2022-03-24 LDCG SC Meeting Agenda/Minutes

 Agenda

• OpenBMC - summary of the email thread (Joakim Bech)
• OVSS update (Ryan Arnold (Deactivated), Leonardo Garcia)
• Linaro Ecosystem Dashboard (Joakim Bech)
• AOB

Documents

• INSERT

Action Items

• @ name action item here //dd-mm-yyyy  

Minutes

• OpenBMC - summary of the email thread (Joakim Bech)
  • Gaps
    • Arm vs x86 server is Host Interface and Host Power/Reset Control
      • there is no common hardware design, so OpenBMC needs different porting for different Arm servers (Gilbert, Arm)
    • SBMR spec: M1/M2 is one somewhat good shape?
      • No comments
  • Upstreaming
    • Are there sufficient upstreaming efforts for the Arm architectures?
      • No comments
  • Developer support
    • Is source code available to developers (open source? proprietary?)?
      -- SCP / MCP are not necessarily open source from vendors.
      -- Arm's reference code is open source.
      • Zephyr can be used to prototype the FW of SatMC FW (SatMC in SBMR should equivalent to MCP) (Gilbert, Arm)
      • Using Arduino Due instead of real MCP (Gilbert, Arm)
    • Do we have the necessary hardware to be able to do development? What hardware? How can developers get hold of it?
      • AST2600 evaluation board can be used for OpenBMC development and is readily available (Gilbert, Arm)
    • Are specifications available to developers?
      • No comments
    • What debugging capabilities exist for developers?
      • No comments
  • Testing
    • What kind of testing do we have for OpenBMC?
      • There is a repo for OpenBMC test automation, which is based on Robot framework to run test cases through BMC network interface to verify different OpenBMC features (Gilbert, Arm)
    • Is the testing sufficient?
      • No comments
    • Does it require hardware or can we do testing using emulation or similar?
      • OpenBMC support running on QEMU exists. I.e., OpenBMC test automation should be able to talk to QEMU instead real hardware to run its test cases (Gilbert, Arm)
  • Security
    • Cloud Security Industry Summit published a report (A Case for a Trustworthy BMC) where they list gaps in OpenBMC when it comes to security. Anything in that report that we should pay attention to?
      • No comments
        
        
        
• OVSS update (Ryan Arnold (Deactivated), Leonardo Garcia)
  • Where are we with the OVSS proposal?
    
    
    
• Linaro Ecosystem Dashboard (Joakim Bech)
  • Content
    • What content are we looking for?
      • Download links?
      • Whether Arm is supported or not?
      • Release history?
      • Where and what CI is in use?
      • What optimizations?
  • Staffing, initial baseline and maintaining it
    • LDCG struggles to find staffing for this. Linaro have tried finding people for it internally, but we're struggling right now. 
    • Getting a first baseline would probably take ~1 month or so.
    • Keeping things up-to-date, will take a person a few hours every month after we've established a baseline.
    • We have discussed scripting things, which would help to some extent, but a human will be needed to fix broken links etc all the time.
• AOB