#meeting-1:fedoraproject.org log

<@alexsaezm:fedora.im>

19:00:46

!startmeeting Go SIG meeting

<@meetbot:fedora.im>

19:00:46

Meeting started at 2025-01-13 19:00:46 UTC

<@meetbot:fedora.im>

19:00:46

The Meeting name is 'Go SIG meeting'

<@alexsaezm:fedora.im>

19:00:55

!topic Roll Call

<@alexsaezm:fedora.im>

19:01:16

Hi everyone! (like always, we can wait a few minutes for everyone). First time in a different room outside our normal one!

<@mikelolasagasti:matrix.org>

19:01:52

!hello

<@zodbot:fedora.im>

19:01:54

Mikel Olasagasti Uranga (mikelo2)

<@mikelolasagasti:matrix.org>

19:02:24

we're aligning with the rest of the sigs, it's always a good thing to do ;)

<@buckaroogeek:fedora.im>

19:02:35

!hello

<@zodbot:fedora.im>

19:02:35

Brad Smith (buckaroogeek)

<@xbt573:fedora.im>

19:04:34

!hi

<@zodbot:fedora.im>

19:04:36

Alexey Lunev (xbt573) - he / him / his

<@alexsaezm:fedora.im>

19:06:04

I think we can start. We have 3 items labeled as "meeting" -> https://pagure.io/GoSIG/go-sig/issues?status=Open&tags=meeting&close_status=

<@alexsaezm:fedora.im>

19:06:40

Any preference or can we start from the older one?

<@buckaroogeek:fedora.im>

19:07:22

Random, queue or stack? :)

<@mikelolasagasti:matrix.org>

19:07:44

Ticket #57 is quite easy. I announced as suggested on the ticket the retirement of the packages next week if someone doesn't step up earlier. Nothing else to discuss about it I guess.

<@alexsaezm:fedora.im>

19:07:44

I have a dice on my desk, we can do random

<@alexsaezm:fedora.im>

19:08:13

Then we can skip that one

<@alexsaezm:fedora.im>

19:08:34

for the oldest one, https://pagure.io/GoSIG/go-sig/issue/43, is there any update? not that I can see

<@buckaroogeek:fedora.im>

19:09:06

I suspect mostly resolved

<@mikelolasagasti:matrix.org>

19:09:09

it's related to the discussions we had in the matrix channel this week

<@buckaroogeek:fedora.im>

19:09:59

several major docker packages are now vendored and much more easily updated

<@buckaroogeek:fedora.im>

19:10:56

moby-engine, docker-compose, docker-compse-switch, containerd, docker-buildx

<@buckaroogeek:fedora.im>

19:11:48

a few more need work (e.g. buildkit)

<@alexsaezm:fedora.im>

19:12:03

that's awesome!

<@mikelolasagasti:matrix.org>

19:12:30

downside is that that created many leave packages and now some are orphaned

<@buckaroogeek:fedora.im>

19:12:57

yes

<@mikelolasagasti:matrix.org>

19:13:02

cadvisor

<@mikelolasagasti:matrix.org>

19:13:02

```

<@mikelolasagasti:matrix.org>

19:13:02

<@mikelolasagasti:matrix.org>

19:13:02

reg

<@mikelolasagasti:matrix.org>

19:13:02

migrate

<@mikelolasagasti:matrix.org>

19:13:02

golang-github-tonistiigi-fsutil

<@mikelolasagasti:matrix.org>

19:13:02

golang-github-prometheus

<@mikelolasagasti:matrix.org>

19:13:02

golang-github-moby-swarmkit-2

<@mikelolasagasti:matrix.org>

19:13:02

golang-github-moby-buildkit

<@mikelolasagasti:matrix.org>

19:13:02

golang-github-fsouza-dockerclient

<@mikelolasagasti:matrix.org>

19:13:02

golang-github-docker-cli

<@mikelolasagasti:matrix.org>

19:13:02

golang-github-docker

<@mikelolasagasti:matrix.org>

19:13:02

```

<@mikelolasagasti:matrix.org>

19:13:02

# fedrq whatrequires golang-github-docker-devel -F source

<@mikelolasagasti:matrix.org>

19:13:02

doctl

<@alexsaezm:fedora.im>

19:14:19

is there a goal where we can say that the issue can be close?

<@mikelolasagasti:matrix.org>

19:15:17

I guess the issue can be closed, but a ticket should be opened to discuss what to about vendoring or not packages by default

<@mikelolasagasti:matrix.org>

19:15:45

and I guess that was one of the items to work on the original ticket

<@mikelolasagasti:matrix.org>

19:16:10

the last comment has this one: #action mikelo to create a separate ticket to discuss creating guidelines for bundled packages

<@mikelolasagasti:matrix.org>

19:16:14

but I guess it was never created

<@buckaroogeek:fedora.im>

19:16:45

`#info We'll resume the docker discussion after the release of F37` :)

<@mikelolasagasti:matrix.org>

19:16:55

and current status goes beyond that discussion

<@mikelolasagasti:matrix.org>

19:17:09

that never happened 😅

<@mikelolasagasti:matrix.org>

19:18:00

I think in F38 cycle or F39 we had big issues with eclipseo dropping all the packages he owned due to unresponsiveness and since then everything has been about pushing the ball ahead

<@mikelolasagasti:matrix.org>

19:18:56

I've been workign to keep several complex stacks updated (otel, grpc, ...), but now that we've some orphans around containerd, we need to rethink what to do

<@alexsaezm:fedora.im>

19:20:02

We should make FESCo aware of this and ask them I guess

<@mikelolasagasti:matrix.org>

19:20:20

gotmax23: is working on go-vendor-tools, but it's not the official tool yet. People, myself included, have been proposing vendored packages as it's nearly impossible to get reviews on time in some cases or simply don't want to work on dependencies. EPEL gang is adding vendored packages (`tailscale`, `glow`, ...) without using go-vendor-tools.

<@mikelolasagasti:matrix.org>

19:20:33

we all know gotmax23: is working on go-vendor-tools, but it's not the official tool yet. People, myself included, have been proposing vendored packages as it's nearly impossible to get reviews on time in some cases or simply don't want to work on dependencies. EPEL gang is adding vendored packages (`tailscale`, `glow`, ...) without using go-vendor-tools.

<@mikelolasagasti:matrix.org>

19:22:03

<@mikelolasagasti:matrix.org>

19:22:03

<@mikelolasagasti:matrix.org>

19:22:03

our documentation in https://docs.fedoraproject.org/en-US/packaging-guidelines/Golang/#_bundled_or_unbundled states:

<@mikelolasagasti:matrix.org>

19:22:03

but this is not the reality anymore.

<@mikelolasagasti:matrix.org>

19:22:03

<@mikelolasagasti:matrix.org>

19:22:03

At the moment golang projects packaged in Fedora SHOULD be unbundled by default. It means projects are built from dependencies packaged in Fedora.

<@mikelolasagasti:matrix.org>

19:22:58

if we decided to go bundled/vendored by default, I'll move all my packages to that system and orphan many leave dependencies. And I guess more people would do the same.

<@mikelolasagasti:matrix.org>

19:23:37

would you mind to start the conversation with FESCo alexsaezm ?

<@mikelolasagasti:matrix.org>

19:24:02

I think a ticket must be opened for that, right? I can add info and context after

<@alexsaezm:fedora.im>

19:24:29

Sure

<@alexsaezm:fedora.im>

19:24:32

!action: Make FESCo aware of the Go dependency situation

<@alexsaezm:fedora.im>

19:24:54

hmmmm I think I wrote the command wrong...

<@alexsaezm:fedora.im>

19:25:12

!action @alexsaezm to make FESCo aware of the Go dependency situation

<@alexsaezm:fedora.im>

19:25:19

now

<@mikelolasagasti:matrix.org>

19:26:45

F42 branching is in 3 weeks

<@mikelolasagasti:matrix.org>

19:27:20

I think worst case I can take ownership of the orphaned packages if FESCO's discussion takes longer

<@mikelolasagasti:matrix.org>

19:28:05

there is time until Feb 22nd when orphan packages would cause issues

<@mikelolasagasti:matrix.org>

19:28:32

so we wouldn't be affected by the orphans for F42, but would for F43

<@mikelolasagasti:matrix.org>

19:28:56

F42 would have current status, some packages are outdated, but most of the binaries build just fine

<@mikelolasagasti:matrix.org>

19:29:27

F43 would devel cycle would be the affected one

<@mikelolasagasti:matrix.org>

19:29:56

so no need to take ownership for now, but discussion and decisions should come before Feb22

<@alexsaezm:fedora.im>

19:30:19

understood

<@alexsaezm:fedora.im>

19:30:29

I will create the ticket right away so we can have this sorted as soon as possible

<@mikelolasagasti:matrix.org>

19:31:16

thanks

<@buckaroogeek:fedora.im>

19:31:17

I have some time available to work on packages

<@buckaroogeek:fedora.im>

19:31:43

a list perhaps in priority order would help

<@mikelolasagasti:matrix.org>

19:32:16

I'm not sure what would be the lsit of the packages to work on

<@mikelolasagasti:matrix.org>

19:32:38

if bundling becomes the default, then the picture is much more simpler

<@buckaroogeek:fedora.im>

19:32:45

yes

<@mikelolasagasti:matrix.org>

19:32:46

if not, we would need to think what to do

<@mikelolasagasti:matrix.org>

19:33:24

but let's face it, if there is no enough bandwidth to keep current packages, then it may not make sense to work on those stacks

<@mikelolasagasti:matrix.org>

19:33:56

some simpler packages that just requrie a few non k8s/moby/docker/otel packages might be fine, but bigger ones related to devops/cloud stuff will be impossible to be built

<@mikelolasagasti:matrix.org>

19:34:26

we've all these packages https://gitlab.com/fedora/sigs/go/package-data/-/blob/main/all_packages?ref_type=heads for all these binaries https://gitlab.com/fedora/sigs/go/package-data/-/blob/main/binaries?ref_type=heads

