From owner-freebsd-hubs@FreeBSD.ORG Sun Nov 18 04:56:00 2012 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 96084956; Sun, 18 Nov 2012 04:56:00 +0000 (UTC) (envelope-from adrian.chadd@gmail.com) Received: from mail-da0-f54.google.com (mail-da0-f54.google.com [209.85.210.54]) by mx1.freebsd.org (Postfix) with ESMTP id 4FC518FC0C; Sun, 18 Nov 2012 04:56:00 +0000 (UTC) Received: by mail-da0-f54.google.com with SMTP id z9so1806751dad.13 for ; Sat, 17 Nov 2012 20:55:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; bh=r4Spnbd7JOUMfsBpUZ/uOQlZGUob0EWVY4OIQYmJxBw=; b=GDJSKEIiK+yGTAgOyhKwDJR+iBD1vp41mNsyMMMCnV3ve8E8n1g+uELrV3E3Do4sCx 4ndMeHdZEi/2QfpwFPlsqpggr6dOXWzmGOswkq5s5S3xTrHtC0HLPZSG0LE9zGL2ZeQS HIQw38MXcBO27HcuAkXtN9qVC1INkZXuOYHHbq2j3AybuBGGA5BMy+q1TOF5t7g+S0cd 5npXVgmg4qLkzhY/qX0CcEbErM2PhWxI3+2C1NRjeSR65f/2PI/isw2N8rDEH5SpTB73 wM+a0q8irQWSK+oZkJbaDVpM95p+7LO7s5HqhuJ9tioEK7DBYGEvcrMAkRbw7sZTh+MO /D6A== MIME-Version: 1.0 Received: by 10.68.137.41 with SMTP id qf9mr28898631pbb.103.1353214554609; Sat, 17 Nov 2012 20:55:54 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.68.124.130 with HTTP; Sat, 17 Nov 2012 20:55:54 -0800 (PST) In-Reply-To: References: Date: Sat, 17 Nov 2012 20:55:54 -0800 X-Google-Sender-Auth: tMFF_cYfztIW57aV4vV_M78FNAU Message-ID: Subject: Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident] From: Adrian Chadd To: grarpamp Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-hackers@freebsd.org, freebsd-hubs@freebsd.org, freebsd-questions@freebsd.org, freebsd-security@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Nov 2012 04:56:00 -0000 [snip] There's a git repository. It's public. You can look at what goes into the FreeBSD git clone to get your assurance that things aren't being snuck in. People are using it, right now. Honestly, I'd rather see subversion grow this kind of cryptographic signing of each commit in the short term then migrate everyone over to git. Those who want to use git can use it, right now. Honest. Adrian From owner-freebsd-hubs@FreeBSD.ORG Sun Nov 18 05:59:56 2012 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 96998692; Sun, 18 Nov 2012 05:59:56 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: from mail-oa0-f54.google.com (mail-oa0-f54.google.com [209.85.219.54]) by mx1.freebsd.org (Postfix) with ESMTP id 22A728FC0C; Sun, 18 Nov 2012 05:59:55 +0000 (UTC) Received: by mail-oa0-f54.google.com with SMTP id n9so5031298oag.13 for ; Sat, 17 Nov 2012 21:59:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=VW9onU10Oem2f9wEymQEk3reHmTphEOSEF1aTtEShFQ=; b=k7qUm0iKKBYQoZp0NXC+ERnK6mo3J/fXIfsUvt5JH1X3pG+oTIFPZYBRsqsJeCThLq dxqHMKF5FNPmWpLgIrjT5SWRipL6eJuXCLGwPOpmOF61TsLdWGrxhs79+zMFAt9wuR21 kqV/FeM4R3JbEVFCeOOkB6kBbk0082nUkBEu6aTRr3mSOrT6oYO+eFfUYdA8GtFcq7pv MvOq2TXq7egCZ09AyMJeT+zO2/+37wi7gXQVh/RHPfeuGod/8hUPJ9LSrNvA2+7dhkky 1LTH25kQf1Iul++W7EJCgGUplgXwGYf44D04yyRbhyo44OEM6P8OVxF7X5q+LC7glrTk Wv3g== MIME-Version: 1.0 Received: by 10.60.2.103 with SMTP id 7mr7825076oet.79.1353218395069; Sat, 17 Nov 2012 21:59:55 -0800 (PST) Received: by 10.76.68.39 with HTTP; Sat, 17 Nov 2012 21:59:54 -0800 (PST) In-Reply-To: References: Date: Sun, 18 Nov 2012 00:59:54 -0500 Message-ID: Subject: Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident] From: grarpamp To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8 Cc: freebsd-hackers@freebsd.org, freebsd-hubs@freebsd.org, freebsd-security@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Nov 2012 05:59:56 -0000 >> joerg_wunsch@uriah.heep.sax.de > You don't even have a name Your domain indicates Germany, please have a chat with CCC.de about the various good uses for nyms. And consult your library for some fine historical use cases. If that's counter to your beliefs, you are free to show us the way and post all your personal infos to the list. > spamming a large number of FreeBSD mailinglists with your advocacy? This topic would benefit from the review and involvement of users (questions), committers (hackers), security (security), and distribution (hubs). > -- > Never trust an operating system you don't have sources for. ;-) As well summarized by this (your signature) ... sources you can't verify to the master are, also, sources you can't trust. >> fidaj@ukr.net > LOL And how will this help Linux? > http://lwn.net/Articles/457142/ How will what help Linux? Please quote a relevant snippet instead of the entire message. Seems pretty clear from the above link that having hashes/crypto as an intrinsic feature of the SCM tool does in fact help Linux. If you're asking about distribution of things traceable back to the master repo, at least your security officer can sign the initial repository commit and then include the various distribution keys and subsequent updates, signed tags, etc in the repo. >> utisoft@gmail.com > Yes, but git doesn't work with our workflow. There's usually a larger than head sized sandbox near everyone's local neighborhood. Will people elect to visit it, or to learn, grow, and change for the better? Prioe workflow is often forced by and derived from the tools being used. Different tools could enable different, more useful workflows. SVN required workflow change from CVS, people managed just fine. > It's been discussed several times I will look for these. Can you point to a couple main threads? > [git] ... is GPL btw FreeBSD does not include this sort-of-BSD licensed SCM tool in its base either... # https://svn.apache.org/repos/asf/subversion/trunk/LICENSE # ls /*bin/svn /usr/*bin/svn ls: No such file or directory But it does include this GPL licensed one... # http://cvs.savannah.gnu.org/viewvc/cvs/ccvs/COPYING?revision=HEAD # ls /*bin/cvs /usr/*bin/cvs' /usr/bin/cvs And of course we have this in use as well... # perforce http://www.perforce.com/purchase/pricing-licensing So it seems license is not an obstacle to inclusion, and certainly not the use via ports, of any particular SCM with the FreeBSD project. >> rsimmons0@gmail.com > https://github.com/freebsd/ >> adrian@freebsd.org > You can look at what goes into the FreeBSD Git clone to get your > assurance that things aren't being snuck in. The same could be said for the CVS clone. Again... Any copy of something that is itself not verifiable provides no such assurance. > Those who want to use git can use it, right now. Honest. Yes, Git does seem to me to be leading the other distributed, hash based, SCM tools such as Hg. Thus Git is suggested. Yes, Git would fill the purpose. I only suggest Git, as to some other choices that use hashes (as usual, please verify with current releases)... https://en.wikipedia.org/wiki/Comparison_of_revision_control_software But this is not really about using Git in particular... These replies are all dodging around the base issue raised... - That FreeBSD has no verifiable source repo - Which is not only a problem for the repo itself, but for everything attempted to be spawned downstream off of that root (no verifiable distribution system/tools distributing that repo, etc). Sorry to reply to these sorts of replies this way, but please, this isn't a troll or a shed. No need to do that around the issue raised. Hash [ :-) ] it out and solve it. Why wait for a costlier breach? Why not provide the assurance beforehand? No better time than now. >> gmx@ross.cx > http://www.linux.com/news/featured-blogs/171-jonathan-corbet/491001-the-cracking-of-kernelorg Yes, another good link outlining the issue. From owner-freebsd-hubs@FreeBSD.ORG Sun Nov 18 10:44:45 2012 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 43FF2A6A; Sun, 18 Nov 2012 10:44:45 +0000 (UTC) (envelope-from lev@FreeBSD.org) Received: from onlyone.friendlyhosting.spb.ru (onlyone.friendlyhosting.spb.ru [IPv6:2a01:4f8:131:60a2::2]) by mx1.freebsd.org (Postfix) with ESMTP id C8A0E8FC0C; Sun, 18 Nov 2012 10:44:44 +0000 (UTC) Received: from lion.home.serebryakov.spb.ru (unknown [IPv6:2001:470:923f:1:cc83:142f:c735:4700]) (Authenticated