17:01:41 #startmeeting fpc 17:01:41 Meeting started Thu Dec 18 17:01:41 2014 UTC. The chair is geppetto. Information about MeetBot at http://wiki.debian.org/MeetBot. 17:01:41 Useful Commands: #action #agreed #halp #info #idea #link #topic. 17:01:41 #meetingname fpc 17:01:42 The meeting name has been set to 'fpc' 17:01:42 #topic Roll Call 17:02:15 geppetto limburgher mbooth orionp racor Rathann SmootherFr0gZ spot tibbs|w tomspur: FPC ping 17:02:29 morning 17:02:36 * dwmw2_gone blinks. https://fedoraproject.org/wiki/Packaging_Committee?rd=Packaging:Committee says this meeting was an hour ago 17:03:08 dwmw2_gone: the fedora calendar has the correct time 17:03:15 dwmw2_gone: it changes with DST 17:03:22 #chair orionp 17:03:22 Current chairs: geppetto orionp 17:03:37 Howdy. 17:03:43 #chair tibbs|w 17:03:43 Current chairs: geppetto orionp tibbs|w 17:03:49 hey tibbs 17:04:04 Hi 17:04:06 Sorry, they pushed up a big office move from Monday to today so I'm in and out. 17:04:16 #chair mbooth 17:04:16 Current chairs: geppetto mbooth orionp tibbs|w 17:04:23 * Rathann here 17:04:27 #chair Rathann 17:04:28 Current chairs: Rathann geppetto mbooth orionp tibbs|w 17:04:39 geppetto: https://apps.fedoraproject.org/calendar/packaging/#m1663 also has it as an hour ago. But OK :) 17:05:18 hmmm, ok thanks 17:05:27 I so dislike DST. 17:05:28 I thought tom said he'd fixed it 17:05:46 dwmw2_gone: But when you asked me, I swear I said 17:00Z. 17:06:29 dwmw2_gone: but the block is in the correct place … 17-18 UTC 17:06:51 If you did I think I miossed it; I looked it up. Anyway, we're here now (although babies are home and I should have finished work). No matter. 17:07:30 ok, we have enough to start 17:07:40 dwmw2_gone: Which ticket did you want to talk about … can do that first 17:07:45 thanks 17:07:52 https://fedorahosted.org/fpc/ticket/480 17:08:07 #topic #480 Packaging guidelines for consistent PKCS#11 usage 17:08:11 https://fedorahosted.org/fpc/ticket/480 17:08:32 so I anticipate the question "why is this a *packaging* guideline?" 17:08:36 I support this generally. 17:08:54 Actually this is pretty much in line with things like the system security policy stuff. 17:08:58 to which the answer is that it often depends on *how* you build and configure the package. The choice of crypto library to build against, and the default config file you ship with 17:09:03 At least I think it is. 17:10:13 yes. This is the next step that we talked about after the coherent trust policy with p11-kit-trust, that landed in F19. 17:10:29 For me it comes down to details of exactly how package reviewers are supposed to know this stuff. 17:11:00 So we kind of have the power t say things like "you must build your app with XYZ option" 17:11:23 But we don't really have the power to say things like "you must write code to support XYZ" 17:11:29 Indeed. 17:11:31 tibbs|w: I can provide help with *testing*, and also I think you suggested looking in the documentation. 17:11:37 and if they get it wrong, I can file bugs :) 17:11:41 I'd appreciate some way of testing without VPN 17:11:41 geppetto: agreed. 17:11:50 I'm not saying "you must write code to..." 17:11:57 geppetto: It does have "should" all around in any case. 17:12:17 I'm doing that bit. Current summary at http://sourceforge.net/p/opensc/mailman/message/33164370/ 17:12:43 I have wpa_supplicant working nicely, which was blocking some of the stuff they wanted to do to clean this up in NetworkManager. 17:12:44 etc. 17:13:07 this is just about "if it's available, please use it" :) 17:13:44 So in the client applications part, there are three things which are all SHOULD … but I don't see how those happen, would it be obvious to anybody packaging those apps. … to a reviewer? 