18:59:21 #startmeeting 18:59:21 Meeting started Wed Feb 24 18:59:21 2016 UTC. The chair is nthykier. Information about MeetBot at http://wiki.debian.org/MeetBot. 18:59:21 Useful Commands: #action #agreed #help #info #idea #link #topic. 18:59:26 #chair jmw 18:59:26 Current chairs: jmw nthykier 18:59:31 I pushed it down the list a bit to try and give the others some chances of a discussion... 18:59:38 o/ 18:59:40 woohoo, it works when you spell the command right! 18:59:42 (i need to cook dinner, might not be around much) 18:59:45 nthykier: :D 18:59:46 #chair pochu 18:59:46 Current chairs: jmw nthykier pochu 18:59:52 #chair adsb 18:59:52 Current chairs: adsb jmw nthykier pochu 18:59:57 #chair ivodd 18:59:57 Current chairs: adsb ivodd jmw nthykier pochu 18:59:58 #chair 18:59:58 Current chairs: adsb ivodd jmw nthykier pochu 19:00:03 #chair mehdi 19:00:03 Current chairs: adsb ivodd jmw mehdi nthykier pochu 19:00:06 There 19:00:11 #chair jcristau 19:00:11 Current chairs: adsb ivodd jcristau jmw mehdi nthykier pochu 19:00:18 all teh peoples 19:00:25 indeed 19:00:30 shall I lead or leave it to you? 19:00:33 Go 19:00:39 just do it in the original order 19:00:48 righto 19:00:54 #topic Apologies/Admin 19:01:03 I am not aware of any apologies in advance 19:01:10 last minutes were published 19:01:37 does the time of this meeting suit people? someone (pochu?) would find it better tuesday, but I'm normally out 19:01:53 alternatively it could be during the day, but I guess there would be employment trouble 19:02:00 right 19:02:12 At this time of day, any week day works for me in general 19:02:19 hard to fine a time slot that suits everyone ;) 19:02:33 it is 19:02:46 unless there are any great ideas right now, I suggest keeping the status quo 19:02:53 sure, no worries then. let's leave it as is 19:02:58 ok 19:03:06 #topic Transitions 19:03:12 this is just a status check 19:03:25 I don't have any concerns over any (though as usual pochu is doing most of the work here) 19:03:41 no big issues there 19:03:43 Me neither - kudos to pochu ! 19:03:53 ok moving straight on then 19:03:54 I'm waiting on openmpi to finish before starting libpng (finally!) 19:03:57 (see this is how it's supposed to work :) ) 19:04:05 openmpi got an RC bug, but that's about it 19:04:10 #info No major issues with transitions at this time. 19:04:17 that's all :) 19:04:24 oh 19:04:37 any objections wrt me closing the libstdc++ transition bug? 19:04:37 #topic Reproducible builds: rebuild before release 19:04:44 pochu: oh, no objections 19:04:53 I think that's done and we can close it 19:05:02 pochu: go ahead and close it 19:05:18 cool ta 19:05:27 we errored by not making that an action last time 19:05:44 right, rebuilds 19:05:58 this stems from a query at the minidebconf cambridge, summary: 19:06:15 https://lists.alioth.debian.org/pipermail/reproducible-builds/Week-of-Mon-20151102/003828.html 19:07:07 -1 from me fwiw 19:07:13 what's the question there? 19:07:38 make Stretch self-contained by mass rebuild AAICT 19:07:41 AFAICT* 19:07:43 pochu: aiui they want us to rebuild the world a month before release 19:07:50 the question is can the reproducible builds team have a rebuild of the archive (possibly only one arch) before release to get .buildinfo files 19:08:03 I wonder if h01ger is around 19:08:15 well, due to M-A: same, it would have to be more than one arch in practise 19:08:35 #info Multi-arch would mean rebuilding all architectures 19:08:47 also, arch:all are not binNMU-able, so arch:all packages would not be rebuilt with our current setup 19:09:01 #info arch:all packages could not be rebuilt 19:09:04 is the only goal to get .buildinfo ? 