21:01:58 #startmeeting fedora-spins 21:01:58 Meeting started Mon Jan 25 21:01:58 2010 UTC. The chair is biertie. Information about MeetBot at http://wiki.debian.org/MeetBot. 21:01:58 Useful Commands: #action #agreed #halp #info #idea #link #topic. 21:02:36 whois here? 21:02:41 .fas biertie 21:02:42 biertie: biertie 'Bert Desmet' 21:02:51 * nirik is around. 21:02:58 I keep forgetting to authenticate, as I haven't had a registered nick all that long. 21:03:04 * brunowolff is here 21:03:11 hehe, np brunowolff 21:03:17 kanarip: ? 21:03:19 GRRRRRRRR 21:03:45 sdziallas: ping 21:03:52 biertie: pong-ish 21:03:58 meeting time ;) 21:04:12 ah :) 21:04:12 #topic agenda 21:04:27 we have to push (or not) 2 spins 21:04:41 since I think this is the last chance they have :) 21:04:45 looks like today's the last day to do so. 21:04:47 yup! 21:04:50 security spin 21:04:58 and Fedora Ro Spin 21:05:12 and open floor off course 21:05:17 or does anybody wants to add something? 21:05:42 * nirik has nothing else. 21:06:00 #topic security spin 21:06:36 #link http://fedoraproject.org/wiki/Security_Spin 21:07:14 so this would be a regular spin we produce? 21:07:33 as I see it: yes 21:08:38 and this is the first time it goes to the spins process, if I recall correctly 21:08:43 I would think for a security spin, you'd redo it from uptodate packages. 21:08:57 biertie: yup, I think so, too. 21:08:58 I know work has been ongoing on this. 21:09:14 the ks looks good to me, I have no obvious blockers... 21:09:32 brunowolff: what do you mean? 21:09:42 you would use older software on the spin? 21:10:24 No, I mean that when I wanted one, I wouldn't grab a release ISO, but run livecd-creator to make a new iso. 21:10:46 Though maybe for forensics that isn't as big of a deal. 21:11:03 oh, that's why thingie has so much success 21:11:09 what is the name of that distro? -_- 21:11:15 yeah, I don't think it matters for some of the use cases. 21:11:31 If this is really meant for forensics you need to be really careful about touching the disks. (Even if you have a safe 21:11:45 you can also install it and update it easily enought from this base live media 21:11:48 copy, you probably don't want to change things.) 21:12:00 hehe, I also think it's weird you have irssi and firefox and stuff on it 21:12:21 I don't know why I would need it on a forensics cd 21:12:22 looking up info and asking for info on irc? seems fine to me. 21:12:28 -midori is on it too- 21:12:35 Even mounting file systems with logging can cause the disk to be updated. 21:12:46 brunowolff: does lxde automount disks? 21:12:50 biertie: firefox is needed for web-security testing 21:13:00 lmacken: you around? 21:13:20 nirik: what is your question 21:13:32 nirik: kital is the new owner 21:13:51 nirik: yep 21:13:54 kital: ah, welcome. ;) Just wondering if disks would be automounted in this setup or not? and perhaps inhibiting that would be wise... 21:14:20 nirik: yeah, kital and a few other people have been doing a lot of work on the spin lately. 21:14:36 yeah... 21:14:59 that's a good question... we should ensure it doesn't mount anything by default 21:15:26 I didn't notice any hardware diagnostic tools. Do you think that would be a useful combination or that people doing hardware 21:15:56 trouble shooting from a usb drive are a different set than those doing security testing. 21:16:00 I think smartctl is in base isn't it? 21:16:34 this are good points! we will consider it for the spin 21:17:03 we have still a lot off work to do to make all the things better 21:17:08 like webapptesting tools 21:17:15 implementing osstmm testpath 21:17:27 test-methodologies ... 