9 files changed, 242 insertions, 1 deletions
diff --git a/archive/2022-08-16--meeting-minutes b/archive/2022-08-16--meeting-minutes
new file mode 100644
index 0000000..377eb43
--- /dev/null
+++ b/archive/2022-08-16--meeting-minutes
@@ -0,0 +1,54 @@
+Date: 2022-08-16 1100 UTC
+Meet: https://meet.sigsum.org/sigsum
+Chair: ln5
+
+Agenda
+
+    Hello
+
+    Status round
+
+    Decisions
+
+    Next steps
+
+
+Hello
+
+    ln5
+
+    gregoire
+
+
+Status round
+
+    [ln5] checker bug fixes, half way deployed
+
+    [ln5] log operations sysadmin
+
+    [ln5] service planning
+
+    [ln5] new onion cert for www.so
+
+    [gregoire] some pollish on long-lived witness
+
+
+Decisions
+
+    No decisions.
+
+
+Next steps
+
+    [ln5] checker running
+
+    [ln5] review the spamming tool
+
+    [gregoire] merge request for longe-lived witness
+
+
+Other useful links
+
+    https://www.usenix.org/conference/usenixsecurity21/presentation/schmitt
+
+    https://www.usenix.org/system/files/sec21-schmitt.pdf
diff --git a/archive/2022-08-23--meeting-minutes b/archive/2022-08-23--meeting-minutes
new file mode 100644
index 0000000..bc65de8
--- /dev/null
+++ b/archive/2022-08-23--meeting-minutes
@@ -0,0 +1,41 @@
+Date: 2022-08-23 1100 UTC
+Meet: https://meet.sigsum.org/sigsum
+Chair: rgdd
+
+Agenda
+	* Hello
+	* Status round
+	* Decisions
+	* Next steps
+
+Hello
+	* rgdd
+	* gregoire
+	* ln5
+
+Status round
+	* [rgdd] booting up from vaccay from where we left off
+		* proposals: doc/proposals/2022-07*
+		* sigsum-debug: https://git.sigsum.org/sigsum-go/log/?h=sigsum-spam
+		* tool sketch: https://git.sigsum.org/sigsum-go/tree/cmd/sigsum/main.go?h=sigsum
+	* [gregoire] MR long-lived witness
+
+Decisions
+	* Decision: adopt case-insensitive hex proposal
+		* https://git.sigsum.org/sigsum/tree/doc/proposals/2022-07-case-insensitive-hex.md
+	* Decision: adopt no required "sigsum/v0" constant proposal
+		* https://git.sigsum.org/sigsum/tree/doc/proposals/2022-07-endpoint-url.md
+	* Decision: adopt permit lack of witness cosignatures proposal
+		* https://git.sigsum.org/sigsum/tree/doc/proposals/2022-07-permit-lack-of-witness-cosignatures.md
+
+Next steps
+	* [gregoire] add metrics for last tree height and timestamp
+	* [gregoire] start looking at updating trillian api, get links from rgdd
+	* [ln5] merge long-lived witness
+	* [ln5] checker running
+	* [ln5] (sys)admin things
+	* [rgdd] proposals, MR sigsum-debug, admin stuff
+
+Other useful links
+	* https://gitlab.torproject.org/rgdd/ct
+	* https://gitlab.torproject.org/tpo/onion-services/sauteed-onions/monitor
diff --git a/archive/2022-08-30--meeting-minutes b/archive/2022-08-30--meeting-minutes
new file mode 100644
index 0000000..06d0ad3
--- /dev/null
+++ b/archive/2022-08-30--meeting-minutes
@@ -0,0 +1,36 @@
+Date: 2022-08-30 1100 UTC
+Meet: https://meet.sigsum.org/sigsum
+Chair: rgdd
+
+Agenda
+	* Hello
+	* Status round
+	* Decisions
+	* Next steps
+
+Hello
+	* rgdd
+	* gregoire
+	* nisse
+	* ln5
+
+Status round
+	* [gregoire] started looking at trillian update (#18)
+		* Missing tests that were a prerequisite have been re-added and merged already
+		* Actual update to Trillian version is still waiting to be merged, ran into issues
+			* shutting down trillian log server with kill signal fails with new version
+			* path forward: report issue, provide fix if cla issues can be resolved, and in the mean time kill twice which solves this particular bug