17:14:02 dwmw2_gone: how do we check these "SHOULD"s ? 17:14:13 I would expect that the packager has some clue what the application does, and if it can use SSL client certificates or not. 17:14:25 The PKCS#11 providers part seems easier … a file needs to be added somewhere, if your package does something … explain what the file looks like, and how you tell if your package applies 17:15:07 Didn't I link to the p11-kit documentation on that? I can certainly add that. And anyone packaging a PKCS#11 provider library will know that they are doing so, so I'm not worried about "how you tell if your package applies" :) 17:15:44 dwmw2_gone: Ok … yeh :) 17:16:24 the client apps. bit seems the sticker one anyway … as I imagine a bunch of stuff uses SSL in some form, but packagers will have no clue about PKCS#11 17:17:02 For instance … I assume curl/urlgrabber/yum should be able to use those things 17:17:18 does yum use client certificates for authentication? 17:17:22 dwmw2_gone: yeh 17:17:23 curl yes; I need to fix that :) 17:17:33 It's on my list. 17:18:00 dwmw2_gone: sslclientcert in yum.conf man page 17:18:06 ok, I'll add it to my list :) 17:18:18 dwmw2_gone: probability that it lets you use a yubikey though … probably near 0% :) 17:18:21 * Rathann looks at OpenVPNs way of specifying the cert store... yuck 17:18:43 Rathann: :) My build accepts a standard PKCS#11 URI :) 17:18:57 my OpenVPN patches got acked; waiting for the pkcs11-helper library pull request to go in. 17:19:18 anyway, I don't think it's a sticking point if packagers sometimes miss this. 17:19:18 and that's something I'm very much in favour of 17:19:47 we can file bugs and get them to look at changing, if we need to 17:20:25 but the existence of the guideline will be a useful motivation factor in *getting* them to change, for example "please build with GnuTLS instead of OpenSSL". 17:20:39 * Rathann looks at the tracker bug 17:20:41 or "please apply this patch which is backported from the upstream HEAD where they just accepted my patches" 17:21:00 All I ask is that you consider that generally guidelines are about giving packagers and reviewers enough information to get it right initially. Not just about having something you can point to when telling people they're doing it wrong. 17:21:14 understood. 17:21:26 That means providing at least general documentation about how to verify these things. 17:21:44 it might make sense to provide a wiki page or something, and refer to it from the guideline. With some "how to tell" and "how to test" instructions. 17:21:52 Yeh, again … I have no problem ACKing the desire for "All of these should just take a simple PKCS#11 URI and Just Work™." 17:22:00 geppetto: I agree. 17:22:22 dwmw2_gone: And, yes, I think there's a wiki hierarchy for that kind of thing already. 17:24:13 so... 17:24:25 dwmw2_gone: so the actual change to the Packaging Guidelines would be those four SHOULDs, correct? 17:24:25 #info General concensus that this is desirable 17:24:25 #action dwmw2 Add examples for common libraries/APIs, on the client applications. 17:24:26 assuming I put together some basic help for how to tell and how to test. 17:24:35 Rathann: yes. 17:24:47 and a link to a more detailed wiki page I guess 17:24:51 yeah 17:24:56 I'm +1 to that 17:25:23 dwmw2_gone: I would also merge rationale/expectations into backgroud at the top … basically a "this is what we want" section and then a "this is how to check that you have it" 17:25:55 yes. I added the background later, after tibbs' (I think) comment in the ticket 17:26:02 * geppetto nods 17:26:06 I'll clean that up 17:27:10 Ok, cool … anymore comments? 