Re: [Monotone-devel] Google Summer of Code 2006

[Timothy Brownawell]

On Fri, 2006-04-21 at 13:29 -0400, Ethan Blanton wrote:
> No, not at all like that.  I would rather, as the previous poster
> suggested, usher received the incoming data, and rather than spawning
> the monotone server directly (as it does now), it requested a
> privileged process to spawn the monotone server on its behalf and then
> communicated with that server.

Usher is reorganized on branch net.venge.monotone.contrib.usher in such
a way that this shouldn't be too hard to do.

> The extra security comes in in that the usher server which listens to
> the outside world and the privileged server cooperate in a very simple
> and well-defined manner (e.g., perhaps the listening server sends
> simply a tuple of {hostname, collection} to the privileged server, and
> receives a port number in return).  I believe netsync cannot be
> considered a simple and well-defined manner.

Usher allows for asking the status of a server, allowing/not allowing it
to receive new connections, and closing idle servers. In the rewrite,
servers are hidden behind a server_manager class, which has 8
"interesting" public functions. At least 3 of these would have to talk
to the priviledged process (reload server list, connect to server, kill
idle server). I *think* the others could avoid this.

Tim




___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Nathaniel Smith]

On Fri, Apr 21, 2006 at 09:54:17AM -0500, Chad Walstrom wrote:
> There's been a lot of talk lately on the [EMAIL PROTECTED] list
> about this.  Currently, Savannah offers CVS and GNU Arch, but
> obviously people want to run their favorite SCM's to work on their
> projects.  Subversion has come up in the discussion (with some loud
> approval), and I dropped the Monotone with usher suggestion into the
> fray.

My _guess_ is that it would be a little more prudent on our part to
start up our own small hosting environment first.  Timothy has done
awesome work here; I think(?) all we actually need is a server to host
things on.  That way we can do the shake-down ourselves, and find
whatever problems there are :-).

But, hey, if the Savannah folks actually are interested in this (I
think the privilege separation tweaks would be really easy, see
below), and want to explore things more, that'd be cool too.  I can't
tell from your message how much actual interest there is.

> It was rejected on the issue of security, that if usher were allowed
> to launch 'mtn serve' instances, they would be required to share the
> same system user/group permissions.  A single compromised usher
> instance would then give unmitigated access to each of the services it
> started.  The alternative I proposed was to manage the 'mtn serve'
> instances separately, then use usher to proxy.

If I were writing usher, I'd have just used Twisted; it has such rich
networking and process support that the whole functionality would be
like 1 page of code, easy to read, no buffer overruns :-).  If anyone
wanted to implement a new usher proxy with whatever fancy features, it
really could be an afternoon of work; usher is _very_ simple.

-- Nathaniel

-- 
"But in Middle-earth, the distinct accusative case disappeared from
the speech of the Noldor (such things happen when you are busy
fighting Orcs, Balrogs, and Dragons)."


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Nathaniel Smith]

On Thu, Apr 20, 2006 at 03:38:18PM +0200, Thomas Keller wrote:
> Cool thing... but what happened last time? Did any project / code from 
> the previous SoC went into monotone?

-- our switching to Botan, and test cases for SHA1 were from SoC
-- Timothy did an implementation of *-merge, which was unfortunately a
   little ahead of its time :-), and by the time it was done, already
   obsoleted by schemes to implement some weird "roster" things...
   however, this did produce multi-*-merge and expertise, so totally
   worth it, IMHO!
-- we have a more-or-less working (somewhat bitrotten) git importer in
   a branch; haven't managed to get pasky to sit down and figure out
   what it's actual status is exactly :-).  Turned out that we were a
   little ambitious in when we thought a git importer would be a good
   selling point, but it's still all there for when someone gets
   around to integrating it.

-- Nathaniel

-- 
"But in Middle-earth, the distinct accusative case disappeared from
the speech of the Noldor (such things happen when you are busy
fighting Orcs, Balrogs, and Dragons)."


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Chad Walstrom]

Thank you, Ethan, for replying.  We are seeing eye to eye on this one.
OpenSSH has had nothing but problems with trying to debug and secure
the privileged separation code.  It has poor interaction with other
authentication systems, and has been all-around buggy.  Yet, like
Ethan stated, there are more eyes, and the CAN bulletins are generally
made AFTER a fix had been published: they're that fast. ;-)

Like Ethan, I also run my web server as an unprivileged user and don't
allow suexec.

Richard is right in that having a master process that runs as root to
which usher talks adds complexity (but not much).  It also insulates
the public interface from risky tasks, such as switching process
users.

