# 2021-12 CentOS board meeting

https://hackmd.io/@centosboard/rJQZe2zFF

Meeting starts: 20:00 UTC on Wednesday 8th of December:

`date -d "2021-12-08 20:00 UTC"`

Zoom link : https://zoom.us/j/93879964686

Passcode will be sent to participants and guests the day the meeting takes place.

# 2021-12 CentOS board meeting - Agenda

# Attendees

## Board members

* Pat Riehecky
* Thomas Oulevey
* Rich Bowen
* Davide Cavalca
* Tru Huynh
* Mike
* Jim
* Bex
* Josh Boyer joined at :30

## Directors Absent

* Josh Boyer sends regrets (but made it a bit late :)
* Johnny

## Guests

* Lance
* Neal
* Shaun
* Peter Georg
* Aoife Moloney
* Steven
* Amy

# Agenda

* Previous minutes
* https://blog.centos.org/2021/11/october-2021-board-meeting-minutes/
* November meeting was skipped

* Board seat nominations
* https://lists.centos.org/pipermail/centos-devel/2021-November/077422.html
* 11 nominations
* 7 accepted, with nomination statements
* 2 declined
* 2 never responded in any way

* Proposal for -extras on CS9 (Brian)
* https://lists.centos.org/pipermail/centos-devel/2021-November/077417.html
* Proposal: Remove extra red tape from process to get packages into -extras repo
* SIG-like structure for the repo, with SIG chairs as members
* Members could tag packages for release when they're ready
* Will proceed unless there are objections expressed
* What do we do about third-party repos like EPEL?
* Need a policy drafted for this.
* Policy on retiring unmaintained repos
* Pat&Davide: document the process (and for SIGs) so they are well informed
* Brian: yes
* Tru : How do you resolve conflicts ?
* Brian: just for -release packages so likely no conflicts
* Tru: Concerned also about conflicts with third-party repos
* Davide: would the infra SIG be a good parent organization?
* Bex: reporting on how many releases are updating their repo defs (and what that means in context) might be a useful stat.
* Davide: finding out how many folks are downstream consumers of a SIG Repo def could help identify a general number of users (which could be handy).
* Move forward with the proposal and document it in the SIG Guide + above comments

### On going discussion

* Secure boot and SIGs (ie, issue #67 below)
* SIGs want to ship content that needs to be signed
* Signing with personal keys results in a terrible user experience
* Options
1. Just use project key
2. Make a separate key for these artifacts, and get this added to the shim
* Pat: preference for 2/ - separate volonteers effort
* Brian: For the Infra, figure out a long term gov for people interacting with Microsoft. Trusted set of people to manage keys.
* Davide: Could be centralized for all SIGs ? Does it need to be someone at RH ?
* Bex: Board perspective on why having all the released signed by the same key could be a problem ? Safeguard at the SIG acceptance level ?
* Neal : Delegate key that can be removed / Think about users perspective for booting things in an easy way
* Understand how delegate key and shim can be done ? Brian is happy to follow up the different technical questions.
* Bex : Write a detailed proposal and bring it to Red Hat.
* Neal: There's a ticket for this (CS9 secureboot ?) - https://bugzilla.redhat.com/show_bug.cgi?id=2027505
* Reasonnable to target CS9 only if need be.

### Issues

https://git.centos.org/centos/board/issues

**Issues to be closed (ACTION close all of them if no objection)**

* None

**New issues**

* None

**Pending issues**

* **[#67](https://git.centos.org/centos/board/issue/67)** Trusting the SIGs by default, from a CentOS Project perspective (Secureboot)
* See above↓
* **[#65](https://git.centos.org/centos/board/issue/65)** Intel OneApi and Centos stream (Clarification sought - do we actually have any contacts at Intel?
* Rich has sent feedback via the website, but don't know whether that will make it to a human.
* **[#45](https://git.centos.org/centos/board/issue/45)** CentOS variant artifacts (ISOs, disk images, etc.) branding
* Resolved/Approved, but needs to be published. Someone needs to take an action item here.
* Publish this in the SIG handbook - Rich will do this
* Add note/reference in the TM guidelines, and vice versa
* Neal will file a ticket requesting further policy around this
* **[#44](https://git.centos.org/centos/board/issue/44)** Remove former Directors from various accounts and permissions
* This has been hanging around for 7 months, but it's unclear how to proceed here.
* Are former directors still on the mailing lists?
* Are there specific actions we need to take here?
* Mailing list, IRC channel, HackMD, mailing list ownership
* Brian: create a ticket to Infra SIG when a board member goes.
* Bex: seperate access link to your board role and to the community roles

**Issues on hold**

* **#04** Definitive answer requested regarding logo design (On hold as I work with Brand to register. No Board action needed at this time.)
* **#27** Providing Official AMIs in Amazon CN regions.
* **#03** Getting official CentOS images into Azure

### Community Architect updates

* Stream 9 "launch" messaging - https://blog.centos.org/2021/12/introducing-centos-stream-9/ and https://centos.org/stream9/
* FOSDEM Dojo CFP - https://wiki.centos.org/Events/Dojo/FOSDEM2022
* AMA on the 4th of Feb

### SIG Reports

* Virtualization - https://blog.centos.org/2021/12/centos-community-newsletter-december-2021/#:~:text=the%20past%20quarter.-,Virtualization,-Advanced%20Virtualization%20updates
* OpsTools - https://blog.centos.org/2021/12/centos-community-newsletter-december-2021/#:~:text=CentOS%20OpsTools%20SIG%20Quarterly%20Report

### AOB

* TBC

### Executive Session

* This part is reserved for board members.

###### tags: `agenda`