Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 645192 - Staff quiz and gpg competence should be required for foundation membership
Summary: Staff quiz and gpg competence should be required for foundation membership
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Foundation
Classification: Unclassified
Component: Proposals (show other bugs)
Hardware: All Linux
: Normal enhancement (vote)
Assignee: Gentoo Board of Trustees
URL:
Whiteboard: Meeting: 2018-09
Keywords:
Depends on:
Blocks:
 
Reported: 2018-01-21 00:59 UTC by Raymond Jennings
Modified: 2018-12-09 04:57 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Raymond Jennings 2018-01-21 00:59:29 UTC
On bug 620010 prometheanfire made a comment that staff quiz completion should be required of new foundation members.  I concur.

I would like to propose the following amendments to the gentoo bylaws:

1.  That new foundation members be required to complete the staff quiz.  The staff quiz would be evaluated by the trustees as part of the application process.

2.  The staff quiz must be emailed to trustees@gentoo.org as an attachment to their application email.  The staff quiz in turn must be signed by the GPG key of the candidate as a proof of basic competence with GPG.

Motivations:  New members should be familiar with how gentoo works.  Plus, you need to know how to handle GPG to sign emails/attachments, because one of the current duties of a foundation member is to vote in trustee elections, and their ballots must be signed by GPG if they are emailed.

(aside: there was some sort of glitch preventing me from filing this under the Foundation product)
Comment 1 Raymond Jennings 2018-01-21 01:00:13 UTC
(confirming that even after filing this bug I'm unable to change the product to "Gentoo Foundation".  Suspect a glitch with my bugzilla permissions)
Comment 2 Raymond Jennings 2018-09-16 02:37:26 UTC
For clarification after spectating on the meeting.

Signing the quiz itself with GPG is intended as a proof of concept demonstrating the applicant's GPG competence, plus it establishes the existence of their GPG key for the purpose of submitting their ballots in elections.
Comment 3 Roy Bamford gentoo-dev 2018-09-16 10:11:41 UTC
We should probably cite GLEP 63 https://www.gentoo.org/glep/glep-0063.html for creation of OpenPGP keys since its Gentoo policy.

That is, foundation members OpenPGP keys need to comply with this policy for key creation.

There may be one or two things to relax, like the UID, since not all foundation members need have a @gentoo.org.
Comment 4 Alec Warner (RETIRED) archtester gentoo-dev Security 2018-09-20 02:20:01 UTC
(In reply to Raymond Jennings from comment #0)
> On bug 620010 prometheanfire made a comment that staff quiz completion
> should be required of new foundation members.  I concur.
> 
> I would like to propose the following amendments to the gentoo bylaws:
> 
> 1.  That new foundation members be required to complete the staff quiz.  The
> staff quiz would be evaluated by the trustees as part of the application
> process.

This motion was presented and accepted, as a minimum for what the current board thought was reasonable to join the foundation.

> 
> 2.  The staff quiz must be emailed to trustees@gentoo.org as an attachment
> to their application email.  The staff quiz in turn must be signed by the
> GPG key of the candidate as a proof of basic competence with GPG.
> 
> Motivations:  New members should be familiar with how gentoo works.  Plus,
> you need to know how to handle GPG to sign emails/attachments, because one
> of the current duties of a foundation member is to vote in trustee
> elections, and their ballots must be signed by GPG if they are emailed.
> 
> (aside: there was some sort of glitch preventing me from filing this under
> the Foundation product)

We did not pass a motion regarding GPG competency.
Comment 5 Raymond Jennings 2018-09-21 05:19:35 UTC
To be clear, signing the quiz with GPG is intended as a practical demonstration of one's competence with GPG.  If they can't sign the quiz, it demonstrates that they are not competente with GPG.

Sorta like how you prove you're a baker by producing a cake.
Comment 6 Raymond Jennings 2018-12-09 04:50:08 UTC
[20:49:44] <alicef> Shentino: you can start by this  Acked-by: Alice Ferrazzi <alice.ferrazzi@gmail.com>
[20:49:44] <Shentino> same way you sign your ballots
[20:49:50] <alicef> Shentino: you can start by this https://www.youtube.com/watch?v=4zahvcJ9glg
Comment 7 Raymond Jennings 2018-12-09 04:57:32 UTC
(In reply to Raymond Jennings from comment #6)
> [20:49:44] <alicef> Shentino: you can start by this  Acked-by: Alice
> Ferrazzi <alice.ferrazzi@gmail.com>
> [20:49:44] <Shentino> same way you sign your ballots
> [20:49:50] <alicef> Shentino: you can start by this
> https://www.youtube.com/watch?v=4zahvcJ9glg

Please ignore this, alicef's paste was made in error.