From owner-freebsd-git@freebsd.org Sun Feb 9 12:13:08 2020 Return-Path: Delivered-To: freebsd-git@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 9BA0D2378C6 for ; Sun, 9 Feb 2020 12:13:08 +0000 (UTC) (envelope-from list1@gjunka.com) Received: from msa1.earth.yoonka.com (yoonka.com [88.98.225.149]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "msa1.earth.yoonka.com", Issuer "msa1.earth.yoonka.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 48FnxH5kPPz450H for ; Sun, 9 Feb 2020 12:13:07 +0000 (UTC) (envelope-from list1@gjunka.com) Received: from [10.70.7.24] ([10.70.7.24]) (authenticated bits=0) by msa1.earth.yoonka.com (8.15.2/8.15.2) with ESMTPSA id 019CD0f6083521 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Sun, 9 Feb 2020 12:13:00 GMT (envelope-from list1@gjunka.com) Subject: Re: Experiences with self-hosted git servers To: freebsd-git@freebsd.org References: From: Grzegorz Junka Message-ID: <867f859c-40ab-7b83-bf9b-4b2e5a5e003f@gjunka.com> Date: Sun, 9 Feb 2020 12:12:59 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.4.2 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-GB X-Rspamd-Queue-Id: 48FnxH5kPPz450H X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of list1@gjunka.com designates 88.98.225.149 as permitted sender) smtp.mailfrom=list1@gjunka.com X-Spamd-Result: default: False [-5.85 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:88.98.225.149]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-git@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; DMARC_NA(0.00)[gjunka.com]; IP_SCORE(-3.55)[ip: (-9.30), ipnet: 88.98.192.0/18(-4.65), asn: 56478(-3.72), country: GB(-0.08)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:56478, ipnet:88.98.192.0/18, country:GB]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-git@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion of git use in the FreeBSD project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Feb 2020 12:13:08 -0000 On 04/02/2020 14:37, Ed Maste wrote: > A remaining task for the Git Working Group is to evaluate and make a > recommendation for repository hosting. Both self-hosted and third > party services may be examined. > > There are a number of options for self-hosting, such as Gitea, GitLab, > as well as git's plain built-in server. Phabricator (which we use for > code reviews) also includes a repository hosting module named > Diffusion. > > I am interested in hearing from FreeBSD users and developers who have > used one or more of these, or other Git hosting tools - what worked > well, what didn't? What do you wish you had known before getting > started? I have used Github, Gitlab and Bitbucket at various occasions. All comments below are my opinions. The only advantage Github has is the community, i.e. almost everyone has a Github account and knows how to fork and contribute patches. Main disadvantages are that there are very few tools to work with the repository and those available are suboptimal. By that I mean things like viewing or searching commit history, doing code reviews, viewing graphs of branches, comparing specific branches or commits, etc. Bitbucket has the best tools for code reviews, merges, viewing and comparing history, etc. It also has a great policy enforcement system and a plugin ecosystem. Project admins can, for example, set up rules how many compulsory and optional reviewers have to review and approve a pull request before it can be merged. The plugins allow integrating with CI and defect tracking, e.g. to start a CI job when a PR is merged. The disadvantage is that many of those tools rely or work best with other Atlassian products, like Jira or Bamboo. Which of course doesn't mean they can't work with other tools - we had a Bitbucket set up to work with TeamCity and Jenkins. Gitlab is much better than Github but not as good as Bitbucket. It's more difficult to configure and lacks rules similar to Bitbucket. However, it still has better tools for code reviews, and comparing and browsing history