19:09:43 Quote: "Self contained reproducibility should be the goal…" 19:10:33 Personally, I like the idea and the goal, but... 19:10:35 pochu: that's a primary aim, yes. then users of stretch would be able to rebuild and check that nothing nasty happened 19:11:01 A) I have a concern that we do not have the resources to do it (buildds). This can probably be fixed 19:11:25 B) I do not think it makes sense, if all arch:all packages fall through or have to be manually re-uploaded 19:11:25 i don't think that's a realistic goal. it won't be true for anything with a build-depends loop anyway. 19:12:04 (the self-contained bit) 19:12:12 Yeah, Build-Dependency loops would need a break as well 19:12:25 #info Build-Depends loops would need sorting out by hand 19:12:40 this is starting to sound like a re-bootstrap for some or all arches 19:13:15 Technically, a dependency loop is not a deal breaker provided the results to not change (a la fixed point computation) 19:13:43 But that assumes the packages are not capturing version numbers from one another 19:13:49 anyway, I digress 19:14:20 I wonder if a lintian thing would be a good start for this, so that a) the momentum starts and b) it's easier to assess the scale of the problem later on? 19:14:33 (maybe it already is) 19:14:36 well, no 19:14:39 I do not think lintian can test anythin useful here 19:14:48 does the archive even accept buildinfo files yet? 19:14:57 jcristau: It accepts them and discards them 19:15:26 * adsb vaguely waves (work+roadworks+life==fail) 19:15:44 It was added to enable dpkg to create them now while the buildinfo support is expanded in dak 19:16:22 ok, so i stand by my -1 for now :) 19:16:30 maybe we should register our concerns, and await dak developments for now then? 19:16:44 jmw: wfm 19:17:03 Can you give me an action on that? 19:17:08 #agree Right now, a full rebuild would not be feasible 19:17:23 sure 19:17:37 adsb: _o/ 19:18:00 #agree We should await developments in dak so we know what support will be like in Stretch 19:18:21 nthykier: go ahead and set an action that says what you want it to :) 19:18:41 #action nthykier to voice concerns to the reproducible team 19:18:45 there 19:18:54 wfm 19:18:57 moving on? 19:19:11 ok for me 19:19:21 #topic mips64el 19:19:31 ah, now, I don't know how put this on the agenda or what they wanted to discuss 19:19:38 so, um... 19:19:44 moving on? :) 19:19:46 not guilty 19:19:50 unless anyone else knows 19:19:56 pochu: ^? 19:20:21 It looks like his color (but it might be from a previous session) 19:20:24 yeh 19:20:46 #info not clear who wanted to discuss what - defer until next time 19:21:02 #topic Linux version in Stretch 19:21:06 yeah that was me :) 19:21:21 (let's do linux first if you want) 19:21:39 #undo 19:21:39 Removing item from minutes: 19:21:46 #undo 19:21:46 Removing item from minutes: 19:21:49 winner 19:21:50 pochu: go 19:21:51 nice message 19:21:56 hehe 19:22:30 so mips64el is on ftpmaster since a while... so I was just wondering whether there are plans to release Stretch with mips64el, and if so, if we should add it to testing already - and if not, then when 19:22:53 who's behind the port, whether we have buildd redundancy, etc 19:22:54 I would like to see the last package that was imported to be rebuilt before it is in testing: https://ftp-master.debian.org/users/mhy/mipsel64import.txt 19:23:48 Besides that I guess it's up to aurel32 and other people behind the port? 19:23:51 #info mips64el is available in sid, and could join testing 19:24:24 https://wiki.debian.org/ArchiveQualification/mips64el is helpful perhaps? 19:24:43 Nothing listed in https://release.debian.org/stretch/arch_qualify.html btw 19:24:52 ah 19:25:06 ansgar: is that an ftp-masters position or your own only? 19:25:29 jmw: standard proceedure as I recall 19:25:36 indeed 19:25:43 #info imported packages should be rebuilt first 19:25:43 jmw: At least mine. And given it's only one package remaining... :) 19:25:59 who's behind mips64el? 19:26:01 jmw: We usually do not bootstrap architectures in testing until they have finished their "self-containedness rebuild" 19:26:04 if it's only one, does anyone fancy an action? 