Bug#338503: ITP: cvssuck -- inefficient cvs repository grabber using cvs command

2005-11-10 Thread Piotr Roszatycki
Package: wnpp
Severity: wishlist
Owner: Piotr Roszatycki <[EMAIL PROTECTED]>

* Package name: cvssuck
  Version : 0.3.cvs20020108
* URL : http://cvs.m17n.org/~akr/cvssuck/
* License : BSD
  Description : inefficient cvs repository grabber using cvs command

CVSsuck is a mirroring tool for CVS repositories. Unlike other tools
such as CVSup or rsync, it uses cvs command to access the repository.
So, it works well with remote repositories without a special server or
shell account. However it is inefficient and not perfect because CVS
client/server protocol is not designed for mirroring. If a server
provides special way to grab a repository, you shouldn't use CVSsuck.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Bug#338503: ITP: cvssuck -- inefficient cvs repository grabber using cvs command

2005-11-11 Thread martin f krafft
also sprach Piotr Roszatycki <[EMAIL PROTECTED]> [2005.11.10.1908 +0100]:
> CVSsuck is a mirroring tool for CVS repositories. Unlike other
> tools such as CVSup or rsync, it uses cvs command to access the
> repository. So, it works well with remote repositories without
> a special server or shell account. However it is inefficient and
> not perfect because CVS client/server protocol is not designed for
> mirroring. If a server provides special way to grab a repository,
> you shouldn't use CVSsuck.

Sounds like this is best kept out of the archive then...

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`. martin f. krafft <[EMAIL PROTECTED]>
: :'  :proud Debian developer and author: http://debiansystem.info
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP (sub)keys? Use subkeys.pgp.net as keyserver!
 
it has been said that there are only two businesses
that refer to customers as users:
illegal drug trade and the computer industry.


signature.asc
Description: Digital signature (GPG/PGP)


Re: Bug#338503: ITP: cvssuck -- inefficient cvs repository grabber using cvs command

2005-11-11 Thread Junichi Uekawa
Hi,

> > CVSsuck is a mirroring tool for CVS repositories. Unlike other
> > tools such as CVSup or rsync, it uses cvs command to access the
> > repository. So, it works well with remote repositories without
> > a special server or shell account. However it is inefficient and
> > not perfect because CVS client/server protocol is not designed for
> > mirroring. If a server provides special way to grab a repository,
> > you shouldn't use CVSsuck.
> 
> Sounds like this is best kept out of the archive then...

To me it sounded like a pretty good idea, 
if the server only provides anonymous pserver CVS access.

regards,
junichi


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Bug#338503: ITP: cvssuck -- inefficient cvs repository grabber using cvs command

2005-11-16 Thread Tim Cutts


On 11 Nov 2005, at 2:32 pm, Junichi Uekawa wrote:


Hi,



CVSsuck is a mirroring tool for CVS repositories. Unlike other
tools such as CVSup or rsync, it uses cvs command to access the
repository. So, it works well with remote repositories without
a special server or shell account. However it is inefficient and
not perfect because CVS client/server protocol is not designed for
mirroring. If a server provides special way to grab a repository,
you shouldn't use CVSsuck.



Sounds like this is best kept out of the archive then...



To me it sounded like a pretty good idea,
if the server only provides anonymous pserver CVS access.


I wouldn't call it a "mirror" though; how does it manage to fetch the  
complete repository including history?  It doesn't do something evil  
like fetch the cvs log, and then fetch every single revision for  
every file, does it?  I shudder to think what would happen if it does  
that and someone pointed it at the largest public CVS server I  
maintain (cvs.sanger.ac.uk) which has several GB of CVS repository.   
The Ensembl source code alone has had about 60,000 revisions made to  
it in its life (judging by the revision number that I ended up with  
when I converted it to a Subversion repository as an experiment).


If it's not doing anything as complex as that, what does it give you  
that just using cvs checkout doesn't?


Tim


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Bug#338503: ITP: cvssuck -- inefficient cvs repository grabber using cvs command

2005-11-16 Thread Jon Dowland
On Wed, Nov 16, 2005 at 02:17:08PM +, Tim Cutts wrote:
> I wouldn't call it a "mirror" though; how does it manage to fetch the
> complete repository including history?  It doesn't do something evil
> like fetch the cvs log, and then fetch every single revision for
> every file, does it? 

Looking at the source, I think that is exactly what it does, although
I've only had a cursory glance.

I did notice also that it's vulnerable to a symlink attach, suggest
shelling out to mktemp at line #127 in your debian diff.gz.

-- 
Jon Dowland
http://jon.dowland.name/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]