[freenet-dev] Installer redux redux

2008-12-17 Thread Zero3
Daniel Cheng skrev: >>> System service on Windows: >>> >>> It is increasingly clear that our only options on Windows are to run as a >>> service under LocalSystem, or to run as a service under a dedicated Freenet >>> user, mostly because of permissions problems. >>> >>> >> Can anyone

[freenet-dev] Installer redux redux

2008-12-17 Thread Daniel Cheng
On Wed, Dec 17, 2008 at 3:46 AM, Zero3 wrote: > Matthew Toseland skrev: >> Many things have been decided, a few remain. Nextgens' main concerns turn out >> to relate to where things are built and who signs them. >> >> Windows installer: >> >> The Windows installer should not be built on emu. An

Re: [freenet-dev] Installer redux redux

2008-12-17 Thread Zero3
Daniel Cheng skrev: System service on Windows: It is increasingly clear that our only options on Windows are to run as a service under LocalSystem, or to run as a service under a dedicated Freenet user, mostly because of permissions problems. Can anyone (nextgens?) quickly sum up

[freenet-dev] Installer redux redux

2008-12-16 Thread Zero3
Matthew Toseland skrev: > Many things have been decided, a few remain. Nextgens' main concerns turn out > to relate to where things are built and who signs them. > > Windows installer: > > The Windows installer should not be built on emu. An online installer could > either be built on Windows or

[freenet-dev] Installer redux redux

2008-12-16 Thread Matthew Toseland
Many things have been decided, a few remain. Nextgens' main concerns turn out to relate to where things are built and who signs them. Windows installer: The Windows installer should not be built on emu. An online installer could either be built on Windows or on *nix. An offline installer could

[freenet-dev] Installer redux

2008-12-16 Thread Zero3
Florent Daigni?re skrev: > * Matthew Toseland [2008-12-16 00:28:54]: > > >>> I'm not arguing we should invest $ into getting a signed >>> >> certificate. I >> >>> am sure we have professional developers here who do have a valid, >>> trusted certificate.

[freenet-dev] Installer redux

2008-12-16 Thread Ian Clarke
On Tue, Dec 16, 2008 at 7:47 AM, Zero3 wrote: > No, it isn't. My main point is providing an installer that works > independent of the website (arguments listed earlier). Would someone mind doing an installer redux redux (ie. remind us what the current points of contention are)? Ian. -- Ian

[freenet-dev] Installer redux

2008-12-16 Thread Daniel Cheng
On Tue, Dec 16, 2008 at 4:07 AM, Matthew Toseland wrote: > On Monday 15 December 2008 16:29, Zero3 wrote: >> >> >>> 2. Whether it should run from the startup group, by the logged-in user, >> >>> >> > rather >> > >> >>> than as a system service running in its own user. >> >>> >> >>> RESOLUTION: We

[freenet-dev] Installer redux

2008-12-16 Thread Daniel Cheng
On Tue, Dec 16, 2008 at 12:29 AM, Zero3 wrote: > Matthew Toseland skrev: >> On Saturday 13 December 2008 17:40, Zero3 wrote: >> >>> Matthew Toseland skrev: >>> Issues for the installer. Both Zero3 and nextgens seem to have decided to sulk, so I'll arbitrarily decide these issues where

[freenet-dev] Installer redux

2008-12-16 Thread Florent Daignière
* Matthew Toseland [2008-12-16 00:28:54]: > > > > > > I'm not arguing we should invest $ into getting a signed > certificate. I > > > > > > am sure we have professional developers here who do have a valid, > > > > > > trusted certificate. > > > > > > > > > > Whom we can trust? Such as? > > > >

[freenet-dev] Installer redux

2008-12-16 Thread Matthew Toseland
On Tuesday 16 December 2008 00:24, Florent Daigni?re wrote: > > > > > > > > > > I'm not arguing we should invest $ into getting a signed certificate. I > > > > > am sure we have professional developers here who do have a valid, > > > > > trusted certificate. > > > > > > > > Whom we can trust?