+	* [rgdd] merging stuff from gregoire and discussing changes
+	* [rgdd] proposal to replace cgit with gitlab, including some gitlab dog fooding
+
+Decisions
+	* Decision: replace cgit with GitLab
+		* https://git.sigsum.org/sigsum/tree/doc/proposals/2022-08-replace-cgit-with-gitlab.md
+
+Next steps
+	* [gregoire] split trillian update from README changes into two separate MRs
+	* [rgdd] setup issues and milestones in gitlab
+	* [rgdd] review MRs from gregoire
+	* [rgdd] talk monitor with gregoire and nisse
+	* [rgdd] start onboarding nisse
+	* [ln5] sysadmin issues, like checker and specifying hw requirements
diff --git a/archive/2022-09-06--meeting-minutes b/archive/2022-09-06--meeting-minutes
new file mode 100644
index 0000000..f865c67
--- /dev/null
+++ b/archive/2022-09-06--meeting-minutes
@@ -0,0 +1,52 @@
+Date: 2022-09-06 1100 UTC
+Meet: https://meet.sigsum.org/sigsum
+Chair: ln5
+
+Agenda
+	* Hello
+	* Status round
+	* Decisions
+	* Next steps
+
+Hello
+	* rgdd
+	* gregoire
+	* ln5
+	* nisse (on and off due to connectivity issues)
+
+Status round
+	* [rgdd, gregoire] monitor webgui prototype sketch on whiteboard
+		* https://nextcloud.glasklarteknik.se/index.php/s/E9szYA6PHa2ExnH
+	* [rgdd] some initial things to read for nisse
+		* https://pad.sigsum.org/p/fb98-aa73-ef11-ec99 (ongoing, do not persist yet)
+	* [rgdd] drafty sigsum beamer template
+		* https://git.sigsum.org/sigsum/tree/beamer?h=beamer&id=5dd6c416aa6e14dd5ddbe4622274b71b86b7a030
+	* [rgdd] proposal to migrate some self-hosted services to gtse
+		* https://pad.sigsum.org/p/ce36-ec54-bf94-ca72 (ongoing, do not persist)
+	* [rgdd] started importing issues into gitlab, wip
+	* [gregoire] Monitor PoC (have the UX mostly working for a single log)
+	* [gregoire] Python modules
+		* Related to the serialization module: https://git.sigsum.org/sigsum-go/tree/pkg/types/ascii/ascii.go?h=rgdd/sketch
+
+Decisions
+	* Decision? migrate some self-hosted services to gtse
+		* Needs more work, comments to address:
+		* Should we keep sigsum.org names for jitsi and pads (similar to gitlab?)
+		* Should we use gitlab specific URLs for our Go modules, or, e.g., shorten them so that they are independent of where we host git?  For example:
+			* sigsum.org/log-go could be redirected to gitlab.sigsum.org/core/log-go
+		* For how long should we keep cgit around and why?  Any ballpark to start with?
+
+Next steps
+	* [rgdd] add more issues to gitlab
+	* [rgdd] continue onboarding nisse and pair review patches from gregoire
+	* [ln5] get the go book handed over to nisse, thursday
+	* [ln5] sysadmin issues, like checker and specifying hw requirements
+	* [gregoire] Deploy the monitor prototype for testing/demo
+	* [gregoire] Continue modularizing python package
+		* Maybe helpful for consistency proof: https://gitlab.torproject.org/rgdd/ct/-/tree/main/pkg/merkle
+	* [gregoire] Patch to sigsum-go with public key func
+	* [gregoire] Monitor verification?
+		* Maybe helpful: https://gitlab.torproject.org/rgdd/ct/-/blob/main/doc/tlog-algorithms.md#compact-range-extension
+
+Other useful links
+	* https://gitlab.com/gitlab-org/cli
diff --git a/doc/proposals/2022-08-replace-cgit-with-gitlab.md b/doc/proposals/2022-08-replace-cgit-with-gitlab.md
new file mode 100644
index 0000000..35431f7
--- /dev/null
+++ b/doc/proposals/2022-08-replace-cgit-with-gitlab.md
@@ -0,0 +1,55 @@
+Proposal to replace cgit with GitLab.
