GeoTools / GeoServer PMC meeting - 2025-03-11Attending
-
Torben Barsballe
-
Jukka Rahkonen
-
Peter Smythe
-
Gabriel Roldan
-
Andrea Aime
-
Jody Garnett
Actions from prior meetings:
- [image: unchecked]
Gabe: Send for 2.27.x-cloud, 2.26.x-cloud integration branches to
discourse
I’ll wait a couple weeks until sanitizing the branches in gscloud to have
clean patches to contribute upstream
- [image: unchecked]
All: Help requested handling CVE Disclosure updates, volunteer on
geoserver-security!
- [image: unchecked]
Jody: Motion to direct prior funds generated for CITE certification to
direct towards Andrea, Peter, Gabe, and those who contributed as
appropriate.
- [image: checked]
Peter: Add notes to developers guide on how to make the CITE
certification work repeatable
-
PR here: https://github.com/geoserver/geoserver/pull/8372
- [image: checked]
Andrea: Clean up CITE build server jobs that are not in use please (done)
Agenda
-
Outstanding items for the 2.27.0 release
-
Build Server Cert Updates
-
Return of mkdocs
-
List of community module maintainers
-
CITE certification
-
Data directory GSIP-231
-
Security CVE round-up
Actions
- [image: unchecked]
Jody/Torben: Test geoserver-builds discourse email with Jenkins build
notifications
- [image: unchecked]
Peter: Will remove unloved community modules (pom.xml, docs, packaging)
- [image: unchecked]
Gabe & Jody: Delay the 2.27.0 release (send new date to developer forum)
- [image: unchecked]
Jody will ask developers / community to test night builds for community
data dir loader.
- [image: unchecked]
Jody: Meeting invite to geoserver-secruity list for a meeting next week
at this same time
Outstanding items for the 2.27.0 release
-
JAI has been updated
-
[x] JAI Affine transformation fix is in
-
[ ] https://github.com/geosolutions-it/jai-ext/pull/307 is missed
-
mapfish-print-v2 is released, and update is in
-
GitHub - mapfish/mapfish-print-v2: MapFish Print allows printing maps
as PDFs and is used by mapfish.org, geoserver extension and
core-genet work.
<https://github.com/mapfish/mapfish-print-v2>
-
Data directory loader
-
https://github.com/geoserver/geoserver/pull/8370
-
https://github.com/geoserver/geoserver/wiki/GSIP-231
-
done: [GEOT-7724] Improve validation when deserializing objects
-
EPSG database upgrade is in, missing ability to pivot over ETRS89 and
NAD83
-
Sidebar on PROJ and JNI use
-
Comparison with DuckDB (which comes with OGR statically compiled)
-
Update fixed security reports for disclosure
-
Round up of what is already fixed, need to prep before disclosure
(example remove POC)
-
GeoTools
-
[GEOT-5158] Support of complex props in GeoJSON
<https://github.com/geotools/geotools/pull/5103>
-
waiting on feedback from Ian Turton <[email protected]>
-
GeoServer
-
GEOS-11726: slow post requests: caching improvements
<https://github.com/geoserver/geoserver/pull/8368>
-
Waiting feedback from Gabe
-
A lot of activity in community modules
-
DRAFT: Add health check endpoint to GeoServer
<https://github.com/geoserver/geoserver/pull/8347>
-
later: Look at health check topic from as it seems a good
discussion
-
Clean up community modules
-
Peter has taken an action item
Action:
-
Gabe & Jody: Delay the 2.27.0 release (send new date to developer forum)
Build Server Cert Updates
Update from Torben…
-
Did not get a notification from discourse
-
Andrea or Jody was not able to find anything useful in logs
-
Not going follow up, …
RedShift monitoring ticket
https://discourse.osgeo.org/t/no-expiration-notice-emails/113346
-
wait for a response to that
Torben turned on auto cert renewal again.
Does discourse build email work?
-
Test with Jenkins, and then consider if we keep it
-
Jody and Torben can follow up over time
-
geoserver-main and geoserver-main-docs now also send email to
[email protected]
-
(re)discovered that target email is hardcoded per job (this is
necessary so that our different projects can send to different lists, but
makes bulk changes difficult)
-
Jody: Add allow for “[email protected]” to GeoServer-Builds
discourse
Return of mkdocs
Jody would like to pick this up again in Q2.
-
New build that runs the conversions until we’re done and happy.
-
There is also a markdown output format for sphinx
(loses inline examples and so on but is an option)
Q: Is there interest?
-
Yes
-
Okay then Jody will make a plan and report back another time
List of community module maintainers
See discourse: Who are the community module maintainers?
<https://discourse.osgeo.org/t/who-are-the-community-module-maintainers/113404/1>
todo:
-
Adding name ends up with private email support
-
Change from “maintainer” to “contact”...
-
Change to “developer forum” …
-
Non active or abandoned work:
-
List GSR is a good example of this …
-
Double down that this is a DEVELOPMENT activity
-
Please provide code
-
Please provide funding
-
Documentation / testing is welcome but not as important for moving
RnD forward
General revamp of community modules to dress up as an “development pending”
activity
-
RnD
-
Or modules that are being retired (like ArcSDE, etc…)
-
See developer list for list of modules
Here is the list:
-
app-schema/webservice-test
<https://github.com/geoserver/geoserver/tree/main/src/community/app-schema/webservice-test>:
run only with custom profiles (oddly, both "webservice" and "app-schema
<https://github.com/geoserver/geoserver/blob/main/src/community/pom.xml#L102>"
do). It does not even start to build, depends on the gone
gt-webservice-test module.
