15:00:30 #startmeeting Stewardship SIG (2019-08-20) 15:00:30 Meeting started Tue Aug 20 15:00:30 2019 UTC. 15:00:30 This meeting is logged and archived in a public location. 15:00:30 The chair is decathorpe. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:30 Useful Commands: #action #agreed #halp #info #idea #link #topic. 15:00:30 The meeting name has been set to 'stewardship_sig_(2019-08-20)' 15:00:37 #meetingname stewardship-sig 15:00:37 The meeting name has been set to 'stewardship-sig' 15:00:49 #topic Roll Call 15:04:30 decathorpe: hi 15:04:41 * jstanek also lurks here 15:04:49 hi guys :) 15:04:55 #chair mhroncok 15:04:55 Current chairs: decathorpe mhroncok 15:05:03 #chair jstanek 15:05:03 Current chairs: decathorpe jstanek mhroncok 15:05:14 decathorpe: \o 15:05:19 hi! 15:05:24 #chair cipherboy 15:05:24 Current chairs: cipherboy decathorpe jstanek mhroncok 15:06:28 #topic Open Floor 15:06:40 #link https://pagure.io/stewardship-sig/issue/45 Agenda 15:06:56 anything in particular you want to talk about? 15:07:57 what is the best course of action with the new needed orphans 15:08:49 mhroncok: my plan was to wait with adopting any packages until after the SIG leaf cleanup in a week. after that, I'll request the remaining needed packages 15:09:00 ack 15:09:28 I mean, we could just adopt all of them now and drop them again later, but that's needless churn 15:09:46 nope, this is good 15:10:12 okay okay 15:11:42 just as a heads-up, I've been working on merging modular changes back into our packages ... only 11 are left on my list, all others are either already equivalent with modular versions or have pending PRs 15:12:28 I can do some test rebuilds later, since rawhide in COPR is now un-f#cked again, if you think that's a good idea 15:13:39 I like test rebuilds, makes my ACK seem less... arbitrary ;-) 15:14:52 right 15:14:58 also makes me less anxious to push changes ... 15:16:01 Hey there \o 15:16:12 Would it help to generate a list of changed files/classes (in the RPMs/JARs respectivley)? So we can see the rough magnitude of the update? 15:16:38 #chair sillebille 15:16:38 Current chairs: cipherboy decathorpe jstanek mhroncok sillebille 15:16:39 hi! 15:16:51 cipherboy: maybe ... but I don't know of any tool to do that 15:17:11 libabigail only works on C/C++ libraries (I think) 15:17:54 decathorpe: rpminspect will eventually get that functionality. 15:18:16 oh, nice 15:18:26 "eventually" doesn't help us now, though 15:19:41 decathorpe: Well, the "easy" answer is you can string rpm2cpio together with unzip and diff the results. :P 15:20:16 * decathorpe shrugs 15:21:09 decathorpe: Just a thought. 15:21:41 decathorpe: I'll try and write the shell script tonight and try it out on one of our updates to see if it looks like useful output or not. 15:21:53 that would be great 15:21:59 also, I mean, the latest PRs should all be safe since these changes are already in use for the modular stuff 15:22:26 decathorpe: Right. And thanks for updating the web page. :D I like the list of everything thta I can just click on. 15:22:59 sure. I try to always update it when I open or close PRs 15:23:14 but maybe I should shuffle them instead of displaying them alphabetically ;) 15:24:12 decathorpe: Or an "I'm feeling lucky" page that redirects you to a random PR ;-) 15:29:54 okay .. I'll do some test rebuilds once the load on COPR is smaller, and work on the remaining PRs 15:30:16 next week I'll orphan our "SIG leaves" if nobody wants them 15:30:21 anything else you want to talk about? 15:31:04 Nope, I think think all those look good. Once we have some of the new packages, I think there will be a few CVEs that we need to work on. I'll schedule time to work on them since some of those are Dogtag deps. 15:31:50 I don't have any to add. I'll try reviewing the submitted PRs :) 15:32:24 ok, sounds like a plan 15:32:43 then I suggest closing the meeting early :) 15:35:19 thanks guys 15:35:20 #endmeeting