wondering why the primary connection went just at the time of the meeting :( 19:32:07 * rtnpro have been working on testing project atomic image for Fedora 22 19:32:15 oddshocks, any updates on this? 19:32:22 rtnpro, you can wait till the open floor :) 19:33:08 We need the updated images. 19:33:15 pl 19:33:21 s/pl/ok 19:33:40 roshi, jzb any comments? 19:34:52 kushal: just a sec 19:35:26 sorry, had to handle something IRL 19:35:31 * roshi reads backscroll 19:35:46 I think/thought we'd largely decided the cadence, etc. We still need to decide who file tickets, etc 19:35:54 so the question really is - who's going to own this? 19:35:59 I think that's the question, anyway 19:36:12 jzb, ideally rel-eng 19:36:30 kushal: well, there's also updating the Web site, etc 19:36:36 does rel-eng need to do that as well? 19:36:45 I guess oddshocks volunteered 19:36:49 I think oddshocks has been working with the website people quite a bit 19:36:55 also, who's going to own the tooling to get it done 19:36:59 to get new AMIs published etc.. 19:37:08 aiui, there's technical limits to getting the updated images as well 19:37:26 jzb, yup. 19:39:13 do we know what those are? 19:42:14 I don't 19:42:18 * oddshocks pops in 19:42:36 I also don't. 19:42:38 oddshocks, hi 19:42:40 Hey! So, I spoke with dennis briefly 19:43:00 apparently they're still figuring out the process that will be used, but he did summarize... I think I posted on the ticket? 19:43:15 I haven't heard anything since I asked rel-eng list and updated the ticket 19:43:17 (heard nothing on rel-eng list) 19:43:40 but dennis said basically we'd poke rel-eng, then they'd produce something, then QA would eventually release 19:45:05 ok.. so looks like it is in-progress 19:45:16 Okay, good news :) 19:45:22 oddshocks: let us know if there is anything we can help with as far as technical limitations go 19:45:34 Yeah. Out of my hands on the rel-eng process. But they're definitely aware we're hoping to set up a good process to release updates 19:45:53 Dennis said he'd update us when they know :) 19:46:18 :) 19:46:27 dustymabe: cool. I haven't gotten any details yet on technical stuff. But will definitely keep everyone in the loop, and update the ticket. 19:47:17 ok cool.. what's next? 19:47:36 open floor 19:47:41 #topic Open Floor 19:47:48 I have a few points. 19:47:58 1. What about the F22 features we proposed? 19:48:06 Tunir is ready and under review. 19:48:16 roshi, what is the status for testCloud? 19:48:44 I was trying out the test matrix for atomic image: file:///home/rtnpro/ISOS/Fedora-Cloud-Atomic-20150207-rawhide.x86_64.raw.xz available at https://fedoraproject.org/wiki/Test_Results:Fedora_22_Branched_20150221_Cloud?rd=Test_Results:Current_Cloud_Test 19:48:47 I guess I was gonna dumbly ask if we need AMIs for any recent F22 test candidates. Can produce any needed immediately (now with both standard and gp2 volume types!) 19:49:44 I could not relate with the first two test cases: a) Testcase_base_initial_setup, b) Testcase_base_startup 19:50:01 rtnpro, is networking working in that image? 19:50:09 kushal, yeah :) 19:50:29 07 is old though. 19:51:05 rtnpro, I can see http://koji.fedoraproject.org/koji/taskinfo?taskID=9001537 19:51:09 TC3 19:52:17 oddshocks, I am not sure if we have people who wants to use TC* as AMI 19:52:30 oddshocks, but may be I am completely wrong 19:52:39 I will pull the latest build and try running the test cases again 19:53:08 kushal: Yeah, I mostly meant if anyone wants 'em for testing 19:53:14 kushal: it's good to have for testing... 