[22:33] <Unit193> tsimonq2: FYI, popcon.u.c has TLS.
[23:47] <tsimonq2> Unit193: I thought I adjusted appropriately, did I not?


[01:04] <cmaloney> Howdy
[01:04] <cmaloney> Just got back to MI / home
[01:09] <jrwren> welcome back
[01:16] <havenstance> welcome back cmaloney
[01:19] <cmaloney> Thank you. :)
[01:20] <havenstance> jrwren, in response to your comment from last night, I ended up adding darkstat for the time being to show the hosts, and using ntopng for the basic graphs, not that the free edition really shows a whole lot, I'll likely just end up purchasing an Enterprise license because I really enjoyed the ntopng enterprise edition features. I tried everything I could find yesterday and ended up removing everything I tried as I
[01:20] <havenstance> couldn't find a solution that would offer what that 10 minute trial of ntopng showed me it was capable of doing lol
[01:22] <havenstance> unfortunately living in a hotel I need something on the server that can catch intrusion attempts and monitoring the interface traffic just during that 10 min trial I found other machines in the building trying to access the server
[01:35] <cmaloney> The only thing I can think of is something like wireshark and fail2ban for stopping invalid attempts
[01:40] <havenstance> cmaloney, I have Zentyal server running, I just setup the Intrusion Prevention rules which I had not had before. The only thing is I think my plex server may be showing up on the external nic and I'm not sure how to force bind it to a particular adapter, something I'm gonna have to fight with eventually tho
[01:43] <havenstance> still a linux noob but I'm incorporating it more and more into everyday use, even started writing debian scripts for my buddy and his shoutcast stuff, jr helped with that too lol
[01:44] <havenstance> the issue I had with wireshark was I couldn't leave it up 24/7 without getting the error drive is full message lol
[01:47] <cmaloney> Yeah, Wireshark is really verbose
[01:49] <havenstance> everything I tried other than what I ultimately grabbed to fill in until I get the enterprise for ntopng was either stupidly overkill or cost thousands of dollars and wasn't worth it in my opinion
[01:50] <havenstance> I haven't played with Wireshark in years, but I recall having it installed somewhere aroung ubuntu 12.04 lts and I recalled that drive is full error and I didn't feel like tearing my hair out
[02:00] <havenstance> this IPS appears to be doing something good, loaded it up an hour ago and so far have 5 pages of blocked and logged messages lol so obviously it's doing it's job
[12:42] <Scary_Guy> mornning
[12:43] <rick_h_> party
[12:45] <Scary_Guy> no, I feel like Slurms McKenzie (sp?)
[12:46] <Scary_Guy> also the family dog got put down Saturday evening due to severe arthritis
[12:47] <Scary_Guy> so, not exactly in a party mood.  hope you guys are doing better
[12:47] <Scary_Guy> than I am*
[12:48] <rick_h_> definitely :( on the pup for sure
[12:49] <Scary_Guy> well, it's not like it was the first dog we've ever had.   I think he was the 6th, but it doesn't make it any easier.  anyway thanks
[13:22] <widox> morning
[13:24] <widox> sorry to hear Scary_Guy. lost our dog in the spring, def :(
[13:26] <cmaloney> Morning
[13:26] <cmaloney> Scary_Guy: Sorry to hear that
[13:26] <rick_h_> cmaloney: morning, looks like PyOhio went awesome?
[13:33] <brousch> Even without rick_h_
[13:39] <cmaloney> rick_h_: Yeah, it was really nice
[13:39] <cmaloney> really crowded in the rooms
[13:39] <cmaloney> had to nope out of a few rooms because of overcrowding
[13:41] <brousch> It seemed like less of a problem than previous years, to me
[13:44] <cmaloney> might be the topics you went to
[13:44] <cmaloney> but yeah, we missed you rick_h_
[13:44] <cmaloney> how are you feeling?
[13:48] <brousch> I was session chair in half the talks I went to. We get a special seat up front
[13:51] <rick_h_> cmaloney: better on the dizzy front
[13:51] <rick_h_> cmaloney: I've done 3+hr of work today so yay
[13:51] <rick_h_> brousch: ooooh
[13:52] <rick_h_> seats up front ftw
[13:52] <rick_h_> I did manage to stress fracture my foot though so yay walking boots
[14:01] <dzho> yikes
[14:02] <cmaloney> rick_h_: Ugh
[14:02] <cmaloney> stop falling apart!
[14:26] <rick_h_> cmaloney: yea, I should try that heh
[15:00] <jrwren> greg-g: you work with this guy?  https://brionv.com/log/2016/06/14/exploring-vp9-as-a-progressive-still-image-codec/  This is great. Did it ever get rolled out?
