From esr at snark.thyrsus.com Tue Nov 17 14:57:51 2015
From: esr at snark.thyrsus.com (Eric S. Raymond)
Date: Tue, 17 Nov 2015 09:57:51 -0500 (EST)
Subject: First external comment on the NTPsec code
Message-ID: <20151117145751.B6E51C00A6@snark.thyrsus.com>
Our first external comment on the NTPsec code is pretty encouraging.
https://github.com/ntpsec/ntpsec/commit/e5d92396b150c639a0f2ebec8192d4290f2e6999#commitcomment-14433419
Somre guy noticed that my change to not depend on LLONG/ULLONG was
slightly (and harmlessly) wrong.
--
Eric S. Raymond
The two pillars of `political correctness' are,
a) willful ignorance, and
b) a steadfast refusal to face the truth
-- George MacDonald Fraser
From fallenpegasus at gmail.com Tue Nov 17 16:40:56 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Tue, 17 Nov 2015 16:40:56 +0000
Subject: First external comment on the NTPsec code
In-Reply-To: <20151117145751.B6E51C00A6@snark.thyrsus.com>
References: <20151117145751.B6E51C00A6@snark.thyrsus.com>
Message-ID:
Excellent. Hopefully the first of many.
Our GitHub org account asks people to use the GitLab forge service, but
GitHub is so central to most of "the kids these days" in open source
driveby work that we will just have to keep monitoring it.
..m
On Tue, Nov 17, 2015 at 6:57 AM Eric S. Raymond
wrote:
> Our first external comment on the NTPsec code is pretty encouraging.
>
>
> https://github.com/ntpsec/ntpsec/commit/e5d92396b150c639a0f2ebec8192d4290f2e6999#commitcomment-14433419
>
> Somre guy noticed that my change to not depend on LLONG/ULLONG was
> slightly (and harmlessly) wrong.
> --
> Eric S. Raymond
>
> The two pillars of `political correctness' are,
> a) willful ignorance, and
> b) a steadfast refusal to face the truth
> -- George MacDonald Fraser
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From joel at rtems.org Tue Nov 17 17:47:52 2015
From: joel at rtems.org (Joel Sherrill)
Date: Tue, 17 Nov 2015 11:47:52 -0600
Subject: First external comment on the NTPsec code
In-Reply-To:
References: <20151117145751.B6E51C00A6@snark.thyrsus.com>
Message-ID:
FWIW gmail thinks Mark is phishing me. Not sure what caused that.
This message may not have been sent by: fallenpegasus at gmail.com Learn more
Report phishing
On Tue, Nov 17, 2015 at 10:40 AM, Mark Atwood
wrote:
> Excellent. Hopefully the first of many.
>
> Our GitHub org account asks people to use the GitLab forge service, but
> GitHub is so central to most of "the kids these days" in open source
> driveby work that we will just have to keep monitoring it.
>
> ..m
>
> On Tue, Nov 17, 2015 at 6:57 AM Eric S. Raymond
> wrote:
>
>> Our first external comment on the NTPsec code is pretty encouraging.
>>
>>
>> https://github.com/ntpsec/ntpsec/commit/e5d92396b150c639a0f2ebec8192d4290f2e6999#commitcomment-14433419
>>
>> Somre guy noticed that my change to not depend on LLONG/ULLONG was
>> slightly (and harmlessly) wrong.
>> --
>> Eric S. Raymond
>>
>> The two pillars of `political correctness' are,
>> a) willful ignorance, and
>> b) a steadfast refusal to face the truth
>> -- George MacDonald Fraser
>> _______________________________________________
>> devel mailing list
>> devel at ntpsec.org
>> http://lists.ntpsec.org/mailman/listinfo/devel
>>
>
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From esr at snark.thyrsus.com Tue Nov 17 18:02:51 2015
From: esr at snark.thyrsus.com (Eric S. Raymond)
Date: Tue, 17 Nov 2015 13:02:51 -0500 (EST)
Subject: Proposed technical roadmap
Message-ID: <20151117180251.6B769C00A6@snark.thyrsus.com>
Here is how I see the road towards 1.0.
In laying out this plan, I'm going to make the optimistic assumption
that nobody comes back at us with a report that we've screwed up
something complicated and have to scramble to recover.
On that assumption, I think we're looking at six to eight weeks to 1.0,
with two or maybe three 0.9.x betas in between. For funding-politics
reasons, six would be better than eight - CII wants to see velocity,
and we ought to be able to deliver it.
The core C codebase (that is, excluding tests) appears to be in good
shape. Putting it on a serious reduction diet seems to have done it no
real harm, and quite a lot of good in the maintainability department.
I have no real worries about it other than that one unreproduced
report of an ntpdig coredump from Hal.
Other than currently embargoed vuln fixes, he only core C change that
I think really needs to land before 1.0 is Chris's rewrite of the
worker code for handling getaddrinfo() requests. That will fix an
annoying bug that we inherited from Classic and make us look good.
The unit tests are a different matter. It's *bad* that we shipped
with only 20% of them working. That needs to be fixed ASAP and
should in my opinion be top priority for 0.9.1.
Myself, I think I badly need to get working on TESTFRAME and
concentrate on it. It's absolutely central to our strategy and
positioning that the code be able to demonstrate replicability and
end-to-end correctness.
That means I need to be able to offload everything but five-alarm
vuln responses onto other people. It's time for that anyway; it's
not really long-term healthy for just one person to be doing 85%
of the coding, it means others are not developing enough implicit
knowledge to sustain the project if that one person gets hit by
a truck.
So start spelunking, people! And thank your fortunate stars that
I sandblasted most of the accreted historical crud off the code
before you had to look at much of it. Later in this note I'll
list some get-to-know-the-C-code tasks.
Here's how I think the pre-1.0 tesks naturally break down. Mark
may correct my priority assessments...
Daniel Franke:
1. Vuln response, embargo tracking. Your #1 job is to make sure
that we look *golden* to InfoSec people, merging solid vuln fixes
to the main repo the day they come out of embargo.
2. Explore. You are at or near the top of my list of people most
qualified to get intimate with the time-sync algorithms. A
prerequisite is that you become comfortable with the codebase
as it is.
Chris Johns:
1. Asynch worker code for getaddrinfo bug. Should land in a beta.
2. Windows port work. Port not required for 1.0 - take your time,
get it right, no kludges.
3. Explore. You are one of the people I am counting on to get
fluent with the codebase and do things that surprise me.
Hal Murray:
1. Live testing. You are going to be our most important reality
check until TESTFRAME lands and probably after it as well.
2. Bring the ports to older BSDs up to snuff. Not absolutely
necessary for 1.0 but would be nice.
3. Watch what Classic is doing. Alert us of the need to cross-port
new bug and security fixes.
4. Feature vs. test status matrix.
Me:
1. TESTFRAME. I should be able to finish at least capture mode before 1.0.
2. Replay branch construction (gated on one of Amar's tasks).
Joel Sherrill:
You don't have a record yet, so I have no idea what you ought to
be doing. Maybe you can come up with something.
Amar Takhar:
1. Make all the unit tests work.
2. Backport the waf port so it works at the fork point (needed for
replay branch construction).
If I've missed anything, or any of you has any objection to these
assignments, speak up so we can allocate more efficiently. I encourage
everyone to reply with time and difficulty assessments.
Explanation of replay branch construction: Right now, due to
occasional build breakage and general autoconf horribleness,
running bisections all the way back to the fork point is hard.
I want to fix that - making sure we can easily isolate bugs on
our backtrail is the best anti-Murphy medicine against actually
*having* bugs on our backtrail.
Thus, I want Amar to start a new branch from the fork point that
builds the codebase as it then existed with waf. I will then replay
the post-fork commit history onto the branch; I expect this to be
about 4 or 5 days of hard slogging.
At the end of it we'll have a new master branch with no build breaks
that can be bisected fast all the way back to its zero point. Among
other good things, this will give us the ability to say of inherited
bugs "We didn't do it!" and *prove* that.
Now, for intrepid codebase explorers out there, some C tasks that I am not
planning to do because TESTFRAME:
* seccomp sandboxing fails to build under Ubuntu due to some confusion
in the Linux headers. Investigate.
