Technical_2006-01-17
09:03 mdz good morning
09:03 hub raphink: I paid nothing when I had them
09:03 ajmitch morning mdz
09:03 raphink hi mdz
09:03 sivang morning mdz
09:03 raphink hub: you mean Free ?
09:03 hub raphink: glitch in the systeme
09:03 lucas sivang: it doesn't seem to be on ubuntu-motu
=== StevenK pays $55AUD for 1.5Mbit
09:03 hub raphink: yeah
=== StevenK waves to mdz.
09:03 mdz I'm assuming that sabdfl isn't going to be able to make it
due to travelling
09:03 raphink hub: :D :D
09:03 hub hey mdz
09:04 elmo mdz: safe bet
09:04 sivang that wouldn't be a first timer :)
09:04 raphink hi elmo
09:04 hub hey elmo
09:04 Keybuk raphink: I have ADSL now ... and that's what's not working
09:04 ajmitch where is sabdfl travelling to this week?
09:04 raphink Keybuk: ic
09:04 mdz looks like we have a full agenda
09:04 Keybuk raphink: I need to get something other than ADSL to have a
reliable net connection
09:04 raphink ajmitch: the moon?
09:04 ogra ajmitch, asia tour ?
09:04 sivang ajmitch: asia somewhere I think
09:04 ajmitch right
09:04 Keybuk mdz: does sabdfl ever make it even when he's not
travelling? :)
09:04 hub Keybuk: cable?
09:04 mdz Keybuk: sometimes, yes
09:05 sivang Keybuk: lol :) there were a couple of times IIRC
09:05 mdz so let's get started
09:05 mjg59 Ok
09:05 raphink ok
09:05 Keybuk hub: no cable in my area, annoyingly
09:05 mjg59 What order are we doing things in today, then?
09:05 hub Keybuk: :-/
=== cheche [[email protected]] has joined
#ubuntu-meeting
09:05 mdz I figure the order on the wiki is as good as any
hub: the alternative is for an ISP to actually takeover
09:05 Keybuk the line from the exchange to my house and repair it ...
BT won't do it
09:05 sivang pitti's sudo stuff first
09:06 mjg59 Cool. Core candidates.
it looks like there are a few people who have proposed
09:06 mdz themselves for ubuntu-core-dev who haven't otherwise
appeared in the community
09:06 mjg59 dsaa isn't here, anyone know anything about the other two?
09:06 ajmitch no core candidates who are motus already afaict
09:06 raphink mjg59: I'd say at least one core candidate...
09:06 mdz dholbach: are you around?
09:06 dholbach yes
09:06 dholbach I will mail them.
09:07 mdz dholbach: at a previous meeting, you helped us with
contacting these folks and explaining
09:07 mdz dholbach: could you make that a todo item for the monday
before each TB meeting?
09:07 dholbach Ok.
09:07 mdz thanks
09:07 Keybuk what are/should we do about the backlog of existing ones?
09:07 Keybuk didn't we talk about removing people if they failed to
come to meetings/
09:07 mdz dholbach is going to mail them, and then we'll remove them
09:08 mdz we agreed that folks should apply for MOTU before core
09:08 Keybuk hmm, we could do with a "notes" field for each person
btw, a quick note. I'm at the office now, I hope that
09:08 hub nothing preempt my sitting at this keyboard for the
meeting
09:08 Keybuk yeah
09:08 mjg59 Right. developer candidates?
09:08 raphink yep
=== lucas is, too
=== hub is applying for motu too
09:08 raphink :)
=== StevenK three
09:08 raphink 3 french people at least :)
09:09 mjg59 sivang, hub, lucas, raphink, vuntz, StevenK, anyone else?
09:09 mdz mjg59: were any candidates processed at the meeting I
missed?
09:09 raphink StevenK: that's four :)
09:09 mdz I'm not sure which of those in the queue are new and which
are stale
09:09 StevenK I added myself two days ago or so.
09:09 mjg59 mdz: I think we deferred a couple, it was a while ago now
09:09 hub raphink: I consider myself Canuck now
I saw in the last TB meeting's log that vuntz said he
09:09 lucas didn't have enough time to join the team, and he asked to
be removed from the list. did he change his mind ?
09:09 raphink hub: oh ok ;)
09:09 dholbach lucas: I think not.
09:09 raphink hub: you're still french-speaking though
09:10 sivang I'm stale , I need to do more MOTU contribs before this
can be evaluted again.
09:10 mdz mjg59: so that was what, 2005-12-20?
09:10 mjg59 mdz: Yup
09:10 Keybuk mjg59: we definitely processed some at the last TB meeting
09:10 dholbach sivang and vuntz can be safely removed.
09:10 mdz that gives us:
jjmmma Lucas Nussbaum Kiew Dino Solon A. Agcambot
09:10 mdz Hubert Figuiere Raphal Pinson Manu Cornet
freeflying Steve Kowalik
09:10 sivang dholbach: thanks
09:10 mdz hub, lucas, StevenK are here
09:10 mdz anyone else?
09:11 raphink mdz: i'm here too
09:11 lucas raphink is Raphal Pinson
09:11 mdz ok
09:11 raphink ty lucas
09:11 mdz looks like lucas is up first
09:11 lucas ok
09:11 mdz lucas: care to tell us a bit about yourself and what
you've been up to?
I've prepared a wiki page to summarize my candidacy. It's
09:11 lucas probably faster. See
https://wiki.ubuntu.com/LucasNussbaum/TBCandidacy if you
want
09:12 Keybuk ooh, shiny
09:12 lucas 24 years old, french, phd student in CS
09:12 mdz I've noticed you've done quite a bit of wiki content
09:12 hub I don't have a summary for my candidacy
09:12 lucas I've been working on MOTU-related stuff and debian
collaboration stuff
09:13 lucas (like working with raphael hertzog to start flamewars :/)
09:13 raphink hub: me neither ;)
09:13 raphink lucas: hehe
09:13 mdz heh
=== StevenK only has his wiki page.
09:13 raphink StevenK: you're not the only one so that's fine ;)
=== ogra likes the hot discussions he has with lucas in -motu :)
09:14 mjg59 lucas: So what Ruby stuff have you actually been doing so
far?
09:14 ogra and lucas is definately very encouraged and around a lot
all day ...
09:14 lucas in Ubuntu, just a few merges that were needed
09:14 mjg59 Is stuff being significantly altered inside Ubuntu, or is
it mainly helping to merge stuff from Debian?
09:14 lucas in Debian, packaging of stuff I'm upstream for (feed2imap,
libfeedparser-ruby, libxmpp4r-ruby)
09:15 lucas merging stuff only
09:15 mjg59 Ok, cool
09:15 mdz lucas: which parts of MultiDistroTools are your work?
09:15 lucas mdz: everything
09:15 raphink lucas also provided a nice web interface to work with
merges more easily lately
09:15 mdz nice work
09:15 lucas mjg59: since I have 'contacts' with debian ruby
maintainers, it's easier to keep the divergence low
09:16 raphink http://revu.tauware.de/~lucas/versions/ very useful :)
lucas: you note on your wiki page that you aren't sure
09:16 mdz you'll be able to contribute in the long term. do you
care to elaborate?
