Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [iot-pmc] Please review project release and vote (was: Re: Eclipse Kura v3.0.0 Release)
Hello,

The final CQ and related issue has been approved and closed. Can we move forward with the release vote?

Thanks,
--Dave

On May 9, 2017, at 03:02, Jens Reimann <jreimann@xxxxxxxxxx> wrote:

Not that I am aware of.

I assume the others are waiting for the issue David reported [1], which is currently under vote at CQ13380 [2]. That vote will close tomorrow, unless Julien casts his vote, so that we can close early.

From what I heard there is no re-spin of the IP log required.

Of course, it is possible to vote right now if the current state is sufficient.

Cheers

Jens

On Mon, May 8, 2017 at 7:57 PM, Ian Skerrett <ian.skerrett@xxxxxxxxxxx> wrote:

Has the PMC provided approval for Kura 3?  It seems like all the issues have been dealt with but I don’t remember seeing final approval.

 

 

 

From: iot-pmc-bounces@xxxxxxxxxxx [mailto:iot-pmc-bounces@eclipse.org] On Behalf Of Jens Reimann
Sent: Wednesday, May 3, 2017 5:45 AM
To: PMC list for IoT top level project <iot-pmc@xxxxxxxxxxx>
Subject: Re: [iot-pmc] Please review project release and vote (was: Re: Eclipse Kura v3.0.0 Release)

 

Hello David,

as requested by you I did start to work in issue #920 [1].

However a quick check showed that there are two additional plugins which are missing in that list. I did add those but would ask you to double check and add any additional, missing dependencies.

Cheers

Jens

 

On Tue, May 2, 2017 at 8:42 PM, Woodard, David <david.woodard@xxxxxxxxxxxx> wrote:

We are down to 1 ;)

 

The last issues were to be cleared as part of the release, but to avoid confusion I removed the tag and will apply a different label. 

 

The last issue is this [1]. I have sent a question to EMO to resolve this. When I have an answer, I will update this thread,

 

 

Thanks,

--Dave

 

On May 2, 2017, at 10:03, Hudalla Kai (INST/ECS4) <kai.hudalla@xxxxxxxxxxxx> wrote:

 

Down to five :-) However, I didn't quite get how you would like to proceed. Would you like to close out or move all outstanding issues (and keep the link in the review information) or do you want to keep the GitHug issues like they are (and remove the link from the review information)?

 

Mit freundlichen Grüßen / Best regards

Kai Hudalla
Chief Software Architect

Bosch Software Innovations GmbH
Schöneberger Ufer 89-91
10785 Berlin
GERMANY
www.bosch-si.com

Registered office: Berlin, Register court: Amtsgericht Charlottenburg, HRB 148411 B;
Executives: Dr.-Ing. Rainer Kallenbach, Michael Hahn

From: iot-pmc-bounces@eclipse.org <iot-pmc-bounces@xxxxxxxxxxx> on behalf of Woodard, David <david.woodard@xxxxxxxxxxxx>
Sent: Tuesday, May 2, 2017 14:32
To: PMC list for IoT top level project
Subject: Re: [iot-pmc] Please review project release and vote (was: Re: Eclipse Kura v3.0.0 Release)

 

Hello Kai,

 

You are correct, we were slow to remove the tags. They have been updated now. The only remaining issues that need attention are the one noted by Jens (which we are waiting for him to merge) and a build and test issue that I believe can be postponed (waiting on feedback from Jens). The other issues have notes about being closed during or immediately after the release.

 

Thanks,

--Dave

 

On May 2, 2017, at 05:10, Hudalla Kai (INST/ECS4) <kai.hudalla@xxxxxxxxxxxx> wrote:

 

Hi Dave,

 

any news regarding the 3.0.0 issues on GitHub? Last time I checked there were still 11 open issues with label 3.0.0.

I think it is great to use the labels on GitHub issues and I also think that this is a good way to show users what has been happening in between releases. Please let me know if this is the intended usage of the link you included in the review information. If so, and you want to include the link, then I think the list should only include issues that have been closed in 3.0.0. Otherwise you may as well remove the link from the review information (which personally I would pity) and call it a day :-)

 

Just let me know how you would like to proceed.

 

Mit freundlichen Grüßen / Best regards

Kai Hudalla
Chief Software Architect

Bosch Software Innovations GmbH
Schöneberger Ufer 89-91
10785 Berlin
GERMANY
www.bosch-si.com

Registered office: Berlin, Register court: Amtsgericht Charlottenburg, HRB 148411 B;
Executives: Dr.-Ing. Rainer Kallenbach, Michael Hahn

From: iot-pmc-bounces@eclipse.org <iot-pmc-bounces@eclipse.org> on behalf of Woodard, David <david.woodard@xxxxxxxxxxxx>
Sent: Thursday, April 27, 2017 15:12
To: PMC list for IoT top level project
Subject: Re: [iot-pmc] Please review project release and vote (was: Re: Eclipse Kura v3.0.0 Release)

 

Hello,

 

@Jens - Regarding CryptoService, good catch, and important. I have added that to the security section.

