proposed agenda : * action item reviews * infrastrusture ** status ** sonar installation * projects ** proposals ** accepted * squat ** ** update Hi all let's review the previous action items from last time http://www.ow2.org/xwiki/bin/download/Technology_Council/2011/OW2-TC-Minutes20110823.pdf well, Christophe, the first action was for you :-) CHA: Apache has more than 250 repositories on its page Action CHA: Contact Github and see what is possible to do with them. ok so easy ;) how OW2 could be notified of theses new repositories automatically and start mirroring ? Action CHA: Look at this issue and see if an automated solution could be possible (possibly using RSS feeds) I asked github guys and they said that we can mirror everything on github no problem with the size for mirroring, we have to ask them (we did it for petalslink repositories) that would be cool OK because we're running into terrible issue with the SVN over SSH right now @ chameleon should we ask them as a single OW2 entity you think ? and we started thinking about moving to another hosting system I see well this OW2 is tricky because for example, chameleon will contains around 30 repositories if we migrate Number if not a problem for public repos and there is no hierarchy of 'corporation' on GH why 30 ? all our submodules will have it's one repo, because of the release process On github you can create groups on organizations (it's one of the major difference between Git and SVN: SVN tags is just a copy, Git tags is a tag of the complete repository) so you can manage chameleon guys on chameleon repos but groups are for users no ? for developers yep sorry developers but it does not show the repositories of one group (like all the chameleon repositories) so if you choose to put you repos under the OW2 organisation, we can create a chameleon dev group true naming conventions? maybe OK, so to summarize: or maybe we have to create organization per project... 1. number of repos is not an issue 2. will have to ask Github for mirroring 3. issue with repo explosion (number of repos) for each project 3 -> we need to think about possible solutions for organization we should see how other OW2 project using GH did it (xwiki and exo are on GH right ?) let me check https://github.com/xwiki note that some projects are also on gitorious.ow2.org http://gitorious.ow2.org/projects yes Alexandre, chameleon is using it but once GH is validated, this gitorious project will be moved to GH NO NO NO NO well, gitorious.ow2.org could be a mirror of github the issue is that OW2 requires source code of OW2 projects to be made available on the OW2 infra yes it can be OK well.. then it still let the SVN over SSH issue open the GH mirror are one way yes... and for us it's really blocking right now creating broken releases is a really bad thing SVN / SSH -> let's get back to it when Jeremy Casery joins the meeting ok well, I will say that git allows you to switch, so you can work on github and come back later to ow2 gitorious if needed who should contact Github to ask them or global mirroring ? (I can do it if you like -> just need the contact point) I can do that thanks Christophe ! We have to create a list of repos to mirror OK so 1. action AL ask TC+project lead to identify and 2. action CH contact Github for all, we're reviewing the action items from last TC and have discussed the github mirroring and # of repos issue The next action item was about the Specification project Guillaume is working on it I think any news from anybody about this project ? there has been little feedback from Guillaume's message exposing the ideas the idea is nice, I've to checked what is done @ Apache and ? I know that Geronimo and Service Mix have a lot of sub-projects like that but sometimes the packaging is not really suitable (I've redone a lot of the JavaEE spec bundles) ah at the moment JOnAS and EasyBeans seem interested to factor out those packages Christophe, do you think the idea could be interesting for JBI for example ? (in fact, for anyone who uses standard APIs) yes it could be OK So let's try to revive the discussion at http://mail.ow2.org/wws/arc/technology-council/2011-09/msg00067.html Last action item was about OMM (SQuAT) -> we'll discuss SQuAT later Let's go to the point in the agenda about new projects We have the "sequencer" submission -> he has just replied to our question. And a second proposal from last night. I will re-launched the discussion for sequencer -> apart from Guillaume asking the question, nobody has said anything :-( So, let us start with the Infrastructure discussion need time to read proposals :$ that's OK Christophe, this is why we send reminders ;-) Guillaume told me to say : The nexus migration has been stareted, I'm quite puzzled by the very limited number of projects that have shown off for migration. When we will cut the old repository, we have to expect some complaints what do you think ? just resend emails to project leaders, publish news on the forge, ow2.org about that and up to the projects to migrate on time... yes make more noise !! then you announce a date for the cut we can send the same mails N times before offical cut and after that... at the date you make the cut yes just in time for infrastructure questions ;-) who wants to start about SVN / HTTP - SSH ? I can explain the issue what is the question ? ok we encountered several issues with SVN / SSH first, people are scarred by such configuration creating a key, uploading a key, waiting, getting access and so on moreover as I remember the svn repository is configured to support svnsync is not then, a lot of services are not useable because