Meeting summary for 6 March 2024:
* *New: openvpn 2.6.10 release*
/There are some Windows related issues to be resolved in this release./
/Tentatively planned for end of next week./
* *Updated: server-side testing status and next meeting*
o mattock has created a PoC of --dev null "does a client connect"
check
+ client config has "--dev null" and "ifconfig-noexec"
# uses an "up" script to stop the parent (openvpn) process
gracefully soon after connection initialization
# the "up" script almost certainly includes some
Linux-specifisms
# example usage:
* openvpn --config client.conf |grep "Initialization
Sequence Completed"
# integration with "make check", buildbot, etc. is still
missing
# next steps:
* integrate the PoC with "make check"
* make the script portable
* buildbot integration (if required separately)
/We want to continue on this topic once a bit more progress has
been made./
* *Updated: forums topics*
/A new forum is under construction. But already spammers have found it./
/Suggestion is to give openvpn_inc user novaflash and Pippin_ full
admin rights so they can help find a solution and help maintain the
forums./
/To be discussed with ecrist./
/Layout and categories look ok?/
/Access for Mod to delete users that put spam url in profile and
never post a message, currently I cannot discover a way to delete
those/(1)
/Access for Mod to edit user profiles/(1)
/Mod guide, hard or soft delete (chuck board?), what to do with
GDPR, etc. (write it down and actually make it available to mods,
maybe a hidden topic)/
/Access for mods to logs so one can see what others did/
/Considering some existing platform to do discussions next to forum?/
/(1) May not be necessary if enough admin available/
* *Updated: website release process*
/Finally they have come up with a solution that they will run by
novaflash this week./
* *New: breaking DCO changes, how to approach?*
/This topic appeared but we do not have details on what this entails
exactly./
/Perhaps ordex can provide details on what this is about, so we can
have a meaningful discussion./
* *Updated: Status of SBOM*
/There was a discussion between MaxF and djpig and others./
/For OpenVPN2 / OpenVPN-NL, there is not much overlap, as OpenVPN2
doesn't ship much in terms of libraries, but OpenVPN-NL does./
/The interesting use-case for an SBOM is really the OpenVPN Windows
GUI client./
* *Updated: Debian and Ubuntu snapshot packages and buildbot*
o Cloudfront + S3 + aptly PoC is complete and seems to work fine
o Cloudfront caches need to be invalidated when new packages are
added or removed, or the apt repository will end up in an
inconsistent state almost immediately
o If we use swupdate.openvpn.net to publish the snapshots we will
have to deal with cloudfront + cloudflare.
o We can choose to just publish snapshots on build.openvpn.net.
This seems the preferred option.
o Alternatively a new S3 bucket + cloudfront can be done. Whatever
people like best.
o Buildbot integration is missing, but should be fairly
straightforward
o This will probably have to wait until "--dev null" is done
As always you're welcome to join at #openvpn-meeting on Libera IRC
network every Wednesday at 13:00 Central European Time.
Kind regards,
Johan Draaisma
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
