[kata-dev] *Confidential: RE: Community use cases meeting (Confidential Computing)
Eric Ernst
eric.g.ernst at gmail.com
Thu May 13 20:27:48 UTC 2021
I, too, would love to attend!
Eric
> On May 13, 2021, at 1:16 PM, James Magowan <MAGOWAN at uk.ibm.com> wrote:
>
> Hi Samuel,
>
> I have spoken to Mike from containerd, He indicated that our Use Case meeting time is a bit early for many of the people working in containerd who might be interested.
>
> I wonder if we can have the meeting a little later next week to accomodate?
>
> Thanks,
> James
>
>
>
> James Magowan
> IBM United Kingdom Limited
> Registered in England and Wales with number 741598
> Registered office: PO Box 41, North Harbour, Portsmouth, Hants. PO6 3AU
>
>
>
>
> From: Samuel Ortiz <sameo at linux.intel.com>
> To: James Magowan <MAGOWAN at uk.ibm.com>
> Cc: Ariel Adam <aadam at redhat.com>, Peng Tao <bergwolf at antfin.com>, kata-dev <kata-dev at lists.katacontainers.io>
> Date: 12/05/2021 13:22
> Subject: [EXTERNAL] Re: [kata-dev] Community use cases meeting (Confidential Computing)
>
>
>
> Hi James,
>
> Do you confirm you'll be able to present tomorrow during our weekly
> meeting? If so I'll add you (or someone else on your side) to the
> agenda. Thanks in advance.
>
> Cheers,
> Samuel.
>
> On Sat, May 01, 2021 at 04:07:18PM +0000, James Magowan wrote:
> > Hi,
> >
> > I mentioned at next meeting presenting the work and ideas which we have
> > been trying out for s390x around the image pull challenges and future
> > ideas.
> > With holidays in China for our main presenter and KubeCon next week I hope
> > it will be OK for us to present this and some ideas for possible
> > extensions to shim api etc the following week?
> > So Thursday 13th May.
> >
> > Thanks
> >
> >
> >
> >
> >
> > James Magowan
> > IBM Hyper Protect Containers (ZaaS Kubernetes)
> >
> >
> >
> >
> > Mobile: 44-7808-247946 | Phone: 44-1962-817235
> > E-mail: MAGOWAN at uk.ibm.com
> > Hursley Park
> > Hursley, Hampshire SO212JN
> > United Kingdom
> >
> >
> > IBM United Kingdom Limited
> > Registered in England and Wales with number 741598
> > Registered office: PO Box 41, North Harbour, Portsmouth, Hants. PO6 3AU
> >
> >
> >
> >
> > From: Samuel Ortiz <sameo at linux.intel.com>
> > To: Ariel Adam <aadam at redhat.com>, kata-dev
> > <kata-dev at lists.katacontainers.io>
> > Cc: Peng Tao <bergwolf at antfin.com>
> > Date: 29/04/2021 15:41
> > Subject: [EXTERNAL] Re: [kata-dev] Community use cases meeting
> >
> >
> >
> > Thanks everyone for joining today's meeting, very interesting
> > discussions.
> >
> > Please note that we decided to move to a weekly cadence, we have a lot
> > to talk about it seems.
> >
> > Below you will find the meeting minutes, extracted from the rolling
> > meeting notes document [1]
> >
> > * Current set of pull requests related to enablement (3 PRs)
> > - How do we want to proceed with those PRs?
> > - Samuel thinks that merging the TDX could help overall (a few more
> > comments to request). The idea would be to rebase the 2 others on top
> > of
> > this one. Any objections?
> > - We agree to merge the framework first and pile the other patches on
> > top
> > of it :-)
> >
> > * Agent API - discussion on what API restrictions we need (build time
> > option or not)
> > - What is the risk of having this code in the image however just not
> > used?
> > - It could be a runtime configuration for the agent however still part
> > of
> > the image (inside the initrd)
> > - We may have benefits from restricting the APIs (reducing attack
> > surface)
> > - Could we limit things to always getting all the pod configuration at
> > once (and nothing else?)
> > - So the idea would be to drop those APIs for all use cases
> >
> > * Container image service offload
> > - PEV raksh codebase ->
> > https://github.com/IBM/raksh-agent/commit/14b52fae8c7bc3ce4b226703efdb37749ce84fe9
> >
> >
> > * Testing for confidential computing - and general expectations
> > - A big question regarding how to test the different platform so it’s
> > something accessible upstream (SEV and TDX)
> > - Intel will provide HW for testing as part of the kata CI
> > - Can AMD also provide HW for the kata CI?
