-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Sat, Feb 17, 2018 at 01:44:40AM -0800, Elias Mårtenson wrote:
> Has anyone considered implementing split-git? The idea being that you'd have 
> a custom git protocol that forwards requests over qrexec to a git repository 
> on a different vm.
> 
> The reading I started thinking about it is that I have a vm for Keybase, and 
> I'm using the keybase git provider for some private repositories. It would be 
> nice to be able to work with those repositories from a vm which does not have 
> Keybase installed.
> 
> I can also envision other usecases for a split-git implementation.
> 
> I have started working on a proof-of-concept but I'm nowhere near anything 
> that works yet. That's why I'm asking here if anyone else have worked on the 
> same thing, before spending more time on it.

There are one and a half existing implementations of similar feature:

1. Running plain git protocol over qrexec: 
https://www.qubes-os.org/doc/development-workflow/#git-connection-between-vms
   - there is no validation of the protocol itself, only some policy for
     repository access (hardcoded into the script)

2. Wojtek tried something similar to your idea - forwarding specific
requests over qrexec (at git object level), with data validation before
passing it to git. AFAIK this is in very early stage and very limited
scope (pushing one signed tag + dependencies?).

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlqIQ6oACgkQ24/THMrX
1yzaFQf9GuzdD0lfNMpFXOAYrDH89W8ucambj7LywHvVRpb0kO8CpDDFyDd8xGuu
ShErP1UKtE234fAGQ2PdBh1PocURnDb2GzANhh8lREPiwJFjQTvc96i3iQ8LF/zD
4d7IzHHjlg9IkGu9+3wbSjd8bWFizrpos861TFqsOngAwLMUgRfh+kmJcYpewaj1
faVrSE6uL9Xt0GUAfxlinx87gwSh7d4BEw/XxSCxhbzLlgXv/yqb/PhOACWdRIPZ
WjKeoI9QPZw4FQpLJjuELNxmS1b5klZji6P0QwW4lNI6WlVVWFF98DCM0/UYWxnq
V4c6iJ/nwYugUVCHbt9YrTg2WmwFXw==
=kzWI
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/20180217150106.GQ2084%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Reply via email to