sender: lev@serebryakov.spb.ru) by onlyone.friendlyhosting.spb.ru (Postfix) with ESMTPA id 19D234AC1C; Sun, 18 Nov 2012 14:44:43 +0400 (MSK) Date: Sun, 18 Nov 2012 14:44:41 +0400 From: Lev Serebryakov X-Priority: 3 (Normal) Message-ID: <583715708.20121118144441@serebryakov.spb.ru> To: Adrian Chadd Subject: Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident] In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-security@freebsd.org, freebsd-hackers@freebsd.org, freebsd-hubs@freebsd.org, grarpamp , freebsd-questions@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Nov 2012 10:44:45 -0000 Hello, Adrian. You wrote 18 =D0=BD=D0=BE=D1=8F=D0=B1=D1=80=D1=8F 2012 =D0=B3., 8:55:54: AC> There's a git repository. It's public. You can look at what goes into AC> the FreeBSD git clone to get your assurance that things aren't being AC> snuck in. People are using it, right now. But commits in this repo aren't signed by developers../ --=20 // Black Lion AKA Lev Serebryakov From owner-freebsd-hubs@FreeBSD.ORG Mon Nov 19 17:14:34 2012 Return-Path: Delivered-To: hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 85F81A78 for ; Mon, 19 Nov 2012 17:14:34 +0000 (UTC) (envelope-from sem@FreeBSD.org) Received: from mail.ciam.ru (mail.ciam.ru [91.209.218.18]) by mx1.freebsd.org (Postfix) with ESMTP id 322C18FC0C for ; Mon, 19 Nov 2012 17:14:33 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ciam.ru; s=dkim; h=Content-Transfer-Encoding:Content-Type:Subject:To:MIME-Version:From:Date:Message-ID; bh=Ov+5+8JDcuONV+M1+BmcwWugffXOlb3g88aniZy8Vc0=; b=nwdsdnTj4NlYDMuT+j4flxcF+vuseNn8CpE4Z0Su8zueAGZIeXwdX21xJhkVsfn0SuHADGorKnhnEVUQbNb5F9L0hiTf0G6LMbJkkr9RcpsXosYpZXE7eo8rM+3l4248/tigVh09N7JenOVhnJBDz9zt+LTG/ormnUlXMVx+9LU=; Received: from dhcp170-188-red.yandex.net ([95.108.170.188]) by mail.ciam.ru with esmtpa (Exim 4.x) id 1TaUdj-000Ly6-7X for hubs@freebsd.org; Mon, 19 Nov 2012 20:56:07 +0400 Message-ID: <50AA64AC.2000502@FreeBSD.org> Date: Mon, 19 Nov 2012 20:56:12 +0400 From: Sergey Matveychuk User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20121026 Thunderbird/16.0.2 MIME-Version: 1.0 To: hubs@freebsd.org Subject: access to ftp-master.eu Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Nov 2012 17:14:34 -0000 Hi. I'd like to move ftp5.ru to mirror.yandex.ru. Guys who hold it asks is it possible to give an access with FQDN, not IP? Or may be a networks list? We have a strategy to be independent of DC. If DC is down, all services can move to another one in another network. From owner-freebsd-hubs@FreeBSD.ORG Tue Nov 20 03:04:50 2012 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 08D6D631; Tue, 20 Nov 2012 03:04:50 +0000 (UTC) (envelope-from xaque208@gmail.com) Received: from mail-pa0-f54.google.com (mail-pa0-f54.google.com [209.85.220.54]) by mx1.freebsd.org (Postfix) with ESMTP id A9B4C8FC13; Tue, 20 Nov 2012 03:04:49 +0000 (UTC) Received: by mail-pa0-f54.google.com with SMTP id kp6so4025546pab.13 for ; Mon, 19 Nov 2012 19:04:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; bh=ka4POaggfWqht6arGSuXewq3KgCzCUWkGmyCQLKeVA0=; b=tAUrZYw+Avbax1oD3sv3Qdnx6mC64iIPTyv0TT0BnT4b+N6Ta8/VP90lga5QfoRY19 0DBb0q/EEqB6p33J7Wd40+S+KRNp9OuauUqtLxwKMeJvXUQD2jVzh+o8Topw0O8BGmnf iimqy5g1VNvvqnp8UdsSouvGXjDUNkTgUa91YKie43y6tvZBx8u44qDD56Xt17pTVKHw +OiIsc1TNxePz+owWgz/nZLTsf5UDB/9/ruDoGXMDoJUZNi2GqlIJdmT//da0O2n+hry C5daJwBD9P6J4qyR7vMt87iZN+1e0o1y085PSGP810K37b+HqWW8bwu6jWKonps7CVgR fAZg== Received: by 10.68.197.197 with SMTP id iw5mr38584521pbc.22.1353380689192; Mon, 19 Nov 2012 19:04:49 -0800 (PST) Received: from localhost (c-67-171-138-28.hsd1.or.comcast.net. [67.171.138.28]) by mx.google.com with ESMTPS id gu5sm7228613pbc.10.2012.11.19.19.04.46 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 19 Nov 2012 19:04:48 -0800 (PST) Date: Mon, 19 Nov 2012 19:04:45 -0800 From: Zach Leslie To: Adrian Chadd Subject: Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident] Message-ID: <20121120030445.GA38037@zjl.local> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Cc: freebsd-security@freebsd.org, freebsd-hackers@freebsd.org, freebsd-hubs@freebsd.org, grarpamp , freebsd-questions@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 03:04:50 -0000 > There's a git repository. It's public. You can look at what goes into > the FreeBSD git clone to get your assurance that things aren't being > snuck in. People are using it, right now. I've always been confused by this. Which source repo is the true source of truth? To obtain the FreeBSD source, you can use CVS, SVN, or Git? Do all have the same level of support? Are they all up to date? > Honestly, I'd rather see subversion grow this kind of cryptographic > signing of each commit in the short term then migrate everyone over to > git. How much effor would their really be involved, considering your link to the FreeBSD source repo on github. Converting the repos to me seems like it would be the bulk of it, and that work is already done. Help me understand please. Also, local branching and merging is amazing. -- Zach From owner-freebsd-hubs@FreeBSD.ORG Tue Nov 20 03:27:34 2012 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id DC337EE2 for ; Tue, 20 Nov 2012 03:27:34 +0000 (UTC) (envelope-from lists@eitanadler.com) Received: from mail-lb0-f182.google.com (mail-lb0-f182.google.com [209.85.217.182]) by mx1.freebsd.org (Postfix) with ESMTP id 4221F8FC17 for ; Tue, 20 Nov 2012 03:27:34 +0000 (UTC) Received: by mail-lb0-f182.google.com with SMTP id go10so2633372lbb.13 for ; Mon, 19 Nov 2012 19:27:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=eitanadler.com; s=0xdeadbeef; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=jsS/E58dp6B0WJ/g1W3K/kKKp7huNh7sb8xpxuxuHd8=; b=iLcuL5O+xhZVDo9Zdhfo8JyfFDj28TI0I0ItaVXn2auerCYASOBYMdiBYvKVDI8e/5 U8lcHIyPgaUv9uRroRjIe2E3XeohwaMFpCcHVLMzHhqK/pIaBMWUJ26jr13CYLjY4Vm6 3Cpazmy+CxSNxa4db554v0MV5S5oxcn/5whjM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:x-gm-message-state; bh=jsS/E58dp6B0WJ/g1W3K/kKKp7huNh7sb8xpxuxuHd8=; b=X/BlBWsy200pxxpBhm02is0PoQ5hCLDubQbq2mpV6XSza8Vi9+m/3ulHRJu7tffxIs rM2vr+O34apkcjX4MXmTktJAN4VqDQoALx6xlMwe/fgMCLTtoWLrWcYUJxaTJoa7Ygsr BzNx7G9Uq7Qy8uUeR0ga3l464MTfUksaZkX0EtNIduPYhjF4tsmJyex7qxQ8CwXATzgB AvKSYTY86RUdT8cnC6qDqtUKaxGsJlR/crY4TGB2f+6MoFDkgKhn42eUQU1Zj8p/WriI BOvlzgJOggWh4eewZVzTTT7KGrjRoSd1LTfobrHSGSrtioHX1CUypove9teRRLe4o7d0 PUYg== Received: by 10.152.104.148 with SMTP id ge20mr13171371lab.51.1353382052946; Mon, 19 Nov 2012 19:27:32 -0800 (PST) MIME-Version: 1.0 Received: by 10.112.25.166 with HTTP; Mon, 19 Nov 2012 19:27:01 -0800 (PST) In-Reply-To: <20121120030445.GA38037@zjl.local> References: <20121120030445.GA38037@zjl.local> From: Eitan Adler Date: Mon, 19 Nov 2012 22:27:01 -0500 Message-ID: Subject: Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident] To: Zach Leslie Content-Type: text/plain; charset=UTF-8 X-Gm-Message-State: ALoCoQlLtlHK8lZrCTnA5NTgQ7dhnvHMjoMkh20le3g/K24ioehvoBZ+Fq0ARUn+IwKk0axfRpsM Cc: Adrian Chadd , freebsd-hackers@freebsd.org, freebsd-hubs@freebsd.org, grarpamp , freebsd-security@freebsd.org, freebsd-questions@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 03:27:34 -0000 On 19 November 2012 22:04, Zach Leslie wrote: > I've always been confused by this. Which source repo is the true source > of truth? This changed a few months ago when ports and doc switched. As of now: - SVN is *the* source of truth. - CVS is exported from svn. It will eventually go away - git is exported from svn. It will remain as an option for developers (including myself). > To obtain the FreeBSD source, you can use CVS, SVN, or Git? Do all have > the same level of support? Are they all up to date? SVN is *always* up to date. We try really hard to keep the others up to date, but fail at times. > Also, local branching and merging is amazing. +1 - but one can always use git-svn. -- Eitan Adler From owner-freebsd-hubs@FreeBSD.ORG Tue Nov 20 