> > - Sandeep pointed out they have the HW for this however the question is
> > how to make the HW available for kata CI testing
> > - What tests would we want to run in this case?
> > - Samuel will pull Salvador to look into this
> > - We may start by looking at the integration tests and later on E2E
> > integration with k8s
> >
> > * Action Items
> > - Ariel to change the name of the meeting to confidential computing
> > - Ariel to change the meeting cadence to a weekly one
> > - Samuel to send a doodle to poll for meeting time changes
> >
> >
> > [1]
> > https://docs.google.com/document/d/1E3GLCzNgrcigUlgWAZYlgqNTdVwiMwCRTJ0QnJhLZGA/edit?usp=sharing
> >
> >
> > On Wed, Apr 28, 2021 at 11:23:23PM +0200, Samuel Ortiz wrote:
> > > All,
> > >
> > > A friendly reminder that we will have our weekly use case meeting
> > > tomorrow (04/29) at 12:00 UTC. See you all tomorrow!
> > >
> > > Cheers,
> > > Samuel.
> > >
> > > On Mon, Apr 19, 2021 at 08:12:34PM +0300, Ariel Adam wrote:
> > > > On Mon, Apr 19, 2021 at 2:25 PM James Magowan <MAGOWAN at uk.ibm.com>
> > wrote:
> > > >
> > > > > Hi Ariel/Samuel,
> > > > >
> > > > > Moving Confidential computing Use Case meeting is fine for me.
> > > > >
> > > > > Given recent fun with summer savings time and the dates/times in the
> > > > > thread.
> > > > >
> > > > > Can we clarify that meetings will be?
> > > > > every 2 weeks at 12:00 UTC
> > > > >
> > https://zoom.us/j/98038141932
> >
> > > > > next meetings Thursday 29th April, Thursday 13th May etc.
> > > > >
> > > > >
> > > > I've moved the meeting 1 week forward to April the 29th and verified
> > that
> > > > the only invitee is kata-dev mailing list.
> > > >
> > > > The meeting will be at 12:00 UTC and happen every 2 weeks.
> > > > I will also make sure to send a reminder a day before the meeting
> > (every 2
> > > > weeks).
> > > >
> > > > Lastly, I'm reminding everyone that this time slot is mainly for the
> > > > confidential computing use case and the CI/CD and performance use
> > cases
> > > > will be discussed at other times.
> > > >
> > > > Thanks.
> > > >
> > > >
> > > > >
> > > > > Thanks,
> > > > >
> > > > > James
> > > > > *Mobile:* 44-7808-247946 | *Phone:* 44-1962-817235
> > > > >
> > > > > *E-mail:* *MAGOWAN at uk.ibm.com* <MAGOWAN at uk.ibm.com>
> > > > > Hursley Park
> > > > >
> > > > > Hursley, Hampshire SO212JN
> > > > >
> > > > > United Kingdom
> > > > >
> > > > > IBM United Kingdom Limited
> > > > >
> > > > > Registered in England and Wales with number 741598
> > > > >
> > > > > Registered office: PO Box 41, North Harbour, Portsmouth, Hants. PO6
> > 3AU
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > From: Ariel Adam <aadam at redhat.com>
> > > > > To: Samuel Ortiz <sameo at linux.intel.com>, Eric Ernst <
> > > > > eric.g.ernst at gmail.com>, Peng Tao <bergwolf at antfin.com>, kata-dev <
> > > > > kata-dev at lists.katacontainers.io>
> > > > > Date: 18/04/2021 18:42
> > > > > Subject: [EXTERNAL] Re: [kata-dev] Community use cases
> > meeting
> > > > > ------------------------------
> > > > >
> > > > >
> > > > >
> > > > > Since you're leading the confidential computing use case which we
> > agreed
> > > > > Thursday's time slot would be used for then to me that makes sense.
> > > > >
> > > > > Does anyone object to moving the meeting by 1 week (as usual every 2
> > weeks
> > > > > from there)?
> > > > >
> > > > > Also, a few people pointed out that they don't see the meeting or
> > still
> > > > > see it every 2 weeks instead of 1 week. We basically sent an invite
> > to the
> > > > > kata-dev for every 2 weeks so if anyone has a better idea on how to
> > do that
> > > > > please let us know :-).
