Merge branch 'main' into patch-2

sig-documentation/README.md

@@ -25,7 +25,7 @@ The goal of this SIG is to foster a community around the creation and maintenanc
 | #7 | Tuesday, July 25, 2023 07:00 AM PT (Pacific Time) |[Link](https://github.com/akash-network/community/blob/main/sig-documentation/meetings/007-2023-07-25.md)   |[Link](https://github.com/akash-network/community/blob/main/sig-documentation/meetings/007-2023-07-25.md#transcript)  |[Link](https://vxe3skefb3gv6igjgmwqlzhkfhsvltmzf4cufajqw6yuzh46wana.arweave.net/rcm5KIUOzV8gyTMtBeTqKeVVzZkvBUKBMLexTJ-esBo)
 | #8 | Tuesday, August 22, 2023 07:00 AM PT (Pacific Time) |[Link](https://github.com/akash-network/community/blob/main/sig-documentation/meetings/008-2023-08-22.md)   |[Link](https://github.com/akash-network/community/blob/main/sig-documentation/meetings/008-2023-08-22.md#transcript)  |[Link](https://53oqqojl3emoys343dhzcfp5hsfmcs2q4r4kiah4wn3wj77pbyta.arweave.net/7t0IOSvZGOxLfNjPkRX9PIrBS1DkeKQA_LN3ZP_vDiY)
 | #9 | Tuesday, September 26, 2023 07:00 AM PT (Pacific Time) | [Link](https://github.com/akash-network/community/blob/main/sig-documentation/meetings/008-2023-09-26.md) |  [Link](https://github.com/akash-network/community/blob/main/sig-documentation/meetings/008-2023-09-26.md#transcript)| [Link](https://dknymsd25d4wo4gbxp6435niarkm3ugz7f6onipsi7r7aoghn72q.arweave.net/GpuGSHro-Wdwwbv9zfWoBFTN0Nn5fOah8kfj8DjHb_U)
-| #10 | Tuesday, October 24, 2024 07:00 AM PT (Pacific Time) | Coming Soon  | Coming Soon | Coming Soon
+| #10 | Tuesday, October 24, 2024 07:00 AM PT (Pacific Time) | Coming Soon  | Coming Soon | [Link](https://j7umqwzmkiglhuckkezav7c2rbh4cirv4d2nrjophespxwsjqtxa.arweave.net/T-jIWyxSDLPQSlEyCvxaiE_BIjXg9Nilzzkk-9pJhO4)
 | #11 | Tuesday, November 28, 2024 07:00 AM PT (Pacific Time) |   |  |
 | #12 | Tuesday, December 26, 2023 07:00 AM PT (Pacific Time) |   |  |
 | #13 | Tuesday, January 23, 2024 07:00 AM PT (Pacific Time) |   |  |

sig-providers/meetings/010-2023-10-25.md

@@ -1,21 +1,19 @@
  # Akash Network - Providers Special Interest Group (SIG) - Meeting #10
 
 ## Agenda
-
+- Presentation on Auditing providers tool
+- Discussions on Content Moderation.
 - Follow up discussion on GPU Provider Setup.
 - Update from Praetor on all of the work that they have been doing. 
 - Open Discussion on all things related to Akash Providers. 
 
-
 ## Meeting Details
-
 - Date: Wednesday, October 25th, 2023
 - Time: 08:00 AM PT (Pacific Time)
 - [Recording](https://2aefpzwgiwj6jzkl5fdsn7us3pjprpnpkoqqrrsu6bjaukktnxya.arweave.net/0AhX5sZFk-TlS-lHJv6S29L4va9ToQjGVPBSCilTbfA)
 - [Transcript](#transcript)
 