than Github. One last note is that I have used those tools in a corporate environment. Open source community might or might not have different requirements and evaluation criteria. GrzegorzJ From owner-freebsd-git@freebsd.org Tue Feb 11 09:30:46 2020 Return-Path: Delivered-To: freebsd-git@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 18D4822DE51 for ; Tue, 11 Feb 2020 09:30:46 +0000 (UTC) (envelope-from uqs@freebsd.org) Received: from acme.spoerlein.net (acme.spoerlein.net [IPv6:2a05:fc87:1:5::15]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "www.spoerlein.net", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 48GyF14nrZz3GmX for ; Tue, 11 Feb 2020 09:30:45 +0000 (UTC) (envelope-from uqs@freebsd.org) Received: from localhost (acme.spoerlein.net [IPv6:2a05:fc87:1:5:0:0:0:15]) by acme.spoerlein.net (8.15.2/8.15.2) with ESMTPS id 01B9Ucmm092260 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for ; Tue, 11 Feb 2020 10:30:38 +0100 (CET) (envelope-from uqs@freebsd.org) Date: Tue, 11 Feb 2020 10:30:37 +0100 From: Ulrich =?utf-8?B?U3DDtnJsZWlu?= To: freebsd-git@freebsd.org Subject: Re: [GitHub API] Deprecation notice for authentication via URL query parameters Message-ID: <20200211093037.GA3075@acme.spoerlein.net> References: <5e3e1ceadadc6_7f513fb10bccd96c144474@github-lowworker-b40b5a4.cp1-iad.github.net.mail> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <5e3e1ceadadc6_7f513fb10bccd96c144474@github-lowworker-b40b5a4.cp1-iad.github.net.mail> User-Agent: Mutt/1.12.2 (2019-09-21) X-Rspamd-Queue-Id: 48GyF14nrZz3GmX X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-1.90 / 15.00]; local_wl_from(0.00)[freebsd.org]; NEURAL_HAM_MEDIUM(-0.97)[-0.972,0]; ASN(0.00)[asn:39540, ipnet:2a05:fc87::/32, country:CH]; NEURAL_HAM_LONG(-0.93)[-0.929,0] X-BeenThere: freebsd-git@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion of git use in the FreeBSD project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Feb 2020 09:30:46 -0000 On Fri, 2020-02-07 at 18:28:58 -0800, The FreeBSD Project wrote: > Hello there! > > On February 8th, 2020 at 02:28 (UTC) your application (Portscout) used its `client_id` and `client_secret` (with the User-Agent portscout/0.8.1) as part of a set of query parameters to access an endpoint through the GitHub API: > > https://api.github.com/repositories/1460612/releases/latest > > Please use Basic Authentication instead as using OAuth credentials in query parameters has been deprecated and will be removed July 1st, 2020. > > Depending on your API usage, we'll be sending you this email reminder at most once every 3 days. > > Visit https://developer.github.com/changes/2019-11-05-deprecated-passwords-and-authorizations-api/#authenticating-using-query-parameters for more information. > > Thanks, > The GitHub Team Could some kind soul forward that to whoever is running portscout please? Thanks! Uli  From owner-freebsd-git@freebsd.org Tue Feb 11 09:38:13 2020 Return-Path: Delivered-To: freebsd-git@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 166E922E135 for ; Tue, 11 Feb 2020 09:38:13 +0000 (UTC) (envelope-from koobs.freebsd@gmail.com) Received: from mail-pf1-x429.google.com (mail-pf1-x429.google.com [IPv6:2607:f8b0:4864:20::429]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 48GyPc2tpcz3HFq; Tue, 11 Feb 2020 09:38:12 +0000 (UTC) (envelope-from koobs.freebsd@gmail.com) Received: by mail-pf1-x429.google.com with SMTP id x185so5223391pfc.5; Tue, 11 Feb 2020 01:38:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:reply-to:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=STCC9eBK6oyR8RbVj5y4NR1rtp+5mmb3Unq/nNM9w3s=; b=MApWbBdQxDiUAUrdm0Zr/LIEzPv/XdiE1DFtjbbFmKMghL4DUgHmTGhxaTSad2t9Dx c/Hk+3dYdADhVsrSyxEd1ct2oygb1Jo5wWqET0oh7Pz5vlCw4IgKfwYVZL3tvbnDCE6Z 6wL4AJtWbF3OjeG8qRexwW6u+sUK7CBSDg4ARbIWiL8OW/O4H80OILSio6a0zpupNVWU GLpDMpCKx/OudQOxXLeelqO6GDtdgnsc5q/oybpuLR7PUfLdMxKyTVUCVyQLaao2SaC9 gSggTQfsLGZUnWHS/UX0yehOs8ZTIU9Bv3B8R4pjslCOUfWEJclHvmct8yRoW+mO5yP+ 