09:16 lucas I'm sure I'll be able to contribute on the long term.
09:16 lucas what I'm not sure of, is whether I'll be able to do
general MOTU work on the long term (merge/syncs)
09:17 lucas however, I hope to be able to help when the backlog is
quite big, for example
09:17 Keybuk is this because of an expected lack of time, or other
reasons?
09:17 lucas yeah, lack of time, as always
09:17 mdz lucas: I see that you're in the Debian NM queue
09:17 lucas working more on Ubuntu means working less on other
projects or my thesis ;)
09:17 Keybuk but you believe you have time now?
09:17 lucas yeah, I have
lucas: how does your intention to join Debian fit into
09:18 mdz your strategy for improving collaboration between the
projects?
09:18 lucas hehe a timeline is needed here
09:18 lucas beginning of the summer: I start packaging stuff inside
pkg-ruby-extras debian team
09:19 lucas then, I get on NM, since you better start early
09:19 lucas then I discovered the bad state of ruby in breezy (that
was in september)
09:19 lucas so I got involved into MOTU
I've been using Ubuntu since no-name-yet.com, but when
09:20 lucas everything looks fine, you don't feel the need to get
involved
09:20 lucas (that's all)
09:21 lucas ;)
09:21 mdz thanks
=== LaserJock [n=mantha@ubuntu/member/laserjock] has joined #ubuntu-meeting
09:21 lucas I don't think I'll be a DD soon, become of the average
time you usually spend in NM
09:21 mdz would anyone like to say anything further about lucas'
involvement with MOTU so far?
09:21 sistpoty as orgra already pointed out, lucas has been very
encouraged on motu-issues
09:21 lucas being a DD probably help with debian collaboration, but
it's mainly human issues currently, as I see it
=== tseng [[email protected]] has joined #ubuntu-meeting
lucas's MDT have been quite helpful, along with
09:22 crimsun sistpoty's, in the Dapper merges. I use them both
constantly.
09:22 mdz mjg59,Keybuk: I think that's sufficient discussion;
agreed?
09:22 Keybuk agree
09:22 sistpoty oh, yep. he did really rocking work with it
09:22 mjg59 mdz: Yup
09:23 mdz votes?
09:23 mjg59 +1 from me
09:23 sivang crimsun: are they a better incarniation of the motu-tools
package?
09:23 mdz +1
09:23 Keybuk +1 also
09:23 dholbach Welcome lucas!
09:23 lucas :-) thank you all.
09:23 ogra sivang, nope, another set of tools
09:23 mdz lucas: welcome
09:23 sistpoty welcome lucas :)
09:23 ogra welcome lucas
09:23 raphink :D
09:23 mdz hub: you're next
09:23 hub ok
09:24 StevenK That sounded omnious.
09:24 mdz StevenK: ;-)
09:24 mdz hub: you maintain abiword?
though I haven't seen many packages from hub (didn't have
09:24 sistpoty time to review more), what I've seen was very clear and
good packaging
09:25 Keybuk hub was at UBZ, iirc.
09:25 ogra mdz, he's upstream :)
09:25 hub mdz: as upstream, I'm one of the maintainers, yes
09:25 mdz Keybuk: yes
09:25 Keybuk came to several of my BOFs
I'm very happy with hub's contributions. He worked on a
09:25 dholbach bunch of photo tools and libraries, he works well with
upstream, his packaging improved over the weeks, and I'd
personally be very happy to have him on board.
09:25 hub Keybuk: I was
09:25 ajmitch he even hosted a drinking BOF there
09:25 ogra at home :)
09:25 hub ajmitch: and pizza BOF
09:25 dholbach Yeah :)
09:25 mdz hub: do you have any specific interests or plans for
Ubuntu contributions that you can tell us about?
09:25 sivang hub: in UBZ ? :)
=== ajmitch found hub's packaging to be of good quality, and he's been
persistent with it
09:25 mjg59 hub: Your Launchpad page doesn't go into too much detail -
what have you been up to in Ubuntu?
09:26 hub mdz: currently I'm trying to focus on providing various
tools for digital photography
09:26 hub and I have a bunch of packages still pending on REVU
09:26 ogra carrying over your knowledge from gnome ? :)
hub is the well known photo tools guy in gnome ... and i'm
09:27 ogra really happy he wants to take such tasks in ubuntu as well
:)
09:28 hub ogra: I'm not espacially gnome centric for the tools
09:28 mdz hub: you organized MOTUPhoto?
09:28 hub mdz: I creat the team
09:28 mjg59 hub: So, do you think it's possible to provide a "just
work" atmosphere for the photography field?
09:28 hub created
09:28 ogra hub, they are not QT based :)
09:28 hub mjg59: that is my goal. Have the tools ready for use
09:28 mdz hub: what is your opinion of f-spot?
09:29 hub mdz: f-spot is a great user app
09:29 hub I installed Mono just for that reason
09:29 hub I'm talking regularly with lewing, the upstream developer
what do you think is the best way to get photo
09:29 mdz functionality to Just Work in Ubuntu, as it does on the
Mac platform?
09:30 hub mdz: enhance libgphoto2 to work even more seemlessly
09:31 hub and have the application use it for everything
currently we launch gthumb when a camera is attached, but
09:31 mdz I have never been very happy about its level of
functionality
09:31 mdz I launched it just now and it crashed during startup ;-)
09:31 hub hew
09:31 hub I'll check that
09:31 raphink hehe
09:31 janimo mdz, use a stable distro :)
09:31 Mithrandir my main gripe with gthumb is that it's slow and
memory-hungry.
09:31 hub I don't really work this way
09:31 hub maybe I should try it harder
09:31 ajmitch Mithrandir: so is f-spot at times
09:31 hub Mithrandir: f-spot is faster IMHO
09:32 mdz hub: what way do you mean?
09:32 ajmitch reminds me, I should upload 0.1.7 now
09:32 hub I use a card reader, pop the card in, copy the files
I'd like f-spot's "new startup and import" feature to
09:32 Keybuk actually infer information from my carefully constructed
hierarchy of directory names
09:32 Keybuk right now it imports my thousands of photos and gives me
that "now you have to tag them" look
09:32 mdz hub: yes, that's what I do as well. however, I'd like to
make things work well for a broader class of users
09:32 ogra Keybuk, you can switch to directory view
09:32 Mithrandir ajmitch: I don't want photo apps to "manage my
collection", I want to look at pics.
09:32 Keybuk ogra: that kinda defeats the point though, especailly if
you now import new things with f-spot and tag them
09:33 ajmitch quickly getting OT :)
09:33 mdz we needn't get into too much detail right now, though
09:33 mdz ajmitch: ;-)
09:33 mdz mjg59,Keybuk: satisfied with the amount of discussion?
mdz: I must admit that it is the best user case to have a
09:33 hub program the ask about importing the pictures form the
camera when you connect it
09:33 pitti hub: that's what shuold happen ATM
09:33 Keybuk yup, I'm good
09:34 mdz pitti: it does, but gthumb has some issues
09:34 hub I had plans to write a "gnome-photo-importer"
09:34 mjg59 mdz: Yup
09:34 pitti hub: g-v-m asks about importing and calls gthumb if the
user wnats
09:34 mdz ok, votes?