* systime.c needs patching to put ntpdsim's hook back in place. Deferred
until the ntpdsim build is fixed.
* There is a mess around the symbols NO_MAIN_ALLOWED, BUILD_AS_LIB, and
LIBNTP_C that needs to be refactored. ntpd should *always* be built as
a library linked to a main module, these guard symbols should go away.
* Use the snprintb in util/ntptime for flag words like flash
codes and use it systematically to make reports more readable.
--
Eric S. Raymond
The two pillars of `political correctness' are,
a) willful ignorance, and
b) a steadfast refusal to face the truth
-- George MacDonald Fraser
From fallenpegasus at gmail.com Tue Nov 17 18:46:01 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Tue, 17 Nov 2015 18:46:01 +0000
Subject: Proposed technical roadmap
In-Reply-To: <20151117180251.6B769C00A6@snark.thyrsus.com>
References: <20151117180251.6B769C00A6@snark.thyrsus.com>
Message-ID:
I concur with this plan.
Everyone, as you explore in the code, if you whitebox find potential
issues, please put them in the gitlab issue tracker, and also post them to
devel at ntpsec.org. If the fix would be a pointfix and very low risk, we
will fix immediately. Otherwise, it will wait until bisect and testframe
work.
Also, with any luck, we will be getting comments and merge request
contributions on GitLab and GitHub. I'm not going to preassign reviewers,
so please just pick them up as they come in, and ping them over to who
makes the most sense to look at them. Again, if they are low risk
pointfixes, we will land them immediately, otherwise they wait until after
bisect and testframe.
I have a followup to write about our outstanding embargos. Expect it soon.
I will also keep working on formalized release and version polices to
write into the hacking guide, and more work on infosec security policy
docs, which are currently in gdocs, and will migrate into our docs and
website repos.
..m
On Tue, Nov 17, 2015 at 10:02 AM Eric S. Raymond
wrote:
> Here is how I see the road towards 1.0.
>
> In laying out this plan, I'm going to make the optimistic assumption
> that nobody comes back at us with a report that we've screwed up
> something complicated and have to scramble to recover.
>
> On that assumption, I think we're looking at six to eight weeks to 1.0,
> with two or maybe three 0.9.x betas in between. For funding-politics
> reasons, six would be better than eight - CII wants to see velocity,
> and we ought to be able to deliver it.
>
> The core C codebase (that is, excluding tests) appears to be in good
> shape. Putting it on a serious reduction diet seems to have done it no
> real harm, and quite a lot of good in the maintainability department.
> I have no real worries about it other than that one unreproduced
> report of an ntpdig coredump from Hal.
>
> Other than currently embargoed vuln fixes, he only core C change that
> I think really needs to land before 1.0 is Chris's rewrite of the
> worker code for handling getaddrinfo() requests. That will fix an
> annoying bug that we inherited from Classic and make us look good.
>
> The unit tests are a different matter. It's *bad* that we shipped
> with only 20% of them working. That needs to be fixed ASAP and
> should in my opinion be top priority for 0.9.1.
>
> Myself, I think I badly need to get working on TESTFRAME and
> concentrate on it. It's absolutely central to our strategy and
> positioning that the code be able to demonstrate replicability and
> end-to-end correctness.
>
> That means I need to be able to offload everything but five-alarm
> vuln responses onto other people. It's time for that anyway; it's
> not really long-term healthy for just one person to be doing 85%
> of the coding, it means others are not developing enough implicit
> knowledge to sustain the project if that one person gets hit by
> a truck.
>
> So start spelunking, people! And thank your fortunate stars that
> I sandblasted most of the accreted historical crud off the code
> before you had to look at much of it. Later in this note I'll
> list some get-to-know-the-C-code tasks.
>
> Here's how I think the pre-1.0 tesks naturally break down. Mark
> may correct my priority assessments...
>
> Daniel Franke:
> 1. Vuln response, embargo tracking. Your #1 job is to make sure
> that we look *golden* to InfoSec people, merging solid vuln fixes
> to the main repo the day they come out of embargo.
> 2. Explore. You are at or near the top of my list of people most
> qualified to get intimate with the time-sync algorithms. A
> prerequisite is that you become comfortable with the codebase
> as it is.
>
> Chris Johns:
> 1. Asynch worker code for getaddrinfo bug. Should land in a beta.
> 2. Windows port work. Port not required for 1.0 - take your time,
> get it right, no kludges.
> 3. Explore. You are one of the people I am counting on to get
> fluent with the codebase and do things that surprise me.
>
> Hal Murray:
> 1. Live testing. You are going to be our most important reality
> check until TESTFRAME lands and probably after it as well.
> 2. Bring the ports to older BSDs up to snuff. Not absolutely
> necessary for 1.0 but would be nice.
> 3. Watch what Classic is doing. Alert us of the need to cross-port
> new bug and security fixes.
> 4. Feature vs. test status matrix.
>
> Me:
> 1. TESTFRAME. I should be able to finish at least capture mode before
> 1.0.
> 2. Replay branch construction (gated on one of Amar's tasks).
>
> Joel Sherrill:
> You don't have a record yet, so I have no idea what you ought to
> be doing. Maybe you can come up with something.
>
> Amar Takhar:
> 1. Make all the unit tests work.
> 2. Backport the waf port so it works at the fork point (needed for
> replay branch construction).
>
> If I've missed anything, or any of you has any objection to these
> assignments, speak up so we can allocate more efficiently. I encourage
> everyone to reply with time and difficulty assessments.
>
> Explanation of replay branch construction: Right now, due to
> occasional build breakage and general autoconf horribleness,
> running bisections all the way back to the fork point is hard.
>
> I want to fix that - making sure we can easily isolate bugs on
> our backtrail is the best anti-Murphy medicine against actually
> *having* bugs on our backtrail.
>
> Thus, I want Amar to start a new branch from the fork point that
> builds the codebase as it then existed with waf. I will then replay
> the post-fork commit history onto the branch; I expect this to be
> about 4 or 5 days of hard slogging.
>
> At the end of it we'll have a new master branch with no build breaks
> that can be bisected fast all the way back to its zero point. Among
> other good things, this will give us the ability to say of inherited
> bugs "We didn't do it!" and *prove* that.
>
> Now, for intrepid codebase explorers out there, some C tasks that I am not
> planning to do because TESTFRAME:
>
> * seccomp sandboxing fails to build under Ubuntu due to some confusion
> in the Linux headers. Investigate.
>
> * systime.c needs patching to put ntpdsim's hook back in place. Deferred
> until the ntpdsim build is fixed.
>
> * There is a mess around the symbols NO_MAIN_ALLOWED, BUILD_AS_LIB, and
> LIBNTP_C that needs to be refactored. ntpd should *always* be built as
> a library linked to a main module, these guard symbols should go away.
>
> * Use the snprintb in util/ntptime for flag words like flash
> codes and use it systematically to make reports more readable.
> --
> Eric S. Raymond
>
> The two pillars of `political correctness' are,
> a) willful ignorance, and
> b) a steadfast refusal to face the truth
> -- George MacDonald Fraser
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From esr at snark.thyrsus.com Tue Nov 17 18:46:44 2015
From: esr at snark.thyrsus.com (Eric S. Raymond)
Date: Tue, 17 Nov 2015 13:46:44 -0500 (EST)
Subject: Proposed technical roadmap - addendum
Message-ID: <20151117184644.17268C00A6@snark.thyrsus.com>
I left out someone...
Mark Atwood:
1. Write up the release procedure in devel/hacking.txt
2. Decide timing of our betas and 1.0.
Even leaving out that release scheduling is entangled with the
external politics that is Mark's PM job, I don't want to have to
think or worry about that end myself while I'm trying to get
TESTFRAME working.
Of course Mark Atwood wearing his PM hat has to approve anything
I suggest about allocating Mark Atwood the dev's time... :-)
My scope estimate for TESTFRAME is roughly 90 days. However, this is
one of the unusual cases in which things could break so it lands
*faster* than I expect. The capture side is relatively simple
and easy to estimate; the replay side is where the uncertainty is,
and it's uncertain in both directions.