21:18:05 nirik: i am not sure if smartctl is in base - but i can check it 21:18:48 forensic is just one scope for the spin - testing security is the other scope 21:18:51 kital: perhaps firstaidkit would be worth adding as well, but that might get it over into more a rescue media than security 21:19:26 ah that is fine - i think as we have no real rescue-media anymore this can also fill the gap 21:19:39 nirik: +1 for adding firstaidkit 21:19:41 * maxamillion is here 21:19:45 sorry for being late 21:19:58 I don't know where firstaid kit is these days, haven't heard much about it... 21:20:02 np maxamillion :) 21:20:07 hey adam 21:20:10 but I would love to be able to tell people how to use it to re-install grub and the like. ;) 21:20:44 * lmacken thinks every spin should have at least some recovery tools on it 21:21:26 added firstaidkit as request to our list 21:21:27 https://fedorahosted.org/security-spin/ticket/28 21:21:33 lmacken: how goes it? 21:21:34 fedora-live-base.ks:#firstaidkit-plugin-all 21:21:36 that would be nice. I hate having to tell people: "open a terminal and su to root, then: vgscan ; vgchange -ay ; mount /dev/mapper/VolGroup00-LogVol00 /mnt/sysimage ; mount /dev/sda1 /mnt/sysimage/boot ; mount -o bind /dev /mnt/sysimage/dev ; mount -o bind /sys /mnt/sysimage/sys ; chroot /mnt/sysimage; grub-install --recheck /dev/sda" 21:21:58 * maxamillion agrees with lmacken ... should we discuss a "base line" set of recovery tools that should be mandatory? 21:21:59 anyhow, I have no objections/blockers to this spin. 21:22:16 maxamillion: good good... you mentioned you have an horors student about to do work on the security spin? 21:23:07 lmacken: sure do, first steps will be to get her a FAS account and get her up to speed and then jump into packaging ... I actually need to go by the professors office and talk to him today 21:23:28 good stuff :) 21:23:54 i'm in class right now with my laptop but I'll swing by his office when I leave here 21:24:37 mhonarc is kind of an odd thing to have in the package. 21:25:01 At first I thought it was a different program by the same name as I remembered from long ago. 21:25:11 lmacken: back to your firstaidkit-plugin-all idea ... should we discuss that now or bring it up on the list and finalize the decision next week? 21:25:27 But it looks like it is the email to html archive program. 21:25:35 maxamillion: well, it's commented out in the base kickstart, so we should figure out why it's not enabled by default 21:25:56 * nirik suggests list for that discussion. 21:26:00 brunowolff: hmm, I'm not sure what pulls that in? Doesn't seem like a tool we would need to offer out of the box 21:26:02 list it is 21:26:13 I'll shoot out an email about it here in a few minutes 21:26:14 It's listed in the ks file. 21:26:33 Line 114 21:26:53 nirik: with regard to that list of common commands for system recovery, there are also a huge list of commands for using the security tools as well... it seems like we need to do a better job of putting that info in peoples faces 21:27:03 Maybe it is a typo for some similarly named package. 21:27:08 maybe have a corner on the wiki and make it the default homepage for the spin? 21:27:27 lmacken: yeah, we have a spins page for each spin, but not sure thats too great. 21:27:43 perhaps we could work with docs people to figure out a space for that, or where it makes the most sense. 21:27:54 yeah, good call 21:30:25 anyway 21:30:32 can we vote for it now? ^^ 21:30:55 sent to the list about the firstaidkit bit :) 21:31:20 * sdziallas is +1 to the security spin 21:31:20 +1 here as I said. 21:31:39 +0 21:31:55 +1 to security spin (though I might be biased) 21:32:05 crap ... brb 21:32:17 ;) 21:33:08 +1 too 21:33:15 so I guess the spin is accepted for the sig 21:33:22 congratz kital ;) 21:33:27 thanks guys ! 21:34:21 owkee 21:34:29 your spin is now in hands of the board 21:34:30 thanks luke and maxamillion for the awesome start and the solid base to proceed this 21:34:35 I hope they don't find to much legal issues ;) 21:34:44 I think we can move to the next topic now? :) 21:34:46 back ... sorry, something happened and X pegged my cpu to 100% and i couldn't get it to come back down 21:35:03 np maxamillion ^^ 21:35:14 #topic fedora RO spin 21:35:25 this is also a new spin :) 21:35:52 #link http://fedoraproject.org/wiki/Fedora_Ro_Spin 21:36:57 I think if locale based spins take off we may want to have a discussion about how to handle them consistently and to 21:37:14 deal with a lot more spin images being created. 21:37:38 yeah, this has come up before. 21:37:48 I don't get the usecase, but anyway.... ;) 21:38:06 We might already be to the point where releng starts pushing back against the number of spin isos being produced. 