== Meeting information ==

 * #ubuntu-meeting: Weekly Main Inclusion Requests status meeting, started by cpaelzer, 17 May at 14:34 — 14:59 UTC.
 * Full logs at https://ubottu.com/meetingology/logs/ubuntu-meeting/2022/ubuntu-meeting.2022-05-17-14.34.log.html



== Meeting summary ==

=== Review of previous action items ===

Discussion started by cpaelzer at 14:34.


=== current component mismatches ===

Discussion started by cpaelzer at 14:35.

 * ''LINK:'' https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg   (cpaelzer, 14:35)
 * ''LINK:'' https://people.canonical.com/~ubuntu-archive/component-mismatches.svg   (cpaelzer, 14:35)

=== New MIRs ===

Discussion started by cpaelzer at 14:44.

 * ''LINK:'' https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir   (cpaelzer, 14:44)
 * ''LINK:'' https://bugs.launchpad.net/ubuntu/+source/libwpe/+bug/1973031   (cpaelzer, 14:45)
 * ''LINK:'' https://bugs.launchpad.net/ubuntu/+source/wpebackend-fdo/+bug/1973033   (cpaelzer, 14:45)

=== Incomplete bugs / questions ===

Discussion started by cpaelzer at 14:46.

 * ''LINK:'' https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir   (cpaelzer, 14:46)
 * ''LINK:'' https://bugs.launchpad.net/ubuntu/+source/python-invoke/+bug/1892875   (cpaelzer, 14:48)

=== MIR related Security Review Queue ===

Discussion started by cpaelzer at 14:49.

 * ''LINK:'' https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir   (cpaelzer, 14:49)

=== Any other business? ===

Discussion started by cpaelzer at 14:52.




== People present (lines said) ==

 * cpaelzer (77)
 * slyon (18)
 * didrocks (12)
 * sarnold (7)
 * ubottu (5)
 * meetingology (2)
 * joalif (1)



== Full log ==


 14:34 <cpaelzer> #startmeeting Weekly Main Inclusion Requests status

 14:34 <meetingology> Meeting started at 14:34:30 UTC.  The chair is cpaelzer.  Information about MeetBot at https://wiki.ubuntu.com/meetingology

 14:34 <meetingology> Available commands: action, commands, idea, info, link, nick

 14:34 <cpaelzer> hi sarnold joalif slyon didrocks jamespage

 14:34 <slyon> o/

 14:34 <cpaelzer> #topic Review of previous action items

 14:35 <cpaelzer> only action is me wanting to thank you all to carry this on while I was sick and on sprint!

 14:35 <cpaelzer> #topic current component mismatches

 14:35 <cpaelzer> Mission: Identify required actions and spread the load among the teams

 14:35 <cpaelzer> #link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg

 14:35 <cpaelzer> #link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg

 14:35 <cpaelzer> new cycle, new mismatches showing up

 14:35 <cpaelzer> ahve you talked about pipewire->libldac before?

 14:35 <slyon> nope, seems new

 14:36 <cpaelzer> didrocks: seb128: that seems desktop'ish - would you talk to the team if one can check this new dependency?

 14:37 <cpaelzer> hmm didrocks might be unavailable

 14:37 <cpaelzer> I have pinged internally, maybe one joins - let us identify more new cases

 14:38 <cpaelzer> ruby-xmlrpc -> ruby->webrick is new to me

 14:38 <cpaelzer> did you check that last week?

 14:38 <slyon> ruby-xmlrpc looks new

 14:38 <slyon> ah... I think we might have left that for you :P

 14:39 <cpaelzer> fine and fair

 14:39 <cpaelzer> I'll talk with kanashiro later

 14:39 <slyon> thanks

 14:40 <cpaelzer> jaraco.text

 14:40 <cpaelzer> that is from the openstack context

 14:40 <cpaelzer> jamespage: ? ^^

 14:40 <slyon> we pinged him in the past about it, but he might not yet have had the time to check

 14:41 <cpaelzer> plenty of others have stubs - which is great as that defines an owner

 14:41 <slyon> yes, many are in the foundations backlog

 14:42 <cpaelzer> requests (python) -> python-charset-normalizer

 14:42 <didrocks> cpaelzer: sorry, meeting running over

 14:42 <cpaelzer> that is also server sadly, I do not know why this one pytohn lib is ours, but we will have a look

 14:42 <didrocks> yeah, will do pipewire

 14:42 <cpaelzer> np, welcome didrocks

 14:42 <cpaelzer> and thanks for that

 14:42 <didrocks> (still in meeting btw)

 14:42 <cpaelzer> I'll take requests for the server team

 14:42 <slyon> thanks!

 14:44 <cpaelzer> all others have stubs or are known false positives

 14:44 <cpaelzer> going on ...

 14:44 <cpaelzer> #topic New MIRs

 14:44 <cpaelzer> Mission: ensure to assign all incoming reviews for fast processing

 14:44 <cpaelzer> #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir

 14:45 <cpaelzer> desktop is flooding us :-)

 14:45 <cpaelzer> https://bugs.launchpad.net/ubuntu/+source/libwpe/+bug/1973031

 14:45 <ubottu> Launchpad bug 1973031 in libwpe (Ubuntu) "[MIR] libwpe" [High, New]

 14:45 <cpaelzer> https://bugs.launchpad.net/ubuntu/+source/wpebackend-fdo/+bug/1973033

 14:45 <didrocks> yeah :p

 14:45 <ubottu> Launchpad bug 1973033 in wpebackend-fdo (Ubuntu) "[MIR] wpebackend-fdo" [High, New]

 14:45 <cpaelzer> both looking for volunteers

 14:45 <didrocks> I can probably take one of them

 14:45 <cpaelzer> I could do the lib

 14:46 <cpaelzer> would you didrocks do the -fdo one?