 ## Participants
-
 - Andrey Arapov
 - Benjamin B
 - Byan
@@ -29,32 +27,65 @@
 - Tyler Wright
 - Zach Ross
 
-
-
-
-## Notes
-
-
-- Benjamin shared some information on a provider auditing tool that he and his brother submitted for the Akash-a-thon.
-- Benjamin shared some strategies that he created which are easy to introduce to price scripts. ould be worth looking into deval: https://github.com/figurestudios/designing-price-script-guide.
-- Sam Walker asked where the tool will be hosted. Almost everything will be powered by Akash.
-- Sam Walker mentioned an issue that he found https://github.com/akash-network/support/issues/137. Tyler mentioned that this issue was talked about during sig-support biweekly meeting #20. 
-- Deval gave an update on Content moderation.
-- Wallet addresses can be blocked. Deval showed a demo.
-- Shimpa asked what would happen if the naming was being changed.
-- Zach mentioned that he has been using Andrew Mello's chaperone OS tool for a couple of weeks.
-- Andrey mentioned Praetor's solution will be the first line defense to filter out the bad images so the provider won't bid. Chaperone service is a deeper solution.
-- Samuel mentioned some of his kubernetes experience.
-- The group talked about Andrew Mello's chaperone tool: https://github.com/cryptoandcoffee/akashos/blob/main/chaperone.py .
-- Samuel mentioned some tools they are using including https://kyverno.io/ and https://www.openpolicyagent.org/ .
-
-### Action Items:
-
+## Meeting Notes
+- Tyler mentioned the community pool grant awarded to the Praetor team for their work on tools for aspiring providers.
+- Tyler Acknowledged the progress made by the Praetor team, including basic functionality and work on content moderation and API improvements.
+
+### Benjamin's Presentation on Auditing Providers
+- Benjamin described a proof of concept created for automatically tracking and benchmarking providers. 
+- Their goal is to create an auditor tool that assesses providers on different levels based on factors like uptime and reliability.
+- Benjamin suggested a tiered signing approach, where providers meeting certain criteria would receive different ratings.
+- Mentioned the collection of historic data and its relationship with the concept.
+- Benjamin discussed the hosting of most services on Akash and noted that the database could also be run on Akash.
+- Tyler Wright encouraged participants to [view the YouTube](https://www.youtube.com/watch?v=jg90U1£82uU) video shared in the chat and provide feedback in the "providers" channel on discord.
+
+### Demo from Praetor(Content Moderation Solution)
+- Deval began to present the content moderation solutions, starting with wallet address blocking and demonstrated the use of a modified Provider service through the deploy tool from cloudmos.
+- Deval demonstrated content moderation solutions, including wallet address blocking and Image URL blocking.
+- Showed how a blocked wallet address prevents deployment and mentioned the management API, which will allow providers to close leases themselves.
+- Presented Image blocking, demonstrating the blocking of URLs containing specific domain names.
+- Explained that successful deployment requires whitelisted wallet addresses, whitelisted images, and no use of blocked domains.
+- Showed a successful deployment of a game and played the game on the provider's side.
+- Mentioned plans to make the system more dynamic and allow block and disabled items to be enabled from Praetor app itself.
+- Discussed the upcoming implementation of the management API and plans to release an updated version of the provider service.
+- Andrey inquired about whether the provider code was modified and suggested submitting pull requests upstream.
+- Deval Patel: Confirmed that they would submit pull requests once the dynamic codes and blocklist code were satisfactorily completed.
+- Damir raised a question about what happens if someone clones an Image and renames it, suggesting that the image might still run. 
