diff options
| author | Nicolas Vigier <boklm@mageia.org> | 2013-04-14 13:46:12 +0000 |
|---|---|---|
| committer | Nicolas Vigier <boklm@mageia.org> | 2013-04-14 13:46:12 +0000 |
| commit | 1be510f9529cb082f802408b472a77d074b394c0 (patch) | |
| tree | b175f9d5fcb107576dabc768e7bd04d4a3e491a0 /zarb-ml/mageia-dev/attachments/20100927 | |
| parent | fa5098cf210b23ab4f419913e28af7b1b07dafb2 (diff) | |
| download | archives-master.tar archives-master.tar.gz archives-master.tar.bz2 archives-master.tar.xz archives-master.zip | |
Diffstat (limited to 'zarb-ml/mageia-dev/attachments/20100927')
30 files changed, 822 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/attachments/20100927/04b37deb/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/04b37deb/attachment-0001.html new file mode 100644 index 000000000..6e80dca6a --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/04b37deb/attachment-0001.html @@ -0,0 +1,18 @@ +<br><br><div class="gmail_quote">2010/9/26 Giuseppe Ghibò <span dir="ltr"><<a href="mailto:ghibomgx@gmail.com">ghibomgx@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> +<br><br><div class="gmail_quote">2010/9/26 nicolas vigier <span dir="ltr"><<a href="mailto:boklm@mars-attacks.org" target="_blank">boklm@mars-attacks.org</a>></span><div class="im"><br><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204, 204, 204);padding-left:1ex"> + +<div>On Sun, 26 Sep 2010, joris dedieu wrote:<br> +<br> +> 2010/9/26 Olivier Blin <<a href="mailto:mageia@blino.org" target="_blank">mageia@blino.org</a>>:<br> +> ><br> +</div><div>> > Because there are some authentication and integrity issues which are not<br> +> > simple to solve: we have to be sure that the binary packages really come<br> +> > from the unmodified SRPM (so that it does not contains malware).<br> +><br> +> This can be avoid by<br> +> - building every package twice (also useful for integrity check)<br> +<br> +</div>Then you can still do it with two hosts adding malware instead of one.<br></blockquote><br></div>What this means? Two RPMs built at different time will result different, even the executable binaries when built on the same hardware at different time might be different (because of timestamps, etc.).<br> + +<br>IMHO the idea of the cloud is not that bad but need to be rethinked.</div></blockquote><div><br></div><div>What about virtualization?</div><div><br></div><div>Maybe we could set-up some kind of cluster of remote and dedicated vm's as a unique build system. Could be a good workaround over security and integrity issues, 'cause we are using a "single" build system.</div> +<div><br></div></div> diff --git a/zarb-ml/mageia-dev/attachments/20100927/04b37deb/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/04b37deb/attachment.html new file mode 100644 index 000000000..6e80dca6a --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/04b37deb/attachment.html @@ -0,0 +1,18 @@ +<br><br><div class="gmail_quote">2010/9/26 Giuseppe Ghibò <span dir="ltr"><<a href="mailto:ghibomgx@gmail.com">ghibomgx@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> +<br><br><div class="gmail_quote">2010/9/26 nicolas vigier <span dir="ltr"><<a href="mailto:boklm@mars-attacks.org" target="_blank">boklm@mars-attacks.org</a>></span><div class="im"><br><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204, 204, 204);padding-left:1ex"> + +<div>On Sun, 26 Sep 2010, joris dedieu wrote:<br> +<br> +> 2010/9/26 Olivier Blin <<a href="mailto:mageia@blino.org" target="_blank">mageia@blino.org</a>>:<br> +> ><br> +</div><div>> > Because there are some authentication and integrity issues which are not<br> +> > simple to solve: we have to be sure that the binary packages really come<br> +> > from the unmodified SRPM (so that it does not contains malware).<br> +><br> +> This can be avoid by<br> +> - building every package twice (also useful for integrity check)<br> +<br> +</div>Then you can still do it with two hosts adding malware instead of one.<br></blockquote><br></div>What this means? Two RPMs built at different time will result different, even the executable binaries when built on the same hardware at different time might be different (because of timestamps, etc.).<br> + +<br>IMHO the idea of the cloud is not that bad but need to be rethinked.</div></blockquote><div><br></div><div>What about virtualization?</div><div><br></div><div>Maybe we could set-up some kind of cluster of remote and dedicated vm's as a unique build system. Could be a good workaround over security and integrity issues, 'cause we are using a "single" build system.</div> +<div><br></div></div> diff --git a/zarb-ml/mageia-dev/attachments/20100927/1b28f53f/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/1b28f53f/attachment-0001.html new file mode 100644 index 000000000..f417aa879 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/1b28f53f/attachment-0001.html @@ -0,0 +1,21 @@ +2010/9/27 Thierry Vignaud <span dir="ltr"><<a href="mailto:thierry.vignaud@gmail.com">thierry.vignaud@gmail.com</a>></span><br><div class="gmail_quote"><div> </div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> +<div class="im">On 27 September 2010 20:36, R James <<a href="mailto:upsnag2@gmail.com">upsnag2@gmail.com</a>> wrote:<br> +> Even the original Mandrake of 1998 was compiled for i586 (Pentium<br> +> Classic or newer)<br> +<br> +</div>Wrong!<br> +Original mandriva was compiled i386. It was when we "merged" with<br></blockquote><div><br>the original mandrake has even the same binary package (not recompiled) of the RH.<br> <br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> + +berolinux we targeted the i586 (spring 1999).<br> +Using an experimental compiler (egcs).<br> +At -O6.<br></blockquote><div><br>Wrong too! :-) It was not egcs, but pgcc (not the portland compiler) a special version of gcc...<br><br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> + +All of this landed in version 6.0 with the new glibc-2.1 and the new kernel-2.2.<br> +That was the distro where we defaulted to using udma.<br> +On all hard disks. Even those who didn't supported.<br></blockquote><div><br>yep pre-pre-pre kernels...<br> <br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> + +<br> +Ah, me remembering the glorious days of mdk6.1 with chmouel chasing a<br> +critical kernel memory leak just days before the release.<br> +Hopefully Alan Cox saved us.<br> +That was a beautiful year :-)<br><br></blockquote><div><br>Good old times...<br><br>:-)<br><br></div></div> diff --git a/zarb-ml/mageia-dev/attachments/20100927/1b28f53f/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/1b28f53f/attachment.html new file mode 100644 index 000000000..f417aa879 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/1b28f53f/attachment.html @@ -0,0 +1,21 @@ +2010/9/27 Thierry Vignaud <span dir="ltr"><<a href="mailto:thierry.vignaud@gmail.com">thierry.vignaud@gmail.com</a>></span><br><div class="gmail_quote"><div> </div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> +<div class="im">On 27 September 2010 20:36, R James <<a href="mailto:upsnag2@gmail.com">upsnag2@gmail.com</a>> wrote:<br> +> Even the original Mandrake of 1998 was compiled for i586 (Pentium<br> +> Classic or newer)<br> +<br> +</div>Wrong!<br> +Original mandriva was compiled i386. It was when we "merged" with<br></blockquote><div><br>the original mandrake has even the same binary package (not recompiled) of the RH.<br> <br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> + +berolinux we targeted the i586 (spring 1999).<br> +Using an experimental compiler (egcs).<br> +At -O6.<br></blockquote><div><br>Wrong too! :-) It was not egcs, but pgcc (not the portland compiler) a special version of gcc...<br><br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> + +All of this landed in version 6.0 with the new glibc-2.1 and the new kernel-2.2.<br> +That was the distro where we defaulted to using udma.