11:00:04 <PieroV> #startmeeting Tor Browser Weekly Meeting 2022-07-18
11:00:04 <MeetBot> Meeting started Mon Jul 18 11:00:04 2022 UTC.  The chair is PieroV. Information about MeetBot at http://wiki.debian.org/MeetBot.
11:00:04 <MeetBot> Useful Commands: #action #agreed #help #info #idea #link #topic.
11:00:23 <PieroV> Okay, so here we are :) The pad is at https://pad.riseup.net/p/tor-tbb-keep
11:08:14 <PieroV> I think we're done with updating the pad
11:08:19 <msim> yep :)
11:08:27 <PieroV> And I've also seen that boklm is already answering to msim's bolded item
11:08:37 <boklm> yes
11:08:54 <PieroV> Is there anything any of you wanted to add to that question?
11:08:56 <boklm> draft status is used to indicate whether you think the patch is ready
11:09:06 <msim> nothing from me
11:10:34 <PieroV> Okay; I don't see any other bolded item
11:10:45 <PieroV> But I see my discussion point
11:12:27 <PieroV> Which is always the same topic: I'd like to move the dependencies in some centralized place where everyone can write, so that we can avoid having our people.tpo homes used for the dependencies, we can see what we distribute at a glance etc etc
11:12:42 <boklm> IMHO continue using people.tpo for hosting tarballs is fine
11:13:11 <boklm> for the manual I think we might be able to build it during the build to avoid having a tarball
11:13:47 <PieroV> I am wondering if we can create also the cargo-vendor stuff during the build, and avoid having also these tarballs
11:14:17 <boklm> the problem with cargo-vendor is that it is not reproducible
11:14:52 <boklm> since if a dependency does not mention a specific version then it uses the latest, which will not always be the same
11:16:41 <PieroV> I see. The only alternative I can think of is doing something like the gradle dependencies (i.e., include a .txt of stuff to download, and possibly the JSON with the hashes), but I'm not sure it's an improvement
11:17:21 <boklm> yes, we might be able to generate a list of dependencies which include specific versions to download instead of a tarball containing everything
11:17:57 <boklm> but I have not looked much into it to see if that could be done easily
11:19:00 <PieroV> I see. We can get back to this outside the meeting time
11:19:19 <boklm> I think we have a ticket for this
11:19:47 <boklm> tor-browser-build#31588
11:20:22 <boklm> https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/31588#note_2728776
11:20:51 <PieroV> Okay, thanks
11:22:29 <PieroV> Well, we can also follow up on deciding whether to try the LFS+pages approach when more people from the team are in the meeting :)
11:23:48 <PieroV> Do anyone have anything else to discuss?
11:24:07 <PieroV> Otherwise we can keep it short for today
11:24:35 <msim> nothing from me, i'll be afk from wednesday until sunday morning
11:24:46 <PieroV> Okay
11:24:58 <boklm> nothing from me
11:25:09 <PieroV> I was proposing that we all take the next week afk (in addition to Thu and Fry) :D
11:25:28 <PieroV> Well, calling the bot then
11:25:34 <PieroV> #endmeeting