Of course, you wouldn't need the master process if:
1. You never host local databases
2. You're OK with usher running multiple databases as a single user.
3. You manage (launch) the servers with some other system/setup

If you need the extra security of running servers as different users
(Savannah), then another management solution is necessary.  Running
thousands of servers all the time. (Ouch)  Implement some sort of
firewall port-knocking swatch launcher. (Icky.  Yes, I said, "Icky.")

The nice thing about having a master process is that it doesn't have
to be that complex.  Listen to a socket.  Receive a request from usher
for a local database.  Launch 'mtn -d DBPATH serve --bind 127.0.0.1
--port RANDPORT ...' as the appropriate user.  Give usher the port or
failure message.  usher than works as it normally does.  It just needs
a new target, a socket to the master process.

Anyway, it's a brain-storming feature request.  Not a high priority,
but if we want Monotone on Savannah, I'd hedge my bets that it would
be well-received by the Savannah admins. 
-- 
Chad Walstrom <[EMAIL PROTECTED]>   http://www.wookimus.net/
   assert(expired(knowledge)); /* core dump */



___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Timothy Brownawell]

On Fri, 2006-04-21 at 13:29 -0400, Ethan Blanton wrote:
> The extra security comes in in that the usher server which listens to
> the outside world and the privileged server cooperate in a very simple
> and well-defined manner (e.g., perhaps the listening server sends
> simply a tuple of {hostname, collection} to the privileged server, and
> receives a port number in return).  I believe netsync cannot be
> considered a simple and well-defined manner.

It doesn't actually parse the netsync stream; it considers it an opaque
bytestream and just forwards it to the monotone server.

What it does understand is that the stream starts with a sequence of
  [byte] [byte] [size] [size] [host] [size] [pattern]
, which is the only thing it looks at. This is a simple {hostname,
collection} tuple, just with 2 opaque bytes in front of it. (The only
slight complexity is that the sizes are in uleb128 format, instead of
fixed-size integers.)

Really, I'd be more worried about how it handles the server list (since
that code has had crashes in it), which has to be on the secure side.

Tim




___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Richard Levitte - VMS Whacker]

In message <[EMAIL PROTECTED]> on Fri, 21 Apr 2006 13:29:36 -0400, Ethan 
Blanton <[EMAIL PROTECTED]> said:

eblanton> Richard Levitte - VMS Whacker spake unto us the following wisdom:
eblanton> > So your listening server would basically be a proxy that
eblanton> > sends bit back and forth between a remote client and a
eblanton> > local master server process.  In what way does that give
eblanton> > you extra security?
eblanton> 
eblanton> No, not at all like that.  I would rather, as the previous
eblanton> poster suggested, usher received the incoming data, and
eblanton> rather than spawning the monotone server directly (as it
eblanton> does now), it requested a privileged process to spawn the
eblanton> monotone server on its behalf and then communicated with
eblanton> that server.

Ah, I missed that other post.  That makes a lot more sense.

Cheers,
Richard

-
Please consider sponsoring my work on free software.
See http://www.free.lp.se/sponsoring.html for details.

-- 
Richard Levitte [EMAIL PROTECTED]
http://richard.levitte.org/

"When I became a man I put away childish things, including
 the fear of childishness and the desire to be very grown up."
-- C.S. Lewis


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Ethan Blanton]

Richard Levitte - VMS Whacker spake unto us the following wisdom:
> In message <[EMAIL PROTECTED]> on Fri, 21 Apr 2006 11:29:00 -0400, Ethan 
> Blanton <[EMAIL PROTECTED]> said:
> eblanton> Richard Levitte - VMS Whacker spake unto us the following wisdom:
> eblanton> > I'm sorry, why can't usher *be* the master server?  Adding
> eblanton> > a master server in between would just add a layer of
> eblanton> > complexity that gives nothing extra in return.
> eblanton> 
> eblanton> I for one would much rather the listening daemon didn't have
> eblanton> to run with root privileges, such that it could execute
> eblanton> servers as other users...
> 
> So your listening server would basically be a proxy that sends bit
> back and forth between a remote client and a local master server
> process.  In what way does that give you extra security?

No, not at all like that.  I would rather, as the previous poster
suggested, usher received the incoming data, and rather than spawning
the monotone server directly (as it does now), it requested a
privileged process to spawn the monotone server on its behalf and then
communicated with that server.

The extra security comes in in that the usher server which listens to
the outside world and the privileged server cooperate in a very simple
and well-defined manner (e.g., perhaps the listening server sends
simply a tuple of {hostname, collection} to the privileged server, and
receives a port number in return).  I believe netsync cannot be
considered a simple and well-defined manner.