09:34 Keybuk +1 from me
09:34 hub to copy the picture automatically
09:34 mdz +1
09:34 mjg59 +1
09:34 mdz hub: congratulations
09:34 ajmitch welcome, hub :)
09:34 raphink :)
09:34 hub pitti: yeah, but mdz just said it was crashing
=== pitti welcomes hub
09:34 hub mdz: thanks
09:34 ogra hub, http://www.grawert.net/software/pimp/
09:34 mdz hub: and now I have to go and file a proper bug report
after the meeting ;-)
09:34 ogra hub, could need a python rewrite ;)
09:34 Keybuk mdz: good luck!
09:34 ogra hub, and welcome
09:34 hub ogra: eh
09:35 mdz raphink: you're up
09:35 raphink OK I have prepared a 4 paragraphs intro to paste ;)
09:35 hub ogra: I'd rewrite it in C++ :-/
I got involved in MOTU things mostly by packaging new
stuff for Ubuntu (mostly KDE packages) in october. My work
in Ubuntu is documented on
09:35 raphink https://wiki.ubuntu.com/RaphaelPinson . I haven't really
had the time to change the motivation part that I put
before being a member, but it sums up why I want to be a
MOTU, too.
09:35 dholbach Excellent, hub!
After packaging for some time and putting my packages on
REVU, I noticed the queue was pretty slow on REVU, and
wanted to help a bit. So I reviewed some packages myself
09:35 raphink and sent the comments to the packagers, forwarding them to
some MOTUs. After I did that with a few packages, I was
given review rights on REVU and have been using it so far
to review more directly on the website.
09:35 ogra hub, fine as well
09:35 raphink I have also contributed to syncing/merging packages,
although not as much as packaging/reviewing.
Finally, I have been working on the MOTU related
09:35 raphink documentation on the wiki, mostly on the REVU page, on the
packaging and reviewing tips, and more recently on
creating a Debian contribution page together with lucas.
09:35 mdz raphink: that's great, it seems like REVU always needs
more reviewers
09:36 raphink I do my best :)
09:36 lucas (url: https://wiki.ubuntu.com/ContributingToDebian )
09:36 raphink ty lucas
09:36 mdz Riddell: any feedback on raphink's involvement with
KDE/Kubuntu?
09:36 ajmitch yes, us existing MOTUs don't do enough reviewing to keep
up
09:36 raphink mdz: now it would help even more if I could advocate and
upload packages too
09:36 sistpoty raphink did some very nice kde packages, and his reviews
are of good quality
09:36 mjg59 raphink: What sort of packages do you plan on uploading?
09:37 raphink mjg59: I mean being able to upload the advocated packages
from REVU
09:37 raphink right now i can only criticize the packages on REVU
09:37 mjg59 raphink: Ok, cool
09:37 raphink put comments and so on
09:37 raphink but when I feel they're ready
09:37 mjg59 Any plans for independent packaging?
09:37 raphink i can't do more than just telling the guy to ask a MOTu
gently
09:37 raphink mjg59: I have 8 packages in Dapper already
09:37 mjg59 Excellent
09:37 raphink I also have my own project on alioth
09:38 raphink which is called Ichthux
09:38 raphink it's a CDD aimed to christians
09:38 raphink when i began it I didn't know much about Debian systems
yet
09:38 raphink so it's a bit stalled right now
09:38 raphink but I plan to improve it and get the packages in Debian
and Ubuntu in the future maybe
09:38 raphink just as Debian Jr. or Debian Med
09:39 ogra or edubuntu, xubuntu ;)
09:39 raphink yep exactly ;)
09:39 mdz raphink: are you a Debian developer or in the NM queue?
09:39 raphink no i'm not
09:39 raphink I considered it a few months ago
09:39 raphink and didn't do it at the time
09:39 raphink and then got involved in Ubuntu
09:39 raphink I haven't considered applying for DD seriously any
recently
09:40 raphink and I still need to get my packages in Debian
09:40 mdz well, becoming a DD would be the ideal way to get your
packages into debian, of course ;-)
09:40 raphink thankfully I know some DDs who can sponsor my work, within
Ichthux
09:40 mdz oh, good
09:40 raphink yes mdz I know that :)
09:40 raphink this is future plans :)
09:40 raphink right now I have to have Ichthux administrated by a DD on
alioth
09:40 raphink since they wouldn't let a non-DD rule it
09:41 raphink SynrG has been my mentor even since april actually
09:41 raphink and now co-administrates Ichthux on alioth withme
09:41 raphink :)
09:42 raphink (yes I can witness there are very nice DDs around that
like Ubuntu even if not involved in it :))
=== janim1 [[email protected]] has joined #ubuntu-meeting
09:42 sivang raphink: Ben is very nice indeed :)
09:42 raphink sivang: :)
=== HiddenWolf [[email protected]] has joined
#ubuntu-meeting
09:43 mdz dholbach,ogra: anything to say?
09:43 ogra raphink, is very busy in the motu world and around every
day since some weeks ...
09:44 ogra err, months ?
09:44 dholbach mdz: I was very happy, when he jumped into REVUing and
looking at his packages made me happy too.
09:44 raphink ogra: time goes by :)
I've been working with raphink on some merges/syncs and
09:44 lucas some documentation. He has really been hyperactive those
last weeks. I really enjoy working with him. His work has
always been of high quality.
09:44 ogra in any case he's a good teamworker
09:45 dholbach And he helped actively to respond to questions in the
channel.
09:45 ogra ...and would be very valuable for motu
09:45 mdz mjg59,Keybuk: ready?
09:45 mjg59 Yup
09:46 mdz votes
09:46 mjg59 +1 form me
09:46 Keybuk yup
09:46 mdz +1 here
09:46 dholbach raphink: welcome to the team!
09:46 raphink :D
09:46 raphink ty :)
09:46 ogra congrats raphink
09:46 mdz raphink: welcome aboard
=== dholbach hugs raphink, lucas, hub
09:46 sistpoty raphink: congrats
09:46 Keybuk +1 from me
09:46 ajmitch well done, welcome
09:46 raphink thanks ogra && sistpoty :)
=== lfittl [[email protected]] has joined
#ubuntu-meeting
09:46 raphink :) :)
09:47 mdz StevenK: ready?
09:47 StevenK Yup.
09:47 StevenK Well, as much as I can be.
=== raphink is proud to be in a nice team as the MOTU one :)
09:47 mdz I'm familiar with your work in Debian, thanks for that
=== StevenK squints from mdz's spotlight.
=== hub hugs dholbach
09:47 mdz and I see you've done some uploads to Ubuntu recently; who
has sponsored those for you?
=== ajmitch has done some
09:47 StevenK Multiple MOTUs, notably Mithrandir, ajmitch and \sh.
=== crimsun has as well
09:48 StevenK crimsun: Oh, I didn't see you there.
=== sistpoty also sponsored some
09:48 StevenK See, many?
09:48 ogra :)
09:48 ajmitch from what I can tell, he certainly knows what he's doing
:)
09:48 sistpoty I can't really say anything about his skillz... I'd need
higher skills myself to rate StevenK's ;
09:48 sistpoty +)
09:48 mdz StevenK: given your background you're obviously familiar
with packaging practices ;-)
09:48 StevenK Hell, I wrote a package checker.
