Oras Community Meeting Notes

--- tags: oras --- # ORAS Community Meeting (bi-weekly > **Note: This meeting notes has been moved to this link owned by the ORAS hackmd account: https://hackmd.io/5jBuSmL1QjG-_C1PUNonCQ?view** ###### tags: `oras` - [Github: oras-project/community](https://github.com/oras-project/community) - [CNCF Calendar](https://www.cncf.io/community/calendar/) - [Slack: #oras](https://app.slack.com/client/T08PSQ7BQ/CJ1KHJM5Z) - [Archived Notes](https://github.com/oras-project/artifacts-spec/discussions/categories/meeting-notes) #### Zoom Call Info - Meeting time: - Tuesday 5-6pm pacific time, 8-9pm US Eastern, 8-9am Shanghai (US Summer time) - Tuesday 4-5pm pacific time, 8-9pm US Eastern, 8~9 Shanghai (US Winter time) - [Zoom Dial-in link](https://zoom.us/j/8079328631?pwd=UzN0NUlmbmcvTTN5L0o5VUQ2YndyQT09) - Passcode: 77777 (5x 7) - Meeting ID: 807 932 8631 - [Find your local number](https://zoom.us/u/aLDk4OXTu) #### Template - Copy template from the bottom - [Template](#Meeting-Notes-Template) - Ensure agenda items have an owner ## Apr 1, 2025 ### Attendees: - Feynman Zhou - Shiwei Zhang - Sylvia Lei - Patrick Pan - Terry Howe - Xiaoxuan Wang - Sajay Antony ### Agenda - Discuss and align on the scenarios of attaching files to a multi-platform image https://github.com/oras-project/oras/pull/1682 - Proposal from OpenTofu: artifactType in index manifest and in its "manifests" descriptors - Need review for - https://github.com/oras-project/oras-dotnet/pull/197 ### Notes - Discussed the scenarios of attaching files to a multi-platform image https://github.com/oras-project/oras/pull/1682. Feynman will resolve the comments from maintainers. - Maintainers agreed that adding `artifactType` in index manifest and in its "manifests" descriptors is a valid feature request to ORAS. Feynman will reach out to the issue author to update the spec https://github.com/oras-project/oras/issues/1670 ### Recording ## Mar 5, 2025 ### Attendees: - Andrew Block - Feynman Zhou - Shiwei Zhang - Sajay Antony - Sylvia Lei - Xiaoxuan Wang - Yi Zha ### Agenda Items: - Announcement: [oras-java-sdk v0.2.0]() has been published successfully on Maven Central: https://repo1.maven.org/maven2/land/oras/oras-java-sdk/0.2.0/ (Valentin Delaye) - Should we deprecate the `--verbose` flag instead of removing it for commands that don't support it? https://github.com/oras-project/oras/issues/1640 (Sylvia Lei) - Nominate Xiaoxuan Wang as a maintainer: https://github.com/oras-project/setup-oras/pull/87 (Shiwei Zhang) - Exploring the potential of leveraging a system or user level registries.conf to manage the interactions with registries (Andrew Block) https://github.com/helm/community/pull/391/files - PR review list (for async) - doc: Create and manage Multi-architecture Artifacts: https://github.com/oras-project/oras-www/pull/395/files - spec: Multi-arch image management with ORAS: https://github.com/oras-project/oras/pull/1514 - https://github.com/oras-project/setup-oras/pull/87 ### Notes: - ORAS maintainers agreed that make the `--verbose` flag available in 6 oras commands but remain deprecation warning message in the output. This flag will be entirely removed in `oras v2.0` considering this is a breaking change. - @sabre1041 will raise a GitHub issue in oras-go to clarify the feature request from Helm about supporting registry.conf. This will be considerred in oras-go v3.0 milestone - ORAS maintainers will review the following PRs - doc: Create and manage Multi-architecture Artifacts: https://github.com/oras-project/oras-www/pull/395/files - spec: Multi-arch image management with ORAS: https://github.com/oras-project/oras/pull/1514 - Nominate Xiaoxuan Wang as a maintainer: https://github.com/oras-project/setup-oras/pull/87 **Recording**: https://youtu.be/3HYgugHD0fQ ## Feb 18, 2025 ### Attendees - Andrew Block - Feynman Zhou - Shiwei Zhang - Sylvia Lei - Yi Zha - Flavio Schuindt - Patrick Pan - Terry Howe - ### Agenda - Adhoc discussion on recent GitHub issues and spec-related PRs - doc: improve formatted output for oras discover: https://github.com/oras-project/oras/pull/1625 - Match group id for domain oras.land: https://github.com/oras-project/oras-java/pull/100 ### Meeting notes - CNCF is owning the domain `oras.land`. @sabre1041 will help Valentine to create a service ticket to request CNCF's help on getting the group id for the domain https://github.com/oras-project/oras-java/pull/100 - Based on the community discussion on Feb 18, ORAS maintainers agreed on these things: - Show root image and its all referrers in the JSON output by default. This ensures data consistency among other data format output (e.g. tree, table) - Use `referrers` as the field name in the top-level and second-level referrers, instead of `manifests` - Show the referrers with full depth by default, introduce a flag `--depth` to allow users to limit the maximum depth of referrers in the formatted output. - ORAS will not introduce an additional flag to limit the number of referrers now since there is no clear performace concern so far. ORAS can provide the automatic timeout mechanism to users in case too many referrers with a root image. - Use [JSON Schema](https://json-schema.org/learn/json-schema-examples) and