Future of TPMDD @ Linux Security Summit / Plumbers

Future of TPMDD @ Linux Security Summit / Plumbers

[Peter Huewe]

Hi Jarkko, Mimi, James, Jason, and everybody else,
 
it would be great if we could find a slot to discuss in person how we proceed with the mailing lists, patch flows and review cycles.
I know there were some discussions, but atleast for my part I did not get the final conclusion on how we proceed and why.
 
Also I would like to discuss what is the current status of the move to kernel.org infrastructure (or atleast away from sf), and maybe we can find anyone here at Plumbers to remove any blocking points.

Maybe we could also discuss how we can improve our testing strategy and discuss which tests currently exists.
We have a (semi-)automatic test environment for the tpm kernel patches at work and we are currently exploring how to expand this further and automate it completely. I can give you a quick rundown on this if interested.


Thanks,
Peter

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
tpmdd-devel mailing list
tpmdd-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tpmdd-devel

Re: Future of TPMDD @ Linux Security Summit / Plumbers

[James Bottomley]

On September 13, 2017 1:48:43 PM PST, Peter Huewe <PeterHuewe@gmx.de> wrote:
>Hi Jarkko, Mimi, James, Jason, and everybody else,
> 
>it would be great if we could find a slot to discuss in person how we
>proceed with the mailing lists, patch flows and review cycles.
>I know there were some discussions, but atleast for my part I did not
>get the final conclusion on how we proceed and why.
> 
>Also I would like to discuss what is the current status of the move to
>kernel.org infrastructure (or atleast away from sf), and maybe we can
>find anyone here at Plumbers to remove any blocking points.
>
>Maybe we could also discuss how we can improve our testing strategy and
>discuss which tests currently exists.
>We have a (semi-)automatic test environment for the tpm kernel patches
>at work and we are currently exploring how to expand this further and
>automate it completely. I can give you a quick rundown on this if
>interested.

At plumbers we could do a lunch meeting, a hack room session,a bof or an unconference.  Take your pick.

James

>
>Thanks,
>Peter
>
>------------------------------------------------------------------------------
>Check out the vibrant tech community on one of the world's most
>engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>_______________________________________________
>tpmdd-devel mailing list
>tpmdd-devel@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/tpmdd-devel


-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
tpmdd-devel mailing list
tpmdd-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tpmdd-devel

Re: Future of TPMDD @ Linux Security Summit / Plumbers

[Jarkko Sakkinen]

On Wed, Sep 13, 2017 at 10:48:43PM +0200, Peter Huewe wrote:
> Hi Jarkko, Mimi, James, Jason, and everybody else,
>  
> it would be great if we could find a slot to discuss in person how we
> proceed with the mailing lists, patch flows and review cycles.
> I know there were some discussions, but atleast for my part I did not
> get the final conclusion on how we proceed and why.

The decision was to create combined mailing list for IMA and TPM. AFAIK
you were in the loop.

There's zero change to patch flow or review cycle. It's just a combined
mailing list.

The patchflow is such that for non-trivial patch sets we CC also
linux-security-module. James will document this to kernsec.org.

> Also I would like to discuss what is the current status of the move to
> kernel.org infrastructure (or atleast away from sf), and maybe we can
> find anyone here at Plumbers to remove any blocking points.

Took about month to get this. Got email at 13:37 (yes, not joking):

http://vger.kernel.org/vger-lists.html#linux-integrity

> Maybe we could also discuss how we can improve our testing strategy
> and discuss which tests currently exists.
> We have a (semi-)automatic test environment for the tpm kernel patches
> at work and we are currently exploring how to expand this further and
> automate it completely. I can give you a quick rundown on this if
> interested.

Can you link this infrastructure to my tree at infradead.org?

> Thanks,
> Peter

/Jarkko

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

Re: Future of TPMDD @ Linux Security Summit / Plumbers

[Peter Huewe]

Am 13. September 2017 16:21:25 GMT-07:00 schrieb Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>:
>On Wed, Sep 13, 2017 at 10:48:43PM +0200, Peter Huewe wrote:
>> Hi Jarkko, Mimi, James, Jason, and everybody else,
>>  
>> it would be great if we could find a slot to discuss in person how we
>> proceed with the mailing lists, patch flows and review cycles.
>> I know there were some discussions, but atleast for my part I did not
>> get the final conclusion on how we proceed and why.
>
>The decision was to create combined mailing list for IMA and TPM. AFAIK
>you were in the loop.
Not on every mail I dropped on a few and re-added on others.
I don't see the reason behind the CC very much, since I don't know of any feedback that came ever through that ml? Maybe I'm wrong.


>There's zero change to patch flow or review cycle. It's just a combined
>mailing list.
Yes, but why not discuss this since we are finally all "in the same room" :)

Especially how we can improve there, and also I do not think the exact details are really worked out.
Who handles patchwork? Afaik currently only you a use patchwork, while Mimi does not?
So if I would look at the resulting patchwork I would see a lot of "un-touched" patches.
What are the patch naming conventions , shall everything prefixed by tpm / ima so people can filter?
And so on.


>The patchflow is such that for non-trivial patch sets we CC also
>linux-security-module. James will document this to kernsec.org.
Would be great to also get write access to kernsec.org wiki so we can start documenting stuff there ;)


>> Also I would like to discuss what is the current status of the move
>to
>> kernel.org infrastructure (or atleast away from sf), and maybe we can
>> find anyone here at Plumbers to remove any blocking points.
>
>Took about month to get this. Got email at 13:37 (yes, not joking):
>
>http://vger.kernel.org/vger-lists.html#linux-integrity
So big announcement time :)
Patchwork up and running?



>> Maybe we could also discuss how we can improve our testing strategy
>> and discuss which tests currently exists.
>> We have a (semi-)automatic test environment for the tpm kernel
>patches
>> at work and we are currently exploring how to expand this further and
>> automate it completely. I can give you a quick rundown on this if
>> interested.
>
>Can you link this infrastructure to my tree at infradead.org?
No.
Infradead is only accessible via git protocol and that's not something our (many other company) proxies allow, which honestly sucks (both the proxy and git only)

As mentioned quite often
I would like to see tpmdd at kernel.org completly.
Then we can start testing trees automatically.

It would be great to have some travis-ci or similar directly running on our tree but afaik this is github only?

So alot of things to discuss imho.
Peter


>
>> Thanks,
>> Peter
>
>/Jarkko

-- 
Sent from my mobile

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
tpmdd-devel mailing list
tpmdd-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tpmdd-devel