09:48 StevenK :-)
09:48 mdz right
09:49 Mithrandir SK++
09:49 StevenK Er, am writing one.
09:49 Keybuk StevenK: yes, could you not do that again :)
=== StevenK grins.
=== Burgwork [[email protected]] has joined
#ubuntu-meeting
09:49 mdz StevenK: how did you become interested in contributing to
Ubuntu directly?
09:49 sivang lol, but she has a nice name :)
fwiw, I've been happy with what I've seen from SK, both
09:50 Mithrandir technically; he knows his ropes well as well as socially,
helping other people in -motu.
09:50 ogra ++
Apart from that, I was amazed by how fast and well he
09:50 dholbach integrated into the team and worked with the processes we
have and helped others to get into the MOTU world as well.
09:50 ogra (especially for the last part ++)
mdz: I've been curious about Ubuntu since Hoary or so, and
a few months ago (I think), I tried a live CD, and was
09:51 StevenK impressed. I started hanging out in -motu and helping out.
A week later I installed Breezy and dealt with the culture
shock from moving from unstable to well, stable.
09:51 ogra lol
09:51 Mithrandir StevenK: you should try the new live cd. Much faster and
shinier.
09:51 ajmitch and you couldn't bear not dist-upgrading, so you went to
dapper?
09:51 mdz mjg59,Keybuk: we're running a bit long already; any
questions you'd like to ask StevenK?
09:51 StevenK That's actually on my TODO list.
09:51 ogra if you dont use ppc :P
09:52 pitti StevenK: just install dapper to get the nice cozy feeling
of brokenness again :)
09:52 Keybuk StevenK: how will you balance working on Debian and for
Ubuntu
09:52 Keybuk s/for/on/
09:52 sivang pitti: not too much though :)
09:52 StevenK Keybuk: Ignore Debian and work on Ubuntu? Seems to be
working for now.
09:52 StevenK In all seriousness, most of my packages in Debian take
care of themselves.
09:53 ogra wow, how did you manage that ?
09:53 raphink pitti: hehe
09:53 StevenK Either I'm upstream, or the upstream release very slowly.
=== ogra glares at the pieces of xscreensaver in front of him and envys
StevenK
StevenK: so you're interested in working on a different
09:53 mdz set of packages in Ubuntu, then? any particular area of
focus that interests you?
09:54 StevenK Not any particular area. I'll fight for interesting
packages to merge/sync, but I'll work on anything.
09:54 StevenK It's just packaging, and packaging is fun.
09:54 raphink :)
09:54 mdz ok, any further discussion?
09:55 Keybuk so, out of interest, why would you want to do this work
for Ubuntu and not for Debian?
09:55 mjg59 I don't think I've got any relevant questions
09:55 StevenK Mainly because the work ethic in Ubuntu is much nicer.
09:55 ogra :)
09:55 StevenK I've become a little upset by Debian recently.
09:56 mdz it's easier in a small organization
09:56 StevenK Reading -{private,devel,project} has become a chore.
09:56 mdz we'll have to face many of Debian's problems as time goes
on, I expect
09:56 mdz hopefully with the benefit of Debian's experience, but
face them nonetheless
09:56 ajmitch the MOTU team will inevitably run into scalability issues
09:56 StevenK ajmitch: I thought we had already? :-)
09:56 ajmitch StevenK: we have the problem of too few still
09:57 ajmitch once we get too many, other issues show up :)
09:57 mdz ok, need to move on to the discussion topics on the agenda
09:57 mdz votes?
09:58 Keybuk ++
09:58 mdz +1 from me based on Debian history, recent uploads and
feedback from MOTU
09:58 mjg59 +1
09:58 dholbach Welcome to the team StevenK!
09:58 mjg59 Cool
09:58 StevenK Thanks!
09:58 mdz StevenK: congrats
09:58 pitti StevenK: welcome
09:58 ogra yay, welcome StevenK !
09:58 mdz pitti: still awake?
09:58 mjg59 pitti: Sudo help? Could you outline what that actually
involves?
09:58 pitti mdz: barely :)
09:58 pitti yes
The problem: we want to make it easier for first-time
09:58 pitti Ubuntu users to find out about the root whereabouts, since
it's a FAQ.
currently proposed idea: sudo writes a stamp
(~/.sudo_admin_successful, or whatever) if the user ran
09:58 pitti sudo successfully, and a snippet in /etc/profile gives a
short help message ('Use "sudo <command>" to execute a
command as root') as long as the stamp file does not
exist.
09:59 pitti (NB that this was not *my* proposal)
09:59 sistpoty congrats StevenK :)
09:59 pitti some people (Mithrandir, fabbione) did not really like
this approach, both principally, and technically
09:59 mdz this was sabdfl's proposal, which he discussed with me
I propose to discuss the general approach first before we
09:59 pitti come down to the implementation; Mithrandir, what would
you propose instead?
hmm, to me, if a user opens a Terminal and doesn't know
09:59 Keybuk how to become root -- or where to look in order to know,
they probably shouldn't be trying to be root
09:59 mdz the goal of this approach is to inform the user about sudo
as soon as we know that they are a command-line user
09:59 mjg59 This could presumably be compared to how BSDs used to have
"Don't login as root, use su"?
10:00 mdz Keybuk: the target audience are the folks who are used to
other distributions
10:00 mdz but not sudo
10:00 pitti but many users already know what a 'root' user is and what
it is for, and they seem to miss it in Ubuntu
10:00 pitti so we need to nudge them itno the right direction
10:00 Mithrandir pitti: write a pam module to echo out "you need to use
sudo" if they call su -
10:00 Keybuk if we _really_ must have something like it, I'd suggest
bringing back the "Root Terminal" menu item
10:00 mdz mjg59: yes, but don't they display that in motd or
something?
10:00 Keybuk maybe shoving it under System->Administration
10:00 pitti Mithrandir: that was my original idea, too
10:00 mjg59 mdz: Only if you logged in as root
10:00 mdz this would be less disruptiev in that it would go away
once they've used sudo
10:00 sivang maybe this could be made so that only users who are
allowed to sudo see it?
10:00 mdz mjg59: ah
10:00 mdz sivang: yes, that was part of the proposal
10:01 sivang opos, sorry :-/
10:01 Mithrandir pitti: of course, only if root was disabled. If root's
enabled, it should be quiet.
10:01 mdz Keybuk: the trouble is that users are accustomed to
opening a terminal and using su
10:01 pitti Mithrandir: sure
10:01 mjg59 Perhaps it would be more sensible to have *su* print it?
10:01 pitti I don't really like the 'root terminal' approach
10:01 pitti it might tempt people to use it for more tasks than
necessary
10:01 Mithrandir mjg59: implementation detail, really, but sure.
mjg59: that was my first answer to sabdfl, but feedback
10:01 mdz from the community has shown that users get confused
before that point
10:02 mdz they suddenly realize that they don't know the root
password, so su is hopeless
the only problem I see with my approach is that people
10:02 Mithrandir won't even try su - if they haven't punched in a root
password.
