Re: Toolchain Infrastructure project statement of support

[Andrew Pinski <pinskia@gmail.com>]

On Wed, Oct 12, 2022 at 9:43 AM Carlos O'Donell via Overseers
<overseers@sourceware.org> wrote:
>
> The GNU Toolchain project leadership supports the proposal[1] to move the
> services for the GNU Toolchain to the Linux Foundation IT under the auspices of
> the Toolchain Infrastructure project (GTI) with fiscal sponsorship from the
> OpenSSF and other major donors.

Who got to decide to be part of the leadership? Where are the bylaws?

>
> This support includes empowering the GTI Technical Advisory Committee to vote
> on issues surrounding key infrastructure requirements. Additionally we welcome
> any other projects at Sourceware.org that wish to join the effort.

Is there some kind of bylaws which describe the relationship between
GTI and the actual free source projects and the TAC?

>
> The GNU Toolchain is the cornerstone of the GNU/Linux ecosystem, the Cloud, and
> embedded environments. Open Source security best practices and mandates from
> governments and industry on software supply chain security require a strong
> effort to ensure compliance with policies, maintain the trust of the
> distributors of software built by the GNU Toolchain, and the continued vitality
> of the GNU Toolchain projects.

Trust is a heavy weighted word in general. Especially maintaining
trust of distributors is that really what we should be doing here,
rather than maintaining trust of the open/free sourceness of the
toolchain?

>
> We believe that utilizing the experience and infrastructure of the LF IT team
> that already is used by the Linux kernel community will provide the most
> effective solution and best experience for the GNU Toolchain developer
> community.

Can you expand on the voting mechanism that got to this decision? Is
there an email trail of all of emails between folks or notes from
meetings? Were the meetings held in private instead of allowing more
people to join the group? Who decided who was on the group and even
more how do people get to join the TAC and who gets to vote who is on
the TAC?

>
> As with kernel.org, GTI has requested from the Linux Foundation IT that all
> software implementing the infrastructure for the GNU Toolchain projects must
> be Free Software.  If Free Software versions of necessary security tools are
> missing, GTI will work with Free Software supporters to develop Free Software
> alternatives.

This is a stack backwards and even worse it is a fork.

Thanks,
Andrew Pinski

>
> Carlos O’Donell
> David Edelsohn
> Dave Miller
> Jason Merrill
> Jeff Law
> Jim Wilson
> Joel Brobecker
> Joel Sherrill
> Joseph Myers
> Kaveh Ghazi
> Martin Liska
> Ramana Radhakrishnan
> Richard Biener
> Segher Boessenkool
> Siddhesh Poyarekar
> Toon Moene
> Tulio Magno Quites Machado Filho
>
> [1] https://sourceware.org/pipermail/overseers/2022q3/018896.html
>