text to list the fields in formatted output - Feynman will inform Terry to restrucure his spec https://github.com/oras-project/oras/pull/1610 once the enhancement proposal template is merged - The following PRs and GitHub issues requires maintainers to review asynchronously: - https://github.com/oras-project/oras/pull/1621 - https://github.com/oras-project/oras/issues/1534 ## Feb 11, 2025 ### Attendees - Feynman Zhou - Shiwei Zhang - Sajay Antony - Sylvia Lei - Terry Howe - Xiaoxuan Wang - Nora Hu - Flavio - Patrick Pan ### Agenda - ORAS v1.3.0-beta.2 release timeline (Feynman) - Typescript SDK interest (Flávio) - Proposal doc and CLI specification template for new features (Feynman) https://github.com/oras-project/oras/pull/1621 - Triage new GitHub issues ### Notes ## Jan 21, 2025 ### Attendees - Feynman Zhou - Shiwei Zhang - Sajay Antony - Sylvia Lei - Terry Howe - Xiaoxuan Wang - Yi Zha ### Agenda - [oras-java-sdk](https://github.com/oras-project/oras-java) has been transferred to ORAS org. Valentin Delaye becomes the repo maintainer - Discuss two UX-related issues: - Add status output to show the command execution result: https://github.com/oras-project/oras/issues/1575 - Add two alias to "oras manifest fetch": https://github.com/oras-project/oras/issues/1574 - Re-visit the issues under the v1.3.0 milestone and determine the scope https://github.com/oras-project/oras/milestone/19 ### Notes - ORAS maintainers identified the scope of v1.3.0-beta.2 and triaged all GitHub issues of this milestone. - ORAS maintainers agreed to add status output to show the command execution result. It should cover all ORAS commands and requires a spec: https://github.com/oras-project/oras/issues/1575 - ORAS maintainers agreed to add one alias `` to "oras manifest fetch": https://github.com/oras-project/oras/issues/1574 ## Jan 7, 2025 ### Attendees - Feynman Zhou - Shiwei Zhang - Sajay Antony - Sylvia Lei - Billy Zha - Terry Howe - Xiaoxuan Wang ### Agenda - oras-go v2.5.1 and oras CLI v1.2.3 milestone plan discussion from https://github.com/oras-project/oras/issues/1593 (Feynman) - Nomination: add Sylvia Lei as a maintainer https://github.com/oras-project/oras/pull/1604 (Shiwei) - Discuss the flag name of `--format tree-full` https://github.com/oras-project/oras/pull/1602 (Terry & Feynman) - Triage new GitHub issues in the past three weeks ### Notes - ORAS maintainers will fix the symbolic link issue in oras-go v2.6.0 https://github.com/oras-project/oras/issues/1593 - Sylvia Lei has been approved as a repo maintainer - We will need to re-design the output `--format tree-full` ## Dec 10, 2024 ### Attendees - Feynman Zhou - Shiwei Zhang - Sajay Antony - Sylvia Lei - Billy Zha - Terry Howe - Xiaoxuan Wang ### Agenda - Celebrate the [ORAS v1.3.0-beta.1](https://github.com/oras-project/oras/releases/tag/v1.3.0-beta.1) release and express gratitude to contributors - Next milestone will be [v1.3.0-beta.2](https://github.com/oras-project/oras/milestone/21) and planned for Jan, 2025 - Discuss the scenario of attach supply chain artifacts (e.g. SBOM, Vulnerability report, attestation) to multi-arch image - Documentation for v1.3.0-beta.1 release - https://github.com/oras-project/oras-www/pull/406 - https://github.com/oras-project/oras-www/pull/435 ### Notes - Feynman will work with Terry to publish the documentation and blog post for the v1.3.0-beta.1 release - Jeremy Rickard shared the scenario of attach supply chain artifacts (e.g. SBOM, Vulnerability report, attestation) to multi-arch image. Feynman will document it in the spec and figure out whether this could be supported in beta.2. There is a related issue to track https://github.com/oras-project/oras/issues/1531 - The ORAS [v1.3.0-beta.2](https://github.com/oras-project/oras/milestone/21) is planned for releasing in Jan, 2025 ## Nov 26, 2024 ### Attendees - Feynman Zhou - Shiwei Zhang - Sajay Antony - Sylvia Lei - Billy Zha - Terry Howe - Xiaoxuan Wang ### Agenda - KubeCon EU preparation plan - Discuss and align the phased release plan of ORAS v1.3.0 - Discuss and align the design of multi-arch images - Annotating multi-arch images https://github.com/oras-project/oras/issues/1531 - Listing tags alongside their platform information https://github.com/oras-project/oras/issues/1531 - ORAS dotnet SDK plan discussion (Tentative) ### Notes - Feynman shared the [proposal](https://docs.google.com/document/d/1jrvKIg9NH_vr6ebYTuO-KLUHiBPQ5iGquER2ERgkRhc/edit?tab=t.0#heading=h.ype71ud9pa7e) that Andrew Block submitted to KubeCon EU. Feynman will also apply for lightning talk and booth for ORAS by Dec 3, 2024 - ORAS maintainers aligned that there will be two beta releases before v1.3.0. These issues has been moved to [v1.3.0-Beta.1](https://github.com/oras-project/oras/milestone/22) and its ETA will be December 6, 2024. - Feynmnan suggested ORAS maintainers continue the discussion on these two issues: - Annotating multi-arch images https://github.com/oras-project/oras/issues/1531 - Listing tags alongside their platform information https://github.com/oras-project/oras/issues/1531 - ORAS maintainers triaged the issues of ORAS dotnet SDK v0.3.0. Patrick Pan will provide a timeline for v0.3.0 milestone ## Nov 19, 2024 ### Attendees - Andrew Block - Feynman Zhou - Shiwei Zhang - Sajay Antony - Sylvia Lei - Billy Zha - Terry Howe ### Agenda - Discuss and align the next steps of Argo CD integration with oras-go (Andrew Block) - Discuss the next steps of [Proposal: Identifying Platform-Specific OCI Artifacts](https://hackmd.io/Akt9NnP_SC-McHhuh9ckAA?view) - Continue the discussion of open questions raised in the [Multi-arch image management with ORAS](https://github.com/oras-project/oras/pull/1514/files#diff-483519cec3eed7b735884e178105d6d1ee41b60492dc5354dac2ec9c37d8bb19R1) - (Feynman Zhou) ### Notes - Andrew mentioned that he will follow up on the Argo CD integration with Blake and provide updates to ORAS maintainers next week. Andrew also shared that he will submit a proposal for ORAS to KubeCon EU - ORAS maintainers agreed to use an annotation-based approach to add platform information to platform-specific artifact. This will be a part of v1.4.0 milestone. The next step is to create an issue and define customized ORAS annotations. - Feynman will split the [Multi-arch image management with ORAS](https://github.com/oras-project/oras/pull/1514/) into 3 issues/PRs. ## Oct 29, 2024 ### Attendees - Feynman Zhou - Xiaoxuan Wang - Shiwei Zhang - Sajay Antony - Sylvia Lei - Billy Zha - Yi Zha - Terry Howe ### Agenda items - [Proposal: Identifying Platform-Specific OCI Artifacts](https://hackmd.io/Akt9NnP_SC-McHhuh9ckAA?view) - Sylvia - Demonstrate how to generate CLI help reference doc automatically - Terry - Next step of [ORAS Java proposal](https://github.com/oras-project/community/issues/60) - Request review on the [docs: Improve ORAS diagnose experience](https://github.com/oras-project/oras/pull/1483) ### Notes - Terry will send a PR to document how to generate CLI help reference doc automatically - ORAS maintainers agreed to promote the approach 1 annotation-based approach to add platform information. Sylvia will raise a GitHub issue to OCI image spec community - Feynman will schedule a meeting with Valentin (proposal author) to transfer the ORAS Java SDK repo ## Oct 15, 2024 ### Attendees - Feynman Zhou - Xiaoxuan Wang - Shiwei Zhang - Sajay Antony - Sylvia Lei - Billy Zha - Yi Zha - Terry Howe - Toddy Mladenov ### Agenda Items - Discuss the next step of [ORAS Java proposal](https://github.com/oras-project/community/issues/60) - Finalize the discussion and proposal of the issue [oras cp fails if `org.opencontainers.image.ref.name` contains a full reference](https://github.com/oras-project/oras/issues/1505) - [Discuss the problems/scenarios and open questions in spec: Multi-arch image management with ORAS](https://github.com/oras-project/oras/pull/1514) - [feat: add platform option to oras push command ](https://github.com/oras-project/oras/pull/1500) ### Notes - ORAS maintainers aligned that the next step of [ORAS Java proposal](https://github.com/oras-project/community/issues/60) is to request org-level maintainers to vote on the issue to see whether accept this project as a subproject under ORAS org. After the supermajority of approval received, we could transfer the project and kick-off the development in the ORAS community. - ORAS CLI maintainers need to continue reviewing the proposal of the issue [oras cp fails if `org.opencontainers.image.ref.name` contains a full reference](https://github.com/oras-project/oras/issues/1505). @Feynman will also tag the issue author to provide his feedback on 3 proposals from @shizh and Terry. - We walked through the [Discuss the problems/scenarios and open questions in spec: Multi-arch image management with ORAS](https://github.com/oras-project/oras/pull/1514). The next step is to let ORAS maintainers review this PR and identify the problems & user scenarios. - The PR from Terry [feat: add platform option to oras push command ](https://github.com/oras-project/oras/pull/1500) received three approvals. @shizh will take a final review after the meeting. ## Sep 26, 2024 ### Attendees: - Andrew Block - Feynman Zhou - Xiaoxuan Wang - Shiwei Zhang - Sajay Antony - Sylvia Lei - Billy Zha - Yi Zha ### Agenda Items - Should we enable a stale bot for the `oras-go` repo? https://github.com/oras-project/oras-go/issues/828 - [ORAS Java SDK proposal](https://github.com/oras-project/community/issues/60) - Discuss the remaining comments in [docs: Improve ORAS diagnose experience](https://github.com/oras-project/oras/pull/1483/files) - [add platform option to push command](https://github.com/oras-project/oras/pull/1500) - Multi-arch image management PoC (Tentative) ### Notes - ORAS maintainers agreed to enable a stale bot for the `oras-go` repo. Sylvia will raise a PR to implement it. - ORAS maintainers to ask the author of ORAS Java SDK proposal to elaborate more on the roadmap. - Feynman will continue to resolve comments in [docs: Improve ORAS diagnose experience](https://github.com/oras-project/oras/pull/1483/files) - Multi-arch image management has not been started in the meeting discussion due to the limited time ## Sep 3, 2024 ### Attendees: - Feynman Zhou - Xiaoxuan Wang - Shiwei Zhang - Sylvia Lei - Andrew Block - Billy Zha - Sajay Antony - Toddy Mladenov ### Agenda Items - Discuss the remaining comments in [docs: Improve ORAS diagnose