2024-10-24 Meeting notes

Github Action Auto Update Using Dependabot OSPRs

Michelle

• Who can take the unmaintained repos?

  • Ask CCs to review and approve even if they can’t merge and then @Feanil Patel can go click merge for now until we have real maintainers for things.

Maintanier at-large

Feanil

• This is all set and solves the problem that was brought to us. We’ll check back in after we’ve got some folks in this role for a bit.
  
  

Ubuntu Upgrade

• Closed with 24.04 in most places

• edx-platform and codejail are running on ubuntu 22.04

  • See Ubuntu Upgrade Completed* for more details

Node 20

Also completed and is currently on nightly and ready to be a part of the Sumac release.

Other Upgrade

• Enzyme done everywhere except for edx-platform

• Jest done on all repos except for the ecom ones which are going to be archived shortly.

Ubuntu-latest vs ubuntu-<version>

RCA Info from Diana about the ubuntu-latest vs ubuntu-<version> upgarde

• Our mongo setup was OS specific (hardcoded apt repository)

• xmlsec and python-xmlsec version mismatch

• feanil/ubuntu 24.04 by feanil · Pull Request #35713 · openedx/edx-platform

• Proposal: When we need to run on multiple OS versions, we should run the minimal set on the older version once we have gotten everything working on the newer OS version.

• We should also have a failing test in edx-platform for codejail given how critical it is.

• Smoke test that should be done

  • Test apparmor by trying to access disk resources you can and cannot access.

  • Testing sudo/rlimit for the child process by trying to fork or use other rlimit resources ( Memory)

  • Test network access with and without DNS resolution

• Should we deprecate running codejail in the edx-platform system.

  • GitHub - eduNEXT/tutor-contrib-codejail: Tutor plugin that enables execution of untrusted code in secure sandboxes using an external service based on the codejail library.

#cc- channels

@Kyle McCormick

https://docs.google.com/spreadsheets/d/1ryqbaxMp4x-8Apwss2Br2IOU2UA7zXEI-VDo8dJPb9U/edit?gid=0#gid=0

• #cc-edx-platform

• #cc-frontend-apps

• #cc-openedx-utils

• #cc-xblocks

• #cc-core-applications

Can we consolidate / have fewer?

• Robert watches cc-edx-platform

• Jeremy appreciates 30-min heads up from edx-platform and frontend-apps, but gets notifcations on most repo merges separately

  • OK with nixing the bottom 3 channels