21:38:13 * nirik nods. 21:38:14 if I want fedora in dutch -my native language- I can configure it with one click of the mouse in dutch 21:38:25 I can understand to a point where its coming from, but I don't entirely see how this would be different from just selecting a different locality 21:38:33 well, they add openoffice... 21:38:41 and remove fonts that are not from their lang. 21:38:47 hrmmm... 21:38:50 hehe, *yeay* :) 21:38:51 I think locale spins are useful, similar to how the games spin is useful. Showing off Fedora to people with a hook to draw 21:38:55 their interest. 21:39:06 brunowolff: but can't the regular desktop one do that now? 21:39:08 brunowolff: yeah, I can respect that 21:39:38 Also openoffice is on the desktop spin since November. 21:39:40 nirik: I think the general idea is for the "out of the box" experience to be tailored to the people of that locale ... which I can respect the desire for 21:39:55 * nirik nods. 21:40:05 (Since this is part of why the games spin is oversize right now, I happened to notice the change.) 21:40:11 The issue tho is that if we do this, why shouldn't we do one for every locale? 21:40:16 but at the same time I am on the fence about the over all spin 21:40:21 brunowolff: interesting. 21:40:33 nirik: right, that's exactly why I'm on the fence about this 21:40:45 Desktop is targeting 1gb now, so including openoffice isn't the problem it used to be. 21:40:57 brunowolff: what? 21:41:26 nvm ... probably a discussion for a different time 21:41:27 I might be wrong, but that is my memory of the situation. 21:42:17 brunowolff: I heard that too, on f-d-l, IIRC 21:42:18 The desktop compose from last night was 840/849 MiB. 21:42:41 well, I would say normally we should talk about this on the list too, but there is very low time to get this spin approved if we do. 21:43:36 From a techincal review, they should use the openoffice stuff that is now part of the desktop spin. Otherwise I wasn't 21:43:45 seeing problems of a techincal nature. 21:45:08 * nirik thinks he's a weak -1. If we do this then we will see 1000 more and can't scale there. Unless they just want this in the spins-kickstarts and no compose... 21:45:10 i don't see issues of a technical nature, but from an infrastructure side of the house, I worry about the possibility of 1 spin image for every locale 21:45:11 I feel the question of whether we should be doing locale specific spins is outside my area. 21:45:44 maybe we should defer this to rel-eng / the board? 21:45:54 * maxamillion is going to have to join nirik's -1 on this 21:46:15 broffice has the same problem too then.. 21:46:20 sdziallas: that would be ok too, but note that we have little time... 21:46:26 How about if we approve ks only for this one? 21:46:30 biertie: well, there is a legal reason there. 21:46:38 biertie: broffice was originally approved because they aren't allowed to use the openoffice brand down there 21:46:45 nirik: right :) 21:46:59 biertie: not entirely, because brOffice is a completely different project from OO.o, and that spin is showcasing that ... the locale thing I think is a convenient side effect 21:47:14 brunowolff: that'd make sense - I mean it could still go into the git repo, in the worst case... 21:47:21 maxamillion: broffice is openoffice with another name. ;) 21:47:37 * sdziallas could do an iceweasel spin :p 21:47:41 * sdziallas hides 21:47:42 oh ok, srry :) 21:47:55 I would be ok with just adding the ks... but no shipped iso, etc... 21:48:02 but not sure thats what they want. 21:48:04 nirik: well ... so is neoOffice and Go-OO but they are technically separate projects 21:48:24 perhaps we could ping the submittor and ask them to respond to the list? 21:49:36 nirik: +1 21:49:40 and what is his nick? 21:49:46 we'll end up pushing it on time, but I think its a good idea 21:50:11 .fasinfo ajoian 21:50:12 sdziallas: User: ajoian, Name: Adrian JOIAN, email: adrian.joian@fedoraproject.ro, Creation: 2007-07-16, IRC Nick: ajoian, Timezone: Europe/Bucharest, Locale: en, Extension: 5102041, GPG key ID: F4C93C02, Status: active 21:50:16 sdziallas: Approved Groups: cla_done ambassadors cla_fedora 21:50:20 sdziallas: Unapproved Groups: None 21:51:44 so, can someone mail him our concerns and ask him to reply to the list? 21:52:11 (ie, doesn't the normal desktop iso work for this, do they need a produced spin, etc) 21:52:15 I would do it, but I can't :( 21:52:35 I lost my broadband connection, and my e-mail client wants to download 8000mails... 