John Kuraikose

@Rich Rodgers

Lorenzo King

@Vasavi V 

Hussein Alayan  

Randy Templeton (TSC Chair)

@Tina Tsou (Deactivated)

David Martin

Chanda Bhingarde 

@Joseph Pearson

Benny Davis

Martin

Announcement and Issues

• SDO EOL (March 31st)

  • Archive starting week of May 3rd

  • PRI - Spring framework vulnerability - needs to be updated 6.0.0.  Spring framework 6+ requires Java17

  • SDO does not use Java Serialization so CVE does not apply in this case (IBM will mark as false positive)

  • Once SDO Spring framework vulnerability addressed can EOL SDO (make repos read only)

  • Plan is still Archive Repo and end of March

• LF Edge rename starting Q2

  • Rename everything but repos

  • Mid-May repos will be renamed post 1.1.5 release

    • fido-device-onboard (active) only fdo

    • secure-device-onboard (archive) only sdo

• FDO 1.1.5 Updates

  • Address mySQL connector  vulnerability in 1.1.5 release (WW18 (May 1-5))

• FDO 1.1.6?

  • Java17

  • FSIMs

• BMO 

  • 1:00pm EST/10:00am PST

• Open Horizon FDO Update - Joe

  • IBM has membership in FIDO 

  • Fido certification (conformance tool)

    • Independent certification vs LF Edge Certification

    •  Randy will send Dough Larsons github to FIDO to get access to conformance tool repo

  • FSIM spec available publicly replace fdo_sys (

  • FDO integration development complete https://github.com/fido-alliance/fdo-sim

  • IEAM 

    • IEAM 4.5 GA with FDO support: https://www.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_ca/4/877/ENUSZP23-0054/index.html

      • FDO 1.0 → FDO.1.15

    • Any addition FDO integration or usage

  • Open Horizon

    • Documentation "Intel FDO" → Drop "Intel"

    • Open Horizon Agent should be compatible with IEAM

    • https://open-horizon.github.io/docs/installing/fdo/#fdo-overview

  • Demo of FDO integration with Open Horizon on 02-9  https://lists.lfedge.org/g/open-horizon-mgmt-hub/viewevent?repeatid=30306&eventid=1712660&calstart=2023-02-09

• TAC Request

  • OpenSSF badging (Randy) - Questionnaire to understand the current project security practices - Required by all LF Edge projects, Whitehouse is looking at all open source projects and their security practices - Randy - go through every question

  • LFXSecurity portal onboarding (Vasavi) - security.lfx.dev - Kendall to contact Vasavi to being the onboarding process

  • Identify a primary/secondary reps to attend TAC meetings on a regular basis - Randy/Vasavi

  • Community Lab (RV-server)

    • Conformance testing - (Owner,Manuf)

Decisions

• For next meeting 

  • Upcoming meeting for LF Edge Lab

  • Update on 1.1.5 release

  • Update on SDO archive

  • Updates for FDO project by 3/3

    • Significate updates for Q1

  • Sharing updates to the growth plan for FDO

    • FDO rename

  • Increase Community engagement

    • EdgeX foundry

      • ORRA (Open Retail Reference Architecture) Chair - Arnaud Le Hors lehors@us.ibm.com

        • Open Horizons, EdgeX, FDO 

      • April 10th - Sean Williams / Todd Leasher (Intel) 

    • Other LF Edge Project engagement

  • BMO - Bare Metal Onboarding

    • Randy to work on setting up tech meeting on BMO

Update on next release 

• Next release FDO

  • No updates. Should have a plan by the next TSC meeting

Update on Goals for the project sub committee

• 2 broad goals: Support LF Edge Projects (SDO integration across LF Edge Projects). Providing developer tools that assist in compatibility testing and rapid development.

• Next Step: Develop Growth Plan for LF Edge Phase 2 requirements

• Docker containers  - Bill of Materials (Bom) Syft/Grype (reads docker container and reports all software used)

SL No.

Voting Member

Member Company

Y/N/A

Ahmed AlWattar

Chanda Bhingarde

Lorenzo King

Hussein Alayan (Benny)

@Rich Rodgers

@Vasavi V

Randy Templeton

David Martin