-
gwc-distributed
<https://github.com/geoserver/geoserver/tree/main/src/community/gwc-distributed>:
containing just a Spring context and some dependencies, enables the
Hazelcast
distributed in memory tile cache
<https://docs.geoserver.org/latest/en/user/geowebcache/config.html#hazelcast-cache>.
Anyone using it?
-
imagemap
<https://github.com/geoserver/geoserver/tree/main/src/community/imagemap>,
enables the HTML image map output format
<https://docs.geoserver.org/latest/en/user/community/imagemap.html>. I
guess nobody today uses HTML image maps in cartography, but if you do,
please let me know.
-
jdbc-metrics
<https://github.com/geoserver/geoserver/tree/main/src/community/jdbc-metrics>
seems to collect statistics about queries in JDBCFeatureReader
<https://github.com/geotools/geotools/blob/main/modules/library/jdbc/src/main/java/org/geotools/jdbc/JDBCFeatureReader.java#L269>.
On one side, it seems like a useful tool to track time actually spent
talking to the database, on the other, it has no documentation has has seen
to action for the past 7 years. Anyone using it, or that would be
interested in writing a bit of documentation for it?
-
monitor-hibernate
<https://github.com/geoserver/geoserver/tree/main/src/community/monitor-hibernate>
provides database storage for the monitoring subsystem. Unmaintained, based
on the dead Google code genericdao framework, and afflicted by using
primary keys in a log table (insertions become slower and slower), it
probably deserves some final rest, a suitable replacement would be a
rewrite, not a few small fixes.
-
pgraster
<https://github.com/geoserver/geoserver/tree/main/src/community/pgraster>
despite the name it's an easy to use UI on top of the no longer existing
gt-imagemosaicjdbc. This one already has a removal PR.
-
saml
<https://github.com/geoserver/geoserver/tree/main/src/community/saml> is
gone already, but its assembly descriptor survived and should also be
removed.
-
wps-sextante
<https://github.com/geoserver/geoserver/commits/main/src/community/wps-sextante>
is based on the Sextante java libraries... which I cannot find any more.
The version it depends onto has been released around 2012
<https://mvnrepository.com/artifact/es.unex.sextante/sextante/1.0>, the
module received its last direct commit in 2015 (all others are mass
refactors), has no documentation, Sextante for Java seems nowhere to be
found...
-
xslt
<https://github.com/geoserver/geoserver/tree/main/src/community/xslt> is
a WFS output format generator based on XSLT that was demoted to community
in May 2023. Looks like nobody complained, I'd complete the job.
Regarding extensions, the following look like good candidates for demotion
to community:
-
h2 <https://github.com/geoserver/geoserver/tree/main/src/extension/h2>
store, based on the old and unmaintained H2 v1.x. While we cannot get rid
of it completely, as some modules keep on depending on it (e.g. the NetCDF
store family), I'd make its availability as a vector store harder to get.
We should really clean out community modules ahead of GeoServer 3:
-
Idea: Could do a test by withholding jars and see what people use /
request
-
Very popular (like COG) but folks are not forthcoming with funding to
complete
(similar in scope to OGC API - Features so it is not something PSC can
fund)
Action:
-
[ ] Peter: Will remove unloved community modules (pom.xml, docs,
packaging)
-
not complicated, just annoying (and we often end up with zombie
documentation)
-
would be kind to do a separate commit for each module removal,
allowing revert, and Jira ticket for release notes
-
Example of removal of gwc-distributed
<https://github.com/geoserver/geoserver/pull/8115>
CITE certification
Peter: 11 tests (awesome!) sessions line up for release of 2.27.0
-
Including GeoTIFF and GeoPackage (nice)
-
We run the test 4 times, to validate a few different configurations
and validate each one
-
What do we submit? Only one…
-
PR: Document the CITE Certification process
<https://github.com/geoserver/geoserver/pull/8372>
-
Gabe has reviewed, and has some feedback (move environmental
variables to top of files)
Data directory loader GSIP-231 Catalog data directory
Gabe: What is needed for this to be voted on and accepted?
-
Needs testing: Found an issue yesterday with factor lookup deadlock (CRS
Factory, DataStore Finder). That would be a separate issue to report and
explore …
-
Did a workaround static init to do a CRS.decode( … )
Aside:
-
The current loader uses a system property defining the parallel loader
and the name has periods in the name (not env var friendly for cloud setups)
-
Gabe wishes to include this as an integration fix current PR
Discussion:
-
Upgrading section needs to document the new 2.27.0, link to docs on
environmental variable
Proposal:
-
https://github.com/geoserver/geoserver/wiki/GSIP-231
-
Example is nice, want more feedback and testing
-
Jody will ask developers / community to test night builds for
community data dir loader.
-
Test with extensions (as they may trigger a lookup that results in
a deadlock etc…)
-
expectation: PSC members please try this out and vote
Security CVE round-up
Out of time this meeting:
-
jody: Meeting invite to geoserver-secruity list for a meeting next week
at this same time
-
aside: volunteers for geoserver-security should email directly please :)
_______________________________________________
GeoTools-Devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geotools-devel