> > > > >
> > > > > Thanks.
> > > > >
> > > > > On Sun, Apr 18, 2021 at 8:32 PM Samuel Ortiz
> > <*sameo at linux.intel.com*
> > > > > <sameo at linux.intel.com>> wrote:
> > > > >
> > > > > Ariel,
> > > > >
> > > > > Next week's meeting (04/21), I will be out of the office and won't
> > be
> > > > > able to attend the meeting. Would anyone object if we shift that one
> > to
> > > > > 04/28 instead ?
> > > > >
> > > > > Cheers,
> > > > > Samuel.
> > > > >
> > > > > On Wed, Apr 14, 2021 at 01:27:54PM +0300, Ariel Adam wrote:
> > > > > > Hi everyone.
> > > > > > Going back to this mail thread.
> > > > > > Talking with Samuel it will be hard for him to move the time slot
> > for the
> > > > > > confidential computing use case (currently on Thursday every 2
> > weeks 8AM
> > > > > > EST).
> > > > > >
> > > > > > What we suggest is the following:
> > > > > >
> > > > > > - *Confidential computing* - will keep the current timeslot,
> > please
> > > > > ping
> > > > > > Samuel directly if you would like to attend and this is a
> > problem for
> > > > > you
> > > > > > - *CI/CD use case* - in practice it's only RH and IBM cloud
> > thus we
> > > > > will
> > > > > > work mainly through mails (and ping me if you are also
> > interested in
> > > > > this)
> > > > > > - *Performance isolation* - Tao will work on a different time
> > slot to
> > > > > > fit people who would like to attend as well (such as Eric)
> > > > > >
> > > > > > As pointed, we will ask to provide a status on the use cases
> > progress
> > > > > > during the AC meetings if time permits.
> > > > > >
> > > > > > Comments are welcomed.
> > > > > >
> > > > > > Thanks.
> > > > > >
> > > > > >
> > > > > > On Wed, Apr 7, 2021 at 5:08 PM Eric Ernst
> > <*eric.g.ernst at gmail.com*
> > > > > <eric.g.ernst at gmail.com>> wrote:
> > > > > >
> > > > > > > Makes sense to me, and I appreciate the change!
> > > > > > >
> > > > > > > Eric
> > > > > > >
> > > > > > > On Apr 7, 2021, at 6:26 AM, Ariel Adam <*aadam at redhat.com*
> > > > > <aadam at redhat.com>> wrote:
> > > > > > >
> > > > > > >
> > > > > > > Given that Tao agrees this makes sense I checked with Samuel as
> > well.
> > > > > > >
> > > > > > > What we suggest is that each use case leads (Ariel, Samuel, Tao)
> > will
> > > > > send
> > > > > > > a separate doodle poll for their use case.
> > > > > > > That way each of the use case teams can decide on a time that
> > fits the
> > > > > > > majority of participants and also on the cadence of the meetings
> > > > > (every 1
> > > > > > > or 2 weeks).
> > > > > > >
> > > > > > > We will also propose to give a short update on the progress of
> > the
> > > > > > > different use cases on the weekly AC meeting (if time permits).
> > > > > > >
> > > > > > > Let us know if anyone has any objections before we send out the
> > doodle
> > > > > > > polls.
> > > > > > >
> > > > > > > Thanks.
> > > > > > >
> > > > > > >
> > > > > > > On Wed, Apr 7, 2021 at 3:03 PM Peng Tao via kata-dev <
> > > > > > > *kata-dev at lists.katacontainers.io*
> > <kata-dev at lists.katacontainers.io>>
> > > > > wrote:
> > > > > > >
> > > > > > >> Thanks for bringing it to the list Fabiano! I am interested in
> > the
> > > > > > >> performance isolation use case and would love to see US folks
> > present
> > > > > > >> their thoughts and ideas too. So I am all for it to split the
> > use case
> > > > > > >> meeting and relocate to a time that works better for US folks.
> > > > > > >>
> > > > > > >> Cheers,
> > > > > > >> Tao
> > > > > > >>
> > > > > > >> On 2021/4/7 16:26, Fabiano Fidêncio wrote:
> > > > > > >> > Yesterday, Apr 6th, during the Architecture Committee
> > meeting, we
> > > > > > >> > discussed the possibility of having the community use cases
> > meeting
> > > > > > >> > split, and I assigned myself the action item to create a
> > doodle and
> > > > > > >> > send an email.