07:29:00 2012 Return-Path: Delivered-To: hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 50A63F61; Tue, 20 Nov 2012 07:29:00 +0000 (UTC) (envelope-from cejkar@fit.vutbr.cz) Received: from kazi.fit.vutbr.cz (kazi6.fit.vutbr.cz [IPv6:2001:67c:1220:808::93e5:80c]) by mx1.freebsd.org (Postfix) with ESMTP id D59EB8FC08; Tue, 20 Nov 2012 07:28:59 +0000 (UTC) Received: from kazi.fit.vutbr.cz (localhost [127.0.0.1]) by kazi.fit.vutbr.cz (8.14.5/8.14.5) with ESMTP id qAK7SuCu063946 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 20 Nov 2012 08:28:56 +0100 (CET) Received: (from cejkar@localhost) by kazi.fit.vutbr.cz (8.14.5/8.13.1/Submit) id qAK7SuTE063945; Tue, 20 Nov 2012 08:28:56 +0100 (CET) (envelope-from cejkar@fit.vutbr.cz) X-Authentication-Warning: kazi.fit.vutbr.cz: cejkar set sender to cejkar@fit.vutbr.cz using -f Date: Tue, 20 Nov 2012 08:28:56 +0100 From: Cejka Rudolf To: Sergey Matveychuk Subject: Re: access to ftp-master.eu Message-ID: <20121120072856.GA61977@fit.vutbr.cz> References: <50AA64AC.2000502@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <50AA64AC.2000502@FreeBSD.org> User-Agent: Mutt/1.5.21 (2010-09-15) X-Scanned-By: MIMEDefang 2.73 on 147.229.8.12 Cc: hubs@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 07:29:00 -0000 Sergey Matveychuk wrote (2012/11/19): > Hi. > I'd like to move ftp5.ru to mirror.yandex.ru. Guys who hold it asks is > it possible to give an access with FQDN, not IP? Or may be a networks list? > We have a strategy to be independent of DC. If DC is down, all services > can move to another one in another network. Hello, I do support just IP addresses or IP subnets for now and I'm not willing to allow just domain names. You can have one main address and one backup address in another network. Best regards. -- Rudolf Cejka http://www.fit.vutbr.cz/~cejkar Brno University of Technology, Faculty of Information Technology Bozetechova 2, 612 66 Brno, Czech Republic From owner-freebsd-hubs@FreeBSD.ORG Tue Nov 20 09:01:26 2012 Return-Path: Delivered-To: hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 830D48F0 for ; Tue, 20 Nov 2012 09:01:26 +0000 (UTC) (envelope-from sem@FreeBSD.org) Received: from mail.ciam.ru (mail.ciam.ru [91.209.218.18]) by mx1.freebsd.org (Postfix) with ESMTP id 2946E8FC15 for ; Tue, 20 Nov 2012 09:01:25 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ciam.ru; s=dkim; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:References:Subject:CC:To:MIME-Version:From:Date:Message-ID; bh=i9Ec+n0EbmAzqdpmbIW4OwwSM8jum924mkzZcdeSdro=; b=C3uPn0CYu7C7kmXEPnZSs83MXpE4S3kuQ6FWM0inMYKO4XmysHiHzQrPmzzxIidIQbYm4NZ7Slz27zIzKdZrAE3DCYFlNPAoDh/FMbnLAjL90U6n0ucRah4CmO260K3cE3Kk8vM7WpNtv1ogJrUwsPL4w25Uzu5jggcFWMGdNq8=; Received: from dhcp170-188-red.yandex.net ([95.108.170.188]) by mail.ciam.ru with esmtpa (Exim 4.x) id 1Tajhm-0005Ur-J0; Tue, 20 Nov 2012 13:01:18 +0400 Message-ID: <50AB46E5.3090103@FreeBSD.org> Date: Tue, 20 Nov 2012 13:01:25 +0400 From: Sergey Matveychuk User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20121026 Thunderbird/16.0.2 MIME-Version: 1.0 To: Cejka Rudolf Subject: Re: access to ftp-master.eu References: <50AA64AC.2000502@FreeBSD.org> <20121120072856.GA61977@fit.vutbr.cz> In-Reply-To: <20121120072856.GA61977@fit.vutbr.cz> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: hubs@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 09:01:26 -0000 20.11.2012 11:28, Cejka Rudolf wrote: > Sergey Matveychuk wrote (2012/11/19): >> Hi. >> I'd like to move ftp5.ru to mirror.yandex.ru. Guys who hold it asks is >> it possible to give an access with FQDN, not IP? Or may be a networks list? >> We have a strategy to be independent of DC. If DC is down, all services >> can move to another one in another network. > > Hello, I do support just IP addresses or IP subnets for now and I'm not > willing to allow just domain names. You can have one main address and > one backup address in another network. > > Best regards. > Could