10:02 mjg59 mdz: Ah
given that, the proposal doesn't look all that bad to me.
10:02 sivang If I cannot sudo - the I won't see it. if I can, then I
should know the implications already.
10:02 pitti maybe we should add the su check if root is disabled
nevertheless? It doesn't interfere with the sudo help
10:02 mdz pitti: sure, it's orthogonal
10:02 raphink just jumping it, but can't people be better informed on
`sudo -i' ? if they want a su feeling?
10:02 raphink s/it/in/
10:02 mjg59 raphink: It's more that they don't know they have to use
sudo
10:03 pitti yes, I forgot that part - that only affects members of
admin
10:03 raphink mjg59: I get the point
10:03 raphink and it would be really dirty to link su to sudo -i ;)
raphink: we can fine-tune the text of the message as
10:03 mdz necessary; I think the open issue is whether the approach
is correct
10:03 Mithrandir a problem with the flag file is "what happens once the
user has used sudo once, then doesn't remember?"
10:03 pitti raphink: and wrong
I can understand the reasoning behind wanting to forcibly
10:03 mjg59 instruct people, but I'm not sure uglifying every shell is
the best plan
10:03 raphink mdz: yes
10:03 raphink pitti: totally wrong ;)
10:03 mdz Mithrandir: we can lead them to the documentation, but we
cannot make them drink
10:03 mjg59 Also, there's no reliable way for it to know if the user
can run sudo
10:04 mdz mjg59: for all new installations, the admin group serves
that purpose
10:04 pitti mjg59: no, we only want admin members
mdz: the message magically goes away after they've run the
10:04 Mithrandir command once. There's no (visible) way for them to get it
back.
mjg59: we specifically don't want messages for restricted
10:04 pitti sudo access (you still remember the information disclosure
discussion? :) )
10:04 raphink mjg59: all the more that sudo can be used for only some
tasks
10:04 Mithrandir mdz: it's really a horrible thing to do, UI-wise..
10:04 mdz Mithrandir: not only after they've run it, after they've
run it successfully
10:04 raphink mjg59: so that even a user who can use sudo might not be
able to use it for all things
mdz: I worry about the case where an admin knows enough to
10:04 mjg59 fix sudo (say they have a local admin group that's used
for other purposes), but don't know where this message is
coming from
Mithrandir: to be concrete, if the sudo command and
10:05 pitti authentication was ran successfully (not if the runned
command was successful)
10:05 mdz mjg59: /etc/profile is a pretty reasonable place to look
10:05 sivang mjg59: we can state where this msg is coming from
somewhere else, and note that in the help msg itslef
10:05 Mithrandir pitti: sure, but it's still horrible from a UI POV.
10:05 mjg59 mdz: I think that whichever way we go, people will be
unhappy about some aspect of it
10:05 mdz mjg59: agreed
10:05 pitti Mithrandir: well, there isn't much UI, what do you mean in
particluar?
10:05 mjg59 How does MacOS deal with this?
10:06 mdz but I think we can do better than we currently do
10:06 mjg59 (I'm guessing that they just don't)
10:06 mdz mjg59: they ignore it, I think
10:06 pitti mjg59: they don't
10:06 sivang Mithrandir: horrible, but effective to close this pit in
which I personally saw many users fall into
10:06 mdz because their users don't expect to be able to use root
10:06 pitti mjg59: the first time I saw macos, I didn't know how to
become an admin
10:06 mjg59 What other things can also be done?
we're in a different boat because we get a lot of users
10:06 mdz who have enough experience with linux to be confused by
the difference in our configuration
10:06 Mithrandir pitti: You have a message which appears each time you open
a terminal. You run sudo ls. The message goes away.
10:07 mjg59 What does the installer currently say during password
configuration?
do I recall correctly, that there is a root-terminal icon
10:07 sistpoty somewhere in the default gnome install? maybe use that to
trigger some help?
10:07 mdz mjg59: it doesn't matter, nobody reads the text ;-)
Mithrandir: maybe we should just add it to
10:07 pitti /etc/skel/.bashrc and have the user remove it themselves
if they want?
10:07 janim1 people may get preinstalled boxes
10:07 pitti mdz: ^
10:07 ogra Mithrandir, but you filter a good bunch of support
requests from the users which have read the message
10:07 mdz Mithrandir: what do you propose? something like what pitti
says?
10:08 mdz "edit ~/.profile / /etc/profile / whatever if you don't
want to see this message anymore"?
10:08 sivang maybe we can use a dsktop notification instead of a
terminal msg?
10:08 pitti then existing users won't see it of course
10:08 Mithrandir mdz: I would like a pam module or have it not go away
automatically, yes.
10:08 mdz sivang: to what purpose?
10:08 Mithrandir pitti: existing users probably know about sudo. :-P
10:08 ogra shinyness :)
10:09 ogra sivang, that wont help you on a console
10:09 sivang err, right
10:09 pitti Mithrandir: right, that's why I think that this is not a
real flaw of the /etc/skel/.bashrc approach
10:09 sivang ogra: forgot we're not laways ona console
10:09 sivang s/console/X/
10:09 ogra heh
mdz: the text in the installer *should* be improved, mind
10:09 Kamion you; and probably will once we get all the sudo stuff
integrated upstream
=== akk [[email protected]] has joined
#ubuntu-meeting
10:09 Kamion at the moment the installer doesn't really tell you
anything much
10:10 sivang true
10:10 Kamion pitti: /etc/skel/.bashrc applies to everyone, not just
admin users
10:10 Kamion would be pretty annoying on boxes with non-trivial numbers
of users
10:10 pitti Kamion: sure, but you can enclose it in an if..then
10:10 pitti i. e. check if he's an admin member
my opinion is that sabdfl's proposal is simple to try out,
10:10 mdz unsurprising for experienced users, and helpful to
intermediate users
10:11 pitti non-admins shouldn't ever see it anyway
10:11 mdz whether it will be annoying for too many users, that's
difficult to say
10:11 mdz it might even annoy me, but we won't really know until we
try something
10:11 mjg59 Ok. How about we agree to do it for preview and then
potentially reconsider after that?
10:11 sivang we probably need to trail and error, that's all.
10:11 mdz Keybuk has notified me that his network connection is gone
10:11 mdz mjg59: that's reasonable for me
10:12 pitti can we have a voting about automatically removing the note
or not?
10:12 mdz sure, if you like
10:12 pitti if not, then we don't need to change sudo
10:12 mjg59 I'm in favour of automatically removing the note.
10:12 mdz I'm in favor of automatically removing the note, rather
than forcing users to explicitly remove it
10:13 mjg59 Ok. So we'll implement for preview, with automatic
removal, and see what sort of response we get?
10:13 mdz that's fine with me
10:13 mdz we know what sabdfl would say. ;-) DO IT
10:13 mjg59 Cool. Popcon?
10:13 sivang heh
10:13 mdz popcon
10:13 lucas yeak
10:13 lucas yeah
10:13 lucas 1 min
10:13 pitti ok, grat
Status of popcon.u.c (LucasNussbaum, also see
[WWW] thread on u-devel@): popcon.u.c hasn't been updated
10:13 lucas since June 2005. While it's mostly useless for main
packages (all users have the default set of packages
installed), it is very useful for universe to determine
wich packages should get the more attention.