My scope estimate for constructing a replay branch is, as previously
noted, 4-5 (grueling) days. I'm prepared for this to interrupt
TESTFRAME, but ideally nothing else should.
--
Eric S. Raymond
From hmurray at megapathdsl.net Tue Nov 17 20:09:47 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Tue, 17 Nov 2015 12:09:47 -0800
Subject: Current status
Message-ID: <20151117200947.0CDB5406060@ip-64-139-1-69.sjc.megapath.net>
Could somebody please give me a review of the current status. Thanks.
I assume the release happened. Was there an official PR?
(There is nothing in the archives for the announce list)
Has the cert stuff been sorted out?
I've lost track of what is where...
The old repository is gone
fatal: '/data/git/ntpsec.git' does not appear to be a git repository
How many URLs do I need to keep track of of what's going on?
I assume I can get to everything by starting at https://ntpsec.org, but it's
too big to search each time I want to find something.
(It says Untrusted, so I assume the answer to my cert question is not-yet).
Mailing lists are at:
https://lists.ntpsec.org/mailman/listinfo/
Bugs are at:
https://gitlab.com/NTPsec/ntpsec/issues
I clone the code from:
git at gitlab.com:NTPsec/ntpsec.git
There are various forms of "URLs" similar to that. Do some work better than
others? Why should I use one rather than another?
Web pages for ntpsec.org are at:
ssh://oldtimer.ntpsec.org/data/git/www-asciidoc.git
Is there anything else that I'm likely to need more than occasionally?
--
These are my opinions. I hate spam.
From verm at darkbeer.org Tue Nov 17 20:15:44 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Tue, 17 Nov 2015 20:15:44 +0000
Subject: Current status
In-Reply-To: <20151117200947.0CDB5406060@ip-64-139-1-69.sjc.megapath.net>
References: <20151117200947.0CDB5406060@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151117201544.GA62503@darkbeer.org>
On 2015-11-17 12:09 -0800, Hal Murray wrote:
>
> Could somebody please give me a review of the current status. Thanks.
>
> I assume the release happened. Was there an official PR?
> (There is nothing in the archives for the announce list)
>
> Has the cert stuff been sorted out?
We have a real cert there are issues with www.ntpsec.org which will be sorted
once we move the hosting from Gitlab to our infrastructure.
> The old repository is gone
> fatal: '/data/git/ntpsec.git' does not appear to be a git repository
Yes, Mark asked for this to be moved.
> How many URLs do I need to keep track of of what's going on?
I am not sure. I think all we had on Github was the www site. So there is
Gitlab for the master repo and oldtimer for www.
> Mailing lists are at:
> https://lists.ntpsec.org/mailman/listinfo/
Correct.
> Bugs are at:
> https://gitlab.com/NTPsec/ntpsec/issues
Yep.
> I clone the code from:
> git at gitlab.com:NTPsec/ntpsec.git
> There are various forms of "URLs" similar to that. Do some work better than
> others? Why should I use one rather than another?
This is via SSH which is what you will need in order to push I do not believe
there are any other useful URLs but someone may correct me.
> Web pages for ntpsec.org are at:
> ssh://oldtimer.ntpsec.org/data/git/www-asciidoc.git
>
> Is there anything else that I'm likely to need more than occasionally?
I don't think so this seems correct.
Amar.
From fallenpegasus at gmail.com Tue Nov 17 21:44:34 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Tue, 17 Nov 2015 21:44:34 +0000
Subject: Current status
In-Reply-To: <20151117200947.0CDB5406060@ip-64-139-1-69.sjc.megapath.net>
References: <20151117200947.0CDB5406060@ip-64-139-1-69.sjc.megapath.net>
Message-ID:
On Tue, Nov 17, 2015 at 12:09 PM Hal Murray wrote:
>
> Could somebody please give me a review of the current status. Thanks.
>
> I assume the release happened. Was there an official PR?
> (There is nothing in the archives for the announce list)
>
It happened.
>
> Has the cert stuff been sorted out?
>
We have a cert.
Amar is moving the static website back to our infrastructure to fix an
issue with TLS and HTTP.
The only change to our workflow will be having a different origin for the
git repo that builds into the site.
I've lost track of what is where...
>
> The old repository is gone
> fatal: '/data/git/ntpsec.git' does not appear to be a git repository
>
It's gone.
The canonical repo is at git at gitlab.com:NTPsec/ntpsec.git
You have to give gitlab.com your ssh key so that it knows you are you to
allow pushes.
If you want to git over https instead of git over ssh, you can use
https://gitlab.com/NTPsec/ntpsec.git
but I advise against it.
> Mailing lists are at:
> https://lists.ntpsec.org/mailman/listinfo/
>
> Bugs are at:
> https://gitlab.com/NTPsec/ntpsec/issues
>
> I clone the code from:
> git at gitlab.com:NTPsec/ntpsec.git
>
That's all correct.
> There are various forms of "URLs" similar to that. Do some work better
> than
> others? Why should I use one rather than another?
>
> Web pages for ntpsec.org are at:
> ssh://oldtimer.ntpsec.org/data/git/www-asciidoc.git
>
> Is there anything else that I'm likely to need more than occasionally?
>
There is the buildbot status page as well.
..m
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From hmurray at megapathdsl.net Tue Nov 17 22:15:28 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Tue, 17 Nov 2015 14:15:28 -0800
Subject: Current status
In-Reply-To: Message from Mark Atwood of "Tue,
17 Nov 2015 21:44:34 GMT."
Message-ID: <20151117221528.29A28406060@ip-64-139-1-69.sjc.megapath.net>
Thanks.
> The only change to our workflow will be having a different origin for the
> git repo that builds into the site.
Will buildbot be watching for pushes to gitlab?
> There is the buildbot status page as well.
I never got any of the URLs from buildbot email to work.
There are several persistent failure reports for distros that work for me. I
assume they should be simple to fix, probably something needs to be installed.
--
These are my opinions. I hate spam.
From verm at darkbeer.org Tue Nov 17 22:19:48 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Tue, 17 Nov 2015 22:19:48 +0000
Subject: Current status
In-Reply-To: <20151117221528.29A28406060@ip-64-139-1-69.sjc.megapath.net>
References:
<20151117221528.29A28406060@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151117221948.GA64231@darkbeer.org>
On 2015-11-17 14:15 -0800, Hal Murray wrote:
> Thanks.
>
> > The only change to our workflow will be having a different origin for the
> > git repo that builds into the site.
>
> Will buildbot be watching for pushes to gitlab?
Yes, working on that now I'll have it up and running tomorrow.
> > There is the buildbot status page as well.
>
> I never got any of the URLs from buildbot email to work.
Interesting, once I get it switched to Gitlab we can go over it again.
> There are several persistent failure reports for distros that work for me. I
> assume they should be simple to fix, probably something needs to be installed.
I'm planning on getting a lot more VMs up as soon as we find an alternate host.
Many of them are already completed here locally it's just a matter of uploading
them somewhere.
Amar.
From fallenpegasus at gmail.com Tue Nov 17 22:30:57 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Tue, 17 Nov 2015 22:30:57 +0000
Subject: Current status
In-Reply-To: <20151117221948.GA64231@darkbeer.org>
References:
<20151117221528.29A28406060@ip-64-139-1-69.sjc.megapath.net>
<20151117221948.GA64231@darkbeer.org>
Message-ID:
I'm working on getting that alternate host for our buildbot array.
The HP Cloud public openstack service is being discontinued in January.
On Tue, Nov 17, 2015 at 2:19 PM Amar Takhar wrote:
> On 2015-11-17 14:15 -0800, Hal Murray wrote:
> > Thanks.
> >
> > > The only change to our workflow will be having a different origin for
> the
> > > git repo that builds into the site.
> >
> > Will buildbot be watching for pushes to gitlab?
>
> Yes, working on that now I'll have it up and running tomorrow.
>
>
> > > There is the buildbot status page as well.
> >
> > I never got any of the URLs from buildbot email to work.
>
> Interesting, once I get it switched to Gitlab we can go over it again.
>
>
> > There are several persistent failure reports for distros that work for
> me. I
> > assume they should be simple to fix, probably something needs to be
> installed.
>
> I'm planning on getting a lot more VMs up as soon as we find an alternate
> host.
> Many of them are already completed here locally it's just a matter of
> uploading
> them somewhere.
>
>
> Amar.
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From esr at thyrsus.com Tue Nov 17 22:40:50 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Tue, 17 Nov 2015 17:40:50 -0500
Subject: Current status
In-Reply-To:
References: <20151117200947.0CDB5406060@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151117224050.GA12855@thyrsus.com>
Mark Atwood :
> There is the buildbot status page as well.
Should that be embedded on the website contacts page?
Note: I'm not going to do it. Website maintainance is one of the jobs
I've been trying to push away so I can concentrate on TESTFRAME.
--
Eric S. Raymond
From fallenpegasus at gmail.com Tue Nov 17 22:50:19 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Tue, 17 Nov 2015 22:50:19 +0000
Subject: Current status
In-Reply-To: <20151117224050.GA12855@thyrsus.com>
References: <20151117200947.0CDB5406060@ip-64-139-1-69.sjc.megapath.net>
<20151117224050.GA12855@thyrsus.com>
Message-ID:
I will put it in.
On Tue, Nov 17, 2015 at 2:40 PM Eric S. Raymond wrote:
> Mark Atwood :
> > There is the buildbot status page as well.
>
> Should that be embedded on the website contacts page?
>
> Note: I'm not going to do it. Website maintainance is one of the jobs
> I've been trying to push away so I can concentrate on TESTFRAME.
> --
> Eric S. Raymond
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From verm at darkbeer.org Tue Nov 17 22:56:56 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Tue, 17 Nov 2015 22:56:56 +0000
Subject: Current status
In-Reply-To:
References: <20151117200947.0CDB5406060@ip-64-139-1-69.sjc.megapath.net>
<20151117224050.GA12855@thyrsus.com>
Message-ID: <20151117225656.GA64981@darkbeer.org>
On 2015-11-17 22:50 +0000, Mark Atwood wrote:
> I will put it in.
Can you hold off? buildbot.ntpsec.org is still password protected.
I'll open it up tomorrow when I get the Gitlab hooks working properly.
I'll need to constantly reset it as part of that work it'd be nicer if users
weren't hitting it.
Amar.
From fallenpegasus at gmail.com Wed Nov 18 01:52:36 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Wed, 18 Nov 2015 01:52:36 +0000
Subject: Current status
In-Reply-To: <20151117225656.GA64981@darkbeer.org>
References: <20151117200947.0CDB5406060@ip-64-139-1-69.sjc.megapath.net>
<20151117224050.GA12855@thyrsus.com>
<20151117225656.GA64981@darkbeer.org>
Message-ID:
ok. let me know when the hooks are working.
On Tue, Nov 17, 2015, 2:56 PM Amar Takhar wrote:
> On 2015-11-17 22:50 +0000, Mark Atwood wrote:
> > I will put it in.
>
> Can you hold off? buildbot.ntpsec.org is still password protected.
>
> I'll open it up tomorrow when I get the Gitlab hooks working properly.
>
> I'll need to constantly reset it as part of that work it'd be nicer if
> users
> weren't hitting it.
>
>
> Amar.
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From verm at darkbeer.org Wed Nov 18 01:54:11 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Wed, 18 Nov 2015 01:54:11 +0000
Subject: Current status
In-Reply-To:
References: <20151117200947.0CDB5406060@ip-64-139-1-69.sjc.megapath.net>
<20151117224050.GA12855@thyrsus.com>
<20151117225656.GA64981@darkbeer.org>
Message-ID: <20151118015411.GA67339@darkbeer.org>
On 2015-11-18 01:52 +0000, Mark Atwood wrote:
> ok. let me know when the hooks are working.
I'll have it sorted tomorrow by midday.
Amar.
From esr at thyrsus.com Wed Nov 18 05:26:59 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 00:26:59 -0500
Subject: First resolved issue
Message-ID: <20151118052659.GA19726@thyrsus.com>
I had fluffed a modification of a display function in the ntptime code
in a minor way. A regular on my blog spotted the symptom. Now fixed.
Also, a concrete step towards TESTFRAME today; adjtime(2) calls are now
interceptable. Hal should live-test to make sure I didn't bust anything,
but this change seems pretty safe.
--
Eric S. Raymond
From hmurray at megapathdsl.net Wed Nov 18 12:34:38 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 18 Nov 2015 04:34:38 -0800
Subject: First resolved issue
In-Reply-To: Message from "Eric S. Raymond"
of "Wed, 18 Nov 2015 00:26:59 EST." <20151118052659.GA19726@thyrsus.com>
Message-ID: <20151118123438.5A25A406057@ip-64-139-1-69.sjc.megapath.net>
esr at thyrsus.com said:
> Hal should live-test to make sure I didn't bust anything, but this change
> seems pretty safe.
Seems OK.
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Wed Nov 18 12:41:11 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 18 Nov 2015 04:41:11 -0800
Subject: Tarballs
Message-ID: <20151118124111.5BC5C406057@ip-64-139-1-69.sjc.megapath.net>
Eric's blog has a URL for a tarball:
https://github.com/NTPsec/ntpsec/archive/NTPsec_0_9_0.tar.gz
That works. The version inside is 0.8.0
The URL with the 9 changed to an 8 doesn't work.
We should mention tarballs in our web pages and/or in the included
documentation.
--------
Is there a cheat-sheet type lesson in asciidoc? Are we doing anything
special or is generic info from the web applicable to our usage?
--
These are my opinions. I hate spam.
From esr at thyrsus.com Wed Nov 18 13:14:01 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 08:14:01 -0500
Subject: Serious bugginess on Raspberry Pi
Message-ID: <20151118131401.GA23576@thyrsus.com>
Look at this issue:
https://gitlab.com/NTPsec/ntpsec/issues/3
Neither old nor new ntpq working on our ntpd is quite bad. Fortunately
it doesn't reproduce on the Great Beast (Xeon running Ubuntu 14.10) so
we're not in trouble everywhere. I've asked Francis to send me his config.h
Developers, please test this case on your various platforms and check in.
Both positive and negative results are interesting; my hope is that if
we compare enough config.h files it will become clearer what is going on.
The obvious guess is a port problem in the network code.
Now here's the tough part; If I do what's natural and dive in to fix
this myself, the project is going to fall into a pattern that will be
bad for it. TESTFRAME won't get done, and our key-man problem won't
get any better.
Somebody else needs to step up to doing diagnostics here. The good
news is that this is probably a pretty shallow bug and the isolation
procedure should be simple. A good know-the-code opportunity.
--
Eric S. Raymond
From esr at thyrsus.com Wed Nov 18 13:14:36 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 08:14:36 -0500
Subject: First resolved issue
In-Reply-To: <20151118123438.5A25A406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151118052659.GA19726@thyrsus.com>
<20151118123438.5A25A406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151118131436.GA23900@thyrsus.com>
Hal Murray :
>
> esr at thyrsus.com said:
> > Hal should live-test to make sure I didn't bust anything, but this change
> > seems pretty safe.
>
> Seems OK.
Thanks.
--
Eric S. Raymond
From esr at thyrsus.com Wed Nov 18 13:22:49 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 08:22:49 -0500
Subject: Tarballs
In-Reply-To: <20151118124111.5BC5C406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151118124111.5BC5C406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151118132249.GB23900@thyrsus.com>
Hal Murray :
>
> Eric's blog has a URL for a tarball:
> https://github.com/NTPsec/ntpsec/archive/NTPsec_0_9_0.tar.gz
>
> That works. The version inside is 0.8.0
> The URL with the 9 changed to an 8 doesn't work.
Yuck. That's broken.
> Is there a cheat-sheet type lesson in asciidoc? Are we doing anything
> special or is generic info from the web applicable to our usage?
asciidoc cheat sheet here: https://powerman.name/doc/asciidoc
Generic info is applicable. There are two things slightly unusual about
our deployment:
(1) I make heavy use of the macro feature to parametrize various names,
including our hosting info and the names of binaries. Look at
docs/asciidoc.conf
(2) I wrote a custom CSS file to emulate the Millsian look & feel in the
generated web pages. This doesn't affect composition, just rendering.