 

@Jens @Kai H - Yes, most of those issues will be postponed. We will try to get the labels removed/moved today. The GPL code Jens referenced is the biggest one we will need to get closed before the official release. I expect this issue to be closed by the end of the week.

 

Thanks,

--Dave

 

On Apr 27, 2017, at 07:01, Benjamin Cabé <benjamin@xxxxxxxxxxx> wrote:

 

+1, congratulations!

 

De : <iot-pmc-bounces@eclipse.org> on behalf of "Woodard, David" <david.woodard@xxxxxxxxxxxx>
Répondre à : PMC list for IoT top level project <iot-pmc@xxxxxxxxxxx>
Date : mercredi 26 avril 2017 à 18:09
À : PMC list for IoT top level project <iot-pmc@xxxxxxxxxxx>
Objet : Re: [iot-pmc] Please review project release and vote (was: Re: Eclipse Kura v3.0.0 Release)

 

All,

 

My apologies for the sparse information in the release plan. Please see the updated information [1]. 

 

 

Thanks,

--Dave

 

On Apr 26, 2017, at 09:20, Woodard, David <David.Woodard@xxxxxxxxxxxx> wrote:

 

All,

 

I will update the release plan today with more detailed information.

 

Thanks,

--Dave

 

On Apr 26, 2017, at 05:41, Jens Reimann <jreimann@xxxxxxxxxx> wrote:

 

I can only partly agree to Ian's comments. Yes, we made some changes and those changes have not been communicated well at this point in time. We do want to fix this in today's IoT call.

However the changes we actually made are minimal. The Eclipse security policy has been there for a while as is the field about security information in the release information. Adding this little bit of information cannot be a big deal, as it already got added to the release notes document on GitHub.

Agreed, we didn't make that field mandatory in the past. But looking at Bugzilla and the release notes on GitHub I think the request to amend the current release review document is reasonable and (from an effort perspective) fair. So there shouldn't be a big holdup due to this topic.

 

 

On Tue, Apr 25, 2017 at 8:36 PM, Ian Skerrett <ian.skerrett@eclipse.org> wrote:

FWIW, I think David has a point about the security policy being new and the fact that there has been very little communication about it to the IoT projects so I would hope the PMC doesn’t hold up the Kura 3 release for this reason. In fairness, I think we need to effectively communicate about the new security policy to all the projects before we hold up a release.

 

We are planning to do a press release about Kura 3.0 on Thursday. Is the PMC ready to approve the Kura 3.0 release or are there other outstanding issues?

 

Ian

 

 

 

 

From:iot-pmc-bounces@eclipse.org [mailto:iot-pmc-bounces@eclipse.org] On Behalf Of Woodard, David
Sent: Tuesday, April 25, 2017 9:16 AM
To: PMC list for IoT top level project <iot-pmc@xxxxxxxxxxx>


Subject: Re: [iot-pmc] Please review project release and vote (was: Re: Eclipse Kura v3.0.0 Release)

 

 

Hello, 

 

@Kai H: You are correct, we generally try to keep most of the details in the release notes. We believe this is where most users of Kura will get release information. I usually have a link in the release info, but we haven’t quite finalized the release notes. The working copy is here [1]. I can add a link to the working copy of the release notes if that helps.

 

@Kai K, Jens: If I add references to the two security bugs, is that sufficient? I would ask for some leniency here as the Eclipse Foundation has only recently started the new security policy. I believe this new policy was started, in part, because the previous way of handling security issues [2] was not sufficient.

 

 

Thanks,

--Dave

 

 

On Apr 25, 2017, at 06:10, Hudalla Kai (INST/ECS4) <kai.hudalla@xxxxxxxxxxxx> wrote:

 

Hmm, given that this is a new major release I would expect that there is a little more to tell users than the information provided in [1]. Or am I mistaken in assuming that this page should basically contain the information that users would be given in something like the "Release Notes"?

