[Savannah-cvs] [Bzr] (edit) Update bzr status

[Beuc]

??changed:
-Migration from sftp:// to bzr+ssh://
-====================================
Principles
==========

??changed:
-Consequently we will not offer both sftp: and bzr+ssh: at the same time, as
-the combination of both would allow users to run arbitrary commands on the
-server through commit hooks, in effect getting local access.
-
-At a point we may move to bzr+ssh completely, but this requires moving all
-the projects at once, and making sure they can create the directory layouts
-they need through our web interface. Currently, there is not enough incentive,
-or time, to do so. In particular it seems server-side commit hook'ing is
-supported, but there are few actual server-side commit hooks.
Consequently we only offer bzr+ssh:, so that users cannot run arbitrary 
commands on
the server through commit hooks, in effect getting local access.

--removed:
-So it is a bit more complicated than just installing a piece of software on
-our servers.
-
- * Source: http://savannah.gnu.org/support/?107077
-
- * Building bzr from source: 
http://lists.gnu.org/archive/html/savannah-hackers-public/2010-05/msg00013.html
-
-

??changed:
- * Warn all Savannah project admins who use bzr about the planned migration 
from sftp:// to bzr+ssh://, with a date for the switch
- * Install e-mail notifications for commits (anything better than 
bzr-hookless-email?  Cf. /etc/cron.hourly/bzr_commit_mail_notification in 
'sftp')
- * Adapt bzr repository instanciation in Savane 
(http://savannah.gnu.org/projects/savane-cleanup/)
- * Move Apache2 virtual host from sftp to vcs-noshell
- * Update documentation in project "administration"'s bzr repository
- * Sync repositories from sftp to vcs-noshell
- * Disable bzr at sftp
-
-DNS: current "bzr.savannah.gnu.org" points to the 'sftp' VM.  
"bzr2.savannah.gnu.org" points to the 'vcs-noshell' VM, which is the one we'll 
use after the migration.
-
 * Install loggerhead

loggerhead
==========

loggerhead was previously installed at Savannah, but was disabled after a while.
Here are points we'd like to get feedback about:

* stability: loggerhead tended to produce Apache proxy errors (probably because 
it crashed), how to have it running for months?

* activity: last release 0.17 is from 2009-08, that's old

* code to use: there's been commits since the last release - do we need to use 
the trunk?


--
forwarded from http://savannah.gnu.org/maintenance/address@hidden/maintenance