--
Eric S. Raymond
From esr at thyrsus.com Wed Nov 18 18:22:19 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 13:22:19 -0500
Subject: Some good test news
Message-ID: <20151118182219.GA27563@thyrsus.com>
Just heard from a guy named Daniel Poirot who might be joining devel shortly.
He's a sales engineer from Coverity who has been been running fuzzers against
NTPsec's daemon and clients; he says we pass 100%.
He may show up here to get us started on using a sort of coverage-
concentration tool called Test Advisor. He didn't say outright but I
got the impression Coverity quite reasonably thinks we'd make a good
reference account for the tool.
--
Eric S. Raymond
From hmurray at megapathdsl.net Wed Nov 18 18:42:35 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 18 Nov 2015 10:42:35 -0800
Subject: Serious bugginess on Raspberry Pi
In-Reply-To: Message from "Eric S. Raymond"
of "Wed, 18 Nov 2015 08:14:01 EST." <20151118131401.GA23576@thyrsus.com>
Message-ID: <20151118184235.60616406057@ip-64-139-1-69.sjc.megapath.net>
I've seen this before but wasn't alert enough to figure out that it was
important since it worked everywhere else. It's a general problem, nothing
specific to the Raspberry Pi.
The problem I've seen is that ntpd isn't listening on the local IPv6 address
that ntpq is sending on. It's some combination of what's in /etc/hosts and
what ntpd is listening on.
Ah... It's listening on :: rather than ::1
$ netstat -uln
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
udp 0 0 192.168.1.3:123 0.0.0.0:*
udp 0 0 127.0.0.1:123 0.0.0.0:*
udp 0 0 0.0.0.0:123 0.0.0.0:*
udp6 0 0 :::123 :::*
The /etc/hosts I use (almost) everywhere doesn't have any IPv6 info so ntpq
gets 127.0.0.1 when it asks for localhost.
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Wed Nov 18 19:02:00 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 18 Nov 2015 11:02:00 -0800
Subject: Serious bugginess on Raspberry Pi
In-Reply-To: Message from "Eric S. Raymond"
of "Wed, 18 Nov 2015 08:14:01 EST." <20151118131401.GA23576@thyrsus.com>
Message-ID: <20151118190200.6ACD6406057@ip-64-139-1-69.sjc.megapath.net>
Update...
My listening to :: rather than ::1 was wrong.
It's listening to :: so it can drop anything that arrives there. (It wants
to know which interface a packet arrives on.) It's not listening to ::1
because the default configuration is to disable IPv6. I'll bet ntpq doesn't
have the disable IPv6 logic.
--
These are my opinions. I hate spam.
From esr at thyrsus.com Wed Nov 18 19:09:24 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 14:09:24 -0500
Subject: Serious bugginess on Raspberry Pi
In-Reply-To: <20151118184235.60616406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151118131401.GA23576@thyrsus.com>
<20151118184235.60616406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151118190924.GB27771@thyrsus.com>
Hal Murray :
>
> I've seen this before but wasn't alert enough to figure out that it was
> important since it worked everywhere else. It's a general problem, nothing
> specific to the Raspberry Pi.
>
> The problem I've seen is that ntpd isn't listening on the local IPv6 address
> that ntpq is sending on. It's some combination of what's in /etc/hosts and
> what ntpd is listening on.
>
> Ah... It's listening on :: rather than ::1
> $ netstat -uln
> Active Internet connections (only servers)
> Proto Recv-Q Send-Q Local Address Foreign Address State
>
> udp 0 0 192.168.1.3:123 0.0.0.0:*
>
> udp 0 0 127.0.0.1:123 0.0.0.0:*
>
> udp 0 0 0.0.0.0:123 0.0.0.0:*
>
> udp6 0 0 :::123 :::*
>
>
> The /etc/hosts I use (almost) everywhere doesn't have any IPv6 info so ntpq
> gets 127.0.0.1 when it asks for localhost.
I am not quite clued in enough to see what fix or workaround this implies.
Modifying /etc/hosts for our convenience is a non-starter; do we need to
mine it to figure out what address to listen on?
--
Eric S. Raymond
From jason at azze.org Wed Nov 18 20:04:57 2015
From: jason at azze.org (Jason Azze)
Date: Wed, 18 Nov 2015 15:04:57 -0500
Subject: Serious bugginess on Raspberry Pi
In-Reply-To: <20151118184235.60616406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151118131401.GA23576@thyrsus.com>
<20151118184235.60616406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID:
On Wed, Nov 18, 2015 at 1:42 PM, Hal Murray wrote:
>
> The problem I've seen is that ntpd isn't listening on the local IPv6
> address
> that ntpq is sending on. It's some combination of what's in /etc/hosts and
> what ntpd is listening on.
>
I can confirm that when I toggle off ipv6 support on my CentOS 7.1 VM:
[root at cent7-debug ~]# echo 1 > /proc/sys/net/ipv6/conf/all/disable_ipv6
[root at cent7-debug ~]# echo 1 > /proc/sys/net/ipv6/conf/default/disable_ipv6
The ntpq peers query works.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From esr at thyrsus.com Wed Nov 18 21:23:01 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 16:23:01 -0500
Subject: I've told OpenHub to scan NTPSec
Message-ID: <20151118212301.GA31275@thyrsus.com>
I've told OpenHub to scan NTPSec. The GitLab repo is being analyzed now.
Mark, I checked the "I manage this project" box because (a) I believe
that's how you lock a project's OpenHub identifier so nobody else can
claim it, (b) I don't know if you have an account on that site. If
you do, I will cheerfully transfer it. CII should own that piece of
namespace for the same reason it should own the domain name.
--
Eric S. Raymond
From hmurray at megapathdsl.net Wed Nov 18 21:57:22 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 18 Nov 2015 13:57:22 -0800
Subject: Serious bugginess on Raspberry Pi
In-Reply-To: Message from "Eric S. Raymond"
of "Wed, 18 Nov 2015 14:09:24 EST." <20151118190924.GB27771@thyrsus.com>
Message-ID: <20151118215722.C4C65406057@ip-64-139-1-69.sjc.megapath.net>
esr at thyrsus.com said:
> I am not quite clued in enough to see what fix or workaround this implies.
We missed some case when we removed --enable-ipv6 at configure time and made
it be on if the header files support it.
The fix will probably be tiny after we find it. I'm looking...
> Modifying /etc/hosts for our convenience is a non-starter; do we need to
> mine it to figure out what address to listen on?
No problem. That was just why I didn't see it sooner.
--
These are my opinions. I hate spam.
From esr at thyrsus.com Wed Nov 18 22:07:13 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 17:07:13 -0500
Subject: Serious bugginess on Raspberry Pi
In-Reply-To: <20151118215722.C4C65406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151118190924.GB27771@thyrsus.com>
<20151118215722.C4C65406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151118220713.GA31941@thyrsus.com>
Hal Murray :
> esr at thyrsus.com said:
> > I am not quite clued in enough to see what fix or workaround this implies.
>
> We missed some case when we removed --enable-ipv6 at configure time and made
> it be on if the header files support it.
Aargh. Undoubtedly my goof. Sorry about that.
> The fix will probably be tiny after we find it. I'm looking...
Yes, I expect it will be. Good hunting...
--
Eric S. Raymond
From hmurray at megapathdsl.net Wed Nov 18 22:48:28 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 18 Nov 2015 14:48:28 -0800
Subject: How do I push stuff to gitlab?
Message-ID: <20151118224828.81A2E406057@ip-64-139-1-69.sjc.megapath.net>
Somehow, I have to tell it who I am.
I think my ssh key is setup. Is there a simple way to test that?
There is a name change involved. I'm murray here but hal.murray there.
.git/config says:
url = git at gitlab.com:NTPsec/ntpsec.git
git push says:
Counting objects: 4, done.
Delta compression using up to 2 threads.
Compressing objects: 100% (4/4), done.
Writing objects: 100% (4/4), 403 bytes | 0 bytes/s, done.
