18:00:18 <bdpayne> #startmeeting OpenStack Security Group
18:00:18 <openstack> Meeting started Thu Aug  8 18:00:18 2013 UTC and is due to finish in 60 minutes.  The chair is bdpayne. Information about MeetBot at http://wiki.debian.org/MeetBot.
18:00:19 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
18:00:21 <openstack> The meeting name has been set to 'openstack_security_group'
18:00:29 <bdpayne> hi security group
18:00:34 <bdpayne> who's here today?
18:01:21 <joelcoffman> hey
18:03:01 <bdpayne> so I have a bit to discuss today
18:03:06 <bdpayne> hopefully others join in :-)
18:03:07 <rlp> Afternoon Everyone
18:03:27 <bdpayne> let's start by syncing on action items from previous meetings
18:03:32 <bdpayne> #topic Action Items
18:03:56 <bdpayne> joelcoffman I believe that you were talking about doing a conference session on key management and volume encryption
18:03:59 <bdpayne> did that come together?
18:04:32 <joelcoffman> yes, Jarret Raim submitted the user session (Barbican + volume encryption)
18:04:41 <bdpayne> ah cool
18:04:54 <bdpayne> so let's keep an eye for that during the voting phase :-)
18:05:07 <bdpayne> oh… and of course my talk too on securing compute nodes :-)
18:05:23 <bdpayne> a few other actions items
18:05:43 <bdpayne> thomasbiege is working on how to integrate automated security testing
18:05:52 <bdpayne> I believe he's out today
18:06:30 <bdpayne> but I can add that Xiao Xin Liu from IBM has expressed interest in helping with that effort
18:06:35 <bdpayne> so that's great
18:06:47 <bdpayne> nicolae__ was going to work on the wiki pages
18:06:57 <bdpayne> I'll talk a little more about that later
18:07:08 <bdpayne> any other action items to report on?
18:07:28 <bdpayne> #topic OSSG Slide Deck
18:07:29 <joelcoffman> none from me
18:07:48 <elo> Hi. Eric here.
18:07:56 <bdpayne> ok, so there has been some discussion on the mailing list about putting together some slides
18:08:00 <bdpayne> hi eric
18:08:14 <bdpayne> seems like a worthwhile effort
18:08:23 <bdpayne> did you guys track that discussion?
18:09:02 <joelcoffman> partially, but not in great detail
18:09:08 <bdpayne> I was just checking it again
18:09:16 <elo> same here…
18:09:20 <bdpayne> discussion has died down a bit, but this seems like a worthwhile activity
18:09:41 <bdpayne> #action bdpayne will rev that discussion up again and see if someone can take ownership of making that happen
18:10:16 <bdpayne> #topic OSSG Logo
18:10:26 <bdpayne> I think it would be handy to have an OSSG logo
18:11:06 <bdpayne> we have approval from the OS people to use the basic OS logo and do something security oriented with it… but before we actually use it we need to circle back and get specific approval on the use case and final logo design
18:11:21 <bdpayne> tldr; I'm looking for someone that could help with the graphics work
18:11:33 <bdpayne> anyone handy there?  or perhaps have someone at your company that could help?
18:11:44 <bdpayne> this should be easy… just not my domain
18:12:08 <bdpayne> ok, I think it was quiet on this last week too
18:12:17 <bdpayne> I'll see if I can pull some strings at my end
18:12:32 <bdpayne> #action bdpayne to strong arm someone to working on OSSG logo
18:12:36 <bdpayne> :-)
18:12:50 <bdpayne> #topic Wiki Page for OSSG Newbies
18:13:10 <bdpayne> We've talks at various levels in the past about helping people get integrated into OSSG
18:13:17 <bdpayne> I'm finally ready to make this happen
18:13:30 <bdpayne> I'll be putting together a wiki page this week to help with all of this
18:13:34 <bdpayne> I would love help
18:13:47 <bdpayne> perhaps someone to bounce ideas off of, help fill in content, etc
18:13:51 <bdpayne> any volunteers?
