<top post> How about devel.gluster.org? Or upload.gluster.org? Either one would be reasonable for nightly coverity/clang/etc reports as well as community uploads?
</top post> On 11/05/2015 04:31 AM, Michael Scherer wrote: > Hi, > > as part of the hardening of the infra (as I do not want to have to deal > again with the same type of issue as we dealt with the shell.gluster.com > compromise), I would like to keep download.gluster.org restricted as > much as possible and used only for "official" download. > > And also keep everything in salt, which didn't happen as soon as 2 days > after putting the new server in production (which would make me scream > if I was not forbidden for medical reason this week), since the static > analysis results and a separate user were added without telling. > > So in order to lock down again the server, I propose to change that. > > As there is a need to share data as part of development, I would propose > 2 things: > > - place all automated tests reports (ie, stuff like the coverty reports, > etc) on a separate server. This way, a compromise of the automated tests > client wouldn't result into suspicion on the download server, and as we > do not need backup and redundancy for them, this would simplify the work > and requires less ressources. > > I would have done that right away if I had a idea of a correct naming > for the server. So if someone find a name that has some kind of > consensus by the end of the week, I will take it. Otherwise, people will > have to live with whatever horrible name I find ( I guess > reports.gluster.org might be my choice for now ). Someone will have to > fix the docs we have somewhere, if we have. > > - place all user produced data in a separate people.gluster.org > webserver. This would permit to give back some freedom to share stuff to > the community, but this one would requires that I finish to setup > freeipa first, and that we decide who has access, or under what > condition. > > If no one protest or comment by end of the 11th of november, I will > consider as full acceptance for whatever I will do. > > > > _______________________________________________ > Gluster-infra mailing list > [email protected] > http://www.gluster.org/mailman/listinfo/gluster-infra > _______________________________________________ Gluster-infra mailing list [email protected] http://www.gluster.org/mailman/listinfo/gluster-infra
