conda-forge core meeting 2022-04-20

Add new agenda items under the Your __new__() agenda items heading

last weeks meeting What time is the meeting in my time zone Meeting info:

To join the video meeting, click this link: https://zoom.us/j/9138593505?pwd=SWh3dE1IK05LV01Qa0FJZ1ZpMzJLZz09
Otherwise, to join by phone, dial +1 347-384-8597 and enter this PIN: 828 997 153#
To view more phone numbers, click this link: https://tel.meet/ijv-qsvm-tvn?hs=5

Attendees

Name	Initials	GitHub ID	Affiliation
Daniel Ching	DJC	carterbox	Argonne National Laboratory
Katherine Kinnaman	KK	kathatherine	Anaconda
Jaime Rodríguez-G.	JRG	jaimergp	Quansight
Travis Hathaway	TH	travishathaway	Anaconda
Matthew Becker	MRB	beckermr	cf
Cheng H. Lee	CHL	chenghlee	Anaconda
Keith Kraus	KJK	kkraus14	Voltron Data
Eric Dill	ED	ericdill	Voltron Data
Marius van Niekerk	MvN	mariusvniekirk	Voltron Data
Dave Clements	DPC	tnabtaf	Anaconda
Jon Velando	JV	rigzba21	IC

18 people total.

Standing items

intros for new folks on the call
(FF) budget
- current approvals?
- Whenever updated numbers land, please screenshare and show the budget.
  - Link is in Keybase (numfocus_spreadsheets.txt)
- something something open collective. numfocus sent out an email for onboarding
open votes
- none, but MRB will be starting a vote soon
2022 Outreachy / GSoC
- Community accepted
- Project proposals due Tuesday/Wednesday March 22 (Americas) / March 23 (Europe)
  - In addition to project propsal also need contribution tasks
  - And Channels for potential interns to communicate with us.
- Two projects
  - Grayskull and Friends, Jannis, and Marcelo (pyproject.toml support)
  - Doc, Matt and Katherine
- questions:
- todos:
  - Have people got time to support Grayskull work? (JL, DPC will follow up)
- KK - do we have a code of conduct?
- MRB and KK will have their own meeting around proposals
- not much else to talk about for now until the intern starts

(MRB) numfocus TOS draft
- if you're on core, draft of TOS has been sent to email list.
- Pam has some questions that we (core) needs to respond to.
- Need to be sensitive on pushing too much onto the community
- TODO: Everyone on core needs to read, comment or otherwise be OK with the email from Pam
- TODO: Get Feedback from core team by next core meeting
- Email title: "Draft of ToS for your review"

From previous meeting(s)

Your new() agenda items

(JL / WV) Update on conda-forge as OCI.
- MRB - this is an update to conda
- MRB - we should start uploading some packages to get a sense of how this works
- WV: talked a bunch at pycon germany. started mirroring all packages starting with "p". trying to figure out how much load github can handle. next steps are to add repodata to those mirrors. we have "a", "b", "c", and "p" mirrored
(ED / JV) Getting involved in supply chain stuff for conda-forge
- JV: More looking for how to get started / how to get more involved. For packaging signing need to talk to anaconda.org. if we were using quetz we could do it - that's a wolf / sylvain thing.
- IF: What would you gain by signing a package in CF at least. anaconda.org I understand, there's a company behind them. for CF there's literally thousands of people contributing packages. what does a signing mean?
- SC: Whatever is source of truth we can cryptographically guarantee that mirrors are equivalent to the
- WV: If there's a company like nvidia publishing packages on nvidia they might want to sign them
- KK: Isn't it that no company is publishing packages directly but they're contributing packages.
- MRB: We could allow companies to upload keys to the recipe
- SC: Could develop an OSS version of package signing in Quetz.
- CJ: cf as some instance of IAAC entity like terraform would be interesting
- https://openssf.org/blog/2022/04/19/your-favorite-software-repositories-now-working-together/
  - supply chain security
(DJC) Windows Docker Containers for CI
- https://github.com/conda-forge/docker-images/pull/209
- Is this a valuable engineering effort?
- Size limits (partially cached by Microsoft on Azure)?
- License issue of creating a docker image containing Vistual Studio?
(WV) CZI grant (two proposals)
- submitted yesterday
  - Quantstack + quansight. 3 pillars:
    - consolidating package metadata (libcfgraph, cf-countyfair, etc.). goal is to revamp quetz status page
    - terraforming conda-forge to have infrastructure as code. reduce risk by being able to reprovision
    - OCI stuff
    - 2 year grant for quantstack and quansight
  - quantstack - adding wasm toolchain including fortran support. if that's selected then we'll have some time to work on emscripten and fortran support, etc.
- MRB - are we ready to be on the hook for a quetz server? this has been one of the big things that has constrained the work in the past.
  - WV - with this grant we'll have more experience with terraform and gha to administer servers and services.

