These are the notes for the March 29, 2015 call, originally recorded at: https://pad.riseup.net/p/l9BIeg7pg72C
March 29th, 2015
Notes are available at https://pad.riseup.net/p/l9BIeg7pg72C
Agenda:
- Progress towards next release. Any blockers?
- Sunil: Need to review/merge Plinth pull requests.
- Need updated packages for freedombox-setup and plinth.
- Blocker: If package cache is outdated (apt-get update), then pagekite, owncloud installations fail: any outdated package will fail.
- apt-get update before installing packages?
- unattended-upgrades?
- available, but off by default.
- maybe fixed by unattended-upgrades, but still an issue the first time the box is started?
- Post new release of fbx-setup as part of release process.
- cubietruck support! awesome!
- wireless access point support
- Markus/Michael: RETURN-TO: First-time setup for Plinth modules
- What system should own the package? Should it be:
- freedombox-owncloud, or
- plinth-owncloud, or
- freedombox-plinth-owncloud?
- When user logs in first time, present them with list of modules: Run setup function for each selected module.
- Markus/Michael: Built Debian packages node-restore and known:
- node-restore: the example implementation of remote storage, running a web-app in the browser.
- few lintian errors
- mostly ready to pull into plinth.
- known: decentralized blogging (indieweb)
- lots of lintian errors
hacked plinth can install these
Markus/Michael: Built Plinth fork and ?CubieTruck image that allows ?PageKite signup with subdomain myname.freedombox.me
- registers a freedombox.me pagekite subdomain during first boot process.
- cool!
- Federico3 just became a Debian Developer!
Markus: FreedomBox at GetD summit this week:
http://get-d.net/get-decentralized-san-francisco-bay-area-spring-2015/
organized by folks from Berlin in SF - http://jolocom.com/
- presenting project
- putting on hackathon
- need to find hackathon-sized bugs (a few hours each at most?)
- Sunil has a hackathon buglist.
Internet Identity Workshop also occurring then as well. - http://www.internetidentityworkshop.com/
Sunil: Mumble IS in FreedomBox
- It just works. Took only a few hours to add to Plinth.
- Yay!
- Mumble clients on same LAN as server connect automagically.
- Available and released into Plinth
- Sunil: Update on support for Radxa Rock
- Debian kernel (which version?) doesn't support RR.
- Mainline kernel does.
- Immature support now.
- 3.18 kernel works fine.
- Wireless USB with Free Firmware works fine on a standard FBX image.
- Having fun with it!
- Nick: Update on plinth/hello
Nick: Update on ?FreedomBuddy.
- Marc: Working on integrating LDAP/Plinth.
- Sunil, is it possible to add LDAP?
- LDAP stores lots more about the user than the user account does.
- It'll be good to handle authorization through LDAP.
- LDAP's terrible, except when you compare it to everything else.
- Can use LDAP Apache group authorization via PGP keys. If we add LDAP to Plinth, we can easily add service authorization through groups.
- There isn't a general solution for apps that don't use LDAP, but as long as they're behind Apache, we can do authentication and authorization through Apache. Those apps'll have access to Apache's REMOTE_USER environment variable, which contains the current logged in user's name.
- Unfortunately, LDAP requires (how much?) maintenance. Is this mostly enterprise-level maintenance?
- Sunil, is it possible to add LDAP?
Nick: Updated ?Freedombox/ConfiguringModGnuTLS.
- Bob Girard: Update on Plinth integration with Travis-CI (if my Mumble is working: it's working great!)
- Bob's Plinth Fork is up and running Travis-CI, thanks to Sunil!
- Patches are still outstanding, need to be submitted as pulls.
If Travis-CI is generic, the notification setup needs to be generic: you can specify Travis's build success for every build or just failed->success changes. How much attention are people paying to these builds?
- Can we post these notifications on IRC?
- Notify on Failure
Notify on Failure->success
- Notify on every success?
- How do we keep master notifications useful while keeping private builds private?
- Can we post these notifications on IRC?
- Bob's Plinth Fork is up and running Travis-CI, thanks to Sunil!
- James: Merged dynamicdns module into Plinth, written by steglicd and mostly reviewed by fonfon.
- Please test in next release.
- This is only the client. How about server?
?PageKite
- GnuDIP - ancient, abandoned?
Jvalleroy: ezipupdate dyndns client package pulled into plinth
- also gnudip, but very old (not updated in 12 years).
- We need some dyndns server: gnudip requires bind, is bind very big?
Michael: Are we interested in LetsEncrypt? Yes. How do we meet their authentication requirements? How do we reach out to them? Seth at EFF seems to be the LE coordinator.
- James: BLOCKED by Pagekite-augeas pull request issues, while Fonfon's out. Sunil will jump in and take a look.
TODOs:
- Nick: Fix openpgp2x509 to handle custom GNUPGHOME directories.
- Sunil/Markus: Hash out Plinth#103
Sunil/Markus/Michael: work on making http://freedombox.elevate.at/development/ ready to pull into plinth
- Markus: submit ITP for node-restore (for Unhosted applications) to Debian.
- Sunil: send federico3 details to review for django-stronghold package sponsorship
- Nick: find Markus some hackathon-sized bugs
- Sunil: Send Markus hackathon list
- Marc: mod_auth_env needs to be moved.
- Marc: optionally check VERIFY variable so we're examining both the username and local trust-level.
- That's a Monkeysphere thing.
- Markus: RO Seth of LE. Let us know if no response next month.
- Sunil: Jumping in to review the pagekite-augeas patches.