<br> +On all hard disks. Even those who didn't supported.<br></blockquote><div><br>yep pre-pre-pre kernels...<br> <br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> + +<br> +Ah, me remembering the glorious days of mdk6.1 with chmouel chasing a<br> +critical kernel memory leak just days before the release.<br> +Hopefully Alan Cox saved us.<br> +That was a beautiful year :-)<br><br></blockquote><div><br>Good old times...<br><br>:-)<br><br></div></div> diff --git a/zarb-ml/mageia-dev/attachments/20100927/549f95e6/attachment-0001.asc b/zarb-ml/mageia-dev/attachments/20100927/549f95e6/attachment-0001.asc new file mode 100644 index 000000000..915bad1c0 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/549f95e6/attachment-0001.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.10 (GNU/Linux) + +iF4EAREIAAYFAkyhCisACgkQC3ySct6ZEpKJggD+P1mD3o2OGN0dZaYWronIGK5g +vGtFC3j/0cHbtAQirewA/1YEkB7v3IvX/oiEkzUC6NfB9zFeCQhSFPAa1aLUBhd8 +=JlBa +-----END PGP SIGNATURE----- diff --git a/zarb-ml/mageia-dev/attachments/20100927/549f95e6/attachment.asc b/zarb-ml/mageia-dev/attachments/20100927/549f95e6/attachment.asc new file mode 100644 index 000000000..915bad1c0 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/549f95e6/attachment.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.10 (GNU/Linux) + +iF4EAREIAAYFAkyhCisACgkQC3ySct6ZEpKJggD+P1mD3o2OGN0dZaYWronIGK5g +vGtFC3j/0cHbtAQirewA/1YEkB7v3IvX/oiEkzUC6NfB9zFeCQhSFPAa1aLUBhd8 +=JlBa +-----END PGP SIGNATURE----- diff --git a/zarb-ml/mageia-dev/attachments/20100927/5e7225f8/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/5e7225f8/attachment-0001.html new file mode 100644 index 000000000..4a970b93f --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/5e7225f8/attachment-0001.html @@ -0,0 +1,27 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"> +<html><head><meta name="qrichtext" content="1" /><style type="text/css"> +p, li { white-space: pre-wrap; } +</style></head><body style=" font-family:'Serif'; font-size:10pt; font-weight:400; font-style:normal;"> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Le lundi 27 septembre 2010, Colin Guthrie a écrit :</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> 'Twas brillig, and JPB at 27/09/10 14:04 did gyre and gimble:</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > Just one simple but important question:</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > Will Mageia provide a upgrade path for MDV users ?</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > Just answer, yes, no , too early not yet decided.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> I believe that is the intention at present, yes.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> I certainly hope so considering I have several machines to upgrade in</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> this way!</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> It shouldn't really be any harder than upgrading from one Mandriva</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> version to another.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> Col</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Thanks Col and Ahmad; just what I wanted to hear ;)</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">As we say in french "bon courage" to all the devs/core team.</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">JPB</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p></body></html>
\ No newline at end of file diff --git a/zarb-ml/mageia-dev/attachments/20100927/5e7225f8/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/5e7225f8/attachment.html new file mode 100644 index 000000000..4a970b93f --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/5e7225f8/attachment.html @@ -0,0 +1,27 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"> +<html><head><meta name="qrichtext" content="1" /><style type="text/css"> +p, li { white-space: pre-wrap; } +</style></head><body style=" font-family:'Serif'; font-size:10pt; font-weight:400; font-style:normal;"> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Le lundi 27 septembre 2010, Colin Guthrie a écrit :</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> 'Twas brillig, and JPB at 27/09/10 14:04 did gyre and gimble:</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > Just one simple but important question:</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > Will Mageia provide a upgrade path for MDV users ?</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > Just answer, yes, no , too early not yet decided.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> I believe that is the intention at present, yes.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> I certainly hope so considering I have several machines to upgrade in</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> this way!</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> It shouldn't really be any harder than upgrading from one Mandriva</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> version to another.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> Col</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Thanks Col and Ahmad; just what I wanted to hear ;)</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">As we say in french "bon courage" to all the devs/core team.</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">JPB</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p></body></html>
\ No newline at end of file diff --git a/zarb-ml/mageia-dev/attachments/20100927/768873f5/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/768873f5/attachment-0001.html new file mode 100644 index 000000000..cf218c19c --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/768873f5/attachment-0001.html @@ -0,0 +1,19 @@ +<font class="Apple-style-span" face="arial, helvetica, sans-serif">ennael !!! </font><font class="Apple-style-span" face="arial, helvetica, sans-serif">We can open a new "server area" in the wiki ?</font><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br> +</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Bersuit.<br></font><br><div class="gmail_quote">2010/9/27 Sinner from the Prairy <span dir="ltr"><<a href="mailto:sinnerbofh@gmail.com">sinnerbofh@gmail.com</a>></span><br> +<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">To: Sascha Schneider , Samuel Verschelde, Bersuit Vera<br> +<br> +Why don't you guys take initiative and start a "server area" on Mageia's Wiki?<br> +<br> +Maybe with the help of ennael (Anne)<br> +<br> +Salut,<br> +Sinner<br> +<font color="#888888">--<br> +Sinner from the Prairy - <a href="http://sinnerbofh.blogspot.com/" target="_blank">http://sinnerbofh.blogspot.com/</a> -<br> +<a href="http://www.ibiblio.org/sinner/" target="_blank">http://www.ibiblio.org/sinner/</a><br> +Linux User # 89976 - Visit BlogDrake: <a href="http://blogdrake.net" target="_blank">http://blogdrake.net</a><br> +</font><div><div></div><div class="h5">_______________________________________________<br> +Mageia-dev mailing list<br> +<a href="mailto:Mageia-dev@mageia.org">Mageia-dev@mageia.org</a><br> +<a href="https://www.mageia.org/mailman/listinfo/mageia-dev" target="_blank">https://www.mageia.org/mailman/listinfo/mageia-dev</a><br> +</div></div></blockquote></div><br></div> diff --git a/zarb-ml/mageia-dev/attachments/20100927/768873f5/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/768873f5/attachment.html new file mode 100644 index 000000000..cf218c19c --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/768873f5/attachment.html @@ -0,0 +1,19 @@ +<font class="Apple-style-span" face="arial, helvetica, sans-serif">ennael !!! </font><font class="Apple-style-span" face="arial, helvetica, sans-serif">We can open a new "server area" in the wiki ?</font><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br> +</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Bersuit.<br></font><br><div class="gmail_quote">2010/9/27 Sinner from the Prairy <span dir="ltr"><<a href="mailto:sinnerbofh@gmail.com">sinnerbofh@gmail.com</a>></span><br> +<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">To: Sascha Schneider , Samuel Verschelde, Bersuit Vera<br> +<br> +Why don't you guys take initiative and start a "server area" on Mageia's Wiki?<br> +<br> +Maybe with the help of ennael (Anne)<br> +<br> +Salut,<br> +Sinner<br> +<font color="#888888">--<br> +Sinner from the Prairy - <a href="http://sinnerbofh.blogspot.com/" target="_blank">http://sinnerbofh.blogspot.com/</a> -<br> +<a href="http://www.ibiblio.org/sinner/" target="_blank">http://www.ibiblio.org/sinner/</a><br> +Linux User # 89976 - Visit BlogDrake: <a href="http://blogdrake.net" target="_blank">http://blogdrake.net</a><br> +</font><div><div></div><div class="h5">_______________________________________________<br> +Mageia-dev mailing list<br> +<a href="mailto:Mageia-dev@mageia.org">Mageia-dev@mageia.org</a><br> +<a href="https://www.mageia.org/mailman/listinfo/mageia-dev" target="_blank">https://www.mageia.org/mailman/listinfo/mageia-dev</a><br> +</div></div></blockquote></div><br></div> diff --git a/zarb-ml/mageia-dev/attachments/20100927/926fa2ec/attachment-0001.asc b/zarb-ml/mageia-dev/attachments/20100927/926fa2ec/attachment-0001.asc new file mode 100644 index 000000000..9b8ec56e5 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/926fa2ec/attachment-0001.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.10 (GNU/Linux) + +iF4EAREIAAYFAkyhBRkACgkQC3ySct6ZEpKYgQD/TliWkm5icA4bx9YJDFtSHYLT +gZTZN7/QaRHIWgAiWI8A/RTZD2iwi3VAgtQx8Y0gVxJGqDpwXOu7QjOUg5uSbFYk +=UX7v +-----END PGP SIGNATURE----- diff --git a/zarb-ml/mageia-dev/attachments/20100927/926fa2ec/attachment.asc b/zarb-ml/mageia-dev/attachments/20100927/926fa2ec/attachment.asc new file mode 100644 index 000000000..9b8ec56e5 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/926fa2ec/attachment.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.10 (GNU/Linux) + +iF4EAREIAAYFAkyhBRkACgkQC3ySct6ZEpKYgQD/TliWkm5icA4bx9YJDFtSHYLT +gZTZN7/QaRHIWgAiWI8A/RTZD2iwi3VAgtQx8Y0gVxJGqDpwXOu7QjOUg5uSbFYk +=UX7v +-----END PGP SIGNATURE----- diff --git a/zarb-ml/mageia-dev/attachments/20100927/b211fb10/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/b211fb10/attachment-0001.html new file mode 100644 index 000000000..8668f5a7d --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/b211fb10/attachment-0001.html @@ -0,0 +1,14 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"> +<html><head><meta name="qrichtext" content="1" /><style type="text/css"> +p, li { white-space: pre-wrap; } +</style></head><body style=" font-family:'Serif'; font-size:10pt; font-weight:400; font-style:normal;"> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Just one simple but important question:</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Will Mageia provide a upgrade path for MDV users ?</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Just answer, yes, no , too early not yet decided.</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">TIA</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">JPB</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"> </p></body></html>
\ No newline at end of file diff --git a/zarb-ml/mageia-dev/attachments/20100927/b211fb10/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/b211fb10/attachment.html new file mode 100644 index 000000000..8668f5a7d --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/b211fb10/attachment.html @@ -0,0 +1,14 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"> +<html><head><meta name="qrichtext" content="1" /><style type="text/css"> +p, li { white-space: pre-wrap; } +</style></head><body style=" font-family:'Serif'; font-size:10pt; font-weight:400; font-style:normal;"> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Just one simple but important question:</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Will Mageia provide a upgrade path for MDV users ?</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Just answer, yes, no , too early not yet decided.</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">TIA</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">JPB</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"> </p></body></html>
\ No newline at end of file diff --git a/zarb-ml/mageia-dev/attachments/20100927/b4c7cf34/attachment-0001.asc b/zarb-ml/mageia-dev/attachments/20100927/b4c7cf34/attachment-0001.asc new file mode 100644 index 000000000..2847ce26b --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/b4c7cf34/attachment-0001.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.9 (GNU/Linux) + +iEYEARECAAYFAkygPngACgkQP0wYCuTizat+LwCfbeikdsI98Fo1qqWEea1dA3tK +oGIAnifYWXZMJprVjxMkO8mUcQMWMXQv +=QhdC +-----END PGP SIGNATURE----- diff --git a/zarb-ml/mageia-dev/attachments/20100927/b4c7cf34/attachment.asc b/zarb-ml/mageia-dev/attachments/20100927/b4c7cf34/attachment.asc new file mode 100644 index 000000000..2847ce26b --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/b4c7cf34/attachment.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.9 (GNU/Linux) + +iEYEARECAAYFAkygPngACgkQP0wYCuTizat+LwCfbeikdsI98Fo1qqWEea1dA3tK +oGIAnifYWXZMJprVjxMkO8mUcQMWMXQv +=QhdC +-----END PGP SIGNATURE----- diff --git a/zarb-ml/mageia-dev/attachments/20100927/b8ec4d90/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/b8ec4d90/attachment-0001.html new file mode 100644 index 000000000..14cc19eff --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/b8ec4d90/attachment-0001.html @@ -0,0 +1,13 @@ +<br><br><div class="gmail_quote">On Mon, Sep 27, 2010 at 4:04 PM, JPB <span dir="ltr"><<a href="mailto:jpierre.benoit@free.fr">jpierre.benoit@free.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> + +<div style="font-family: 'Serif'; font-size: 10pt; font-weight: 400; font-style: normal;"> +<p style="margin: 0px; text-indent: 0px;">Just one simple but important question:</p> +<p style="margin: 0px; text-indent: 0px;"></p> +<p style="margin: 0px; text-indent: 0px;">Will Mageia provide a upgrade path for MDV users ?</p> +<p style="margin: 0px; text-indent: 0px;"></p> +<p style="margin: 0px; text-indent: 0px;">Just answer, yes, no , too early not yet decided.</p> +<p style="margin: 0px; text-indent: 0px;"></p> +<p style="margin: 0px; text-indent: 0px;">TIA</p> +<p style="margin: 0px; text-indent: 0px;"></p> +<p style="margin: 0px; text-indent: 0px;">JPB</p> +<p style="margin: 0px; text-indent: 0px;"> </p></div><br></blockquote></div><br>This is something I wonder. At least the first release should be nice to upgrade.<br>I have a smale home server, but I hate to re-install it again.<br> diff --git a/zarb-ml/mageia-dev/attachments/20100927/b8ec4d90/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/b8ec4d90/attachment.html new file mode 100644 index 000000000..14cc19eff --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/b8ec4d90/attachment.html @@ -0,0 +1,13 @@ +<br><br><div class="gmail_quote">On Mon, Sep 27, 2010 at 4:04 PM, JPB <span dir="ltr"><<a href="mailto:jpierre.benoit@free.fr">jpierre.benoit@free.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> + +<div style="font-family: 'Serif'; font-size: 10pt; font-weight: 400; font-style: normal;"> +<p style="margin: 0px; text-indent: 0px;">Just one simple but important question:</p> +<p style="margin: 0px; text-indent: 0px;"></p> +<p style="margin: 0px; text-indent: 0px;">Will Mageia provide a upgrade path for MDV users ?</p> +<p style="margin: 0px; text-indent: 0px;"></p> +<p style="margin: 0px; text-indent: 0px;">Just answer, yes, no , too early not yet decided.</p> +<p style="margin: 0px; text-indent: 0px;"></p> +<p style="margin: 0px; text-indent: 0px;">TIA</p> +<p style="margin: 0px; text-indent: 0px;"></p> +<p style="margin: 0px; text-indent: 0px;">JPB</p> +<p style="margin: 0px; text-indent: 0px;"> </p></div><br></blockquote></div><br>This is something I wonder. At least the first release should be nice to upgrade.<br>I have a smale home server, but I hate to re-install it again.<br> diff --git a/zarb-ml/mageia-dev/attachments/20100927/c17c83f7/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/c17c83f7/attachment-0001.html new file mode 100644 index 000000000..89194e3d4 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/c17c83f7/attachment-0001.html @@ -0,0 +1,59 @@ +<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
+/* Font Definitions */
+@font-face
+ {font-family:Calibri;
+ panose-1:2 15 5 2 2 2 4 3 2 4;}
+/* Style Definitions */
+p.MsoNormal, li.MsoNormal, div.MsoNormal
+ {margin:0cm;
+ margin-bottom:.0001pt;
+ font-size:12.0pt;
+ font-family:"Times New Roman","serif";}
+a:link, span.MsoHyperlink
+ {mso-style-priority:99;
+ color:blue;
+ text-decoration:underline;}
+a:visited, span.MsoHyperlinkFollowed
+ {mso-style-priority:99;
+ color:purple;
+ text-decoration:underline;}
+span.E-MailFormatvorlage17
+ {mso-style-type:personal-reply;
+ font-family:"Calibri","sans-serif";
+ color:#1F497D;}
+.MsoChpDefault
+ {mso-style-type:export-only;
+ font-family:"Calibri","sans-serif";
+ mso-fareast-language:EN-US;}
+@page WordSection1
+ {size:612.0pt 792.0pt;
+ margin:70.85pt 70.85pt 2.0cm 70.85pt;}
+div.WordSection1
+ {page:WordSection1;}
+--></style><!--[if gte mso 9]><xml>
+<o:shapedefaults v:ext="edit" spidmax="1026" />
+</xml><![endif]--><!--[if gte mso 9]><xml>
+<o:shapelayout v:ext="edit">
+<o:idmap v:ext="edit" data="1" />
+</o:shapelayout></xml><![endif]--></head><body lang=DE link=blue vlink=purple><div class=WordSection1><div><div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>></span><span lang=EN-US>What about virtualization?<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>></span><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>></span><span lang=EN-US>Maybe we could set-up some kind of cluster of remote and dedicated vm's as a unique build system. Could be a good workaround over security and integrity issues, 'cause we are using <span style='color:#1F497D'>></span>a "single" build system.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>That is the thing SuSE OBS does. The System which builds the package is a VM on a XEN Host, which is generated automatically from a defined Image, every time and for every package.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>So it is clear, that the package is built on a clean system with the right OS and Patch level.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></div></div>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN
+style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: gray; FONT-SIZE: 7.5pt; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: DE"><FONT
+color=#000000 size=1>--</FONT></SPAN></P>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN
+style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: gray; FONT-SIZE: 7.5pt; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: DE"><FONT
+color=#000000 size=1>Mit freundlichem Gruß<BR>Frank Loewe</FONT></SPAN></P>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN
+style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: gray; FONT-SIZE: 7.5pt; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: DE"><FONT
+color=#000000 size=1>Geschäftsführer</FONT></SPAN></P><SPAN
+style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: gray; FONT-SIZE: 7.5pt; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: DE"><FONT
+color=#000000>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><BR><FONT size=1>dotcom-service
+Ltd. & Co. KG.<BR>Robertstr.6<BR>42107 Wuppertal<BR>Tel.: +49 202 430429-01<BR>Fax.:
++49 202 430429-10</FONT></P>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><FONT size=1>HRA21922,
+Amtsgericht Wuppertal<BR>Geschäftsführer: Frank Loewe, Melanie
+Castellaz</FONT></P>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><FONT size=1>Pers. haftende
+Gesellschafterin:<BR>dotcom-service Ltd, 2 OLD BROMPTON ROAD, SUITE 276,LONDON
+SW7 3DQ, Company No. 05452606<BR>Niederlassung Deutschland, Robertstr.6, 42107
+Wuppertal</FONT></FONT></SPAN></P><div style="color:#999999;font-size:11px;font-family:verdana"><br>Disclaimer added by <b>CodeTwo Exchange Rules 2007</b><br><a href="http://www.codetwo.com">www.codetwo.com</a></div><br></body></html>
\ No newline at end of file diff --git a/zarb-ml/mageia-dev/attachments/20100927/c17c83f7/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/c17c83f7/attachment.html new file mode 100644 index 000000000..89194e3d4 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/c17c83f7/attachment.html @@ -0,0 +1,59 @@ +<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
+/* Font Definitions */
+@font-face
+ {font-family:Calibri;
+ panose-1:2 15 5 2 2 2 4 3 2 4;}
+/* Style Definitions */
+p.MsoNormal, li.MsoNormal, div.MsoNormal
+ {margin:0cm;
+ margin-bottom:.0001pt;
+ font-size:12.0pt;
+ font-family:"Times New Roman","serif";}
+a:link, span.MsoHyperlink
+ {mso-style-priority:99;
+ color:blue;
+ text-decoration:underline;}
+a:visited, span.MsoHyperlinkFollowed
+ {mso-style-priority:99;
+ color:purple;
+ text-decoration:underline;}
+span.E-MailFormatvorlage17
+ {mso-style-type:personal-reply;
+ font-family:"Calibri","sans-serif";
+ color:#1F497D;}
+.MsoChpDefault
+ {mso-style-type:export-only;
+ font-family:"Calibri","sans-serif";
+ mso-fareast-language:EN-US;}
+@page WordSection1
+ {size:612.0pt 792.0pt;
+ margin:70.85pt 70.85pt 2.0cm 70.85pt;}
+div.WordSection1
+ {page:WordSection1;}
+--></style><!--[if gte mso 9]><xml>
+<o:shapedefaults v:ext="edit" spidmax="1026" />
+</xml><![endif]--><!--[if gte mso 9]><xml>
+<o:shapelayout v:ext="edit">
+<o:idmap v:ext="edit" data="1" />
+</o:shapelayout></xml><![endif]--></head><body lang=DE link=blue vlink=purple><div class=WordSection1><div><div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>></span><span lang=EN-US>What about virtualization?<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>></span><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>></span><span lang=EN-US>Maybe we could set-up some kind of cluster of remote and dedicated vm's as a unique build system. Could be a good workaround over security and integrity issues, 'cause we are using <span style='color:#1F497D'>></span>a "single" build system.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>That is the thing SuSE OBS does. The System which builds the package is a VM on a XEN Host, which is generated automatically from a defined Image, every time and for every package.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>So it is clear, that the package is built on a clean system with the right OS and Patch level.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></div></div>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN
+style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: gray; FONT-SIZE: 7.5pt; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: DE"><FONT
+color=#000000 size=1>--</FONT></SPAN></P>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN
+style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: gray; FONT-SIZE: 7.5pt; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: DE"><FONT
+color=#000000 size=1>Mit freundlichem Gruß<BR>Frank Loewe</FONT></SPAN></P>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN
+style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: gray; FONT-SIZE: 7.5pt; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: DE"><FONT
+color=#000000 size=1>Geschäftsführer</FONT></SPAN></P><SPAN
+style="FONT-FAMILY: 'Arial','sans-serif'; COLOR: gray; FONT-SIZE: 7.5pt; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: DE"><FONT
+color=#000000>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><BR><FONT size=1>dotcom-service