Total 4 (delta 3), reused 0 (delta 0)
remote: error: cannot lock ref 'refs/heads/master': Unable to create
'/var/opt/gitlab/git-data/repositories/NTPsec/ntpsec.git/refs/heads/master.loc
k': File exists.
remote:
remote: If no other git process is currently running, this probably means a
remote: git process crashed in this repository earlier. Make sure no other git
remote: process is running and remove the file manually to continue.
To git at gitlab.com:NTPsec/ntpsec.git
! [remote rejected] master -> master (failed to update ref)
error: failed to push some refs to 'git at gitlab.com:NTPsec/ntpsec.git'
--
These are my opinions. I hate spam.
From esr at thyrsus.com Wed Nov 18 23:37:28 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 18:37:28 -0500
Subject: How do I push stuff to gitlab?
In-Reply-To: <20151118224828.81A2E406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151118224828.81A2E406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151118233728.GA445@thyrsus.com>
Hal Murray :
> Somehow, I have to tell it who I am.
>
> I think my ssh key is setup. Is there a simple way to test that?
>
> There is a name change involved. I'm murray here but hal.murray there.
>
>
> .git/config says:
> url = git at gitlab.com:NTPsec/ntpsec.git
That looks correct. It marches what I have.
> git push says:
> Counting objects: 4, done.
> Delta compression using up to 2 threads.
> Compressing objects: 100% (4/4), done.
> Writing objects: 100% (4/4), 403 bytes | 0 bytes/s, done.
> Total 4 (delta 3), reused 0 (delta 0)
> remote: error: cannot lock ref 'refs/heads/master': Unable to create
> '/var/opt/gitlab/git-data/repositories/NTPsec/ntpsec.git/refs/heads/master.loc
> k': File exists.
> remote:
> remote: If no other git process is currently running, this probably means a
> remote: git process crashed in this repository earlier. Make sure no other git
> remote: process is running and remove the file manually to continue.
> To git at gitlab.com:NTPsec/ntpsec.git
> ! [remote rejected] master -> master (failed to update ref)
> error: failed to push some refs to 'git at gitlab.com:NTPsec/ntpsec.git'
That's disturbing. It looks like a crash on GitLab.
I would do these steps:
1. Try the push again in case it's a transient error. If that fails:
2. Rename the old repository directory.
3. Re-clone from gitlab, making a fresh repository,
3. Use git-format-patch in the old directory to extract your changes from
the old repo into a sequence of patch files. So, if you want to move
the last two commits the right thing to mutter is
git format-patch HEAD~2..HEAD
4. The previous step will give you some files with names that begin with
'0'. Move them to the new clone and use "git am" to apply them.
5. Push from there.
The point of this procedure is to avoid stumbling over any local debris
in your present repo clone that might be confusing git.
--
Eric S. Raymond
From hmurray at megapathdsl.net Wed Nov 18 23:51:56 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 18 Nov 2015 15:51:56 -0800
Subject: How do I push stuff to gitlab?
In-Reply-To: Message from "Eric S. Raymond"
of "Wed, 18 Nov 2015 18:37:28 EST." <20151118233728.GA445@thyrsus.com>
Message-ID: <20151118235156.E1C90406057@ip-64-139-1-69.sjc.megapath.net>
> That looks correct. It marches what I have.
> I would do these steps:
> 1. Try the push again in case it's a transient error. If that fails:
Worked this time.
I'd still like to understand what's going on. How does it know who I am? Is
that repo world writable?
--
These are my opinions. I hate spam.
From esr at thyrsus.com Thu Nov 19 01:34:14 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 20:34:14 -0500
Subject: How do I push stuff to gitlab?
In-Reply-To: <20151118235156.E1C90406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151118233728.GA445@thyrsus.com>
<20151118235156.E1C90406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151119013414.GA1447@thyrsus.com>
Hal Murray :
> > That looks correct. It marches what I have.
>
> > I would do these steps:
> > 1. Try the push again in case it's a transient error. If that fails:
>
> Worked this time.
>
> I'd still like to understand what's going on. How does it know who I am? Is
> that repo world writable?
You gave GitLab an ssh public key; git uses your ssh private key. This
allows you to be authenticated to GitLab. You're a member of the NTPsec
project with the role "Developer", so you can push to any unprotected branch.
The repository is not world-writable.
It does puzzle me that one part of the GitLab interface thinks you've left
the project, but you're still listrd as a member at
https://gitlab.com/u/hal.murray
--
Eric S. Raymond
From verm at darkbeer.org Thu Nov 19 01:36:40 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Thu, 19 Nov 2015 01:36:40 +0000
Subject: How do I push stuff to gitlab?
In-Reply-To: <20151119013414.GA1447@thyrsus.com>
References: <20151118233728.GA445@thyrsus.com>
<20151118235156.E1C90406057@ip-64-139-1-69.sjc.megapath.net>
<20151119013414.GA1447@thyrsus.com>
Message-ID: <20151119013640.GA99422@darkbeer.org>
On 2015-11-18 20:34 -0500, Eric S. Raymond wrote:
> It does puzzle me that one part of the GitLab interface thinks you've left
> the project, but you're still listrd as a member at
I was wondering about this, too. I had issues cloning earlier via ssh I wonder
if their Git processes were crashing.
Amar.
From hmurray at megapathdsl.net Thu Nov 19 02:58:53 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 18 Nov 2015 18:58:53 -0800
Subject: How do I push stuff to gitlab?
In-Reply-To: Message from "Eric S. Raymond"
of "Wed, 18 Nov 2015 20:34:14 EST." <20151119013414.GA1447@thyrsus.com>
Message-ID: <20151119025853.B0B28406057@ip-64-139-1-69.sjc.megapath.net>
esr at thyrsus.com said:
> You gave GitLab an ssh public key; git uses your ssh private key. This
> allows you to be authenticated to GitLab. You're a member of the NTPsec
> project with the role "Developer", so you can push to any unprotected
> branch. The repository is not world-writable.
That would make sense if GitLab knew who I was. Why am I me as compared to
you or somebody who doesn't even have an account?
How does it translate my local login name to a GitLab name? A brute force
search of everybody with write access seems like a bad idea if there might be
a large project and I'm sure somebody will come up with one.
The public key has a user at host at the end. I don't know if the private key
has something similar. Mine is encrypted. Assuming that gets to the wire,
then a hash table lookup would do it.
--
These are my opinions. I hate spam.
From esr at thyrsus.com Thu Nov 19 03:26:43 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 18 Nov 2015 22:26:43 -0500
Subject: How do I push stuff to gitlab?
In-Reply-To: <20151119025853.B0B28406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151119013414.GA1447@thyrsus.com>
<20151119025853.B0B28406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151119032643.GA2992@thyrsus.com>
Hal Murray :
> esr at thyrsus.com said:
> > You gave GitLab an ssh public key; git uses your ssh private key. This
> > allows you to be authenticated to GitLab. You're a member of the NTPsec
> > project with the role "Developer", so you can push to any unprotected
> > branch. The repository is not world-writable.
>
> That would make sense if GitLab knew who I was. Why am I me as compared to
> you or somebody who doesn't even have an account?
>
> How does it translate my local login name to a GitLab name? A brute force
> search of everybody with write access seems like a bad idea if there might be
> a large project and I'm sure somebody will come up with one.
>
> The public key has a user at host at the end. I don't know if the private key
> has something similar. Mine is encrypted. Assuming that gets to the wire,
> then a hash table lookup would do it.
The only identifying piece of info it has about you when you push is
your ssh public key - git developer access works through an ssh
tunnel. Therefore, it must be doing something like that brute-force
check.
You're right, it would be interesting to know more about how this works.
--
Eric S. Raymond
From fallenpegasus at gmail.com Thu Nov 19 05:46:40 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Thu, 19 Nov 2015 05:46:40 +0000
Subject: How do I push stuff to gitlab?
In-Reply-To: <20151119032643.GA2992@thyrsus.com>
References: <20151119013414.GA1447@thyrsus.com>
<20151119025853.B0B28406057@ip-64-139-1-69.sjc.megapath.net>
<20151119032643.GA2992@thyrsus.com>
Message-ID:
GitLab is open source. One can download it, dissect it, and figure out
how it works.
But yes, GitLab figures out who you are by your ssh key when you push.
It's not that weird, GitHub does the same thing. If the ACLs are set, you
can push to repos outside "your account", and GitHub figures out who you
are by which SSH key you use.