[freenet-dev] Installer redux

2008-12-16 Thread Matthew Toseland
On Monday 15 December 2008 23:58, Florent Daigni?re wrote: > * Matthew Toseland [2008-12-13 19:20:21]: > > > On Saturday 13 December 2008 18:57, Florent Daigni?re wrote: > > > * Matthew Toseland [2008-12-13 18:01:03]: > > > > > > > On Saturday 13 December 2008 17:22, Florent Daigni?re wrote: >

Re: [freenet-dev] Installer redux

2008-12-16 Thread Ian Clarke
On Tue, Dec 16, 2008 at 7:47 AM, Zero3 ze...@zerosplayground.dk wrote: No, it isn't. My main point is providing an installer that works independent of the website (arguments listed earlier). Would someone mind doing an installer redux redux (ie. remind us what the current points of contention

Re: [freenet-dev] Installer redux

2008-12-16 Thread Zero3
Florent Daignière skrev: * Matthew Toseland t...@amphibian.dyndns.org [2008-12-16 00:28:54]: I'm not arguing we should invest $ into getting a signed certificate. I am sure we have professional developers here who do have a valid, trusted certificate.

[freenet-dev] Installer redux redux

2008-12-16 Thread Matthew Toseland
Many things have been decided, a few remain. Nextgens' main concerns turn out to relate to where things are built and who signs them. Windows installer: The Windows installer should not be built on emu. An online installer could either be built on Windows or on *nix. An offline installer could

[freenet-dev] Installer redux

2008-12-15 Thread Florent Daignière
* Matthew Toseland [2008-12-13 19:20:21]: > On Saturday 13 December 2008 18:57, Florent Daigni?re wrote: > > * Matthew Toseland [2008-12-13 18:01:03]: > > > > > On Saturday 13 December 2008 17:22, Florent Daigni?re wrote: > > > > > > In any case we are NOT protected from the compromise of emu

[freenet-dev] Installer redux

2008-12-15 Thread Florent Daignière
* Ian Clarke [2008-12-15 14:35:19]: > On Mon, Dec 15, 2008 at 2:07 PM, Matthew Toseland > wrote: > > Nextgens would certainly object to running Microsoft provided binaries on > > emu, > > and I can see his point. > > ...which is? > As explained for the Nth+1 time: Four main reasons:

[freenet-dev] Installer redux

2008-12-15 Thread Matthew Toseland
On Monday 15 December 2008 16:29, Zero3 wrote: > > >>> 2. Whether it should run from the startup group, by the logged-in user, > >>> > > rather > > > >>> than as a system service running in its own user. > >>> > >>> RESOLUTION: We should continue to run Freenet as a system service. >

[freenet-dev] Installer redux

2008-12-15 Thread Zero3
Matthew Toseland skrev: > On Saturday 13 December 2008 17:40, Zero3 wrote: > >> Matthew Toseland skrev: >> >>> Issues for the installer. Both Zero3 and nextgens seem to have decided to >>> sulk, so I'll arbitrarily decide these issues where there is deadlock and >>> > if > >>>

[freenet-dev] Installer redux

2008-12-15 Thread Ian Clarke
On Mon, Dec 15, 2008 at 2:07 PM, Matthew Toseland wrote: > Nextgens would certainly object to running Microsoft provided binaries on emu, > and I can see his point. ...which is? We're the Freenet Project, not the "anti-Microsoft" project. If using some Microsoft code helps us to offer a better

[freenet-dev] Installer redux

2008-12-15 Thread Ian Clarke
On Mon, Dec 15, 2008 at 10:29 AM, Zero3 wrote: nextgens and Zero3 to equal degrees. >>> I hope that's just meant as a joke... :-/ >> It was not intended as a joke at the time. > Great way of making decisions then :-/ Obviously it was a joke, you people really need to get a grip - this whole

Re: [freenet-dev] Installer redux

2008-12-15 Thread Ian Clarke
On Mon, Dec 15, 2008 at 2:07 PM, Matthew Toseland t...@amphibian.dyndns.org wrote: Nextgens would certainly object to running Microsoft provided binaries on emu, and I can see his point. ...which is? We're the Freenet Project, not the anti-Microsoft project. If using some Microsoft code helps

Re: [freenet-dev] Installer redux

2008-12-15 Thread Matthew Toseland
On Monday 15 December 2008 20:35, Ian Clarke wrote: On Mon, Dec 15, 2008 at 2:07 PM, Matthew Toseland t...@amphibian.dyndns.org wrote: Nextgens would certainly object to running Microsoft provided binaries on emu, and I can see his point. ...which is? We're the Freenet Project, not