+Ltd. & Co. KG.<BR>Robertstr.6<BR>42107 Wuppertal<BR>Tel.: +49 202 430429-01<BR>Fax.:
++49 202 430429-10</FONT></P>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><FONT size=1>HRA21922,
+Amtsgericht Wuppertal<BR>Geschäftsführer: Frank Loewe, Melanie
+Castellaz</FONT></P>
+<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><FONT size=1>Pers. haftende
+Gesellschafterin:<BR>dotcom-service Ltd, 2 OLD BROMPTON ROAD, SUITE 276,LONDON
+SW7 3DQ, Company No. 05452606<BR>Niederlassung Deutschland, Robertstr.6, 42107
+Wuppertal</FONT></FONT></SPAN></P><div style="color:#999999;font-size:11px;font-family:verdana"><br>Disclaimer added by <b>CodeTwo Exchange Rules 2007</b><br><a href="http://www.codetwo.com">www.codetwo.com</a></div><br></body></html>
\ No newline at end of file diff --git a/zarb-ml/mageia-dev/attachments/20100927/c59d69b6/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/c59d69b6/attachment-0001.html new file mode 100644 index 000000000..3f5dea0b2 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/c59d69b6/attachment-0001.html @@ -0,0 +1,17 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"> +<html><head><meta name="qrichtext" content="1" /><style type="text/css"> +p, li { white-space: pre-wrap; } +</style></head><body style=" font-family:'Serif'; font-size:10pt; font-weight:400; font-style:normal;"> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Le lundi 27 septembre 2010, Michael Scherer a écrit :</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> Le lundi 27 septembre 2010 à 16:16 +0100, Maurice Batey a écrit :</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > On Mon, 27 Sep 2010 14:15:27 +0100, Colin Guthrie wrote:</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > > I believe that is the intention at present, yes.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > Sounds rather ambitious to start off with.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> We already did it for Mandriva, so I do not see where it is ambitious.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> ( thing were not perfect, but it worked quite well for me ).</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">In addition i would say, let's do it now when we are not very "far" from the original, and after a few releases we may diverge by adding our own bells and whistles; and at that time we may forget the upgrade path (or not) .</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">JPB</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p></body></html>
\ No newline at end of file diff --git a/zarb-ml/mageia-dev/attachments/20100927/c59d69b6/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/c59d69b6/attachment.html new file mode 100644 index 000000000..3f5dea0b2 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/c59d69b6/attachment.html @@ -0,0 +1,17 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"> +<html><head><meta name="qrichtext" content="1" /><style type="text/css"> +p, li { white-space: pre-wrap; } +</style></head><body style=" font-family:'Serif'; font-size:10pt; font-weight:400; font-style:normal;"> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Le lundi 27 septembre 2010, Michael Scherer a écrit :</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> Le lundi 27 septembre 2010 à 16:16 +0100, Maurice Batey a écrit :</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > On Mon, 27 Sep 2010 14:15:27 +0100, Colin Guthrie wrote:</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > > I believe that is the intention at present, yes.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > Sounds rather ambitious to start off with.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> We already did it for Mandriva, so I do not see where it is ambitious.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> ( thing were not perfect, but it worked quite well for me ).</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">In addition i would say, let's do it now when we are not very "far" from the original, and after a few releases we may diverge by adding our own bells and whistles; and at that time we may forget the upgrade path (or not) .</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">JPB</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p></body></html>
\ No newline at end of file diff --git a/zarb-ml/mageia-dev/attachments/20100927/d8e0e4e8/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/d8e0e4e8/attachment-0001.html new file mode 100644 index 000000000..a20232427 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/d8e0e4e8/attachment-0001.html @@ -0,0 +1,14 @@ +<br>2010/9/27 herman <span dir="ltr"><<a href="mailto:herman@aeronetworks.ca">herman@aeronetworks.ca</a>></span><br><div class="gmail_quote"><div> </div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> +On Sun, 2010-09-26 at 18:32 -0700, Frank Griffin wrote:<br> +<div class="im">> Giuseppe Ghibò wrote:<br> +> > IMHO one of the building problems was not massive automatic rebuilding<br> +> > but avoid bottenlecks to the users when building goes wrong.<br> +> I really like the concept of a distributed build system.<br> +<br> +</div>The problem with a distributed system is the enormous increase in<br> +complexity. As long as a single big server with about 24 cores can<br> +compile the lot in one day, then a distributed system is not really<br> +needed.<br> +<div><div></div><div class="h5"><br></div></div></blockquote><div><br>I agree there would be an ENORMOUS increase in complexity, but you are forgetting that first 24 cores someone cited were not 24 cores, but a dual exacore machine (I guess a dual Xeon 5650) so 12 core with hyperthreads, which is not exactly the same as 24 native core. Such core with 12GB of memory are just "peanuts" in an environment with plenty of developers. Half of that machine (e.g. with a core i7 985X, or AMD 1055T) is actually a medium/top PC which you can build in your home.<br> +<br>So you have to distinguish automatic rebuilding of the distro, which operates on "working" packages from the svn, from new packages built from the first time. The first task of a massive rebuilding is a automated task which can be done sequentially (but 1 day is only for the main, then there is contrib, then you have 2 archs, 32 and 64bits, and backports); the second task instead has a lot of stop and go. If for instance a build goes wrong because a packager couldn't test a parallel build in his own development machine (or because the number of cores is different and you get race conditions problems), and have to redo the work, but in the meanwhile the building system is busy, or has other kind of problems (wait for library to propagate, etc.), then he have to spend a lot of time fighting against the system and babysitting a package, rather than concentrate on packaging or developing. And for sure he would fly away (packagers are not of iron with infinite patience).<br> +<br>Also consider that the phase of LZMA compression of the RPM building won't operate in parallel.<br><br>Bye<br>Giuseppe.<br><br></div></div> diff --git a/zarb-ml/mageia-dev/attachments/20100927/d8e0e4e8/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/d8e0e4e8/attachment.html new file mode 100644 index 000000000..a20232427 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/d8e0e4e8/attachment.html @@ -0,0 +1,14 @@ +<br>2010/9/27 herman <span dir="ltr"><<a href="mailto:herman@aeronetworks.ca">herman@aeronetworks.ca</a>></span><br><div class="gmail_quote"><div> </div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> +On Sun, 2010-09-26 at 18:32 -0700, Frank Griffin wrote:<br> +<div class="im">> Giuseppe Ghibò wrote:<br> +> > IMHO one of the building problems was not massive automatic rebuilding<br> +> > but avoid bottenlecks to the users when building goes wrong.<br> +> I really like the concept of a distributed build system.