..m
On Wed, Nov 18, 2015 at 7:26 PM Eric S. Raymond wrote:
> Hal Murray :
> > esr at thyrsus.com said:
> > > You gave GitLab an ssh public key; git uses your ssh private key. This
> > > allows you to be authenticated to GitLab. You're a member of the
> NTPsec
> > > project with the role "Developer", so you can push to any unprotected
> > > branch. The repository is not world-writable.
> >
> > That would make sense if GitLab knew who I was. Why am I me as compared
> to
> > you or somebody who doesn't even have an account?
> >
> > How does it translate my local login name to a GitLab name? A brute
> force
> > search of everybody with write access seems like a bad idea if there
> might be
> > a large project and I'm sure somebody will come up with one.
> >
> > The public key has a user at host at the end. I don't know if the private
> key
> > has something similar. Mine is encrypted. Assuming that gets to the
> wire,
> > then a hash table lookup would do it.
>
> The only identifying piece of info it has about you when you push is
> your ssh public key - git developer access works through an ssh
> tunnel. Therefore, it must be doing something like that brute-force
> check.
>
> You're right, it would be interesting to know more about how this works.
> --
> Eric S. Raymond
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From hmurray at megapathdsl.net Thu Nov 19 07:19:22 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 18 Nov 2015 23:19:22 -0800
Subject: buildbot
Message-ID: <20151119071922.7DC4C406057@ip-64-139-1-69.sjc.megapath.net>
I tried the URLs from builbot again. Nothing. Do they work for anybody else?
ssh says Connection refused
Can I get in to poke around? How do I find out what configuration it is
testing?
------- Forwarded Message
From: buildbot at ntpsec.org
Date: Wed, 18 Nov 2015 23:47:23 +0000
To: "Eric S. Raymond" , Hal Murray
The Buildbot has detected a failed build on builder OS X 10.9 13F1096 Clang
5.1 crypto while building NTP Security Project.
Full details are available at:
https://buildbot.ntpsec.org/#builders/3/builds/164
Buildbot URL: https://buildbot.ntpsec.org/
Buildslave for this Build: build-6
Build Reason:
Blamelist: Eric S. Raymond , Hal Murray
BUILD FAILED: finished
Sincerely,
-The Buildbot
------- End of Forwarded Message
--
These are my opinions. I hate spam.
From dtpoirot at gmail.com Thu Nov 19 08:08:45 2015
From: dtpoirot at gmail.com (Daniel Poirot)
Date: Thu, 19 Nov 2015 02:08:45 -0600
Subject: All about the testing!
Message-ID: <003201d122a1$84410df0$8cc329d0$@gmail.com>
Hello NTPsec!
I am looking forward to looking over your shoulders.
ESR has a long history with what can be done with the Coverity Code Advisor
static analysis tools. Coverity is working with the Open Source community by
making these tools available to thousands of FOSS projects.
We also have some interesting unit test management tech and an exciting new
addition in the area of fuzz testing.
I am particularly interested in unit test, automated testing and the
compatibility testing space.
From verm at darkbeer.org Thu Nov 19 12:26:16 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Thu, 19 Nov 2015 12:26:16 +0000
Subject: buildbot
In-Reply-To: <20151119071922.7DC4C406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151119071922.7DC4C406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151119122616.GA9632@darkbeer.org>
On 2015-11-18 23:19 -0800, Hal Murray wrote:
>
> I tried the URLs from builbot again. Nothing. Do they work for anybody else?
The URLs work fine for me what error are you getting? I tried from two
different machines.
> ssh says Connection refused
There is no SSH access.
Amar.
From esr at thyrsus.com Thu Nov 19 12:48:32 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Thu, 19 Nov 2015 07:48:32 -0500
Subject: All about the testing!
In-Reply-To: <003201d122a1$84410df0$8cc329d0$@gmail.com>
References: <003201d122a1$84410df0$8cc329d0$@gmail.com>
Message-ID: <20151119124832.GA7584@thyrsus.com>
Daniel Poirot :
> I am particularly interested in unit test, automated testing and the
> compatibility testing space.
Welcome! So are we. Irresponsible to be otherwise when the softwaere
is life-critical.
--
Eric S. Raymond
From verm at darkbeer.org Thu Nov 19 12:59:46 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Thu, 19 Nov 2015 12:59:46 +0000
Subject: buildbot
In-Reply-To: <20151119071922.7DC4C406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151119071922.7DC4C406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151119125946.GA10024@darkbeer.org>
On 2015-11-18 23:19 -0800, Hal Murray wrote:
>
> I tried the URLs from builbot again. Nothing. Do they work for anybody else?
I just realised.. do you have javascript enabled? If not the site requires it
in order to function. I'm not sure about cookies.
Amar.
From dtpoirot at gmail.com Thu Nov 19 14:15:54 2015
From: dtpoirot at gmail.com (dtpoirot at gmail.com)
Date: Thu, 19 Nov 2015 08:15:54 -0600
Subject: Stress testing...
Message-ID: <1D92F2CB-20CF-4FC5-86BA-7AFF8EDB46AA@gmail.com>
Is there a lead directing testing?
I get different results running on a local host versus running across a lightly loaded network.
(I can have a heavily loaded network when the kids come home!)
From esr at thyrsus.com Thu Nov 19 14:34:56 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Thu, 19 Nov 2015 09:34:56 -0500
Subject: Stress testing...
In-Reply-To: <1D92F2CB-20CF-4FC5-86BA-7AFF8EDB46AA@gmail.com>
References: <1D92F2CB-20CF-4FC5-86BA-7AFF8EDB46AA@gmail.com>
Message-ID: <20151119143456.GA9014@thyrsus.com>
dtpoirot at gmail.com :
> Is there a lead directing testing?
Good question. Mark, do we have a designee?
--
Eric S. Raymond
From jason at azze.org Thu Nov 19 14:51:58 2015
From: jason at azze.org (Jason Azze)
Date: Thu, 19 Nov 2015 09:51:58 -0500
Subject: waf check -- Should it always run tests?
Message-ID:
I'm taking a risk asking my question without having fully RTFMed and
without inspecting the builder code. :-)
When I run waf check after a doing clean build, I get test results.
When I do an incremental (AKA quick?) build, I don't get test results. I
assume waf check is saying, "The artifacts I have tests for didn't change,
so I'm not going to re-run tests." But, is that a good assumption?
--
Jason Azze
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From verm at darkbeer.org Thu Nov 19 15:09:29 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Thu, 19 Nov 2015 15:09:29 +0000
Subject: waf check -- Should it always run tests?
In-Reply-To:
References:
Message-ID: <20151119150929.GA11848@darkbeer.org>
On 2015-11-19 09:51 -0500, Jason Azze wrote:
>
> When I run waf check after a doing clean build, I get test results.
This is how it works currently.
> When I do an incremental (AKA quick?) build, I don't get test results. I assume
> waf check is saying, "The artifacts I have tests for didn't change, so I'm not
> going to re-run tests." But, is that a good assumption?
I have a patch I'm working on now that will change this. If you touch any files
that are dependencies of tests it will re-build and re-run those tests.
Amar.
From verm at darkbeer.org Thu Nov 19 17:21:53 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Thu, 19 Nov 2015 17:21:53 +0000
Subject: Change of Buildbot status emails.
Message-ID: <20151119172153.GA13899@darkbeer.org>
I've limited the Buildbot emails to only email when there is a problem or when
the status of a build changes. eg, failure -> success.
For now it is not aggregating emails so you will get individual emails for each
builder that fail or change status.
Essentially no more superfluous emails saying the build succeeded.
Amar.
From hmurray at megapathdsl.net Thu Nov 19 18:14:22 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Thu, 19 Nov 2015 10:14:22 -0800
Subject: buildbot
In-Reply-To: Message from Amar Takhar
of "Thu, 19 Nov 2015 12:26:16 GMT." <20151119122616.GA9632@darkbeer.org>
Message-ID: <20151119181422.55E5C406057@ip-64-139-1-69.sjc.megapath.net>
verm at darkbeer.org said:
> The URLs work fine for me what error are you getting? I tried from two
> different machines.