19:26:15 pochu: Alleedly https://wiki.debian.org/mips64el#Development_Team 19:26:15 so we can look for a victim :p 19:26:15 jmw: up to the porters imo 19:26:37 yes, that's for the porters (so we can at least see there is interest...) 19:26:51 will someone contact the porters and see what the current plan is? 19:27:17 I can do that 19:27:22 if you give me an action :) 19:27:28 oh that page of people is slightly out of date, james cowgill just became a DD 19:27:47 #action pochu contact the mips64el ports and ask about a) plans b) whether they want to join Stretch 19:28:06 only yesterday afair :P 19:28:15 indeed 19:28:39 mips64el done? 19:28:44 jmw: can you add an action to add mips64el to arch_qualify.html? 19:28:53 pochu: for you? 19:29:00 jmw: sure 19:29:01 (I updated the page) 19:29:10 #action pochu add mips64el to arch_qualify.html 19:29:11 . 19:29:18 and done yeah 19:29:21 done 19:29:39 hmm lost my page 19:29:45 ah yes 19:29:52 #topic Linux version in Stretch 19:29:56 so we have a scheduling problem 19:30:08 Indeed 19:30:44 can someone summarise the clash better than I can? 19:30:51 yupe 19:30:54 ta 19:31:20 The Linux kernel maintainers want to include Linux 4.10 in Stretch, which is expected to be released in January 2017 (or maybe early Feb) 19:31:25 (I presume that means you're going to and not just that you think someone can do it better than I :) ) 19:32:29 The "deep" freeze is set at 5th of December 2016, so if we commit to Linux 4.10 we commit to at least 2 months of deep freeze plus an upstream release of linux in the deep freeze 19:33:10 The reasons from the kernel maintainers are (among others) that we would align ourselves with the upstream kernel LTS, so Ben does not have to support 3 kernel LTSs at the same time 19:33:19 i'd vote for moving the freeze back 2 months 19:33:48 As in 5th of Feb and commit to accepting Linux 4.10? 19:33:49 and ignore the world and his dog who want us to move it to somewhere slightly different because their pet thing 19:34:45 I must say I'd normally want 4.10 and the extended maintenance, and moving the freeze does seem the least troublesome way of getting that 19:34:51 adsb++ 19:34:55 FTR, I am (also?) in favour of moving the freeze by ~2 months (all milestones) and commiting to Linux 4.10 19:35:05 and assuming the kernel sticks to this pattern, that sets us up nicely for future freezes as well 19:35:12 Indeed 19:35:13 looks like we all agree then. easy topic. 19:35:15 about the freeze, can't we not move it but accept linux at that point? 19:35:20 that assumption is likely to be true 19:35:29 nthykier: i thought it was nov -> jan 19:35:40 counting is hard 19:35:45 pochu: the trouble with that a new upstream is unlikely to be instant, which makes the freeze long and everybody grumpy 19:35:46 jcristau: Depends on what milestone you consider the "deep freeze" 19:35:47 my "worry" is that we'll move it to Jan/Feb, and then the freeze will last till May/June :p 19:35:52 Nov 5th is the "new freeze" 19:36:04 (ie. no new packages in testing without manual approval) 19:36:24 ok to clarify, are we talking about moving the deep freeze (5th dec) or the start (5th nov)? 19:36:57 If we move the freeze, I presume we will move all milestone dates 19:37:55 For reference, I stand by moving all milestone dates by 2 months 19:38:18 easier to explain and more coherent to move all dates 19:38:38 That is: Transition freeze goes from Oct 5th to Dec 5th, "new freeze" moves from 5th Nov to 5th of Jan and "deep freeze" goes from Dec 5 to Feb 5th 19:39:39 that seems sensible to me 19:39:57 there's potential for the kernel to be not ready until early february though 19:40:15 should it just have an exception? 