[1/5] One thing I keep coming back to is how rewarding and challenging it is to feel responsible for a wide variety of design decisions. That's a generic statement and applies to being a maintainer of any software project. Sure, some are bigger in scope like the Linux kernel or systemd. Some projects have a much more visible exposure than others and we only get to know of the ones with less fame or notoriety when things break in ways we never imagined.
[4/5] I'm not really complaining. I'm just noticing that I'm aware of this responsibility and I try to live up to it as much as I can. But the human condition is failure and regression to the mean. Bug fixes are hard to do but easy to justify most of the time. For other developers they are also clear signals of value and work that someone put in. Features are another thing. They get the fame, they get the flame, and the blame.
[3/5] And the feedback is immediate and relentless exarcabeted by all fun "hacker websites" where people can harp on about things they're not really deeply involved in.
[2/5] Behind all these projects often is a small set of people that take decisions on how something works, looks like, feels, the "handiness" of the tool if you will. Getting to do that is a great pleasure and rewarding yet it's also fscking scary because you're the one who is on the hook when things break or don't live up to the expection of everyone.
I've started working on some glibc patches and while doing that I realized that glibc uses lore for their mailing list as well. And I'm super happy that b4 review tui that @monsieuricon built, works for glibc as well. That's really nice and gives me a unified review/tracking experience. Something that @codonell might also find useful.
The real tragedy about the ptrace bug is that @jann pointed to the exact exploit primitive in a 2020 patch series where he implemented the architecturally sound fix: keep the mm alive until the task is reaped.
But it neither got reviewed nor merged. Let's try and change that:
I love that me ranting to @pid_eins about "I don't want to mount unprivileged images in the kernel so my idea is to do it in userspace relying on the new mount API through a daemon in systemd please come to LSFMM with me" turned out exactly as envisioned. And all in less than two years.
I took it one step further and implemented both CLONE_AUTOREAP (now for non-pidfd as well) and CLONE_PIDFD_AUTOKILL (requires no new privileges for the child now):
So I've just been looking at the sponsorship page for LSFMM and you all need to go out and steal some of that AI funding money for one of the conferences that makes the compute for all the fanciness possible! Like right now, please.
My role in upstream maintenance for the Linux Kernel will continue as it always has. The same goes for @pid_eins involvement in systemd. We take our upstream responsibility very seriously and always have.
Javier González (Storage) Martin K. Petersen (Storage) Christian Brauner (Filesystems) Amir Goldstein (Filesystems) Jan Kara (Filesystems) Vlastimil Babka (MM) Matthew Wilcox (MM) Daniel Borkmann (BPF) Martin KaFai Lau (BPF)
The VMGenID specification defines a notification mechanism whenever a VM is cloned/copied so userspace and kernel can take appropriate action (e.g., changing machine ID or updating random seeds): https://uapi-group.org/specifications/specs/vmgenid/
The #uapigroup is very happy to serve as a home for these specs.
@kernellogger@sven@vegard@monsieuricon But the links are useful independent of that. They simply provide a trivial jumping point to lore. If the series was managed via b4 it's trivial to back to all version of the same patchset.
The benefits for everyone else should simply be what counts here, not a perceived discomfort.