# conda-forge core meeting 2022-04-20

Add new agenda items under the `Your __new__() agenda items` heading

[last weeks meeting](https://hackmd.io/fMqZ_QomQc26f-lqxCKCyw)
[What time is the meeting in my time zone](https://arewemeetingyet.com/UTC/2020-08-26/17:00/w/Conda-forge%20dev%20meeting#eyJ1cmwiOiJodHRwczovL2hhY2ttZC5pby9wUk15dFVKV1FmU3NJM2xvMGlqQzJRP2VkaXQifQ==)
Meeting info:
* To join the video meeting, click this link: https://zoom.us/j/9138593505?pwd=SWh3dE1IK05LV01Qa0FJZ1ZpMzJLZz09
* Otherwise, to join by phone, dial [phone] and enter this PIN: 828 997 153#
* To view more phone numbers, click this link: https://tel.meet/ijv-qsvm-tvn?hs=5

## Attendees

| Name | Initials | GitHub ID | Affiliation |
| ------------------ | -------- | -------------- | --------------------------- |
| Daniel Ching | DJC | carterbox | Argonne National Laboratory |
| Katherine Kinnaman | KK | kathatherine | Anaconda |
| Jaime Rodríguez-G. | JRG | jaimergp | Quansight |
| Travis Hathaway | TH | travishathaway | Anaconda |
| Matthew Becker | MRB | beckermr | cf |
| Cheng H. Lee | CHL | chenghlee | Anaconda |
| Keith Kraus | KJK | kkraus14 | Voltron Data |
| Eric Dill | ED | ericdill | Voltron Data |
| Marius van Niekerk | MvN | mariusvniekirk | Voltron Data |
| Dave Clements | DPC | tnabtaf | Anaconda |
| Jon Velando | JV | rigzba21 | IC |

18 people total.

### Standing items

* [x] intros for new folks on the call

* [x] (FF) budget
* current approvals?
* Whenever updated numbers land, please screenshare and show the budget.
* Link is in Keybase (numfocus_spreadsheets.txt)
* something something open collective. numfocus sent out an email for onboarding

* [x] open votes
* none, but MRB will be starting a vote soon

* [x] 2022 Outreachy / GSoC
* Community accepted
* [Project proposals](https://hackmd.io/uO6vV2V7T8eDyagZ_y7iQA#Project-2-Grayskull-and-Friends) due Tuesday/Wednesday March 22 (Americas) / March 23 (Europe)
* In addition to project propsal also need contribution tasks
* And Channels for potential interns to communicate with us.
* Two projects
* Grayskull and Friends, Jannis, and Marcelo (pyproject.toml support)
* Doc, Matt and Katherine
* questions:
*  
* todos:
* Have people got time to support Grayskull work? (JL, DPC will follow up)
* [ ] KK - do we have a code of conduct?
* [ ] MRB and KK will have their own meeting around proposals
* not much else to talk about for now until the intern starts

- [x] (MRB) numfocus TOS draft
- if you're on core, draft of TOS has been sent to email list.
- Pam has some questions that we (core) needs to respond to.
- Need to be sensitive on pushing too much onto the community
- TODO: Everyone on core needs to read, comment or otherwise be OK with the email from Pam
- TODO: Get Feedback from core team by next core meeting
- Email title: "Draft of ToS for your review"

