Regarding kernel minor version upgrade which we discussed in the meeting, we've reached consensus with Ken Young and other security team members: For the below two options we had: Option#1: upgrade the kernel 21.3 in the master only; Option#2: only cherry pick the security patch to address CVE-11477. Conclusion is that we will stick with Option#1: put the kernel upgrade into master after RC1 branched out; then we continue to do testing on master; if everything goes well, we can cherry pick the patches to release branch. Thanks Zhao Shuai for the good work and please continue the upgrade in master with Workflow -1 for now till RC1. Thx. - cindy -----Original Message----- From: Xie, Cindy [mailto:cindy.xie@intel.com] Sent: Wednesday, July 17, 2019 9:51 PM To: 'starlingx-discuss@lists.starlingx.io' <starlingx-discuss@lists.starlingx.io>; 'Rowsell, Brent' <Brent.Rowsell@windriver.com>; Wold, Saul <saul.wold@intel.com> Subject: [Starlingx-discuss] Notes: Weekly StarlingX non-OpenStack distro meeting, 7/17 Agenda & Notes for 7/17 meeting: - continue Python2to3 plan review (Austin) py_file rpm_name python3 status and action who is using 2 openvswitch 4-Risk only include minor changes, can ignore 1 python-cephfs 5-low risk ceph, only include minor changes, can ignore 178 python-smartpm 4-Risk this standalone package. may not be used 1 qemu-kvm-ev 2-upgrade "qemu-kvm-ev── mtce-compute── mtce-control", only include minor changes, can ignore 30 requests-toolbelt 2-upgrade cgcs-patch-controller 2 rpm-python 4-Risk "rpm-python── createrepo── cgcs-patch-controller── python-smartpm── yum── createrepo── cgcs-patch-controller─ yum-plugin-fastestmirror" 3 stories created: - https://storyboard.openstack.org/#!/story/2006227: for python-smartpm, propose to use yum and now assigned to Don (may effect the update capability). - https://storyboard.openstack.org/#!/story/2006228: for rpm_python, propose to use version_utils and now assigned to Don. - https://storyboard.openstack.org/#!/story/2006158 created to track the remaining items. Austin is looking into requests-toolbelt. Python3 version is not supported in CentOS 7.6. Option#1: if we want to include Python3 runtime cut-over in stx.3, then we have to upgrade CentOS 8.0; Option#2: stay with CentOS 7.6, then we will NOT have Python3 runtime cut over in stx.3.0. => agreed on Option#2. - kernel minor version upgrade to kernel-3.10.0-957.21.3 (Haitao/Shuai) LP#1836685 to address CVE-2019-11477, pending security team approval. 3 patches submitted and please review. upversion from 12.2 to 21.3. Concern regarding to the timing and techncial risk associated with kernel upgrade. Saul: 8 patches in rpm but maybe there is more changes. AR: Cindy to send email to mailing list and consult Ken about the CVE. AR: Saul to follow up and review the changes in 957.21.3 vs 957.12.2, release notes and the actual delta btw the two versions. Option#1: upgrade the kernel 21.3 in the master only; Option#2: only cherry pick the security patch to address CVE-11477. AR: Shuai to provide test report for both option next week. we will make decision in mailing list based on the data from Saul and Shuai. - Ceph containerization plan review (Tingjie) Spec under review: https://review.opendev.org/#/c/656371/, design doc: https://docs.google.com/document/d/1lnAZSu4vAD4EB62Mk18mCgM7aAItl26 Start the implementation based on Spec. AR: Tingjie to attend tomorrow's TSC meeting for spec review. - stx 2.0 bug triage/review (Cindy) - stx.storage: https://bugs.launchpad.net/starlingx/+bugs?field.tag=stx.storage 1830191: the fix got reverted and Ovidiu is working on a new fix; 1833738: Bob working on fix and should get this in for stx.2.0 1827119: ready for review again 1831635: Liang needs test cases from WR to reproduce the failure and can login to the system for live debug. - stx.distro.others: https://bugs.launchpad.net/starlingx/+bugs?field.tag=stx.distro.other 1814345 : re-opened yesterday, Zhipeng already has a new patch uploaded and under review. - opens (all) Bill: bug gating criteria? defer the discussion in the community call. -----Original Message----- From: Xie, Cindy Sent: Tuesday, July 16, 2019 8:45 PM To: 'starlingx-discuss@lists.starlingx.io' <starlingx-discuss@lists.starlingx.io>; 'Rowsell, Brent' <Brent.Rowsell@windriver.com>; Wold, Saul <saul.wold@intel.com> Subject: Agenda: Weekly StarlingX non-OpenStack distro meeting, 7/17 All, Below are the agenda I proposed, please feel free to add more: Agenda for 7/17 meeting: - continue Python2to3 plan review (Austin) - kernel minor version upgrade to kernel-3.10.0-957.21.3 (Haitao/Shuai) - Ceph containerization plan review (Tingjie) - stx 2.0 bug triage/review (Cindy) - opens (all) -----Original Appointment----- From: Xie, Cindy Sent: Thursday, April 25, 2019 5:42 PM To: Xie, Cindy; 'zhaos'; 'starlingx-discuss@lists.starlingx.io'; 'Rowsell, Brent'; Wold, Saul Cc: Hu, Wei W; Jones, Bruce E; 'Eslimi, Dariush'; Cobbley, David A; 'Zhi Zhi2 Chang'; Armstrong, Robert H; 'Waines, Greg'; 'Badea, Daniel'; 'Carlos Cebrian'; 'Seiler, Glenn'; Chen, Tingjie; 'Chen, Jacky'; Komiyama, Takeo; Gomez, Juan P; Peng Tan Subject: Weekly StarlingX non-OpenStack distro meeting When: Wednesday, July 17, 2019 9:00 PM-10:00 PM (UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi. Where: https://zoom.us/j/342730236 Cadence and time slot: o Wednesday 9AM Winter EDT (10PM China time, US PDT Winter time 6AM) Call Details: o Zoom link: https://zoom.us/j/342730236 o Dialing in from phone: o Dial(for higher quality, dial a number based on your current location): US: +1 669 900 6833 or +1 646 876 9923 o Meeting ID: 342 730 236 o International numbers available: https://zoom.us/u/ed95sU7aQ Meeting Agenda and Minutes: o https://etherpad.openstack.org/p/stx-distro-other _______________________________________________ Starlingx-discuss mailing list Starlingx-discuss@lists.starlingx.io http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss