Gentoo Archives: gentoo-dev

From: Kent Fredric <kentfredric@×××××.com>
To: gentoo-dev <gentoo-dev@l.g.o>
Cc: Alexander Berntsen <bernalex@g.o>
Subject: Re: rsync mirror security (WAS: Re: [gentoo-dev] .gitignore)
Date: Tue, 11 Aug 2015 09:07:18
Message-Id: CAATnKFABU-7aEwM5=ChbmmX9pj6Ejxx0C4iUjY2JBeij6oJiCg@mail.gmail.com
In Reply to: Re: rsync mirror security (WAS: Re: [gentoo-dev] .gitignore) by "Michał Górny"
1 On 11 August 2015 at 20:38, Michał Górny <mgorny@g.o> wrote:
2 > Dnia 2015-08-11, o godz. 10:29:55
3 > Alexander Berntsen <bernalex@g.o> napisał(a):
4 >
5 >> -----BEGIN PGP SIGNED MESSAGE-----
6 >> Hash: SHA512
7 >>
8 >> On 10/08/15 22:59, Aaron W. Swenson wrote:
9 >> > Users can fetch/pull from Github.
10 >> Users should not have to interface with or rely on proprietary
11 >> software to use Gentoo.
12 >
13 > Then please provide them with true open-source infrastructure. And also
14 > remember to block all the mirrors by default.
15
16
17 Its fine to say "can" in the context of "They may if they want to, but
18 they are not forced to".
19
20 Having a quality infrastructure should happen in parallel to github mirrors.
21
22 Uses may use the proprietary one or the opensource one.
23
24 As long as nothing *demands* they use the proprietary instead of the
25 opensource one, and there is a working path that is usable and
26 covenient to avoid the proprietary ( which there is in this case ),
27 then there's no real foul.
28
29 The only downside is realistically, if all users cloned from gentoo
30 infra using git, then we would drown.
31
32 "Ban mirrors" wouldn't fix this problem, "Ban github" wouldn't fix this problem.
33
34 So you basically *must* implement a reasonable infrastructure, and
35 they can use github instead if it is more convenient for them.
36
37 To an extent this does imply we're relying that *some* users will use
38 github/other to decrease our server load.
39
40 Meh.
41
42 --
43 Kent
44
45 KENTNL - https://metacpan.org/author/KENTNL

Replies

Subject Author
Re: rsync mirror security (WAS: Re: [gentoo-dev] .gitignore) Rich Freeman <rich0@g.o>