of that (most of them like masterbranch supports only plain HTTP) even with http and finally (and for me the most tricky), the SVN over SSH seesm to create broken release using maven (seems) (with maven 3.0.3) well, it's not really broken, but the release is not necessary nice all of this is quite annoying. Even chameleon committers are starting working on GH before migrating their code to the SVN at the last minute clement and chameleon are alone with this problem ? (I hope not I would feel lonely ...) others ? I think you are not alone Clément ;-) we only used svn repo as a second repository Jérémy, can you explain what the status is ? and becaus svnsync is broken also Florent, can you explain a little bit more ? we use manual script to perform the sync what's your primary repo ? svnsync requires some configuration to be done on the repository "revision propchanges" should be enable and that's not the case in the ow2 svn server but enable this feature has some shortcoming because when it's enable some could change the source code without creating a new version some my conclusion is : svn is not really suitable for sync operations currently, svn over http is possible, I just can find a way to manage permissions(trying to link it with ldap) @cescoffier : my primary repo si google code but we planned to switch to ow2 github umbrella when we'll all migrate At Apache we use: HTTP for read only (no permissions), HTTPS for committers so if you move to gitorious, then there is no problem, right ? ow2 gitorious by http is currently fully working yes, that's something we start to consider moving everything to gitorious. I'm just a bit scared, because we had bad experience (internally) with gitorious back to SVN -> I understand from Florent that SVN, with or without sync, would not be OK and second small issue with gitourious, the accounts are not bound to the Forge Jeremy, could we setup LDAP sharing between the Forge and gitorious ? we are discussing SVN, SSH, Git ok the infrastructure, there is the wiki migration what do you want to know alexandre ? wiki migration seems to have worked somewhat badly yep… in fact, Jeremy proposes a different procedure I've asked Jeremy last week about the status waiting for reply 1. the project create its new skin on the new wiki 2. Jeremy migrates the data (content) In step 2, this overrides the skin. The new skin created by the migration is then removed. Otherwise, if we start by importing the content, it breaks a lot of things. (for gitorious and ldap, it wasn't possible, some contributors try to developpe an ldap module, they were discussing with gitorious to merge and complete ldap plugin) OK thanks Jeremy for the Gitorious LDAP update. Are you OK with what I just said about the wiki migration for projects ? WebSSO is also an alternative :) Does that mean that we have to start again with the pilot projects ? haha webSSO ;-) OK, also on the infrastructure side, we have installed (Jeremy has installed) Sonar on the OW2 infra I'll talk about it when discussing SQuAT any other questions you want to discuss about the infrastructure ? in particular Sébastien André, Florent Garin, how are things going with you guys ? I've asked for https:// on Jira I am trying to setup jira over https, would be available before end of week (just have to find the good configuration) http://jira.ow2.org/browse/SERVICEDESK-25 I think it's important to hide passwords great, many thanks for the update Jeremy thing going good even for the mailing list management tool I'm waiting for the result of my presentation proposal for the next OW2Con your proposal is accepted Florent, from what I know cool results will be published when? about OW2Con? I'm asking Catherine in // Catherine will send information early next week, but normally nearly all proposed submissions are accepted (a bit tight to fit them all in the programme, but should be OK)à Jeremy, about the hiding passwords issue, both for SVN and Sympa, any idea ? Otherwise, other infrastructure issues (before SQuAT update) ? I will look for https over sympa, and try again to configure http/https for SVN ah yes, one thing, I think we miss mentors for the last 3 projects (Kalimucho, snmp4Cloud and OW2 Utility) OW2 Utility does not need a mentor thanks jeremy anybody here who wishes to be a mentor for Kalimucho or snmp4cloud ? if not, I'll ask the TC thanks JC !! any volunteer for mentoring ? (are you all dead ?) already mentoring one I know OK, let's ask the TC by mail Is that all for infrastructure ? I will ask the chameleon team about moving completely to Gitorious. OK but the non LDAP account is annoying we know, but currently there is no customization possible (maybe Jeremy you could check if this has evolved, and I could ask Jean-Paul Smets in parallel, who is a gitorious fan) There was a discussion last time about intellectual property, and a page http://www.ow2.org/view/Technology_Council/Intellectual_Property Cedric Thomas told me to remind everybody that the Management Office can help, that the Board takes final decisions regarding IP, and that ideas/requests/demands from the TC are welcome. OW2 MO could also, if needed, get to professional lawyers for advice I'll check with Cedric whether we can move some of the questions on http://www.ow2.org/view/Technology_Council/Intellectual_Property to the FAQ http://www.ow2.org/view/About/FAQ (by the way, if there are things you'd like to see on the FAQ, please tell the Management Office !!) OK (I think everyone has now gone to sleep) how to do contact the Management Office? mailing list? OK (I think everyone has now gone to sleep) http://www.ow2.org/view/About/Management_Office