Arne Goedeke | 22 Aug 15:30

Re: monger xenofarm (was: Re: Does pike support JSON?)

It certainly is a bad idea to compile and test every module uploaded to 
monger automatically. Still it would be great to have some testing for 
monger modules, even if someone has to go through them and decide if the 
author/changes are trustworthy. Not sure how exactly that could be done or 
who could be doing that.

those who know xenofarm: is it possible to limit testing to certain 
modules/versions on the client side?

On Fri, 22 Aug 2008, Peter Bortas @ Pike  importmöte för mailinglistan wrote:

> Now please figure out a security model for that...
>
>

Re: monger xenofarm (was: Re: Does pike support JSON?)

>those who know xenofarm: is it possible to limit testing to certain 
>modules/versions on the client side?

The only configuration you can do is which projects should be tested
and how they should be run. You can either make each module a project
and have a project config per module. Or you could make bundles of
modules on the monger server and separate them into trusted/untrusted
or something, add a wrapper Makefile that compiles them separately and
archives the results in a result package.

Martin Bähr | 22 Aug 15:54

Re: monger xenofarm (was: Re: Does pike support JSON?)

On Fri, Aug 22, 2008 at 03:30:37PM +0200, Arne Goedeke wrote:
> those who know xenofarm: is it possible to limit testing to certain 
> modules/versions on the client side?

take a look at the client code. it just runs a command in the downloaded
directory.

that command can be a script that controls arguments to limit
modules/versions/whatever.

i would limit by author, and verify the author with a signature.
the key to verify the signature would have to be added by each xenofarm
client manually. that way you would limit the testing simply to those
for which you have added a key in your configuration.

key-checking could also be added to monger, then xenofarm handling would
be even easier, as it would just be a script to invoke the right monger
build command.

greetings, martin.
--

-- 
cooperative communication with sTeam      -     caudium, pike, roxen and unix
offering: programming, training and administration   -  anywhere in the world
--
pike programmer   working in china                      community.gotpike.org
unix system-      iaeste.(tuwien.ac|or).at                     open-steam.org
administrator     caudium.org                                    is.schon.org
Martin Bähr       http://www.iaeste.or.at/~mbaehr/

(Continue reading)


Gmane