19:40:42 Personally, I would like them to do release candidates up til, so we weed out the bugs early 19:40:59 certainly 19:41:14 and then have an exception - Linux is one of the packages we already have an exception for to some extend as I recall 19:41:35 (I think we accept new LTS point releases in stable) 19:42:30 SRMs ^? 19:43:06 if 4.10 is not ready, is it acceptable to go with an rcX version and integrate final release later? (I guess question to kernel maintainers too) 19:43:07 Well, if we don't accept new LTS releases, using a LTS branch loses its point? 19:43:15 we accept what ben uploads :) which basically translates to upstream stable releases of whichever tree we're following 19:44:00 #agree We want Linux 4.10 in Stretch if possible to reduce the maintenance burden in (old)stable 19:44:13 mehdi: I think we should decide that in the freeze if it becomes a problem 19:44:30 nthykier: wfm. 19:44:39 yes, we shouldn't try to guess what might happen after freeze but deal with it when we know 19:44:46 Do we also agree on the "pre-release of linux during freeze"? 19:44:55 to sid? or to exp? 19:44:57 sid 19:45:18 if the linux maintainers are comfortable with that, sure 19:45:46 (so maybe rc1 / rc2 to exp, then rc3 through final to sid) 19:45:50 I think that's up to them to decide how they want to approach it, but it would be good to have some previews yes 19:45:55 I wouldn't want to ask them to upload rc1 to sid, tbh 19:46:03 right 19:46:31 are nthykier's proposed dates agreed? to recap: 19:46:38 That is: Transition freeze goes from Oct 5th to Dec 5th, "new freeze" moves from 5th Nov to 5th of Jan and "deep freeze" goes from Dec 5 to Feb 5th 19:46:52 wfm (obviously?) 19:46:57 :) 19:47:02 "happy new year freeze" :) 19:47:05 it wfm too 19:47:10 wfm too 19:47:49 it worked for jcristau too, and I don't think adsb objects, so let's go for it 19:47:57 sure 19:48:06 #agree Stretch freeze will be delayed by two calendar months 19:48:09 \o/ 19:48:23 I think that calls for a bits to d-d-a 19:48:35 #agree Linux 4.10 will get an automatic freeze exception if it doesn't make the deep freeze 19:49:10 #info For the avoidance of doubt, this policy applies only to linux 19:49:12 can we add that point (d-d-a mails) to the agenda? 19:49:27 mehdi: agenda or minutes? 19:50:10 jmw: I want to propose that we make a mail to d-d-a after every meeting. so that's not specifically related to the current topic. 19:50:28 mehdi: one moment then 19:51:03 #agree Linux maintainers are encouraged to upload release candidates of 4.10 in sid to shake out bugs earlier 19:51:10 anything else before we move on? 19:51:45 mehdi: let's come back to it if that's ok, we have the elephant in the room still to get through 19:52:02 ok to moving on 19:52:13 jmw: sure :) 19:52:21 #topic MySQL variants in Stretch 19:52:33 are reps from pkg-mysql-maint here? I saw otto join at least 19:53:09 I think he is the only one 19:53:21 (at least by nicks I remember) 19:53:50 me too 19:54:10 rbasak and ryeng are not here 19:54:26 well let's start anyway 19:54:52 just finding my notes... 19:55:54 ok recent DSAs: I had an action to get security team feedback about mysql and maria dsas 19:56:16 we did get a reply off the record, and things seem much better there although there can be improvement, which is to be expected 19:56:24 so I think that is ok for now 19:56:39 meanwhile Otto has become a DD, which should also help with the work 19:57:19 otto: congrats :) 19:57:59 I believe we also have an outstanding item on moving to MariaDB as the default? 19:57:59 we also got some requirements notes from the security team, nthykier do you remember where they are? were they official yet? 19:58:20 Their security transparency requirements? 