Alexander BokovoyFeb 4, 2025

This will mostly go for the past week, not a day, as there were CentOS Connect and FOSDEM
#YesterdayAtWork:
- travelled to Brussels on Wednesday
- attended CentOS Connect on Thursday/Friday. Lots of hallway track discussions.
- productive talks with alternative images SIG and hyperscale SIG folks on Thursday. Some clearing up of the potential issues in early boot that systemd folks weren't aware of. Our encrypted DNS work is popping up in interested places.

...

Show threadAlexander BokovoyFeb 4, 2025
...
- had a bunch of talks about possibility to scan for malware within upstream/CentOS Stream MRs. We need to validate content before it gets uploaded through `centpkg/fedpkg/rhpkg new-sources`, so it is important to help package maintainers here. We'll continue research and coordination.
- RPM/Konflux talk is interesting. There is yet a lot to do but having the right folks (who did koji) doing this is promising.
- Met a lot of folks at CentOS Connect.
...
Show threadAlexander BokovoyFeb 4, 2025
...
- Saturday: #FOSDEM. A lot of meetings with folks in the hallway tracks (really, more of the ULB parks)
- Gave a talk at the DNS devroom, outlining our current state with DNS requirements from #FreeIPA and #Samba AD, both for external and integrated DNS features. Full room but didn't have enough time to handle questions. 25 minutes is hard!
- More discussions, finishing up automation for the IPA talks for Sunday.
Show threadAlexander BokovoyFeb 4, 2025
...
- Saturday: didn't get to most talks but Stratoshark is a great project to watch. Sadly, missed Volker's SMB 3.11 POSIX extensions talk. We did catch up in the evening, though, will work with Guenther to introduce POSIX extensions to Samba in Rawhide next week or so, after branching happens.
- Saturday: asked @bagder during his talk on Curl engineering how he handles bring up of the younger maintainers. Unfortunately, no silver bullets yet. Hopefully, we'd get something sustainable...
Show threadAlexander Bokovoy
- Sunday: #FOSDEM we had #IAM devroom, the whole day.
- Lots of crowd at the devroom. As usual, waves driven by known names, so some talks get more public attention than the others.
- @pid_eins did a good overview on userdb API. We are looking at using varlink and userdb APIs for some of localkdc needs too, so more to come. I need to file a bug against userdb API failing group membership resolution for remote NSS modules.
...
Feb 4, 2025 at 8:09amWeb
Show threadAlexander BokovoyFeb 4, 2025
...
- Had our localkdc talk and demos together with @cryptomilk. Went well, though we need to find a concise way to describe the problem space for IAKerb. We can iterate for #sambaxp. ToDo: publish our blog article later this/next week.
- Had IPA-IPA trust progress talk with Trivino. Demos worked well too. A lot of discussions of potential usage with many users.
..
Show threadAlexander BokovoyFeb 4, 2025
...
- Interesting talk about Sybil from NVidia. They use FreeIPA to gate access to their HPC AI cluster and need more dynamic access control granting during S4U transitions. Right now they hack into issuing ephemeral TGTs alongside with IPA KDC but that should not be needed.
- We may finally found a good reason to get back to support CBAC in MIT Kerberos aside from Samba AD compatibility.
- Wonderful discussions with Ralph about progress on Samba development funded by the European funds.