We'll have our regular Sourceware Open Office this Friday Sep 13, 16:00 UTC Using #overseers on irc.libera.chat
To get the right time in your local timezone: $ date -d "Fri Sep 13 16:00 UTC 2024" Then at the Cauldron https://gcc.gnu.org/wiki/cauldron2024 in Prague on Monday at 11:00 local time we'll also have an in person session. Bof: Sourceware infrastructure tips & tricks Speaker(s): Sourceware Project Leadership Committee, Elena Zannoni, Mark J. Wielaard, Ian Kelling Sourceware has provided the infrastructure for the core toolchain and developer tools for more than 25 years. The last couple of years it has transformed from a purely volunteer into a professional organization with an eight person strong Project Leadership Committee, monthly open office hours, multiple hardware services partners, expanded services, the Software Freedom Conservancy as fiscal sponsor and a more diverse funding model that allows us to enter into contracts with paid contractors or staff when appropriate. The Sourceware services are loosely coupled, but developers become most productive when they combine them. So lets exchange tips and tricks on how using bugzilla and cgit, b4 and public-inbox, git-pw and patchwork, the snapshot builders and manual generation, wikis, buildbot and try-bots, ci-bots, full-builds and the bunsen testresults database, make you most productive. Lets also discuss the recent "Cybersecurity" regulations, how Sourceware prepared and what policies projects could adopt to improve their secure software development framework. https://sourceware.org/mission.html#services https://sourceware.org/sourceware-25-roadmap.html https://sourceware.org/sourceware-security-vision.html Overview of suggested discussion topics: - Sourceware Project Leadership Committee (PLC) Members - History and Roadmaps - Software Freedom Conservancy (SFC) - Communication and contacts - overseers, project admins - mailinglists, bugzilla, technical roadmaps, quaterly updates, open office hours - (Hardware) sponsors - Funds and how to spend it (see security-vision below) - Mailing lists Mailman - dmarc/dkim, (no) From-rewriting (and SRS and SPF and VERP - for maximal email hygiene) - Moderators and spam - (python2) what should an upgrade look like? - public-inbox - imap, nntp, rss, git clone inbox.sourceware.org - b4 config and usage - Git - cgit everywhere? - project configs - adacore hooks - signed commits (also see cybersecurity) - Bugzilla - Account creation - Two is better than one? - Upgrading and local patches - Wiki - MoinMoin - builder.sourceware.org - hardware overview i386, x86_64, ppc64le, s390x, ppc64, armhf, arm64, riscv - kinds of builders - pre-commit, try builders - ci-builders finding regressions - full-builders, storing test results (see bunsen below) - autoregen (binutils-gdb, gcc) - config grew a lot last year help needed simplifying - bunsen - indexes repository of raw testsuite log files (sqlite + git) - understands dejagnu, glibc, automake, autoconf styles - use toolkit locally or centralized on sourceware - live web interface at https://builder.sourceware.org/testruns/ - patchwork.sourceware.org - git pw setup - patchwork plus CI/CD - Let's use those buildbot workers too - snapshots.sourceware.org new isolated machine/vm/container takes over cron jobs triggered by buildbot can also trigger, manuals, code coverage, api docs, etc. valgrind, libabigail, gnupoke, glibc, gdb, elfutils, dwarfstd, binutils - Cybersecurity - US Improving the Nation's Cybersecurity Executive Order 14028 - EU Cyber Resilience Act (EU CRA) - Secure Software Development Framework (SSDF, NIST SP 800-218) - What can Sourceware do? - signed-commit census report - Sourceware Security Vision https://sourceware.org/sourceware-security-vision.html - Practical steps for projects and individual contributors If time permits... - Experiment: sourcehut https://sr.ht/~sourceware/ A more webby git workflow alternative git send-email without the email - non-Sourceware, but useful, services - BBB server (SFC) - mattermost (OSUOSL) - irc (libera.chat,oftc) - gerrit server - Software Heritage and archive.org mirrors