you add address 95.108.197.242? Please, don't remove an old one (77.88.19.75) while I'll change DNS. I'll write you when remove it and give you a backup IP. From owner-freebsd-hubs@FreeBSD.ORG Tue Nov 20 15:59:11 2012 Return-Path: Delivered-To: hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 2DD7A887 for ; Tue, 20 Nov 2012 15:59:11 +0000 (UTC) (envelope-from freebsd@dohd.org) Received: from mx.terantula.net (mx.terantula.net [IPv6:2001:4cb8:1:3111::25]) by mx1.freebsd.org (Postfix) with ESMTP id B65328FC12 for ; Tue, 20 Nov 2012 15:59:10 +0000 (UTC) Received: from mx.terantula.net (mx.terantula.nl [80.255.244.205]) by mx.terantula.net (Postfix) with ESMTP id DF1058FC2D for ; Tue, 20 Nov 2012 16:59:08 +0100 (CET) X-Virus-Scanned: amavisd-new at terantula.nl Received: from nala.dohd.org (mail.dohd.org [IPv6:2001:470:d19e::25]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx.terantula.net (Postfix) with ESMTPS id 6CEB08FC12 for ; Tue, 20 Nov 2012 16:59:07 +0100 (CET) Received: from eeyore.local.dohd.org (localhost [127.0.0.1]) by nala.dohd.org (Postfix) with ESMTP id 13BE17EA94 for ; Tue, 20 Nov 2012 16:59:07 +0100 (CET) X-Virus-Scanned: amavisd-new at dohd.org Received: by nala.dohd.org (Postfix, from userid 1008) id 8C5947EA92; Tue, 20 Nov 2012 16:59:05 +0100 (CET) Date: Tue, 20 Nov 2012 16:59:05 +0100 From: Mark Huizer To: hubs@freebsd.org Subject: how to notify cvsup users? Message-ID: <20121120155905.GA17295@eeyore.local.dohd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.21 (2010-09-15) X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 15:59:11 -0000 Now that we want to get rid of cvsup and move those people to svn... Is there a way to somehow notify our users who mostly never check cvsup anyway of this? I doubt if they'd even notice their favorite cvsup server being turned off. Greetings Mark -- Nice testing in little China... From owner-freebsd-hubs@FreeBSD.ORG Tue Nov 20 16:26:41 2012 Return-Path: Delivered-To: hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 7691536C for ; Tue, 20 Nov 2012 16:26:41 +0000 (UTC) (envelope-from mohacsi@niif.hu) Received: from strudel.ki.iif.hu (strudel.ki.iif.hu [IPv6:2001:738:0:411:20f:1fff:fe6e:ec1e]) by mx1.freebsd.org (Postfix) with ESMTP id EA4CF8FC08 for ; Tue, 20 Nov 2012 16:26:40 +0000 (UTC) Received: from bolha.lvs.iif.hu (bolha.lvs.iif.hu [193.225.14.181]) by strudel.ki.iif.hu (Postfix) with ESMTP id B110333A; Tue, 20 Nov 2012 17:26:39 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at bolha.lvs.iif.hu Received: from strudel.ki.iif.hu ([IPv6:::ffff:193.6.222.244]) by bolha.lvs.iif.hu (bolha.lvs.iif.hu [::ffff:193.225.14.72]) (amavisd-new, port 10024) with ESMTP id 5O-E2O99rdCW; Tue, 20 Nov 2012 17:26:37 +0100 (CET) Received: by strudel.ki.iif.hu (Postfix, from userid 9002) id 45C793D7; Tue, 20 Nov 2012 17:26:37 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by strudel.ki.iif.hu (Postfix) with ESMTP id 3793F33A; Tue, 20 Nov 2012 17:26:37 +0100 (CET) Date: Tue, 20 Nov 2012 17:26:37 +0100 (CET) From: Mohacsi Janos X-X-Sender: mohacsi@strudel.ki.iif.hu To: Mark Huizer Subject: Re: how to notify cvsup users? In-Reply-To: <20121120155905.GA17295@eeyore.local.dohd.org> Message-ID: References: <20121120155905.GA17295@eeyore.local.dohd.org> User-Agent: Alpine 2.00 (DEB 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: hubs@freebsd.