Thursday, 2024-05-23

*** monstr <monstr!~monstr@nat-35.starnet.cz> has joined #cip05:49
*** monstr <monstr!~monstr@nat-35.starnet.cz> has quit IRC (Remote host closed the connection)05:51
*** rajm <rajm!~robert@macc-04-b2-v4wan-169608-cust697.vm21.cable.virginm.net> has joined #cip06:11
*** ironfoot_ is now known as ironfoot10:43
*** patersonc_ is now known as patersonc11:45
*** masami <masami!~masami@FL1-219-107-110-177.tky.mesh.ad.jp> has joined #cip12:45
*** iwamatsu__ <iwamatsu__!~iwamatsu_@2405:6581:5360:1800:d591:a45e:1147:25d6> has joined #cip12:59
arisuthello12:59
uli_hello12:59
iwamatsu__hello13:00
masamihi13:00
*** jki <jki!~jki@62.156.206.57> has joined #cip13:00
jkihi all13:00
iwamatsu__hi13:00
masamihello13:00
arisuthi13:01
pave1hi13:02
jkilet's get started13:02
jki#startmeeting CIP IRC weekly meeting13:02
collab-meetbot`Meeting started Thu May 23 13:02:48 2024 UTC and is due to finish in 60 minutes.  The chair is jki. Information about MeetBot at http://wiki.debian.org/MeetBot.13:02
collab-meetbot`Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.13:02
collab-meetbot`The meeting name has been set to 'cip_irc_weekly_meeting'13:02
*** collab-meetbot` changes topic to " (Meeting topic: CIP IRC weekly meeting)"13:02
jki#topic AI review13:02
*** collab-meetbot` changes topic to "AI review (Meeting topic: CIP IRC weekly meeting)"13:02
jki- prepare blog entry on SLTS kernel state and challenges [Jan]13:03
jkidown in the prio list again, was struggling (and still are) with cip-core13:03
jkino other AIs recorded13:03
jki513:03
jki413:03
jki313:04
jki213:04
jki113:04
jki#topic Kernel maintenance updates13:04
*** collab-meetbot` changes topic to "Kernel maintenance updates (Meeting topic: CIP IRC weekly meeting)"13:04
pave1I was reviewing 6.1.91.13:04
uli_i'm back from vacation, nothing substantial to report yet13:04
masamiThis week reported 685 new CVEs and 8 updated CVEs.13:04
iwamatsu__I am reviewing 6.1.9113:04
jki685 is a new record - any particular reason for that peak visible?13:05
masaminot sure..13:06
jkijust curious, not that it would change the overall situation13:07
pave1Shal we do anything with the CVEs?13:07
pave1I went through some, and signal-to-noise is not quite usefu13:08
pave1useful.13:08
jkiwell, we can only do automated stuff with them, given the amount13:08
pave1We are automatically putting them into database noone reads13:08
jkican we filter out anything that we already got or that is not affecting older kernels?13:09
jkito have stats of potentially open issues, at least on the CVE paper?13:09
pave1I believe we have similar information in better form already13:10
pave1cves are just git dumps. Not sure what kind of paper would be useful to generate from that.13:11
arisutpave1: what are you referring to?13:11
pave1arisut -- greg is copy-pasting git logs into cves.13:12
masamiInvestigating issues where the commit introducing the bug is not documented. Perhaps we should focus on such bugs?13:13
pave1Masami -- commit introducing not known will be common.13:14
jkiwell, anything that is fix in X, affecting Y and possibly not even affecting CIP is not interesting, sure13:14
jkidigging into details is likely not helpful beyond examples13:15
pave1but maybe we could filter by commit fixing not listed, because those are not spam?13:15
jkihaving stats could be13:15
pave1jki -- i have some stats.13:15
pave1on very small sample 50% is simply not security related.13:16
pave140% may be relevant in some crazy config.13:16
jkiwell, config correlation is another area of interest, if automatable13:17
pave110% could be a real issue.13:17
jkiyou may have seen https://ciq.com/blog/why-a-frozen-linux-kernel-isnt-the-safest-choice-for-security/13:17
jkiand the fact that they didn't look at the configs13:17
pave1I can take a look. I believe that's more broken than that.13:18
patersoncjki: I guess we don't know _every_ config a SLTS user will be using though? Unless there are some options that can _never_ be used?13:18
jkiwe have defined supported configs13:18
jkiwe are not supporting random ones13:18
jkithose can be debated in details, but if we exclude drivers or complete subsystems, that are easy takes (or non-takes)13:19
patersoncWhat happens if a new member joins and adds more configs? We would have to go back and work out which CVEs are now relevant, which we couldn't do if they weren't in our database to start with?13:19
patersoncAnyway, this topic is probably worth a proper call/F2F about at some point?13:20
jkithat is a valid point, and it would at least take some impact analysis, automated13:20
jkiif we exclude CVE-0815 today, will adding CONFIG_Y bring it plus hundreds more in?13:21
jkiso far, we cannot tell that13:21
jkiand no one is able to do manual analysis13:21
pave1Well, we pretend we support any config on supported architectures.13:21
jkinope, we surely don't13:22
jkiwe never13:22