> I trust you don't run sshd, apache or any other server that requires
> authentication and authorisation or is capable thereof, btw :-).

For one, sshd and apache have a *lot* more eyeballs looking at them
than monotone does.  For another, most of these types of services use
a very similar plan to what I just outlined -- perhaps you remember
the sshd privsep push a few years back?  What about, for example,
courier using a dedicated process for authentication?  I don't know
about you, but my apache processes which serve pages run as www-data,
not root.

In the very example the previous poster mentioned, postfix has a
"master" process which runs as root and spawns child processes with
the appropriate user ID and privelege level -- for example, opening
the (privileged) port 25 and then handing the handling of that port
off to a process named smtpd which runs as the postfix user.

There is no need to introduce a *new* system which shares the same
fundamental security flaws we have learned to correct in old systems.

Ethan

-- 
The laws that forbid the carrying of arms are laws [that have no remedy
for evils].  They disarm only those who are neither inclined nor
determined to commit crimes.
-- Cesare Beccaria, "On Crimes and Punishments", 1764


signature.asc
Description: Digital signature
___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Richard Levitte - VMS Whacker]

In message <[EMAIL PROTECTED]> on Fri, 21 Apr 2006 11:29:00 -0400, Ethan 
Blanton <[EMAIL PROTECTED]> said:

eblanton> Richard Levitte - VMS Whacker spake unto us the following wisdom:
eblanton> > I'm sorry, why can't usher *be* the master server?  Adding
eblanton> > a master server in between would just add a layer of
eblanton> > complexity that gives nothing extra in return.
eblanton> 
eblanton> I for one would much rather the listening daemon didn't have
eblanton> to run with root privileges, such that it could execute
eblanton> servers as other users...

So your listening server would basically be a proxy that sends bit
back and forth between a remote client and a local master server
process.  In what way does that give you extra security?

I trust you don't run sshd, apache or any other server that requires
authentication and authorisation or is capable thereof, btw :-).

Cheers,
Richard

-
Please consider sponsoring my work on free software.
See http://www.free.lp.se/sponsoring.html for details.

-- 
Richard Levitte [EMAIL PROTECTED]
http://richard.levitte.org/

"When I became a man I put away childish things, including
 the fear of childishness and the desire to be very grown up."
-- C.S. Lewis


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Ethan Blanton]

Richard Levitte - VMS Whacker spake unto us the following wisdom:
> In message <[EMAIL PROTECTED]> on Fri, 21 Apr 2006 09:54:17 -0500, Chad 
> Walstrom <[EMAIL PROTECTED]> said:
> > There's the Postfix way of launching new services, a master server.
> > usher could make requests of the master server to launch a new 'mtn
> > serve' instance as a given user.  i.e. The 'gnats' user to launch 'mtn
> > serve' on the GNATS project's gnats.mtn database.
> 
> I'm sorry, why can't usher *be* the master server?  Adding a master
> server in between would just add a layer of complexity that gives
> nothing extra in return.

I for one would much rather the listening daemon didn't have to run
with root privileges, such that it could execute servers as other
users...

Ethan

-- 
The laws that forbid the carrying of arms are laws [that have no remedy
for evils].  They disarm only those who are neither inclined nor
determined to commit crimes.
-- Cesare Beccaria, "On Crimes and Punishments", 1764


signature.asc
Description: Digital signature
___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Richard Levitte - VMS Whacker]

In message <[EMAIL PROTECTED]> on Fri, 21 Apr 2006 09:54:17 -0500, Chad 
Walstrom <[EMAIL PROTECTED]> said:

chewie> There is the possibility of adding setuid/setgid calls to usher, but
chewie> that means usher would need to be run as root or have some sort of
chewie> capabilities package enabled in the kernel to assign these rights to
chewie> an unprivileged user.  A little scary, if you ask me, since usher is
chewie> processing public requests.
chewie> 
chewie> There's the Postfix way of launching new services, a master server.
chewie> usher could make requests of the master server to launch a new 'mtn
chewie> serve' instance as a given user.  i.e. The 'gnats' user to launch 'mtn
chewie> serve' on the GNATS project's gnats.mtn database.

I'm sorry, why can't usher *be* the master server?  Adding a master
server in between would just add a layer of complexity that gives
nothing extra in return.

Cheers,
Richard

-
Please consider sponsoring my work on free software.
See http://www.free.lp.se/sponsoring.html for details.