experience](https://github.com/oras-project/oras/pull/1483/files) - ORAS v1.3.0 status and timeline ### Notes We discussed these questions regarding the PR [docs: Improve ORAS diagnose experience](https://github.com/oras-project/oras/pull/1483/files) and reached consensus as follows: - Q: For the diagnose flag options, is it much more straightforward and less breaking if we only deprecate `--verbose` and remain `--debug` as it is? - ORAS maintainers agreed to deprecate `--verbose` and remain `--debug` as a unified control of debug logs. The original output of `--verbose` will be reserved in several oras commands `pull/push/attach/discover` by introducing an additional flag. The major reason is that the `--debug` option is more consistent with the other popular client tools and also to avoid overloading `--verbose` - Q: Is it a common practice to use an environment variable like `export ORAS_DEBUG=1` as a global switch for debug logs? What are the Pros and Cons of using this design? - ORAS maintainers agreed to not introduce an additional environment variable as a global switch to enable debug logs since `--debug` is intuitive enough. - Q: Is it much more reasonable to output the user's environment details in `oras version` rather than in debug logs? The details about the environment where the tool is running, such as OS version and architecture, tool version, and environment variables (excluding sensitive data) would be super helpful to help ORAS developers and users to diagnose an issue. - ORAS maintainers agreed to add `OS/Arch` to the default output of `oras version`. It is hard to capture the distribution name and version, and they are not always available. - Q: In addiotion to DEBUG level logs generated in the `--debug`, should ORAS applies other log levels like INFO, ERROR, WARNING to differentiate the debug log information? - No. At least for the next release, there will not be other log level in ORAS debug logs. The consensus here is to only output DEBUG level logs in `--debug`. **Recording**: Video recording is published on [Youtube](https://youtu.be/sI2MJDMUQm8) and Zoom chat message is available [here](https://zoom.us/rec/play/Du0ASb3uwUqsNwoKonrzfc7cVzosuUupPmYVTIRjF_loEyj22YB2Rut9sqSM8AjIGbqDs49B3-lg2Cth.ZiYQOtiwnehh3NmN?autoplay=true&startTime=1725407985000) ## Aug 6, 2024 Skipped due to no agenda collected from the community ## July 22, 2024 ### Attendees: - Feynman Zhou - Yi Zha - Xiaoxuangwang - Sylvia Lei - Billy - Shiwei Zhang - Sajay Antony ### Agenda Items - Info: We will run an ORAS project booth at KubeCon China from Aug 21 to Aug 22. Andrew Block submitted a proposal to ArgoCon (KubeCon EU). - Vote: Release ORAS-go v1.2.6: https://github.com/oras-project/oras-go/issues/796 (Sylvia) - Review [ORAS v1.3.0 milestone](https://github.com/oras-project/oras/milestone/19) and discuss ORAS v1.3.0 (alpha-beta-rc-stable) timeline (Feynman) - Demo: auto-generation of CLI help reference doc (Terry), tentative ### Notes - We triaged all issues marked in ORAS v1.3.0 and identified this list as the major work items. It has been reflected in [ORAS v1.3.0 milestone](https://github.com/oras-project/oras/milestone/19). - We skipped the Demo of auto-generation of CLI help reference doc since Terry was not able to join the meeting ## July 9, 2024 We skipped this meeting since no topics collected and several ORAS maintainers are on vacation. ## Jun 25, 2024 ### Attendees: - Feynman Zhou - David Wheeler - Yi Zha - Xiaoxuangwang - Terry Howe - Sylvia Lei - Billy - Shiwei Zhang - Sajay Antony ### Agenda Items - Brainstorming on the scnearios of image index management support (Feynman) - Proposal to review the community activity metrics using LFX Insights tool (Feynman) - Onboarding a new sub-project [oci-rust-client](https://github.com/oras-project/oci-rust-client) (Taylor & Feynman) ### Notes - We discussed and aligned that multi-arch image management is the major scenario of image index. - Feynman will create a report based on the metrics provided by LFX Insights tool - Taylor transferred the project to ORAS org https://github.com/oras-project/rust-oci-client ## Jun 11, 2024 ### Attendees: * Andrew Block * Billy Zha * Feynman Zhou * Terry Howe * Xiaoxuan Wang ### Agenda Items - Vote: Request for krustlet/oci-distribution to move under the oras-project org: https://github.com/oras-project/community/issues/59 - User stories of supporting OCI in Argo CD (Andrew Block) - Ad-hoc discussion on recent PR review and issues - setup-oras [v1.2.0 release](https://github.com/oras-project/setup-oras/releases/tag/v1.2.0) ### Notes - Based on the vote status, ORAS maintainers agreed to accept krustlet/oci-distribution to be a sub-project of ORAS and move it to oras-project org - Andrew Block will share the proposal issue of ArgoCD OCI support in the ORAS community and request ORAS maintainers to review it - Billy and Xiaoxuan walked through the setup-oras [v1.2.0 release notes](https://github.com/oras-project/setup-oras/releases/tag/v1.2.0) ### Notes ## May 28, 2024 ### Attendees: * Andrew Block * Billy Zha * Feynman Zhou * Shiwei Zhang * Sylvia Lei * Sajay Antony * Taylor Thomas * Terry Howe * Xiaoxuan Wang ### Agenda Items - ORAS v1.2.0 stable [release vote](https://github.com/oras-project/oras/pull/1393) and