18:14:24 <joelcoffman> I'm happy to review and provide feedback when possible, but I don't have a lot of spare cycles right now
18:14:34 <rlp> Same here
18:14:38 <bdpayne> ok, thanks guys
18:14:52 <bdpayne> I'll take the lead and use you for ideas / review
18:14:58 <rlp> k
18:15:04 <elo> Same here… my cycles are a little tight for the next few week due to VMworld
18:15:16 <bdpayne> #action bdpayne to put together newbie wiki page with review / help from joelcoffman rlp elo
18:15:36 <malini1> hello! sorry late
18:15:37 <bdpayne> VMworld?  what's that? ;-)
18:15:44 <bdpayne> hi malini1
18:16:03 <bdpayne> #topic OSSN work
18:16:21 <bdpayne> Rob created several new OSSNs this week
18:16:27 <bdpayne> they still need some eyes / editing
18:16:36 <bdpayne> https://bugs.launchpad.net/ossn
18:16:42 <bdpayne> if you follow that link
18:16:44 <bdpayne> click on bugs
18:16:51 <bdpayne> and then loop at the in progress bugs
18:17:03 <bdpayne> the please provide some comments / feedback on the wording there
18:17:22 <bdpayne> is everyone seeing the emails about these when they are created?
18:17:34 <rlp> #agreed
18:17:39 <malini1> ok
18:18:31 <bdpayne> #action everyone to help review new OSSNs
18:18:53 <bdpayne> #topic Other Discussion Items
18:19:00 <bdpayne> what else would people like to discuss today?
18:19:16 <bdpayne> I feel like I've been talking a lot … surely there's other stuff
18:19:21 <elo> will review ossn stuff as well
18:19:23 <elo> nothing from me
18:19:51 <joelcoffman> we could *really* use some reviews on our volume encryption patches
18:20:14 <joelcoffman> big ones are https://review.openstack.org/#/c/30974/ and https://review.openstack.org/#/c/30976/
18:20:15 <bdpayne> joelcoffman you need cinder people specifically, or security people or ?
18:20:28 <jgriffith> he needs cinder people
18:20:43 <jgriffith> but extra eyes from sec folks would help me out
18:20:44 <joelcoffman> yes, Cinder most specifically but we'd appreciate any feedback
18:20:49 <malini1> joelcoffman -- did Zhitang (winnston) ever review anything for us?
18:20:54 <malini1> winston
18:21:00 <bdpayne> ok, I'll see if I can work some connections at this end
18:21:09 <joelcoffman> not yet, I think he said he'd review it this week
18:21:40 <malini1> we have bound reviewing slow at intel too on nova patches, everyone busy with their feature
18:22:00 <bdpayne> ok
18:22:21 <joelcoffman> agreed, reviewers can't seem to keep up with all the proposed features
18:22:21 <bdpayne> another worthwhile thing to do is to work through the book making edits where needed
18:22:40 <bdpayne> even if you just do a page at a time, or a chapter, etc
18:22:56 <bdpayne> if you do that and put up a PR for edits, just drop me a line and I can help see it through
18:23:12 <malini1> :) Ah, I am doing that, markingup my book with little edits, learning as i go along
18:23:34 <malini1> PR ?
18:23:40 <bdpayne> edits can be made via PR https://github.com/openstack/openstack-manuals/tree/master/doc/src/docbkx/openstack-security
18:23:48 <bdpayne> using the normal "git review" system
18:24:07 <bdpayne> book edits are a great task for new people to help get involved in OSSG
18:24:09 <bdpayne> fwiw
18:25:14 <bdpayne> I'll be syncing with people at my end about the Vol encryption reviews joelcoffman
18:25:17 <bdpayne> I'll keep you posted
18:25:23 <joelcoffman> thanks
18:25:35 <bdpayne> and that's all I have for today
18:25:38 <bdpayne> thanks everyone
18:25:43 <joelcoffman> cheers
18:25:50 <rlp> Afternoon
18:25:51 <malini1> bye!
18:26:00 <bdpayne> #endmeeting