[Starlingx-discuss] Notes: Weekly StarlingX non-OpenStack distro meeting, 7/17

Fri Jul 19 14:31:29 UTC 2019

Regarding kernel minor version upgrade which we discussed in the meeting, we've reached consensus with Ken Young and other security team members:

For the below two options we had:
	Option#1: upgrade the kernel 21.3 in the master only;
	Option#2: only cherry pick the security patch to address CVE-11477.

Conclusion is that we will stick with Option#1: put the kernel upgrade into master after RC1 branched out; then we continue to do testing on master; if everything goes well, we can cherry pick the patches to release branch. 

Thanks Zhao Shuai for the good work and please continue the upgrade in master with Workflow -1 for now till RC1.

Thx. - cindy

-----Original Message-----
From: Xie, Cindy [mailto:cindy.xie at intel.com] 
Sent: Wednesday, July 17, 2019 9:51 PM
To: 'starlingx-discuss at lists.starlingx.io' <starlingx-discuss at lists.starlingx.io>; 'Rowsell, Brent' <Brent.Rowsell at windriver.com>; Wold, Saul <saul.wold at intel.com>
Subject: [Starlingx-discuss] Notes: Weekly StarlingX non-OpenStack distro meeting, 7/17

Agenda & Notes for 7/17 meeting:
    - continue Python2to3 plan review (Austin)
	py_file        rpm_name            python3 status and action        who is using
	2               openvswitch           4-Risk        only include minor changes, can ignore
	1               python-cephfs        5-low risk                                 ceph, only include minor changes, can ignore
	178           python-smartpm     4-Risk                                      this standalone package. may not be used
	1               qemu-kvm-ev         2-upgrade                                "qemu-kvm-ev── mtce-compute── mtce-control", only include minor changes, can ignore
	30             requests-toolbelt    2-upgrade                                cgcs-patch-controller
	2               rpm-python            4-Risk                                      "rpm-python── createrepo── cgcs-patch-controller── python-smartpm── yum── createrepo── cgcs-patch-controller─ yum-plugin-fastestmirror"

	3 stories created:
	- https://storyboard.openstack.org/#!/story/2006227: for python-smartpm, propose to use yum and now assigned to Don (may effect the update capability).
	- https://storyboard.openstack.org/#!/story/2006228: for rpm_python, propose to use version_utils and now assigned to Don.
	- https://storyboard.openstack.org/#!/story/2006158 created to track the remaining items. Austin is looking into requests-toolbelt. 

	Python3 version is not supported in CentOS 7.6. 
	Option#1: if we want to include Python3 runtime cut-over in stx.3, then we have to upgrade CentOS 8.0;
	Option#2: stay with CentOS 7.6, then we will NOT have Python3 runtime cut over in stx.3.0. => agreed on Option#2. 

    - kernel minor version upgrade to kernel-3.10.0-957.21.3 (Haitao/Shuai)
	LP#1836685 to address CVE-2019-11477, pending security team approval. 
	3 patches submitted and please review. upversion from 12.2 to 21.3. 
	Concern regarding to the timing and techncial risk associated with kernel upgrade. Saul: 8 patches in rpm but maybe there is more changes.
	AR: Cindy to send email to mailing list and consult Ken about the CVE. 
	AR: Saul to follow up and review the changes in 957.21.3 vs 957.12.2, release notes and the actual delta btw the two versions.
	Option#1: upgrade the kernel 21.3 in the master only;
	Option#2: only cherry pick the security patch to address CVE-11477. 
	AR: Shuai to provide test report for both option next week. we will make decision in mailing list based on the data from Saul and Shuai.

    - Ceph containerization plan review (Tingjie)
	Spec under review: https://review.opendev.org/#/c/656371/, design doc: https://docs.google.com/document/d/1lnAZSu4vAD4EB62Mk18mCgM7aAItl26
	Start the implementation based on Spec. 
	AR: Tingjie to attend tomorrow's TSC meeting for spec review.

    - stx 2.0 bug triage/review (Cindy)
	- stx.storage: https://bugs.launchpad.net/starlingx/+bugs?field.tag=stx.storage
	1830191: the fix got reverted and Ovidiu is working on a new fix;
	1833738: Bob working on fix and should get this in for stx.2.0
	1827119: ready for review again
	1831635: Liang needs test cases from WR to reproduce the failure and can login to the system for live debug.

	- stx.distro.others: https://bugs.launchpad.net/starlingx/+bugs?field.tag=stx.distro.other
	1814345 : re-opened yesterday, Zhipeng already has a new patch uploaded and under review.

    - opens (all)
	    Bill: bug gating criteria? defer the discussion in the community call.

-----Original Message-----
From: Xie, Cindy 
Sent: Tuesday, July 16, 2019 8:45 PM
To: 'starlingx-discuss at lists.starlingx.io' <starlingx-discuss at lists.starlingx.io>; 'Rowsell, Brent' <Brent.Rowsell at windriver.com>; Wold, Saul <saul.wold at intel.com>
Subject: Agenda: Weekly StarlingX non-OpenStack distro meeting, 7/17

All,
Below are the agenda I proposed, please feel free to add more:

Agenda for 7/17 meeting:
    - continue Python2to3 plan review (Austin)
    - kernel minor version upgrade to kernel-3.10.0-957.21.3 (Haitao/Shuai)
    - Ceph containerization plan review (Tingjie)
    - stx 2.0 bug triage/review (Cindy)
    - opens (all)

-----Original Appointment-----
From: Xie, Cindy 
Sent: Thursday, April 25, 2019 5:42 PM
To: Xie, Cindy; 'zhaos'; 'starlingx-discuss at lists.starlingx.io'; 'Rowsell, Brent'; Wold, Saul
Cc: Hu, Wei W; Jones, Bruce E; 'Eslimi, Dariush'; Cobbley, David A; 'Zhi Zhi2 Chang'; Armstrong, Robert H; 'Waines, Greg'; 'Badea, Daniel'; 'Carlos Cebrian'; 'Seiler, Glenn'; Chen, Tingjie; 'Chen, Jacky'; Komiyama, Takeo; Gomez, Juan P; Peng Tan
Subject: Weekly StarlingX non-OpenStack distro meeting
When: Wednesday, July 17, 2019 9:00 PM-10:00 PM (UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi.
Where: https://zoom.us/j/342730236

 Cadence and time slot:
o Wednesday 9AM Winter EDT (10PM China time, US PDT Winter time 6AM)

 Call Details:
o Zoom link: https://zoom.us/j/342730236
o Dialing in from phone:
o Dial(for higher quality, dial a number based on your current location): US: +1 669 900 6833 or +1 646 876 9923
o Meeting ID: 342 730 236
o International numbers available: https://zoom.us/u/ed95sU7aQ

 Meeting Agenda and Minutes:
o https://etherpad.openstack.org/p/stx-distro-other

_______________________________________________
Starlingx-discuss mailing list
Starlingx-discuss at lists.starlingx.io
http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss