19:02:11 #startmeeting March 2nd Governance Meeting 19:02:11 Let the Jenkins meeting commence! 19:02:27 #topic Discuss what updates should be made to Copyright on source code 19:02:33 Where was the documentation for that robot? 19:02:42 http://meetbot.debian.net/Manual.html 19:02:53 #info First of all, agendas will be up at http://wiki.jenkins-ci.org/display/JENKINS/Governance+Meeting+Agenda - feel free to add items to future agendas. 19:03:07 rtyler: thanks 19:03:43 And I'll give a quick update on the logo contest as well. 19:04:07 re: copyright source code, I guess some of it has to wait until the final org is settled 19:04:26 #info http://wiki.jenkins-ci.org/display/JENKINS/Copyright+on+source+code is our current info. 19:04:44 In the mean time, I guess we'll need to say that "we need you to sign CLA when we are ready, and it'll be something like the one from Apache" 19:04:55 +1 19:05:07 +1 19:05:12 +1 19:05:13 abayer: should that page list licensing of dependencies as well? 19:05:17 I'm fine with an informal agreement for the moment, given that there's nothing formal to agree with. =) 19:05:18 +1 19:05:26 rtyler: I don't think so. That's a separate matter. 19:05:30 kay 19:06:05 I think it's http://www.apache.org/licenses/cla-corporate.txt and http://www.apache.org/licenses/icla.txt (thanks to hare_brain) 19:06:27 Do core contributions add you to a list of attributions? 19:06:32 #agreed New contributors to core will be asked to informally agree to sign a future CLA, likely to be similar to Apache's, once a formal system is in place. 19:06:48 #idea Provide a link the the Apache CLA on the Copyright wiki so people can see where we're going 19:06:51 "list of attributions"? 19:07:01 hare_brain: +1 19:07:16 hare_brain: +1 19:07:20 #action hare_brain to update the copyright wiki entry with the above. =) 19:07:25 LOL 19:07:25 hare_brain: +1 19:07:41 +1 19:08:01 Would this also be the right place to say that we can merge changes from Oracle Hudson? 19:08:24 Is that a statement or a question? 19:09:00 hi! 19:09:08 I guess the right thing to say there is that the code contains stuff that's copyrighted and CLAed materials to Oracle? 19:09:27 kohsuke MIT only attributes efforts of the - so it should be clear in the CLA (which i guess is another topic) that attribution will be informal? 19:09:51 hare_brain: I wrote a question whether a statement should be added to a Wiki page, I guess 19:10:07 kohsuke2: Gotcha 19:10:13 (BTW, I don't have edit permissions on that page.) 19:10:14 And yeah, that would be the right palce for that. 19:10:29 me neither. =) 19:10:35 fixing 19:10:41 So, I'm nothing close to a lawyer, but here's how I understand things to be: 19:11:05 fixed 19:11:06 As long as the source from Oracle Hudson is MIT licensed, we can take it, because of its license. 19:11:31 Whoever merges it into Jenkins needs to attribute it to Oracle in the commit message. 19:11:35 Yup. 19:11:40 Yes. 19:11:41 That's how I understand the Apache CLA covers this case. 19:11:51 Sonatype contributed code is also under MIT ? 19:12:02 Unless they changed the license, yeah. 19:12:03 We'll have to look at the files to be sure. 19:12:26 And they'd better have a clear attribution after all the stuff they were saying about unclear IP. 19:12:51 For plugins, are there anything we should add? 19:13:04 #idea should we say we highly recommend adding in POM? 19:13:18 Yeah, I think that'd be good. 19:13:26 +1 19:13:34 I think we should at least for core 19:13:42 Maybe down the road some mechanical check can be added? 19:13:46 Please shoot me down if it's way too off topic, but i figure that ongoing core contributors will appreciate attribution. to me that's why most FOSS licences have 'maintain attribution/copywrite" clauses. So wouldn't it be worthwhile adding a contributions readme for a full list of participants? 19:13:52 a la rat plugin 19:13:56 we may use the license plugin also to verify if the header is set everywhere 19:14:15 checkstyle has the same capability 19:14:16 aheritier: core already has , if not explicitly it definitely inherits. 19:14:21 jieryn-w: kohsuke yes there is a plugin for that 19:14:24 to check and fix 19:14:41 kohsuke2: ok. I didn't see. 19:15:03 Squee-D: I think we do encourage people to put attribution in the copyright header of the source files. 19:15:16 But I guess you are suggesting we should start a separate file that lists the names 19:15:31 looks like Sonatype guys are commiting with MIT : https://github.com/hudson/hudson/blob/1fade2d2567831c1c7e6d0ef602903e424fbf44a/hudson-test-harness/src/test/resources/logback-test.xml 19:16:15 kohsuke I am, but that does make sense what you're already doing, just saying it might want to be adressed when you adress the CLA. 19:16:33 OK. Shall we note that and move on? 19:16:47 ... to the next topic? 19:17:00 https://github.com/hudson/hudson/commit/1fade2d2567831c1c7e6d0ef602903e424fbf44a#diff-10 19:17:00 +1 19:17:25 #topic the stable-branch/endorsed-release discussion 19:17:31 or maybe I don't hae that karma 19:17:47 rtyler! 19:17:51 #chairs 19:17:52 wut 19:17:59 #chairs abayer,kohsuke2 19:18:05 #topic the stable-branch/endorsed-release discussion 19:18:09 Thanks 19:18:50 #chair abayer kohsuke2 19:18:50 Current chairs: abayer kohsuke2 rtyler 19:18:53 #chair hare_brain 19:18:53 Current chairs: abayer hare_brain kohsuke2 rtyler 19:19:08 My recollection is that people are very happy with the idea but we haven't settled on particular approach 19:19:11 robobutler is brilliant. 19:19:11 Squee-D: Error: "is" is not a valid command. 19:19:19 well almost 19:19:23 hah 19:19:23 :-) 19:19:47 There used to be a link to an "older but stabler" build. Why did that go away? 19:20:20 because I think I just stopped doing that. 19:20:26 But I think we should resurrect that 19:20:48 kohsuke2: The question is which rithm the stable branch may have and how it could be managed ? 19:20:50 what was the criteria for updating those links? 19:21:01 rtyler: Good question 19:21:08 heh 19:21:12 what is a stable branch/product ? 19:21:37 AFAIK Jenkins isn't released if there are failures in automated tests 19:21:42 #info The model behind "older but stable" was that I picked a bit old but stable-looking release in retrospect 19:21:56 what about the LTS model? 19:22:01 It was planned to update about every once in 3/6 months 19:22:11 #idea Every X weeks, the core devs vote as to whether to promote a release from a few weeks earlier to be the new "stable" release. 19:22:14 Here at Yahoo, we have the concept of stable/current/test for our packages. "test" means a release is still being tested. "current" means the group feels that it's ready to be used in production environments. "stable" means it 19:22:20 aheritier: yes, if there are test failures, it won't ship 19:22:23 it's been running in production for at least 6 months. 19:22:30 where the changelog is where you decide to pick a stable release that you're willing to run a side branch with specific fixes. 19:22:42 alongside the continuous improvement main branch 19:22:43 hare_brain: that sounds similar to Debian 19:22:47 and could we use community votes ? 19:22:54 Yeah, I'm pretty sure we stole that idea. :) 19:23:29 So questions I'd ask about a "stable" Jenkins are: 19:23:29 aheritier: I was suggesting core devs (or plugin devs) just to keep the vote manageable. 19:23:39 Does it lag several months behind? 19:24:04 Is the version that's on stable sequential or does it skip? 19:24:11 Is the LTS approach too painful to manage? 19:24:16 IMO the best way for more stable releases is to massively increase the automated test coverage 19:24:25 abayer: core and plugins dev are probably using more often recent releases than older ? 19:24:25 hare_brain: I'd say it lags behind, and it skips. 19:24:35 kutzi: +1 19:24:37 stable releases are not as valuable to me, as an end user, as "marked to be maintained" releases 19:24:38 Do major bug fixes get merged into that release? That's a huge infrastructure and process undertaking. 19:24:40 aheritier: True. 19:24:48 On top of abayer's "Every X weeks, the core devs vote as to whether to promote a release from a few weeks earlier to be the new "stable" release.", I'd also like to propose that we consider doing patch releases off that release 19:24:48 hare_brain: −1 on that, personally. 19:25:13 kohsuke2: 1.386.1 ? 19:25:16 hare_brain, kohsuke2: rather, I'm −1 on anything other than showstoppers. 19:25:18 * kohsuke2 asked the same question as hare_brain 19:25:40 rtyler: yeah, 1.X.1, 1.X.2, ... for stable releases until we nominate next 1.Y as stable 19:25:52 sounds like tons of work 19:25:58 That's my concern as well. 19:26:05 stable branches are always extra work :P 19:26:07 Yes, it could be. Hence I said we should "consider" 19:26:12 And that's my rationale for −1. =) 19:26:19 my client was within a day of switching us to TeamCity or Cruise/Go a few months ago when deadlocks were killing us. +1 for patch builds 19:26:26 and I saw in the meeting note the question about code review 19:26:47 could we consider to put in stable branch only a code which were reviewed by several devs ? 19:26:52 But while it's a lot of work, it seems to be valuable, too. 19:26:59 I'd prefer to crowdsource/do validation tests to determine the stable release, with x.1 releases for *only* showstoppers like eric_n_dfw's deadlock problem. 19:27:01 really? People will choose jenkins in critical environments only with a critical support branch 19:27:02 (I remember that one) 19:27:04 We maintain a private fork, so we rely on the community ratings to decide when to merge a new version in. So in a sense, we're already picking a "stable" for ourselves. 19:27:13 aheritier: Yes, we want to control what changes can go in there. 19:27:31 LTS's do not need anything but support for "continues to function as specced 19:28:01 Squee-D: Yeah, that's the sort of thing I'm talking about. 19:28:02 i think having a stable branch that isn't sponsored by people using jenkins in critical environments -- that is, new blood doing the work -- there's no way current devs are going to be able to support it 19:28:04 It's harder work for plugin dev's no? to support the 'stable' releae. 19:28:30 it also steals thunder from people testing the new release 19:28:31 I think if we limit ourselves to small number of important fixes backported from the main release line, maybe the overhead can be managed? 19:28:44 why jump to latest when i can just use stable and not put any effort in 19:28:47 Squee-D: I actually see the stable release as a positive for plugin devs - if they don't *need* a new change in core, they can just always build against the last stable. 19:28:52 jieryn-w: stealing thunder from the main release line is indeed one of the downside. 19:28:55 I would have thought so, but i certainly havent been following the code-commits 19:29:08 abayer thats a good point 19:29:44 I think your small teams, like ours, will all still run with the "agile" branch 19:29:53 could we also use statitics of deployment to know who is using what ? 19:30:04 Basically, I think we should provide a "known quantity" release that's blessed by the community/devs, and we should backport fixes for showstopper bugs to it on a limited basis, when possible. 19:30:04 Yes, we can 19:30:04 perhaps it could help to define what as stable 19:30:12 but i really wouldn't blame enterprise users from dropping jenkins if it didnt have a stable branch. 19:30:13 aheritier: Yup - we'll actually have new census data available today. 19:30:13 aheritier: + 1 19:30:31 s/as/was 19:30:41 abayer: OK, that line of thinking is close to what I'm saying 19:31:01 For example, I can tell you that there are over 6500 installs of Hudson/Jenkins which were last seen at version 1.395. =) 19:31:14 Out of how many? 19:31:25 6501 19:31:32 abayer: +1with your point of view 19:31:46 We're still at 1.393 19:32:03 Almost 23k seen hitting jenkins-ci.org/hudson-labs.org's usage-stats in Feb - that's only versions 1.368 and later. 19:32:34 #info so sounds like a consensus is around voting/blessing a release as stable, then produce patch releases only with important bug fixes 19:32:41 +1 19:32:44 +! 19:32:51 +1 19:32:59 So roughly 25% on something recent. 19:33:17 #info we are also mindful that we aren't entirely sure how much work this entails 19:33:40 #idea Every…3? months, community/devs bless a 2+ month old release as the "known quantity" release. Until the next "known quantity" release, it'll be possible for absolutely critical bug fixes to core to be backported and a new version of the known quantity re-released. 19:33:57 hare_brain: actually, that's 25% on *one* specific version. =) 19:34:04 +1 19:34:28 How about 6 months? Would that be too long? 19:34:38 kohsuke2: I think 19:34:43 that's really long in Jenkins-time 19:34:44 hare_brain: how frequent do you integrate? 19:34:47 I would it may even younger than 3 month 19:34:48 I for one trust agile processes and trust my backups, so update our jenkins install as often as i can. But for the sake of the jenkins project's continuing popularity think it's a good thing. 19:34:48 There were something like 4k last seen on 1.396 or later, and I can't remember how many on other versions. 19:34:50 3 monthes is what we see in general 19:34:57 kohsuke2: Roughly once a quarter 19:34:59 I like 3month rotations. 19:35:13 Once a quarter, decent window of time for determining how stable a candidate release is. 19:35:18 OK. So shall we start with 3 months and se e how that goes? 19:35:20 More frequently if a release fixes a lot of bugs, or has something interesting. 19:35:25 We try not to cherry pick changes. 19:35:39 +1 19:35:46 +1 for 3 months 19:35:54 * rtyler likes 3 months as well 19:36:26 #agreed we'll start with 3 month cycle for stable release and see how that goes 19:36:27 3 months is fine with me 19:36:28 Ok. Next step is scoping out the work involved. 19:36:40 Which we can do on the mailing list.=) 19:36:48 I wanted to talk a bit about what kind of changes we want to backport 19:36:57 'k. 19:37:04 like "preferrably no API change" 19:37:21 or "only backport a fix after it's released in the main line"? would that be too much? 19:37:34 #action A thread on the mailing list to talk about what work will be done to get the stable release stuff in place (update center changes, qualification process, etc) 19:37:39 kohsuke2: Yes it is mandatory in bug fixes for the stable bracnh 19:37:42 kohsuke2: strong +1 for that. 19:37:49 Backports only. 19:37:57 +1 kohsuke 19:38:10 abayer is that a +1.999~ ? 19:38:17 Are people agreeing to "after it's released in the main line" part? 19:38:18 +1 to backport only something released (tested in real life) 19:38:20 #idea changelog entries that are marked "major bug" as candidates for backporting? 19:38:21 Or just "backport only part" 19:38:34 kohsuke yeas to "mainline" - that is what a backport is no? 19:38:50 hare_brain: yes. but there aren't that many of those 19:38:58 Does that mean we've been pretty stable? 19:39:11 +1 to mainline tested live --> stable 19:39:22 Are there metrics for 'stability' ? 19:39:45 perhaps automation of such metrics are really a first step? 19:39:48 community ratings, bug reports for a release 19:39:59 #idea I think the stable release line would be good release train to tie in the "community acceptance test" effort 19:40:32 The only problem I have with the community ratings, is that the bug reports seem to carry forward, and it's not clear that a bug was actually introduced with that release. That's just when someone reported it. 19:40:42 put another way, for example, if we start this effort, could Yahoo shift some of what it did internally to this release line? 19:41:22 kohsuke2: Could CloudBees as well for Nectar? =) 19:41:25 hare_brain could its inclusion in stability reporting wait for a dev to identify when it was introduced? Are most of these things identifiable with bisect? 19:41:49 abayer: Yes, I'd be obviously spending my efforts/time into that branch 19:41:52 hare_brain: I'm preparing the proposal to split Jira 19:41:59 thus will have versions in Jira now 19:42:28 Oh, yeah. 19:42:35 well, still no project split yet 19:42:50 kohsuke2: We can certainly take our internal feedback and contribute that to the assessment of the stability of a release. 19:42:54 #action aheritier working on proposal for actually splitting JENKINS JIRA into core/infra/plugins. 19:42:55 I think voting to pick a stable release would be reasonable and community rating would be a good input, if not a definitive input 19:43:28 Everyone ok with aheritier leading the JIRA split stuff? We'll need to give him admin on JIRA to actually do it, obviously. 19:43:40 * rtyler nods 19:43:55 We'll have a chance to see the proposal before it happens, right? 19:44:06 Oh yeah. 19:44:09 kohsuke2: yes it's done for that 19:44:11 +1 19:44:17 +1 19:44:20 +1 19:44:21 +1 19:44:22 but if someone else want to lead it :-) feel free !! 19:44:24 I'm just taking advantage of a sucker, er, um, I mean, volunteer. =) 19:44:29 heh 19:44:52 :-) 19:45:07 OK, so in the interest of time, maybe the next topic? 19:45:15 * redsolo can help out with the jira stuff.. 19:45:15 Did the release discussion come to a conclusion? 19:45:32 I guess we have a consensus, and action to work out details? 19:45:55 redsolo: ok, I note. I'll send an email on the dev list before the end of the week 19:46:07 kohsuke2: yes 19:46:24 Yup. 19:46:30 #topic Update on the long-term governance plans / progress on umbrella organisation 19:46:39 #topic Update on the long-term governance plans 19:46:56 I guess this one is to abayer? 19:47:02 Here's my update: I haven't done anything. I suck and have been busy. =) 19:47:20 #agreed abayer sucks, and has been busy 19:47:22 * rtyler ducks 19:47:28 Anything we can help to make a progress there? 19:47:45 Perhaps even just some bullet points? 19:47:50 :-) 19:47:54 If we can come up with questions we need answered, that'd help. 19:48:16 OK 19:48:23 there was chatter about going to apache ... is that ruled out? 19:48:34 #topic progress on umbrella organisation 19:48:38 No, it is not ruled out. 19:48:40 That's a question for this topic, I guess 19:48:50 I can report an update on this 19:48:50 kohsuke2: any news from SFC? 19:49:04 #info we've applied to SFC, and we are still not hearing back 19:49:14 #action kohsuke to ping SFC on our current status 19:49:22 I also think I should write to SPI 19:49:39 (acryonym could be wrong but it's the foundation that has PostgreSQL) 19:49:57 http://www.spi-inc.org/ 19:50:24 Apache isn't ruled out either, but I think we are still hoping that SFC would take us 19:50:33 I think that's the current status 19:50:40 While my personal first choice would be to go to Apache over SFC or SPI, I'm perfectly fine with SFC as first option. 19:50:44 SFC? 19:50:58 http://sfconservancy.org/ 19:51:04 But if we don't get into SFC, I really think Apache is far and away the best option on the table, and I really think it can work nicely. 19:51:19 Apache Foundation has a lot of clout to its name alone. 19:51:56 When this was discussed there certainly was a strong support for that from many 19:52:17 Ready to move on to logo contest? 19:52:37 I agree to try SFC before Apache to have less changes in the comunity if possible 19:52:53 +1 19:52:56 yes logos !! 19:52:59 #topic updates on logo contest 19:53:10 abayer? 19:53:16 (damned I forgot to ask to my kids to draw something) 19:53:27 #info I extended the logo submission deadline through friday, 'cos I got a bunch over the weekend and into Monday. 19:53:56 #info this weekend, I'll be putting up a post on jenkins-ci.org with all the entries, and a poll for everyone to vote for their favorite. 19:54:03 Any place where we can see the current submissions? 19:54:08 That eps that was sent to the mailing list reminded me of the Pringles guy. 19:54:24 true 19:54:36 abayer: How many submissions have you received? 19:54:46 Something like 10, I think? 