03/02/2022 Attendees: Charles Short, Mark Asselstine, Linda Wang, Frank Miller, Davlet Panech, Scott Little, Ghada, Steve G. 1. STX Debian Integration Outstanding patch review: https://review.opendev.org/q/topic:%22debian-build%22+(status:open%20OR%20st... * Please review 6 patches in the above link, patch review stalled. 2. Build Systems * Addition to ISO, we have a few docker builds. These docker builds can be added as pods. * Jim has some observations: * download from repo is using md5sum but now is switching to sha256 * Technical Debt clean up in the Kernel: * current kernel maintenance is using patching mechamism in CentOS method, maintain a yocto project branch to maintain kernel patch in the branch, rather than adding patch to packaging * Impacting day to day kernel work: Jim, Vefa, Jiping * Will write a story and add it to story board in StartlingX 3. SecureBoot and pkgs/iso Signing * Working on checksum for signing * OSTree has the functionality of retirving key and checksum key * LAT should trust the package from Aptly. Functionality will be there for k8n build, to checksum of the respo. * Shim/grub kernel module signing * currently working on PXE boot, and lagecy BIOs signing * So once the grub/shim has the signing mechanism, then booting should work * Working with Greg on the possible changes used in Debian. due not using signing server in VM, but using Vault in the cloud environment. 4. Kernel * work is pretty smooth, jinping, Vefa, and Jim are working on kernel modules * currently submitted patch last week for changing partiition size and setting defaults to allow smaller partitions, not allow / to grow too much * the kernel patch has been updated to stable tree from 5.10.74, to 5.10.99 (most recent) * still doing some clean up, will send the patches out for review. 5. Test * OS test automation is in place * Testing of the kernel has been put in place, and .99 kernel updates has passed the sanity testing. * Also collected cyclictest bechmark data as well for baseline comparison * Testing of the build and stx tools are under way