16:59:14 #startmeeting Workstation WG (2021-06-29) 16:59:14 Meeting started Wed Jun 30 16:59:14 2021 UTC. 16:59:14 This meeting is logged and archived in a public location. 16:59:14 The chair is cmurf. Information about MeetBot at http://wiki.debian.org/MeetBot. 16:59:14 Useful Commands: #action #agreed #halp #info #idea #link #topic. 16:59:14 The meeting name has been set to 'workstation_wg_(2021-06-29)' 16:59:16 #meetingname workstation 16:59:16 The meeting name has been set to 'workstation' 16:59:18 #chair Neal 16:59:18 Current chairs: Neal cmurf 16:59:31 #topic Rollcall 16:59:33 #info present: Matthias (secr.), Neal, Chris, Tomas, Jens, Michael 16:59:35 #info regrets: Allan 16:59:37 #info present guests: Luna Jernberg(bittin), Omar Sandoval, Michel 16:59:39 #topic Approval of June 23 minutes 16:59:41 https://meetbot.fedoraproject.org/teams/workstation/workstation.2021-06-23-01.53.html 16:59:43 #agreed no objections 16:59:45 #topic Fesco deadline is today 16:59:47 #info Owen wants agreement from wg for proposals for installing repos by default, and flathub with a filter 16:59:49 Michael says that these proposals have been discussed and agreed to by the WG in the past, 16:59:51 so this should be uncontroversial. 16:59:53 Owen will wait a few hours for feedback on the proposals. 16:59:55 #agreed interested parties should comment on the proposals after the meeting 16:59:57 #topic Discussion with Omar Sandoval about btrfs/fscrypt 16:59:59 #link https://pagure.io/fedora-workstation/issue/82 17:00:01 Chris introduces Omar and the topic of encryption of user/systemdata with btrfs. 17:00:03 This is follow-up to discussion from 2 weeks ago. 17:00:05 Hot question: When is the code expected to land in the upstream kernel? 17:00:07 Omar expects this to land in complete form, not piecemeal. Timeline expectation: end-of-the-year 17:00:09 btrfs-specific parts will be different from how fscrypt does things, so that will need a bit of 17:00:11 extra attention. 17:00:13 Chris is asking about enabling encryption at runtime. Omar says that he thinks about using 17:00:15 the defrag code paths for this. Use case at facebook: container images with well-known, 17:00:17 unencrypted base images and encrypted modifications. 17:00:19 Chris is asking about providing user keys after the fact. Omar says that this sounds like 17:00:21 a userspace problem. 17:00:23 Neal asks about having multiple keys for decrypting. Omar says that the kernel only supports 17:00:25 one encryption key, which would have to be protected in a key management system if 17:00:27 multiple keys are desired. 17:00:29 Omar says that upstreaming of all this work is still pending. He will reach out when things 17:00:31 are in a state where testing would be useful. 17:00:33 Neal was asking questions around backup and encryption. 17:00:35 Omar says the (already landed in kernel) portion for preserving compressed data for the btrfs send/receive stream can be repurposed, with a long term goal of being used for encryption. 17:00:37 Followup questions can be sent to Omar Sandoval 17:00:39 #topic Open Floor 17:00:41 Matthias mentions negotiations with Lennart about having him come back for homed 17:00:43 discussion. 17:00:45 #info Next weeks meeting is cancelled due to July 4, next meeting: July 13. 17:01:14 #endmeeting