19:54:49 Im working on one :D 19:54:53 Maybe a Wiki page? 19:55:05 but i suck more than abayer. Probably not busier tho. 19:55:29 Shall we still try 99designs, or are we comfortable picking from what's submitted? 19:55:43 Yeah, I'll put 'em on the wiki in their original forms, and on the blog in png format for easy viewing. 19:55:50 One of the options on the poll will be "none of the above". 19:55:53 Maybe an option in the poll should be "None of he above" 19:55:55 LOL 19:55:56 If that wins, we go to 99 designs. =) 19:55:59 Can the vote include [x] try 99designs 19:56:08 make it explicit.. 19:56:09 abayer: hare_brain +1 19:56:11 #info 99designs start from $300 and we don't have to pay if we don't pick it 19:56:15 Squee-D: That works for me. 19:56:20 Oh! New topic! 19:56:23 Trademark! 19:56:28 #topic Trademark! 19:56:39 kohsuke2: Have we started the ball rolling on that yet? 19:56:52 I'm afraid not. 19:56:57 Let's see, where am I on it 19:56:59 For now, I'm perfectly happy with fronting the cash for the fees. 19:57:04 We can fundraise to pay me back later. 19:57:40 I think I had an AI to find the difference between the registration that costs a few $100s vs a registration that costs a few Ks. 19:57:58 (assuming we're talking a couple thousand bucks max, not something more like $10k) 19:58:10 The main difference, as far as I can tell, is whether we get to see some human being doing it. 19:58:51 Yeah. How about we deputize to CloudBees' people to do the research for us as to what the best option is? I'm perfectly fine with donated labor from them - I just want to make sure it's not CloudBees actually paying for the trademark registration. 19:59:17 And there's still an offer on the table for CB to donate the cost for the registration. 19:59:57 I don't feel comfortable taking actual money donations until we have a legal structure. 20:00:03 But there's no "people doing the research" though. I believe CB only have a lawyer it can pay to have a research/registration done 20:00:10 Ah. 20:00:32 Let's take this offline and talk about it in person tonight? 20:00:40 (We should ask to Oracle they did that few times ago :-D ) 20:00:43 I think earlier suggestion from hare_brain was to get some writing that it won't own the trademark 20:00:51 "it" = CB 20:01:14 Does that ease the concern enough, or not? 20:01:15 (Sorry it's 3AM here) 20:01:32 #action kohsuke and abayer to talk tonight about trademark stuff and get the ball rolling. 20:01:40 And one last topic - trying to wrap up. 20:01:41 The issue is that otherwise it's hard to make a progress 20:01:45 Sounds good 20:01:49 #topic Next meeting. 20:02:01 How about 2 weeks from now? 20:02:04 #info Let's go bi-weekly - next meeting in two weeks, Wed, March 16th 20:02:05 jinx! 20:02:17 +1 20:02:20 yes it is enough 20:02:23 I was going to suggest whenever we have a stable release. ;) 20:02:51 Is this time OK? 20:02:54 heh 20:03:03 I hate to keep aheritier up at 3am 20:03:15 #idea Tentative agenda items: JIRA split proposal discussion, update on trademark. 20:03:20 This time on the 16th specifically won't work for me. 20:03:25 He's in vietnam at the moment. =) 20:03:31 Ah 20:03:54 hare_brain: any other time of that day? 20:04:39 no problem I'll be back in EU 20:04:48 I'll be away from an internet connection all morning. Any time after 1pm will be fine, if that works for other people. 20:04:57 Otherwise, another day that week, at 11 is fine. 20:05:14 1pm is 10 CET…is that too late for our Euros? 20:05:30 abayer: for me it's goot 20:05:49 aheritier: given that I've put you up as an agenda item, that's good. =) 20:06:03 Any objection to March 16th 1pm PST / 10pm CET / 9pm GMT? 20:06:07 :-D 20:06:15 +1 for me. 20:06:18 Other option is to just have the meeting at 11 on the 16th and I'll pass on any comments I have about the agenda to abayer or kohsuke ahead of time. 20:06:19 +1 20:06:30 What happened to Internet time? 20:06:37 #agreed March 16th 1pm PST / 10pm CET / 9pm GMT 20:06:43 Great. Thanks folks. 20:06:59 OK, I think we declare a victory for the day 20:07:11 I'm declaring lunchtime. :) 20:07:17 #endmeeting