10:14 pitti great
10:14 mdz it's broken and ought to be fixed. is there any policy
decision to be made here?
Could popcon be fixed ? By whom ? How could we ask our
10:14 lucas users to enable it (u-d-a@ email, blog entries) ? (it is
disabled by default for obvious privacy reasons)
10:14 mjg59 mdz: Default enabling mechanism
10:14 mdz we could add a checkbox to espresso
10:14 ogra having a gui to enable it would be rad to make users aware
of it ...
10:14 Kamion thom used to run popcon (by virtue of being sysadmin as
well), but no longer does
10:15 Kamion I don't think anyone's paid any attention to it at all
since he left
Is espresso going to have a "Put your email address here
10:15 mjg59 if you want to receive updates about new versions of
Ubuntu" type thing?
elmo: what kind of privileges are necessary to run
10:15 mdz popcon? is it something the sysadmin team needs to do, or
can it be handed off to a mere mortal?
10:15 mdz mjg59: not planned currently
10:15 mjg59 If so, it would make sense to add something with a privacy
policy there
10:15 elmo mdz: it can and should be handed off
10:15 lucas I'd volunteer to take care of it, but it's probably a
'privilege' limited to employees ?
10:16 Kamion lucas: shell access to machines in general is, yeah
10:16 mdz elmo: I assume it requires shell access somewhere or
other?
10:16 elmo mdz: yes
10:16 elmo it can't be community maintained, sorry
10:17 ogra didnt we have external vservers for community stuff
10:17 elmo is there really no one on the distro team who can fix it?
10:17 elmo I don't beleive it requires much in the way of maintenance
10:17 mdz elmo: yes, it's just a matter of appointing someone
10:17 Mithrandir can it be cronned?
10:17 ogra i'd take it ... but i'm not sure how time consuming it is
10:18 mdz is anyone who already has shell privileges familiar with
popcon?
10:18 Mithrandir I've read the scripts, but I wouldn't consider myself
familiar.
10:18 Kamion I've touched it, but am kind of busy
10:18 ogra i only inspected the client side when i worked on hwdb
10:19 mdz I expect that once it's fixed, it'll run quietly without
intervention for a long time
10:19 mdz Mithrandir: would you have a look and get it going again?
10:20 Mithrandir mdz: sure, I could do that.
10:20 mdz wonderful, thanks
10:20 mdz lucas: any outstanding issues then?
10:20 Mithrandir I'd need access to the box, but I'm sure that'll be
arranged.
10:20 Mithrandir (I'll file an RT ticket)
10:20 mdz Mithrandir: yep
10:21 mdz there's a question about advertising it more
10:21 mdz I don't mind if someone sends an email to -announce
inviting users to participate
10:21 lucas mdz: no
10:21 mdz ok, let's move on then
10:21 mdz is jani here regarding Xubuntu?
10:21 janim1 here
10:21 dholbach I can do that, once Mithrandir has fixed it.
=== christooss [[email protected]] has joined
#ubuntu-meeting
10:21 mdz dholbach: ok
=== dholbach hugs Mithrandir
10:22 janim1 shall I start?
10:22 mjg59 janim1: Sure
10:22 mdz janim1: please
10:23 janim1 ok so I'd like if possible to have the same status for
xfce packages
10:23 janim1 as for kde and gnome
10:23 janim1 excempt from UVF
10:23 mdz janim1: KDE isn't exactly exempt, though it does sometimes
get exceptions
10:23 janim1 I am taking care of them and debian is doing the same
10:23 tseng janim1: "exempt" is a bit of a strech
10:23 mdz janim1: the reason why gnome is treated specially is
because our releases are synchronized
10:23 janim1 it was for breezy wasn;t?
10:23 tseng janim1: gnome has a strict schedule
10:24 mdz janim1: so we can be confident that they're stabilizing
when we need them to be stabilizing
10:24 mdz janim1: does xfce have a time-based release schedule?
10:24 janim1 no
10:24 janim1 they plan a stable release in Feb though
10:24 mdz if not, then we need to consider it on a case-by-case
basis
10:24 Keybuk ok, I _think_ I'm back again (I hope)
10:24 pitti Keybuk: yes, you are :)
janim1: I have to ask for any excemptions for KDE uploads
10:24 Riddell after UVF, it has to be shown that they are bug fix only
releases and won't break anything
10:25 janim1 ok, then I don;t want blanket permissions
Keybuk: while you were gone, we decided to rename the
10:25 mdz project to Schmoobuntu, and to have prospective developers
paint their faces blue
10:25 janim1 just not too much hassle :)
I'm inclined to agree with mdz here, if XFCE doesn't
10:25 Keybuk follow our release cycle, we should consider it
individually each time
10:25 mdz janim1: I'm perfectly willing to consider exceptions for
XFCE
10:25 Keybuk mdz: what about existing developers?
10:25 janim1 thanks
10:25 mdz Keybuk: orange
10:25 Keybuk ah, the bad-fake-tan look :)
janim1: it will help a lot if upstream provides good
10:26 mdz changelogs and distinguishes between feature branches and
bugfix-only branches
10:26 dholbach Oh great! That's more like the hippie feeling I expected!
:)
10:26 janim1 so yes I was only talking about dapper and this upcoming
xfce not in general as it is with gnome
10:26 tseng on a similar note, I am hoping to track mono and gtk# past
UVF
10:26 mdz janim1: since we won't be able to spend time auditing
their code to see what kinds of changes we're dealing with
10:26 janim1 mdz, yes they are working on a branch which becomes a
release shortly
10:26 tseng they both have bugfix-only branches open, as NLD time
schedule is pretty close to dapper atm
10:27 tseng and fixes will be backported for the next few months.
10:27 janim1 mdz, I am willing to put in all the time needed for the
dozen or so packages
10:27 janim1 and they have _no_ security record so far :)
10:27 pitti janim1: or rather, a good one :)
10:27 janim1 ok :)
janim1: it might help if you communicated with upstream
that we are very disciplined about our release cycle and
10:27 mdz would like to cooperate with them to ensure that the right
changes get into Ubuntu, but need to be conservative in
what we accept as releases approach
10:27 pitti mdz: FYI, I ack'ed all the xfce packages for main
yesterday
10:28 dholbach Wow.
10:28 janim1 mdz, already contacted them in December and keep pestering
and controibuting
10:28 ogra in a row
10:28 janim1 did the same with debian-xfce
10:28 mdz ok, so there is also the question of promoting XFCE to
main\
10:28 janim1 pitti, thanks btw, there's still thunar orage and exo
10:28 janim1 :)
10:28 pitti janim1: oh, ok, will do them tomorrow
10:29 pitti janim1: they didn't sound xfce'ish
10:29 janim1 yeah
10:29 ogra exo has an X in the middle :)
10:29 pitti mdz: however, before we actually promote them, we should
find a solution for langpacks
as with any other packages, if they meet our criteria and
10:29 mdz get signoffs from the right people, they're welcome in
main
=== mhz [n=mhz_chil@moinmoin/fan/mhz] has joined #ubuntu-meeting
10:29 mdz pitti: are the translations very large?
