19:00:01 #startmeeting FESCO (2010-05-04) 19:00:01 Meeting started Tue May 4 19:00:01 2010 UTC. The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot. 19:00:01 Useful Commands: #action #agreed #halp #info #idea #link #topic. 19:00:01 #meetingname fesco 19:00:01 #chair dgilmore notting nirik skvidal Kevin_Kofler ajax pjones cwickert mjg59 19:00:01 #topic init process 19:00:01 The meeting name has been set to 'fesco' 19:00:01 Current chairs: Kevin_Kofler ajax cwickert dgilmore mjg59 nirik notting pjones skvidal 19:00:11 Present. 19:00:20 * skvidal is here 19:01:17 * pjones is here 19:01:38 * notting is here 19:01:50 * nirik waits another minute or two 19:02:19 * dgilmore is here 19:03:12 ok, I guess we can go ahead and get started. 19:03:24 #topic #351 Create a policy for updates - status report on implementation 19:03:37 cwickert and notting were going to work on comps groups? anything to report there? 19:03:51 So KDE SIG came up with a list of critical KDE packages as you asked for. 19:03:53 i have patches. need to push them. 19:04:03 Kevin_Kofler: cool. 19:04:28 Kevin_Kofler: can you do a patch against comps? or have someone from kde sig do so and send to notting? 19:04:33 Several of us had reservations about the usefulness of the process, but in the end a nonempty list was voted (for the record, I voted against it, I wanted the list to be empty). 19:04:53 The list is: kdm, kdelibs and all their dependencies (which includes qt-x11 and qt in particular). 19:05:17 ok. 19:05:22 what about stuff like kdebase? 19:05:26 Kevin_Kofler: stop just making noise 19:05:29 We decided not to consider all of kdebase-workspace and its transitive closure to be critical at this time because it has too many dependencies. 19:05:56 Kevin_Kofler: kdm and kdelibs? thx. 19:05:57 kdebase-workspace itself will be protected due to kdm being (it's a subpackage of kdebase-workspace). 19:06:15 sounds good. 19:06:21 dgilmore: How is this noise? 19:06:31 I have been asked to bring this up in KDE SIG, I did. 19:06:34 Kevin_Kofler: critical path should be the minimal package set to run a kde session 19:06:49 Kevin_Kofler: adding unnessecary extra commentry 19:07:39 anything else on updates implementation for now? 19:07:45 If you had followed the KDE SIG meeting, you'd have noticed how factual my report is. 19:08:11 i'll get the changes pushed to comps-f14 today-ish 19:08:18 notting: thanks. 19:08:26 #topic #371 Change package owner of ddclient (as "subhodip" is nonresponsive) 19:08:26 .fesco 371 19:08:27 nirik: #371 (Change package owner of ddclient (as "subhodip" is nonresponsive)) - FESCo - Trac - https://fedorahosted.org/fesco/ticket/371 19:09:06 It's worth noting that rsc has all acls for this package and has updated it... he just wanted the primary owner changed. 19:09:18 * dgilmore thinks there is nothing for us to do here. we have a process for this that has not been followed 19:09:26 it was recommended that it be started 19:09:37 Well, this is a fasttrack nonresponsive request AFAICT. 19:10:00 yeah, this is the fast track version of the non responsive maintainer process. 19:10:30 https://fedoraproject.org/wiki/Policy_for_nonresponsive_package_maintainers 19:10:30 * pjones isn't sure why this needs a fast track if somebody else has ACLs and is doing the work. 19:10:46 Yeah, I don't see a big need for a fasttrack either here. 19:11:02 Or are there other packages "maintained" by the same AWOL maintainer? 19:11:10 pjones: i fully agree 19:11:23 yes, he does maintain others. 19:11:48 nirik: I started regular AWOL already with another bug report, but it will take some weeks of course. 19:12:00 http://fpaste.org/6Nsh/ 19:12:13 there is no need to fast track it 19:12:20 regualr process has started move on 19:12:22 rsc: is there some urgency? 19:12:26 nirik: nope. 19:12:55 ok, then follow the regular procedure for now? ;) 19:13:15 Any objections to that? moving on in a minute... 19:13:18 nirik: already started doing so. 19:13:32 nirik: (after cwickert pointed out that) 19:13:54 (here now) 19:14:14 ajax: you didn't miss much :) 19:14:32 * nirik gets a page from dayjob. 19:14:40 #topic #370 allow bundling libiberty 19:14:40 .fesco 370 19:14:45 nirik: #370 (allow bundling libiberty) - FESCo - Trac - https://fedorahosted.org/fesco/ticket/370 19:15:06 worst library name ever 19:15:34 Hey, sorry 19:15:50 where is its upstream? 19:15:55 * nirik may be slow to respond. If someone else could take over running things that would be great. 19:16:02 dgilmore: gcc 19:16:20 Sadly, libiberty is the perfect example of the GNU project being completely inept at following proper engineering practices such as shipping libraries as such instead of bundling. :-( 19:16:36 Got stuck in a meeting 19:16:47 pjones: thanks found it 19:16:50 #info http://gcc.gnu.org/onlinedocs/libiberty/Using.html#Using 19:16:51 libiberty and gnulib are both like this. 19:16:52 Other offenders from the same upstream are gnulib, and the many copies of junk generated by auto*. 19:16:53 the documentation does explicitly recommend bundling it, so it seems like that's probably okay. 19:17:02 (even if it is pretty silly.) 19:17:22 It's extremely stupid. :-/ 19:17:23 indeed it seems pretty dumb 19:17:41 much as i dislike the gnu project in general, and libiberty in specific, it's not something we should correct for. 19:17:42 But I also strongly doubt we have any chance to convince upstream to change this. 19:17:50 The first question is whether binutils actually uses libiberty for anything on Linux 19:17:58 We could require building against e.g. binutils-devel for libiberty. 19:18:08 But that'd hardlock all the libiberty-using packages together. 19:18:13 As there's obviously no ABI. 19:18:20 Or even API. 19:18:29 And it's static-only, too. 19:18:29 well, there is API, but it's sortof a slow-moving target 19:18:58 sadly i dont think the fsf will listen to reason on this 19:19:09 having a stable API sortof defeats the whole point of the library 19:19:44 dgilmore: gnu project not fsf, but either way. 19:20:08 so, proposal: allow bundling of libiberty and gnulib 19:20:14 (+1 from me) 19:20:15 anyway, upstream says this is the recommended way of using this. 19:20:15 ajax: +1 19:20:17 +1 19:20:32 +1 for pragmatic reasons 19:20:37 How's this different from e.g. bundling JARs which we don't allow? 19:20:37 mjg59: exactly. 19:20:44 -1 from me. 19:20:49 I doubt there's any real way that anything in the libiberty paths would be a security issue 19:20:49 +1 i dont think we should fight it at this point in time 19:21:10 Most of what it's used for will be native functionality on Linux anyway 19:21:13 The upstreams of Java projects also often recommend bundling their JAR. 19:21:15 Kevin_Kofler: it's really more akin to linking against libgcc_s, but... 19:21:16 We still don't allow it. 19:21:28 that looks like 5 +1's to me 19:21:36 * notting_ is +1. if this gets through. 19:21:38 Kevin_Kofler: mjg59 has a point - it's presence on a linux machine is basically eliminated during compilation. 19:21:47 Parts of it, sure. 19:21:52 notting_: duly noted. 19:21:55 5 +1 == 's carries 19:21:58 we have 6 now 19:21:59 we're done 19:21:59 But libiberty also has stuff like obstacks, a C++ demangler etc. 19:22:01 next subject? 19:22:19 obstacks are also in glibc though 19:22:24 E.g. kdesdk links to libiberty from binutils-static (NOT a bundled one) for the demangler. 19:22:25 #topic #373: erlang provides/requires explosion 19:22:25 .fesco 373 19:22:27 nirik: #373 (erlang provides/requires explosion) - FESCo - Trac - https://fedorahosted.org/fesco/ticket/373 19:22:32 pjones: The demangler is not. 19:22:42 true, but again, more akin to libgcc_s 19:22:48 anyway, 6 votes = done 19:23:02 so, those erlang packages. pretty crazy stuff. 19:23:09 6 votes based on false premises = "done", but not good. 19:23:11 :-/ 19:23:25 Not all of libiberty effectively vanishes on GNU/Linux. 19:23:28 Only large parts. 19:23:29 have you ever considered not calling us all inept every chance you get? 19:23:33 we're moving on 19:23:42 erlang is the current subject 19:24:01 So on the current subject: this is how things are, what are we discussing? 19:24:03 Move on. 19:24:21 so erlang autodeps really need to be looked at and fixed 19:24:28 the erlang pkgs are producing 32% of all of our provides 19:24:31 skvidal: what _is_ it autoproviding? 19:24:38 every function 19:24:52 every function is a separate provide 19:24:59 that's pretty bogus. 19:25:02 every used function is a separate require 19:25:02 etc. 19:25:09 harden up guys. 19:25:11 If that's how Erlang works, that's how it is. 19:25:11 this is a change in the current updates-testing packages, afaict 19:25:11 pjones: agreed 19:25:29 notting: yes. and it is b/c they added their own find-provs 19:25:30 Kevin_Kofler: I could argue that that's how C works, but that doesn't make it a good way to package it. 19:25:35 the in-F13 packages (and in-f12, etc) aren't like that 19:25:49 and one of the co-maintainers has commented in the bug that he doesn't see the use of it either 19:25:54 C is linked per shared object. 19:26:07 I don't know how Erlang projects are linked. 