### From previous meeting(s)

### Your __new__() agenda items
- [x] (JL / WV) Update on conda-forge as OCI.
- MRB - this is an update to conda
- MRB - we should start uploading some packages to get a sense of how this works
- WV: talked a bunch at pycon germany.
started mirroring all packages starting with "p".
trying to figure out how much load github can handle.
next steps are to add repodata to those mirrors.
we have "a", "b", "c", and "p" mirrored
- [x] (ED / JV) Getting involved in supply chain stuff for conda-forge
- JV: More looking for how to get started / how to get more involved.
For packaging signing need to talk to anaconda.org.
if we were using quetz we could do it - that's a wolf / sylvain thing.
- IF: What would you gain by signing a package in CF at least. anaconda.org I understand, there's a company behind them. for CF there's literally thousands of people contributing packages. what does a signing mean?
- SC: Whatever is source of truth we can cryptographically guarantee that mirrors are equivalent to the
- WV: If there's a company like nvidia publishing packages on nvidia they might want to sign them
- KK: Isn't it that no company is publishing packages directly but they're contributing packages.
- MRB: We could allow companies to upload keys to the recipe
- SC: Could develop an OSS version of package signing in Quetz.
- CJ: cf as some instance of IAAC entity like terraform would be interesting
- https://openssf.org/blog/2022/04/19/your-favorite-software-repositories-now-working-together/
- supply chain security
- [x] (DJC) Windows Docker Containers for CI
- [ ] https://github.com/conda-forge/docker-images/pull/209
- [ ] Is this a valuable engineering effort?
- [ ] Size limits (partially cached by Microsoft on Azure)?
- [ ] License issue of creating a docker image containing Vistual Studio?
- [ ] (WV) CZI grant (two proposals)
- submitted yesterday
- Quantstack + quansight. 3 pillars:
- consolidating package metadata (libcfgraph, cf-countyfair, etc.). goal is to revamp quetz status page
- terraforming conda-forge to have infrastructure as code. reduce risk by being able to reprovision
- OCI stuff
- 2 year grant for quantstack and quansight
- quantstack - adding wasm toolchain including fortran support. if that's selected then we'll have some time to work on emscripten and fortran support, etc.
- MRB - are we ready to be on the hook for a quetz server? this has been one of the big things that has constrained the work in the past.
- WV - with this grant we'll have more experience with terraform and gha to administer servers and services.

### Pushed to next meeting
- [ ] TODO: Feedback on TOS from core team by next core meeting

### Active votes

### CFEPs

* [cfep-12](https://github.com/conda-forge/cfep/pull/23) Removing packages that violate the terms of the source package
* Stalled since May 26, 2020
* Active debate about moving to "broken" vs deleting from conda-forge channel
* Active vote, ends on 2020-03-11
* What were the results of the vote?
* Did we hear back from NumFOCUS? they did the legal seminar which is recorded

### TODOs
[2022-04-05](https://hackmd.io/CqkOlf0XQMOh23Wnmt9qTQ)

* TODO: Articulate suggested mechanism for "so you're thinking about taking a contract to work on conda-forge". tl;dr is you should work on a design doc with the impacted parties (or working groups, or interested folks) on the conda-forge side. Once you have agreement on the scope, delivery timeline, and anything that's needed from the conda-forge volunteer side, go ahead and sign that contract with your payer. if you don't do this first, you may encounter some difficulties finishing delivery of your contractual agreement with your payer.

2022-01-12
* review Qt PR after logs are uploaded
* Add cupython and cuquantum to don't mirror list (MRB done)
* re: `std=c++14`, Wait for Kai to comment and merge the PR
* CJ and Jaime coordinate to Let Maxiconda know that we can't use their logo
2021-12-01
* WV: Set up meet-and-greet call with homebrew team?
* MRB: (repodata patches) make a cron job that runs show_diff.py and posts an issue + commit if it is non-empty
*
2021-11-03
- Self-hosting CI TODOs:
- Change URL from drone.conda-forge.org. Proposals:
- woodpecker.conda-forge.org
- ci.conda-forge.org
- Set up monitoring
- Quantstack is setting up grafana for the mirror
-

2021-10-18

2021-09-22

* [x] (WV): TensorFlow-GPU ready to go, just need to decide if GPU should get prio over CPU?!
* GPU gets prio

2020-11-18
* [ ] (IF/MRB/MV) intel oneAPI
* todo
* [ ] (Nikolay) licensing for opencl_rt
* [ ] (Nikolay) intelmpi ABI compat w/ mpich
* [ ] (MRB/IF) figure out how exactly to package C/C++ compilers
* [ ] (MRB/IF) think about fortran ABI
* [x] (MRB) make conda-forge compilers room (add people including keith)
* [ ] (MB) asking core members to move to "emeritus" status
* [ ] TODO: Eric to set up quarterly check-in for all core members to see if they're interested in remaining "active" or if they want to move to emeritus
* Remove emeritus folks from having access to various credentials (api tokens, twitter password, etc.)? This would require a change to the governance doc.

