Attendees: Charles Short, Mark Asselstine, Linda Wang, Frank Miller,
Davlet Panech, Scott Little, Ghada, Steve G.
1. STX Debian Integration
- Please review 6
patches in the above link, patch review stalled.
2. Build Systems
- Addition to ISO,
we have a few docker builds. These docker builds can be added as pods.
- Jim has some observations:
- download from repo
is using md5sum but now is switching to sha256
- Technical Debt
clean up in the Kernel:
- current kernel
maintenance is using patching mechamism in CentOS method, maintain
a yocto project branch to maintain kernel patch in the branch, rather than adding patch to packaging
- Impacting day to
day kernel work: Jim, Vefa, Jiping
- Will write a story
and add it to story board in StartlingX
3. SecureBoot and pkgs/iso Signing
- Working on checksum
for signing
- OSTree has the
functionality of retirving key and checksum key
- LAT should trust
the package from Aptly. Functionality will be there for k8n build, to checksum of the respo.
- Shim/grub kernel
module signing
- currently working
on PXE boot, and lagecy BIOs signing
- So once the grub/shim
has the signing mechanism, then booting should work
- Working with Greg
on the possible changes used in Debian. due not using signing server in VM, but using Vault in the cloud environment.
4. Kernel
- work is pretty
smooth, jinping, Vefa, and Jim are working on kernel modules
- currently submitted
patch last week for changing partiition size and setting defaults to allow smaller partitions, not allow / to grow too much
- the kernel patch
has been updated to stable tree from 5.10.74, to 5.10.99 (most recent)
- still doing some
clean up, will send the patches out for review.
5. Test
- OS test automation
is in place
- Testing of the
kernel has been put in place, and .99 kernel updates has passed the sanity testing.
- Also collected
cyclictest bechmark data as well for baseline comparison
- Testing of the
build and stx tools are under way