These are the notes for the March 29, 2015 call, originally recorded at: https://pad.riseup.net/p/l9BIeg7pg72C == March 29th, 2015 == Notes are available at https://pad.riseup.net/p/l9BIeg7pg72C Agenda: * Progress towards next release. Any blockers? * Sunil: Need to review/merge Plinth pull requests. * Need updated packages for freedombox-setup and plinth. * Blocker: If package cache is outdated (apt-get update), then pagekite, owncloud installations fail: any outdated package will fail. * apt-get update before installing packages? * unattended-upgrades? * available, but off by default. * maybe fixed by unattended-upgrades, but still an issue the first time the box is started? * Post new release of fbx-setup as part of release process. * cubietruck support! awesome! * wireless access point support * Markus/Michael: RETURN-TO: First-time setup for Plinth modules * https://github.com/freedombox/Plinth/issues/103 * What system should own the package? Should it be: * freedombox-owncloud, or * plinth-owncloud, or * freedombox-plinth-owncloud? * When user logs in first time, present them with list of modules: Run setup function for each selected module. * Markus/Michael: Built Debian packages node-restore and known: * http://freedombox.elevate.at/development/ * node-restore: the example implementation of remote storage, running a web-app in the browser. * https://github.com/jcoglan/restore * few lintian errors * mostly ready to pull into plinth. * known: decentralized blogging (indieweb) * https://withknown.com/ * lots of lintian errors * hacked plinth can install these :) * Markus/Michael: Built Plinth fork and CubieTruck image that allows PageKite signup with subdomain myname.freedombox.me * http://freedombox.elevate.at/development/ * registers a freedombox.me pagekite subdomain during first boot process. * cool! * Federico3 just became a Debian Developer! * Markus: FreedomBox at GetD summit this week: * http://get-d.net/get-decentralized-san-francisco-bay-area-spring-2015/ * organized by folks from Berlin in SF - http://jolocom.com/ * presenting project * putting on hackathon * need to find hackathon-sized bugs (a few hours each at most?) * Sunil has a hackathon buglist. * Internet Identity Workshop also occurring then as well. - http://www.internetidentityworkshop.com/ * Sunil: Mumble IS in FreedomBox :) * It just works. Took only a few hours to add to Plinth. * Yay! * Mumble clients on same LAN as server connect automagically. * Available and released into Plinth * Sunil: Update on support for Radxa Rock * Debian kernel (which version?) doesn't support RR. * Mainline kernel does. * Immature support now. * 3.18 kernel works fine. * Wireless USB with Free Firmware works fine on a standard FBX image. * Having fun with it! * Nick: Update on plinth/hello * Nick: Update on FreedomBuddy. * Marc: Working on integrating LDAP/Plinth. * Sunil, is it possible to add LDAP? * LDAP stores lots more about the user than the user account does. * It'll be good to handle authorization through LDAP. * LDAP's terrible, except when you compare it to everything else. * Can use LDAP Apache group authorization via PGP keys. If we add LDAP to Plinth, we can easily add service authorization through groups. * There isn't a general solution for apps that don't use LDAP, but as long as they're behind Apache, we can do authentication and authorization through Apache. Those apps'll have access to Apache's REMOTE_USER environment variable, which contains the current logged in user's name. * Unfortunately, LDAP requires (how much?) maintenance. Is this mostly enterprise-level maintenance? * Nick: Updated [[Freedombox/ConfiguringModGnuTLS]]. * Bob Girard: Update on Plinth integration with Travis-CI (if my Mumble is working: it's working great!) * Bob's Plinth Fork is up and running Travis-CI, thanks to Sunil! * Patches are still outstanding, need to be submitted as pulls. * If Travis-CI is generic, the notification setup needs to be generic: you can specify Travis's build success for every build or just failed->success changes. How much attention are people paying to these builds? * Can we post these notifications on IRC? * Notify on Failure * Notify on Failure->success * Notify on every success? * How do we keep master notifications useful while keeping private builds private? * James: Merged dynamicdns module into Plinth, written by steglicd and mostly reviewed by fonfon. * Please test in next release. * This is only the client. How about server? * PageKite * GnuDIP - ancient, abandoned? * Jvalleroy: ezipupdate dyndns client package pulled into plinth :) * also gnudip, but very old (not updated in 12 years). * We need some dyndns server: gnudip requires bind, is bind very big? * Michael: Are we interested in LetsEncrypt? Yes. How do we meet their authentication requirements? How do we reach out to them? Seth at EFF seems to be the LE coordinator. * James: BLOCKED by Pagekite-augeas pull request issues, while Fonfon's out. Sunil will jump in and take a look. TODOs: * Nick: Fix openpgp2x509 to handle custom GNUPGHOME directories. * Sunil/Markus: Hash out Plinth#103 * Sunil/Markus/Michael: work on making http://freedombox.elevate.at/development/ ready to pull into plinth * Markus: submit ITP for node-restore (for Unhosted applications) to Debian. * Sunil: send federico3 details to review for django-stronghold package sponsorship * Nick: find Markus some hackathon-sized bugs * Sunil: Send Markus hackathon list * Marc: mod_auth_env needs to be moved. * Marc: optionally check VERIFY variable so we're examining both the username and local trust-level. * That's a Monkeysphere thing. * Markus: RO Seth of LE. Let us know if no response next month. * Sunil: Jumping in to review the pagekite-augeas patches.