2020-11-11
* TODO: Think about bringing in JOSS to provide context around how we might best write papers

2020-11-03
* TODO: Check on Forrest Watters permissions for core

2020-10-28
2020-10-21
* [ ] (Marius?) Python 2.7 migration
* ( ) [ ] make a hint
* ( ) [ ] make an announcement
* ( ) [ ] make the hint a lint

2020-10-07
* [ ] Make sure to add the NVBug info to the cudatoolkit package that conda-forge makes (if we make one)

2020-09-09
* [ ] (ED) Update governance docs with similar voting model as what got put into conda-tools (+3 with no -1 is a pass)
* [ ] (SC) Write jinja template to turn institutional partners yaml into a website https://github.com/conda-forge/conda-forge.github.io/blob/master/src/inst_partners.yaml
* [ ] (SC) Document what needs to be done to create an OVH account and get access

2020-08-26
**Docker hub**
* [ ] (JK) Check in on Azure build workers to see if they have the docker hub limitation.
* [ ] (JK) work with dockerhub to see if we can get OSS status
* [ ] Check in again at some point. We haven't heard back as of 2020-09-23

**OVH**
* [ ] Shout-out on twitter at some point. "Thanks forOVHCloud for providing a VM", etc. (maybe after we ship qt on windows with it?)

* [ ] Figure out how to communicate breaking changes to users. Likely should open up an issue immediately for futher discussion. Ping @kkraus, plus capture notes from further up in these meeting notes

* [ ] John K. will update the cuda toolkit feedstock on the git repo to note the NVBug link to the internal NVIDIA issue tracker
* [ ] Jonathan will update docs to note that some non-exhaustive list of packages (like cuda-toolkit, MKL, etc.)
* [ ] Jonathan will review this [PR](https://github.com/AnacondaRecipes/cudatoolkit-feedstock/pull/7)

* [ ] (Kale) schedule conda working group
* [ ] cfep-10 next steps: CJ to call a vote for feedback
* [ ] cfep-06 next steps: Ask staged recipes team to champion this CFEP and move it forward
* [ ] jakirkham & CJ-wright to sync on adding CUDA to the migration bot
* [ ] (Eric) Scheduling Anaconda <-> conda-forge sync on anaconda.org requirements gathering
* Will try and get this scheduled in the next month.
* [ ] (Anthony) Reach out to NumFocus to figure out legal ramifications of not including licenses in files.
* [ ] (Eric) check internally for funding levels for hotels & flying folks from the community in?
* [ ] (Eric) Figure out finances of conda-forge to support themselves?
* [ ] (jjhelmus) Open up CFEP for which python's we're going to support
* [ ] (jakirkham) write a blog post on CUDA stuff we discussed today
* [ ] (jakirkham) update docs on how to add CUDA support to feedstocks
* [ ] (jakirkham) will open an issue on conda-smithy to investigate Drone issues. (ping the aarch team)
* https://github.com/conda-forge/conda-forge.github.io/issues/954
* [ ] (ED) Who we are page? Some combination of a FAQ and a who is everyone. FAQ things like:
* who's the POC for CF <> Anaconda, CF <> NumFocus, CF <> Azure
* who's the POC for the various subteams?
* Informal information: roles, day jobs, bios, the whole nine yards, why you're here, etc.
* Public or internal? I don't really care either way. Anyone feel strongly one way or the other?
* opt-in to public bios
* software carpentry has a large number of instructors and has https://carpentries.org/instructors
* some concern about "yet another place to keep stuff up to date"
* [ ] (ED) document strategies for reproducible environments using conda-forge
* [ ] (UK) Static libraries stuff
* [ ] Add linting hints to builds to find them
* [x] Recommend how to package them -> CFEP-18
* [x] We should write docs saying we don't provide support and this is a bad idea. -> CFEP-18