[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Status of Debian accounts and legal agreements with cloud providers



Hi Jimmy

On Thu, Jan 31, 2019 at 04:30:25PM -0500, Jimmy Kaplowitz wrote:
> One slightly good thing is that the transition freeze is less of an
> important deadline for this legal task than the later freeze deadlines,
> so we can still get this done in time for buster if someone has the
> necessary time.

It was just the deadline we set to ourselves to have enough time for the
actual transition.

> If nobody has more time to pursue this than I currently do, I will do my
> best to initiate the necessary conversations by the end of next week and
> pursue them as required. If someone does have spare time to pursue this
> (with a CC to me as SPI President), that'd be great.

I think the largest problem is to define what exactly needs to be done.
You wanted to get input from an attorney on the agreements.  And that
sounded like a long process.  If it's just the technical doing, then
it's rather easy.

The technical todo list AFAIK is:
- Create an owner e-mail alias somewhere in spi-inc.org or debian.org,
  which can be used as account owner for multiple AWS accounts and
  Azure (so the alias needs to support address extension somehow).
- Create AWS accounts and accept
  - https://aws.amazon.com/agreement/
  - https://aws.amazon.com/service-terms/
  This step needs a billing method assigned temporariliy.  After that
  David can somehow move the projects into the Amazon OEM organization.
- Create debian.org (or SPI with debian.org[1]) Azure Active Directory for
  authentication.
- Create Azure subscription with information sent to the owner e-mail.
  (At least it worked this way when we (credativ) did this setup.)

Steve from Microsoft contacted zobel and me about the Debian publishing
subscription.  He wanted to know the owner e-mail address.

Thank you for your work.

Regards,
Bastian

[1]: If the AAD is debian or spi+debian+others depends on how we want to
automatically manage users in the future.  Permissions for user
management are global, so an automatic process can't be restricted to
debian.org.
-- 
No more blah, blah, blah!
		-- Kirk, "Miri", stardate 2713.6


Reply to: