Re: Is there any reason not to shut down bonsai?

2013-11-26 Thread Gervase Markham
On 21/11/13 21:12, Laura Thomson wrote: bonsai is old code, and written in very old-fashioned perl. As such, security bugs are frequently filed against it, and it's very hard to find people who are willing and able to fix them. If you are willing and able, let me know: I can hook you up with

Re: Is there any reason not to shut down bonsai?

2013-11-25 Thread Phil Ringnalda
On 11/21/13, 11:43 AM, Laura Thomson wrote: If you don't know what that is--and few people do, which is even more reason to shut it off--it's a search engine for some of our CVS repositories, of which I think none are in active development. Thanks for the reminder that it still exists - I just

Re: Is there any reason not to shut down bonsai?

2013-11-23 Thread Philip Chee
On 22/11/2013 03:57, Ms2ger wrote: On 11/21/2013 08:43 PM, Laura Thomson wrote: I'll keep it short and to the point. Are there any objections to shutting down http://bonsai.mozilla.org/cvsqueryform.cgi ? If you don't know what that is--and few people do, which is even more reason to shut it

Re: Is there any reason not to shut down bonsai?

2013-11-23 Thread Philip Chee
On 22/11/2013 03:43, Laura Thomson wrote: I'll keep it short and to the point. Are there any objections to shutting down http://bonsai.mozilla.org/cvsqueryform.cgi ? If you don't know what that is--and few people do, which is even more reason to shut it off--it's a search engine for some of

Re: Is there any reason not to shut down bonsai?

2013-11-23 Thread Philip Chee
On 22/11/2013 04:15, Gavin Sharp wrote: It would be good to explore alternatives to Bonsai. https://github.com/mozilla/mozilla-central is supposed to have full CVS history, right? I would be very leery of putting our CVS source of truth on a non mozilla managed domain. Phil -- Philip Chee

Re: Is there any reason not to shut down bonsai?

2013-11-22 Thread Aki Sasaki
On 11/21/13 8:56 PM, Jed Davis wrote: On Thu, Nov 21, 2013 at 05:41:27PM -0500, Boris Zbarsky wrote: On 11/21/13 3:15 PM, Gavin Sharp wrote: It would be good to explore alternatives to Bonsai. https://github.com/mozilla/mozilla-central is supposed to have full CVS history, right? We're

Re: Is there any reason not to shut down bonsai?

2013-11-22 Thread Boris Zbarsky
On 11/22/13 12:11 PM, Aki Sasaki wrote: I'm not seeing this in gecko-dev; can you find this same issue in that repo? No, this one behaves sanely. Going to the parent of the relevant changeset gets you to a changeset where layout/html/forms/src/nsGfxTextControlFrame2.cpp is present, and

Re: Is there any reason not to shut down bonsai?

2013-11-22 Thread Aki Sasaki
On 11/22/13 1:06 PM, Boris Zbarsky wrote: On 11/22/13 12:11 PM, Aki Sasaki wrote: I'm not seeing this in gecko-dev; can you find this same issue in that repo? No, this one behaves sanely. Going to the parent of the relevant changeset gets you to a changeset where

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Reed Loden
On Thu, 21 Nov 2013 12:15:48 -0800 Gavin Sharp ga...@gavinsharp.com wrote: It would be good to explore alternatives to Bonsai. https://github.com/mozilla/mozilla-central is supposed to have full CVS history, right? For mozilla-central, maybe? ... but there are a ton of other projects that

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Boris Zbarsky
On 11/21/13 3:15 PM, Gavin Sharp wrote: It would be good to explore alternatives to Bonsai. https://github.com/mozilla/mozilla-central is supposed to have full CVS history, right? Hmm. Where in there is the equivalent of

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread smaug
On 11/21/2013 09:43 PM, Laura Thomson wrote: I'll keep it short and to the point. Are there any objections to shutting down http://bonsai.mozilla.org/cvsqueryform.cgi ? If you don't know what that is--and few people do, which is even more reason to shut it off--it's a search engine for some

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Gavin Sharp
I'm in the same boat - I use it relatively frequently to look up history. Part of this is a form of habit - there are alternatives ways to get at (most of?) that history now. But I would be interested to know more about what killing it gains us, in order to better evaluate the tradeoff. Gavin

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Joshua Cranmer 
On 11/21/2013 3:12 PM, Laura Thomson wrote: I can explain a little more about the motivation. bonsai is old code, and written in very old-fashioned perl. As such, security bugs are frequently filed against it, and it's very hard to find people who are willing and able to fix them. If you are

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Ms2ger
On 11/21/2013 08:43 PM, Laura Thomson wrote: I'll keep it short and to the point. Are there any objections to shutting down http://bonsai.mozilla.org/cvsqueryform.cgi ? If you don't know what that is--and few people do, which is even more reason to shut it off--it's a search engine for some

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Laura Thomson
I can explain a little more about the motivation. bonsai is old code, and written in very old-fashioned perl. As such, security bugs are frequently filed against it, and it's very hard to find people who are willing and able to fix them. If you are willing and able, let me know: I can hook you

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread smaug
On 11/21/2013 10:15 PM, Gavin Sharp wrote: It would be good to explore alternatives to Bonsai. https://github.com/mozilla/mozilla-central is supposed to have full CVS history, right? Some concerns with that alternative: - I think that repo misses some history from some branches of CVS - I'm not

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Boris Zbarsky
On 11/21/13 2:43 PM, Laura Thomson wrote: it's a search engine for some of our CVS repositories It's not just a search engine. It's also the only way to get CVS blame sanely without doing a local pull of the CVS repository or trying to make git do something useful for you. And a lot of our

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Gregory Szorc
On 11/21/13, 1:12 PM, Laura Thomson wrote: I can explain a little more about the motivation. bonsai is old code, and written in very old-fashioned perl. As such, security bugs are frequently filed against it, and it's very hard to find people who are willing and able to fix them. If you are

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Gavin Sharp
It would be good to explore alternatives to Bonsai. https://github.com/mozilla/mozilla-central is supposed to have full CVS history, right? Some concerns with that alternative: - I think that repo misses some history from some branches of CVS - I'm not confident that we've audited that whatever

Is there any reason not to shut down bonsai?

2013-11-21 Thread Laura Thomson
I'll keep it short and to the point. Are there any objections to shutting down http://bonsai.mozilla.org/cvsqueryform.cgi ? If you don't know what that is--and few people do, which is even more reason to shut it off--it's a search engine for some of our CVS repositories, of which I think none

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Frédéric Buclin
Le 21. 11. 13 21:19, smaug a écrit : Don't even think about closing down bonsai. I could perhaps live without http://bonsai.mozilla.org/cvsqueryform.cgi, but http://bonsai.mozilla.org/cvsblame.cgi and http://bonsai.mozilla.org/cvslog.cgi are super useful. I totally agree with smaug. You can

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Kevin Brosnan
Have we checked with the NSS or NSPR teams? Kevin On Nov 21, 2013 11:45 AM, Laura Thomson laur...@gmail.com wrote: I'll keep it short and to the point. Are there any objections to shutting down http://bonsai.mozilla.org/cvsqueryform.cgi ? If you don't know what that is--and few people do,

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Mike Hommey
On Thu, Nov 21, 2013 at 05:56:12PM -0800, Jed Davis wrote: On Thu, Nov 21, 2013 at 05:41:27PM -0500, Boris Zbarsky wrote: On 11/21/13 3:15 PM, Gavin Sharp wrote: It would be good to explore alternatives to Bonsai. https://github.com/mozilla/mozilla-central is supposed to have full CVS

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Jed Davis
On Thu, Nov 21, 2013 at 05:41:27PM -0500, Boris Zbarsky wrote: On 11/21/13 3:15 PM, Gavin Sharp wrote: It would be good to explore alternatives to Bonsai. https://github.com/mozilla/mozilla-central is supposed to have full CVS history, right? Hmm. Where in there is the equivalent of

Re: Is there any reason not to shut down bonsai?

2013-11-21 Thread Jesse Ruderman
If we had blame enabled on http://git.mozilla.org/ would you be able to get what you need easily? Currently, if I replace 'history' with 'blame' in a gitweb url, I get 403 - Blame view not allowed :(