thx or me directly if you like SQuAT update 1. Fossology the servers have been attacked at Oregon State University and are being rebuilt all mature projects, plus Weblab and Talend (and some others I think) have ran Fossology Next steps will be to find out how to automate running it for future releases Alex, is it automatic now? no ahah I'm doing it by hand yes I know this is why I am asking could be something that we work out with OSUOSL (scripts) ok will be better for you :) and then for ow2 yes you are right. We're meeting with Fossology China next week, Fossology Grenoble will probably come to OW2, and that's definitely something to discuss with them. Thanks for reminding me ;-) nice Other items for improvement is to have predefined filters, probably by project, to exclude some file types when browsing the results (text files, manifests, configs...) 2. Antelink Reporter This is the tool by Antelink that analyses all imported libraries As we were IRCing, I've received the results from them (on the same projects that have ran Fossology). Will share the results asap. What it does : they have a HUGE database (they claim larger than Blackduck) of files. They analyse each binary file and see whether it matches well-known existing ones. If yes, green flag, if not, red flag :-) Basically, it is an assurance that the library is genuinely apache-xyz version abc. this will be fun to see results I think yes, should be fun to look at SQuAT 3. OMM This is Qualipso Open Maturity Model we have done a test in July with Guillaume on EasyBeans, that Guillaume talked about at the last TC well.. I don't really see the point for Apache libs as they are necessary signed by an Apache committer (so the risk is quite low, if you checked it's signed) yes, I agree Clément, but the whole point is to have a tool that checks it for you and/or the user, to make sure it is OK. BTW, it seems that sonatype insight is doing more than that as it's telling you if there are security updates you mean they are telling you that newer versions of the library you are using exist, and they contain security update ? nice ! will tell Antelink about this Back to OMM, so, in parallel, we need to : it's because they have the hook on Nexus, which check what's you're resolving 1. ask all mature OW2 projets to self-evaluate using the template provided by Qualipso, and with possible help from Management Office but it's a really nice feature ! Especially when you have chef/puppt using it too 2. refine the formula to calculate the ranking for OMM @cescoffier: OK, will get back to Antelink about it OMM is a project quality assessment tool, which provides overall indications about the maturity of a project regarding different issues (documentation, management of the code, management of the team, etc etc) it seems that there is some flexibility, but we still need to understand better however, the self-evaluation is interesting for the project since it forces them to ask themselves questions (all this may seem trivial for industrial development practices, but some of them are new for people not used to an industrial development process) SQuAT 4. Sonar Thanks to Jeremy, we now have http://sonar.ow2.org is it ldap connected? and also the profile git://gitorious.org/ow2-sonar-profile/ow2-sonar-profile.git developed by Patrice Truong yes, LDAP connected to the Forge plugins : Jira link, code support (xml, web, groovy, flex, javascript, php) response to myself, yes it seems ;) so, the next step is finding pilot projects to run the Sonar profile developed by Patrice (I know, another call for volunteers ;-) don't know if contrail would be a good candidate we have many different languages and are still at an early stage You can propose it Florent, you are running Sonar already within Bull, right? no matter if the project is in early stage the sooner, the better... Yes Sébastien, you can try to be a "naive" tester alefebvr: yes we are ok OK, so we have two volunteers alefebvr: we could be a pilot project for Sonar Florent, is that for EasyBeans ? or for JOnAS, or both ? alefebvr: EasyBeans or JOnAS, depending if we need a small or big project or both How large is the Contrail code base, Sébastien ? (would be nice to have 1 large and 1 smaller project) Any way thanks guys, and I note that we have two volunteer projects, Contrail and JOnAS/EasyBeans Otherwise, for SQuAT, we are also starting deploying Trustie Software Resource Repository on the OW2 infrastructure, which will provide some reputation management facilities. That will come later. There was 1 item that Guillaume wanted to talk about, is the OW2 URL renaming that Olivier Lizounat has put in place. we're running sonar but in our server We had web pages names, e.g. TechnologyCouncil We have renamed all pages with an underscore to separate words, for better robot indexing so, Technology_Council all old pages re-direct to the new page, so it is transparent for any bookmark you may have Florent, maybe you'd like to check out whether the OW2 Sonar installation is OK then ? We can be a pilot project for Jonas if you need one and maybe apply the Sonar profile ? ok for sonar great, thanks ! (yes, I got it ;-) Any other item anybody ? ok for me Did I forget anything ? BTW, thanks for validating the contest results. ok next irc ? Next physical meeting during OW2 Conference 24 November, Issy les Moulineaux, Paris afternoon http://www.ow2.org/view/OW2Con-2011/Program do we want to have one in-between by IRC, say, early November ? yes wil be nice OK, so let us plan one 7-8-9 Nov ? I'll run a doodle thanks thanks everybody thanks ++ thanks everybody !! thanks, bye