Time/Place

This meeting is a hybrid teleconference and slack chat. Anyone is welcome to join...here's the info:

• Time: 11:00am Eastern Daylight Time US (UTC-4)
• Audio/Video Conference Link:   
  • Join Zoom Meeting: https://lyrasis.zoom.us/j/81195576163?pwd=MkIvektGQVhYdGpkZndNOE1DbG5UZz09
  • Meeting ID: 811 9557 6163
  • Passcode: 408241

Attendees 

• Ben Pennell
• Doron Shalvi  
• James Alexander 
• Arran Griffith - Chair 
• Demian Katz 
• Dan Field 
• Jared Whiklo 
• Calvin Xu 
• Thomas Bernhart 
• Michael Ritter 

**Each week a meeting chair will be assigned based on a rotating schedule.**

 - denotes note taker

Agenda

1. Pop Up Topics
   1. Fedora 3 export/migration questions
2. Recap on Apache ActiveMQ CVE

   1. Outstanding issues?

3. Building a reporting procedure
   1. Suggestions and recommendations?
4. Next Meeting Chair:
   1. Chair: Thomas Bernhart
   2. Note Taker: Doron Shalvi

See Rotating Schedule here  

Notes

1. Aaron McCullough is the product directory for Ubiquiti. Product is based on Hyku with custom front-end. Hyku is stuck on Fedora 3 right now. Looking for thoughts on migration timelines of large datasets from Fedora 3 to 6. 3 weeks to migrate and 3-5 days to index for National Library of Wales. Vilanova's was similar in scale to Wales, but they had fewer objects.
   
   1. If you scaled up the number of objects, the storage numbers seem to be a linear progression.
   2. Hyrax Valkyrie adapter is almost complete. Hyku is delivering the Postgres adapter first and then working on Fedora 6. Time frame considerations could put pressure on this decision.
2. OCFL community meeting (https://github.com/OCFL/spec/wiki/2023.11.08-Community-Meeting) - going through the use cases for version 2.
   1. talking about packaging past versions of an object into a zip/tar/etc package. This would have fewer files on disk. Users are concerned about the number of files on disk. The idea of containerizing these files in some sort of non-compressed archive to avoid.
   2. Section 2 i covers use case 33, has a lot of information about the various proposals.
   3. No decision has been made yet, and it would require implementation.
   4. Would this allow for a single object with all the parts of an Archival Group stored inside? Would this be only for old versions? Would this be for part of a repository or the whole thing.
   5. OCFL is collecting feedback on these proposals, (https://github.com/NationalLibraryOfNorway/ocfl-package-per-version-workgroup-notes/tree/main). What is a need of the Fedora user community?
3. Security update
   1. No procedure currently in place to address vulnerabilities.
   2. Fedora 6 is now the Long Term Support version and security fixes will only be done for it.
   3. Dependabot PRs have been paused, where are they sent, what is the process for reviewing and/or merging PRs.
   4. What about updating dependencies on a more regular basis.
   5. Jared will try building a new release process page.