<br> +<br> +</div>The problem with a distributed system is the enormous increase in<br> +complexity. As long as a single big server with about 24 cores can<br> +compile the lot in one day, then a distributed system is not really<br> +needed.<br> +<div><div></div><div class="h5"><br></div></div></blockquote><div><br>I agree there would be an ENORMOUS increase in complexity, but you are forgetting that first 24 cores someone cited were not 24 cores, but a dual exacore machine (I guess a dual Xeon 5650) so 12 core with hyperthreads, which is not exactly the same as 24 native core. Such core with 12GB of memory are just "peanuts" in an environment with plenty of developers. Half of that machine (e.g. with a core i7 985X, or AMD 1055T) is actually a medium/top PC which you can build in your home.<br> +<br>So you have to distinguish automatic rebuilding of the distro, which operates on "working" packages from the svn, from new packages built from the first time. The first task of a massive rebuilding is a automated task which can be done sequentially (but 1 day is only for the main, then there is contrib, then you have 2 archs, 32 and 64bits, and backports); the second task instead has a lot of stop and go. If for instance a build goes wrong because a packager couldn't test a parallel build in his own development machine (or because the number of cores is different and you get race conditions problems), and have to redo the work, but in the meanwhile the building system is busy, or has other kind of problems (wait for library to propagate, etc.), then he have to spend a lot of time fighting against the system and babysitting a package, rather than concentrate on packaging or developing. And for sure he would fly away (packagers are not of iron with infinite patience).<br> +<br>Also consider that the phase of LZMA compression of the RPM building won't operate in parallel.<br><br>Bye<br>Giuseppe.<br><br></div></div> diff --git a/zarb-ml/mageia-dev/attachments/20100927/dc48d94c/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/dc48d94c/attachment-0001.html new file mode 100644 index 000000000..7cce400ff --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/dc48d94c/attachment-0001.html @@ -0,0 +1,22 @@ +<br><br><div class="gmail_quote">2010/9/27 Michael Scherer <span dir="ltr"><<a href="mailto:misc@zarb.org">misc@zarb.org</a>></span><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> +Le lundi 27 septembre 2010 à 03:19 +0200, vfmBOFH a écrit :<br> +<div class="im">> What about virtualization?<br> +><br> +> Maybe we could set-up some kind of cluster of remote and dedicated<br> +> vm's as a<br> +> unique build system. Could be a good workaround over security and<br> +> integrity issues, 'cause we are using a "single" build system.<br> +<br> +</div>Well, how do you garantee that the person who have physical access do<br> +not mess with the vm image ?<br> +<br> +Look at libvirt developers blog ( <a href="http://rwmj.wordpress.com/" target="_blank">http://rwmj.wordpress.com/</a> ) to see<br> +how easy it can be to externally mess with a virtual instance if you are<br> +root on the host computer.<br> +--<br> +<font color="#888888">Michael Scherer<br> +</font><div><div></div><br></div></blockquote><div><br>The only way of doing this is NOT letting anyone packaging or uploading a tarball. Just have two different building system. One "secure" and the other of contributors (not unsecure, but with less checking). The secure one would download the tarball automatically from the original repositories:<br> +<br>e.g.: suppose there is a package SPEC file containing:<br><br>Source: <a href="http://blabla.com/openssh-5.5-1.tar.xz">http://blabla.com/openssh-5.5-1.tar.xz</a><br>Source1: <a href="http://blabla.com/openssh-5.5.1.tar.sig">http://blabla.com/openssh-5.5.1.tar.sig</a><br> +<br>An automatic system would try to retrieve from the <a href="http://blabla.com/">http://blabla.com/</a> site the packages<br><a href="http://blabla.com/openssh-5.5-1.tar.xz">http://blabla.com/openssh-5.5-1.tar.xz</a>, or if not exists <a href="http://blabla.com/openssh-5.5-1.tar.bz2">http://blabla.com/openssh-5.5-1.tar.bz2</a> or <a href="http://blabla.com/openssh-5.5-1.tar.gz">http://blabla.com/openssh-5.5-1.tar.gz</a> or <a href="http://blabla.com/openssh-5.5-1.tar">http://blabla.com/openssh-5.5-1.tar</a>. Then would retrieve the signature <a href="http://blabla.com/openssh-5.5.1.tar.sig">http://blabla.com/openssh-5.5.1.tar.sig</a> and would check with the one from the Database of signatures which has been already populated on the secure system. If the signatures checking would match, then tarball would be uploaded to the "secure" system svn and used for building instead of the one from the contributor/package maintainer.<br> +<br>[Of course the system would fail if the package maintainer has downloaded the source tarball from the svn and not from a canonical repository, and to be further secure this system would require also signing of Patches].<br> +<br>Bye.<br>Giuseppe.<br><br></div></div> diff --git a/zarb-ml/mageia-dev/attachments/20100927/dc48d94c/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/dc48d94c/attachment.html new file mode 100644 index 000000000..7cce400ff --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/dc48d94c/attachment.html @@ -0,0 +1,22 @@ +<br><br><div class="gmail_quote">2010/9/27 Michael Scherer <span dir="ltr"><<a href="mailto:misc@zarb.org">misc@zarb.org</a>></span><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> +Le lundi 27 septembre 2010 à 03:19 +0200, vfmBOFH a écrit :<br> +<div class="im">> What about virtualization?<br> +><br> +> Maybe we could set-up some kind of cluster of remote and dedicated<br> +> vm's as a<br> +> unique build system. Could be a good workaround over security and<br> +> integrity issues, 'cause we are using a "single" build system.<br> +<br> +</div>Well, how do you garantee that the person who have physical access do<br> +not mess with the vm image ?<br> +<br> +Look at libvirt developers blog ( <a href="http://rwmj.wordpress.com/" target="_blank">http://rwmj.wordpress.com/</a> ) to see<br> +how easy it can be to externally mess with a virtual instance if you are<br> +root on the host computer.<br> +--<br> +<font color="#888888">Michael Scherer<br> +</font><div><div></div><br></div></blockquote><div><br>The only way of doing this is NOT letting anyone packaging or uploading a tarball. Just have two different building system. One "secure" and the other of contributors (not unsecure, but with less checking). The secure one would download the tarball automatically from the original repositories:<br> +<br>e.g.: suppose there is a package SPEC file containing:<br><br>Source: <a href="http://blabla.com/openssh-5.5-1.tar.xz">http://blabla.com/openssh-5.5-1.tar.xz</a><br>Source1: <a href="http://blabla.com/openssh-5.5.1.tar.sig">http://blabla.com/openssh-5.5.1.tar.sig</a><br> +<br>An automatic system would try to retrieve from the <a href="http://blabla.com/">http://blabla.com/</a> site the packages<br><a href="http://blabla.com/openssh-5.5-1.tar.xz">http://blabla.com/openssh-5.5-1.tar.xz</a>, or if not exists <a href="http://blabla.com/openssh-5.5-1.tar.bz2">http://blabla.com/openssh-5.5-1.tar.bz2</a> or <a href="http://blabla.com/openssh-5.5-1.tar.gz">http://blabla.com/openssh-5.5-1.tar.gz</a> or <a href="http://blabla.com/openssh-5.5-1.tar">http://blabla.com/openssh-5.5-1.tar</a>. Then would retrieve the signature <a href="http://blabla.com/openssh-5.5.1.tar.sig">http://blabla.com/openssh-5.5.1.tar.sig</a> and would check with the one from the Database of signatures which has been already populated on the secure system. If the signatures checking would match, then tarball would be uploaded to the "secure" system svn and used for building instead of the one from the contributor/package maintainer.