[Starlingx-discuss] Bi-Weekly StarlingX OS Distro & Multi-OS meeting Minutes: March 2, 2022

[Wang, Linda]

03/02/2022
Attendees: Charles Short, Mark Asselstine, Linda Wang, Frank Miller, Davlet Panech, Scott Little, Ghada, Steve G.

1. STX Debian Integration
    Outstanding patch review: https://review.opendev.org/q/topic:%22debian-build%22+(status:open%20OR%20status:merged

  *   Please review 6 patches in the above link, patch review stalled.

2. Build Systems

  *   Addition to ISO, we have a few docker builds. These docker builds can be added as pods.

  *   Jim has some observations:

  *   download from repo is using md5sum but now is switching to sha256

  *   Technical Debt clean up in the Kernel:

  *   current kernel maintenance is using patching mechamism in CentOS method, maintain a yocto project branch to maintain kernel patch in the branch, rather than adding patch to packaging

  *   Impacting day to day kernel work: Jim, Vefa, Jiping

  *   Will write a story and add it to story board in StartlingX

3. SecureBoot and pkgs/iso Signing

  *   Working on checksum for signing

  *   OSTree has the functionality of retirving key and checksum key

  *   LAT should trust the package from Aptly. Functionality will be there for k8n build, to checksum of the respo.

  *   Shim/grub kernel module signing

  *   currently working on PXE boot, and lagecy BIOs signing

  *   So once the grub/shim has the signing mechanism,  then booting should work

  *   Working with Greg on the possible changes used in Debian. due not using signing server in VM, but using Vault in the cloud environment.

4. Kernel

  *   work is pretty smooth, jinping, Vefa, and Jim are working on kernel modules

  *   currently submitted patch last week for changing partiition size and setting defaults to allow smaller partitions, not allow / to grow too much

  *   the kernel patch has been updated to stable tree from 5.10.74, to 5.10.99 (most recent)

  *   still doing some clean up, will send the patches out for review.

5. Test

  *   OS test automation is in place

  *   Testing of the kernel has been put in place, and .99 kernel updates has passed the sanity testing.

  *   Also collected cyclictest bechmark data as well for baseline comparison

  *   Testing of the build and stx tools are under way

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20220316/e5aa0802/attachment-0001.htm>