19:53:14 mostly cloud folks 19:53:15 kushal: I haven't done much with it since we talked last about it 19:53:18 oddshocks, Okay. 19:53:32 roshi, Okay, update the wiki when you find time. 19:53:50 will do, I updated the bug for the feature 19:53:53 rtnpro: I don't if an initial setup utility is going to run for atomic 19:53:54 'tail /var/log/secure' failed for https://fedoraproject.org/wiki/QA:Testcase_base_system_logging 19:54:13 roshi: does that apply to atomic? 19:54:31 which? 19:54:49 jzb, what about the other feature proposals from our side? 19:54:53 seems like /var/log/secure file is missing by default in the atomic image 19:55:15 roshi: https://fedoraproject.org/wiki/QA:Testcase_base_initial_setup 19:55:15 also, disabling, stoping sshd.service does not work 19:55:25 kushal: what about them? :-) 19:55:41 jzb, I mean what is the status, etc :) 19:55:44 https://bugzilla.redhat.com/show_bug.cgi?id=1191525 19:55:50 https://bugzilla.redhat.com/show_bug.cgi?id=1194589 19:55:57 https://bugzilla.redhat.com/show_bug.cgi?id=1194590 19:55:58 Testcase_Services_start and Testcase_base_selinux are working fine 19:56:06 Most recent updates from walters 19:56:35 basically all are in MODIFIED state atm. 19:56:40 jzb, thanks :) 19:56:44 I have been out all week so I don't really have much else on that status 19:56:50 I do have one additional bug/question to look at 19:56:59 https://bugzilla.redhat.com/show_bug.cgi?id=1194623 19:57:01 jzb, go ahead. 19:57:25 basically they're asking if we can default to networkd instead of network-scripts 19:57:29 any objections? 19:57:59 jzb: that might affect cloud-init 19:58:38 does networkd read the /etc/sysconfig/network-scripts files too? 19:58:39 jzb, also we have to find what all will be affected. 19:59:04 I think it doesn.. but not sure right off the top 19:59:13 s/doesn/does/ 19:59:25 I'll take a look, it might not 19:59:31 dustymabe: ^^ 19:59:35 (sorry, phone call) 19:59:56 roshi: thanks.. since rtnpro is consuming these it would be good if we have him scoped right :) 20:00:02 dustymabe: do you want to look into this? 20:00:17 aren't all the atomic testcases optional anyways? 20:00:18 jzb: networkd and init scripts? 20:00:25 dustymabe: yeah 20:00:27 I will also have a look tomorrow moring. 20:00:30 * morning 20:00:47 jzb: let me take a look at the bug real quick 20:00:59 dustymabe: soitenly 20:01:02 dustymabe: thanks 20:01:07 kushal, I will sync up with you tomorrow morning then :) 20:01:29 rtnpro, find out if the latest images have networking or not. 20:01:37 kushal, ok 20:01:46 hopefully they do 20:01:50 :) 20:01:57 * roshi didn't get to filing the bug for that 20:02:01 has anyone else? 20:02:06 eh, what do we need networking for in the cloud 20:02:07 ? 20:02:08 * roshi hasn't looked into it 20:02:20 jzb: yeah I can look into that. 20:02:22 it needs to be proposed as a blocker as well 20:02:22 jzb, I mean the images were not getting any IP. 20:02:27 roshi, yup. 20:02:41 dustymabe: awesome 20:02:59 #action dustymabe to look at bug 1194623 20:03:13 kushal: it's more secure that way 20:03:14 jzb, finally, an action :) 20:03:19 jzb, yup :) 20:03:42 jzb, just have to create a buzzword for the same. 20:04:03 "Super-secure cloud: Totally impervious to network attacks" 20:04:17 jzb, sounds good :) 20:04:22 it's a feature! 20:04:42 Fedora Bottled Cloud 20:04:47 haha 20:04:48 nice 20:04:50 nothing gets in, nothing gets out 20:04:55 I guess we can close the meeting now. 20:05:01 +1 20:05:02 roshi, that is a superb feature. 20:05:03 kushal: thanks 20:05:07 #endmeeting