<br> +<br>[Of course the system would fail if the package maintainer has downloaded the source tarball from the svn and not from a canonical repository, and to be further secure this system would require also signing of Patches].<br> +<br>Bye.<br>Giuseppe.<br><br></div></div> diff --git a/zarb-ml/mageia-dev/attachments/20100927/e7007c74/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/e7007c74/attachment-0001.html new file mode 100644 index 000000000..2c5544412 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/e7007c74/attachment-0001.html @@ -0,0 +1,151 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> +<html> +<head> + <meta content="text/html; charset=ISO-8859-1" + http-equiv="Content-Type"> +</head> +<body text="#000000" bgcolor="#ffffff"> +Le 27/09/2010 10:02, Romain d'Alverny a écrit : +<blockquote + cite="mid:AANLkTinN0Z63ixrr6XvpryQzFPsDXXt098xqMRXNPcdB@mail.gmail.com" + type="cite"> + <pre wrap="">Hi, + +On Mon, Sep 27, 2010 at 08:19, Tux99 <a class="moz-txt-link-rfc2396E" href="mailto:tux99-mga@uridium.org"><tux99-mga@uridium.org></a> wrote: + </pre> + <blockquote type="cite"> + <pre wrap=""> +I did a quick comparison of the most common forum software packages +(both commercial and FOSS) from a vulnerability point of view. + +I'm subscribed to the well known (every sysadmin that takes his/her job +seriously is subscribed to it) weekly SANS "@RISK: The Consensus +Security Alert" newsletter since 2000, so I have an mbox archive file +that contains almost 11 years worth of weekly alerts of software +vulnerabilities. + +A quick an easy way that I have used before to assess the vulnerability +of any software is to do a simple grep of the software name in this mbox +file and count the times that software gets mentioned. While this is not +100% scientific it gives a good approximation of the amount of +vulnerabilities a particular software has suffered from. + </pre> + </blockquote> + <pre wrap=""> +Indeed. It's interesting. But ranking only by the disclosed number of +vulnerabilities in the past does not assess what will be in the +future. It's not enough. + +What would be an additional important figure is, how long has it been +for each vulnerability to be fixed; how many users each has had, etc. + +Plus, what type of vulnerability. Plus, for what branch of the +software (I guess, for instance, phpBB 2.x and 3.x are a bit +different). + </pre> +</blockquote> +Hi,<br> +<br> +phpbb2 and phpbb3 share very few lines of code afaik<br> +<br> +And statistics are enough to explain :<br> +<br> +phpBB2: 38 advisories (27 vuln) 0% unpatched<br> +<a class="moz-txt-link-freetext" href="http://secunia.com/advisories/product/463/">http://secunia.com/advisories/product/463/</a><br> +<br> +9% highly critical, 34% moderate, 49% low, 9% not<br> +<br> +phpBB2 is/was a well known security nightmare :o)<br> +<br> +----<br> +<br> +fudForum: 2 advisories (2 vuln) 0% unpatched<br> +<a class="moz-txt-link-freetext" href="http://secunia.com/advisories/product/5530/">http://secunia.com/advisories/product/5530/</a><br> +<br> +50% highly critical, 50% moderate<br> +<br> +The critical one allowing system access :o)<br> +<br> +----<br> +<br> +phpBB3: 4 advisories (5 vuln) 0% unpatched<br> +<a class="moz-txt-link-freetext" href="http://secunia.com/advisories/product/17998/">http://secunia.com/advisories/product/17998/</a><br> +<br> +0% highly critical, 25 % moderate, 75% low<br> +<br> +---- <br> +<br> +I crearly consider phpBB3 not less secure than fudForum can be :)<br> +<br> +<br> +<blockquote + cite="mid:AANLkTinN0Z63ixrr6XvpryQzFPsDXXt098xqMRXNPcdB@mail.gmail.com" + type="cite"> + <pre wrap="">What we do need is a forum that matches our needs; actually pretty +basic, but maybe for having good admin features, excellent +hackability, extensability, being well documented, having a nice +community of developers around it. And, provided we're in the free +software thing, we want to be able to share changes as well (would it +be only through our own community) without worrying. + +So, requirement #1: open source license (as in <a class="moz-txt-link-freetext" href="http://opensource.org/">http://opensource.org/</a> ). + +[...] + +Romain + </pre> +</blockquote> +when it comes to forum engine choice there are many things important to +consider (in particular if we are optimistic enough to consider it +could grow with Mageia future success).<br> +<br> +Security is one of them.<br> +<br> +If the forum is supposed to grow we must have something properly +working under rather high load... than can involve a separate server +for database (or even something stronger) that can also involve a forum +engine that proved it's ability to survive high loads (and the biggest +in <a class="moz-txt-link-freetext" href="http://www.big-boards.com">http://www.big-boards.com</a> runs phpBB3).<br> +<br> +Very *very* important if we want to be able to deal with trolls and +forum users experience : we must have moderation needs being well +addressed (global topic management with topics splitting and merging, +easy messages management (editing, suppressing, moving... hiding ?), +easy user management including things like temporary moderation of +messages to calm down trolls and other useful thing like detection of +multiple accounts creation, temporary or definitive <span + id="result_box" class="short_text"><span + style="background-color: rgb(230, 236, 249); color: rgb(0, 0, 0);" + title="">banishment, ability to give extended rights to "special" +people (dev, bug squad, doc writers, </span></span>technical support...)<br> +<br> +If we want to provide a good user experience we must have something +that provide a templating system easy to understand and to play with.<br> +<br> +Then there are administration features (bot management, forum +structure, fine grained access control and tuning)<br> +<br> +And obviously hackability is important to allow things like SSO and +other cool things (perhaps nice RSS features ? Mailing Lists connection +? Button available to Technical support team and moderators allowing to +send an alert on Cauldron list if a post can be interresting for devs ? +Bugzilla connection ?)<br> +<br> +Something very secure that cannot do the job or that will make +moderators life a hell and user experience a pain is not the ideal +forum engine imho<br> +<br> +All this parameters (and others less important) need to be taken in +account and the first people whom i would listen to are future +administrators and moderators... because they will suffer with it every +day... and beacause the quality of their work and attitude toward forum +users will be the first thing likely to attract people and give a good +reputation to Mageia community :)<br> +<br> +my2cents<br> +<br> +Maât<br> +<br> +<br> +</body> +</html> diff --git a/zarb-ml/mageia-dev/attachments/20100927/e7007c74/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/e7007c74/attachment.html new file mode 100644 index 000000000..2c5544412 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/e7007c74/attachment.html @@ -0,0 +1,151 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> +<html> +<head> + <meta content="text/html; charset=ISO-8859-1" + http-equiv="Content-Type"> +</head> +<body text="#000000" bgcolor="#ffffff"> +Le 27/09/2010 10:02, Romain d'Alverny a écrit : +<blockquote + cite="mid:AANLkTinN0Z63ixrr6XvpryQzFPsDXXt098xqMRXNPcdB@mail.gmail.com" + type="cite"> + <pre wrap="">Hi, + +On Mon, Sep 27, 2010 at 08:19, Tux99 <a class="moz-txt-link-rfc2396E" href="mailto:tux99-mga@uridium.org"><tux99-mga@uridium.org></a> wrote: + </pre> + <blockquote type="cite"> + <pre wrap=""> +I did a quick comparison of the most common forum software packages +(both commercial and FOSS) from a vulnerability point of view. + +I'm subscribed to the well known (every sysadmin that takes his/her job +seriously is subscribed to it) weekly SANS "@RISK: The Consensus +Security Alert" newsletter since 2000, so I