...
- denotes note taker
Agenda
- Pop Up Topics
- Fedora 3 export/migration questions
- Recap on Apache ActiveMQ CVE
Outstanding issues?
- Building a reporting procedure
- Suggestions and recommendations?
- Next Meeting Chair:
- Chair: Thomas Bernhart
- Note Taker: Doron Shalvi
Notes
- Aaron McCullough is the product directory for Ubiquiti. Product is based on Hyku with custom front-end. Hyku is stuck on Fedora 3 right now. Looking for thoughts on migration timelines of large datasets from Fedora 3 to 6. 3 weeks to migrate and 3-5 days to index for National Library of Wales. Vilanova's was similar in scale to Wales, but they had fewer objects.
- If you scaled up the number of objects, the storage numbers seem to be a linear progression.
- Hyrax Valkyrie adapter is almost complete. Hyku is delivering the Postgres adapter first and then working on Fedora 6. Time frame considerations could put pressure on this decision.
- OCFL community meeting (https://github.com/OCFL/spec/wiki/2023.11.08-Community-Meeting) - going through the use cases for version 2.
- talking about packaging past versions of an object into a zip/tar/etc package. This would have fewer files on disk. Users are concerned about the number of files on disk. The idea of containerizing these files in some sort of non-compressed archive to avoid.
- Section 2 i covers use case 33, has a lot of information about the various proposals.
- No decision has been made yet, and it would require implementation.
- Would this allow for a single object with all the parts of an Archival Group stored inside? Would this be only for old versions? Would this be for part of a repository or the whole thing.
- OCFL is collecting feedback on these proposals, (https://github.com/NationalLibraryOfNorway/ocfl-package-per-version-workgroup-notes/tree/main). What is a need of the Fedora user community?
- Security update
- No procedure currently in place to address vulnerabilities.
- Fedora 6 is now the Long Term Support version and security fixes will only be done for it.
- Dependabot PRs have been paused, where are they sent, what is the process for reviewing and/or merging PRs.
- What about updating dependencies on a more regular basis.
- Jared will try building a new release process page.