[opnfv-tech-discuss] [armband] Agenda for 09March Armband meeting

2018-03-08 Thread Bob Monkman
Armbanders, The agenda for Friday 09March is posted. https://wiki.opnfv.org/display/meetings/Armband Talk to you in 7.5 hours. Bob Robert (Bob) Monkman Director, Networking Software Strategy & Ecosystem Programs Arm 150 Rose Orchard Way San Jose, Ca 95134 M: +1.510.676.5490 Skype:

Re: [opnfv-tech-discuss] ONS conference in LA

2018-03-08 Thread Bob Monkman
Alec, Adding Tina, Honnappa, and brian, who will be in attendance and one or more of them may be able to attend if you pull something together for Data Plane Benchmarking. We are certainly quite interested in that topic. Regards, bob Robert (Bob) Monkman Director, Networking

Re: [opnfv-tech-discuss] [releng][security][infra] Anteater Improvements

2018-03-08 Thread SULLIVAN, BRYAN L (BRYAN L)
Aric, To clarify my intent - it was that the blocking of wget/curl/etc tool use except as allowed by regex rules, is the onerous part since there are many different uses and it will be difficult to create/maintain the regexp rules. I actually would *prefer* use of an external service such as

Re: [opnfv-tech-discuss] [releng][security][infra] Anteater Improvements

2018-03-08 Thread Aric Gardner
Hi Faith, Regarding your comments on reproducibility and traceability. If we are not blocking ips, which I agree with Bryan is heavy handed from a practical perspective. Perhaps ant eater could create a report of external sources per repository, and then exit 0. The developers could then be

Re: [opnfv-tech-discuss] [releng][security][infra] Anteater Improvements

2018-03-08 Thread Luke Hinds
I wonder is this might be a good topic for the next infra-wg. One thing we may be able to do is fix up the regex so stuff such as 'yum install curl' or 'apt-get install wget' don't cause false alarms. The good thing with the framework is the regexs are easy to get at, so its easy for anyone to

Re: [opnfv-tech-discuss] [releng][security][infra] Anteater Improvements

2018-03-08 Thread SULLIVAN, BRYAN L (BRYAN L)
Fatih, I think the problem is that it’s very difficult to differentiate between use of wget/curl etc for: * Pulling in components/data from external sources, as part of a deploy or test process, or even by design of the component being developed (e.g. a config file is pulled from some

Re: [opnfv-tech-discuss] [releng][security][infra] Anteater Improvements

2018-03-08 Thread Fatih Degirmenci
Hi Brian, My comment wasn’t about the tools themselves but what they are used for and to be honest the suggestion is nothing sort of heavy-handed approach. If someone includes something in an artifact that is consumed by someone else for different purposes, we have responsibility to them that

Re: [opnfv-tech-discuss] [releng][security][infra] Anteater Improvements

2018-03-08 Thread SULLIVAN, BRYAN L (BRYAN L)
I do recommend that we rely upon tools that can focus on the trust of specific sources, and not the use of platform capabilities such as curl, wget, etc. These (curl, wget, etc) are tools that can be used for many purposes inside an application like an OPNFV platform, or its deployment/testing

Re: [opnfv-tech-discuss] [releng][security][infra] Anteater Improvements

2018-03-08 Thread Fatih Degirmenci
Hi Luke, I have few comments and followup questions regarding this: “This in turn means we won't raise alarms over curl, git clone and wget and will instead check the IP addresses or URLS that those commands query. This should make anteater a lot less chatty at gate.” You might remember that

[opnfv-tech-discuss] [releng][security][infra] Anteater Improvements

2018-03-08 Thread Luke Hinds
Hello, I have some changes to improve the reporting ability and hopefully tone down the false positives. Aneater will now interface with the VirusTotal public API: 1. If anteater finds a public IP address, the DNS history will be quiered to see if the IP has past or present associations with

Re: [opnfv-tech-discuss] [releng] Secrets in environment variables

2018-03-08 Thread Luke Hinds
Sorry all I missed this email... On Thu, Mar 1, 2018 at 8:46 PM, Trevor Bramwell < tbramw...@linuxfoundation.org> wrote: > Hi Julien, > > Yes we have that plugin installed. > > Luke, > > If there is known file location virus total looks for the api key, > another option is using the Config File

Re: [opnfv-tech-discuss] Xtesting is released

2018-03-08 Thread Trinath Somanchi
Hi Cedric- Excellent work. Congratulations to the Testing team. Can there be some video session/presentation on using xTesting and K8S scenario testing with Test frameworks. This can help enthusiasts around to understand the new frameworks. /Trinath | NXP -Original Message- From:

[opnfv-tech-discuss] 答复: [test-wg] Xtesting is released

2018-03-08 Thread Chigang (Justin)
Hi Cedric, Good News! A great achievement in testing area! Glad to see kubernetes test cases and more Open Source projects test cases in OPNFV testing. Regards Justin -邮件原件- 发件人: opnfv-tech-discuss-boun...@lists.opnfv.org [mailto:opnfv-tech-discuss-boun...@lists.opnfv.org] 代表 Fatih

Re: [opnfv-tech-discuss] [test-wg] Xtesting is released

2018-03-08 Thread Fatih Degirmenci
Hi Cedric, This is great to see! Many thanks to the Functest Team and everyone who contributed to this. It will help us progress further with our cross-community collaboration efforts significantly. /Fatih On 2018-03-08, 11:19, "test-wg-boun...@lists.opnfv.org on behalf of

[opnfv-tech-discuss] Xtesting is released

2018-03-08 Thread cedric.ollivier
Hello, Functest team proudly announces the first publication of Xtesting. Xtesting have leveraged on Functest efforts started from Euphrates (python framework, docker slicing, dependency management, etc.) to provide a reference testing framework allowing SDN/NFV testing on any type of