From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pf1-x42e.google.com (mail-pf1-x42e.google.com [IPv6:2607:f8b0:4864:20::42e]) by sourceware.org (Postfix) with ESMTPS id 8FD7938515F8 for ; Wed, 12 Oct 2022 18:14:09 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 8FD7938515F8 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-pf1-x42e.google.com with SMTP id i3so7693698pfc.11 for ; Wed, 12 Oct 2022 11:14:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=Sz+IiJabUDmtjiYmVu05mCtAFuF3vBQLE8h1CAWtV2M=; b=T+GIl3xyKhVoBnIrsV7L/+00pYVwMsVZrosaGNdYxjvxJA8BrrIUuIVU+Ovup8pt+0 VRNlIJIeMGi5xq/GSGwaGFzzmwQRZ+mJwqiB5WzOIF1Mo/Hg61mRWN+YBsy0vdSn4aoX DaU2I0aNVObBs5O57aG1oni9z2TqljK+UsDgRdZInmsppLXC1FinOCuy5KhT9DLM+AuF xbTThkil/RCKBSXnxRKqJ6H5Oiy1pnxmkhMn8cHb+jIZwyT9rihbqNuTmqxj//EXQI2F pHAMYPq2mpRxcwVQ+1nyYSNQ06DhQK9OmGW+ENqMkI2+mps5wxbotCt1yDDQ3oOHnipw /RCg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Sz+IiJabUDmtjiYmVu05mCtAFuF3vBQLE8h1CAWtV2M=; b=dLQIwNkuLQ4CouApDUlClSXU+Z1FukSsMqFsXgFtoXUqf5RDO0g5qlcAlR51Df2pjm SlqPzzAUEe+MLeiqKosrx0PktlQ9I8D5vzrFm36ndTgmla7FBMcETwqeoHL+yzkQ3Swl +pP27TvxBxQPOLHt97RQtoVXRJ+C1YN+XQSgRC6H7M+LX6Cs2olPBCV5cxNom2ituvoA 2GEtfM31AWQ4hJmmZ4cEQg8hG9lzs1i3qS+YUVxYxFeSzQAukiA4fu9UtiUEBNlK7Tcu 6rQq4/syQKeYIUlLX3Z3pSAmSar1fgkR8YYdRQreg6Xzml/VPJU0q/nJAEmTZYBHY7Zi jvGQ== X-Gm-Message-State: ACrzQf1AgrOz2IRmFVMr35D07+NcdSyIy2zpbtS+c6cBsqwJFcVUDmi6 HxI1KTMfHQ8L0rF0oH4eawC3wbDuKZP96CTwPY5qDk1e X-Google-Smtp-Source: AMsMyM5Sv7Slt+BQa3ZdmvBWi7Rmava+B1fh8MCTi3x8iSyU3l6JYem2KOWzE8qHjIXt332zkxzJnqKhyVnEeeBV/U0= X-Received: by 2002:a05:6a00:15c8:b0:565:bc96:1c5b with SMTP id o8-20020a056a0015c800b00565bc961c5bmr3095392pfu.52.1665598448314; Wed, 12 Oct 2022 11:14:08 -0700 (PDT) MIME-Version: 1.0 References: <2513b668-9ebd-9e78-7263-dc24f4a9558a@redhat.com> In-Reply-To: <2513b668-9ebd-9e78-7263-dc24f4a9558a@redhat.com> From: Andrew Pinski Date: Wed, 12 Oct 2022 11:13:56 -0700 Message-ID: Subject: Re: Toolchain Infrastructure project statement of support To: Overseers mailing list Cc: "Carlos O'Donell" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.5 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On Wed, Oct 12, 2022 at 9:43 AM Carlos O'Donell via Overseers wrote: > > The GNU Toolchain project leadership supports the proposal[1] to move the > services for the GNU Toolchain to the Linux Foundation IT under the auspi= ces of > the Toolchain Infrastructure project (GTI) with fiscal sponsorship from t= he > OpenSSF and other major donors. Who got to decide to be part of the leadership? Where are the bylaws? > > This support includes empowering the GTI Technical Advisory Committee to = vote > on issues surrounding key infrastructure requirements. Additionally we we= lcome > any other projects at Sourceware.org that wish to join the effort. Is there some kind of bylaws which describe the relationship between GTI and the actual free source projects and the TAC? > > The GNU Toolchain is the cornerstone of the GNU/Linux ecosystem, the Clou= d, and > embedded environments. Open Source security best practices and mandates f= rom > governments and industry on software supply chain security require a stro= ng > effort to ensure compliance with policies, maintain the trust of the > distributors of software built by the GNU Toolchain, and the continued vi= tality > of the GNU Toolchain projects. Trust is a heavy weighted word in general. Especially maintaining trust of distributors is that really what we should be doing here, rather than maintaining trust of the open/free sourceness of the toolchain? > > We believe that utilizing the experience and infrastructure of the LF IT = team > that already is used by the Linux kernel community will provide the most > effective solution and best experience for the GNU Toolchain developer > community. Can you expand on the voting mechanism that got to this decision? Is there an email trail of all of emails between folks or notes from meetings? Were the meetings held in private instead of allowing more people to join the group? Who decided who was on the group and even more how do people get to join the TAC and who gets to vote who is on the TAC? > > As with kernel.org, GTI has requested from the Linux Foundation IT that a= ll > software implementing the infrastructure for the GNU Toolchain projects m= ust > be Free Software. If Free Software versions of necessary security tools = are > missing, GTI will work with Free Software supporters to develop Free Soft= ware > alternatives. This is a stack backwards and even worse it is a fork. Thanks, Andrew Pinski > > Carlos O=E2=80=99Donell > David Edelsohn > Dave Miller > Jason Merrill > Jeff Law > Jim Wilson > Joel Brobecker > Joel Sherrill > Joseph Myers > Kaveh Ghazi > Martin Liska > Ramana Radhakrishnan > Richard Biener > Segher Boessenkool > Siddhesh Poyarekar > Toon Moene > Tulio Magno Quites Machado Filho > > [1] https://sourceware.org/pipermail/overseers/2022q3/018896.html >