Lwood-20160918

Introduction

Welcome to Last week on OpenStack Dev (“Lwood”) for the week just past. For more background on Lwood, please refer here.

Basic Stats for week 12 to 18 September for openstack-dev:

  • ~499 Messages (down about 10% relative to last week)
  • ~216 Unique threads (up about 35% relative to last week)

Another pretty typical week on the list message count down a bit from last week but the thread count up as there weren’t any particularly long threads to jiggle the metrics (a single message is counted as a thread).

Notable Discussions – openstack-dev

New OpenStack Security Notices

MongoDB guest instance allows any user to connect [OSSN-0066]

From the summary “When creating a new MongoDB single instance or cluster the default setting in MongoDB `security.authorization` was set as disabled. This resulted in no need to provide user credentials to connect to the mongo instance and perform read / write operations from any network that is attached on instance create.”  The original email or the SSN itself has more information.

Deleted Glance image IDs may be reassigned [OSSN-0075]

From the summary (paraphrase and so errors mine) “It is possible for image IDs from deleted images to be reassigned to other images.  This creates the possibility that by creating a nefarious image that shares the ID with a previously deleted but trusted image, the nefarious image can be booted without the user realising it was quietly changed.”  The original post and/or the SSN has more information.

Writing down OpenStack Principles – thread continues and a great quote

The thread that started last week with this a post from Chris Dent trundled along a bit more this week with a few more messages.  Most of the substantive commentary seems to have moved to the review that Thierry Carrez created, the last message in the thread being that Thierry has now posted a revised version which seeks to incorporate the various bits of feedback.

A brief side discussion on the thread popped up between Clay Gerrard and Thierry where they both acknowledged somewhat different views but also an appreciation for the others willingness to embrace new information and change their outlook as appropriate.  Collaborative Open Source development at its best there I reckon.

I’ll close this item with a quote from Thierry’s email which is, I think, one of the most eloquent summaries of the relationship between governance and code in an Open Source project I’ve read.

“It is important for open source projects to have a strong governance model, but it is only the frame that holds the canvas and defines the space. The important part is the painting.”

Nicely put :)

 

Stewardship Working Group (SWG) meeting report

The SWG was mentioned in Lwood-20160717 – as Amrith Kumar noted in the post in question, the group was set up by the Technical Commitee (TC) with the intent that this small group would “review the leadership, communication, and decision making processes of the TC and OpenStack projects as a whole, and propose a set of improvements to the TC.”

During the week past Colette Alexander posted with an update on recent activities.  Of note is that there is work under way to refine the vision for what the SWG will accomplish in Barcelona and feedback is sought from the community.

Election Season Continues

This week marked the end of the PTL nomination period as Tristan Cacqueray notes here – there were four projects (Astara, OpenStack Salt, OpenStack UX and Security) that were without candidates and so the TC will appoint the PTL.  Six projects had more than one PTL nominate and so will have an election: Freezer, Ironic, Keystone, Kolla, Magnum and Quality Assurance. There’s a full list of candidates below or on the official site here.

At the time of writing the election itself has just kicked off and will run until 23:45 September 25, 2016 (UTC)  If you’re eligible, please vote! :)

End of Cycle Retrospectives / Postmortems

As Newton draws to an end, projects are starting to do retrospectives.  Three I spotted were for Keystone (Steve Martinelli) Neutron (Armando Migliaccio) and Nova (Matt Riedemann) with more likely over the next few weeks.  These are all works in progress so if you’ve something constructive to contribute please do!

Beautiful Music in Barcelona

While the gathering proposed may not quite reach the vocal, choral and orchestral grandeur of this if you’re a musician and will be at the Barcelona Summit, please read Amrith Kumar’s post here.

Amrith asks “would y’all musicians who plan to bring your gear to Barcelona please start a little thread here on the ML and let’s get a band going?”.  While I won’t alas be in Barcelona I’ve had the good fortune to be involved in these sorts of FOSS meets music gatherings in the past back in the Canonical days – it’s a ton of fun and I commend it to you :)

Notable Discussions – other OpenStack lists

Nothing that leapt out from the other lists this week.

Upcoming OpenStack Events

Best I can tell no OpenStack related events mentioned this week.  Don’t forget the OpenStack Foundation’s Events Page for a list of general events that is frequently updated.

People and Projects

PTL’s stepping down

PTL Candidates

Core nominations & changes

Further Reading & Miscellanea

Don’t forget these excellent sources of OpenStack news – most recent ones linked in each case

This weeks edition of Lwood brought to you by the background noise of Brunswick, Victoria.  Not as tuneful as Weather Report last week, but a pleasant hum and bustle none the less :)  Oh and a quick reprise of Barcelona featuring Freddie Mercury and Montserrat Caballé.

Last but by no means least, thanks, as always, to Rackspace :)

Comments are closed.