+- Andrey shared an experience of trying to run a miner and having the process killed, indicating that some systems can be employed to detect and address such issues. 
+- Deval explained that the management API would allow providers to inspect the content of images and potentially close them.
+- Zach mentioned that the Chaperone service can block specific processes or look for specific file types. [Shared a link](https://github.com/cryptoandcoffee/akashos/blob/main/chaperone.py) related to this.
+- Tyler mentioned that there is an issue in the Akash project roadmap related to content moderation. 
+- Tyler encouraged Deval to update that issue with the details mentioned during the meeting. 
+### Other Matters Discuused
+- Andrey advised participants to follow announcements from the provider announcement channel in Discord. 
+- Andrey encouraged providers to report issues in the "providers" channel or directly to him. 
+- Tyler Mentioned the "support" special interest group that addresses open support tickets related to the core product. 
+- Tyler discussed issue [number 137](https://github.com/akash-network/support/issues/137), indicating it might be a known issue, and mentioned potential tooling to address it. Offered to discuss the matter further with Samuel after the meeting.
+#### -  Discussion on Security and Container User Privileges
+- Zach discussed pod security standards and the fact that Akash deployments run containers as the root user, which raised security concerns. 
+- Zach Inquired about the possibility of creating a separate Akash user for container deployments.
+- Andrey responded that blocking the root user for user deployments and specifying a non-root user in Docker images would require deeper consideration and a feature request. 
+- Andrey mentioned remapping user IDs as another option. Suggested starting a discussion in the Akash repository.
+- Tyler suggested that Zach drop a discussion on the topic of user permissions and default user settings in the Akash Repository. Mentioned the upcoming steering committee meeting where this could be discussed further.
+- Zach Expressed willingness to join the steering committee meeting tomorrow and contribute to the discussion.
+- Samuel Shared his experience with [Kyverno](https://kyverno.io/) and Open Policy Agent in the context of enforcing security policies in Kubernetes clusters. 
+- Smauel mentioned that Kyverno can be used to prevent deployments that don't meet specific security criteria. 
+#### - Discussion on Notifying Users About Rejected Images
+- Samuel asked about the process for notifying users in advance about rejected images due to security policies.
+- Andrey suggested that this topic deserves further discussion and mentioned leveraging provider attributes to notify users about rejected images.
+- Benjamin mentioned that it's not possible to send information back to users whose deployments were rejected
+- Benjamin suggested a solution of saving and encrypting logs in a way that only the tenants can decrypt.
+- Deval explained that the error messages are given during deployment, but the problem may arise when users don't check the logs or ignore the pop-up messages
+- Deval Discussed the need to also handle deployment history and rejections on the client side. Proposed discussing this with the client team to find a suitable solution.
+## Action Items:
+- Zach Ross will create a discussion in the Akash Repository about user permissions and default user settings.
+- Group to explore methods for providing users with better feedback when their deployments are rejected.
 - Group will continue to monitor the content moderation work over the next month.
 - Ben and His brother will share market research and open up discussion on audit tools.
+- Deval to update Content modeartion Roadmap on Github
 - Chaperone tool will continue to be worked on by Andrew Mello.
 