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 16:26:41 -0000 On Tue, 20 Nov 2012, Mark Huizer wrote: > Now that we want to get rid of cvsup and move those people to svn... > Is there a way to somehow notify our users who mostly never check cvsup > anyway of this? I doubt if they'd even notice their favorite cvsup > server being turned off. Using several channels: - good and handful of documentations in FreeBSD handbook - sample scripts files in base system for svn for tracking various version of FreeBSD and ports - information on FreeBSD website. Best Regards, Janos Mohacsi From owner-freebsd-hubs@FreeBSD.ORG Tue Nov 20 17:53:00 2012 Return-Path: Delivered-To: hubs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id A47E6ECA; Tue, 20 Nov 2012 17:53:00 +0000 (UTC) (envelope-from cejkar@fit.vutbr.cz) Received: from kazi.fit.vutbr.cz (kazi6.fit.vutbr.cz [IPv6:2001:67c:1220:808::93e5:80c]) by mx1.freebsd.org (Postfix) with ESMTP id 3313E8FC1E; Tue, 20 Nov 2012 17:53:00 +0000 (UTC) Received: from kazi.fit.vutbr.cz (localhost [127.0.0.1]) by kazi.fit.vutbr.cz (8.14.5/8.14.5) with ESMTP id qAKHqx6S077878 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 20 Nov 2012 18:52:59 +0100 (CET) Received: (from cejkar@localhost) by kazi.fit.vutbr.cz (8.14.5/8.13.1/Submit) id qAKHqxJr077877; Tue, 20 Nov 2012 18:52:59 +0100 (CET) (envelope-from cejkar@fit.vutbr.cz) X-Authentication-Warning: kazi.fit.vutbr.cz: cejkar set sender to cejkar@fit.vutbr.cz using -f Date: Tue, 20 Nov 2012 18:52:59 +0100 From: Cejka Rudolf To: Sergey Matveychuk Subject: Re: access to ftp-master.eu Message-ID: <20121120175259.GA77714@fit.vutbr.cz> References: <50AA64AC.2000502@FreeBSD.org> <20121120072856.GA61977@fit.vutbr.cz> <50AB46E5.3090103@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <50AB46E5.3090103@FreeBSD.org> User-Agent: Mutt/1.5.21 (2010-09-15) X-Scanned-By: MIMEDefang 2.73 on 147.229.8.12 Cc: hubs@FreeBSD.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 17:53:00 -0000 Sergey Matveychuk wrote (2012/11/20): > Could you add address 95.108.197.242? Please, don't remove an old one > (77.88.19.75) while I'll change DNS. I'll write you when remove it and > give you a backup IP. Yes, done. Best regards. -- Rudolf Cejka http://www.fit.vutbr.cz/~cejkar Brno University of Technology, Faculty of Information Technology Bozetechova 2, 612 66 Brno, Czech Republic From owner-freebsd-hubs@FreeBSD.ORG Wed Nov 21 10:39:33 2012 Return-Path: Delivered-To: hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 45E01AE1 for ; Wed, 21 Nov 2012 10:39:33 +0000 (UTC) (envelope-from j@uriah.heep.sax.de) Received: from uriah.heep.sax.de (uriah.heep.sax.de [213.240.137.9]) by mx1.freebsd.org (Postfix) with ESMTP id E77EB8FC08 for ; Wed, 21 Nov 2012 10:39:32 +0000 (UTC) Received: by uriah.heep.sax.de (Postfix, from userid 107) id 449FC214; Wed, 21 Nov 2012 11:30:54 +0100 (MET) Date: Wed, 21 Nov 2012 11:30:54 +0100 From: Joerg Wunsch To: hubs@freebsd.org Subject: Re: how to notify cvsup users? Message-ID: <20121121103054.GV47455@uriah.heep.sax.de> References: <20121120155905.GA17295@eeyore.local.dohd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20121120155905.GA17295@eeyore.local.dohd.org> X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E X-GPG-Fingerprint: 5E84 F980 C3CA FD4B B584 1070 F48C A81B 69A8 5873 User-Agent: Mutt/1.5.20 (2009-06-14) X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: Joerg Wunsch List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Nov 2012 10:39:33 -0000 As Mark Huizer wrote: > Now that we want to get rid of cvsup and move those people to svn... > Is there a way to somehow notify our users who mostly never check cvsup > anyway of this? I doubt if they'd even notice their favorite cvsup > server being turned off. I remember I've seen readable reply messages in the output of CVSup when something goes wrong on the server side, so they are displayed in the logs. Couldn't there just be a dummy CVSup server set up that starts the initial handshake, and then replies with a failure message that contains a URL explaining how to migrate to something else? -- cheers, J"org .-.-. --... ...