Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Sep 2019 14:51:13 -0400
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        Ulrich Sp??rlein <uspoerlein@gmail.com>
Cc:        Sean Chittenden <sean@chittenden.org>, freebsd-git@freebsd.org
Subject:   Re: Service disruption: git converter currently down
Message-ID:  <20190923185113.dyvxxn36gvj4dtu5@mutt-hbsd>
In-Reply-To: <CAJ9axoQ-g2Qa2Qnr%2BPOD63s8sTH2Gsi7Rh2VMcZzQF5dd_kBvA@mail.gmail.com>
References:  <CAJ9axoR41gM5BGzT-nPJqqjym1cPYv31dDUwXwi4wsApfDJW%2Bw@mail.gmail.com> <CAJ9axoToynYpF=ZdWdtn_CkkA2nVkgtckQSu%2BcMis1NOXgUdnA@mail.gmail.com> <CAJ9axoR2VXFo9_hx9Z1Qwgs7U-dkan56hrUKO9f7uN6Wpd15xQ@mail.gmail.com> <CAHevUJHwDet8pBdrE4SN3nuoAUgP-ixpCz9uOTdwbE31UDDsbA@mail.gmail.com> <CAJ9axoSVhmSkNS6S1zTiwK5F3uUM%2B-8D2478=irZMeTjNxpnfg@mail.gmail.com> <20190923183424.ebnghzf67mx56aom@mutt-hbsd> <CAJ9axoQ-g2Qa2Qnr%2BPOD63s8sTH2Gsi7Rh2VMcZzQF5dd_kBvA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--yuhiezjj5qjvvmb7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Sep 23, 2019 at 08:42:10PM +0200, Ulrich Sp??rlein wrote:
> Am Mo., 23. Sept. 2019 um 20:34 Uhr schrieb Shawn Webb
> <shawn.webb@hardenedbsd.org>:
> >
> > Hey Ulrich,
> >
> > I appreciate your hard work in maintaining the git mirror. Work like
> > this can sometimes go unthanked. I want to take a moment to show
> > appreciation for you and the FreeBSD project in maintaining the git
> > mirror.
> >
> > I do have a few concerns with what was stated in your email. I've
> > written my concerns inline. I hope this discussion is a positive one,
> > wherein upstream and downstream can effectively come to a conclusion.
> >
> > On Mon, Sep 23, 2019 at 08:16:25PM +0200, Ulrich Sp??rlein wrote:
> > > Am Mo., 23. Sept. 2019 um 19:51 Uhr schrieb Sean Chittenden
> > > <sean@chittenden.org>:
> > > >>
> > > >> Please note however, that more "garbage" metadata escaped from SVN=
 into
> > > >> github, meaning 3rd parties have a hard time re-running the conver=
sion and
> > > >> making sure that it matches SVN down to the metadata (i.e. timesta=
mps).
> > > >>
> > > >> Eventually, this will have to be re-rolled and a new "master" bran=
ch will
> > > >> be force-pushed into github. There's no timeline for this yet.
> > > >
> > > >
> > > > Wait, what?  Can you elaborate?
> > > >
> > > > Discussion of a force-push to github has occurred a few times and b=
een explicitly ruled out because most of our corporate citizens use github =
to integrate changes from FreeBSD.  Rerolling master was universally reject=
ed when we socialized wanting to do this due to the level of disruption thi=
s would cause.  The feedback was that this would be a high-cost, low-value =
operation.  In the tradeoffs of purity vs pragmatism, pragmatism wins every=
 time (that is the FreeBSD way).
> > > >
> > > > -sc
> > >
> > >
> > > This is not just about pragmatism and the disruption it would cause is
> > > vastly overblown by people who don't seem to know much about the git
> > > storage model.
> > >
> > > There *is* garbage metadata in the published version on github, there
> > > *is* a disclaimer on https://wiki.freebsd.org/GitWorkflow since
> > > forever, and the cost of switching from 1 published branch to another
> > > is literally:
> > >
> > > - git diff origin/broken_master mybranch > mybranch.patch
> > > - git checkout -b fixed_branch origin/fixed_master
> > > - patch < mybranch.patch
> >
> > Such a workflow breaks historical accuracy. Instead of `git annotate`
> > showing the history properly, it's now based on an "epoch commit".
> > Sure such a commit brings the branch to a working condition, but at
> > the cost of history.
>=20
> Is there really that much value in having "git blame" work in that enviro=
nment?
> My mental model is of short-lived branches that get upstreamed, so I'm bi=
ased
> towards this not being all that big of a problem (for some at least).
>=20
> > >
> > > It should also be possible to merge both broken and fixed master into
> > > your branch (at the exact same SVN revision in time) and then you can
> > > follow fixed_master going forward. You'll schlepp around double the
> > > commit history, but not tree objects.
> > > If you want to retain history, you can upstream the changes prior to
> > > the switch
> >
> > I so wish that were possible for certain downstream projects. We're
> > unable to upstream the majority of our work. To argue "upstream your
> > work and you won't be affected" is to choose an argument that does not
> > reflect the reality of a growing portion of FreeBSD's downstream
> > consumers: the inability to work effectively with upstream.
>=20
> :/
>=20
> I'm 80% sure that you can just merge both branches and things will be fine
> (though the exact incantation will surely be black magic). I'd love to
> try this on
> an actual repo though, I don't have the time to craft some test repo to v=
erify
> this assumption, and then find out that other repos are different).

HardenedBSD's github repo has existed since 2013, with branches
stemming from that work existing still today. Perhaps HardenedBSD is
somewhat in a special case: we aim to provide the BSD community with a
clean-room reimplementation of publicly-documented parts of the
grsecurity patchset.

With FreeBSD not taking the same approach, we will have very
long-lived branches. For example, our hardened/current/master branch
follows FreeBSD's HEAD and syncs every six hours. Meaning, we maintain
our patches, resolving whatever few merge conflicts arrive. The
hardened/current/master branch was created so many years ago, I've
forgotten when it was actually created (perhaps in 2013?)

Though HardenedBSD's cause for existence may be a special case, this
problem can be viewed in a general fashion. I'm confident HardenedBSD
is not alone in facing issues of these types.

Thanks,

--=20
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

Tor-ified Signal:    +1 443-546-8752
Tor+XMPP+OTR:        lattera@is.a.hacker.sx
GPG Key ID:          0xFF2E67A277F8E1FA
GPG Key Fingerprint: D206 BB45 15E0 9C49 0CF9  3633 C85B 0AF8 AB23 0FB2

--yuhiezjj5qjvvmb7
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=sBvH
-----END PGP SIGNATURE-----

--yuhiezjj5qjvvmb7--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20190923185113.dyvxxn36gvj4dtu5>