??changed: -Migration from sftp:// to bzr+ssh:// -==================================== Principles ==========
??changed: -Consequently we will not offer both sftp: and bzr+ssh: at the same time, as -the combination of both would allow users to run arbitrary commands on the -server through commit hooks, in effect getting local access. - -At a point we may move to bzr+ssh completely, but this requires moving all -the projects at once, and making sure they can create the directory layouts -they need through our web interface. Currently, there is not enough incentive, -or time, to do so. In particular it seems server-side commit hook'ing is -supported, but there are few actual server-side commit hooks. Consequently we only offer bzr+ssh:, so that users cannot run arbitrary commands on the server through commit hooks, in effect getting local access. --removed: -So it is a bit more complicated than just installing a piece of software on -our servers. - - * Source: http://savannah.gnu.org/support/?107077 - - * Building bzr from source: http://lists.gnu.org/archive/html/savannah-hackers-public/2010-05/msg00013.html - - ??changed: - * Warn all Savannah project admins who use bzr about the planned migration from sftp:// to bzr+ssh://, with a date for the switch - * Install e-mail notifications for commits (anything better than bzr-hookless-email? Cf. /etc/cron.hourly/bzr_commit_mail_notification in 'sftp') - * Adapt bzr repository instanciation in Savane (http://savannah.gnu.org/projects/savane-cleanup/) - * Move Apache2 virtual host from sftp to vcs-noshell - * Update documentation in project "administration"'s bzr repository - * Sync repositories from sftp to vcs-noshell - * Disable bzr at sftp - -DNS: current "bzr.savannah.gnu.org" points to the 'sftp' VM. "bzr2.savannah.gnu.org" points to the 'vcs-noshell' VM, which is the one we'll use after the migration. - * Install loggerhead loggerhead ========== loggerhead was previously installed at Savannah, but was disabled after a while. Here are points we'd like to get feedback about: * stability: loggerhead tended to produce Apache proxy errors (probably because it crashed), how to have it running for months? * activity: last release 0.17 is from 2009-08, that's old * code to use: there's been commits since the last release - do we need to use the trunk? -- forwarded from http://savannah.gnu.org/maintenance/bzr#[email protected]/maintenance _______________________________________________ Savannah-cvs mailing list [email protected] http://lists.gnu.org/mailman/listinfo/savannah-cvs