jkiCIP is not a distro kernel, and even distros have certain exclusion areas, starting with CONFIG_STAGING13:22
pave1ok, sure, staging is out.13:23
jkiand more, just look at an long-living enterprise kernel13:25
jkido not state that CIP is generic, please, that is neither true nor what we communicated all the time13:25
jkiwe may patch left and right, but only on best effort basis, if at all13:26
pave1I guess we should create a list of 'definitely out' options at some point.13:26
jkihow to maintain that?13:27
jkiit would not be a technically executable something13:27
jkiwe have a whitelist, and members can expand it13:27
jkiwe need to take measure to assess expansion requests better13:28
jkilikely a topic for next TSC as well...13:30
jkianything else about this or beyond on maintenance?13:30
jki513:31
jki413:31
jki313:31
jki213:31
jki113:31
jki#topic Kernel release status13:31
*** collab-meetbot` changes topic to "Kernel release status (Meeting topic: CIP IRC weekly meeting)"13:31
jkiI saw 4.19-rt is out13:31
jki6.1 is scheduled?13:31
iwamatsu__I am working for 6.1.y-cip13:31
jkiperfect13:32
jkianything else?13:32
jki513:32
jki413:32
jki313:32
jki213:32
jki113:32
jki#topic Kernel testing13:32
*** collab-meetbot` changes topic to "Kernel testing (Meeting topic: CIP IRC weekly meeting)"13:32
patersoncWe had some gitlab runner token issues, resolved now. Sorry for the interruption Pavel13:33
arisutno news from me13:33
patersoncI've been looking into some cip core testing bits & bobs.13:33
patersoncThat's about it13:33
pave1  no problem, it works now13:33
jkiSiemens lab bring-back is delayed due to connectivity issues13:34
patersoncI've been trying to push internally for more time/resources to work on CIP testing - the project is well behind where it should be. We need to get a lot more in place before more LTS kernels go EOL and everyone jumps to SLTS...13:34
patersoncThanks jki13:34
jkidiscussed with Quirin today, we have a resolution strategy now13:34
jkipatersonc: thanks for bringing this up! so true13:35
patersoncI guess there's nothing else for testing this week...13:37
jkiok, then moving on...13:38
jki513:38
jki413:38
jki313:38
jki213:38
jki113:38
jki#topic AOB13:38
*** collab-meetbot` changes topic to "AOB (Meeting topic: CIP IRC weekly meeting)"13:38
jkiiwamatsu__: there are quite a few open MRs on the config repo - already had time to check?13:39
jkispecifically the x86 generic one would help to also move forward with isar-cip-core13:39
iwamatsu__I am reviewing now, so I think I can merge it tomorrow.13:40
jkigreat, TIA!13:41
jkiother topics?13:41
jkijust checking: next week is public holiday again for me13:41
jkiI may not be available13:42
pave1I have something just before....13:42
pave1...but there's good chance it ends in time.13:43
iwamatsu__I can takeover.13:43
patersoncI won't be here next Thursday, apologies13:43
jkiok, if the round becomes too small, make it short or skip directly13:44
jkibut thanks for your offer, iwamatsu-san13:44
iwamatsu__:)13:44
pave1So cancel or keep?13:45
iwamatsu__If there are few participants, I think it is okay to cancel.13:48
jkilooks like13:48
arisutok for me too13:48
uli_i'm ok either way13:48
jkiuse email for anything urgent to discuss13:48
arisutyeah me too13:48
masamiok13:48
pave1Ok, so next one is cancelled. See you in 14 days.13:49
jkigood13:50
arisutsee you pave113:50
jkithen closing for today...13:50
jki513:50
jki413:50
jki313:50
jki213:50
jki113:50
jki#endmeeting13:50
collab-meetbot`Meeting ended Thu May 23 13:50:48 2024 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)13:50
collab-meetbot`Minutes:        http://ircbot.wl.linuxfoundation.org/meetings/cip/2024/05/cip.2024-05-23-13.02.html13:50
collab-meetbot`Minutes (text): http://ircbot.wl.linuxfoundation.org/meetings/cip/2024/05/cip.2024-05-23-13.02.txt13:50
collab-meetbot`Log:            http://ircbot.wl.linuxfoundation.org/meetings/cip/2024/05/cip.2024-05-23-13.02.log.html13:50
*** collab-meetbot` changes topic to "Civil Infrastructure Platform Project. CIP mailing list at https://lists.cip-project.org/g/cip-dev | CIP kernel meeting every Thursday at 13:00 UTC | Find the meeting logs at https://ircbot.wl.linuxfoundation.org/meetings/cip/ and chat logs at https://ircbot.wl.linuxfoundation.org/logs/%23cip/"13:50
jkithanks you all13:50
arisutthanks you13:51
pave1Thank you!13:51
iwamatsu__Thank you13:51
masamithank you13:51
*** masami <masami!~masami@FL1-219-107-110-177.tky.mesh.ad.jp> has quit IRC (Quit: Leaving)13:51
uli_thanks13:51
*** iwamatsu__ <iwamatsu__!~iwamatsu_@2405:6581:5360:1800:d591:a45e:1147:25d6> has quit IRC (Quit: Client closed)13:55
*** jki <jki!~jki@62.156.206.57> has quit IRC (Quit: Leaving)15:54
*** rajm <rajm!~robert@macc-04-b2-v4wan-169608-cust697.vm21.cable.virginm.net> has quit IRC (Ping timeout: 260 seconds)21:46

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!