Thread: Git access?

Git access?

From
David Fetter
Date:
Folks,

How do I get access to create git repositories on git.postgresql.org?

Cheers,
David (and yes, I did write <gitadmin@git.postgresql.org>.  No
response yet.)
-- 
David Fetter <david@fetter.org> http://fetter.org/
Phone: +1 415 235 3778  AIM: dfetter666  Yahoo!: dfetter
Skype: davidfetter      XMPP: david.fetter@gmail.com

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate


Re: Git access?

From
Magnus Hagander
Date:
David Fetter wrote:
> Folks,
> 
> How do I get access to create git repositories on git.postgresql.org?
> 
> Cheers,
> David (and yes, I did write <gitadmin@git.postgresql.org>.  No
> response yet.)

I think (hope?) that people are working on a better way to deal with
accounts on that one, per some previous discussion. But - that looks to
be the correct address to me, so I think you just need to be a bit more
patient...


//Magnus


Re: Git access?

From
David Fetter
Date:
On Thu, Jun 05, 2008 at 06:04:03PM +0200, Magnus Hagander wrote:
> David Fetter wrote:
> > Folks,
> > 
> > How do I get access to create git repositories on
> > git.postgresql.org?
> > 
> > Cheers,
> > David (and yes, I did write <gitadmin@git.postgresql.org>.  No
> > response yet.)
> 
> I think (hope?) that people are working on a better way to deal with
> accounts on that one, per some previous discussion. But - that looks
> to be the correct address to me, so I think you just need to be a
> bit more patient...

In case it wasn't obvious, I'm volunteering to do work on this.  What
needs doing?

Cheers,
David.
-- 
David Fetter <david@fetter.org> http://fetter.org/
Phone: +1 415 235 3778  AIM: dfetter666  Yahoo!: dfetter
Skype: davidfetter      XMPP: david.fetter@gmail.com

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate


Re: Git access?

From
"Joshua D. Drake"
Date:

On Thu, 2008-06-05 at 09:55 -0700, David Fetter wrote:
> On Thu, Jun 05, 2008 at 06:04:03PM +0200, Magnus Hagander wrote:
> > David Fetter wrote:
>  
> > I think (hope?) that people are working on a better way to deal with
> > accounts on that one, per some previous discussion. But - that looks
> > to be the correct address to me, so I think you just need to be a
> > bit more patient...
> 
> In case it wasn't obvious, I'm volunteering to do work on this.  What
> needs doing?

We need to non-shell account authentication. You can use something like
mod_auth_pgsql or another thing (I can't recall the name) that git
actually suggests.

Sincerely,

Joshua D. Drake





Re: Git access?

From
Peter Eisentraut
Date:
Am Donnerstag, 5. Juni 2008 schrieb David Fetter:
> How do I get access to create git repositories on git.postgresql.org?
>
> Cheers,
> David (and yes, I did write <gitadmin@git.postgresql.org>.  No
> response yet.)

I did get an email from you at that address, but it did not contain any 
questions or action items, so I just archived it.

The plan is to try out gitosis for account management.  I have no experience 
with this, so we'd need to play around with it first.


Re: Git access?

From
"Joshua D. Drake"
Date:

On Fri, 2008-06-06 at 13:54 +0200, Peter Eisentraut wrote:
> Am Donnerstag, 5. Juni 2008 schrieb David Fetter:
> > How do I get access to create git repositories on git.postgresql.org?

> The plan is to try out gitosis for account management.  I have no experience 
> with this, so we'd need to play around with it first.

Peter,

Just FYI if you find you don't like that direction, let me know and I
would gladly show you how I did it for pgweb with SVN... I believe it
would work out of the box for the git stuff.

Sincerely,

Joshua D. Drake


> 



Re: Git access?

From
David Fetter
Date:
On Fri, Jun 06, 2008 at 01:54:43PM +0200, Peter Eisentraut wrote:
> Am Donnerstag, 5. Juni 2008 schrieb David Fetter:
> > How do I get access to create git repositories on git.postgresql.org?
> >
> > Cheers,
> > David (and yes, I did write <gitadmin@git.postgresql.org>.  No
> > response yet.)
>
> I did get an email from you at that address, but it did not contain
> any questions or action items, so I just archived it.

Please find enclosed the email I sent.  If there was something unclear
in it, please let me know what it was.

> The plan is to try out gitosis for account management.

It's an interesting plan, but it's one that's preventing people from
using the service.  How about shelving that plan for the moment and
handing out access as needed to developers? :)

Cheers,
David.
--
David Fetter <david@fetter.org> http://fetter.org/
Phone: +1 415 235 3778  AIM: dfetter666  Yahoo!: dfetter
Skype: davidfetter      XMPP: david.fetter@gmail.com

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate

Re: Git access?

From
Magnus Hagander
Date:
David Fetter wrote:
> On Fri, Jun 06, 2008 at 01:54:43PM +0200, Peter Eisentraut wrote:
>> The plan is to try out gitosis for account management.
> 
> It's an interesting plan, but it's one that's preventing people from
> using the service.  How about shelving that plan for the moment and
> handing out access as needed to developers? :)

Please don't. Handing more access out in an uncontrolled way will give
us a lot more work cleaning things up later.

//Magnus


Re: Git access?

From
David Fetter
Date:
On Tue, Jun 10, 2008 at 09:14:35PM +0200, Magnus Hagander wrote:
> David Fetter wrote:
> > On Fri, Jun 06, 2008 at 01:54:43PM +0200, Peter Eisentraut wrote:
> >> The plan is to try out gitosis for account management.
> > 
> > It's an interesting plan, but it's one that's preventing people
> > from using the service.  How about shelving that plan for the
> > moment and handing out access as needed to developers? :)
> 
> Please don't. Handing more access out in an uncontrolled way will
> give us a lot more work cleaning things up later.

With respect, I must disagree.  This resource is incredibly easy to
maintain--and practically useless--because nobody can get on there.

If somebody or somebodies here is thinking about some kind of single
sign-on[1] system for developers, let's discuss that separately.  I
don't recall anybody deciding that we were going to use one, and I
certainly don't recall that it's been decided that that decision gates
access to git.postgresql.org.

Cheers,
David.

[1]  For me, "single sign-on" reads as "high-value target" from an
attacker's point of view, and I generally think the convenience isn't
worth the cascading failure modes such systems have.
-- 
David Fetter <david@fetter.org> http://fetter.org/
Phone: +1 415 235 3778  AIM: dfetter666  Yahoo!: dfetter
Skype: davidfetter      XMPP: david.fetter@gmail.com

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate


Re: Git access?

From
"Joshua D. Drake"
Date:

On Tue, 2008-06-10 at 15:00 -0700, David Fetter wrote:
> On Tue, Jun 10, 2008 at 09:14:35PM +0200, Magnus Hagander wrote:

> > > It's an interesting plan, but it's one that's preventing people
> > > from using the service.  How about shelving that plan for the
> > > moment and handing out access as needed to developers? :)
> > 
> > Please don't. Handing more access out in an uncontrolled way will
> > give us a lot more work cleaning things up later.
> 
> With respect, I must disagree.  This resource is incredibly easy to
> maintain--and practically useless--because nobody can get on there.

I think the point is, we don't want to give shell accounts out. Which is
why we are waiting. That is something I can get behind. We don't need to
be handing out yet more shell accounts.

Sincerely,

Joshua D. Drake




Re: Git access?

From
David Fetter
Date:
On Tue, Jun 10, 2008 at 03:05:11PM -0700, Joshua D. Drake wrote:
> On Tue, 2008-06-10 at 15:00 -0700, David Fetter wrote:
> > On Tue, Jun 10, 2008 at 09:14:35PM +0200, Magnus Hagander wrote:
> > > > It's an interesting plan, but it's one that's preventing people
> > > > from using the service.  How about shelving that plan for the
> > > > moment and handing out access as needed to developers? :)
> > > 
> > > Please don't. Handing more access out in an uncontrolled way will
> > > give us a lot more work cleaning things up later.
> > 
> > With respect, I must disagree.  This resource is incredibly easy to
> > maintain--and practically useless--because nobody can get on there.
> 
> I think the point is, we don't want to give shell accounts out. Which is
> why we are waiting. That is something I can get behind. We don't need to
> be handing out yet more shell accounts.

Why not?  They can be revoked any time. 

Meanwhile, people's inability to use them is costing us.  People are
hosting projects outside our system, not because they don't like our
system, but because they can't get a workable SCM from pgfoundry or
anywhere else inside our system.

Cheers,
David.
-- 
David Fetter <david@fetter.org> http://fetter.org/
Phone: +1 415 235 3778  AIM: dfetter666  Yahoo!: dfetter
Skype: davidfetter      XMPP: david.fetter@gmail.com

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate


Re: Git access?

From
Andrew Sullivan
Date:
On Tue, Jun 10, 2008 at 03:12:11PM -0700, David Fetter wrote:
> Why not?  They can be revoked any time. 

Because the people who have to maintain them with the current manual
system say they're not willing to do so, because it costs them too
much time.

Adding more administrators to that pile does not help the problem, it
merely moves the problem of automation tools to another place.

A

-- 
Andrew Sullivan
ajs@commandprompt.com
+1 503 667 4564 x104
http://www.commandprompt.com/