-# **Transcript**
+## **Transcript**
 
 _This editable transcript was computer generated and might contain errors. People can also change the text after it was created._
 

wg-akash-website/README.md

@@ -20,19 +20,17 @@ This working group is responsible for managing and improving the Akash Network W
 | #8 | Thursday, August 10, 2023 06:30 AM PT (Pacific Time)| [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/008-2023-08-10.md) | [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/008-2023-08-10.md#Transcript) | [Link](https://s4xeygkmhljsn4hntjfy3iwouyso2x5doxxvvlhvyjfraudrv4aa.arweave.net/ly5MGUw60ybw7ZpLjaLOpiTtX6N171qs9cJLEFBxrwA)
 | #9 | Thursday, August 17, 2023 06:30 AM PT (Pacific Time)|[Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/009-2023-08-17.md) | [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/009-2023-08-17.md#Transcript)  | [Link](https://uqbnueeye424hiv7umqeebeow3umxvbi2beve2moiuelabowtcqq.arweave.net/pALaEJgnNcOiv6MgQgSOtujL1CjQSVJpjkUIsAXWmKE)
 | #10 | Thursday, August 24, 2023 07:30 AM PT (Pacific Time)| [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/010-2023-08-24.md) | [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/010-2023-08-24.md#Transcript)  |[Link](https://fn5tkawv3bu7oostaqau53jaz55vpz54mm3r7auowlxtxxfmlwga.arweave.net/K3s1AtXYafc6UwQBTu0gz3tX57xjNx-CjrLvO9ysXYw)
-| #11 | Thursday, August 31, 2023 06:30 AM PT (Pacific Time)| ||
-| #12 | Thursday, September 07, 2023 06:30 AM PT (Pacific Time)| ||
-| #13 | Thursday, September 14, 2023 06:30 AM PT (Pacific Time)| ||
-| #14 | Thursday, September 21, 2023 06:30 AM PT (Pacific Time)| ||
-| #15 | Thursday, September 28, 2023 06:30 AM PT (Pacific Time)| ||
-| #16 | Thursday, October 05, 2023 06:30 AM PT (Pacific Time)| ||
-| #17 | Thursday, October 12, 2023 06:30 AM PT (Pacific Time)| ||
-| #18 | Thursday, October 19, 2023 06:30 AM PT (Pacific Time)| ||
-| #19 | Thursday, October 26, 2023 06:30 AM PT (Pacific Time)| ||
-| #20 | Thursday, November 02, 2023 06:30 AM PT (Pacific Time)| ||
-
-
-
+| #11 | Thursday, September 14, 2023 06:30 AM PT (Pacific Time) | [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/011-2023-09-14.md) | [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/011-2023-09-14.md#Transcript)  |[Link](https://s7n2e2tfghnhjtwc3wse3vnami7vmza7npbr65i4orqb3mfmrpba.arweave.net/l9uiamUx2nTOwt2kTdWgYj9WZB9rwx91HHRgHbCsi8I)
+| #12 | Thursday, October 12, 2023 06:30 AM PT (Pacific Time)| Coming Soon|Coming Soon| Coming Soon
+| #13 | Thursday, October 19, 2023 06:30 AM PT (Pacific Time) | [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/013-2023-10-19.md) | [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/013-2023-10-19.md#Transcript)  |[Link](https://s7n2e2tfghnhjtwc3wse3vnami7vmza7npbr65i4orqb3mfmrpba.arweave.net/l9uiamUx2nTOwt2kTdWgYj9WZB9rwx91HHRgHbCsi8I)
+| #14 | Thursday, October 26, 2023 06:30 AM PT (Pacific Time) | [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/014-2023-10-26.md) | [Link](https://github.com/akash-network/community/blob/main/wg-akash-website/meetings/014-2023-10-26.md#Transcript)  |[Link](https://z5ffy5w2liqufhaktycxtjmyyfbrpe5ewae72o7kviwi4eigwrna.arweave.net/z0pcdtpaIUKcCp4FeaWYwUMXk6SwCf076qosjhEGtFo)
+| #15 | Thursday, November 02, 2023 06:30 AM PT (Pacific Time)| Coming soon | Coming soon| Coming Soon
+| #16 | Thursday, November 09, 2023 06:30 AM PT (Pacific Time)| Coming soon | Coming soon| Coming Soon
+| #17 | Thursday, November 16, 2023 06:30 AM PT (Pacific Time)| Coming soon | Coming soon| Coming Soon
+| #18 | Thursday, November 23, 2023 06:30 AM PT (Pacific Time)| Coming soon | Coming soon| Coming Soon
+| #19 | Thursday, November 30, 2023 06:30 AM PT (Pacific Time)| Coming soon | Coming soon| Coming Soon
+| #20 | Thursday, December 07, 2023 06:30 AM PT (Pacific Time)| Coming soon | Coming soon| Coming Soon
+| #21 | Thursday, December 14, 2023 06:30 AM PT (Pacific Time)| Coming soon | Coming soon| Coming Soon
 
 
 ## Leads
@@ -41,6 +39,7 @@ This working group is responsible for managing and improving the Akash Network W
 - Tyler Wright
 - Zach Horn
 
+
 ## Contacts
 
 - [Discord](https://discord.com/channels/747885925232672829/1111762354242338876/1144276254699298826)