Thread: Estimate of when CVS will be available again?

Estimate of when CVS will be available again?

From
Bruno Wolff III
Date:
Right now there is no way to get development snapshots later than June 2nd.
Is there any estimate on when anonymous CVS access or up to date snapshots
will be available again?

Re: Estimate of when CVS will be available again?

From
The Hermit Hacker
Date:
Without making a seperate repository, does anyone know if its possible to
enable anon-cvs?  So far as I can tell, searching google, there is nothing
that explains how to, nor in the info pages that comes with CVS ... but
that doesn't mean that its not possible ...

Am working on the snapshots themselves right now ...

On Fri, 6 Jun 2003, Bruno Wolff III wrote:

> Right now there is no way to get development snapshots later than June 2nd.
> Is there any estimate on when anonymous CVS access or up to date snapshots
> will be available again?
>
> ---------------------------(end of broadcast)---------------------------
> TIP 6: Have you searched our list archives?
>
> http://archives.postgresql.org
>

Marc G. Fournier                   ICQ#7615664               IRC Nick: Scrappy
Systems Administrator @ hub.org
primary: scrappy@hub.org           secondary: scrappy@{freebsd|postgresql}.org

Re: Estimate of when CVS will be available again?

From
Sean Chittenden
Date:
> Without making a seperate repository, does anyone know if its
> possible to enable anon-cvs?  So far as I can tell, searching
> google, there is nothing that explains how to, nor in the info pages
> that comes with CVS ... but that doesn't mean that its not possible
> ...
>
> Am working on the snapshots themselves right now ...

It's very possible, but a bad idea, IMHO.  Performance and security
concerns aside (enforce security through filesystem permissions
too!!!):

cd CVSROOT
echo "anonymous" >> readers  # or username of anoncvs user (anoncvs?)
echo "anonymous::nobody" >> passwd
echo "readers" >> checkoutlist

for commiter in tgl, bruce, etc...
    echo "${committer}" >> writers
    echo "${committer}:*" >> passwd
done
echo "writers" >> checkoutlist
echo "passwd" >> checkoutlist

perl -p -i -e 's/#SystemAuth=no/SystemAuth=no/' config

cvs up
cvs ci


Use CVS_RSH = ssh, and make sure that committers commit files via ssh
instead of pserver.  Change nobody to whoever is your anonymous user
in terms of file system security.  If you have any probs, drop me a
private email.  -sc

--
Sean Chittenden

Re: Estimate of when CVS will be available again?

From
The Hermit Hacker
Date:
*scratch head*  I swore I had tried that the last time I attempted this,
and the readers 'broker' the writers file ... will re-try it again as soon
as I get things moved back over to neptune ...

On Sun, 8 Jun 2003, Tom Lane wrote:

> The Hermit Hacker <scrappy@postgresql.org> writes:
> > Without making a seperate repository, does anyone know if its possible to
> > enable anon-cvs?  So far as I can tell, searching google, there is nothing
> > that explains how to, nor in the info pages that comes with CVS ...
>
> The CVS info pages have a page titled "Read-only repository access"
> in the "Repository" chapter.
>
> It looks like all you do is put the username "anoncvs" into
> $CVSROOT/CVSROOT/readers ...
>
>             regards, tom lane
>

Marc G. Fournier                   ICQ#7615664               IRC Nick: Scrappy
Systems Administrator @ hub.org
primary: scrappy@hub.org           secondary: scrappy@{freebsd|postgresql}.org

Re: Estimate of when CVS will be available again?

From
Tom Lane
Date:
The Hermit Hacker <scrappy@postgresql.org> writes:
> Without making a seperate repository, does anyone know if its possible to
> enable anon-cvs?  So far as I can tell, searching google, there is nothing
> that explains how to, nor in the info pages that comes with CVS ...

The CVS info pages have a page titled "Read-only repository access"
in the "Repository" chapter.

It looks like all you do is put the username "anoncvs" into
$CVSROOT/CVSROOT/readers ...

            regards, tom lane

Re: Estimate of when CVS will be available again?

From
The Hermit Hacker
Date:
Erk ...

Okay, I have CVSup up and available again, which allows you to download
the whole repository locally to work on ... is there a strong reason why
anoncvs is *required* to the repository with this available?

Sean cites both performance and security as reasons to *not* make anoncvs
available ...

Re: Estimate of when CVS will be available again?

From
Sean Chittenden
Date:
> >> Okay, I have CVSup up and available again, which allows you to
> >> download the whole repository locally to work on ... is there a
> >> strong reason why anoncvs is *required* to the repository with
> >> this available?
>
> > CVSup is a PITA to get setup on OSes other than FreeBSD?
>
> Building CVSup from source is, um, a challenge (who the heck decided
> Modula3 would be a good choice for writing allegedly-portable
> software?)

