19:00:36 #startmeeting 19:00:36 Meeting started Wed Dec 11 19:00:36 2019 UTC. The chair is serpent. Information about MeetBot at http://wiki.debian.org/MeetBot. 19:00:36 Useful Commands: #action #agreed #help #info #idea #link #topic. 19:00:51 So - we have few issues 19:01:18 First - noahm wrote about still stuck SPI process 19:01:34 It looks like waldi is now responsible for it 19:01:40 waldi - are you there? 19:02:17 Second - zigo mentioned that this time is not the best for him. 19:02:24 Any proposals for new time slot? 19:02:41 I think zigo should propos a better time 19:03:33 * noahm is ~25% here. I think the spi issue is currently assigned to weasel. 19:03:38 From my experiency - it's really hard to came up with time slots that fits 100% of peiple 19:04:51 Maybe switch/toggle between two time slots, so every may have a chance to join one of the meetings. 19:05:29 yeah 19:05:55 Mrfai - you mean one month something earlier, more fitting for EU, next month something later (late eveing in EU) more feeting USA? 19:06:04 Might be a good idea 19:06:33 yes, like this 19:07:11 #idea Start discussion on mailing list regarding times of IRC meetings, have meetings at various times 19:08:03 #action I'll send email to our ML regarding that 19:09:54 noahm Sorry. It looks like I misread email, and Martin should take care of it, discussing with waldi 19:10:09 #action I'll send emails to both, asking what's the status 19:10:19 and zobel is MIA right now 19:10:20 waldi - unless you know what's happening now 19:10:35 OK, best time I should write him? 19:11:02 Is it possible before Christmass, our should I write after New Year? 19:11:22 no idea 19:11:40 IMO, before and after. ;) we have been blocked for a long time 19:11:49 OK, then I'll ping him this week, and if no response I'll repeat in 2020 19:12:00 noahm I know 19:13:52 #info I wrote Sam (DPL) regarding new delegates, but as he's busy with other teams and GR, he'll take care of it earliest late January/early February 19:14:34 So I'll remind him about it at that time 19:15:56 And it looks like Arthur is totally redoing his life ( :-) ) so work on image finder is now slower 19:16:31 IMO this is no problem. 19:16:38 We still have other things to do. 19:16:48 It is deployed and has some data for now. 19:17:22 The most important, IMO, is integrating it with our Salsa CI so it receives information about new images (daily) 19:18:05 This way, after some time, we can see how it looks like when it has info about few thousands of images in various clouds - how it's usable, how it behaves, etc. 19:18:50 Will the image finder get the data from petterson or directly from salsa CI? 19:19:44 No idea for now - according to our discussion during sprint it should get data from Salsa 19:20:33 ok. No need in discussing this now 19:24:25 I would like to discuss issue #14 19:25:07 waldi: any ideas where this would fit in the json file? 19:27:25 maybe adding to data.info makes the most sense 19:27:34 Mrfai: no, i haven't thought about it yet. but it needs to go in for both build and upload 19:29:35 yes data.info makes sense 19:29:36 rvandegrift: the data.info dict is a part that needs to be re-structured 19:30:12 which parts needs to be restructed there? 19:31:17 Mrfai: all of it. it is currently defined as an opaque structure, no a well defined piece of data 19:33:24 do you think validation/docs would be sufficient waldi? 19:34:23 because the job url is no piece of information that's required for any downstream stuff, i think it would be easier to adopt "annotations", which add semi-structured data to objects, without modifying them 19:35:10 okay, i have a plan how to handle such information 19:36:42 it would be nice to open an issue or a MR containing your plan (or an example). Then people may help to implement it. 19:36:59 yes 19:37:11 good 19:38:53 What about issue #17? I tend to vote for "do not include gpg" in out images. 19:39:09 Sounds good. Please create issue or MR and send info to ML 19:39:42 no, should not. apt-key needs to die 19:40:08 just adding files to /etc/apt/trusted.gpg.d is much easier 19:40:53 yes, that what I also think 19:41:00 IIRC recent discussion (on d-devel or similar) you should not use /etc/apt/trusted.gpg.d/ but create /etc/apt/sources.list.d/*.list with Signed-But 19:41:16 apt-key list is fine. apt-key add not so much. :) 19:41:27 Mrfai: https://salsa.debian.org/cloud-team/debian-cloud-images/issues/14#note_125851 19:41:32 Sorry - Signed-By: /usr/share/keyring/deliv-keyring.gpg 19:41:43 man sources.list 19:42:26 cloud-init uses apt-key, doesn't it? 19:42:27 So no need for apt-key etc. 19:42:48 So if we want to not use apt-key, we need to fix cloud-init. Otherwise we have broken features there. 