4. April 2023

[dimakuv]

[ sorry, I forgot to create this Meeting Notes, and there was no agenda. ]

Misc

Raine Wang (rainewang) from Tencent introduced himself. Tencent uses Gramine in one of their solutions.

Anees: security fix -- do we do an out-of-cycle release?

Mona: we decided to NOT do the release. The issue (#1237) probably not exploitable on Gramine, and there seems to be no reason to do the release. Alex from Intel is looking at this exact question currently.

Anees: Amber project wants to use Gramine + GSC, but they want to use releases. And they would want to use GSC with the "minimized Docker image" patch, so maybe both these things are enough for a release.

Mona, Michal, Woju: push back, it doesn't seem to merit an out-of-cycle release, also, it would be not that simple (validation, verification, etc.), and the next release will be pretty soon (around mid-May).

Misc-2

Dmitrii: is there a way to make sure that some installed Python packages (dependencies of Gramine build process) are needed by the original application, and remove only the ones not needed by the app?

• Woju: long list of issues with this approach...
• Anees: we would like to introduce an option to GSC (like --remove-unneeded-gramine-deps), for users who want to try to reduce the size of the final GSC image.
• Woju: yes, that sounds Ok.