17:27:41 #topic #478 Proposal: Package Guidelines: DevAssistant Assistant packages (DAP) 17:27:45 https://fedorahosted.org/fpc/ticket/478 17:28:08 thanks 17:28:10 * dwmw2_gone goes 17:28:54 I have to say, I still don't really know what devassistant does, but these guidelines seem clean to me. 17:29:19 However, there are some magic macros and I don't know what they do. 17:29:30 %repack_assistant, for example. 17:29:46 hm, shouldn't the macros be prefixed with underscore? 17:30:03 I mean the _path macros 17:30:09 yeh, %install_assist and %check_assist 17:30:31 Rathann: I thought we only did that for globals ones 17:30:55 hm 17:30:56 If you BR something to get new macros they could be non _ prefixed 17:31:00 but … not sure. 17:31:10 me neither :( 17:31:14 :) 17:31:24 Honestly I prefer macros without random underscores. 17:31:35 I mean, they're supposed to save typing. What use is an underscore? 17:31:40 well, this is not an issue for me 17:31:43 just asking 17:31:47 Besides two extra keystrokes.... 17:32:15 Now, the macros don't hide the section names within them, which is good. 17:32:22 yeh 17:32:24 It's a shame that "%install_assistant" doesn't generate a file list so you can "%files -f dap_files" 17:32:36 Personal preference though 17:32:49 mbooth: It's not a bad suggestion, really. 17:33:00 If this is so completely automated, then why not? 17:33:08 agree 17:33:12 I guess tradej isn't here, though. 17:33:20 We do it in java land to reduce user-error 17:33:20 yeh, I guess he probably didn't know 17:33:30 I will add the suggestion to the ticket 17:33:52 Saying that, I think I'm happy to +1 this as is. 17:34:28 license files? 17:34:53 And do we want to see the sekrit macros expanded in the guideline? 17:35:26 they'll just get out of date, but.... 17:35:49 tibbs|w: I'm not sure … I think we've let them stay secret in other policy, and people have changed them anyway even when they are expanded in policy 17:35:59 That's occasionally true. It's something we've gone back and forth with before. 17:36:39 Note that the guideline does currently expand the pathname macros, which is fine. 17:36:59 Maybe a general explanation of what those do? 17:37:11 I'm just trying to avoid cargo cult specfile writing. 17:37:27 DAPs seem to be plain tar.gz files 17:38:27 Looks like 0.10 isn't even in rawhide yet? 17:38:33 or koji 17:38:38 You know, I think we should request a sample package which follows the guideline for most drafts. 17:39:04 I've got a little issue... 17:39:24 orionp: Ahh, didn't notice that version requirement … that should be in the specfiles than too 17:39:30 *then too 17:39:43 There are a number of dap-* packages already - for the OpenDAP server. 17:40:04 OOh. 17:40:09 ok, that's a biggish issue :) 17:40:15 yeah, that's ungood. 17:40:22 well, 4 anyway 17:40:26 Do we just want "devassist-"? 17:40:59 devassistant-* to be consistent 17:41:02 I would say devassistant-* 17:41:32 or talk to dap-* maintainers about renaming 17:41:45 That would be me :) 17:41:48 Either is fine with me; I'd leave it to tradej but I think he should change it or provide a cogent argument against it. 17:41:52 oh 17:41:53 ok 17:41:58 yeh 17:42:19 I'm fine with any sane non-used name 17:42:31 The exisiting dap-* names are not particularly appropriate 17:42:44 But I want to say again that this is a great draft. If all submitted drafts were like this... 17:42:54 +10 17:42:57 tibbs: yeh 17:44:41 #info Policy is awesome for a first draft, well done! 17:44:51 :D 17:45:12 #action Tradej Maybe create a filelist in %install_assistant and use %files -f? 17:45:34 #action Tradej Need the version requirement on devassistant 0.10 to be in the specfiles. 17:45:58 #action Tradej No LICENSE files in the specfiles. 17:46:15 #action Tradej Speak with orionp about the dap-* package name prefix. 