13:01:37 #startmeeting CIP IRC weekly meeting 13:01:37 Meeting started Thu Sep 16 13:01:37 2021 UTC and is due to finish in 60 minutes. The chair is jki. Information about MeetBot at http://wiki.debian.org/MeetBot. 13:01:37 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 13:01:37 The meeting name has been set to 'cip_irc_weekly_meeting' 13:01:47 #topic rollcall 13:01:52 hi all! 13:01:58 hi! 13:02:02 hi 13:02:04 hi 13:02:07 hi 13:02:13 hi 13:03:24 so, pavel is on the road - chris is missing? 13:04:06 but let's start nevertheless 13:04:09 #topic AI review 13:04:39 1. Combine root filesystem with kselftest binary - iwamatsu & alicef 13:04:47 no updates 13:04:49 no update from me. 13:05:14 keep it as AI? 13:05:48 ? 13:06:02 you mean merge this in the IA topic ? 13:06:07 AI 13:06:22 i mean does this remain an AI for us, just one that will take more time? 13:07:20 what is AI ? 13:07:25 Action Item 13:07:50 and something we should revisit on every meeting - at least my understanding of this 13:08:01 yes last week was KernelCI hackfest and I worked at the merge of CIP testing with KernelCI 13:08:28 then we actually have news here, great 13:08:33 that's why there are no updates on the this 13:08:52 ah, ok, this will build on top 13:09:35 ok, next 13:09:40 2. Document new LAVA domains in wiki - patersonc 13:10:01 sorry I got a regression on upstream kernels and I have to keep a eye also there 13:10:21 no problem! 13:10:56 ok, wiki not yet updated 13:11:11 any new AIs we should add here? 13:12:06 3 13:12:09 2 13:12:10 1 13:12:15 #topic Kernel maintenance updates 13:12:56 I reviewed 4.4.284-rc, 5.10.64 and 65. 13:13:07 reviewing for 5.10.65 13:13:09 I have CVE summary. There is 4 new CVEs in this week. 13:13:15 CVE-2021-3744, CVE-2021-3764, CVE-2021-3752, CVE-2021-38300 are new CVEs. 13:14:48 question for my understanding: when you review and do not find anything, is that recorded somewhere as well? 13:16:11 We managed it to lts-commit-list repo. 13:16:28 https://gitlab.com/cip-project/cip-kernel/lts-commit-list 13:16:46 so, upstream lts does not take extra review-by tags, does it? 13:17:35 That is not done for each commit. 13:18:04 ok, but we have at least our records, good 13:19:05 If there is a problem, we will comment on the patch. For example, this requires additional patches. 13:19:50 sure, that I expected - provided you are fast enough for Greg 13:20:43 anything else for this topic block? 13:21:12 3 13:21:14 2 13:21:17 1 13:21:22 #topic Kernel testing 13:21:40 according to Chris (just found his email), no news here 13:21:45 sorry I'm masking gentoo kernels for a posix cpu regression 13:22:01 anyway we had hackfest kernelci last week 13:22:07 ok 13:22:28 I think we had updates on the CIP tsc about it from chris 13:22:42 right 13:22:55 that was what he meant 13:22:56 we recently had merged the cip configurations pull request on kernelci 13:23:47 is working only for 4.19 at the moment and in qemu 13:24:07 not yet filtered it to each board 13:24:39 but still we have something working with the cip configurations 13:24:56 that's good, indeed 13:25:09 the efforts on the iec cybersecurity test and cip core are going on 13:26:07 This is one example https://staging.kernelci.org/build/id/6137240c428e1b1b5136a8f5/ 13:26:22 working with cip://4.19.y-cip/arm64/qemu_arm64_defconfig 13:26:46 that is a configurtion taken from https://gitlab.com/cip-project/cip-kernel/cip-kernel-config 13:27:24 that was built by kernelci, not via isar-cip-core, right? 13:27:39 affermative 13:27:56 we are pushing cip-core to the kernelci fileserver 13:28:02 by the kernelci api 13:28:11 but we are not yet using it 13:28:30 I'm fixing kernelci for make it work with cip-core tarball 13:28:49 you can get it from here https://storage.staging.kernelci.org/images/rootfs/cip/ 13:29:07 https://storage.staging.kernelci.org/images/rootfs/cip/20210910/ 13:29:34 ok 13:30:08 sorry need to go back masking gentoo kernels packages 13:30:14 that's all for me 13:30:27 thanks a lot! 13:30:36 then let's move on 13:30:50 #topic AOB 13:31:37 I have one: will be OOO the next two weeks 13:31:46 ah one thing 13:31:46 can anyone take over? 13:31:51 sorry 13:32:05 go ahead 13:32:20 kernelci is writing the blog about the hackfest #2 https://static.staging.kernelci.org/blog/posts/2021/hackfests/ 13:32:57 if someone is interested on the work done during KernelCI hackfest and it also reference to CIP 13:33:12 that's nice 13:33:37 Chris should drop a note on that on next TSC call as well 13:33:44 sorry for the interruption please go on 13:34:30 ok, I need a deputy to run the next two irc meetings 13:35:55 OK, I can takeover. 13:36:11 that would be great - TIA! 13:36:21 but I do not know how to use meeting tool. 13:36:46 I can drop you the notes kudo-san shared with me 13:37:05 ok, thanks! 13:37:06 it's just a few magic markers to feed the logging bot 13:38:00 anything else for AOB? 13:38:26 everyone with sufficient access by now? 13:38:27 I have one 13:38:36 go ahead 13:38:43 ok. I was asked about CVSS score last week 13:38:50 so, is it helpful if CVSS score is in the CVE report? to know CVE's severity 13:39:55 I suppose we would have two consumer groups here: us as kernel maintainers and then our users 13:40:14 who do you have in mind to benifit from this score? 13:41:27 jki: cip kernel users will have benefit 13:41:52 it easy to understand CVE's impact 13:42:34 ok. how much extra effort this would mean when adding it? 13:44:08 it needs a bit extra work. but easy task. 13:45:02 just initially extra work, or also on each CVE? 13:47:08 I think adding CVSS score to weekly report, so usually initially extra work. 13:47:42 otherwise, it sounds like a good proposal to me at least 13:47:53 other thoughts on this? 13:48:17 thanks! 13:49:23 thanks for your initiative! 13:49:32 anything else for today? 13:50:17 3 13:50:20 2 13:50:23 1 13:50:37 thank you all, and enjoy the rest of today! 13:50:39 #endmeeting