19:43:44 noahm: probably. I assume https://wiki.debian.org/DebianRepository/UseThirdParty should be consulted here 19:43:54 do we need to support all parts of cloud-init in our images? Is this an important part of cloud-init we like to support? 19:44:13 for e.g. GCE images do not use cloud-init IRRC 19:44:20 IIRC 19:44:36 Mrfai: no, we don't need to and we don't do 19:46:51 Anyone wants to have gpg in our image? 19:47:21 gpg is generally useful. And I see no benefit in intentionally breaking this cloud-init feature by refusing to install it. 19:47:26 So IMO we should install gpg. 19:47:33 ideally no, but I'm worried about breaking users since cloud-init needs it 19:48:10 No opinion here, but if it's used by something else, we should install it IMO 19:48:43 cloud-init should depend on it, if it needs it 19:48:52 or be fixed, which is even easier 19:49:16 at the same time it needs to loose this "download key" feature 19:49:37 if the key material is provided directly in cloud-config, rather than by key-id, is apt-key still used? 19:50:03 If it is, then I think we should install gpg. If it is not, then I don't care. We can suggest that users embed the key directly, which is preferable anyway. 19:51:24 from a quick grep, it looks like yes 19:51:33 yes for what? 19:51:52 yes cloud-init uses apt-key to add key material provided directly in the config 19:52:03 it uses apt-key add, so it needs to be fixed anyway 19:52:09 ok, we should open a bug against cloud-init and get that fixed. 19:52:54 then I'm fine with leaving the key download feature "broken" in our images. 19:54:20 we need to prepare a cloud-init update for stable 19:54:48 yeah, I want to talk about exactly what we update to (see my email to debian-cloud from yesterday) 19:55:19 but I can't focus on that discussion here, right now... 19:55:56 okay 19:56:27 I also think we should try to get a newer cloud-init version into stable. A good test to see what needs to be done, and if the release team is willing to support us. 19:56:47 noahm: you mean version 19.3 which supports jinja2? 19:56:48 zigo need to prepare the package? 19:57:31 i have some patches pending, but this needs some days 19:57:47 then it needs to be in testing. then we can request approval from -release 19:59:30 I guess this is good test (-release approval) before all deamons and other cloud-provider-related packages 20:00:09 i will prepare the stable update of the azure agent in one or two weeks anyway 20:00:16 #idea Update cloud-init (using patches from waldi) and try to put it to stable upgrade 20:00:49 #action waldi waagent update in stable 20:01:03 #action waldi cloud-init patches for azure 20:02:07 Any other topics? 20:02:24 noahm: there are no news on the AWS projects? 20:02:56 nothing notable. 20:03:13 the azure publishing broke the second time on a month. i'm trying to get ms to unstuck it 20:03:41 I am hoping to publish (on a limited scale) a buster AMI that contains the kernel from buster-proposed-updates 20:04:07 this is to support the Graviton2/Neoverse-N1 arm64 instances that were just launched in AWS. 20:04:23 Existing kernels work, but -p-u has better support. 20:05:56 You mean that you want to add new /etc/apt/sources.list (.d/* ?) and add kernel? 20:06:01 Or something else? 20:06:14 just the -p-u sources.list and the kernel from it. 20:07:05 it'd be a temporary thing; I have had people ask about images that include this kernel, and I'd like to make something available to them. 20:07:06 do you have a plan on how and where? 20:07:20 Sounds good, especially if you just create non-official image. 20:07:39 Post info about it to ML and wiki so people can test it 20:09:01 waldi: would it work to post some changes to branches in the images and daily build repos and run the pipelines on those branches? 20:09:08 I think it would, but I could be missing something. 20:09:48 noahm: i don't think we should do that. just post them as development images from a branch in your fork 20:09:59 yup, that works too 20:12:42 anything else? 20:13:40 Do we want to have meeing in January? 20:14:09 yes. Maybe use a different time. And zigo should propose something. 20:14:12 As there is New Year and Christmas, I am tempted to have next meeting in early Febryary 20:14:19 also fine for me 20:14:50 I'd be ok with Jan or early Feb. 20:15:37 Then let's set up for early February. I'll send initial email to ML, and ask for proposals for alternatives 20:15:46 thanks serpent 20:15:52 OK. 20:16:04 Should we close this meeting then? 20:16:11 yep 20:17:33 hi all sorry for being so late, but last few weeks are manic 20:18:28 kuLa: no problem. We're just closing, next meeting will most probably take place early February 2020 20:18:45 I'll open discussion on mailing list about more suiting time slots 20:18:48 ack 20:19:07 Thanks everyone for discussion 20:19:14 bye 20:19:26 #action I'll send summary, either during weekend or early next week 20:19:29 #endmeeting