According to Geoff Hutchison:
> On Thu, 11 Jan 2001, Gilles Detillieux wrote:
> > > P.S.: We should really make the pserver stuff strictly read-only and only allow
> > > commits through ssh...
> >
> > hard to find time to work on the source tree as it is, I'd prefer not
> > to have any extra layers that would slow that work down further.
>
> At some point, this will probably be unavoidable--this is currently the
> most secure way to run CVS. But don't despair--if you generate an SSH key,
> then you can pretty easily run CVS over SSH without requiring a password
> all the time.
OK, maybe I don't have a clear handle on how this is set up, but if I
run cvs over ssh, it will still be operating on a copy of the source
tree located on the ssh server, not on my own system. Is that correct?
If so, that means I still have to scp any changes over to the ssh
server before committing, or ssh to the server to do the edits there.
It would also mean that the ssh server would need a copy of the tree
for every user authorized to commit changes, otherwise we could end up
stomping over each others changes to a common tree, which would nullify
the benefits of using CVS in the first place. I guess disk is cheap now,
so this wouldn't be a problem, but the need for scp's is less than ideal.
I know, because I used to work that way on htdig.org before finally making
a local copy of the tree and comitting directly from my own system.
An ssh key, to avoid requiring a password each time, would help, but
it's still far from being as handy as I'd like. Oh well, c'est la vie!
If there's a way to securely and conveniently commit changes from my
own filesystem, how do I set that up?
--
Gilles R. Detillieux E-mail: <[EMAIL PROTECTED]>
Spinal Cord Research Centre WWW: http://www.scrc.umanitoba.ca/~grdetil
Dept. Physiology, U. of Manitoba Phone: (204)789-3766
Winnipeg, MB R3E 3J7 (Canada) Fax: (204)789-3930
------------------------------------
To unsubscribe from the htdig3-dev mailing list, send a message to
[EMAIL PROTECTED]
You will receive a message to confirm this.
