Governance Meeting, December 11, 2023

Community
,
1

2023-12-11T19:00:00Z

11 Dec 2023

Attendees :busts_in_silhouette:

Upcoming Calendar :calendar:

  • Next LTS: 2.426.2, December 13, 2023
    • Kris Stern is the release lead, backporting pull request submitted
    • Release candidate delivered Wednesday November 29, 2023
  • Next weekly release: 2.436
  • Two week break in LTS schedule: 2.426.3, January 24, 2024 (6 weeks after 2.426.2 instead of the usual 4 weeks)
  • Next major events:
    • FOSDEM 2024 - February 2-4, 2024
      • Jenkins Contributor Summit Friday February 2, 2024
      • FOSDEM conference Saturday and Sunday February 3-4, 2024

Agenda

Action Items

  • Basil create the attribution entries for the downloads page
    • Created a sponsors page that lists all sponsors, clarifies the types of sponsors and the levels of sponsorship
    • Allow us to create subsets of that list on other pages
      • Home page
      • Downloads page
    • Generic sponsors page has settled on several levels of sponsors
    • Need to review contributions from the last year and sort the sponsors into those levels
    • Once we choose the naming, we classify the existing sponsors into those levels, and update the draft pull request to match their level
    • Basil is classifying the sponsors by levels
      • If Basil needs more data, he’ll ask for the data
  • Damien create issue to switch agent implementation to virtual machines (done)
  • Alexander Brandes and Ullrich Hafner run the officer and board elections for 2023 (done)
    • Timeline
    • All work is complete. Alex provided a blog post of the results. Rights and roles are assigned. Permissions removed from Oleg at his exit from the board
    • Action item is complete!
  • Mark Waite submit jenkins.io pull request to combine subprojects and SIGs into a single concept - “working groups”
    • More pull requests needed
  • Retire the Chinese Jenkins site (Kevin Martens)
    • Kevin has started his local Kubernetes development environment to prototype the transition
      • Need to understand the configuration, will then meet with Damien to plan removal
      • Considering URL redirects as a way to map pages from Chinese URL to English URL
    • Mark still needs to start his local Kubernetes development environment to prototype the transition
    • Once prototyped, then Kevin and Mark meet with Damien Duportal to review next steps
    • Kevin Martens (Docs Officer) tracking help desk ticket to replace the Chinese pages with redirects to the English pages
      • Kevin working with the infrastructure team on the Helm charts implementing the Chinese site
  • Mark Waite draft a proposal to the board for license policy and phrasing changes
    • Basil submitted a governance document pull request to accept public domain licenses
      • Board approval of the addition of public domain licenses to the governance document
        • Mark Waite
        • Alexander Brandes
        • Basil Crow
        • Ullrich Hafner
      • Allows the public domain json library to be used
    • What license should be used for a library plugin?
      • Choose the alternative next meeting, close the action item
      • License of the wrapped library (if wrapped library has no separate code, then seems likely)
      • MIT license as used by Jenkins plugins (if abstraction layer in the plugin, then MIT for ours?)
    • Review responses from other projects to license mixture (e.g. PyPI)
      • Mostly focuses on OSI approved licenses but include a separate category for other licenses
        • Have categories for freeware, public domain, and more
        • Reasonable precedent for allowing a wider range of licenses
        • Needs more discussion, but being more permissive is working for PyPI
        • Newer licenses may be more controversial

Community activity

  • Jenkins contributor spotlight - Kevin Martens

  • Artifactory bandwidth reduction project - Mark Waite

    • 20 TB of bandwidth used in November, 1/3 due to cached artifacts from Apache Maven Central
      • JFrog has asked that we remove the cached artifacts from the Jenkins public virtual repository
    • Artifactory brownout last Wednesday 6 Dec 2023
      • Jenkins core build passed during brownout
      • Repository permissions updater build failed during brownout due to missing Atlassian Jira integration library
      • Top 250 most popular plugin repositories checked during brownout
        • 235 repositories built without issue
        • Failures due to Atlassian Jira integration jar files missing
          • Artifactory plugin
          • Blue ocean plugin
          • Configuration as code plugin
          • Jira plugin
        • Failures due to Atlassian Crowd2 jar files missing
          • Configuration as code plugin (files removed from most recent plugin release)
        • Failures due to use of Gradle to build plugin
          • Gradle plugin - rely on Gradle plugin maintainers to check for compatibility
        • Failures due to outdated tooling
          • Docker build publish plugin
          • Groovy postbuild plugin
          • Job import plugin
          • Pipeline AWS plugin
          • Pipeline multibranch defaults plugin
          • ssh plugin (also has open security vulnerabilities)

  • Java 11, 17, and 21 in Jenkins - Mark Waite

    • 2+2+2 Java support plan - Jenkins enhancement proposal submitted
      • Include the steps of the Java migration as part of the JEP (work estimate, tasks, etc.)
        • Mark has much more work to do here
          • Adding a Java version (use Java 21 addition as the pattern)
          • Making a Java version the recommended version (use Java 17 as the pattern)
          • Dropping support for a Java version (refer to Java 11 for ideas)
        • Further refinements to be done in the JEP
    • Key dates
      • Oct 2, 2024 - Last Jenkins LTS release to support Java 11
      • Oct 30, 2024 - First Jenkins LTS to require Java 17
      • Oct 31, 2024 - end of Java 11 support by Jenkins project

Governance Topics

  • Board and officer elections - Alexander Brandes

  • Artifactory bandwidth reduction project reopened

    • Suspend distribution of Crowd 2 plugin (due to closed source dependencies)
    • Suspend distribution of Confluence publisher plugin (due to closed source dependencies)

  • Defaced issue reports - help desk 3851

    • User “Sintayew” applied one or more bulk operations to over 900 Jenkins issues Dec 6, 2023
      • User has been inactivated
      • Bulk operations no longer allowed for standard users
    • Recovery alternatives
      • Do nothing?
      • Restore from backup prior to Dec 6, 2023, lose all changes since Dec 6, 2023
        • restore damaged epics with the restore from backup (some epics became bugs, lost relationship between tasks and projects)
      • Manually reverse the most obvious defacement, accept damage, retain changes since Dec 6, 2023
    • Linux Foundation ticket IT-26276 opened to request alternatives and their recommendation
      • Mark request a restore from backup by the Linux Foundation

  • Attribution request for downloads page from JFrog

    • Basil has submitted a draft pull request for a sponsors page
      • Proposes multiple levels
        • Original proposal
          • Anchor
          • Premier
          • Partner
          • Supporter
          • Associate
          • Mirror
        • Alternate proposal (Olympic medals + 2 extra)
          • Anchor
          • Gold
          • Silver
          • Bronze
          • Mirror
    • Links from the downloads page do not use https://repo.jenkins-ci.org
    • Good to highlight our sponsors (like JFrog) in multiple ways
    • Proposed to list sponsors at the end of the downloads page similar to the end of the root page
      • Include links to a description of the architecture used to distribute Jenkins core and Jenkins plugins

  • Social media posting status report

    • Social media posting volume is less in the last two weeks than in the previous two weeks

  • Azure credits donation - Damien Duportal

    • Jenkins infrastructure help desk ticket is tracking progress
    • Successfully used some donated credits in November, 2023
    • Budget estimates shared with Continuous Delivery Foundation
    • October and November Azure expenses were less than the CDF budgeted amount