<@buckaroogeek:fedora.im>

19:35:08

Will take a look

<@mikelolasagasti:matrix.org>

19:35:35

packages like `rclone` or `golang-github-acme-lego` have many unique dependencies

<@mikelolasagasti:matrix.org>

19:36:56

packages like `golang-github-pkg-errors`, `golang-gopkg-yaml-3` or `golang-github-spf13-cobra` are shared by many packages

<@mikelolasagasti:matrix.org>

19:38:22

packages like `golang-github-pkg-errors` (73), `golang-gopkg-yaml-2` (72) `golang-gopkg-yaml-3` (43) or `golang-github-spf13-cobra` (63) are shared by many packagese

<@alexsaezm:fedora.im>

19:38:32

anything else from the topic apart from the action? should we move to the next item?

<@mikelolasagasti:matrix.org>

19:38:54

next one, sorry 😅

<@alexsaezm:fedora.im>

19:39:13

nothing to be sorry about :D

<@alexsaezm:fedora.im>

19:39:15

The other issue we have is the membership clean up (https://pagure.io/GoSIG/go-sig/issue/59)

<@alexsaezm:fedora.im>

19:39:25

I only notified the list, nothing else

<@alexsaezm:fedora.im>

19:39:31

it didn't get that much attention

<@buckaroogeek:fedora.im>

19:40:00

I read it :)

<@mikelolasagasti:matrix.org>

19:40:03

I took it as a positive sign

<@alexsaezm:fedora.im>

19:40:12

no news good news?

<@mikelolasagasti:matrix.org>

19:40:17

yep

<@alexsaezm:fedora.im>

19:40:49

In that case, I'll check all the accounts and send the email

<@mikelolasagasti:matrix.org>

19:41:12

Zbigniew, part of FESCo IIRC, gave positive feedback

<@mikelolasagasti:matrix.org>

19:41:23

so "little feedback, good news" in this case 😅

<@alexsaezm:fedora.im>

19:41:28

<@alexsaezm:fedora.im>

19:41:29

correct

<@alexsaezm:fedora.im>

19:41:54

!action @alexsaezm will reach not active Go SIG members

<@alexsaezm:fedora.im>

19:42:11

And I guess with this we can move to the open floor

<@alexsaezm:fedora.im>

19:42:17

!topic: Open floor

<@alexsaezm:fedora.im>

19:42:30

... : again

<@alexsaezm:fedora.im>

19:42:34

!topic Open floor

<@alexsaezm:fedora.im>

19:42:40

(I didn't use the topics in the whole conversation)

<@buckaroogeek:fedora.im>

19:43:58

nothing from me

<@alexsaezm:fedora.im>

19:44:16

FYI: recently I realized that packit has the fast forward feature already available -> https://packit.dev/docs/fedora-releases-guide/non-divergent-dist-git-branches

<@mikelolasagasti:matrix.org>

19:44:32

<@mikelolasagasti:matrix.org>

19:44:32

I've a couple of new reviews if someone has time:

<@mikelolasagasti:matrix.org>

19:44:32

- `gosec` https://bugzilla.redhat.com/show_bug.cgi?id=2337048

<@mikelolasagasti:matrix.org>

19:44:32

- `kustomize` https://bugzilla.redhat.com/show_bug.cgi?id=2336849

<@mikelolasagasti:matrix.org>

19:44:49

both are bundled with go-vendor-tools

<@alexsaezm:fedora.im>

19:45:14

I'll check them

<@buckaroogeek:fedora.im>

19:45:51

alexsaezm: - did you see my note on govulncheck?

<@alexsaezm:fedora.im>

19:46:10

damn... I saw a notification but I think I messed up something

<@alexsaezm:fedora.im>

19:46:14

sorry

<@buckaroogeek:fedora.im>

19:46:20

<@alexsaezm:fedora.im>

19:46:21

let me try to find it

<@mikelolasagasti:matrix.org>

19:46:22

is it broken again?

<@buckaroogeek:fedora.im>

19:46:45

govulncheck -version returns v0.0.0

<@alexsaezm:fedora.im>

19:46:58

I will check that

<@alexsaezm:fedora.im>

19:47:10

!action @alexsaezm to check govulncheck version issue

<@alexsaezm:fedora.im>

19:48:14

Sorry for missing it Brad Smith

<@buckaroogeek:fedora.im>

19:48:26

Not too worry

<@alexsaezm:fedora.im>

19:48:29

Anything else? or we can call it?

<@buckaroogeek:fedora.im>

19:48:39

Nothing more from me

<@mikelolasagasti:matrix.org>

19:49:44

neither

<@alexsaezm:fedora.im>

19:50:07

In that case... I think our first meeting outside the classic room has been a good one :D

<@alexsaezm:fedora.im>

19:50:18

thanks everyone!

<@alexsaezm:fedora.im>

19:50:28

!endmeeting