-- 
Richard Levitte [EMAIL PROTECTED]
http://richard.levitte.org/

"When I became a man I put away childish things, including
 the fear of childishness and the desire to be very grown up."
-- C.S. Lewis


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Chad Walstrom]

Richard Li <[EMAIL PROTECTED]>  wrote:
> Sourceforge offers CVS hosting; gna.org offers Arch, Subversion, and
> CVS hosting.
> 
> So enabling one of these sites to offer Monotone hosting. I would
> imagine that the process of setting this up could drive some feature
> development in Monotone as well.

There's been a lot of talk lately on the [EMAIL PROTECTED] list
about this.  Currently, Savannah offers CVS and GNU Arch, but
obviously people want to run their favorite SCM's to work on their
projects.  Subversion has come up in the discussion (with some loud
approval), and I dropped the Monotone with usher suggestion into the
fray.

It was rejected on the issue of security, that if usher were allowed
to launch 'mtn serve' instances, they would be required to share the
same system user/group permissions.  A single compromised usher
instance would then give unmitigated access to each of the services it
started.  The alternative I proposed was to manage the 'mtn serve'
instances separately, then use usher to proxy.

Some of what needs to be done in order to pull this off is to have
management scripts for hosting monotone servers in place.  I asked
Greydon if inetd-enabling monotone would work, but he indicated that
there would be database locking issues.  I've added a feature-request
to daemonize monotone [1], which would certainly help with launching
and controlling 'mtn serve' instances.

There is the possibility of adding setuid/setgid calls to usher, but
that means usher would need to be run as root or have some sort of
capabilities package enabled in the kernel to assign these rights to
an unprivileged user.  A little scary, if you ask me, since usher is
processing public requests.

There's the Postfix way of launching new services, a master server.
usher could make requests of the master server to launch a new 'mtn
serve' instance as a given user.  i.e. The 'gnats' user to launch 'mtn
serve' on the GNATS project's gnats.mtn database.

IMHO, working with the Savannah team to serve Monotone would be quite
awesome. ;-)  A good Google SoC project.

References
==
1. https://savannah.nongnu.org/bugs/?func=detailitem&item_id=16177
-- 
Chad Walstrom <[EMAIL PROTECTED]>   http://www.wookimus.net/
   assert(expired(knowledge)); /* core dump */



___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Richard Li]

Btw... what do you mean with "public hosting"?


Sourceforge offers CVS hosting; gna.org offers Arch, Subversion, and CVS 
hosting.


So enabling one of these sites to offer Monotone hosting. I would 
imagine that the process of setting this up could drive some feature 
development in Monotone as well.


Richard


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Thomas Keller]

Richard Li schrieb:
Have we thought about projects related to quality, e.g., performance 
regression test framework and tests; documentation; multi-server 
testing; website enhancements; monotone public hosting; etc.?


Indeed, all good points here - I already mentioned earlier that there 
are many many helpful tools and ressources available for mtn, but all 
these things are poorly integrated in the main website.

Btw... what do you mean with "public hosting"?

Tommy.


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Richard Li]

Have we thought about projects related to quality, e.g., performance 
regression test framework and tests; documentation; multi-server 
testing; website enhancements; monotone public hosting; etc.?


Adding projects like this may enable people who are interested in 
Monotone but do not have the requisite hacking skills to get involved 
and contribute in valuable ways.


Richard


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Ingo Maindorfer]

Hi Nathaniel,

Adding stuff to automate is easy, knowing what to add is hard.  What I
always say is, send details on what exactly you want to accomplish to
the list, and we'll figure out what needs to be added to automate to
make it work :-).

-- Nathaniel
  
I think, for a very basic GUI-based workflow the following commands are 
*necessary* :


add, drop, rm, update, checkout, heads, privkey, pubkey, read, dorpkey, 
genkey and some funky stuff to create a database.


I hope I'm not to rude :)

This commands should be usefull for everybody who want's some GUI or 
integration in an IDE or editor.


Best Regards,

Ingo


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

[Fwd: Re: [Monotone-devel] Google Summer of Code 2006]

[Vinzenz 'evilissimo' Feenstra]

Nathaniel Smith schrieb:


Also, to everyone: what monotone-related projects do you think would
be good for a student summer project? :-) (Or, just, what projects do
you think would be cool?)
  

What about a Tortoise-like Clone for Monotone?

BR




___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Zbynek Winkler]

Alex Queiroz wrote:


Also, to everyone: what monotone-related projects do you think would
be good for a student summer project? :-) (Or, just, what projects do
you think would be cool?)
   



A Trac look-alike for Monotone!

 

I'd like that too. The "instant sourceforge" drh talked about some time 
ago would be really cool...


