<commit_before># 2017-05-24
Time: **9am PDT** (12pm EDT, 5pm BST) [see the time in your timezone](https://www.timeanddate.com/worldclock/fixedtime.html?msg=Linuxkit+Security+SIG&iso=20170524T09&p1=224)

Meeting location: https://docker.zoom.us/j/779801882

Announcement: [Moby project forum post](https://forums.mobyproject.org/t/introducing-linuxkit-security-sig-first-meeting-may-24th/47)

Video Recording: https://youtu.be/OB1Tu6cISLg

## Agenda
- Introductions
- Overview of LinuxKit and its security initiatives
- Discuss goals of SIG
- Updates on security `/projects`:
  - clear-containers
  - kernel-config
  - kspp
  - landlock
  - miragesdk
  - okernel
  - wireguard
  - IMA namespace support
- Proposal: `hardened` channel - combining multiple security `/projects` into one yml
  - which projects are ready?  When is a project "ready"?
  - which projects can / cannot be combined?
- Next meeting: 2017-06-07
  - miragesdk demo and deep dive - @samoht
  - we can propose additional deep dives and discussion topics!

## Meeting Notes

* Administrivia
  * There is a code of conduct
  * Attendees from Docker, Intel, HPE, Google, IBM, ARM, Arkxan Technologies
* What is LinuxKit?
  * LinuxKit is a toolkit for building container-focused Linuxen. i.e. distro
    building tool, not a distro itself
  * Grew out of Docker for \* ({AWS, Mac, etc.})
  * Borrowed userspace mostly from Alpine
  * system daemons (e.g. DHCP, possibly SSH, etc.) run in containers, which are
    distributed as Docker images
  * base OS is immutable, since daemons are containers
* Projects
  * [Clear Containers](../../projects/clear-containers/)
    * Question: what's the Intel feeling r.e. kvmtool, are they still
      interested in using it for clear containers?<commit_msg>also fix typo<commit_after># 2017-05-24
Time: **9am PDT** (12pm EDT, 5pm BST) [see the time in your timezone](https://www.timeanddate.com/worldclock/fixedtime.html?msg=Linuxkit+Security+SIG&iso=20170524T09&p1=224)

Meeting location: https://docker.zoom.us/j/779801882

Announcement: [Moby project forum post](https://forums.mobyproject.org/t/introducing-linuxkit-security-sig-first-meeting-may-24th/47)

Video Recording: https://youtu.be/OB1Tu6cISLg

## Agenda
- Introductions
- Overview of LinuxKit and its security initiatives
- Discuss goals of SIG
- Updates on security `/projects`:
  - clear-containers
  - kernel-config
  - kspp
  - landlock
  - miragesdk
  - okernel
  - wireguard
  - IMA namespace support
- Proposal: `hardened` channel - combining multiple security `/projects` into one yml
  - which projects are ready?  When is a project "ready"?
  - which projects can / cannot be combined?
- Next meeting: 2017-06-07
  - miragesdk demo and deep dive - @samoht
  - we can propose additional deep dives and discussion topics!

## Meeting Notes

* Administrivia
  * There is a code of conduct
  * Attendees from Docker, Intel, HPE, Google, IBM, ARM, Arxan Technologies
* What is LinuxKit?
  * LinuxKit is a toolkit for building container-focused Linuxen. i.e. distro
    building tool, not a distro itself
  * Grew out of Docker for \* ({AWS, Mac, etc.})
  * Borrowed userspace mostly from Alpine
  * system daemons (e.g. DHCP, possibly SSH, etc.) run in containers, which are
    distributed as Docker images
  * base OS is immutable, since daemons are containers
* Projects
  * [Clear Containers](../../projects/clear-containers/)
    * Question: what's the Intel feeling r.e. kvmtool, are they still
      interested in using it for clear containers?
{'fraction_non_alphanumeric': 0.09980153104621492, 'fraction_numerical': 0.027785653529912108, 'mean_word_length': 3.735570469798658, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 8, 'lorem ipsum': 0, 'www.': 2, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '5267252', 'n_tokens_mistral': 1210, 'n_tokens_neox': 1113, 'n_words': 385}