things post the release (Billy) - Proposal: Request for krustlet/oci-distribution to move under the oras-project org: https://github.com/oras-project/community/issues/59 (Taylor Thomas) - Make the final decision on whether to accept the [ORAS Artifact Explorer](https://github.com/oras-project/community/issues/54#issuecomment-2020825246) as a sub-project or not (Feynman) - ORAS website enhancements and PR review - KubeCon China and KubeCon NA 2024 plan ### Notes - ORAS v1.2.0 stable release process could be started after the [release vote PR](https://github.com/oras-project/oras/pull/1393) merged into main branch - [krustlet/oci-distribution donation proposal](https://github.com/oras-project/community/issues/59) is now opening vote for 7 days. The vote result will be announced by next Tuesday. - Feynman will raise a PR to add a governance doc for new repository/sub-project onboarding process - ORAS maintainers agreed to accept the [ORAS Artifact Explorer](https://github.com/oras-project/community/issues/54#issuecomment-2020825246) as a sub-project. Now we could start the repo onboarnding process - ORAS maintainers to review Terry's PR that supports auto-generation of CLI command manual pages https://github.com/oras-project/oras-www/pull/319 - Terry and @sabre1041 agreed to prepare the KubeCon NA CFP by June 9. @Feynman will assist them to prepare for the draft proposal ## May 15, 2024 ### Attendees: * Feynman Zhou * Shiwei Zhang * Sylvia Lei * Sajay Antony * Billy Zha * Terry Howe * Xiaoxuan Wang ### Agenda Items - Congrats Terry Howe for being a sub-project maintainer for ORAS website repo! - ORAS v1.2.0 RC.1 release vote https://github.com/oras-project/oras/pull/1381 - Ready to archive the ORAS [artifact-spec repo](https://github.com/oras-project/artifacts-spec/pull/122) - Shall we continue to accept the [ORAS Artifact Explorer](https://github.com/oras-project/community/issues/54#issuecomment-2020825246) as a sub-project? - Heads-up: We will be kicking off the ORAS v1.3.0 based on this [proposal](https://github.com/oras-project/oras/discussions/1311) after the ORAS v1.2.0 RC.1 release ### Notes - We identified two improvements for the ORAS website - Support version control: Feynman will take this and create an issue to track - Automate the CLI reference doc generation has been assigned to Terry: https://github.com/oras-project/oras-www/issues/287 - We will wait @sabre1041 to review the ORAS v1.2.0 RC.1 release vote based on his comment in the Slack channel https://github.com/oras-project/oras/pull/1381. - @shizh archived the [artifact-spec repo](https://github.com/oras-project/artifacts-spec/) as it had the majority of approval from the org maintainers. - There is an [online preview environment](https://artifact-explorer.azurewebsites.net/) for the [ORAS Artifact Explorer](https://github.com/VasuDevrani/artifact-explorer-oras). Sajay and Andrew are in favor of accepting it as a sub-project project (experimental) under ORAS. We encourage more ORAS maintainers to review the portal and make decision in this [issue](https://github.com/oras-project/community/issues/54#issuecomment-2020825246). - We will be kicking off the ORAS v1.3.0 based on this [proposal](https://github.com/oras-project/oras/discussions/1311) after the ORAS v1.2.0 RC.1 release ## Apr 16, 2024 ### Attendees: * Feynman Zhou * Shiwei Zhang * Sylvia Lei * Sajay Antony * Yi Zha * Billy Zha * Andrew Block * ToddySM ### Agenda Items - Review remaining items of ORAS v1.2.0 RC.1. Discuss and align ORAS v1.2.0 RC.1 release plan (@Feynman ) - Short demo of mTLS support in ORAS v1.2.0 ( @sabre1041 ) - ORAS artifact explorer status and [response](https://github.com/oras-project/community/issues/54#issuecomment-2020825246) from the contributor (Feynman) - KubeCon China CFP collaboration ( @Feynman @sabre1041 ) - ### Notes - @sabre1041 demonstrated how mTLS works in ORAS v1.2.0-rc.1 and he mentioned he will create an issue to add mTLS support for `oras login` - We agreed to collaborate on [KubeCon China CFP](https://events.linuxfoundation.org/kubecon-cloudnativecon-open-source-summit-ai-dev-china/program/call-for-proposal/) and @sabre1041 mentioned he will be able to draft the CFP in a Google Doc first. - We went through the remaining issues and PRs in ORAS v1.2.0 RC.1 and we are now targeting finalize all of those issues/PRs BOW. - @Feynman demonstrated how [ORAS artifact explorer](https://github.com/VasuDevrani/artifact-explorer-oras) works right now and recommended maintainers to consider accepting the ORAS artifact explorer as an ORAs sub-project. We will give more time for maintainers to try and evaluate the project value. - ## Mar 26, 2024 ### Attendees: * Feynman Zhou * Shiwei Zhang * Sylvia Lei * Sajay Antony * Yi Zha * Billy Zha * Andrew Block ### Agenda Items: - ORAS-go v2.5.0 released! - Share key findings at KubeCon EU - Propose to archive two repositories ([oras-credentials-go](https://github.com/oras-project/oras-credentials-go) and [artifacts-spec](https://github.com/oras-project/artifacts-spec)) - Continue to discuss the v1.3.0 milestone and way forward: https://github.com/oras-project/oras/discussions/1311 ### Notes: - ORAS maintainers agreed to archive two