Minutes of Technical Board Meeting, 2026-10-14

[Richardson, Bruce]

Members Attending: 9/10
        - Aaron Conole
        - Bruce Richardson
        - Hemant Agrawal
        - Jerin Jacob
        - Kevin Traynor
        - Maxime Coquelin
        - Morten Brørup
        - Stephen Hemminger
        - Thomas Monjalon

NOTE: The Technical Board meetings take place every second Wednesday at 3 pm UTC
on https://zoom-lfx.platform.linuxfoundation.org/meeting/96459488340?password=d808f1f6-0a28-4165-929e-5a5bcae7efeb
Meetings are public, and DPDK community members are welcome to attend.
Agenda and minutes can be found at http://core.dpdk.org/techboard/minutes
The next meeting will happen on October 28 and will be chaired by Morten Brørup.

1. Additions to Security Team
   - Kevin and Maxime volunteered to be part of the DPDK security team
   - Both were accepted onto the team after a quick vote

2. Release Update for 26.11
   - Progress ongoing for RC1 due this week.
   - Some trees still to be pulled and more patches under review
   - As flagged on the mailing list, concern was expressed about issues with
     IPSec multibuffer compatibility between platforms in crypto drivers
     - One commit had to be dropped when crypto tree was pulled because of
       build breaks
     - Thomas asks for the maintainers of the relevant packages from Intel/Arm
       to work to try and improve this
 
3. Having a single Public Key for Security Disclosures
   - For reporting security vulnerabilities, best practice is to use encrypted
     emails.
   - This is impractical for reporters where each member of security team has
     a different key
   - Suggestion to have a single GPG/PGP key for the whole team, who each have
     a private key to read the messages
   - Can also be used to secure messages received from automatic security
     scanning (see below)
   - Stephen to follow up on creating that common key and ensuring secure
     distribution of private keys

4. New Security Scanner available for Open-Source Software (OSS)
   - Provided by Anthropic, projects can opt in to have their code scanned
   - Stephen is looking to register DPDK project, and board generally felt this
     was worth doing
   - As part of the registration, a threat model can be provided to help guide
     the analysis
   - Stephen to generate a short model draft and circulate it to the board for
     comments, before uploading to guide the security scan

5. UNH Lab Retrospective and Future Work Plans for 2027
   - The work is already underway to plan out the statement of work for the
     UNH Lab for DPDK in 2027
   - Tasks are being identified for this, for presentation to and budget
     approval by Governing Board in next few weeks.
   - Dillon Ladd from the lab presented to the techboard:
     - Draft presentation on the lab work done in 2026 including:
       - New testing and test cases added to the CI system
       - An overview of the ongoing CI lab maintenance undertaken by the lab
         staff
       - A proposed list of tasks under consideration for 2027 for Techboard
         prioritization
       - Tooling enhancements to allow easier use of AI for DTS and test
         development
       - Proposals for new areas of focus for testing
       - Techboard members to review and grade on the spreadsheet over the next
         week.