On Tuesday April 13 2010 23:27:32 seph wrote: > Stephan Kleine <[email protected]> writes: > > On Tuesday April 13 2010 18:24:38 seph wrote: > >> I felt a little skittish around the opensuse packages. > > > > Why? (the stuff is build on debian / buntu hosts using their native > > tools) > > Several reasons, I'm not sure any are very compelling to anyone > else. Foremost is probably that third party packages for tend to make me > skittish. Especially when I can't find the source of build scripts. > > I was interested in finding the build process, but after reading the > thread on openvas-packaging it all felt futile. > > I'd love to see the packaging source for them.
Oh, that makes sense, I would feel the same about packages where I am unable to access the source. Note however that those sources where available since day one since otherwise it were a violation of the license. The problem simply is that currently you have to create an account to access https://build.opensuse.org/project/show?project=security%3Aopenvas%3AUNSTABLE e.g. to prevent $mail_harvester from collecting all the email addresses (the account was called a "Novell" one since all openSUSE services - OBS, forum, bugzilla, ... - currently rely on Novells central iChain as single sign-on service). The lack of anonymous access was an oversight during OBS development and is scheduled to be fixed for 2.0 iirc. However, anonymous access is already deployed to the staging instance which operates on the same backend (as in only the website is different) as the protected one. To access those packages anonymously simply go to https://build.opensuse.org/stage/project/show?project=security%3Aopenvas%3AUNSTABLE then click on "Packages" in the upper left corner then select the package you are interested in and then select "Files" in the upper left corner. The basic idea is that all packages inside a debian.tar.gz containing a debian/ subdirectory with their normal name and all files in the packages' "root" that are prefixed with "debian." are used for the builds. All patches that get applied are listed in the debian.series file. Please see http://en.opensuse.org/Build_Service/Deb_builds for details or simply ask if you have any further questions. hth Stephan _______________________________________________ Openvas-discuss mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