Re: [freenet-dev] Installer redux

2008-12-15 Thread Florent Daignière
* Ian Clarke ian.cla...@gmail.com [2008-12-15 14:35:19]: On Mon, Dec 15, 2008 at 2:07 PM, Matthew Toseland t...@amphibian.dyndns.org wrote: Nextgens would certainly object to running Microsoft provided binaries on emu, and I can see his point. ...which is? As explained for the

Re: [freenet-dev] Installer redux

2008-12-15 Thread Florent Daignière
* Matthew Toseland t...@amphibian.dyndns.org [2008-12-13 19:20:21]: On Saturday 13 December 2008 18:57, Florent Daignière wrote: * Matthew Toseland t...@amphibian.dyndns.org [2008-12-13 18:01:03]: On Saturday 13 December 2008 17:22, Florent Daignière wrote: In any case we are NOT

Re: [freenet-dev] Installer redux

2008-12-15 Thread Matthew Toseland
On Monday 15 December 2008 23:58, Florent Daignière wrote: * Matthew Toseland t...@amphibian.dyndns.org [2008-12-13 19:20:21]: On Saturday 13 December 2008 18:57, Florent Daignière wrote: * Matthew Toseland t...@amphibian.dyndns.org [2008-12-13 18:01:03]: On Saturday 13 December

Re: [freenet-dev] Installer redux

2008-12-15 Thread Florent Daignière
* Matthew Toseland t...@amphibian.dyndns.org [2008-12-16 00:14:58]: On Monday 15 December 2008 23:58, Florent Daignière wrote: * Matthew Toseland t...@amphibian.dyndns.org [2008-12-13 19:20:21]: On Saturday 13 December 2008 18:57, Florent Daignière wrote: * Matthew Toseland

Re: [freenet-dev] Installer redux

2008-12-15 Thread Matthew Toseland
On Tuesday 16 December 2008 00:24, Florent Daignière wrote: I'm not arguing we should invest $ into getting a signed certificate. I am sure we have professional developers here who do have a valid, trusted certificate. Whom we can trust? Such as? I don't think

Re: [freenet-dev] Installer redux

2008-12-15 Thread Florent Daignière
* Matthew Toseland t...@amphibian.dyndns.org [2008-12-16 00:28:54]: I'm not arguing we should invest $ into getting a signed certificate. I am sure we have professional developers here who do have a valid, trusted certificate. Whom we can trust? Such as? I

Re: [freenet-dev] Installer redux

2008-12-15 Thread Daniel Cheng
On Tue, Dec 16, 2008 at 12:29 AM, Zero3 ze...@zerosplayground.dk wrote: Matthew Toseland skrev: On Saturday 13 December 2008 17:40, Zero3 wrote: Matthew Toseland skrev: Issues for the installer. Both Zero3 and nextgens seem to have decided to sulk, so I'll arbitrarily decide these issues

[freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 18:57, Florent Daigni?re wrote: > * Matthew Toseland [2008-12-13 18:01:03]: > > > On Saturday 13 December 2008 17:22, Florent Daigni?re wrote: > > > > > In any case we are NOT protected from the compromise of emu nor by the > > > > > compromise of the key used to

[freenet-dev] Installer redux

2008-12-13 Thread Zero3
Matthew Toseland skrev: > Issues for the installer. Both Zero3 and nextgens seem to have decided to > sulk, so I'll arbitrarily decide these issues where there is deadlock and if > anyone objects he can reply to this thread with a reasoned argument. > > I'm not sulking as in "to express ill

[freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 18:19, Matthew Toseland wrote: > On Saturday 13 December 2008 17:40, Zero3 wrote: > > Matthew Toseland skrev: > > > Issues for the installer. Both Zero3 and nextgens seem to have decided to > > > sulk, so I'll arbitrarily decide these issues where there is deadlock

[freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 17:40, Zero3 wrote: > Matthew Toseland skrev: > > Issues for the installer. Both Zero3 and nextgens seem to have decided to > > sulk, so I'll arbitrarily decide these issues where there is deadlock and if > > anyone objects he can reply to this thread with a

[freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 17:22, Florent Daigni?re wrote: > > > In any case we are NOT protected from the compromise of emu nor by the > > > compromise of the key used to sign the installer. > > > > Exactly. Right now we build both the installers and the jars on emu. If emu is > >

[freenet-dev] Installer redux

2008-12-13 Thread Florent Daignière
> > In any case we are NOT protected from the compromise of emu nor by the > > compromise of the key used to sign the installer. > > Exactly. Right now we build both the installers and the jars on emu. If emu > is > compromised, it can supply bogus installers and bogus jars. If we move the >

[freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 16:11, Florent Daigni?re wrote: > * Matthew Toseland [2008-12-13 12:21:01]: > > > Issues for the installer. Both Zero3 and nextgens seem to have decided to > > sulk, so I'll arbitrarily decide these issues where there is deadlock and if > > anyone objects he can

[freenet-dev] Installer redux

2008-12-13 Thread Florent Daignière
* Matthew Toseland [2008-12-13 12:21:01]: > Issues for the installer. Both Zero3 and nextgens seem to have decided to > sulk, so I'll arbitrarily decide these issues where there is deadlock and if > anyone objects he can reply to this thread with a reasoned argument. > > 1. Whether we should

[freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 12:21, Matthew Toseland wrote: > 3. Whether to compile and sign the current installer on emu. > > Nextgens has suggested that we should sign the installer elsewhere. The > bytecode could still be verified provided that the dev who builds it builds > it with

[freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
Issues for the installer. Both Zero3 and nextgens seem to have decided to sulk, so I'll arbitrarily decide these issues where there is deadlock and if anyone objects he can reply to this thread with a reasoned argument. 1. Whether we should remove all the questions from the current installer,

[freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
Issues for the installer. Both Zero3 and nextgens seem to have decided to sulk, so I'll arbitrarily decide these issues where there is deadlock and if anyone objects he can reply to this thread with a reasoned argument. 1. Whether we should remove all the questions from the current installer,

Re: [freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 12:21, Matthew Toseland wrote: 3. Whether to compile and sign the current installer on emu. Nextgens has suggested that we should sign the installer elsewhere. The bytecode could still be verified provided that the dev who builds it builds it with appropriate

Re: [freenet-dev] Installer redux

2008-12-13 Thread Florent Daignière
* Matthew Toseland t...@amphibian.dyndns.org [2008-12-13 12:21:01]: Issues for the installer. Both Zero3 and nextgens seem to have decided to sulk, so I'll arbitrarily decide these issues where there is deadlock and if anyone objects he can reply to this thread with a reasoned argument.

Re: [freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 16:11, Florent Daignière wrote: * Matthew Toseland t...@amphibian.dyndns.org [2008-12-13 12:21:01]: Issues for the installer. Both Zero3 and nextgens seem to have decided to sulk, so I'll arbitrarily decide these issues where there is deadlock and if anyone

Re: [freenet-dev] Installer redux

2008-12-13 Thread Florent Daignière
In any case we are NOT protected from the compromise of emu nor by the compromise of the key used to sign the installer. Exactly. Right now we build both the installers and the jars on emu. If emu is compromised, it can supply bogus installers and bogus jars. If we move the building

Re: [freenet-dev] Installer redux

2008-12-13 Thread Zero3
Matthew Toseland skrev: Issues for the installer. Both Zero3 and nextgens seem to have decided to sulk, so I'll arbitrarily decide these issues where there is deadlock and if anyone objects he can reply to this thread with a reasoned argument. I'm not sulking as in to express ill humor

Re: [freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 17:22, Florent Daignière wrote: In any case we are NOT protected from the compromise of emu nor by the compromise of the key used to sign the installer. Exactly. Right now we build both the installers and the jars on emu. If emu is compromised, it can

Re: [freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 18:19, Matthew Toseland wrote: On Saturday 13 December 2008 17:40, Zero3 wrote: Matthew Toseland skrev: Issues for the installer. Both Zero3 and nextgens seem to have decided to sulk, so I'll arbitrarily decide these issues where there is deadlock and if

Re: [freenet-dev] Installer redux

2008-12-13 Thread Florent Daignière
* Matthew Toseland t...@amphibian.dyndns.org [2008-12-13 18:01:03]: On Saturday 13 December 2008 17:22, Florent Daignière wrote: In any case we are NOT protected from the compromise of emu nor by the compromise of the key used to sign the installer. Exactly. Right now we build

Re: [freenet-dev] Installer redux

2008-12-13 Thread Matthew Toseland
On Saturday 13 December 2008 18:57, Florent Daignière wrote: * Matthew Toseland t...@amphibian.dyndns.org [2008-12-13 18:01:03]: On Saturday 13 December 2008 17:22, Florent Daignière wrote: In any case we are NOT protected from the compromise of emu nor by the compromise of the key