[15:01] <greg-g> Yeah, he was employee number 1 ;)
[15:01] <greg-g> And I'm not sure... Looking


[02:08] <Psil0[m]12> Hey
[06:36] <zhsj> hi, could someone `./retry-autopkgtest-regressions --blocks golang-golang-x-tools` ? it looks like the usual flaky in vim-youcompleteme and ycmd packages.
[06:38] <ginggs> zhsj: looking...
[06:40] <ginggs> zhsj: .
[14:06] <holmanb> rbasak: I was out Friday, responding now
[14:08] <holmanb> rbasak: There aren't any bugs related to this change, and I don't know of any historical bugs that led to this decision either - my assumption is that this is a risk mitigation and not high urgency.
[14:08] <holmanb> going to debian first with this change seems reasonable to me
[14:44] <xnox> rbasak:  vorlon: le sigh w.r.t. distro-info-data => will write an email.
[15:10] <rbasak> holmanb: sure. Let me know if you need anything!
[19:04] <vorlon> tjaalton: if lib*noop_drm_shim.so have no soname, why are they shipped in /usr/lib/$arch instead of somewhere else?  How are these binaries actually consumed?
[19:05] <vorlon> tjaalton: (lintian reports multiple errors and warnings because of this)
[20:33] <tjaalton> vorlon: that's a fair point, it should probably be under a subdir though libdir is where meson puts it. the consumer is either a tester or a CI system that would use an LD_PRELOAD to tell where the shim is
[20:36] <vorlon> tjaalton: would it be too much trouble for you to move it?
[20:40] <tjaalton> vorlon: nope, but do you want it before accepting the new binary? :)
[20:40] <vorlon> tjaalton: as long as you're committed to fixing it, I'll accept
[20:41] <tjaalton> sure, there's a new point-release next week, so at least that upload will have it


[12:34] <didrocks> cpaelzer_: hey, as a FYI, I will again not be available today for the team meeting. I have a free slot for review if needed and will catch up at the time the meeting end
[14:08] <cpaelzer> arr, I'll liekly miss the meeting as well due to ongoing conflicts
[14:30] <sarnold> good morning
[14:30] <dviererbe> hello o/
[14:31] <liushuyu> morning
[14:32] <sarnold> #startmeeting Weekly Main Inclusion Requests status
[14:32] <meetingology> Meeting started at 14:32:01 UTC.  The chair is sarnold.  Information about MeetBot at https://wiki.ubuntu.com/meetingology
[14:32] <meetingology> Available commands: action, commands, idea, info, link, nick
[14:32] <sarnold> Ping for MIR meeting - didrocks joalif slyon sarnold cpaelzer jamespage ( eslerm dviererbe )
[14:32] <joalif> o/
[14:32] <sarnold> #topic current component mismatches
[14:32] <sarnold> Mission: Identify required actions and spread the load among the teams
[14:32] <sarnold> #link https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.svg
[14:32] <sarnold> #link https://people.canonical.com/~ubuntu-archive/component-mismatches.svg
[14:33] <sarnold> the pydantic mir is an old-style multiple package in one bug ..
[14:34] <sarnold> aha, it looks like that's stalled on jamespage's crew to solve some required TODOs before it'll be assigned to security team
[14:35] <sarnold> I think nothing else here needs investigation?
[14:35] <eslerm> o/
[14:35] <sarnold> #topic New MIRs
[14:35] <sarnold> Mission: ensure to assign all incoming reviews for fast processing
[14:35] <sarnold> #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&assignee_option=none&field.assignee=&field.subscriber=ubuntu-mir
[14:36] <sarnold> https://bugs.launchpad.net/ubuntu/+source/rustc/+bug/1957932
[14:36] -ubottu:#ubuntu-meeting- Launchpad bug 1957932 in rustc (Ubuntu) "[MIR] rustc, cargo, dh-cargo" [Critical, New]
[14:37] <sarnold> I think I agree with the conclusion, that rustc is ready for promotion. I believe it just needs an AA to tend to it,
[14:37] <eslerm> AA?
[14:37] <sarnold> archive admin
[14:37] <eslerm> ty
[14:38] <liushuyu> However Cargo requires http-parser and libgit2 to be promoted as well
[14:38] <sarnold> hrmph.
[14:38] <sarnold> you're right.
[14:38] <sarnold> I had a long conversation with eslerm about that yesterday, even.