19:26:09 I think we need to consider nacking these pkgs 19:26:12 Before we go any further with this, I'd like to see whether this is as-designed or a bug 19:26:30 mjg59: as designed, from the bug comments 19:26:49 Oh, sorry, I missed the buglink 19:27:03 mjg59: at the bottom of the fesco ticket 19:27:07 Yeah, got it now 19:27:08 mjg59: https://bugzilla.redhat.com/show_bug.cgi?id=564018 19:27:42 so - I brought the ticket up b/c I just wanted to make sure it has everyone's attention 19:27:59 but I thnk the proposal should be something like: erlang cannot make provides like this 19:28:08 and we nack the pkgs in updates-testing 19:28:42 i have a very minor issue with forbidding prov/reqs like this if that's how the language actually works. but i don't think it's how erlang actually works. 19:28:55 -1, it's not our job to decide this without any input from the Erlang maintainers. 19:28:58 Kevin_Kofler: C is not linked per shared object. If symbol resolution fails, the link fails. 19:29:05 ajax: well, if this is how the language actually works - then I think we need to ban the language from fedora 19:29:13 Kevin_Kofler: Where a maintainer's decision affects the rest of the project then it's exactly our job 19:29:13 ajax: or have a separate, optional, repo for it 19:29:28 ajax: b/c we're in deep shit if we have to have to deal with this all over the place 19:29:30 The question is whether this is the least worst solution or not 19:29:38 ajax: it's a big jump for our metadata size 19:29:43 Kevin_Kofler: https://bugzilla.redhat.com/show_bug.cgi?id=564018#c36 implies that there is a better way to do this 19:29:56 skvidal: i'm not saying there wouldn't be technical issues. 19:30:00 ajax: and for depsolving it only impacts the erlang* pkgs - but it impacts everyone for download metadata 19:30:17 certainly. 19:30:44 as far as bailiwick goes, i'm pretty sure this is _exactly_ the sort of issue fesco is for. 19:30:47 skvidal: Maybe we need a new metadata subset, like erlang.sqlite.bz2? :-) 19:30:56 also - from a use of resources standpoint it's unfair, if nothing else 19:31:13 .007% of the pkgs in the distribution consuming 6% of the metadata size seems 'unfair' 19:31:15 fwiw, this got noticed when i noticed an update transaction taking 1-2 minutes to depsolve 19:31:29 I know we have no obligation of fairness - but it seems like we should have _something_ 19:31:47 there's a nontrivial difference in e.g. seek time while reading the db here 19:31:55 (which I think is probably at least related to what notting just said.) 19:31:55 proposal: We block these packages from migrating out of updates-testing until a full discussion of the impact on the rest of the distribution has been had and alternative implementations explored 19:32:10 mjg59: +1 19:32:11 mjg59: +1 19:32:12 mjg59: +1 19:32:14 mjg59: +1 to that 19:32:19 (+1, obv) 19:32:36 * notting is +1 in theory, but notes we don't have infrastructure to *enforce* that 19:32:39 notting: iirc the transaction was full of erlang pkgs 19:32:46 skvidal: yes, it was 19:32:52 notting: Can we disable automigrate and ask the maintainers not to push? 19:33:14 ... we can always ask, sure 19:33:17 (I'm assuming that the maintainers aren't pathological) 19:33:34 +1 to mjg59's proposal, but we need to allow for the possibility of the discussion being that this way is the right way. 19:33:45 *the outcome of the discussion being 19:33:50 Kevin_Kofler: That leads to a different discussion, but yes 19:34:03 It may be that there is no better technical solution given the way Fedora currently works 19:34:11 Which then leads to policy discussion instead 19:34:23 Kevin_Kofler: the bugzilla url notting pasted above pretty much discounts that, but sure, there's some chance it's wrong. 19:34:29 mjg59: and probably some technology discussions at the packaging level 19:34:37 mjg59: and repository metadata 19:35:19 so that's 6+1. who gets to do the notification? 19:35:32 I'll do it 19:35:39 Where do we want to have this discussion? 19:36:01 in the ticket? 19:36:05 or in the bug 19:36:07 ? 19:36:10 we can cc the maintainers on the fesco ticket. note that the submitter of the update is the co-maintainer, techncially 19:36:44 Ok 19:37:02 so, probably cc gemi, peter, and ndim 19:37:21 sounds good. thanks everyone 19:38:02 is that everything? 19:38:22 or did the network just esplode? 19:38:48 nirik had to drop off for a bit 19:39:04 sorry, fighting a work fire... 19:39:14 #topic Open Floor 19:41:34 anything for open floor? 19:41:51 nothing from me 19:41:52 doesn't look like it 19:42:00 FYI, I'm not rerunning for FESCo. 19:42:07 really. you don't say. 19:42:11 And everyone who follows the devel ML will know why. :-) 19:42:33 ok, thanks for coming everyone. 19:42:37 #endmeeting