 

Mit freundlichen Grüßen / Best regards

Kai Hudalla
Chief Software Architect

Bosch Software Innovations GmbH
Schöneberger Ufer 89-91
10785 Berlin
GERMANY
www.bosch-si.com

Registered office: Berlin, Register court: Amtsgericht Charlottenburg, HRB 148411 B;
Executives: Dr.-Ing. Rainer Kallenbach, Michael Hahn

From: iot-pmc-bounces@eclipse.org <iot-pmc-bounces@eclipse.org> on behalf of Jens Reimann <jreimann@xxxxxxxxxx>
Sent: Tuesday, April 25, 2017 08:43
To: PMC list for IoT top level project
Subject: Re: [iot-pmc] Please review project release and vote (was: Re: Eclipse Kura v3.0.0 Release)

 

@Kai: I see this still as missing.

 

On Mon, Apr 24, 2017 at 7:15 PM, Kai Kreuzer <kai@xxxxxxxxxxx> wrote:

Thanks for the clarification, David!

 

@Jens, What about the security topic as defined in https://wiki.eclipse.org/IoT/PMC#Releases?

 

"If the release did not fix any security issues, this has to be stated explicitly by something like "No security related issues had to be fixed"."

 

Regards,

Kai

 

On 24 Apr 2017, at 18:49, Woodard, David <david.woodard@xxxxxxxxxxxx> wrote:

 

Hi Kai,

 

We are not introducing API breaking changes in this release. We are using the major release version to indicate a major update in features (move to Java 8, new web UI, Kura Wires, etc.). This is the same approach we took when moving from Kura v1 to v2.

 

Thanks,

--Dave

 

 

On Apr 24, 2017, at 11:56, Kai Kreuzer <kai@xxxxxxxxxxx> wrote:

 

Hi,

 

Sorry for not responding earlier.

 

I might have missed something, but are we ok now to have no "security issues“ section in the review information?

I have found the link about how to report security issues on the contribution page of the Kura website, so this part is imho fine.

 

@David: As it is a major (and thus API breaking) release, is there any information on the API compatibility? I.e. which parts of their code must consumers address to be able to upgrade to 3.0.0?

 

Regards,

Kai

 

On 24 Apr 2017, at 17:31, Jens Reimann <jreimann@xxxxxxxxxx> wrote:

 

Hi PMC,

maybe making the subject a bit "call-for-action"-ish helps.

 

please have a look at the Kura release and vote.

As I am involved in the project I will abstain.

Thanks

Jens

 

On Thu, Apr 20, 2017 at 4:57 PM, Woodard, David <david.woodard@eurotech.com> wrote:

Hello,

 

The review team is waiting for a vote on the release [1]. Can we start the voting please?

 

 

Thanks,

--Dave

 

On Apr 19, 2017, at 02:35, Jens Reimann <jreimann@xxxxxxxxxx> wrote:

 

Hi David,

good to hear that.

I guess we can start voting.

Jens

 

 

On Tue, Apr 18, 2017 at 4:46 PM, Woodard, David <david.woodard@eurotech.com> wrote:

Hi Jens,

 

No worries. I probably shouldn’t read emails before I’ve had my morning coffee ;)

 

So, we are okay for now with the security topic? I certainly want to follow the guidelines, as this is an important topic. 

 

I understand the GPL topic is important. We should be able to get this addressed within the next week. I will update the referenced Github Issue once we have new information. This issue will be corrected before we make the 3.0.0 release.

 

Thanks,

--Dave

 

On Apr 18, 2017, at 09:41, Jens Reimann <jreimann@xxxxxxxxxx> wrote:

 

Hello David,

If that formulation sounded disrespectful I apologize. It honestly wasn't meant that way!

Having a brief look at the homepage, clicking through a few links didn't bring up this page, with the link to the policy to me. So I think that link should be a bit more prominent. e.g. in the footer or maybe the "community" sub-menu. Finding it right now, is rather hard.

We had a public discussion over the last weeks which ended up in the initial version of the document [1]. The PMI already has a field for providing information about fixed security issues or if there where none, then this field should be filled with a short statements that there were no known issues at this point. It also handles the case on how to provide information without disclosing the actual issue, allowing for a controlled disclosure. I know that this step, of filling out the field, is new. It should ensure that this field is not simply forgotten, but filled in one way or the other intentionally. Tracking security vulnerabilities should still happen in the Eclipse Bugzilla as the Eclipse Security Policy states.

I consider the GPL issue rather important. As this issue (not the GitHub issue entry, but the issue itself) is now open since before Kura 2.1. And effectively it is not possible to re-compile Kura in the way it is distributed right now. But I guess it shouldn't be a big issue providing the sources in a reproducible way.

I hope this explains a bit what I meant.

Jens

 

On Tue, Apr 18, 2017 at 2:41 PM, Woodard, David <david.woodard@eurotech.com> wrote:

Hi Jens,

 

Thanks for the input. Please see below.

 

*There is no statement about fixed security related issued in the release review information.

See Below.


* The link to the Eclipse security policy is missing

Is the link on this [1] page not sufficient?