 14:46 <didrocks> ack, I will do the -fdo

 14:46 <cpaelzer> assigned both

 14:46 <cpaelzer> #topic Incomplete bugs / questions

 14:46 <cpaelzer> Mission: Identify required actions and spread the load among the teams

 14:46 <cpaelzer> #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir

 14:47 <cpaelzer> ok we have a few recent updates ...

 14:47 <didrocks> iwd and g-t-e is waiting on desktop

 14:47 <cpaelzer> vulkan and smartcards are just tracking updates

 14:47 <cpaelzer> and yet to what didrocks said

 14:47 <cpaelzer> btw in that context I reviewed "ell" today, that is waiting on security now

 14:47 <sarnold> \o/

 14:48 <slyon> I'd like to consult the rest of the MIR team about iwd

 14:48 <didrocks> see how happy sarnold is :p

 14:48 <cpaelzer> let us do that in other business slyon

 14:48 <slyon> ack

 14:48 <cpaelzer> completing this section with

 14:48 <cpaelzer> https://bugs.launchpad.net/ubuntu/+source/python-invoke/+bug/1892875

 14:48 <ubottu> Launchpad bug 1892875 in python-invoke (Ubuntu) "[MIR] python-invoke" [Medium, Incomplete]

 14:48 <cpaelzer> discussion going on betwen bdrung and jamespage - not really a discussion, but TL;DR no action needed atm

 14:49 <cpaelzer> #topic MIR related Security Review Queue

 14:49 <cpaelzer> Mission: Check on progress, do deadlines seem doable?

 14:49 <cpaelzer> #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir

 14:49 <cpaelzer> ell (just mentioned above) has a milestone set as seb mentioned when it is needed

 14:50 <cpaelzer> I'm still waiting for a milestone on vulkan-tools, but I know people are waiting on this as well

 14:50 <cpaelzer> sarnold: how does progress look on your side now?

 14:50 <sarnold> this last week was some yak-shaving, getting new coverity, new coverity license, installed and working on my poor old build laptop; a bug report I filed on the segfault during build was very well received :D

 14:50 <cpaelzer> tracking in place, people/resources available ?

 14:50 <sarnold> cpaelzer: it feels much happier now, yes

 14:51 <cpaelzer> ok, let me do my groundhog day - any news for telegraf then?

 14:51 <cpaelzer> it is at the top of the list, so it is the one I ask about

 14:51 <sarnold> a nice visit with an old friend :D https://github.com/influxdata/telegraf/issues/11092#issuecomment-1125404409

 14:51 <ubottu> Issue 11092 in influxdata/telegraf "Unchecked net.Listen() causes segfault in instrumental test" [Closed]

 14:51 <cpaelzer> hehe

 14:52 <sarnold> I think that's it for us

 14:52 <cpaelzer> that sounds like "ongoing" then

 14:52 <cpaelzer> thanks

 14:52 <cpaelzer> #topic Any other business?

 14:52 <cpaelzer> iwd from slyon?

 14:52 <slyon> bug 1971739

 14:52 <ubottu> Bug 1971739 in iwd (Ubuntu) "[MIR] iwd" [Undecided, Incomplete] https://launchpad.net/bugs/1971739

 14:52 <slyon> the question is: should we require security review?

 14:52 <cpaelzer> reading through it ...

 14:53 <slyon> iwd runs a daemon/service as root, but it has very good isolation/security in place in its systemd .service unit

 14:53 * didrocks reads too

 14:53 <cpaelzer> I'd still vote for getting a review

 14:53 <slyon> what is the policy, we apply here? Usually, daemon as root => security review. But IMO that was before systemd-service isolation existed

 14:54 <cpaelzer> for me the question is not "is it well isolated" that is for the security team to decide. Instead it is "does this have an attack surface" -> if yes then need review

 14:54 <cpaelzer> it is a simplification, but that is how I handle it most of the time

 14:54 <didrocks> yeah, me too

 14:54 <cpaelzer> I'm not putting all my eggs into the "systemd will keep me safe and warm" basket

 14:54 <slyon> ack. I might have some bias there :D

 14:54 <didrocks> heh :)

 14:54 <slyon> I will be requiring security-review then

 14:54 <cpaelzer> to be clear I appreciate every isolation that is used and it makes the feeling better and more likely to pass review

 14:55 <cpaelzer> but it still needs one

 14:55 <cpaelzer> this will follow the same deadline as ell then, setting milestone

 14:55 <slyon> yes

 14:56 <cpaelzer> I updated the case

 14:57 <cpaelzer> anything else for "other business" ?

 14:57 <sarnold> nothing from me

 14:57 <didrocks> nothing for me

 14:57 <slyon> nothign

 14:57 <joalif> nothing

 14:58 <cpaelzer> neither from me

 14:58 <cpaelzer> to close this - just as expected "new cycle new fun"

 14:58 <cpaelzer> thank you all!

 14:59 <sarnold> thanks cpaelzer, all :)

 14:59 <cpaelzer> #endmeeting



Generated by MeetBot 0.4.0 (https://wiki.ubuntu.com/meetingology)