21:52:36 WTF 21:53:28 nirik luke - just an update from cwickert related to lxde on security spin - lxde itself does not automount 21:53:32 biertie: ouch 21:53:49 lmacken: ^^^ 21:53:52 kital: ouch 21:54:23 nirik: that means: I won't check my e-mail before 1feb :) 21:54:27 * nirik would mail them, but I have lots of stuff already to do... can someone else do so? 21:54:32 pcmanfm does a mount if you klick on a device 21:55:07 right, pcmanfm detects removable media but doesn't automount them 21:55:15 sdziallas: care to mail again? 21:55:32 biertie: I'm quite a bit short of time atm, too. 21:55:44 biertie: if nobody steps up, I'll do it, tho. 21:55:49 maxmillion: nirik and luke thought it is not a good idea to automount on the sec-spin 21:56:18 nirik luke is this ok for you? 21:56:18 kital: oh, that's good enough imho ... if you click the device and it mounts then that's fine 21:56:29 yes, thats good news. 21:56:38 well ... yeah, I suppose auto-mount could be bad 21:56:57 just write: Hi, we were talking about your spin, but we aren't sure what you want to do with it.. do you want to make a real spin, or do you just want to add it to the kickstart pool.. your faithful, the spin sig team 21:57:29 and add to reply to the spins list for further discussion. ;) 21:57:52 I have been in contact with the Romanian guys and I already told them that IMO this is not enough for a custom spin. a remix is fine for me, but not as a spin 21:58:04 (sorryy to join so late btw) 21:58:14 * nirik nods. 21:58:25 cwickert: +1 21:59:14 any other business? 21:59:29 fedora-min ks 21:59:31 #topic open floor 21:59:37 huff: oh yeah, good point :) 21:59:38 ok, we could do that too :) 21:59:44 #topic fedora-mini ks 21:59:48 ive made some progress what is the steps should i post patches to mailing list 21:59:53 nirik, can you add another significant digit to the size of spins reported on the nightly compose page? 22:00:12 brunowolff: possibly... 22:00:56 I see 4.1G now. Also I am interested if that is 4.1 * 2^30? 22:01:13 i think for F13 we can add the fedora-mini.ks and only those that need it use it and get other to use it in the future 22:01:16 (As opposed to say 4100 * 2^20.) 22:01:20 includign fedora-live-bse 22:01:35 brunowolff: it uses 'du -sh' right now. 22:01:54 huff: yeah, patches would be good... 22:02:11 sorry if this is a stupid question, but what is Fedora Mini actually? the first plans were to have a Gnome based Fedora Mini, is it still or is it moblin now or what? 22:02:23 k ill send outwhat Ihave tonight or ealry tomrrow need to run a few moretests 22:02:40 moblin extends fedora mini 22:02:54 cwickert: Fedora mini is a general SIG to cover Fedora on small devices. Moblin is one component of that, sugar another 22:03:04 my understating is fedora mini would be base ks no x 22:03:35 right, there are two different meanings of Fedora Mini. One is the SIG and the other the stripped down ks 22:03:54 brunowolff: I could just switch it to 'du' ? less readable, but more info? 22:03:57 ok to be clear ill name it feodra-min.ks 22:04:18 cwickert: the stripped kick start was my invention, it seems huff has taken it over somewhat 22:04:32 lol 22:04:37 not that I'm complaining :-D 22:04:44 If it isn't too cluttered, seeing the actual sizes you get would be nice. I'd like to compare them to what I get. 22:04:46 huff: name it feodora 22:05:00 it are great chocolates 22:05:05 well i would like to see smothing generic that other could use 22:05:10 huff: call it feodora 22:05:33 pbrobinson: what was your invision I may have take it out of context 22:05:35 hmm, strange things 22:05:37 anyway :) 22:05:41 Also only seeing the amount to the nearest 100Mb leaves a lot of doubt when trying to shave off some space. 22:05:42 I believe all the things that I tried to achieve with it should just be in -base.ks but to make it clean the comps groups would need some cleanup 22:05:54 brunowolff: will change for tomorrows run. 22:06:01 Thanks. 