[FFmpeg-devel] [RFC] fateserver

[Marth64]

Hi Michael, all,

While awaiting direction I will go ahead and study this process further.
>From an overall view, it is something I am comfortable to help maintain.
Perhaps my focus can be to get the current version in a stable place, and
work on a long term improvement strategy to the rewrite version.

If Docker is allowed, with regard to security updates within the Docker
container: I have known processes to do this and will be transparent with,
I also have experience with vulnerability management so I will apply that
lens proactively.

Thanks,


On Mon, Feb 26, 2024 at 8:30 AM Michael Niedermayer <michael at niedermayer.cc>
wrote:

> Hi
>
> On Sun, Feb 25, 2024 at 06:21:14PM -0600, Marth64 wrote:
> > Thank you Michael, for the opportunity.  I have some initial questions
> > while others add the remaining detail.
> >
> [...]
> > 2) Are you open to Docker containerization (with rootless)? In this way,
> > the application is jailed and can restart automatically on its own. Also,
> > more flexibility on the host machine itself.
>
> This depends on who maintains the setup. I dont volunteer to maintain
> a extra container layer. But if someone else does it and i never have
> to deal with it (and assuming baptiste has no objections) thats perfectly
> fine with me. But for example if you setup ssh (for the fate client
> connections) in a docker, apache / nginx in a docker, ...
> all this needs to get security updates.
>
> thx
>
> [...]
> --
> Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB
>
> If a bugfix only changes things apparently unrelated to the bug with no
> further explanation, that is a good sign that the bugfix is wrong.
> _______________________________________________
> ffmpeg-devel mailing list
> ffmpeg-devel at ffmpeg.org
> https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
>
> To unsubscribe, visit link above, or email
> ffmpeg-devel-request at ffmpeg.org with subject "unsubscribe".
>