have an mbox archive file +that contains almost 11 years worth of weekly alerts of software +vulnerabilities. + +A quick an easy way that I have used before to assess the vulnerability +of any software is to do a simple grep of the software name in this mbox +file and count the times that software gets mentioned. While this is not +100% scientific it gives a good approximation of the amount of +vulnerabilities a particular software has suffered from. + </pre> + </blockquote> + <pre wrap=""> +Indeed. It's interesting. But ranking only by the disclosed number of +vulnerabilities in the past does not assess what will be in the +future. It's not enough. + +What would be an additional important figure is, how long has it been +for each vulnerability to be fixed; how many users each has had, etc. + +Plus, what type of vulnerability. Plus, for what branch of the +software (I guess, for instance, phpBB 2.x and 3.x are a bit +different). + </pre> +</blockquote> +Hi,<br> +<br> +phpbb2 and phpbb3 share very few lines of code afaik<br> +<br> +And statistics are enough to explain :<br> +<br> +phpBB2: 38 advisories (27 vuln) 0% unpatched<br> +<a class="moz-txt-link-freetext" href="http://secunia.com/advisories/product/463/">http://secunia.com/advisories/product/463/</a><br> +<br> +9% highly critical, 34% moderate, 49% low, 9% not<br> +<br> +phpBB2 is/was a well known security nightmare :o)<br> +<br> +----<br> +<br> +fudForum: 2 advisories (2 vuln) 0% unpatched<br> +<a class="moz-txt-link-freetext" href="http://secunia.com/advisories/product/5530/">http://secunia.com/advisories/product/5530/</a><br> +<br> +50% highly critical, 50% moderate<br> +<br> +The critical one allowing system access :o)<br> +<br> +----<br> +<br> +phpBB3: 4 advisories (5 vuln) 0% unpatched<br> +<a class="moz-txt-link-freetext" href="http://secunia.com/advisories/product/17998/">http://secunia.com/advisories/product/17998/</a><br> +<br> +0% highly critical, 25 % moderate, 75% low<br> +<br> +---- <br> +<br> +I crearly consider phpBB3 not less secure than fudForum can be :)<br> +<br> +<br> +<blockquote + cite="mid:AANLkTinN0Z63ixrr6XvpryQzFPsDXXt098xqMRXNPcdB@mail.gmail.com" + type="cite"> + <pre wrap="">What we do need is a forum that matches our needs; actually pretty +basic, but maybe for having good admin features, excellent +hackability, extensability, being well documented, having a nice +community of developers around it. And, provided we're in the free +software thing, we want to be able to share changes as well (would it +be only through our own community) without worrying. + +So, requirement #1: open source license (as in <a class="moz-txt-link-freetext" href="http://opensource.org/">http://opensource.org/</a> ). + +[...] + +Romain + </pre> +</blockquote> +when it comes to forum engine choice there are many things important to +consider (in particular if we are optimistic enough to consider it +could grow with Mageia future success).<br> +<br> +Security is one of them.<br> +<br> +If the forum is supposed to grow we must have something properly +working under rather high load... than can involve a separate server +for database (or even something stronger) that can also involve a forum +engine that proved it's ability to survive high loads (and the biggest +in <a class="moz-txt-link-freetext" href="http://www.big-boards.com">http://www.big-boards.com</a> runs phpBB3).<br> +<br> +Very *very* important if we want to be able to deal with trolls and +forum users experience : we must have moderation needs being well +addressed (global topic management with topics splitting and merging, +easy messages management (editing, suppressing, moving... hiding ?), +easy user management including things like temporary moderation of +messages to calm down trolls and other useful thing like detection of +multiple accounts creation, temporary or definitive <span + id="result_box" class="short_text"><span + style="background-color: rgb(230, 236, 249); color: rgb(0, 0, 0);" + title="">banishment, ability to give extended rights to "special" +people (dev, bug squad, doc writers, </span></span>technical support...)<br> +<br> +If we want to provide a good user experience we must have something +that provide a templating system easy to understand and to play with.<br> +<br> +Then there are administration features (bot management, forum +structure, fine grained access control and tuning)<br> +<br> +And obviously hackability is important to allow things like SSO and +other cool things (perhaps nice RSS features ? Mailing Lists connection +? Button available to Technical support team and moderators allowing to +send an alert on Cauldron list if a post can be interresting for devs ? +Bugzilla connection ?)<br> +<br> +Something very secure that cannot do the job or that will make +moderators life a hell and user experience a pain is not the ideal +forum engine imho<br> +<br> +All this parameters (and others less important) need to be taken in +account and the first people whom i would listen to are future +administrators and moderators... because they will suffer with it every +day... and beacause the quality of their work and attitude toward forum +users will be the first thing likely to attract people and give a good +reputation to Mageia community :)<br> +<br> +my2cents<br> +<br> +Maât<br> +<br> +<br> +</body> +</html> diff --git a/zarb-ml/mageia-dev/attachments/20100927/ffb55fde/attachment-0001.html b/zarb-ml/mageia-dev/attachments/20100927/ffb55fde/attachment-0001.html new file mode 100644 index 000000000..15930e992 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/ffb55fde/attachment-0001.html @@ -0,0 +1,15 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"> +<html><head><meta name="qrichtext" content="1" /><style type="text/css"> +p, li { white-space: pre-wrap; } +</style></head><body style=" font-family:'Serif'; font-size:10pt; font-weight:400; font-style:normal;"> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Le lundi 27 septembre 2010, Gustavo Ariel Giampaoli a écrit :</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > Actually drakx has the infrastucture in place in order to upgrade</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > another distro (eg: connectiva, older fedora)</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> Thank you very much, Thierry. I didn't know that.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">+1</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Thanks one more time.</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">JPB</p></body></html>
\ No newline at end of file diff --git a/zarb-ml/mageia-dev/attachments/20100927/ffb55fde/attachment.html b/zarb-ml/mageia-dev/attachments/20100927/ffb55fde/attachment.html new file mode 100644 index 000000000..15930e992 --- /dev/null +++ b/zarb-ml/mageia-dev/attachments/20100927/ffb55fde/attachment.html @@ -0,0 +1,15 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"> +<html><head><meta name="qrichtext" content="1" /><style type="text/css"> +p, li { white-space: pre-wrap; } +</style></head><body style=" font-family:'Serif'; font-size:10pt; font-weight:400; font-style:normal;"> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Le lundi 27 septembre 2010, Gustavo Ariel Giampaoli a écrit :</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > Actually drakx has the infrastucture in place in order to upgrade</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> > another distro (eg: connectiva, older fedora)</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> Thank you very much, Thierry. I didn't know that.</p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">+1</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Thanks one more time.</p> +<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"></p> +<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">JPB</p></body></html>
\ No newline at end of file |