# Devuan meet 2022-01-27 @20:30 UTC

Present: hendrik, golinux, rrq, fsr, bb|hcb, onefang in spirit

## Old Business

## Old Actions

## New Business

### LeePen

#### Packaging
* src:policykit-1 CVE-2021-3560 fixed in ceres, daedalus,
  chimaera-security, beowulf-security and ascii-security. Note that the
  beowulf armel build is missing as it fails with SIGILL. Update: This
  seems to be caused by buster's libboost:armel using the deprecated
  `swp` instruction which Dyne's arm64 builder does not support. No
  reponse, so far, from parazyd who set up the builder. See
  https://blog.einval.com/debian/arm#machine-configuration for a
  suggested setup that would fix this. I have managed to build the armel
  packages on amd64 using qemu user mode emulation. It is slow, but
  seems to have worked. The results are at
  http://hindley.org.uk/~mark/devuan/policykit-1.0.105-25%2bdevuan9/. We
  discussed this, briefly, on #devuan-arm and decided to publish them to
  dak. Once the official builder is fixed, it could be rebuilt with a
  version bump.
  * (onefang) what sort of build host is needed?  My 64 core
    Threadripper with 256 GB of RAM could run a QEMU build fast, and I'm
    considering buying a Pi of some sort.
* New dak cronjob which automatically mirrors new packages in *-security
  to *-proposed-updates.
* Other updates: util-linux, reportbug, network-manager.

### golinux
* Still issues with gmail bounces on mail lists.
* Someone else has stepped up to help with the theming!

### bb|hcb
* Deployed the automation that generates DNS round robin zone
  (`deb.devuan.org` and `CC.deb.devuan.org`)
  * all changes are tracked in git
    https://git.devuan.org/devuan/nameserver
  * pkgmaster is excluded if there are working mirrors and is the
    fallback if there aren't
  * it will take some time for the mirror admins to state if they want
    to participate in `CC.deb.devuan.org` and we can make those URLs
    public
* Upgraded `web` and `veritas` to chimaera
* Installed `gitea` 1.15.10 (bugfix and security release)

### onefang
* We got more package mirror admins agree to join the DNS-RR.  17 out of
  19 of the working package mirrors have agreed, ~~four~~ two (two just
  came good) of them are not in it right now, due to issues still being
  worked through.
* Working my way through apt-panopticon to work better for deciding who
  is in and who is out.
* Working with bb|hcb to get that to talk to the DNS system and update
  the DNS-RR.
  * That's currently a half manual process, I edit a file, bb|hcb's
    scripts update the DNS from that file.
* Also been doing work on bringing back CC DNS-RR, it's mostly working
  already.  Don't announce it yet.  Seven mirror admins have agreed so
  far, covering Canada, most of Europe, parts of Asia, and about half of
  South America.

## New Actions
* (rrq) change installer-iso to use deb.devuan.org for daedalus-security
* (bb|hcb) ping gnu-srs re udev update(s)
* (gl) vdc.dyne.org seems to be working now. Let's go back to there
next meet.