Hi,

In order to discuss a renewal of sf-pages feature I wanted to talk with you 
about
that content: https://softwarefactory-project.io/etherpad/p/sf-pages-nextgen

I've setup a meeting on Thurday, you should have received the invite. I know
that's by far too early for Nicolas thus I propose to it a second time later in
the day to have inputs from Nicolas.

Cheers,
Fabien Boucher


Etherpad content (can be commented by mail too):

Grooming sf-pages
=================

Goal:
-----

Provide a way for a SF user to populate a directory that will be reachable
via HTTP under the the SF domain. This can then be used between others to store
HTML files for a project website.

How to do that:
---------------

Proposal 1:
...........

- An user can ask via the resources backend a public directory by giving
  a name and a public SSH key.
- When approved a directory is automatically made available under 
https://sfdomain/pages/name
- The SF gateway can be accessed by SFTP to that specific directory (name 
Chrooted SFTP instance) for the
  given name and SSH key.

Notes:
- A user can direct push data via a SFTP
- The review workflow of SF can be used to build and maintain pages that
  will be pushed by a post JOB to that directory (priv in the credential 
binding)
- Should we use a second instance of SSHD for that ?
  - I guess yes to be functional with the Auth by Key then the authorized_key 
files must be
    outside the chroot / so outside the home dir so opensshd must have a 
specific conf for that.
- Should we use a second instance of APACHE or even something else to serve 
static files ?
- name must be valid system user
- a TCP rule from that second SSHD instance to sf-gateway

in sshd_config:
Match User banbino
  ChrootDirectory %h
  ForceCommand internal-sftp
  AllowTcpForwarding no
  PermitTunnel no
  X11Forwarding no


Links:
- http://www.thegeekstuff.com/2012/03/chroot-sftp-Setup/
- https://wiki.archlinux.org/index.php/SFTP_chroot

Any other proposal ?
....................

_______________________________________________
Softwarefactory-dev mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/softwarefactory-dev

Reply via email to