Re: [EXTERNAL] Which conferences are folks attending these days?

[Stephen Walli via rb-general]

SCaLE https://www.socallinuxexpo.org/scale/21x
--
+1 425 785 6102 (he/him)
“Thursday Morning 
Coffee”
 on Standards & Open Source
N.B. My working day may not be your working day! Please don’t feel obliged to 
read or reply to this e-mail outside of your normal working hours.


From: rb-general  on behalf 
of Chris Lamb 
Date: Thursday, April 18, 2024 at 6:45 AM
To: rb-general 
Subject: [EXTERNAL] Which conferences are folks attending these days?
Hey -general,

I was talking to a bunch of RB folks yesterday, and  we  came  to  the
loosely shared view that, after peak  Covid  and  other  industry-wide
changes, conferences are no  longer  the  "must  attend"  events  they
previously were… especially  in  the  area  of  software  supply-chain
security.  In rough, practical  terms,  it  seems  harder  to  justify
conference travel today than it did in mid-2019.

To that end, what conferences are folks on this list still  going  to,
and, hopefully, still getting something from?  I mean, there  must  be
some exceptions other than FOSDEM… :)


Best wishes,

--
  o
⬋   ⬊  Chris Lamb
   o o reproducible-builds.org 
⬊   ⬋
  o

Re: Bootstrapping and autotools

[Andrius Štikonas via rb-general]

2024 m. balandžio 18 d., ketvirtadienis 23:18:53 BST Andrius Štikonas via rb-
general rašė:
> 2024 m. balandžio 18 d., ketvirtadienis 23:11:41 BST kpcyrd rašė:
> > hello,
> > 
> > does somebody know what the bootstrapping status of autotools is?
> 
> It can be done. See https://github.com/fosslinux/live-bootstrap/blob/master/
> parts.rst
> 
> > Also, is something considered "bootstrapped from source" if the build is
> > making use of a pre-generated `./configure` script that is 25k lines long?
> 
> Yes, I agree and that's what live-bootstrap does.

Sorry, this ended up confusing. I wanted to say that live-bootstrap reuilds 
all pre-generated files (at least as far as we are aware): autotools scripts, 
bison/flex files, pregenerated header files, etc...

> 
> > In my opinion something is only "bootstrapped from source" if autoreconf
> > is used as part of the build instead of executing some pre-compiled
> > `./configure` script. This however means that, to compile bash, one
> > needs to compile autotools first.
> 
> No, that doesn't mean that you need to compile autotools first. There are
> other options, e.g. you can hand-write makefile.
> 
> Also note that we recently learned that autoreconf -f is not guaranteed to
> rebuild all pre-generated files.
> 
> Andrius
> 
> > curious,
> > kpcyrd

Re: Bootstrapping and autotools

[Andrius Štikonas via rb-general]

2024 m. balandžio 18 d., ketvirtadienis 23:11:41 BST kpcyrd rašė:
> hello,
> 
> does somebody know what the bootstrapping status of autotools is?

It can be done. See https://github.com/fosslinux/live-bootstrap/blob/master/
parts.rst

> 
> Also, is something considered "bootstrapped from source" if the build is
> making use of a pre-generated `./configure` script that is 25k lines long?
> 

Yes, I agree and that's what live-bootstrap does.

> In my opinion something is only "bootstrapped from source" if autoreconf
> is used as part of the build instead of executing some pre-compiled
> `./configure` script. This however means that, to compile bash, one
> needs to compile autotools first.

No, that doesn't mean that you need to compile autotools first. There are other 
options, e.g. you can hand-write makefile.

Also note that we recently learned that autoreconf -f is not guaranteed to 
rebuild all pre-generated files.

Andrius

> 
> curious,
> kpcyrd

Bootstrapping and autotools

[kpcyrd]

hello,

does somebody know what the bootstrapping status of autotools is?

Also, is something considered "bootstrapped from source" if the build is 
making use of a pre-generated `./configure` script that is 25k lines long?


In my opinion something is only "bootstrapped from source" if autoreconf 
is used as part of the build instead of executing some pre-compiled 
`./configure` script. This however means that, to compile bash, one 
needs to compile autotools first.


curious,
kpcyrd

NGI Zero funding projects

[Vagrant Cascadian]

Hey folks!

Do you have a reproducible builds or related project you wanted to work
on, but need some funding (~5k-50k euro) to make it happen?

Noticed that NGI Zero is open for accepting project applications till
June 1st:

  https://nlnet.nl/core/

They have funded some interesting projects in the past, such as various
bootstrappable builds work (e.g. GNU Mes):

  https://nlnet.nl/project/index.html

There may be future rounds as well if the deadline is a bit tight,
though I do hear the application process is pretty straightforward.

It is mostly focused on funding EU based developers.


live well,
  vagrant


signature.asc
Description: PGP signature

Re: Which conferences are folks attending these days?

[kpcyrd]

On 4/18/24 3:45 PM, Chris Lamb wrote:

To that end, what conferences are folks on this list still  going  to,
and, hopefully, still getting something from?  I mean, there  must  be
some exceptions other than FOSDEM… :)


For me personally, in no particular order:

- The Chaos Communication Congress (37c3/38c3/... etc)
- FOSDEM (obviously)
- Hackover (this is a very small one)
- Reproducible Builds Summit
- Arch Linux Summit (this one is staff only)
- Fusion (iykyk)
- Sometimes Easterhegg
- Codetalks.com (they tend to give me free tickets every year)

I use these for networking and usually do not attend talks.
About half of them I can enter for free or even have expenses covered.
I have to take PTO for each of them unfortunately. 