22:06:30 huff: it was a means to make Fedora small! I don't believe there should be a need for it. Small should be the base building block. Then add in what you need 22:06:54 pbrobinson: exactly what was the reason for it then, that base.ks did not provide 22:07:06 huff: exactly! 22:07:22 huff: I think base already provides to much 22:07:27 s/to/too 22:07:30 cwickert: I agree 22:07:52 +1 22:08:11 +2 22:08:13 base should include yum and networking, probably sshd and what ever is required for the console login. 22:08:28 I think the eventually plan is that mini and base would be the same. 22:08:33 some would argue against yum and sshd :) 22:09:02 my thoughts was the we could have a fedora-min.ks < fedora-base.ks 22:09:02 pbrobinson: maybe sshd, but not yum ... you really wanna package manage by hand? 22:09:12 * maxamillion doesn't like pain that much 22:09:12 I think if we strip down base a little, we won't need mini 22:09:22 humm 22:09:30 isn't that just @base @core ? 22:09:45 @base @core is pretty big 22:10:32 yeah, the kickstarts we use at work are without base because we don't use half the stuff in it 22:10:42 errr ... @base 22:10:42 it also includes input methods and lots of stuff, see http://git.fedorahosted.org/git/?p=spin-kickstarts.git;a=blob_plain;f=fedora-live-base.ks 22:10:43 yep 22:10:46 huff: agreed. the 'default' ones are too large. the mandatory ones are OK hence all the -blah in my .ks 22:11:01 pbrobinson: yea we did the same things for aos 22:11:02 pbrobinson: I have the same problem in LXDE 22:11:45 * nirik needs to go... 22:11:45 so the packages should be either moved to the group where default is useful or they should be changed to optional 22:12:02 bye nirik, thx for being here :) 22:12:02 currently base includes: @base-x @base @core @fonts @input-methods @admin-tools @dial-up @hardware-support @printing kernel memtest86+ 22:12:09 this is just too much IMHO 22:12:21 cwickert: +1 22:13:00 perhaps we should have a "desktop-base" and a real stripped down "base", this is what huff had in mind 22:13:02 true! 22:13:24 well I think there should be a -base that is literally "this is what you need to get a running fedora system" and then maybe a live-base that builds on top of that which adds ..... nvm, what cwickert said :) 22:13:41 well surely the various desktops should auto pull in things like X through deps, and NetworkManager will pull in the deps its needs 22:14:23 pbrobinson: the deps are another problem: anaconda -> firstboot -> metacity -> tons of gnome stuff, even evolution-data-server 22:14:46 I think the live-base or desktop-base (whatever we want to call it) should include NetworkManager and cnetworkmanager 22:14:47 cwickert: I have been working to reduce that too! Slowly but surely 22:15:13 nothing @base should pull in the likes of printing! 22:15:38 EG most Moblin and Sugar apps don't support it 22:15:43 I'll see what nirik and me can do in Fesco, these deps are evil 22:16:14 cwickert: +1 22:16:41 also I'd like to see hardware-support split out into something more granular. Servers rarely have wifi, printers etc, netbooks never have fibre channel etc 22:16:44 I think we should discuss this further on the mailing list and then get a formal outline of what we really want to do and then just go forward with it 22:17:06 pbrobinson: good catch, I'll add this to my list 22:17:35 maxamillion: sounds good! Maybe 2 posts, one for changes to the comps groups and one for the changes to -base.ks 22:17:38 maxamillion: +1, especially since huff seems to have problems with his networking now 22:17:43 pbrobinson: +1 22:17:52 cwickert: sounds good to me 22:18:10 both of the above have been on my ToDo list for _WAY_ too long! 22:18:19 ;) 22:18:24 story of my life :P 22:18:41 LOL! too true 22:21:24 hmmm 22:21:53 I would like to close the meeting actually 22:22:00 I NEED sleep o.0 22:22:01 +1 22:22:17 laters all 22:22:20 i missed most of the last part of the dicussion my netowrk is sucking right now 22:22:27 ill catch up on the log 22:22:28 so, if there is something else that is very important 22:22:32 nope 22:22:33 huff: yeah, check the logs :) 22:22:34 huff: we're going to move the discussions to the list 22:22:39 10-54 22:22:39 closing in 5 22:22:41 10-4 22:22:41 4 22:22:44 3 22:22:46 2 22:22:50 1.5 22:22:52 lol 22:22:53 1 22:22:59 #endmeeting