 

* Which raises the question if you have reviewed the Eclipse Security Policy

I believe it is more respectful to turn your statement/accusation into the question: “Have you reviewed the Eclipse Security Policy”? Which would give me the opportunity to respond accordingly. Yes, I have read the security policy, and, to my knowledge, we are adhering to the policy. The reported vulnerability bugs have been addressed. The next step would be to make the bugs public and disclose to the community. I am working on this last part. There are several industrial solutions based on Kura, so we need to be sensitive about how we word such messaging. This messaging will be ready before we make the official release. I didn’t see anything in the policy that stated vulnerabilities must be discussed in the release review information. In fact, I would argue this is the wrong place to track vulnerabilities as we now have a separate system in place.

 

* The source code for a modified GPL module is still missing [2]

The linked issue is marked with the KURA-3.0.0 tag. All such tagged items will be addressed before the release. Apologies if that wasn’t clear, I believe I usually include that link in the PMC request.

 

 

Thanks,

--Dave

 

 

On Apr 18, 2017, at 02:55, Jens Reimann <jreimann@xxxxxxxxxx> wrote:

 

Hi David,

from a quick look there are a few points still missing for me:

* There is no statement about fixed security related issued in the release review information.

* The link to the Eclipse security policy is missing

  * Which raises the question if you have reviewed the Eclipse Security Policy [1]

* The source code for a modified GPL module is still missing [2]

I know the security related points are partly new, but the issue about the missing GPL source code is quite a few releases old now and I think it should be fixed before making another Kura release.

 

On Mon, Apr 17, 2017 at 5:40 PM, Woodard, David <david.woodard@eurotech.com> wrote:

Hello,

 

We are in the process of releasing Eclipse Kura v3.0.0. Information on the release can be found here [1]. The IP log for the release has been approved here [2]. The review and release is being tracked with this bug [3]. Please let me know if you have any questions.

 

 

Thanks,

David Woodard

Eclipse Kura Project Lead


_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc




-- 

Jens Reimann
Senior Software Engineer / EMEA ENG Middleware
Werner-von-Siemens-Ring 14
85630 Grasbrunn
Germany
phone: +49 89 2050 71286
_____________________________________________________________________________

Red Hat GmbH, www.de.redhat.com,
Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 


_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc




-- 

Jens Reimann
Senior Software Engineer / EMEA ENG Middleware
Werner-von-Siemens-Ring 14
85630 Grasbrunn
Germany
phone: +49 89 2050 71286
_____________________________________________________________________________

Red Hat GmbH, www.de.redhat.com,
Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 


_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc




-- 

Jens Reimann
Senior Software Engineer / EMEA ENG Middleware
Werner-von-Siemens-Ring 14
85630 Grasbrunn
Germany
phone: +49 89 2050 71286
_____________________________________________________________________________

Red Hat GmbH, www.de.redhat.com,
Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 


_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc




-- 

Jens Reimann
Senior Software Engineer / EMEA ENG Middleware
Werner-von-Siemens-Ring 14
85630 Grasbrunn
Germany
phone: +49 89 2050 71286
_____________________________________________________________________________

Red Hat GmbH, www.de.redhat.com,
Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 


_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc




-- 

Jens Reimann
Senior Software Engineer / EMEA ENG Middleware
Werner-von-Siemens-Ring 14
85630 Grasbrunn
Germany
phone: +49 89 2050 71286
_____________________________________________________________________________

Red Hat GmbH, www.de.redhat.com,
Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 


_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc




-- 

Jens Reimann
Senior Software Engineer / EMEA ENG Middleware
Werner-von-Siemens-Ring 14
85630 Grasbrunn
Germany
phone: +49 89 2050 71286
_____________________________________________________________________________

Red Hat GmbH, www.de.redhat.com,
Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 

 

_______________________________________________ iot-pmc mailing list iot-pmc@xxxxxxxxxxx To change your delivery options, retrieve your password, or unsubscribe from this list, visithttps://dev.eclipse.org/mailman/listinfo/iot-pmc

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 

_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

 


_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc




--

Jens Reimann
Senior Software Engineer / EMEA ENG Middleware
Werner-von-Siemens-Ring 14
85630 Grasbrunn
Germany
phone: +49 89 2050 71286
_____________________________________________________________________________

Red Hat GmbH, www.de.redhat.com,
Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill


_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc




--
Jens Reimann
Senior Software Engineer / EMEA ENG Middleware
Werner-von-Siemens-Ring 14
85630 Grasbrunn
Germany
phone: +49 89 2050 71286
_____________________________________________________________________________

Red Hat GmbH, www.de.redhat.com,
Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill
_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/iot-pmc

Back to the top