Sourceware Open Office Friday and Cauldron Monday

[Mark Wielaard]

We'll have our regular Sourceware Open Office this Friday Sep 13,
16:00 UTC Using #overseers on irc.libera.chat

To get the right time in your local timezone:
$ date -d "Fri Sep 13 16:00 UTC 2024"

Then at the Cauldron https://gcc.gnu.org/wiki/cauldron2024 in Prague
on Monday at 11:00 local time we'll also have an in person session.

  Bof: Sourceware infrastructure tips & tricks

  Speaker(s): Sourceware Project Leadership Committee,
              Elena Zannoni, Mark J. Wielaard, Ian Kelling

  Sourceware has provided the infrastructure for the core toolchain
  and developer tools for more than 25 years. The last couple of years
  it has transformed from a purely volunteer into a professional
  organization with an eight person strong Project Leadership
  Committee, monthly open office hours, multiple hardware services
  partners, expanded services, the Software Freedom Conservancy as
  fiscal sponsor and a more diverse funding model that allows us to
  enter into contracts with paid contractors or staff when
  appropriate.

  The Sourceware services are loosely coupled, but developers become
  most productive when they combine them. So lets exchange tips and
  tricks on how using bugzilla and cgit, b4 and public-inbox, git-pw
  and patchwork, the snapshot builders and manual generation, wikis,
  buildbot and try-bots, ci-bots, full-builds and the bunsen
  testresults database, make you most productive.

  Lets also discuss the recent "Cybersecurity" regulations, how
  Sourceware prepared and what policies projects could adopt to
  improve their secure software development framework.

  https://sourceware.org/mission.html#services
  https://sourceware.org/sourceware-25-roadmap.html
  https://sourceware.org/sourceware-security-vision.html

Overview of suggested discussion topics:

- Sourceware Project Leadership Committee (PLC) Members
  - History and Roadmaps
  - Software Freedom Conservancy (SFC)
  - Communication and contacts
    - overseers, project admins
    - mailinglists, bugzilla,
      technical roadmaps, quaterly updates, open office hours
  - (Hardware) sponsors
    - Funds and how to spend it (see security-vision below)

- Mailing lists Mailman
  - dmarc/dkim, (no) From-rewriting
    (and SRS and SPF and VERP - for maximal email hygiene)
  - Moderators and spam
  - (python2) what should an upgrade look like?

- public-inbox
  - imap, nntp, rss, git clone inbox.sourceware.org 
  - b4 config and usage

- Git
  - cgit everywhere?
  - project configs
  - adacore hooks
  - signed commits (also see cybersecurity)

- Bugzilla
  - Account creation
  - Two is better than one?
  - Upgrading and local patches

- Wiki
  - MoinMoin

- builder.sourceware.org
  - hardware overview
    i386, x86_64, ppc64le, s390x, ppc64, armhf, arm64, riscv
  - kinds of builders
    - pre-commit, try builders
    - ci-builders finding regressions
    - full-builders, storing test results (see bunsen below)
    - autoregen (binutils-gdb, gcc)
  - config grew a lot last year
    help needed simplifying

- bunsen
  - indexes repository of raw testsuite log files (sqlite + git)
  - understands dejagnu, glibc, automake, autoconf styles
  - use toolkit locally or centralized on sourceware
  - live web interface at https://builder.sourceware.org/testruns/

- patchwork.sourceware.org
  - git pw setup
  - patchwork plus CI/CD
    - Let's use those buildbot workers too

- snapshots.sourceware.org
  new isolated machine/vm/container
  takes over cron jobs
  triggered by buildbot
  can also trigger, manuals, code coverage, api docs, etc.
  valgrind, libabigail, gnupoke, glibc, gdb, elfutils, dwarfstd, binutils

- Cybersecurity
  - US Improving the Nation's Cybersecurity
    Executive Order 14028
  - EU Cyber Resilience Act (EU CRA)
  - Secure Software Development Framework (SSDF, NIST SP 800-218)
  - What can Sourceware do?
    - signed-commit census report
    - Sourceware Security Vision
      https://sourceware.org/sourceware-security-vision.html
  - Practical steps for projects and individual contributors

If time permits...

- Experiment: sourcehut
  https://sr.ht/~sourceware/
  A more webby git workflow alternative
  git send-email without the email

- non-Sourceware, but useful, services
  - BBB server (SFC)
  - mattermost (OSUOSL)
  - irc (libera.chat,oftc)
- gerrit server
- Software Heritage and archive.org mirrors