> > > > > > >> >
> > > > > > >> > Well, let me start saying that I may have failed in the
> > doodle
> > > > > thing,
> > > > > > >> > but I still am dropping the email with what I heard as a
> > feedback
> > > > > and
> > > > > > >> > what I would like to suggest.
> > > > > > >> >
> > > > > > >> > I got the feedback, from more than one person, that the time
> > for the
> > > > > > >> > community use cases meeting is not exactly optimal for
> > everyone, and
> > > > > > >> > that is right. For instance, it may be too early for folks
> > in some
> > > > > > >> > parts of the US, while it is still too late for folks in
> > Australia.
> > > > > > >> >
> > > > > > >> > With this in mind, I would like to ask whether there is the
> > interest
> > > > > > >> > to split the meeting, allowing then the involved parts to
> > talk to
> > > > > each
> > > > > > >> > other in a time that suits them best.
> > > > > > >> >
> > > > > > >> > So, this message is for everyone, but here I am explicitly
> > looking
> > > > > for
> > > > > > >> > feedback from folks interested in:
> > > > > > >> > * K8S CI/CD pipeline with kata containers
> > > > > > >> > - Here we have people interested from the US and
> > Australia, so
> > > > > maybe
> > > > > > >> > a late meeting in the US time zone would benefit the folks in
> > > > > > >> > Australia.
> > > > > > >> > * Performance isolation
> > > > > > >> > - Here we have people interested from the US and China, so
> > maybe
> > > > > a
> > > > > > >> > late meeting in the US time zone would benefit the folks in
> > China.
> > > > > > >> >
> > > > > > >> > If the parts involved in this have the interest to do so, let
> > me
> > > > > know
> > > > > > >> > and then I will try to organise a doodle, set an official
> > time, etc,
> > > > > > >> > etc, etc.
> > > > > > >> >
> > > > > > >> > We, as the community facilitating this communication, are
> > here to
> > > > > > >> > facilitate the communication in a way that it will be
> > beneficial for
> > > > > > >> > all the involved parts.
> > > > > > >> >
> > > > > > >> > Best Regards,
> > > > > > >> >
> > > > > > >>
> > > > > > >> --
> > > > > > >> Into something rich and strange.
> > > > > > >>
> > > > > > >> _______________________________________________
> > > > > > >> kata-dev mailing list
> > > > > > >> *kata-dev at lists.katacontainers.io*
> > <kata-dev at lists.katacontainers.io>
> > > > > > >> *
> > http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev*
> >
> > > > > <
> > http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev
> > >
> > > > > > >>
> > > > > > > _______________________________________________
> > > > > > > kata-dev mailing list
> > > > > > > *kata-dev at lists.katacontainers.io*
> > <kata-dev at lists.katacontainers.io>
> > > > > > > *
> > http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev*
> >
> > > > > <
> > http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev
> > >
> > > > > > >
> > > > > > >
> > > > >
> > > > > > _______________________________________________
> > > > > > kata-dev mailing list
> > > > > > *kata-dev at lists.katacontainers.io*
> > <kata-dev at lists.katacontainers.io>
> > > > > > *
> > http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev*
> >
> > > > > <
> > http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev
> > >
> > > > > _______________________________________________
> > > > > kata-dev mailing list
> > > > > kata-dev at lists.katacontainers.io
> > > > >
> > http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev
> >
> > > > >
> > > > >
> > > > >
> > > > > Unless stated otherwise above:
> > > > > IBM United Kingdom Limited - Registered in England and Wales with
> > number
> > > > > 741598.
> > > > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire
> > PO6 3AU
> > > > >
> > >
> > > _______________________________________________
> > > kata-dev mailing list
> > > kata-dev at lists.katacontainers.io
> > >
> > http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev
> >
> >
> > _______________________________________________
> > kata-dev mailing list
> > kata-dev at lists.katacontainers.io
> > http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev
> >
> >
> >
> >
> >
> > Unless stated otherwise above:
> > IBM United Kingdom Limited - Registered in England and Wales with number
> > 741598.
> > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU
> >
>
>
>
>
> Unless stated otherwise above:
> IBM United Kingdom Limited - Registered in England and Wales with number 741598.
> Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU
> _______________________________________________
> kata-dev mailing list
> kata-dev at lists.katacontainers.io
> http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.katacontainers.io/pipermail/kata-dev/attachments/20210513/975609bb/attachment-0001.html>
More information about the kata-dev
mailing list