github

classic Classic list List threaded Threaded
26 messages Options
12
Reply | Threaded
Open this post in threaded view
|

github

dsendkowski
Is this https://github.com/openbsd the official OpenBSD github site?
Do you have any plans to move the OpenBSD source code repository to github?

Reply | Threaded
Open this post in threaded view
|

Re: github

Mike Burns
On 2016-08-07 14.44.58 +0200, Dariusz Sendkowski wrote:
> Is this https://github.com/openbsd the official OpenBSD github site?
> Do you have any plans to move the OpenBSD source code repository to github?

http://marc.info/?l=openbsd-misc&m=134408828426309&w=2

Reply | Threaded
Open this post in threaded view
|

Re: github

dsendkowski
In reply to this post by dsendkowski
Thanks.



-------- Original message --------From: Mike Burns <[hidden email]> Date: 8/7/16  14:51  (GMT+01:00) To: Dariusz Sendkowski <[hidden email]> Cc: misc <[hidden email]> Subject: Re: github
On 2016-08-07 14.44.58 +0200, Dariusz Sendkowski wrote:
> Is this https://github.com/openbsd the official OpenBSD github site?
> Do you have any plans to move the OpenBSD source code repository to github?

http://marc.info/?l=openbsd-misc&m=134408828426309&w=2

Reply | Threaded
Open this post in threaded view
|

Re: github

Ingo Schwarze
In reply to this post by dsendkowski
Hi,

Dariusz Sendkowski wrote on Sun, Aug 07, 2016 at 02:44:58PM +0200:

> Is this https://github.com/openbsd the official OpenBSD github site?

As one of the OpenBSD developers, i don't know and frankly i don't
care.  You certainly shouldn't trust it in any way.

Personally, i consider github commercial crap that is utterly
unusable for anything.  If you send me a github link, i'm very
likely to completely ignore it even if i would in principle be
quite interested in the content, simply because i'm not willing
to waste my time on the crappy user interface.

> Do you have any plans to move the OpenBSD source code repository
> to github?

Absolutely not.  The OpenBSD repository will remain secure and
will not be outsourced to a random third party.

Even if OpenBSD, at some point in the future, would decide to do
anything with git, i would very strongly oppose doing anything
official whatsoever with github.

Yours,
  Ingo

Reply | Threaded
Open this post in threaded view
|

Re: github

Consus
On 16:43 Sun 07 Aug, Ingo Schwarze wrote:
> > Do you have any plans to move the OpenBSD source code repository
> > to github?
>
> Absolutely not.  The OpenBSD repository will remain secure and
> will not be outsourced to a random third party.

I'm sorry, are we talking about the same OpenBSD CVS tree that does not
offer any kind of encryption and transfers all your data in plain over
the network (except for developers who use SSH of course)? How's that
secure?

Moreover, Git itself allows you to check what the hell is going on using
your local history (e.g. git pull will not work without some love if
somebody changes your repo on the GitHub side without your awareness).
Also signed commits FWIW.

Reply | Threaded
Open this post in threaded view
|

Re: github

Donald Allen-2
> Date: Sun, 7 Aug 2016 17:59:07 +0300
> From: [hidden email]
> To:
[hidden email]
> Subject: Re: github
>
> On 16:43 Sun 07 Aug, Ingo Schwarze
wrote:
>>> Do you have any plans to move the OpenBSD source code repository
>>> to github?
>>
>> Absolutely not. The OpenBSD repository will remain
secure and
>> will not be outsourced to a random third party.
>
> I'm sorry,
are we talking about the same OpenBSD CVS tree that does not
> offer any kind
of encryption and transfers all your data in plain over
> the network (except
for developers who use SSH of course)? How's that
> secure?
>
> Moreover, Git
itself allows you to check what the hell is going on using
> your local
history (e.g. git pull will not work without some love if
> somebody changes
your repo on the GitHub side without your awareness).
> Also signed commits
FWIW.

And github offers two-factor authentication, so if enabled, not simple
to hack the account.

Reply | Threaded
Open this post in threaded view
|

Re: github

Chris Bennett
On Sun, Aug 07, 2016 at 11:17:21AM -0400, Donald Allen wrote:

> > Date: Sun, 7 Aug 2016 17:59:07 +0300
> > From: [hidden email]
> > To:
> [hidden email]
> > Subject: Re: github
> >
>
> And github offers two-factor authentication, so if enabled, not simple
> to hack the account.
>

Github is running OpenBSD? I didn't know that.
That's a relief. I wouldn't trust any of my critical data with any less
secure Operating Ayatem.

Reply | Threaded
Open this post in threaded view
|

Re: github

sven falempin
In reply to this post by Donald Allen-2
On Sun, Aug 7, 2016 at 11:17 AM, Donald Allen <[hidden email]> wrote:

>> Date: Sun, 7 Aug 2016 17:59:07 +0300
>> From: [hidden email]
>> To:
> [hidden email]
>> Subject: Re: github
>>
>> On 16:43 Sun 07 Aug, Ingo Schwarze
> wrote:
>>>> Do you have any plans to move the OpenBSD source code repository
>>>> to github?
>>>
>>> Absolutely not. The OpenBSD repository will remain
> secure and
>>> will not be outsourced to a random third party.
>>
>> I'm sorry,
> are we talking about the same OpenBSD CVS tree that does not
>> offer any kind
> of encryption and transfers all your data in plain over
>> the network (except
> for developers who use SSH of course)? How's that
>> secure?
>>
>> Moreover, Git
> itself allows you to check what the hell is going on using
>> your local
> history (e.g. git pull will not work without some love if
>> somebody changes
> your repo on the GitHub side without your awareness).
>> Also signed commits
> FWIW.
>
> And github offers two-factor authentication, so if enabled, not simple
> to hack the account.
>


The openBSD tree is duplicated over the SSH protocol, not HTTPS;

You are spreading miss information.

--
---------------------------------------------------------------------------------------------------------------------
() ascii ribbon campaign - against html e-mail
/\

Reply | Threaded
Open this post in threaded view
|

Re: github

Consus
In reply to this post by Chris Bennett
On 10:35 Sun 07 Aug, Chris Bennett wrote:

> On Sun, Aug 07, 2016 at 11:17:21AM -0400, Donald Allen wrote:
> > > Date: Sun, 7 Aug 2016 17:59:07 +0300
> > > From: [hidden email]
> > > To:
> > [hidden email]
> > > Subject: Re: github
> > >
> >
> > And github offers two-factor authentication, so if enabled, not simple
> > to hack the account.
> >
>
> Github is running OpenBSD? I didn't know that.
> That's a relief. I wouldn't trust any of my critical data with any less
> secure Operating Ayatem.

Sign your commits with GPG. Looky, a link:

        https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work

Not that hard, is it?

Reply | Threaded
Open this post in threaded view
|

Re: github

Chris Bennett
On Sun, Aug 07, 2016 at 06:43:02PM +0300, Consus wrote:
> Sign your commits with GPG. Looky, a link:
>
> https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work
>
> Not that hard, is it?
>

OK, you win.

Would you do me a favor first.
Before this big move, could you make a commit to the OpenBSD CVS tree?
Anything would do. Just find a file that has spaces where it should have
tabs. Commit your diff. Once you do that, I think all of the developers
will be easily convinced to move to Github.

Reply | Threaded
Open this post in threaded view
|

Re: github

Consus
On 10:56 Sun 07 Aug, Chris Bennett wrote:

> On Sun, Aug 07, 2016 at 06:43:02PM +0300, Consus wrote:
> > Sign your commits with GPG. Looky, a link:
> >
> > https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work
> >
> > Not that hard, is it?
> >
>
> OK, you win.
>
> Would you do me a favor first.
> Before this big move, could you make a commit to the OpenBSD CVS tree?
> Anything would do. Just find a file that has spaces where it should have
> tabs. Commit your diff. Once you do that, I think all of the developers
> will be easily convinced to move to Github.

Err... What?

Reply | Threaded
Open this post in threaded view
|

Re: github

Jack J. Woehr
In reply to this post by Ingo Schwarze
Ingo Schwarze wrote:
> Hi,
>
> Dariusz Sendkowski wrote on Sun, Aug 07, 2016 at 02:44:58PM +0200:
>
>> Is this https://github.com/openbsd the official OpenBSD github site?
> As one of the OpenBSD developers, i don't know and frankly i don't
> care.  You certainly shouldn't trust it in any way.

It seems this discussion has gone on quite a while without stating the obvious:

1. The developers are happy with CVS.
2. As is, OpenBSD has full goddawmitey control of their source repository whereas on GitHub it would belong to a
corporation.

Doesn't that simply end the discussion right there?

--
Jack J. Woehr     # Science is more than a body of knowledge. It's a way of
www.well.com/~jax # thinking, a way of skeptically interrogating the universe
www.softwoehr.com # with a fine understanding of human fallibility. - Carl Sagan

Reply | Threaded
Open this post in threaded view
|

Re: github

ludovic coues
In reply to this post by Consus
2016-08-07 18:00 GMT+02:00 Consus <[hidden email]>:

> On 10:56 Sun 07 Aug, Chris Bennett wrote:
>> On Sun, Aug 07, 2016 at 06:43:02PM +0300, Consus wrote:
>> > Sign your commits with GPG. Looky, a link:
>> >
>> >     https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work
>> >
>> > Not that hard, is it?
>> >
>>
>> OK, you win.
>>
>> Would you do me a favor first.
>> Before this big move, could you make a commit to the OpenBSD CVS tree?
>> Anything would do. Just find a file that has spaces where it should have
>> tabs. Commit your diff. Once you do that, I think all of the developers
>> will be easily convinced to move to Github.
>
> Err... What?
>

You are talking big while not contributing to the project.

--

Cordialement, Coues Ludovic
+336 148 743 42

Reply | Threaded
Open this post in threaded view
|

Re: github

Consus
On 18:12 Sun 07 Aug, ludovic coues wrote:

> 2016-08-07 18:00 GMT+02:00 Consus <[hidden email]>:
> > On 10:56 Sun 07 Aug, Chris Bennett wrote:
> >> On Sun, Aug 07, 2016 at 06:43:02PM +0300, Consus wrote:
> >> > Sign your commits with GPG. Looky, a link:
> >> >
> >> >     https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work
> >> >
> >> > Not that hard, is it?
> >> >
> >>
> >> OK, you win.
> >>
> >> Would you do me a favor first.
> >> Before this big move, could you make a commit to the OpenBSD CVS tree?
> >> Anything would do. Just find a file that has spaces where it should have
> >> tabs. Commit your diff. Once you do that, I think all of the developers
> >> will be easily convinced to move to Github.
> >
> > Err... What?
> >
>
> You are talking big while not contributing to the project.

So? I'm not stating YOU GUYS SHOULD MOVE TO GITHUB RIGHT NOW. I'm
stating that "github is not secure" is bullshit.

Reply | Threaded
Open this post in threaded view
|

Re: github

Michel Behr
In reply to this post by Jack J. Woehr
From all discussions:
1) a solution looking for a problem
2) the problems github tries to address are not considered urgent nor
important problems by OpenBSD developers
3) migration cost/benefit is not worth it - and using 2 different methods
of VC take away focus from the team".

On Sunday, 7 August 2016, Jack J. Woehr <[hidden email]> wrote:

> Ingo Schwarze wrote:
>
>> Hi,
>>
>> Dariusz Sendkowski wrote on Sun, Aug 07, 2016 at 02:44:58PM +0200:
>>
>> Is this https://github.com/openbsd the official OpenBSD github site?
>>>
>> As one of the OpenBSD developers, i don't know and frankly i don't
>> care.  You certainly shouldn't trust it in any way.
>>
>
> It seems this discussion has gone on quite a while without stating the
> obvious:
>
> 1. The developers are happy with CVS.
> 2. As is, OpenBSD has full goddawmitey control of their source repository
> whereas on GitHub it would belong to a corporation.
>
> Doesn't that simply end the discussion right there?
>
> --
> Jack J. Woehr     # Science is more than a body of knowledge. It's a way of
> www.well.com/~jax # thinking, a way of skeptically interrogating the
> universe
> www.softwoehr.com # with a fine understanding of human fallibility. -
> Carl Sagan

Reply | Threaded
Open this post in threaded view
|

Re: github

Theo de Raadt-2
In reply to this post by Consus
> On 18:12 Sun 07 Aug, ludovic coues wrote:
> > 2016-08-07 18:00 GMT+02:00 Consus <[hidden email]>:
> > > On 10:56 Sun 07 Aug, Chris Bennett wrote:
> > >> On Sun, Aug 07, 2016 at 06:43:02PM +0300, Consus wrote:
> > >> > Sign your commits with GPG. Looky, a link:
> > >> >
> > >> >     https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work
> > >> >
> > >> > Not that hard, is it?
> > >> >
> > >>
> > >> OK, you win.
> > >>
> > >> Would you do me a favor first.
> > >> Before this big move, could you make a commit to the OpenBSD CVS tree?
> > >> Anything would do. Just find a file that has spaces where it should have
> > >> tabs. Commit your diff. Once you do that, I think all of the developers
> > >> will be easily convinced to move to Github.
> > >
> > > Err... What?
> > >
> >
> > You are talking big while not contributing to the project.
>
> So? I'm not stating YOU GUYS SHOULD MOVE TO GITHUB RIGHT NOW. I'm
> stating that "github is not secure" is bullshit.
>

Just stop it.  We are not going to listen to you.