repositories ([oras-credentials-go](https://github.com/oras-project/oras-credentials-go) and [artifacts-spec](https://github.com/oras-project/artifacts-spec)). @sajay will update the archival PR in [artifacts-spec](https://github.com/oras-project/artifacts-spec) and @shizh will submit an issue to archive the oras-credential-go - Feynman will cross-post the ORAS-go v2.5.0 release news in OCI slack workspace - ORAS maintainers to review the v1.3.0 milestone proposal: https://github.com/oras-project/oras/discussions/1311 **Recording**: https://www.youtube.com/live/2iiOc8JjUOw?si=sYOv6jBWwF4L40h5 ## Mar 19, 2024 (deferred to Mar 26 due to KubeCon EU) ### Attendees: - _add yourself_ ### Agenda Items: - Vote for the release `oras-go v2.5.0` - For OCI `image-spec v1.1.0` and `distribution-spec v1.1.0` ### Notes: - _meeting minutes_ ## Mar 5, 2024 ### Attendees: - Andrew Block - Feynman Zhou - Shiwei Zhang - Sajay Antony ### Agenda: - Discuss and align the roadmap for ORAS v1.3.0 with ORAS maintainers (Feynman) - Collect ideas for KubeCon EU demos (Feynman) ### Notes: - We had an ad-hoc discussion on ORAS v1.3.0 milestone and aligned that these parts could be potential enhancements in v1.3.0: - ORAS verbose log enhancements: I am working on a Spec - X509 Authentication with OCI registry: Andrew will own this issue - ORAS annotating experience enhancement: We need a Spec to define related scenarios and desired experience **Recording**: https://youtube.com/live/ps5i5JPwV-4 ## Feb 20, 2024 ### Attendees: - Andrew Block - ToddySm - Feynman Zhou - Yi Zha - Shiwei Zhang - Sajay Antony ### Agenda Items: - OCI image spec v1.1.0 and distribution spec v1.1.0 are now avaiable. [What changes we should make in ORAS?](https://github.com/oras-project/oras/issues/1274) (Feynman) - Referrer support for layouts https://github.com/oras-project/oras/issues/1273 ### Notes: - Feynman will create to proposal to document the ORAS CLI changes - Andrew suggests that prepare a blog post for OCI Spec v1.1.0 support after ORAS upgrades to OCI Spec v1.1.0 - Sajay suggests ORAS maintainers follow up the discussion in https://github.com/opencontainers/image-spec/pull/1171 ## Feb 5, 2024 Skipped due to no agenda and attendees ## Jan 23, 2024 ### Attendees: - Shiwei Zhang - ToddySM - Feynman Zhou - Sylvia Lei - Yi Zha - Billy Zha ### Agenda Items: - Formatted JSON output demo and collect feedback from the community (Billy) - ORAS dotnet SDK v0.2.0 release and next step (Shiwei) - Propose to do an annual retro for the ORAS community in 2023 and collect community metrics (Feynman) - oras-go upgraded the OCI distribution spec to v1.1.0 rc.4 ### Notes: - We discussed the [formatted ORAS CLI output ](https://github.com/oras-project/oras/pull/1199) experience only in the meeting. Toddy left a few questions in the PR and Feynman will resolve them accordingly ## Jan 9, 2024 ### Attendees: - _add yourself_ - Feynman Zhou - Jesse Butler - Sydney Karimi - Andrew Block - Dr. Kyle Tarplee - Shiwei Zhang - Billy Zha - Sylvia Lei - Marcin Jastrzebski - Yi Zha ### Agenda Items: - Minor PR review for oras-dotnet test updates - https://github.com/oras-project/oras-dotnet/pull/32 [sajay] - Proposal: Argo CD integration with ORAS (Andrew) - [Argo CD OCI Proposal](https://github.com/argoproj/argo-cd/blob/master/docs/proposals/native-oci-support.md) - [Planning Document](https://docs.google.com/document/d/1AJfRHxhnDo5ojeHsi2Q19FAUTucz1QJKAPtBbcxkbF8) - ORAS v1.2.0 [status update](https://github.com/oras-project/oras/discussions/1119) and release ETA (Feynman) - Propose to do an annual retro for the ORAS community in 2023 and collect community metrics (Feynman) - Discuss the GC options for Tag based schema https://github.com/oras-project/oras/issues/1228 - [sajay/jessie/toddy/shiwei] - Oras Dotnet progress?? [sajay/marcin] ### Notes: - Jesse will write a proposal in a PR to resolve [issue #1228](https://github.com/oras-project/oras/issues/1228) - Feynman proposed the ETA of ORAS v1.2.0 is Feb 6. Feynman will summarize the status updates of v1.2.0 in this [proposal](https://github.com/oras-project/oras/discussions/1119) - Andrew shared the proposal of Argo CD integration with ORAS and is seeking for volunteers to contribute to its implementation - We will discuss the oras-dotnet progress offline **Meeting recording**: https://youtu.be/sRv6ZTus5gk ## Dec 5, 2023 ### Attendees: * Asmit Malakannawar * Feynman Zhou * Shiwei Zhang * Sylvia Lei * Billy Zha * Andrew Block ### Agenda - Request feedback on two spec (Feynman) - [ORAS CLI Error Handling and Message Guideline](https://github.com/oras-project/oras/pull/1163) - [Formatted ORAS CLI output ](https://github.com/oras-project/oras/pull/1199) - Suggest having an annual retro in the next community meeting in Jan 2024 (Feynman) - Should we fork the [ORAS artifact explorer](https://github.com/VasuDevrani/artifact-explorer-oras) into ORAS org as no response from Vasu after the [vote](https://github.com/oras-project/community/issues/54)? ### Meeting notes - ORAS maintainers will continue to review these two specifications: - [ORAS CLI Error Handling and Message Guideline](https://github.com/oras-project/oras/pull/1163) - [Formatted ORAS CLI output ](https://github.com/oras-project/oras/pull/1199) ## Nov 21, 2023 (Cencelled) ### Attendees: ### Agenda - [ORAS CLI Error Handling and Message Guideline](https://github.com/oras-project/oras/pull/1163) - Suggest forking the [ORAS artifact explorer](https://github.com/VasuDevrani/artifact-explorer-oras) into ORAS org as we have not receive any response from Vasu after [vote](https://github.com/oras-project/community/issues/54) ### Meeting notes ## Nov 7, 2023 ### Attendees: - Shiwei Zhang - Sajay Antony - Feynman Zhou - Sylvia Lei - Terry Howe - Kyle Tarplee - Yi Zha - Billy Zha ### Agenda Items - Triage [recent ORAS issues](https://github.com/oras-project/oras/issues?q=is%3Aissue+is%3Aopen+label%3Atriage) and decide which milestone for each issue - Propose having a regular rotation mechanism for community meeting moderator ## Notes - We agreed that create a v1.3.0 milestone. There are 4 remaining issues that ORAS maintainers will need to continue to triage offline - ORAS-go maintainers need to continue review two PRs from Kyle - Feynman will create a GitHub Discussion to start regular rotation mechanism for community meeting moderator. ORAS sub-project maintainers and org-level maintainers are welcome to pick this role ## Oct 23, 2023 ### Attendees: - Shiwei Zhang - Sajay Antony - Feynman Zhou - Sylvia Lei - Terry Howe ### Agenda Items: - Which output formats need to be considered for the scripting scenario? We have received a feature request on JSON ouput as discussed in [issue #638](https://github.com/oras-project/oras/issues/638). ### Meeting notes - We discussed the requirements and challenges about output format for scripting scenario. @Feynman will start working on the spec based on Andy Gee's [preliminary version](https://hackmd.io/@plooploops/SkJn5qONs). ## Oct 10, 2023 ### Attendees: - Feynman Zhou - Shiwei Zhang - Andrew Block - ToddySM - Sylvia Lei - Sajay Antony - Billy Zha - Anurag - Yi Zha - _add yourself_ ### Agenda Items: - [Sign release artifacts with cosign](https://github.com/oras-project/oras/issues/1110) - Anurag - [SLSA Level 3 Compliance for ORAS](https://github.com/oras-project/oras/issues/1114) - Batuhan Apaydın - [ORAS credential docs for WG-Auth for OCI oras-credentials-go/#97](https://github.com/oras-project/oras-credentials-go/issues/97) - @sajay ### Notes: - ORAS maintainers to vote on [Sign release artifacts with cosign](https://github.com/oras-project/oras/issues/1110) - We need Batuhan (Developer Guy) to provide more information and reasons for his proposal [SLSA Level 3 Compliance for ORAS](https://github.com/oras-project/oras/issues/1114) - Sylvia will follow up on [ORAS credential docs for WG-Auth for OCI oras-credentials-go/#97](https://github.com/oras-project/oras-credentials-go/issues/97) and create a doc to add oras-credentials-go to OCI/WG-Auth ### Recording TBD ## Sep 12, 2023 ### Attendees: - Feynman Zhou - Billy Zha - Sylvia Lei - Shubham Singh - Yi Zha - Sajay Antony - _add yourself_ ### Agenda Items: - Recursive copy for index - https://github.com/oras-project/oras/issues/816 (Sajay) - Recommend moving it to 1.2 milestone. - Should we create an experimental repository for `oras-go`? (Sylvia) - See [discussion](https://github.com/oras-project/oras-credentials-go/discussions/93) - Confirm the ORAS CLI v1.2.0 milestone. See proposal https://github.com/oras-project/oras/discussions/1119 (Feynman) - Release [setup-oras github actions](https://github.com/oras-project/setup-oras) v1.1.0 ### Notes: - Discussed - ORAS maintainers to vote on the proposal of creating a repository for ORAS artifact explorer, see [issue](https://github.com/oras-project/community/issues/54) - This is currently blocked on votes https://github.com/oras-project/community/issues/54#issuecomment-1716717989. We are waiting for @stevelasker @sabre1041 to vote on the issue - ORAS maintainers to review the ORAS CLI v1.2.0 milestone proposal https://github.com/oras-project/oras/discussions/1119 - @Feynman to check whether we need org-level maintainers to vote on releasing [setup-oras github actions](https://github.com/oras-project/setup-oras) v1.1.0 the ORAS governance doc ## Aug 28, 2023 ### Attendees: - Deepesha Burse - Shiwei Zhang - Feynman Zhou - Vasu - Sylvia Lei - Billy Zha - Terry Howe - Asmit Malakannawar - Yi Zha - Sajay Antony ### Agenda items - Release [ORAS-go v2.3.0](https://github.com/oras-project/oras-go/milestone/14) - Visit ORAS CLI v1.2.0 milestone and define the scope - Ubuntu Snap installation [issue #1079](https://github.com/oras-project/oras/issues/1079) reported by the user - Request review on the [PR #250](https://github.com/oras-project/oras-www/pull/250/files) raised by Sajay - Request ORAS maintainers to vote on the proposal of creating a repository for ORAS artifact explorer, see [issue](https://github.com/oras-project/community/issues/54) ### Meeting Notes - ORAS maintainers to vote on the proposal of creating a repository for ORAS artifact explorer, see [issue](https://github.com/oras-project/community/issues/54) - Billy to investigate a workaround for the Snap installation [issue #1079](https://github.com/oras-project/oras/issues/1079) ## Aug 15, 2023 ### Attendees: - Deepesha Burse - Shiwei Zhang - Feynman Zhou - Vasu - Sylvia Lei - Billy Zha - Terry