This meeting:
➤ Is for core developers, initiative contributors, the Drupal Association and anyone interested in the initiative.
➤ Usually happens every other Tuesday at 1700 UTC.
➤ Is done over chat.
➤ Happens in threads, which you can follow to be notified of new replies even if you don’t comment in the thread. You may also join the meeting later and participate asynchronously!
➤ Has a public agenda anyone can add to: #3185861: Automatic Updates Initiative meeting on December 1st, 2020
➤ *Transcript will be exported and posted* to the agenda issue. For anonymous comments, start with a :bust_in_silhouette: emoji. To take a comment or thread off the record, start with a :no_entry_sign: emoji.

:zero: Who is here today? Comment in the thread below to introduce yourself and tell us why you are joining us.

:one: Do you have any topics to propose for the meeting today? Feel free to propose them in this thread, and then I will give them their own unique threads for discussion.

Comments

hestenet created an issue. See original summary.

hestenet’s picture

hestenet
He/Him
Location Portland, OR 🇺🇸
commented
Issue summary: View changes

hestenet credited dts.

hestenet credited eiriksm.

hestenet credited heddn.

hestenet credited tedbow.

hestenet credited xjm.

hestenet’s picture

hestenet
He/Him
Location Portland, OR 🇺🇸
commented
Status: Active » Fixed

0️⃣ Who is here today? Comment in the thread below to introduce yourself and tell us why you are joining us.

hestenet (he/him) Tim from the DA, organizing the meeting threads today :slightly_smiling_face:Can't believe it's almost DrupalCon! :scream:
xjm :wave:  xjm, core release manager
tedbow Ted, core contributor working on auto-updates
dts Hi! David here. Generally architecture and TUF stuff.
heddn Reviewing backlog
eiriksm :wave:eirik. Reading through out of interest

1️⃣ Do you have any topics to propose for the meeting today? Feel free to propose them in this thread, and then I will give them their own unique threads for discussion.

tedbow Reviews needed for php-tuf
dts @tedbow Do you have links handy, or should I browse?
tedbow @dts yep will start another thread
dts I could provide some updates from upstream TUF if there's interest.
tedbow @dts yep interested

2️⃣ What are everyone's plans for DrupalCon next week, as it relates to this initiative?

tedbow session https://events.drupal.org/europe2020/sessions/core-automatic-updates-ini... I need to fill out the form for sprint on friday .
dts I'm open. Happy to show up and participate with anything.
tedbow also doing 6 minutes for this https://events.drupal.org/europe2020/sessions/drupal-initiative-leads-ke... and questions
hestenet (he/him) ^^ That's broken into 20 slides like the other initiative updates yes?
tedbow yep
tedbow similar to amsterdam then open questions after for all initiatives
hestenet (he/him) What are our thoughts about what we would put in 20 slides?Certainly:the first round of work in contribcollab with other communitiesphp-tuf and TUF in generalWhat comes after the signing is sorted out (i.e: actual drupal updates)
tedbow yeah current plan for the composer plugin do the updating in scratch directory.so explaining that there  are possibly 2 composer plugins to be created.So more opportunities for those who are interested in contributing but maybe less interested in drupal core
tedbow also mention the upcoming UX reviews. I think we are aiming for the week after drupalcon
tedbow have to check with @dyannenova

3️⃣ Reviews for php-tuf are needed - look in the thread for details

hestenet (he/him) @tedbow proposed this ^^
dts Cool. Can we get links dropped here?
tedbow Read for reviewhttps://github.com/php-tuf/php-tuf/pull/88then will reroll this on top of it
tedbow https://github.com/php-tuf/php-tuf/pull/89
tedbow finally after those 2 this 1 should much simpler https://github.com/php-tuf/php-tuf/pull/80

4️⃣ Upstream TUF updates

dts The Go implementation of TUF has taken such a similar approach to conformance on their own that we've overlapped on some issues of fixture generation.In general, TUF is sympathetic to our needs here, and they've already patched (now released) improvements to further make the test fixtures deterministic.
dts As mentioned, TUF has released an update, and I'll probably set up a PR shortly to switch our fixture generation to using it: https://github.com/theupdateframework/tuf/releases/tag/v0.16.0
dts Finally, upstream has strong interest in replacing canonical JSON as part of signature verification.
tedbow great about the fixtures. nice work!
dts We should consider asking if TUF would take PHP-TUF under its umbrella. I haven't floated it to them, but they already have the Go implementation.
dts TUF is also rapidly approaching 1.0.0, which they seem to want to treat as an LTS-ish variant.
tedbow under umbrella meaning under their org on github?
dts Yes. I think we still have some maturity to reach that point, though.
tedbow :+1:

Participants:

hestenet, xjm, tedbow, dts, heddn, eiriksm

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

ergonlogic’s picture

ergonlogic
he/him
Primary language English
Location Montréal, Québec 🇨🇦
commented
Component: Code » Meetings