Pushed to next meeting

TODO: Feedback on TOS from core team by next core meeting

Active votes

CFEPs

cfep-12 Removing packages that violate the terms of the source package
- Stalled since May 26, 2020
- Active debate about moving to "broken" vs deleting from conda-forge channel
- Active vote, ends on 2020-03-11
- What were the results of the vote?
- Did we hear back from NumFOCUS? they did the legal seminar which is recorded

TODOs

2022-04-05

TODO: Articulate suggested mechanism for "so you're thinking about taking a contract to work on conda-forge". tl;dr is you should work on a design doc with the impacted parties (or working groups, or interested folks) on the conda-forge side. Once you have agreement on the scope, delivery timeline, and anything that's needed from the conda-forge volunteer side, go ahead and sign that contract with your payer. if you don't do this first, you may encounter some difficulties finishing delivery of your contractual agreement with your payer.

2022-01-12

review Qt PR after logs are uploaded
Add cupython and cuquantum to don't mirror list (MRB done)
re: std=c++14, Wait for Kai to comment and merge the PR
CJ and Jaime coordinate to Let Maxiconda know that we can't use their logo 2021-12-01
WV: Set up meet-and-greet call with homebrew team?
MRB: (repodata patches) make a cron job that runs show_diff.py and posts an issue + commit if it is non-empty

2021-11-03

Self-hosting CI TODOs:
- Change URL from drone.conda-forge.org. Proposals:
  - woodpecker.conda-forge.org
  - ci.conda-forge.org
- Set up monitoring
  - Quantstack is setting up grafana for the mirror

2021-10-18

2021-09-22

(WV): TensorFlow-GPU ready to go, just need to decide if GPU should get prio over CPU?!
- GPU gets prio

2020-11-18

(IF/MRB/MV) intel oneAPI
- todo
  - (Nikolay) licensing for opencl_rt
  - (Nikolay) intelmpi ABI compat w/ mpich
  - (MRB/IF) figure out how exactly to package C/C++ compilers
  - (MRB/IF) think about fortran ABI
  - (MRB) make conda-forge compilers room (add people including keith)
(MB) asking core members to move to "emeritus" status
- TODO: Eric to set up quarterly check-in for all core members to see if they're interested in remaining "active" or if they want to move to emeritus
  - Remove emeritus folks from having access to various credentials (api tokens, twitter password, etc.)? This would require a change to the governance doc.

2020-11-11

TODO: Think about bringing in JOSS to provide context around how we might best write papers

2020-11-03

TODO: Check on Forrest Watters permissions for core

2020-10-28 2020-10-21

(Marius?) Python 2.7 migration
- ( ) [ ] make a hint
- ( ) [ ] make an announcement
- ( ) [ ] make the hint a lint

2020-10-07

Make sure to add the NVBug info to the cudatoolkit package that conda-forge makes (if we make one)

2020-09-09

(ED) Update governance docs with similar voting model as what got put into conda-tools (+3 with no -1 is a pass)
(SC) Write jinja template to turn institutional partners yaml into a website https://github.com/conda-forge/conda-forge.github.io/blob/2a2d3caaf7d74eb370ac40c679ba337a73d15c8a/src/inst_partners.yaml
(SC) Document what needs to be done to create an OVH account and get access

2020-08-26 Docker hub

(JK) Check in on Azure build workers to see if they have the docker hub limitation.
(JK) work with dockerhub to see if we can get OSS status
- Check in again at some point. We haven't heard back as of 2020-09-23

OVH

conda-forge core meeting 2022-04-20

Attendees​

Standing items​

From previous meeting(s)​

Your new() agenda items​

Pushed to next meeting​

Active votes​

CFEPs​

TODOs​