19:01:45 <alexsaezm> #startmeeting Go SIG meeting
19:01:45 <zodbot> Meeting started Mon Nov  6 19:01:45 2023 UTC.
19:01:45 <zodbot> This meeting is logged and archived in a public location.
19:01:45 <zodbot> The chair is alexsaezm. Information about MeetBot at https://fedoraproject.org/wiki/Zodbot#Meeting_Functions.
19:01:45 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
19:01:45 <zodbot> The meeting name has been set to 'go_sig_meeting'
19:02:03 <alexsaezm> The bridge between Matrix and IRC is still down
19:03:11 * alexsaezm will wait for people to join :)
19:05:33 <buckaroogeek> i am lurking
19:07:07 <alexsaezm> o/
19:11:35 <alexsaezm> seems nobody is around today (apart from buckaroogeek and me of course)
19:11:46 <buckaroogeek> :)
19:12:07 <alexsaezm> With very little people I guess the best thing is to jump into the Open floor, and the call it after a few updates :)
19:12:17 <alexsaezm> #topic Open floor
19:13:01 <buckaroogeek> is the meeting schedule posted somewhere?
19:13:09 <alexsaezm> yes. let me check
19:13:20 <alexsaezm> it's a little tricky to find
19:13:51 <alexsaezm> https://calendar.fedoraproject.org/SIGs/
19:14:12 <alexsaezm> https://calendar.fedoraproject.org/SIGs/#m10012
19:14:35 <buckaroogeek> ok thanks
19:14:40 <alexsaezm> and the logs archive should be linked from the go sig pagure page https://meetbot-raw.fedoraproject.org/fedora-golang/
19:14:51 <buckaroogeek> got it thanks
19:14:56 <alexsaezm> Meeting logs section in the README here -> https://pagure.io/GoSIG/go-sig/
19:15:29 <alexsaezm> FYI: I will send this to the devel and go mailing lists (didn't have time yet to write a proper email) but I will like to discuss there the current status of the GOPROXY settings
19:15:41 <alexsaezm> this is just for the record in case someone reads the meeting logs later
19:17:36 <buckaroogeek> GOPROXY and GOSUMDB?
19:17:43 <alexsaezm> both, yes
19:18:00 <alexsaezm> For the record the whole thing comes from this thread https://mas.to/@zekjur/111359951465906642
19:19:00 <eclipseo> .hello2
19:19:01 <zodbot> eclipseo: eclipseo 'Robert-André Mauchin' <zebob.m@gmail.com>
19:19:14 <alexsaezm> hi there eclipseo
19:19:17 <eclipseo> did we meet or not?
19:19:22 <eclipseo> i'm late
19:19:25 <eclipseo> hello
19:19:26 <alexsaezm> you arrived on time :)
19:19:52 <alexsaezm> I jumped into Open Floor because it was just buckaroogeek and me
19:20:35 <eclipseo> ok nothing to say really, we merged the fix regrding versioning
19:20:51 <alexsaezm> awesome
19:21:11 * alexsaezm just realized the logs are stored in real time https://meetbot-raw.fedoraproject.org/fedora-golang/2023-11-06/go_sig_meeting.2023-11-06-19.01.log.txt
19:23:21 <alexsaezm> from my side I was just commenting as you can see in the logs that I will open a email thread about GOPROXY and GOSUMDB because Filippo Valsorda made several good points about a change that we ship in Go
19:23:38 <alexsaezm> and I don't want to impose any change (nor I have clear what the solution might be although I have several ideas in mind)
19:23:47 <alexsaezm> and that's pretty much everything I have :)
19:23:51 <eclipseo> Was it done in preparation of using Go modules in Fedora?
19:24:10 <eclipseo> I think we wre supposed to be our own proxy or soething like that
19:26:02 <alexsaezm> I need to investigate more about the initial reasons (the original maintainer told me this but I have RAM as brain)
19:26:18 <alexsaezm> but the problem is that once a user starts using go as command, not a package
19:26:29 <alexsaezm> not to do dnf instal blahblah...
19:26:51 <alexsaezm> the whole thing is slightly slower (personally never had issues) and technically is less secure
19:27:19 <alexsaezm> as a example of this, Rust ping crates.io which is the most similar situation I could find
19:27:59 <alexsaezm> in any case, imo the main issue is that we don't notify the user (no matter what is the default setting, no very much people know about the proxy thingy)
19:29:21 <eclipseo> ok
19:30:32 <alexsaezm> I think that reverting or leaving it like this or finding anything in the middle is a conversation that we should have in the mailing list to make more people aware. I personally don't have an opinion in which one is the best approach here
19:30:38 <alexsaezm> and... that's the end of my TED talk :D
19:31:36 <buckaroogeek> i will be glad to update the developer portal as needed unless someone else volunteers.
19:32:43 <alexsaezm> That's a great idea. Thank you. A quick and simple update saying we disable this is more than enough for now I think. Not sure how many people reads those things but it's the best we can do at the moment
19:32:52 <alexsaezm> because.. well, truth to be told, we don't tell the user
19:32:58 <eclipseo> okay I don't really have a perspective about what are the consequences of reverting it.
19:33:25 <alexsaezm> me neither, that's what I want to investigate
19:33:54 <alexsaezm> jcajka did it for some reason for sure (and he told me... so it's my fault to not remember it)
19:34:06 <alexsaezm> I'll ping him
19:35:20 <buckaroogeek> someone could also write a short fedora magazine note and/or a community blog note just to get the info out in multiple places
19:35:48 <alexsaezm> oh, good idea. I don't know how that works at all :-/
19:36:14 <buckaroogeek> very straight forward.
19:36:15 <alexsaezm> I guess we can wait until we have some more consensus about the next steps
19:36:19 <buckaroogeek> yes
19:37:01 <alexsaezm> thanks for the ideas buckaroogeek ++
19:37:40 <alexsaezm> in any case... anything else ? :)
19:37:57 <eclipseo> nothing for me
19:39:01 <buckaroogeek> back to lurking
19:39:17 <alexsaezm> thanks everyone :)
19:39:25 <alexsaezm> #endmeeting