19:58:23 yes 19:58:25 They posted that to Oracle already 19:58:30 excellent 19:58:35 It was 3 item list 19:58:39 was an* 19:58:49 #info Recent DSAs of MySQL and MariaDB went much better, and there are no major concerns right now 19:59:03 <20160202144708.GA19323@inutil.org> ftr 19:59:21 aha, thanks 19:59:22 <20160129193951.GA23052@pisco.westfalen.local> 19:59:23 ah 19:59:41 I assume that's the one just up-thread 19:59:42 Adam beat me to it 19:59:59 two up, but yes 20:00:15 Adding an info 20:00:19 #info Security team requirements have been published (<20160129193951.GA23052@pisco.westfalen.local>) 20:00:22 oops 20:00:28 jmw: nope thats fine :) 20:00:44 transition to mariadb libraries 20:01:38 I mailed the release team initially to get feedback on this, but didn't get much response (but it was only 10 days ago) 20:01:47 is there anything to be added to that now? 20:02:01 that we should make the switch? :) 20:02:47 I believe jcristau is also in favour (please correct me if not) 20:03:30 [eating] 20:03:33 for myself, I quite like the idea of getting ourselves some insurance. it's probably not going to be realistic to switch back, but it's better than trying to do it in a hurry 20:04:04 I could be persuaded either way though really 20:04:15 I am also in favour of switching for reducing the risk 20:05:02 #info Switching dependencies to MariaDB early reduces the risk of needing to do it in a hurry later 20:07:11 ok, let me put it another way: are there any reasons to *not* switch today? 20:07:48 I am not aware of any that outweights the risks of keeping status quo 20:08:56 sounds like agreement, objections? 20:09:17 agreed! 20:09:35 #agree MySQL dependencies should be transitioned to MariaDB 20:10:18 #info MySQL could still be shipped in Stretch if there are no objections from the security team, but it's unlikely that dependencies would be switched back 20:10:27 #action jmw write to pkg-mysql-maint to get a plan formed 20:10:33 anything else before we move on? 20:10:39 (sorry for delay in reply, back at keyboard now in case you have questions) 20:11:11 moving on would be ok for me 20:11:26 yeah let's wrap this up :) 20:11:33 #topic d-d-a after meetings? 20:11:39 mehdi 20:12:04 currently I announce a meeting on debian-release@l.d.o, and follow up to it with a link to the minutes 20:12:59 what if there's nothing worthwhile to announce? 20:13:07 mehdi: what was your proposal? 20:13:26 send a report after each meeting 20:13:52 (be it brief or long with decisions mades or issues discussed during the meeting) 20:14:09 mehdi: did you intend to send a full report, or just a minutes link? the minutes tend to be quite comprehensive, I'm not sure I want to duplicate that by hand 20:14:18 someone else could of course 20:14:19 I do not think there is any other core team with regular meetings that does that, so we would be the first to do it 20:14:24 I think we should just send the report to -release@, unless there's a big thing that deserves d-d-a 20:14:36 jmw: both work for me, tbh. 20:15:04 I think I'd prefer only to mail d-d-a for special things, otherwise people get used to it 20:15:15 we have bits for that sort of announcement 20:15:18 Personally, I am inclined to agree with pochu - I am not entirely convinced that every meeting is naturally worthy of a d-d-a mail 20:15:25 +1 20:15:35 mehdi: ok with that? 20:16:00 we are 4 vs 1. i am not going to cry. :) 20:16:03 #agree d-d-a mails to be reserved for announcements 20:16:09 #topic Next meeting 20:16:13 but certainly if made a decission on an important topic (e.g. moving the freeze today) that sure deserves a d-d-a mail :) 20:16:19 pochu: definitely 20:16:31 according to my calendar we are 23rd March next time 20:16:37 could someone double check? 20:16:44 that's right 20:16:54 #topic AOB 20:17:03 any other business? shout now, or forever... 20:17:16 no #info nextmeeting ? 20:17:19 kudos for getting through all items! 20:17:24 oh right, yeh 20:17:25 yay! 20:17:25 #undo 20:17:25 Removing item from minutes: 20:17:36 #info Next meeting: 23rd March 2016 20:17:39 #topic AOB 20:17:45 no aob, let's end 20:17:47 #endmeeting