2007-05-25

Revision 1 as of 2007-05-28 05:55:53

Clear message

MOTU Meeting, Friday, May 25, 2007.

Policy issues for ClamAV backports

Scott Kitterman described the issue of ClamAV versions in current stable releases as "0.90 versions [not being able to be] directly backported because they break stuff that depends on them...but the current packages have outstanding security issues that no one has stepped up to fix." At heart seems to be API breakage (hence libclamav1 -> libclamav2) and the fact that there are numerous reverse dependencies on those libs. Ming Hua raised Debian's [http://www.debian.org/volatile/ -volatile] repositories as an example to consider, and there was limited discussion regarding its and Launchpad's planned [https://blueprints.launchpad.net/soyuz/+spec/personal-package-archives PPA] feasibility. Scott's proposal to create an alternate set of backportable ClamAV source packages is documented [https://lists.ubuntu.com/archives/ubuntu-motu/2007-May/001649.html here].

  • Several MOTU felt uncomfortable with the -alt proposal.
  • Daniel Holbach recommended that a team including Kees Cook and Martin Pitt be formed to examine the API change, to create a wiki page outlining affected packages, and to rebuild said affected packages in dapper and edgy chroots.

  • There was consensus to investigate offband following Daniel H.'s proposal and to report back via the MOTU mailing [https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu list].

ubuntu-universe-sponsors Launchpad team queue procedure

Emmet Hickory proposed [https://wiki.ubuntu.com/MOTU/Sponsorship/SponsorsQueue guidelines] for working with merge and sync bug reports to which the [https://launchpad.net/~ubuntu-universe-sponsors ubuntu-universe-sponsors] Launchpad team is subscribed/assigned: "The idea is to have a standard workflow that keeps us from stepping on each others toes and helps move towards an empty queue." Brief discussion followed regarding bug report Status for "debdiffs or sync request that need some work from the submitter".

MOTU reports/statistics

Joseph Jackson IV stated that "some people have expressed that they would like expanded [http://ubuntu.joejaxx.org/ stats]" on "top uploaders and top 10 changed packages". Daniel H. suggested that he "put the source for the statistics generation in LP, create a product for it and ask people to file wishlist bugs on it". Joe's next item for discussion regarded culling lintian and linda statistics from buildd logs.

  • Joe agreed with Daniel H.'s suggestion.

  • Many MOTU felt a wishlist bug report against the [https://launchpad.net/soyuz/ Soyuz] product would be relevant for Joe's discussion item regarding lintian and linda statistics.

Launchpad mentoring workflow

Prior, Jordan Mantha raised the issue of incorporating Launchpad's shiny [https://launchpad.net/~ubuntu-dev/+mentoring mentoring system] into MOTU mentoring.

Regular MOTU Q&A sessions

Daniel H. suggested that MOTU convene "regular MOTU Q&A sessions where contributors can ask questions and wiki-fy them afterwards".

  • There was consensus that the first such session be held Thursday, May 31, 2007 at 0 UTC and 12 UTC "so everybody has a chance to be there".

MOTU "cookbook"

Daniel H. proposed, in the O'Reilly tradition, that MOTU begin assembling "recipes" for assisting newcomers with "making a small change and getting a debdiff for it, ...updating a package, ...dropping a dpatch in a package, ...[and using] pbuilder to test if Build-Depends are ok". He emphasised continuing to mark bug reports as "bitesize" and to mentor newcomers.

Next meeting time

The next MOTU meeting will be on Friday, June 15, 2007 at 13:00UTC. Hope to see you there.

Next Universe Hug Day

The next Ubuntu Universe Hug Day will be Saturday, June 2, 2007. Let's "go from zero to hero in no time"!