Max Bowsher <https://launchpad.net/~maxb> has been doing huge amounts
of great work on improving the UDD package importer, of which
<http://pad.lv/785859> is one typical example.  This is the machine
that pulls in packages from Debian and Ubuntu and does a two-way synch
with the Ubuntu package branches.

After fixing bugs or operational problems, we typically need to update
the instance of lp:udd on the server, and then restart some imports.
(See again that bug for an example.)

At the moment maxb needs to block on a Canonical staff member to
basically be an intelligent sudo to requeue packages and to get
debugging information.  I think it would be better if we can let Max
directly log in to this machine and run these commands.

Security implications: This will give him control over a a token that
can write to Ubuntu core branches and to access Launchpad with similar
credentials to ~core-devs.  This machine can only access Launchpad
through the rest api and bzr+ssh, and it's outside the main Canonical
firewall.

I have discussed this with elmo and cjwatson and they think this would
be reasonable if the TB assents.  If you don't object, I will ask
Canonical IS to create an account for maxb.

Martin

-- 
technical-board mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/technical-board

Reply via email to