Reply | Threaded
Open this post in threaded view
|

Re: github

Chris Bennett
In reply to this post by Jack J. Woehr
On Sun, Aug 07, 2016 at 10:06:56AM -0600, Jack J. Woehr wrote:
> whereas on GitHub it would belong to a corporation.
>
> Doesn't that simply end the discussion right there?

Yes.
This thread hasĀ been informative to me.
Forget the silly move from CVS part, never was an issue.

I did NOT know that GitHub was a corporation. I find that very
disturbing. Extremely disturbing.

May all your pkg_* include:
pkg_delete git

So there was a jewel to be found in this thread.
Thank you all for this.

Sorry if I was a bit noisy, I'm just so tired of seeing so many projects
hooked on git. It's like a fad. What's next? Turdd. Shitt. Crapplee.

Reply | Threaded
Open this post in threaded view
|

Re: github

dsendkowski
2016-08-07 18:42 GMT+02:00 Chris Bennett <
[hidden email]>:

> On Sun, Aug 07, 2016 at 10:06:56AM -0600, Jack J. Woehr wrote:
> > whereas on GitHub it would belong to a corporation.
> >
> > Doesn't that simply end the discussion right there?
>
> Yes.
> This thread has been informative to me.
> Forget the silly move from CVS part, never was an issue.
>
> I did NOT know that GitHub was a corporation. I find that very
> disturbing. Extremely disturbing.
>
> May all your pkg_* include:
> pkg_delete git
>


I'm afraid you're confusing git with github.



>
> So there was a jewel to be found in this thread.
> Thank you all for this.
>
> Sorry if I was a bit noisy, I'm just so tired of seeing so many projects
> hooked on git. It's like a fad. What's next? Turdd. Shitt. Crapplee.

Reply | Threaded
Open this post in threaded view
|

Re: github

Karel Gardas
OpenBSD is using CVS solely, but for my own purposes I started to
mirror src to github recently using cvs2gitdump tool. I do this since
I find git log/git show more friendly than CVS provided tools... If
you are interested see https://github.com/kgardas/openbsd-src --
CAVEAT! Do not trust the source code there and especially do not use
it for your own OpenBSD build. In case of any doubts please use
OpenBSD CVS's src as a reference. BTW I've tried to search among src's
mirror on github.com but all were out-dated and needed to have src in
git after spacehopper.org's git stopped working...

On Sun, Aug 7, 2016 at 6:57 PM, Dariusz Sendkowski
<[hidden email]> wrote:

> 2016-08-07 18:42 GMT+02:00 Chris Bennett <
> [hidden email]>:
>
>> On Sun, Aug 07, 2016 at 10:06:56AM -0600, Jack J. Woehr wrote:
>> > whereas on GitHub it would belong to a corporation.
>> >
>> > Doesn't that simply end the discussion right there?
>>
>> Yes.
>> This thread has been informative to me.
>> Forget the silly move from CVS part, never was an issue.
>>
>> I did NOT know that GitHub was a corporation. I find that very
>> disturbing. Extremely disturbing.
>>
>> May all your pkg_* include:
>> pkg_delete git
>>
>
>
> I'm afraid you're confusing git with github.
>
>
>
>>
>> So there was a jewel to be found in this thread.
>> Thank you all for this.
>>
>> Sorry if I was a bit noisy, I'm just so tired of seeing so many projects
>> hooked on git. It's like a fad. What's next? Turdd. Shitt. Crapplee.

Reply | Threaded
Open this post in threaded view
|

Re: github

Nick Holland
In reply to this post by dsendkowski
On 08/07/16 08:44, Dariusz Sendkowski wrote:
> Is this http://[bullshit deleted]/openbsd  the official OpenBSD github site?

I find this part terrifying.

Nowhere on the OpenBSD website mentions github as anything official.  So
you just assumed that the seven letters, "openbsd", in that order, makes
it officially part of the project?  No.  Examples of this will be found
all over the Internet.

How about lock graphics on websites and the word "secure"?

Internet 101: anyone can put anything in any URL.  Or twisting Duke
Ellington, "It don't mean a thing, just 'cause it has a string"

Nick.

12