17:46:28 what did I miss? 17:47:09 #action Tradej Create an example package for Fedora 17:47:20 Anymore comments? 17:47:23 Looks good 17:47:44 #topic #479 Remove F17 cruft from systemd macros 17:47:48 https://fedorahosted.org/fpc/ticket/479 17:48:39 Can anyone think of a reason not to? 17:49:21 RHEL? 17:49:34 el7 would be post Fedora 17 … and el6 didn't have systemd 17:49:36 RHEL7 is F19+ 17:49:41 OK 17:49:54 Ok, I'm +1 17:49:58 +1 17:49:58 +1 17:50:03 +1 17:51:24 tibbs: ping? 17:51:57 +1 17:51:58 Rathann: ping? 17:52:01 Sorry, called out again. 17:52:21 +1 17:52:24 #action #479 Remove F17 cruft from systemd macros (+1:6, 0:0, -1:0) 17:52:26 Though obviously I was +1 to my own suggestion. 17:52:32 #topic #483 Temporary bundling exception request for ipsilon: jquery, bootstrap, patternfly 17:52:37 https://fedorahosted.org/fpc/ticket/483 17:53:17 I'm assuming these are all javascript? 17:53:42 "PatternFly is an open source web user interface framework promoting consistency and usability across IT applications through UX patterns and widgets" 17:53:44 Unfortunately no links or anything in the ticket. 17:53:48 … so I think so 17:54:05 it is 17:54:09 https://github.com/patternfly/patternfly 17:54:22 This reference implementation of PatternFly is based on Bootstrap v3. Think of PatternFly as a "skinned" version of Bootstrap with additional components and customizations. 17:54:22 "PatternFly layouts are constructed using the Bootstrap grid system to be responsive out of the box." 17:54:28 * geppetto nods 17:54:42 Tempted to delay just for not telling us that kind of essential stuff. 17:54:52 I guess "lol, JS packaging facepalm" … +1 17:55:23 tibbs: Don't we need to do a secret cabal meeting before we're mean like that :) 17:55:38 +1 17:56:06 #chair spot 17:56:06 Current chairs: Rathann geppetto mbooth orionp spot tibbs|w 17:56:07 how about we introduce a temporary blanket exception for all JS until the JS guidelines are fleshed out? 17:56:26 Who is working on js guidelines? 17:56:26 For web JS, I guess I could +1 that 17:56:58 I'm a little more worrid about JS that should be used locally 17:58:26 Proposal: Blanket exception for bundling all JavaScript for usage over the network (Eg. web UIs), until complete JavaScript policy is complete. 17:58:30 +1 17:58:44 hm... 17:59:02 * Rathann wonders what's missing https://fedoraproject.org/wiki/Packaging:Web_Assets https://fedoraproject.org/wiki/Packaging:JavaScript 17:59:18 looks like they are complete already... 17:59:41 did we vote them in, and have erased it from our memories? 18:00:33 web assets page was last updated by Toshio with a comment that draft was approved... in August 2013 18:00:49 so … why does jquery still have an exception? 18:01:01 same for JavaScript guideline 18:01:27 geppetto: Cosmic rays affecting memory? ;-) 18:01:51 "Temporary bundling exception for anything to bundle jquery until the systemwide jquery feature is ready" 18:01:56 ah 18:01:56 that's 408 18:02:06 jquery unbundling is targeted at F22 18:02:14 https://fedoraproject.org/wiki/Changes/jQuery 18:02:16 that's why 18:02:33 +1 for blanket javascript exception, though I would still want them to file tickets. 18:02:45 We can just ack in the tickets, but we need to keep the tickets for tracking. 18:03:25 so +1 from me as well 18:03:57 But we have the policy … so what's the end date ... forever ? 18:04:15 geppetto: for now it's F22 release date 18:04:20 Yeah, I'm not sure why we're looking at a blanket exception 18:04:28 I'm now wondering if "Since these are not availabe as packages yet, there is no way to unbundle them. " just means "Nobody packaged them, yet … and it's easier for me to bundle than package them: 18:04:30 jQuery, sure 18:04:44 geppetto - agree 18:04:54 Solution is - package them 18:05:02 true 18:05:15 yeh, seems good to me 18:05:32 how about s/blanket JS exception/blanket JS-depending on JQuery exception/ ? 