[14:38] <eslerm> I have been relaying our conversation with liushuyu
[14:39] <liushuyu> RE: patch development: Foundations can take on the task of developing non-complicated patches. For non-trivial patches, we will need to annoy the libgit2 upstream to switch to a better alternative
[14:39] <liushuyu> Or you know, pressure the Cargo upstream to drop libgit2 altogether
[14:40] <sarnold> if you're positive you can be annoying enough to encourage them to switch to an alternative in such a fashion that we can backport the solution to all the releases that require a rust compiler...
[14:41] <liushuyu> gitoxide has a very high MSRV (Minimum Supported Rust Version), so that will be a disaster I could see
[14:42] <liushuyu> Making libgit2 to switch to llhttp might be a easier version of the outcome for us
[14:44] <sarnold> my guess is that'll be impossible: libgit2 is a pure C library. llhttp is a typescript package. *someone* would need to write a shim layer to let you call nodejs from within C, like Lua. that sounds like the least fun project I can imagine this early in the morning.
[14:45] <liushuyu> sarnold: llhttp is C. The TypeScript part is the binding
[14:46] <liushuyu> If you look at the npmjs.com files, llhttp contains a WASM module produced by Emscripten
[14:46] <sarnold> lol that's hilarious
[14:46] <sarnold> 68% binding ..
[14:46] <liushuyu> sarnold: That is the normal per modern JavaScript ecosystem
[14:47] <sarnold> liushuyu: alright, well, if you're convinced that it'd be easier to replace http-parse with llhttp when we need to do a security update, that's also an option. probably one that we'd want to run through the SRU process, so that'd require building it in a ppa with only -security configured
[14:47] <liushuyu> I mean, you can also upload Rust projects this way to npmjs.com
[14:48] <liushuyu> sarnold: well at least that's what I think. Because switching to gitoxide means backporting a very new Rust compiler to older series (more error-prone)
[14:50] <sarnold> alright, I added a quick summary of this to the bug, I think we can move on with the assumption that rust ought to be promoted by an AA
[14:51] <sarnold> https://bugs.launchpad.net/ubuntu/+source/libde265/+bug/2004449
[14:51] -ubottu:#ubuntu-meeting- Launchpad bug 2004449 in libde265 (Ubuntu) "[MIR] libde265 (dependency of libheif)" [Undecided, New]
[14:52] <eslerm> \o/ thanks sarnold and liushuyu
[14:53] <sarnold> libde265 appears to have some outstanding required TODOs; vpa1977, can you track down the work still needed for https://bugs.launchpad.net/ubuntu/+source/libde265/+bug/2004449 ? or someone else on foundations?
[14:53] -ubottu:#ubuntu-meeting- Launchpad bug 2004449 in libde265 (Ubuntu) "[MIR] libde265 (dependency of libheif)" [Undecided, New]
[14:54] <sarnold> #topic Incomplete bugs / questions
[14:54] <sarnold> Mission: Identify required actions and spread the load among the teams
[14:54] <sarnold> #link https://bugs.launchpad.net/ubuntu/?field.searchtext=&orderby=-date_last_updated&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.subscriber=ubuntu-mir
[14:54] <sarnold> http-parser change was me added notes
[14:55] <sarnold> https://bugs.launchpad.net/ubuntu/+source/aom/+bug/2004442 -- changed roughly a week ago, "integration of the test suite" link on salsa
[14:55] -ubottu:#ubuntu-meeting- Launchpad bug 2004442 in aom (Ubuntu) "[MIR] aom (dependency of libheif)" [Undecided, Incomplete]
[14:56] <sarnold> https://bugs.launchpad.net/ubuntu/+source/pappl-retrofit/+bug/2031814 -- has some outstanding TODOs for Till, he's at a conference and unlikely to have made progress -- I think I saw conversation elsewhere suggesting this might be stalled for the release?
[14:56] -ubottu:#ubuntu-meeting- Launchpad bug 2031814 in pappl-retrofit (Ubuntu) "[MIR] pappl-retrofit" [Undecided, Incomplete]
[14:56] <sarnold> everything else is later still
[14:56] <sarnold> #topic Process/Documentation improvements
[14:56] <sarnold> Mission: Review pending process/documentation pull-requests or issues
[14:56] <sarnold> #link https://github.com/canonical/ubuntu-mir/pulls
[14:56] <sarnold> #link https://github.com/canonical/ubuntu-mir/issues
[14:57] <eslerm> from the last section, we may need to ping for a dotnet6 status update
[14:58] <sarnold> dviererbe: any thoughts on dotnet6? you're the last one on the bug :) https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2023531
[14:58] -ubottu:#ubuntu-meeting- Launchpad bug 2023531 in dotnet6 (Ubuntu) "[MIR] dotnet6" [Undecided, Incomplete]
[14:58] <dviererbe> there is unfortunately no change :/
[14:58] <sarnold> re: github issues, it looks like there hasn't been much feedback on the new pull request; thanks for giving it a look eslerm. I propose we only mention that we ought to read and give feedback.