Howe - Asmit Malakannawar - Yi Zha - Sajay Antony ### Agenda items - ORAS Artifact Explorer demo as requested in [issue](https://github.com/oras-project/oras-www/issues/158) - Released [ORAS v1.0.1](https://github.com/oras-project/oras/releases/tag/v1.0.1) last week - [ORAS v1.1.0-rc.2](https://github.com/oras-project/oras/milestones/v1.1.0) status - [ORAS-go v2.3.0](https://github.com/oras-project/oras-go/milestone/14) will be released in a week - Requeust maintainers to help review PRs from [oras-www](https://github.com/oras-project/oras-www/pulls) and [oras/community](https://github.com/oras-project/community/pulls) - https://github.com/oras-project/oras-www/pull/240 [sajay] ### Notes: - [x] ORAS maintainers to review PRs [oras-www](https://github.com/oras-project/oras-www/pulls) and [oras/community](https://github.com/oras-project/community/pulls) - [ ] Feynman to create an issue to request to create a new repository for ORAS Artifact Explorer - [x] ORAS maintainers to release [ORAS v1.1.0-rc.2](https://github.com/oras-project/oras/milestones/v1.1.0) by Aug 25 - [ ] ORAS-go maintainers to release [ORAS-go v2.3.0](https://github.com/oras-project/oras-go/milestone/14) ### Recording Video: https://www.youtube.com/watch?v=9Mc_ZChp4gc ## Aug 1, 2023 ### Attendees: - Aman - Billy Zha - Feynman Zhou - Sylvia Lei - Sajay Antony - Shiwei Zhang - Terry Howe - Yi Zha - ### Agenda Items: - Ask to close issue [1011](https://github.com/oras-project/oras/issues/1011) if there is no concerns on releasing OCI 1.1.0 (Sajay) - Request to adjust release plan of ORAS CLI, see [issue 1038](https://github.com/oras-project/oras/issues/1038) (Feynman) - Demo progress bar UX of ORAS CLI as requested in [issue 893](https://github.com/oras-project/oras/issues/893) (Billy) - Request review and for the [release management doc](https://github.com/oras-project/community/pull/53) (Feynman) - Automating docs for oras-cli (Aman) - Automate Package installation - Homebrew, Winget (Aman) - Digest the tagged manifest [pr 1034](https://github.com/oras-project/oras/pull/1034) ### Notes: - Sajay shared the [OCI Authentication and Authorization Working Group](https://hackmd.io/YyhWh7X_RuCod0i0mGxVLg) - @Aman to follow up on the ORAS installation on Package managers (Homebrew and Winget) - ORAS maintainers to provide feedback on the [progress bar PoC](https://github.com/oras-project/oras/discussions/1042.) from Billy - We decided to adjust release plan as described in [issue 1038](https://github.com/oras-project/oras/issues/1038) since we have a supermajority of approval from ORAS CLI maintainers ### Recording TBD ## July 18, 2023 ### Attendees: - Andrew Block - Billy Zha - Feynman Zhou - Sylvia Lei - Sajay Antony - Shiwei Zhang - Terry Howe - ToddySM - Yi Zha ### Agenda Items: - Celebrate 1k GitHub stars and [80 contributors](https://oras.devstats.cncf.io/d/22/prs-authors-table?orgId=1&var-period_name=Last%20year&var-repogroup_name=All) - Follow up on the actions of the last meeting - Release ORAS v1.1.0 - Automate the ORAS upgrade in package manager systems [issue 1025](https://github.com/oras-project/oras/issues/1025) - Logging improvements for ORAS - https://github.com/oras-project/oras/issues?q=is%3Aissue+is%3Aopen+label%3Alogging - Request to create a new repository for ORAS Artifact Explorer project - ORAS v1.2.0 timeline - Stale PR automation - https://github.com/oras-project/oras/pull/1024 - New release process: https://github.com/oras-project/oras/issues/1013 ### Notes and actions: - [ ] Billy to create a new issue to request vote for releasing ORAS v1.1.0 - [x] Feynman to follow up on automating the ORAS upgrade in package manager systems [issue 1025](https://github.com/oras-project/oras/issues/1025) after ORAS v1.1.0. It will not block ORAS CLI v1.1.0 release - [x] Logging improvements for ORAS are planned in ORAS v1.2.0 and ORAS v2.0.0 (if the issues are breaking changes) respectively. Sajay also shared his proposal of CLI Output Guidelines for ORAS CLI https://hackmd.io/fvLyJ4NLSkKJug1JpOcsbA - [ ] Feynman to create an issue to request to create a new repository for ORAS Artifact Explorer project - [ ] ORAS v1.2.0 release ETA will be discussed in the next bi-weekly meeting ### Recording TBD ## 2023-01 - 2023-06 - https://github.com/oras-project/community/blob/main/meeting-notes-archive/meeting-notes-2023-01-to-2023-06.md ## 2021 - 2022 - https://github.com/oras-project/community/blob/main/meeting-notes-archive/meeting-notes-2021-to-2022.md # Meeting Notes Template (template for copying) ## Meeting Date ### Attendees: - _add yourself_ ### Agenda Items: - _add your topics_ ### Notes: - _meeting minutes_

Syntax	Example	Reference
# Header	Header	基本排版
- Unordered List	Unordered List
1. Ordered List	Ordered List
- [ ] Todo List	Todo List
> Blockquote	Blockquote
Bold font	Bold font
Italics font	Italics font
~~Strikethrough~~	~~Strikethrough~~
19^th^	19^th
H~2~O	H₂O
++Inserted text++	Inserted text
==Marked text==	Marked text
[link text](https:// "title")	Link
![image alt](https:// "title")	Image
`Code`	`Code`	在筆記中貼入程式碼
```javascript var i = 0; ```	`var i = 0;`
:smile:		Emoji list
{%youtube youtube_id %}	Externals
$L^aT_eX$	L^aT_eX
:::info This is a alert area. :::	This is a alert area.