From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id AC8671382EE for ; Tue, 5 Jul 2016 16:42:02 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 84CF6141D5; Tue, 5 Jul 2016 16:41:55 +0000 (UTC) Received: from omr-m007e.mx.aol.com (omr-m007e.mx.aol.com [204.29.186.9]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 8926414186 for ; Tue, 5 Jul 2016 16:41:54 +0000 (UTC) Received: from mtaout-aaj01.mx.aol.com (mtaout-aaj01.mx.aol.com [172.27.3.205]) by omr-m007e.mx.aol.com (Outbound Mail Relay) with ESMTP id 94D293800057 for ; Tue, 5 Jul 2016 12:41:53 -0400 (EDT) Received: from [192.168.1.52] (0x5b3139322e3136382e312e35325d [71.122.242.106]) by mtaout-aaj01.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id 2EC7038000090; Tue, 5 Jul 2016 12:41:53 -0400 (EDT) Subject: Re: [gentoo-dev] why is the security team running around p.masking packages To: gentoo-dev@lists.gentoo.org References: <4c319530-3c7c-e8e3-300d-c80c84cf6674@gentoo.org> <20160704234030.32bad9b5b2fb31f9a7d2ce73@gentoo.org> <42b9c46c-634c-a23c-22dd-4fa7dff55ef2@verizon.net> <583270a0-c779-8f0d-61c9-d36555a3adab@gmail.com> From: james Message-ID: <8c95453c-4adb-e473-5234-c8a304261665@verizon.net> Date: Tue, 5 Jul 2016 11:53:49 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit x-aol-global-disposition: G x-aol-sid: 3039ac1b03cd577be3514917 X-AOL-IP: 71.122.242.106 X-Archives-Salt: 847e1785-5a85-4c76-aa7f-4f6fe95760c1 X-Archives-Hash: 0dc6fe1b66885d1c7adc6de47d23426a On 07/05/2016 08:05 AM, Rich Freeman wrote: > On Tue, Jul 5, 2016 at 8:58 AM, Alan McKinnon wrote: >> Big difference. Gentoo's tree is not hosted on github, and infra isn't >> going to put an attic equivalent there. >> > > Either way admittedly git makes finding deleted files a bit of a pain. > However, it is certainly possible: > https://stackoverflow.com/questions/7203515/git-how-to-search-for-a-deleted-file-in-the-project-commit-history > OK, but with the attic, you can browse by category, read descriptions to get an idea of what is available. Correct me if I'm wrong, but with github, you have to know the name of the packages and that is a limitation when looking back. The attic just makes browsing and retrieval a snap, imho. > I think this is just one more reason that "power users" should > seriously consider just syncing from git. It is really useful to have > a git repo, and once you have one, it is going to be a lot faster to > just use it as your daily driver since it syncs so quickly/etc OK, I'll give that a whirl. But if I want to go casually looking at old codes, removed from the tree, that I have never used before, but are vaguely referred to in some old post, how do I do that with git? For example, I have conversed on numerous occasions with the old physics professor that wrote sys-cluster/wulfware. We have prospectives that are similar. Although he does not actively, at this time, support wulfware, he has architected a more conservative approach to HPC than many of the current, more-prominent projects. He has quite a proposal for me to move the code forward, should I want to take it over. Yet, a tree-cleaner probably has marked it for removal. Old code is often wonderful, ymmv. It's old school, 'C' centric and there are many other old useful codes. Not that this reference is any big deal, but there is a lot more than me out there with similar beliefs. It's exciting to see something old (PVM) return in part as a new project (OrangeFS). Oh, OrangeFS is all the new-rage with some HPC folks and it making a return via kernel-4.6 (I believe). So, I guess I'll read up and try to set up my own git repo, so I do not have to delete files as they are pruned from the official portage tree. That is what you are suggesting, right? In a way I have been doing that manually by syncing up a separate /usr/portage/distfiles/ and putting lots of codes into /usr/local/portage/. I would hope, some devs would put thought into this and formalize a few methods and a document so that in effect, I can manage my own gentoo attic, going forward, and likewise others could too, or a partial archive, according to their interests. Granted my ignorance of git is a big factor here, so do not be shy to suggest reading materials.... Often I read docs on git and well, I might as well be reading Hieroglyphics. It's easier to follow examples, imho, and that makes support more straight forward and consistent should others need to retrieve old ebuilds and source files. Thanks for the info and ideas. James