[15:00] <sarnold> alright, I annoyed a bunch of people on the bug :)
[15:00] <sarnold> #topic MIR related Security Review Queue
[15:00] <sarnold> Mission: Check on progress, do deadlines seem doable?
[15:00] <sarnold> Some clients can only work with one, some with the other escaping - the URLs point to the same place.
[15:00] <sarnold> #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=%5BMIR%5D&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir
[15:00] <sarnold> #link https://bugs.launchpad.net/~ubuntu-security/+bugs?field.searchtext=[MIR]&assignee_option=choose&field.assignee=ubuntu-security&field.bug_reporter=&field.bug_commenter=&field.subscriber=ubuntu-mir
[15:00] <sarnold> Internal link
[15:00] <sarnold> - ensure your teams items are prioritized among each other as you'd expect
[15:00] <sarnold> - ensure community requests do not get stomped by teams calling for favors too much
[15:01] <sarnold> #link https://warthogs.atlassian.net/jira/software/c/projects/SEC/boards/594
[15:01] <sarnold> we've got some conversations in flight with libmysofa upstream, I understand it's been Very Quiet upstream for a few months, no replies to our earlier emails. I'd like us to consider a future with libmysofa not being ACKd
[15:01] <eslerm> s390-tools is no longer in the security queue https://bugs.launchpad.net/ubuntu/+source/s390-tools/+bug/2030482
[15:01] -ubottu:#ubuntu-meeting- Launchpad bug 2030482 in s390-tools (Ubuntu) "[MIR] s390-tools Rust dependencies (vendored)" [Undecided, Incomplete]
[15:03] <sarnold> heh, I wonder why vor_lon assigned it to schopin? we can still try to get someone on the security team to start in on reviewing it, but there's no denying that between 360s and sprints we're unable to take on large new undertakings
[15:03] <eslerm> it wasn't ever officially in Security's queue*
[15:03] <sarnold> yeah, that makes sense
[15:04] <sarnold> no notes on the jira ticket about it being reassigned
[15:04] <schopin> might be a procedural mixup, IIRC we mentioned the bug a couple of weeks ago in our triage meeting.
[15:04] <eslerm> this might be a case where missing beta freeze is o-k, since the package has been in main before
[15:04] <sarnold> yeah
[15:05] <eslerm> yeah, iirc Christian asked that I look for security volunteers last week
[15:05] <sarnold> and you did :) but .. 360s. sprint. $otherobligations.
[15:05] <sarnold> schopin: heh, that sounds pretty plausible. could you investigate and assign that to security when you've done whatever needs to be done? :)
[15:06] <sarnold> #topic Any other business?
[15:06] <sarnold> (there's no denying that christian runs a tighter meeting, heh)
[15:06] <schopin> sarnold: will do. It's not yet in a full MIR review state, but the security-relevant bits are already there, hence my initial ask for starting that in parallel.
[15:07] <sarnold> schopin: aha, cool, thanks
[15:07] <eslerm> I will find a volunteer to review this at next weeks sprint :)
[15:07] <didrocks> o/ (seeing no hilight, so assuming no tasks? \o/)
[15:07] <sarnold> my only other business is that the security team is sprinting next week, I may not make that one; and then I have some PTO and won't make the next few meetings. eslerm should be well-positioned to handle security team requests :)
[15:08] <sarnold> hey didrocks :) only to review the new pull request
[15:08] <didrocks> ack
[15:09] <sarnold> alright, if that's it..
[15:09] <eslerm> thanks Seth, all o/
[15:09] <sarnold> thanks eslerm, liushuyu, dviererbe, schopin, didrocks, joalif :)
[15:09] <didrocks> thanks sarnold, all! :)
[15:09] <sarnold> (I hope that's it)
[15:09] <sarnold> #endmeeting
[15:09] <meetingology> Meeting ended at 15:09:39 UTC.  Minutes at https://ubottu.com/meetingology/logs/ubuntu-meeting/2023/ubuntu-meeting.2023-09-12-14.32.moin.txt
[15:09] <liushuyu> sarnold: thank you!
[15:09] <dviererbe> thanks everyone! o/
[15:09] <joalif> thanks all :)