= Progress call: 17:00 UTC = * Congrats to Flynn who is our GSoC student this year. * Exim or Postfix? * Exim recently had a large number of security issues. * Some are remotely exploitable. * https://www.qualys.com/2021/05/04/21nails/21nails.txt * Fewer security issues in Postfix * Ease of configuration * Exim's configuration is Turing complete. * Keep configuration in context-free subset. * Postfix's configuration is key-value pairs. * Postfix configuration is already written out. * https://salsa.debian.org/freedombox-team/freedombox/-/issues/56 * Both are written in C language. * Exim is under GPL license. * Postfix upstream does not use VCS. * Exim default only in Debian. * Initial reason for choosing Exim: * Both are popular, but Exim is more popular. * Exim has routing and proxying settings, for Tor integration. * Written about in Petter's blog post. * This is a bonus point for GSoC, not required. * Probably can do the same with Postfix. * Postfix chosen as direction for now. * jitsi-videobridge packaging * https://wiki.debian.org/Java/RequestedPackages/Jitsi * jersey1 is available in Debian, need 2. * jackson-module-kotlin should only have kotlin as dependency. * rtp, sctp, object-cloner should not have many dependencies. * smack: Ask Jitsi developers about particular version needed. * Spam filtering daemon for email server. * rspamd is modern, performant and light on resources compared to spamassassin. * Is Debian package of rspamd up to date? * Up-to-date in bullseye; was an issue with buster not having the latest major release 2.x (but is in buster-backports anyway) * https://packages.debian.org/buster-backports/rspamd * Upstream provides x86_64 deb files, ARM builds are not provided * Rspamd chosen * Fasttrack * https://salsa.debian.org/fasttrack-team/support/-/issues/16 * Currently only amd64, We would want to add armhf, arm64 * There are known users of i386, but they are sysadmins, so could manage without freedombox images * Already have a mechanism for package availability, need to add a check for fasttrack - ?optionally use https://tracker.debian.org/pkg/extrepo? * also for matrix, nextcloud, probably in bullseye-backports but may be fasttrack longtime https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982991 * to support any Debian architecture would need a buildd https://salsa.debian.org/fasttrack-team/support/-/issues/5