You can thank Polestra for that... though you can now build CVSup with
pm3 instead of modula-3.. much smaller since pm3 doesn't have any
windowing bits.  There are rumors trickling around that once KSE is
done for FreeBSD (~5.2ish) that one of the guys will rewrite CVSup in
C...

> And, not everyone wants to store the entire project history locally.

You don't have to store the entire projects history... use a tag with
an explicit branch:

*default  tag=RELENG_4
*default  tag=RELEASE_7_3_3

or something like that and you get the equiv of an incremental cvs
export.

> I don't think it's reasonable to expect everyone to use cvsup.

Though I holistically agree with this.  CVSup is more bandwidth
friendly for sure, but cvs(1) is _everywhere_.

-sc

--
Sean Chittenden

Re: Estimate of when CVS will be available again?

From
Tom Lane
Date:
Sean Chittenden <sean@chittenden.org> writes:
>> Okay, I have CVSup up and available again, which allows you to
>> download the whole repository locally to work on ... is there a
>> strong reason why anoncvs is *required* to the repository with this
>> available?

> CVSup is a PITA to get setup on OSes other than FreeBSD?

Building CVSup from source is, um, a challenge (who the heck decided
Modula3 would be a good choice for writing allegedly-portable software?)

And, not everyone wants to store the entire project history locally.

I don't think it's reasonable to expect everyone to use cvsup.

            regards, tom lane

Re: Estimate of when CVS will be available again?

From
Sean Chittenden
Date:
> > Use CVS_RSH = ssh, and make sure that committers commit files via ssh
> > instead of pserver.
>
> I've been thinking for awhile that we really ought to be using ssh
> not plain pserver for committers access.  I'd support making that
> change.

This change should be made before CVSROOT is made public... and even
then, old history of the passwd file should be nuked, IMHO.  Use of
passwd and pserver is scary, esp for a project this big and well
known... at least all CVSup users have copies of the source code and
its history.

> Okay, I have CVSup up and available again, which allows you to
> download the whole repository locally to work on ... is there a
> strong reason why anoncvs is *required* to the repository with this
> available?

CVSup is a PITA to get setup on OSes other than FreeBSD?  CVSup is a
pretty hacker oriented tool... not many folks have it, at least not
in the numbers of normal cvs users.

> Sean cites both performance and security as reasons to *not* make
> anoncvs available ...

Security for anoncvs isn't a big issue if the file system permissions
are set correctly and the ability to execute remote sh files is
disabled on the cvs server (I think it is disabled in FreeBSD's cvs,
but it's a local patch and enabled by default elsewhere.  If you need
the patch, I can dig it up, it's just a two line little thing that
disables it in the pserver protocol...)

Performance for cvs update over pserver is abysmal and pretty hard on
the server, though easy on the client.  If the cvs server gets bogged
down, then it may be worth while to look into this and make a call for
mirrors.  Is this an issue?  Putting the lock files on an mfs
partition also helps (generally needed for anoncvs anyway)... -sc

--
Sean Chittenden

Re: Estimate of when CVS will be available again?

From
Bruce Momjian
Date:
The Hermit Hacker wrote:
>
> Erk ...
>
> Okay, I have CVSup up and available again, which allows you to download
> the whole repository locally to work on ... is there a strong reason why
> anoncvs is *required* to the repository with this available?
>
> Sean cites both performance and security as reasons to *not* make anoncvs
> available ...

But this requires cvsup, which you have to admit, as a Modula program,
is pretty weird.  Sure people can get cvsup binaries, but we are an open
source project, and it is nice to rely on standard tools.  I realize the
cvsup source is distributed, but as it is written in Modula, the source
code is pretty close to useless.  I think we have to offer anoncvs.

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

Re: Estimate of when CVS will be available again?

From
"Shridhar Daithankar"
Date:
On 8 Jun 2003 at 23:52, Sean Chittenden wrote:
> Performance for cvs update over pserver is abysmal and pretty hard on
> the server, though easy on the client.  If the cvs server gets bogged
> down, then it may be worth while to look into this and make a call for
> mirrors.  Is this an issue?  Putting the lock files on an mfs
> partition also helps (generally needed for anoncvs anyway)... -sc

Well, would it be secure enough and reasonable from bandwidth utilization to
rsync the repository and/or nightly snapshots?

If it is reasonable in size people might accept either of these as an option
for anoncvs.

Or how about building cvsup on linux and distributing binary packages in 3
popular format, rpm/deb/tgz. Checkinstall does a pretty good job at that. So we
can cover as many users of anoncvs as possible.

Just a suggestion..

Bye
 Shridhar

--
toilet toup'ee, n.:    Any shag carpet that causes the lid to become top-heavy,
thus    creating endless annoyance to male users.        -- Rich Hall, "Sniglets"