18:05:44 Rathann: we have that in 408, right? 18:06:23 actually it only mentions bundling jquery itself 18:07:06 Proposal: Allow jQuery until F22, due to 408 blanket exception. But need reasons that bootstrap/patternfly can't just be packaged. 18:07:32 https://fedorahosted.org/fpc/ticket/413 should be closed, right? 18:08:00 it is closed 18:08:24 ah, right 18:09:01 so it looks like jQuery is "just" 6 dependencies away from being able to build on Fedora 18:09:11 according to the change status page 18:10:23 geppetto: +1 to your proposal 18:10:41 I think most folks don't realize we have general javascript guidelines. 18:10:51 Hell, I'm on FPC and somehow I didn't realize it. 18:11:35 Crickets.... 18:11:46 Hope I didn't lag out. 18:11:52 no 18:12:23 I guess I'll have a chance to exercise using them while packaging some firefox addons 18:12:46 anyway, +1 to geppetto's proposal 18:12:55 Yeah, +1 from me too 18:13:29 ok … that's 4 18:13:43 well, obv. +1 from me 18:13:52 racor: orionp: vote? 18:13:56 +1 18:14:00 It's obvious that bundling them wouldn't pass anyway, so they're going to need to justify regardless of how we vote. 18:14:11 +1 18:14:37 #action Allow jQuery bundling until F22, due to 408 blanket exception. But need reasons that bootstrap/patternfly can't just be packaged. (+1:6, 0:0, -1:0) 18:14:49 #topic #481 static uids systemd-network, systemd-timesync, systemd-resolve 18:14:53 https://fedorahosted.org/fpc/ticket/481 18:15:06 Ugh. 18:15:11 yeh 18:15:33 I think is probably the only real good reason for static UIDs, and even then I think you could easily work around it. 18:15:35 Does anyone know wtf "host-independent initramfs images" are 18:16:01 I have no idea at all what that might be. 18:16:08 Please approve systemd-timesync, systemd.network, systemd-resolve users and groups. (Note: without the "d" at the end.) 18:16:08 tibbs: I disagree … NFS/shared storage seem like a much better usage and can't be worked around easily 18:16:20 I assume the . in systemd.network username is a typo? 18:16:35 Rathann: I don't know. 18:16:44 Rathann: I woudn't bet on that, given names can have dots in them 18:16:44 geppetto: The answer is... it depends. 18:16:47 it's just stupid 18:17:01 so … probably has a dot in it 18:17:07 When I see host-independent whatever... 18:17:25 I guess maybe they're trying to ship initramfs inages in the packages instead of generating them at kernel install time? 18:17:44 right … but … kernel modules etc. 18:17:49 But that doesn't really make sense to me. Maybe it's some container thing instead. 18:18:02 The solution to kernel modules is to include all of them. 18:18:08 is there a big feature to make initramfs not be changed/generated on client systems 18:18:23 who is running with that etc. 18:18:26 I haven't heard of one. If there was, they should have included a link in the ticket. 18:18:48 So, ask WTF "host independent whatever" is, and ask for clarification about the period versus dash thing? 18:19:02 Yeh 18:19:16 I doubt we need to vote on that. 18:19:53 #action Please explain what "host-independent initramfs images" means. Who is running with the feature, what is the timescale, what is it affecting, etc. etc. 18:20:56 #action If systemd.network is the correct username, please fix it to not have a dot in it. 18:21:51 Ok, that's all the new ones … I'm hungry, and it's near the holidays … does anyone else want to do a few more tickets? 