Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.This meeting:
➤ Is for core developers, initiative contributors, the Drupal Association and anyone interested in the initiative.
➤ Usually happens every other Tuesday at 1700 UTC.
➤ Is done over chat.
➤ Happens in threads, which you can follow to be notified of new replies even if you don’t comment in the thread. You may also join the meeting later and participate asynchronously!
➤ Has a public agenda anyone can add to
➤ *Transcript will be exported and posted* to the agenda issue. For anonymous comments, start with a :bust_in_silhouette: emoji. To take a comment or thread off the record, start with a :no_entry_sign: emoji.
:zero: Who is here today? Comment in the thread below to introduce yourself and tell us why you are joining us.
:one: Do you have any topics to propose for the meeting today? Feel free to propose them in this thread, and then I will give them their own unique threads for discussion. Conversation moving slow? Go ahead and open your own thread in the next numeric order.
0️⃣ Who is here today? Comment in the thread below to introduce yourself and tell us why you are joining us.
| hestenet (he/him) | Tim from the DA, recovering from DrupalCon |
| xjm | :wave: xjm, also recovering |
| tedbow | Ted from Acquia, same, and also from delayed flight getting me home at 3am:pensive: |
| xjm | And I thought my midnight arrivals were bad :disappointed: |
1️⃣ Do you have any topics to propose for the meeting today? Go ahead and open your own thread in the next numeric order.
2️⃣ Core signing mirror - what is the state of testing this out?
| tedbow | Last time I tested at Drupalcon(can’t remember which day) there was problem with the hash validation. I think @drumm said this was known cache problem. Trying again now… |
| hestenet (he/him) | @ergonlogic - anything to summarize here? |
| ergonlogic | Sure. Over the past couple weeks, we've:Added checks to ensure that rugged generate-keys won't overwrite existing keys (along w/ a --force option) (See: #162 for details)Fixed a bug to allow removal of targets cleanly (see #179 for details)Added signature validation whenever we're operating on root metadata (#172)Added a signature threshold validity check (#182), so that we know when partial root metadata is ready to be deployed.Added a command to generate new partial root metadata based on the current one (#163) |
| xjm | I think the main thing is that we consider Autoupdates (along with Project Browser and Recipes) prerequisites for the initiative |
Comments
Comment #5
hestenet