10:29 pitti xfce has a fair number of translations, and we shuold
carefully consider where to put them
10:29 janim1 pitti, yes langpack is something we need to figure out for
xfce
10:30 pitti i. e. put them into the main langpacks, or create xfce
specific ones
10:30 janim1 pitti, I am willing to do the packaging whatevere is
required with your guidance
10:30 pitti janim1: do you happen to know how big a well translated
language is for xfce?
10:30 mdz pitti: I'm happy to leave that to your discretion based on
how large they turn out to be
10:30 janim1 pitti, no idea
10:30 pitti janim1: nevermind, langpacks are created automaticlaly
10:30 pitti mdz: ok, I'll figure it out with jani
10:31 mdz ok
10:31 mdz the final xfce issue is CD builds
10:31 janim1 yes
10:31 ogra pitti, do separate ones, else you 'll loose the advantage
of xfce's smallness
10:31 janim1 this is a Kamion thing I suppose
10:31 mdz this is a tricky issue, because there is a tradeoff
between bottlenecks on busy people, and security
10:31 janim1 whether the machines can handle the load
10:31 Kamion to some extent; other people can kick off builds, but
nobody else knows the relevant bits of the code as well
10:31 mdz it would be simplest for Kamion to do it, but he has a lot
on his plate
10:32 pitti ogra: no, you will want the general langpacks for xfce,
too
10:32 pitti ogra: just not the gnome and kde ones, but you don't need
to install them
10:32 ogra pitti, yup
I will need to do seed admin, but somebody else could
10:32 Kamion probably manage the necessary code changes by
clone-and-hack, and I can review them
10:32 janim1 I am again willing to do the work if it's ok security-wise
10:32 Kamion the load issues are better now than they were last time we
talked
10:32 janim1 great
mdz: I'd be ok with helping Kamion out wrt cd builds,
10:33 Mithrandir since I'm fairly involved in at least the live part
already.
10:33 janim1 so good it could build daily images?
10:33 ogra me too
10:33 Kamion janim1: basically the only issue now is disk space, but I
can probably squeeze you in
10:33 ogra at least i'd like to be able to kick off my edubuntu
builds myself
10:33 mdz Mithrandir: I'm happy for you to have access to little for
that purpose
10:33 janim1 Kamion, thanks
10:33 pitti janim1: I look forward to trying an xfce live cd :)
10:33 janim1 pitti, me too honestly :)
10:33 sivang janim1: me too :)
10:33 Kamion other people with cdimage access are mdz, infinity,
Riddell
10:33 mdz ogra: likewise
10:34 ogra thanks :)
10:34 Kamion live CD work requires help from lamont or infinity
10:34 mdz I think there are a lot fewer gotchas now than there used
to be
10:34 mdz as far as triggering CD builds
10:34 mdz Kamion: any concerns there?
10:34 Mithrandir can we get remote triggering of the live fs builds??
10:34 Kamion mdz: nope; I need to brief each person on a few things
they need to do first and need to know, that's all
10:34 Mithrandir s/.$//
10:34 Kamion Mithrandir: I have it ...
10:34 mdz as do I
10:34 Kamion it's just an ssh key thing, if lamont/infinity trust you
10:34 mdz it's just a matter of adding new keys if more people need
it
10:35 Mithrandir mdz: ok.
10:35 Kamion Mithrandir should clearly have that for casper
development, IMO
10:35 mdz definitely
10:35 Kamion how do we want to manage xfce seeds?
10:35 mdz Mithrandir: I'll mail lamont/infinity and ask them to take
care of that
I'm usually fine, since infinity is up far too late for
10:35 Mithrandir his own health, but it would be nice not to rely on
somebody 10 time zones away.
10:35 mdz how are xfce seeds being managed so far?
10:35 elmo err
10:35 janim1 Kamion, as you wish
10:35 janim1 I keep them on localhost :)
10:36 Kamion janim1: in revision control?
10:36 janim1 but will move them public when needed
10:36 janim1 bzr branch of ubuntu-seeds
10:36 mdz janim1: oh, good
10:36 Kamion ok, if you could make those public, we can publish them on
chinstrap
10:36 mdz janim1: please do mirror your bzr branch publicly
10:36 janim1 Kamion, ok will let you know tomorrow
however we will need to be able to change them; I (and
10:36 Kamion others) relatively often make changes which need to be
applied quickly to all derivatives
10:37 janim1 then should we keep them under ~cjwatson ?
so maybe we can come up with some PQM arrangement or
10:37 Kamion something, or just merge requests if we can guarantee low
latency
they certainly have to be mirrored under ~cjwatson/seeds/
10:37 Kamion for everything to work (bus problem? moi?) but that can
just be a mirror
10:37 Kamion if you're happy for me to ping you from time to time with
urgent merges, that's fine
10:38 janim1 Kamion, I am fine with that
10:38 Kamion ok
10:38 mdz Kamion: you *so* did not just suggest PQM
10:38 ogra heh
10:38 Kamion mdz: pretend that my increased use of Launchpad due to
Malone is a bit like drug injection
10:39 Kamion causes hallucinations and fun stuff like that
10:39 sivang lol
=== Mithrandir chuckles
10:39 mdz janim1: bear in mind that we're doing a major
infrastructure migration for the package archive next week
10:39 ogra yes, malone can do that
=== slomo [n=slomo@ubuntu/member/slomo] has joined #ubuntu-meeting
10:39 janim1 mdz, the soyuz thing?
janim1: so it's likely that we'll need to sort out a lot
10:39 mdz of issues there before we can do everything properly for
Xubuntu
10:39 mdz janim1: yes
10:39 janim1 should I wait till then?
10:39 janim1 it's ok with me
10:40 mdz janim1: no, I'm just warning you that there will be delays
on our side due to that
10:40 janim1 np
janim1: you already have cdimage and debian-cd checkouts
from my arch branches, right? if you could update those
10:40 Kamion and grep through for names of other derivatives (kubuntu
and edubuntu, chiefly), it should be relatively
straightforward to add xubuntu too
10:40 mdz janim1: what time zone are you in?
10:40 janim1 Kamion, yes I have and will do
10:40 janim1 UTC+2
10:40 Kamion oh, and 'find' as well as 'grep', there are some files
under debian-cd/tasks/ that need to be added
10:40 janim1 eastern europe
10:40 mdz janim1: ok, that's pretty close to Mithrandir, so if he
can run your CD builds for you, that should work
10:41 siretart mdz: major infrastructure migration next week? does this
mean/include sync requests via soyuz?
10:41 Mithrandir mdz: are you mailing admins for ogra's and my access to
little or should I?
10:41 mdz siretart: it's going to affect everything
10:41 mdz Mithrandir: please do
10:41 mdz Mithrandir: I've mailed about livefs triggering
10:41 mdz we need to move on, we're pushing 2 hours
10:42 mdz janim1: any urgent concerns?
10:42 janim1 mdz, nothing urgent
10:42 mdz ok
10:42 janim1 thanks
10:42 mdz I don't really want to discuss this next item unless joeyh
is actually here to talk to us
there's still a very active discussion happening on debian
10:42 mdz mailing lists, and we're not ready to start implementing
changes on behalf of individual debian developers yet
10:43 ogra it was a misinterpretation of the mail imho ...