5ySA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:reply-to:subject:to:references:from :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=STCC9eBK6oyR8RbVj5y4NR1rtp+5mmb3Unq/nNM9w3s=; b=K8/xq6ke5cAUmko42MUo7UujYRwiy7WQJ1adCBCztEUYZXSn6yFhGXobDrxFOVwj5d In8Urz/FIwrb9N05hdaAz/CjyievDdJPwdOdBC02RhTqFdGw64VXL7H/b0cnd4tMKAE2 z4oDhBCr8k0aAVUeWqHFSzNLvlVc2uifc4uZiZK2rBfeNO1DAQbDg/K5ucAfryusd3SH AkqYftGblYaWsYxs166WZ0xJFyIQ5U+IWYNTiDjvSv/zl74kIB08I5LSYOQ96ZAY6Pzf H6IF6y4XoF6/s+2mW273jQmKj4Kbjp8YJ8Z9SpRRQYDTVIfGkwIg3WQbR5NP7Gku0OBJ 32Ag== X-Gm-Message-State: APjAAAVcyHyvq3lxnEEz0Y/80IX84Oj++umpZHou1wXtmpirK4Ub36Rq DOlyqoSdfUyRJ0x+ykz5Ub4faiQS X-Google-Smtp-Source: APXvYqw9JTgW4CMbkPCKWFt9Aa/IhjsNpQr8y6xhDKXZhi/jJhOYszK7ZMC73k6NzwCOjcfHusyVbQ== X-Received: by 2002:a63:fa0b:: with SMTP id y11mr2174760pgh.137.1581413890710; Tue, 11 Feb 2020 01:38:10 -0800 (PST) Received: from ?IPv6:2403:5800:7100:5d01:70c0:712f:883f:8db1? (2403-5800-7100-5d01-70c0-712f-883f-8db1.ip6.aussiebb.net. [2403:5800:7100:5d01:70c0:712f:883f:8db1]) by smtp.gmail.com with ESMTPSA id z27sm3727360pfj.107.2020.02.11.01.38.09 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 11 Feb 2020 01:38:10 -0800 (PST) Sender: Kubilay Kocak Reply-To: koobs@FreeBSD.org Subject: Re: [GitHub API] Deprecation notice for authentication via URL query parameters To: =?UTF-8?Q?Ulrich_Sp=c3=b6rlein?= , freebsd-git@freebsd.org References: <5e3e1ceadadc6_7f513fb10bccd96c144474@github-lowworker-b40b5a4.cp1-iad.github.net.mail> <20200211093037.GA3075@acme.spoerlein.net> From: Kubilay Kocak Message-ID: <1a4e8360-852d-0d07-7959-09747941ac2d@FreeBSD.org> Date: Tue, 11 Feb 2020 20:38:06 +1100 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Thunderbird/73.0 MIME-Version: 1.0 In-Reply-To: <20200211093037.GA3075@acme.spoerlein.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 48GyPc2tpcz3HFq X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=MApWbBdQ; dmarc=none; spf=pass (mx1.freebsd.org: domain of koobsfreebsd@gmail.com designates 2607:f8b0:4864:20::429 as permitted sender) smtp.mailfrom=koobsfreebsd@gmail.com X-Spamd-Result: default: False [-4.60 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[koobs@FreeBSD.org]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; REPLYTO_ADDR_EQ_FROM(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; FORGED_SENDER(0.30)[koobs@FreeBSD.org,koobsfreebsd@gmail.com]; IP_SCORE(-2.40)[ip: (-8.29), ipnet: 2607:f8b0::/32(-1.95), asn: 15169(-1.72), country: US(-0.05)]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; FROM_NEQ_ENVFROM(0.00)[koobs@FreeBSD.org,koobsfreebsd@gmail.com]; MID_RHS_MATCH_FROM(0.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; TAGGED_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[FreeBSD.org]; RCVD_IN_DNSWL_NONE(0.00)[9.2.4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-git@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion of git use in the FreeBSD project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Feb 2020 09:38:13 -0000 On 11/02/2020 8:30 pm, Ulrich Spörlein wrote: > On Fri, 2020-02-07 at 18:28:58 -0800, The FreeBSD Project wrote: >> Hello there! >> >> On February 8th, 2020 at 02:28 (UTC) your application (Portscout) used its `client_id` and `client_secret` (with the User-Agent portscout/0.8.1) as part of a set of query parameters to access an endpoint through the GitHub API: >> >> https://api.github.com/repositories/1460612/releases/latest >> >> Please use Basic Authentication instead as using OAuth credentials in query parameters has been deprecated and will be removed July 1st, 2020. >> >> Depending on your API usage, we'll be sending you this email reminder at most once every 3 days. >> >> Visit https://developer.github.com/changes/2019-11-05-deprecated-passwords-and-authorizations-api/#authenticating-using-query-parameters for more information. >> >> Thanks, >> The GitHub Team > > Could some kind soul forward that to whoever is running portscout please? > > Thanks! > Uli Already in progress: https://github.com/freebsd/portscout/issues/8 :)