18:21:59 I'm actually here. 18:22:27 If not, can we spend a few minutes about trac workflow and such? Because I guess we have a disconnect. 18:22:52 Sure (to either :-) 18:23:02 #topic Open Floor 18:23:11 I'm here for a few more mintue 18:23:11 Ok, yeh … I'm happy to either use 12 and 13 reports now 18:23:26 or to change 12 report to include meeting state too 18:23:38 I think the workflow is go through 12, move things to meeting if necessary for discussion. 18:23:54 That way any of us can just look at report 13 and know what need to be prepared to discuss. 18:24:22 yeh, the only problem with that is that people expect that if they open a ticket on Wednesday, we'll deal with it on Thursday … but if I only look at report 13, that is unlikely to be the case. 18:24:43 Maybe that wasn't enough time for us to prepare anyway. 18:25:10 Anyone is still welcome to bring it up; it could be trivial. 18:25:35 * geppetto shrug … yeh, I guess I can mostly find time to go through any new tickets on Wednesday and add meeting status to them. 18:25:36 But generally I think it would be better if we took care of as much as possible on our own and only dealt with things that _need_ a meeting in the meeting. 18:25:43 I can do some of that as well. 18:25:47 * geppetto nods 18:26:06 And a general apology for all of the trac spam. I didn't realize just how much we haven't been dealing with. 18:26:33 no apology needed 18:26:34 * Rathann will try to look at old tickets during Christmas break 18:26:38 That announcement is going to be huge. I will get to writeups this evening, hopefully. 18:26:57 geppetto: Will you have time to do an announcement or should I try and figure out how to do that? 18:27:14 This is my last day of work this year 18:27:17 so … no 18:27:40 unless you want to wait until next year for it 18:27:55 See, when I'm not working, I actually have time to do this stuff. 18:28:07 So, does the announcement mail go to devel or devel-announce, or both? 18:28:22 I think spot sent it to devel-announce 18:28:31 OK, I'll do that. 18:28:52 Think I should add an apology for the tardiness of some of the writeups? 18:29:01 no 18:29:08 I was vacillating. 18:29:16 * geppetto looks that word up 18:29:44 Changing my mind back and forth on the issue. 18:29:48 * geppetto nods 18:29:53 I'd say … def. no. 18:30:08 A few of the writeups happened anyway, just no announce 18:30:13 Yeah. 18:30:26 OK, I'll try to get to that today or tomorrow. 18:30:31 if all else fails … blame it on spot ;) 18:30:41 Easy enough. 18:30:46 :) 18:31:27 Ok … related to not being near a computer for a couple of weeks … I'm going to assume we aren't meeting again until next year 18:31:51 By which I mean the 8th 18:31:53 So, the 1st or the 8th. 18:31:59 jinx ;) 18:32:16 8th 18:32:17 Yeah, the 8th. I will make a note of that in the tickets we didn't get to today. 18:32:34 The holidays are just perfectly spread out this year. 18:32:51 * Rathann will fire off an e-mail about jQuery packaging status to TC and Jamie 18:33:22 geppetto: Will you update the tickets we dealt with today? 18:33:23 8th, 1st and 6th are holidays around here ;) 18:33:35 What's on the 8th there? 18:33:58 tibbs: yeh 18:34:23 I do the minutes, and then paste in the bits for each ticket to each ticket 18:34:38 miscommunication, I wanted to say next meeting on 8th, 1st ... 6th are holiday, many people are on holidays ... 18:34:39 Cool. Just wanted to make sure. 18:34:59 cool. I'll see you on the 8th then. 18:35:19 Happy holidays to everyone who celebrates them. 18:35:19 have a good Saturnalia :) 18:35:45 For me it's just a time to get more work done/. 18:36:25 All work and no play makes Jason a dull boy?;) 18:36:34 tibbs|w: Have a good work-slightly-less-hard-than-normal-fortnight then :-) 18:37:03 #endmeeting