Re: Which conferences are folks attending these days?

[Morten Linderud]

My goal this year is to attend:

* All-Systems-Go, Sept. 25-26th, Berlin
https://all-systems-go.io/

* Linux Security Summit, Sept. 16-17th, Vienna Austria.
https://events.linuxfoundation.org/linux-security-summit-europe/

* Linux Plumbers, Sept. 18-20th, Vienna.
https://lpc.events/

Plumbers and Security Summits are connected and same week in Vienna, and with
ASG the week after in Berlin.

So they make for a nice eurotour-conference trip i reckon.

-- 
Morten Linderud
PGP: 9C02FF419FECBE16


signature.asc
Description: PGP signature

Re: Which conferences are folks attending these days?

[Keith Smiley]

I'm a lurker on this list but I'll plug bazelcon since there's a lot of
interest in that community about reproducible builds as well. It definitely
skews a bit more towards bazel specifics though.
--
Keith Smiley


On Thu, Apr 18, 2024 at 10:42 AM Santiago Torres-Arias <
santi...@archlinux.org> wrote:

> Hi,
>
> Nowadays I tend to attend LF-managed confs. I don't think there's 100%
> overlap with e.g., FOSDEM attendees but they tend to fill a niche. In
> theory there's "SupplyChainSecurityCon" there, which I think does pull
> in a bunch of people. I've heard positive stuff about OSS Summit this
> year around.
>
> I myself am aiming to attend plumbers later this year -- I'm hoping I see
> some of you there!
>
> For good or bad, I think there's a mix of the different types of OSS
> folks in r-b. In a sense this leaves meeting r-b folks as an "accident"
> rather than the primary reason for conference travel.
>
> I wonder if co-location with another conf would help people prioritize
> the "right conf." It may just be a matter of signaling r-b presence in a
> conference as first class. For me, it'd help me choose which of the 20
> conferences that happen each year is the one I should aim for.
>
> Cheers!
> -Santiago
>
> On Thu, Apr 18, 2024 at 02:45:42PM +0100, Chris Lamb wrote:
> > Hey -general,
> >
> > I was talking to a bunch of RB folks yesterday, and  we  came  to  the
> > loosely shared view that, after peak  Covid  and  other  industry-wide
> > changes, conferences are no  longer  the  "must  attend"  events  they
> > previously were… especially  in  the  area  of  software  supply-chain
> > security.  In rough, practical  terms,  it  seems  harder  to  justify
> > conference travel today than it did in mid-2019.
> >
> > To that end, what conferences are folks on this list still  going  to,
> > and, hopefully, still getting something from?  I mean, there  must  be
> > some exceptions other than FOSDEM… :)
> >
> >
> > Best wishes,
> >
> > --
> >   o
> > ⬋   ⬊  Chris Lamb
> >o o reproducible-builds.org 
> > ⬊   ⬋
> >   o
> >
> >
> >
> >
> >
>

Re: Which conferences are folks attending these days?

[Santiago Torres-Arias]

Hi,

Nowadays I tend to attend LF-managed confs. I don't think there's 100%
overlap with e.g., FOSDEM attendees but they tend to fill a niche. In
theory there's "SupplyChainSecurityCon" there, which I think does pull
in a bunch of people. I've heard positive stuff about OSS Summit this
year around.

I myself am aiming to attend plumbers later this year -- I'm hoping I see
some of you there!

For good or bad, I think there's a mix of the different types of OSS
folks in r-b. In a sense this leaves meeting r-b folks as an "accident"
rather than the primary reason for conference travel.

I wonder if co-location with another conf would help people prioritize
the "right conf." It may just be a matter of signaling r-b presence in a
conference as first class. For me, it'd help me choose which of the 20
conferences that happen each year is the one I should aim for.

Cheers!
-Santiago

On Thu, Apr 18, 2024 at 02:45:42PM +0100, Chris Lamb wrote:
> Hey -general,
> 
> I was talking to a bunch of RB folks yesterday, and  we  came  to  the
> loosely shared view that, after peak  Covid  and  other  industry-wide
> changes, conferences are no  longer  the  "must  attend"  events  they
> previously were… especially  in  the  area  of  software  supply-chain
> security.  In rough, practical  terms,  it  seems  harder  to  justify
> conference travel today than it did in mid-2019.
> 
> To that end, what conferences are folks on this list still  going  to,
> and, hopefully, still getting something from?  I mean, there  must  be
> some exceptions other than FOSDEM… :)
> 
> 
> Best wishes,
> 
> -- 
>   o
> ⬋   ⬊  Chris Lamb
>o o reproducible-builds.org 
> ⬊   ⬋
>   o
> 
> 
> 
> 
> 


signature.asc
Description: PGP signature

Which conferences are folks attending these days?

[Chris Lamb]

Hey -general,

I was talking to a bunch of RB folks yesterday, and  we  came  to  the
loosely shared view that, after peak  Covid  and  other  industry-wide
changes, conferences are no  longer  the  "must  attend"  events  they
previously were… especially  in  the  area  of  software  supply-chain
security.  In rough, practical  terms,  it  seems  harder  to  justify
conference travel today than it did in mid-2019.

To that end, what conferences are folks on this list still  going  to,
and, hopefully, still getting something from?  I mean, there  must  be
some exceptions other than FOSDEM… :)


Best wishes,

-- 
  o
⬋   ⬊  Chris Lamb
   o o reproducible-builds.org 
⬊   ⬋
  o