+
+# Background
+
+As more people are getting involved in Sigsum we need better tooling for issue
+tracking and merge requests.  We discussed and tried some light options before:
+
+  - [git-bug](../archive/2022-05-31-notes-on-git-bug), not mature enough
+  - [git-appraise](../archive/2022-06-28--meeting-minutes), we didn't try much
+  - Mailing list, we have it (and will continue to) but it is not used much
+  - [etherpad](https://pad.sigsum.org/p/sigsum-db), current ad-hoc solution due
+    to the lack of a good issue tracker and merge request tool.  Requires a lot
+    of work because it is manual, has poor overviews, etc.  We similarly have a
+    [milestone pad](https://pad.sigsum.org/p/sigsum-ms) which works pretty well.
+
+We [selected cgit](../archive/2021-06-21--meeting-minutes) 14 months ago because
+it is low-effort to self-host.  We were so few people that we did not have a
+large need for full-blown issue tracking and merge request flows.  We were also
+unsure if we would ever need this.  For example, a mailing list might have been
+sufficient and we erred on the side of starting as simple as possible.
+
+Other than cgit, the two options that we considered free enough
+[were](../archive/2021-06-21-self-hosted-services):
+
+  - Codeberg
+  - GitLab
+
+Most of us are more familiar with GitLab from other project involvement.
+
+# Proposal
+
+Migrate our repositories to a GitLab instance that is self-hosted.  Shut down
+cgit.  The main downside is that links used in past presentations will break.
+This is why we [did not rename](./2022-04-restructure-repositories.md) the
+current repository named sigsum, which we would like to be "docs" or similar.
+So, this proposal means that we will make this "breaking link change" anyway.
+
+We are not aware of any Sigsum deployments that will be inconvenienced by this.
+
+Below is a preliminary GitLab structure for the top-most group "sigsum".
+
+  - admin ("ansible, operations, etc")
+    - testing
+    - checker
+    - etc.
+  - core ("sigsum source code")
+    - log-go
+    - sigsum-py
+    - sigsum-go
+  - project ("documentation, website, etc")
+    - documentation (archive, specs, proposals)
+    - www.sigsum.org (current Hugo source)
+
+I.e., "admin", "core", and "project" are subgroups.  We split the current sigsum
+repository into "documentation" and "www.sigsum.org" (i.e., website).
diff --git a/hugo/config.toml b/hugo/config.toml
index 6e36b1a..0d29f9b 100644
--- a/hugo/config.toml
+++ b/hugo/config.toml
@@ -9,7 +9,7 @@ theme = "researcher"
   logo = "/media/logo.svg"
   [params.footer]
     text = "er3n3jnvoyj2t37yngvzr35b6f4ch5mgzl3i6qlkvyhzmaxo62nlqmqd.onion"
-    url = "http://er3n3jnvoyj2t37yngvzr35b6f4ch5mgzl3i6qlkvyhzmaxo62nlqmqd.onion/"
+    url = "https://er3n3jnvoyj2t37yngvzr35b6f4ch5mgzl3i6qlkvyhzmaxo62nlqmqd.onion/"
   [params.style]  # appearance options (can be omitted)
     fontFamily = "Outfit"
     pageWidth = "750px"
diff --git a/hugo/content/log-go/index.html b/hugo/content/log-go/index.html
new file mode 100644
index 0000000..6842915
--- /dev/null
+++ b/hugo/content/log-go/index.html
@@ -0,0 +1 @@
+<head><meta name="go-import" content="sigsum.org/log-go git https://gitlab.sigsum.org/sigsum/core/log-go"></head>
diff --git a/hugo/content/sigsum-go/index.html b/hugo/content/sigsum-go/index.html
new file mode 100644
index 0000000..079bbda
--- /dev/null
+++ b/hugo/content/sigsum-go/index.html
@@ -0,0 +1 @@
+<head><meta name="go-import" content="sigsum.org/sigsum-go git https://gitlab.sigsum.org/sigsum/core/sigsum-go"></head>
diff --git a/hugo/content/testing/index.html b/hugo/content/testing/index.html
new file mode 100644
index 0000000..3b4b39e
--- /dev/null
+++ b/hugo/content/testing/index.html
@@ -0,0 +1 @@
+<head><meta name="go-import" content="sigsum.org/testing git https://gitlab.sigsum.org/sigsum/admin/testing"></head>