-- -.. . DL8DTL http://www.sax.de/~joerg/ NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-) From owner-freebsd-hubs@FreeBSD.ORG Wed Nov 21 13:59:09 2012 Return-Path: Delivered-To: hubs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id BE74ACD7 for ; Wed, 21 Nov 2012 13:59:09 +0000 (UTC) (envelope-from sem@FreeBSD.org) Received: from mail.ciam.ru (mail.ciam.ru [91.209.218.18]) by mx1.freebsd.org (Postfix) with ESMTP id 64A538FC08 for ; Wed, 21 Nov 2012 13:59:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ciam.ru; s=dkim; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:References:Subject:CC:To:MIME-Version:From:Date:Message-ID; bh=iVlasQxeOKeqlBpeHCDej00LTPRLadDtzvQ4mvUOa7A=; b=dt+LnrFC2UxcWQ4aCJ3RmQqtMsOHBOoXLfAlNbCFTxWnKPOWdomzOma2EU+NUxtLos3w7Y804YzOVDAhdV1Z/eOjwC7pqZsPIr3jPMHrYceNZvCyHZUODbsvXxkqPWk9GBB1pDBd5wQB6ySq8vDOW2cM/natN7Y2LhUpdzMl1Ak=; Received: from dhcp170-188-red.yandex.net ([95.108.170.188]) by mail.ciam.ru with esmtpa (Exim 4.x) id 1TbApM-000NR6-Ah; Wed, 21 Nov 2012 17:58:56 +0400 Message-ID: <50ACDE24.8040806@FreeBSD.org> Date: Wed, 21 Nov 2012 17:59:00 +0400 From: Sergey Matveychuk User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20121026 Thunderbird/16.0.2 MIME-Version: 1.0 To: Cejka Rudolf Subject: Re: access to ftp-master.eu References: <50AA64AC.2000502@FreeBSD.org> <20121120072856.GA61977@fit.vutbr.cz> <50AB46E5.3090103@FreeBSD.org> <20121120175259.GA77714@fit.vutbr.cz> In-Reply-To: <20121120175259.GA77714@fit.vutbr.cz> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: hubs@FreeBSD.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Nov 2012 13:59:09 -0000 20.11.2012 21:52, Cejka Rudolf wrote: > Sergey Matveychuk wrote (2012/11/20): >> Could you add address 95.108.197.242? Please, don't remove an old one >> (77.88.19.75) while I'll change DNS. I'll write you when remove it and >> give you a backup IP. > > Yes, done. Best regards. > Does not work: @ERROR: access denied to FreeBSD from knight.yandex.net (95.108.197.242) rsync error: error starting client-server protocol (code 5) at main.c(1524) [Receiver=3.0.7] And I know backup IPs now: 77.88.19.68 93.158.155.195 So, a full list should be: 77.88.19.75 (will be removed) 95.108.197.242 77.88.19.68 93.158.155.195 Thank you. From owner-freebsd-hubs@FreeBSD.ORG Wed Nov 21 14:07:08 2012 Return-Path: Delivered-To: hubs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id D8FA7E28; Wed, 21 Nov 2012 14:07:08 +0000 (UTC) (envelope-from cejkar@fit.vutbr.cz) Received: from kazi.fit.vutbr.cz (kazi6.fit.vutbr.cz [IPv6:2001:67c:1220:808::93e5:80c]) by mx1.freebsd.org (Postfix) with ESMTP id 643098FC12; Wed, 21 Nov 2012 14:07:07 +0000 (UTC) Received: from kazi.fit.vutbr.cz (localhost [127.0.0.1]) by kazi.fit.vutbr.cz (8.14.5/8.14.5) with ESMTP id qALE75FR025398 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 21 Nov 2012 15:07:05 +0100 (CET) Received: (from cejkar@localhost) by kazi.fit.vutbr.cz (8.14.5/8.13.1/Submit) id qALE75NS025397; Wed, 21 Nov 2012 15:07:05 +0100 (CET) (envelope-from cejkar@fit.vutbr.cz) X-Authentication-Warning: kazi.fit.vutbr.cz: cejkar set sender to cejkar@fit.vutbr.cz using -f Date: Wed, 21 Nov 2012 15:07:05 +0100 From: Cejka Rudolf To: Sergey Matveychuk Subject: Re: access to ftp-master.eu Message-ID: <20121121140705.GA24744@fit.vutbr.cz> References: <50AA64AC.2000502@FreeBSD.org> <20121120072856.GA61977@fit.vutbr.cz> <50AB46E5.3090103@FreeBSD.org> <20121120175259.GA77714@fit.vutbr.cz> <50ACDE24.8040806@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <50ACDE24.8040806@FreeBSD.org> User-Agent: Mutt/1.5.21 (2010-09-15) X-Scanned-By: MIMEDefang 2.73 on 147.229.8.12 Cc: hubs@FreeBSD.org X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Nov 2012 14:07:08 -0000 Sergey Matveychuk wrote (2012/11/21): > Does not work: > @ERROR: access denied to FreeBSD from knight.yandex.net (95.108.197.242) > rsync error: error starting client-server protocol (code 5) at > main.c(1524) [Receiver=3.0.7] > > And I know backup IPs now: > 77.88.19.68 > 93.158.155.195 > > So, a full list should be: > 77.88.19.75 (will be removed) > 95.108.197.242 > 77.88.19.68 > 93.158.155.195 Oops, I'm sorry, fixed and added now (I hope :o). -- Rudolf Cejka http://www.fit.vutbr.cz/~cejkar Brno University of Technology, Faculty of Information Technology Bozetechova 2, 612 66 Brno, Czech Republic