Gentoo Archives: gentoo-dev

From: Consus <consus@×××.com>
To: gentoo-dev@l.g.o
Cc: gentoo-dev-announce@l.g.o
Subject: Re: [gentoo-dev] Signed push & clock drift rejection
Date: Tue, 19 Jul 2016 11:32:17
Message-Id: 20160719113116.GC16828@daphne
In Reply to: [gentoo-dev] Signed push & clock drift rejection by "Robin H. Johnson"
1 On 18:03 Fri 15 Jul, Robin H. Johnson wrote:
2 > Hi all,
3 >
4 > In tracing down problems with the git->rsync path, it has been noticed
5 > that some developers have significant clock drift on their local systems
6 > (up to one case of 14 days wrong), and it's potentially contributing to
7 > problems in generating the rsync tree.
8 >
9 > I have implemented a check as part of the hook that validates Git push
10 > certificates (require-signed-push). It looks for clock drift or an
11 > overly long push, and aborts if needed.
12 >
13 > The tolerances are presently set to:
14 > - 5 seconds of clock drift.
15 > - 'git push' must be completed in 60 seconds.
16
17 AFAIR Windows AD servers allow 5 minutes clock drift. How about at least
18 a minute or so?

Replies

Subject Author
Re: [gentoo-dev] Signed push & clock drift rejection Alec Warner <antarus@g.o>