sm-grimoire AT lists.ibiblio.org
Subject: Discussion of Spells and Grimoire items
List archive
- From: Hamish Greig <hgreig AT bigpond.net.au>
- To: Seth Woolley <seth AT tautology.org>
- Cc: Source Mage - Security <sm-security AT lists.ibiblio.org>, Source Mage - Grimoire <sm-grimoire AT lists.ibiblio.org>
- Subject: Re: [SM-Grimoire] grimoire rsync
- Date: Wed, 11 Jun 2003 18:23:36 +1000
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, 11 Jun 2003 17:31, Seth Woolley wrote:
> I have another idea for incremental downloading that we can most likely
> secure with gpg. If we stored nightly patch files for the grimoire
> updates, we can develop a simple update script that receives the epoc time
> since last update in the url (update.cgi/grimoire-epocsince.tar.bz2).
> The response would forward to the CGI script (update.cgi) again except it
> would be to update.cgi/grimoire-epocsince-epocend.tar.bz2 returning a
> tar.bz with all the patches since last update, include the epoc time (for
> remembering what to send next time when asking for an update) in the
> header, and also include gpg signatures for each incremental patch (or the
> patches could be merged into one patch before sending). Store the last
> thirty days of patches, and if the time of update requested is longer than
> thirty days, send the tar.bz of the whole grimoire with an epocsince of 0.
> Have sorcery figure out what to do from there. I volunteer to implement
> this since I am suggesting it. We could make the increment quite a bit
> more fine than a day and still have relatively low processing overhead.
>
> Anybody following me or am I just loopy?
>
> Seth
Hmm Sounds rather involved Seth?
If the following is possible it might be simpler?
Perforce and cvs only allow access from registered/ authorised users so we
maintain development in that environment. For distribution of the grimoire we
have two options.
1) download a signed tarball for stable, test, devel. can default to this if
current grimoire is more then 2weeks (example only) old.
2) Serve a signed {stable/test/devel } grimoire tree, where all files are
signed (detached) and the rsync process is piped through gpg allowing
verification before reintegration to local grimoire. Local unnecessary copies
of sig file can be deleted after the update. Gpg checks are made before
writing to local disk not after, so customisations can be made without
causing the update process to choke.
The second option still allows minimal download pre update and gives good
security, without overheads and all that extra storage is not needed.
Plus it also allows for a per file exclusion (if wanted) similar to the "add
options to configure" during cast.
The only way that epoch matters is if it has been a long time since update
and
then it will update the whole grimoire (still using signed tarballs,for
security) . For periods within that time frame it won't matter what version
of the file you have as rsync will just update it to the current regardless
of whether or not the file is 1MB or 0bytes.
Please point out my faulty logic, poor knowledge of 1's and 0's or tell me
how
attrocious my dress sense is ;-)
All responses welcome.....
Hamish
Do You SMuGL!?
Linux so advanced it may as well be magic!
Everything you'll ever need on one web page
http://www.sourcemage.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
iD8DBQE+5ucM8fSufZR6424RAth1AJ9SsMGq1RFh0dy6ggpy7dtEIFEUuwCfauze
FhUJkyrcwogjuUOak/Y28Qo=
=E8VW
-----END PGP SIGNATURE-----
-
[SM-Grimoire] grimoire rsync,
Eric Sandall, 06/11/2003
- Re: [SM-Grimoire] grimoire rsync, Andrew, 06/11/2003
-
Re: [SM-Grimoire] grimoire rsync,
Dufflebunk, 06/11/2003
- Re: [SM-Grimoire] grimoire rsync, Andrew, 06/11/2003
-
Re: [SM-Grimoire] grimoire rsync,
Hamish Greig, 06/11/2003
-
Re: [SM-Grimoire] grimoire rsync,
Seth Woolley, 06/11/2003
-
Re: [SM-Grimoire] grimoire rsync,
Hamish Greig, 06/11/2003
-
Re: [SM-Grimoire] grimoire rsync,
Sergey A. Lipnevich, 06/11/2003
- Re: [SM-Grimoire] grimoire rsync, Hamish Greig, 06/11/2003
-
Re: [SM-Grimoire] grimoire rsync,
Sergey A. Lipnevich, 06/11/2003
-
Re: [SM-Grimoire] grimoire rsync,
Hamish Greig, 06/11/2003
-
Re: [SM-Grimoire] grimoire rsync,
Seth Woolley, 06/11/2003
- Re: [SM-Grimoire] grimoire rsync, M.L., 06/11/2003
- Re: [SM-Grimoire] grimoire rsync, jkolb, 06/11/2003
-
Re: [SM-Grimoire] grimoire rsync,
shivaken, 06/15/2003
- Re: [SM-Grimoire] grimoire rsync, Sergey A. Lipnevich, 06/15/2003
Archive powered by MHonArc 2.6.24.