Zbynek

--
http://zw.matfyz.cz/ http://robotika.cz/
Faculty of Mathematics and Physics, Charles University, Prague, Czech Republic



___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Ingo Maindorfer]

Hi there,

I just started playing with monotone a few days ago and still missing
some GUI suitable for Windows. There is guitone, but in an early stage.
Now I'm joining Thomas for helping.
I do a port to guitone Qt4, but I still missing some commands in the
automate interface.

That's my wish: a more complete automate interface

Best Regards,

Ingo Maindorfer



___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Thomas Keller]

[EMAIL PROTECTED] schrieb:
  or WxWindows/WxWidgets?  Or Java?  Or Lua?  By the way, what *is* 
guitone?


A small Qt GUI for monotone, residing in net.venge.monotone.guitone at 
venge.net. It currently only parses the workspace and displays status 
information for all directories / files in a LinCVS-alike view.


Tommy.


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Fwd: [Monotone-devel] Google Summer of Code 2006

[Alex Queiroz]

Hallo,

On 4/20/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>
>   or WxWindows/WxWidgets?  Or Java?  Or Lua?  By the way, what *is*
> guitone?
>

 For a long time I've been wishing that Monotone could be really
scripted from Lua, albeit for selfish reasons, I admit. Maybe some
student would be interested in that?

--
-alex
http://www.ventonegro.org/


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[hendrik]

On Thu, Apr 20, 2006 at 03:38:18PM +0200, Thomas Keller wrote:
> Nathaniel Smith schrieb:
> >Google's running Summer of Code again this year:
> >  http://code.google.com/soc
> >
> >They invited us back again, so I went ahead and accepted :-).  They
> 
> Cool thing... but what happened last time? Did any project / code from 
> the previous SoC went into monotone?
> 
> >Also, to everyone: what monotone-related projects do you think would
> >be good for a student summer project? :-) (Or, just, what projects do
> >you think would be cool?)
> 
> Well, I'm not too familiar with SoC so I don't know how many students do 
> see that as a part time thing and how many actually stick to the OS 
> project, so finding suitable (smaller) projects to get them "warmed up" 
> might be better than huge / complicated tasks.
> 
> My idea would be to offer a project to develop a cross-platform mtn GUI 
> (this may or may not be build off guitone and/or Qt - I'm open for other 
> suggestions as well),

  or WxWindows/WxWidgets?  Or Java?  Or Lua?  By the way, what *is* 
guitone?

> while extending the automation interface would be 
> a prerequisite for that.
> 
> Tommy.
> 
> 
> ___
> Monotone-devel mailing list
> Monotone-devel@nongnu.org
> http://lists.nongnu.org/mailman/listinfo/monotone-devel


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Thomas Keller]

Nathaniel Smith schrieb:

Google's running Summer of Code again this year:
  http://code.google.com/soc

They invited us back again, so I went ahead and accepted :-).  They


Cool thing... but what happened last time? Did any project / code from 
the previous SoC went into monotone?



Also, to everyone: what monotone-related projects do you think would
be good for a student summer project? :-) (Or, just, what projects do
you think would be cool?)


Well, I'm not too familiar with SoC so I don't know how many students do 
see that as a part time thing and how many actually stick to the OS 
project, so finding suitable (smaller) projects to get them "warmed up" 
might be better than huge / complicated tasks.


My idea would be to offer a project to develop a cross-platform mtn GUI 
(this may or may not be build off guitone and/or Qt - I'm open for other 
suggestions as well), while extending the automation interface would be 
a prerequisite for that.


Tommy.


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

Re: [Monotone-devel] Google Summer of Code 2006

[Alex Queiroz]

Hallo,

On 4/20/06, Nathaniel Smith <[EMAIL PROTECTED]> wrote:
>
> Also, to everyone: what monotone-related projects do you think would
> be good for a student summer project? :-) (Or, just, what projects do
> you think would be cool?)
>


A Trac look-alike for Monotone!


--
-alex
http://www.ventonegro.org/


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel

[Monotone-devel] Google Summer of Code 2006

[Nathaniel Smith]

Google's running Summer of Code again this year:
  http://code.google.com/soc

They invited us back again, so I went ahead and accepted :-).  They
seem more organized this time around, with actual infrastructure and
such.  If anyone is interested in doing mentoring, you can actually
sign up with some web form doohickies:
  http://code.google.com/soc/mentor_step1.html
and help us review apps, etc.

Also, to everyone: what monotone-related projects do you think would
be good for a student summer project? :-) (Or, just, what projects do
you think would be cool?)

-- Nathaniel

-- 
Sentience can be such a burden.


___
Monotone-devel mailing list
Monotone-devel@nongnu.org
http://lists.nongnu.org/mailman/listinfo/monotone-devel