Time/Place

This meeting is a hybrid teleconference and slack chat. Anyone is welcome to join...here's the info:

• Time: 11:00am Eastern Daylight Time US (UTC-4)
• Audio/Video Conference Link:   
  • Join Zoom Meeting: https://lyrasis.zoom.us/j/81195576163?pwd=MkIvektGQVhYdGpkZndNOE1DbG5UZz09
  • Meeting ID: 811 9557 6163
  • Passcode: 408241

Attendees 

• Ben Pennell
• Doron Shalvi  
• James Alexander
• Arran Griffith 
• Demian Katz 
• Dan Field 
• Jared Whiklo 
• Calvin Xu 
• Thomas Bernhart - Chair  
• Michael Ritter 

**Each week a meeting chair will be assigned based on a rotating schedule.**

 - denotes note taker

Agenda

1. Announcements:
2. Pop-up/Other Topics:
   1. TAC Performance Testing Update?
   2. Were there any Apache-related vulnerabilities we needed to look at in any of the fcrepo-exts?
3. Migration Updates

4. Updates on:

   1. Open Tickets (but assigned in some cases): 

      1. FCREPO-3913 - Getting issue details... STATUS
      2. FCREPO-3912 - Getting issue details... STATUS
      3. FCREPO-3911 - Getting issue details... STATUS - does this just need to get closed?
      4. FCREPO-3910 - Getting issue details... STATUS
      5. FCREPO-3908 - Getting issue details... STATUS - I think this one is just here to hold an idea?
      6. FCREPO-3907 - Getting issue details... STATUS
      7. FCREPO-3906 - Getting issue details... STATUS
      8. FCREPO-3905 - Getting issue details... STATUS
      9. FCREPO-3897 - Getting issue details... STATUS

   2.  In Progress and older but still relevant open tickets:

      1. FCREPO-3875 - Getting issue details... STATUS

   3. In Review:

      1. FCREPO-3883 - Getting issue details... STATUS
      2. FCREPO-3882 - Getting issue details... STATUS
      3. FCREPO-3881 - Getting issue details... STATUS

5. New tickets:

6. Backlog Tickets to consider working:
7. Next Meeting Chair:
   1. Chair: Dan Field
   2. Note Taker: Arran Griffith

See Rotating Schedule here  

Notes

Announcements: None
Pop-up/Other Topics:
TAC Performance Testing Update? 
<Holding this over as Dan not present>
Were there any Apache-related vulnerabilities we needed to look at in any of the fcrepo-exts?
Camel-toolbox - client-only but Dan has put in a PR 
FCRepo -4.x - this is not maintained - could it be archived?
fcrepo-webapp-plus is possibly still in use 

It looks like some of the fcrepo-exts could be archived 
Docker 6.4.1 - an image has been released

Migration Updates
Updates on:

Open Tickets (but assigned in some cases): 

FCREPO-3913 - pipeline to build fcrepo Docker image does not correctly find latest tag in fcrepo/fcrepo RECEIVED
              Assigned to Thomas, perhaps specify the release, would be preferable to avoid manual configuration. 
FCREPO-3912 - tag name of fcrepo Docker image built by release pipeline of fcrepo/fcrepo does not follow new naming scheme RECEIVED
              There would be git complications around changing the release pattern to match this. 
              Demian shared te VuFind documentation release process branching, see -https://vufind.org/wiki/development:git-branches
FCREPO-3911 - CRITICAL Apache ActiveMQ Exploit in the wild OPEN - does this just need to get closed?
              This work is done except for patching 3.x (ie 4,5 & 6), which is problematic. 
              Thomas will ask Arran to circulate an email saying that 3.x will not be patched. 
              Notes on how to lock down ActiveMQ ports would be constructive. 
              
FCREPO-3910 - Ingests against Fedora 6 hang indefinitely RECEIVED
              Need to be able to set out the steps to reproduce the problem that Thomas reported. 
              Perhaps trying to do this via docker instance would be an option. 
              Thomas will try to get more data before looking for more logging options., such as -
              [Jared] Use of relic/new relic could be constructive in providing this, or using TRACE (or further enhanced logging).
              
FCREPO-3908 - Data provenance RECEIVED - I think this one is just here to hold an idea?

FCREPO-3907 - tomcat reindexing resume capability OPEN
              Jared will take this.
FCREPO-3906 - FCREPO uses json-ld-1.0 processing mode but silently accepts json-ld-1.1 directives RECEIVED
              Documentation issue, Thomas will take the ticket.
FCREPO-3905 - Upgrade util should support destination host that does not match source OPEN
              Ben looking to work on this.
FCREPO-3897 - incorrect error when nesting AGs in the UI OPEN
              [ie Cannot create an AG inside an AG but the error is not correct]
 In Progress and older but still relevant open tickets:

FCREPO-3875 - Document Archive Group Considerations for Fedora 6 IN PROGRESS
In Review:

FCREPO-3883 - Allow PUT over a tombstone IN REVIEW
FCREPO-3881 - Disallow DELETE of tombstone of objects in an Archival Group IN REVIEW
     Mike will action Jared's comments.
     
FCREPO-3882 - Allow access to the timemap and versions from a tombstone. IN REVIEW
     ready to merge
     
New tickets: 

Mike Sharp: some notes on how to lock down ActiveMQ ports would be constructive. 
ActiveMQ ports could be closed - Thomas will talk to Mike Sharp about locking down their config.

Next week's meeting  (Thurs 23rd Nov) is cancelled because of Thanksgiving, unless a Slack notice to the contrary is issued..

Next Meeting Chair:
Chair: Dan Field
Note Taker: Arran Griffith