10:43 mdz stephan is not here, either, so I'd like to defer this
item if it's OK with Keybuk/mjg59
10:43 janim1 Kamion, btw you're keeping cd-image in arch for now
instead of bzr?
10:43 Keybuk I agree, joeyh should come to the meeting
10:43 pitti janim1: the other way round
10:43 mjg59 I'm fine with deferring this
10:43 Kamion janim1: I do plan to move it, but it's backed up behind a
million other things to do as usual
10:43 mdz ok
10:43 Keybuk likewise \sh
10:43 mdz mjg59: libpam-foreground?
10:43 Keybuk can somebody e-mail him to let him know that?
10:44 siretart I will talk to him
10:44 mdz siretart: thanks
10:44 siretart mdz: what CAN we actually implement?
mdz: there has been a suggestion that we could modify
10:44 siretart dpkg-genchanges/dpkg-buildpackage, is this really
feasible?
10:44 Kamion madness
10:44 mdz siretart:
http://lists.debian.org/debian-devel/2005/05/msg00260.html
=== ogra thinks its not a question of implementing something, we have a
policy
10:44 siretart I mean at binary package building time?
10:45 Kamion any kind of global changes in Maintainer fields require
changes in the archive
10:45 elmo Kamion: it does?
10:45 Kamion siretart: no, that's daft, Maintainer could be overridden
on the archive side if we were going to go that route
10:45 mjg59 libpam-foreground needs to go in to the base installation
in order to let us do privileged hal operations sanely
10:45 elmo Kamion: how?
10:45 elmo Kamion: I think that's backwards
siretart: I outlined everything in that message, and the
10:45 mdz discussion is ongoing on debian-devel. no need to discuss
it here until there's a decision to be made
10:45 Kamion elmo: if we don't want to touch all packages or do MADNESS
like hacking dpkg, yes
10:45 elmo Kamion: I think we have to hack dpkg
10:45 Kamion I don't see any other alternative
10:45 mjg59 In order to do that, it needs to be in every interactive
login session
10:45 elmo Kamion: altering just the Packages file isn't sufficent
10:45 Kamion elmo: I think that's horrible and bad and wrong
10:45 mdz mjg59: libpam-foreground is something which now exists?
10:45 siretart mdz: so we defer this to the next meeting. ok
10:45 mjg59 mdz: Yes
10:45 Kamion it's good enough for most purposes
10:46 Mithrandir can we have one discussion at a time, please? :-)
10:46 mjg59 Now, I'm not too sure whether there's any consensus on
whta the best way to do that is
10:46 Kamion namely providing a contact for users using our package
management tools to see who the maintainer is
10:46 mdz siretart: indefinitely, until we actually have a proposal
from Debian about what they want us to do
10:46 elmo except package management tools like 'dpkg -I' :-P
10:46 mjg59 We can add it to common-session, but that runs for
non-interactive sessions as well
10:46 mjg59 (this may not make any significant difference)
=== Kamion cedes the floor to the other discussion
Actually, letting it run for non-interactive things as
10:47 mjg59 well results in "nobody" having permission to do things
like shut down the machine
10:47 mjg59 So that's probably not ideal
10:47 mjg59 In order to fix this, we need to alter the semantics of
conffiles in /etc/pam.d
10:48 mdz mjg59: the basic idea is to grant special privileges to a
user who seems to be at the console?
10:48 mjg59 mdz: When a user logs in, a file is created in
/var/run/console of the form username:vt_number
10:48 mdz could we address the issue of non-interactive logins
inside libpam-foreground itself?
10:48 mjg59 mdz: I'm not sure if it gets that information
10:48 mjg59 I can look into that
10:48 mdz it should get file descriptors
10:49 mjg59 Ok
10:49 mdz since pam runs in-process (right?), I don't think it can
close them
10:49 Mithrandir pam is in-process, yes.
10:49 mjg59 Ok. In that case we can probably do it without altering
semantics.
10:49 mdz yay
mjg59: isn't the whole problem with "if you have console,
10:49 Keybuk you have more privilegs" that once you've been on the
console, you can stash a setgid binary and always have
those privileges?
10:50 mjg59 Keybuk: No, because libpam-foreground doesn't grant you
any privileges
10:50 Keybuk or is this a different approach?
10:50 mdz Keybuk: it doesn't grant you any group memberships
10:50 mjg59 It creates a file - that's all
10:50 Keybuk creates a file?
10:50 mdz it just records, in a trusted location, the fact that
you're on the console
10:50 mdz and other programs can use that information to
authenticate you
dbus checks whether that file exists when you send a
10:50 mjg59 message, and optionally drops it if the user and vt don't
match
10:51 mjg59 Ok. I'm happy with that.
10:51 mdz cool
10:51 mjg59 Any other business?
mjg59: I hope you're creating the file with a
10:51 Mithrandir setuid/setgid helper? The authentication stuff might not
run as root. (think ssh)
10:51 ogra mjg59, reload the agenda ...
10:52 mdz ogra: that is not funny
10:52 sistpoty mjg59: I've added another point (at the beginning of the
meeting, sorry): UVF-handling for universe
10:52 ogra mdz, sistpoty added it ..
10:52 mjg59 Mithrandir: No, it's created by the process. We don't want
it in the case of ssh, so that's no problem
10:52 sistpoty ogra: maybe you could talk about that?
10:52 mdz sistpoty: if it's quick, please ask, otherwise we need to
defer to the next meeting
10:52 mdz we already had a backlog and have been here for a long
time
10:53 ogra we talked about general proxies as we had in breezy for
uvf exception requests
10:53 ogra in our motu meeting
10:53 ogra the question was just to whom these proxie people should
talk to
10:54 siretart escp. if sync requests are going to go via soyuz
10:54 ogra (i'm guessing Kamion and mdz as usual, but motu wants
names :) )
10:54 pitti mjg59: the main use case is that X creates the file,
right?
10:54 mdz ogra: still us, yes
10:54 ogra oki
10:54 mdz is that all?
10:54 siretart mdz: wait
10:54 ogra sistpoty, thats ok with you for the proxy stuff ?
10:54 siretart mdz: we shall bug you about EVERY package in universe for
UVF exception?
10:54 mdz soyuz isn't going to change anything immediately regarding
syncs
10:55 mjg59 pitti: Yes
10:55 ogra siretart, thats what the proxies are for ...
10:55 mdz siretart: isn't the purpose of the proxies to batch and
filter the requests?
10:55 siretart argl, sorry I was misreading
10:55 ogra they must decide how critical it is
10:55 mdz ok
10:55 mdz we need to close
10:55 mdz for general health and sanity
10:55 raphink hehe
10:55 sivang indeed
10:55 ogra :)
10:55 sistpoty :)
10:55 siretart :)
10:56 mdz I'll flush the agenda shortly, antyhnig new can be added
then
10:56 mdz meanwhile, adjourned
10:56 mdz thanks everyone, especially those who had to wait a long
time for their turn
MeetingLogs/Technical_2006-01-17 (last edited 2008-08-06 16:31:17 by localhost)