On Wed, 9 Jan 2019 15:37:11 +0000, Stian Soiland-Reyes <[email protected]> wrote:
> Thanks to Ian, we have now migrated the Taverna Git repositories 
> We can now write to either gitbox.apache.org or the github.com
> repositories. 


To make "mvn release:" still work I have updated
scm/developerConnection in pom.xml as

https://github.com/apache/incubator-taverna-maven-parent/blob/master/pom.xml#L438

Which git server should be the default <developerConnection> ?

This is used by "mvn release:prepare" in the release procedure.


Reload https://taverna.incubator.apache.org/download/code/ and see
dropdown box for the various options:

gitbox https://gitbox.apache.org/repos/asf/incubator-taverna-maven-parent.git
https https://github.com/apache/incubator-taverna-maven-parent.git
ssh [email protected]:apache/incubator-taverna-maven-parent.git

(git:// is read-only)


To avoid repeated password entry during Maven release, then for https 
(either server) you will need to configure git to remember the
credentials:
https://reference.apache.org/committer/git#committersgettingstarted
(same as before, just different server name)



The GitHub ssh option can alternatively work with ssh client keys
for password-less acccess:
https://help.github.com/articles/connecting-to-github-with-ssh/
In this case you will need to configure your GitHub account
with each ssh key per machine you need commit access from.

If you have set a passphrase to encrypt the local key you will need to
run "ssh-agent bash"  and then "ssh-add" first to unlock.


My suggestion is to use the GitHub ssh option as it is my favourite
over fiddling with stored passwords, but there are arguments against:

* https password can be stored securely in OSX keychain
* We should not rely on third-party github.com during release prep, but
  use AFS's server
* ssh-keys can be tricky to generate and (if they have empty
  pass-phrase) insecure if stored on an unencrypted file system


Which option can we go for?  Note a vote, just give your opinion if any:

[ ] gitbox.apache.org https
[ ] GitHub https
[ ] GitHub ssh



-- 
Stian Soiland-Reyes
https://orcid.org/0000-0001-9842-9718

Reply via email to