No explicit error, just a blank screen.
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Thu Nov 19 18:34:13 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Thu, 19 Nov 2015 10:34:13 -0800
Subject: waf check -- Should it always run tests?
In-Reply-To: Message from Amar Takhar
of "Thu, 19 Nov 2015 15:09:29 GMT." <20151119150929.GA11848@darkbeer.org>
Message-ID: <20151119183413.D559B406057@ip-64-139-1-69.sjc.megapath.net>
verm at darkbeer.org said:
> I have a patch I'm working on now that will change this. If you touch any
> files that are dependencies of tests it will re-build and re-run those
> tests.
Please set things up so that it runs the tests again, even if nothing has
changed. (It doesn't have to rebuild things.)
It's reasonable for tests to use a random number generator so running again
may not be redundant. Or maybe I'm chasing a weird bug where I'd like to put
things into a loop for a while to see if I can tickle a timing problem.
--
These are my opinions. I hate spam.
From verm at darkbeer.org Thu Nov 19 18:37:28 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Thu, 19 Nov 2015 18:37:28 +0000
Subject: waf check -- Should it always run tests?
In-Reply-To: <20151119183413.D559B406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151119150929.GA11848@darkbeer.org>
<20151119183413.D559B406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151119183728.GA15421@darkbeer.org>
On 2015-11-19 10:34 -0800, Hal Murray wrote:
> Please set things up so that it runs the tests again, even if nothing has
> changed. (It doesn't have to rebuild things.)
>
> It's reasonable for tests to use a random number generator so running again
> may not be redundant. Or maybe I'm chasing a weird bug where I'd like to put
> things into a loop for a while to see if I can tickle a timing problem.
I can add a flag to force re-run the tests. Running unrelated tests to the
changes you've made is going to generate a lot of unessicary noise.
Amar.
From hmurray at megapathdsl.net Thu Nov 19 18:40:51 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Thu, 19 Nov 2015 10:40:51 -0800
Subject: buildbot
In-Reply-To: Message from Amar Takhar
of "Thu, 19 Nov 2015 12:59:46 GMT." <20151119125946.GA10024@darkbeer.org>
Message-ID: <20151119184051.C5A9D406057@ip-64-139-1-69.sjc.megapath.net>
verm at darkbeer.org said:
> I just realised.. do you have javascript enabled? If not the site requires
> it in order to function. I'm not sure about cookies.
Yes, I tried that, and one of the browsers I tried was an up to date Firefox.
(But yes, there could be something screwed up on my end.) I've got another
setup I can try tonight.
I took a quick look at the source. It's all javascript.
I was going to make a wise-ass comment about a security project requiring
javascript which is known to be a source of problems. There are some cases
where javascript makes sense. I don't see this as one of them.
--
These are my opinions. I hate spam.
From verm at darkbeer.org Thu Nov 19 18:48:41 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Thu, 19 Nov 2015 18:48:41 +0000
Subject: buildbot
In-Reply-To: <20151119184051.C5A9D406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151119125946.GA10024@darkbeer.org>
<20151119184051.C5A9D406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151119184841.GA15618@darkbeer.org>
On 2015-11-19 10:40 -0800, Hal Murray wrote:
> I was going to make a wise-ass comment about a security project requiring
> javascript which is known to be a source of problems. There are some cases
> where javascript makes sense. I don't see this as one of them.
The web interface to Buildbot uses websockets to update the page in real time.
Rather than requiring custom local software it's all done in-web.
Before, with the old page you'd have to rely on refreshes which didn't give good
data. Now you can leave the browser open and get information updated realtime.
Amar.
From esr at thyrsus.com Thu Nov 19 18:53:36 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Thu, 19 Nov 2015 13:53:36 -0500
Subject: buildbot
In-Reply-To: <20151119184051.C5A9D406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151119125946.GA10024@darkbeer.org>
<20151119184051.C5A9D406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151119185336.GA12351@thyrsus.com>
Hal Murray :
> I was going to make a wise-ass comment about a security project requiring
> javascript which is known to be a source of problems. There are some cases
> where javascript makes sense. I don't see this as one of them.
*snrk*
+1
--
Eric S. Raymond
From fallenpegasus at gmail.com Thu Nov 19 22:59:55 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Thu, 19 Nov 2015 22:59:55 +0000
Subject: Stress testing...
In-Reply-To: <20151119143456.GA9014@thyrsus.com>
References: <1D92F2CB-20CF-4FC5-86BA-7AFF8EDB46AA@gmail.com>
<20151119143456.GA9014@thyrsus.com>
Message-ID:
Hello Dan Poirot, welcome to NTPsec!
We do not yet have a person named as test lead director.
Amar writes waf tests and farms the buildbot array.
Dan, do you have test lead experience. What suggestions do you have for us?
..m
On Thu, Nov 19, 2015 at 6:34 AM Eric S. Raymond wrote:
> dtpoirot at gmail.com :
> > Is there a lead directing testing?
>
> Good question. Mark, do we have a designee?
> --
> Eric S. Raymond
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From hmurray at megapathdsl.net Fri Nov 20 09:53:14 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Fri, 20 Nov 2015 01:53:14 -0800
Subject: Change of Buildbot status emails.
In-Reply-To: Message from Amar Takhar
of "Thu, 19 Nov 2015 17:21:53 GMT." <20151119172153.GA13899@darkbeer.org>
Message-ID: <20151120095314.24AD9406057@ip-64-139-1-69.sjc.megapath.net>
verm at darkbeer.org said:
> Essentially no more superfluous emails saying the build succeeded.
Actually, I think we want one message saying all the builds succeeded. The
idea is to know when buildbot has processed your push so you can tell
somebody to try your latest fix.
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Fri Nov 20 10:58:26 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Fri, 20 Nov 2015 02:58:26 -0800
Subject: waf doesn't rebuild man pages
Message-ID: <20151120105826.D173A406057@ip-64-139-1-69.sjc.megapath.net>
Most of the man pages have a wrapper than includes the core. If I edit the
core, then run waf build, it doesn't rebuild the man page.
Is this reasonable to fix?
--
These are my opinions. I hate spam.
From verm at darkbeer.org Fri Nov 20 13:04:34 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Fri, 20 Nov 2015 13:04:34 +0000
Subject: Change of Buildbot status emails.
In-Reply-To: <20151120095314.24AD9406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151119172153.GA13899@darkbeer.org>
<20151120095314.24AD9406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151120130434.GB65861@darkbeer.org>
On 2015-11-20 01:53 -0800, Hal Murray wrote:
>
> verm at darkbeer.org said:
> > Essentially no more superfluous emails saying the build succeeded.
>
> Actually, I think we want one message saying all the builds succeeded. The
> idea is to know when buildbot has processed your push so you can tell
> somebody to try your latest fix.
I'll set this up later today.
Once we get more VM space we'll have quite a few builders.
Amar.
From verm at darkbeer.org Fri Nov 20 13:09:30 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Fri, 20 Nov 2015 13:09:30 +0000
Subject: waf doesn't rebuild man pages
In-Reply-To: <20151120105826.D173A406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151120105826.D173A406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151120130930.GA66354@darkbeer.org>
On 2015-11-20 02:58 -0800, Hal Murray wrote:
>
> Most of the man pages have a wrapper than includes the core. If I edit the
> core, then run waf build, it doesn't rebuild the man page.
>
> Is this reasonable to fix?
That's funny -- I worked around the include but never thought of adding a
dependency to it. Whoops.
I'll fix this today.
Amar.
From verm at darkbeer.org Fri Nov 20 13:35:50 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Fri, 20 Nov 2015 13:35:50 +0000
Subject: Commit emails.
Message-ID: <20151120133550.GA66844@darkbeer.org>
I've activated commit emails if you want to get a commit mail + diff please
subscribe to the 'vc' list at https://lists.ntpsec.org/
Amar.
From verm at darkbeer.org Fri Nov 20 17:26:16 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Fri, 20 Nov 2015 17:26:16 +0000
Subject: waf doesn't rebuild man pages
In-Reply-To: <20151120105826.D173A406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151120105826.D173A406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151120172616.GA70585@darkbeer.org>
On 2015-11-20 02:58 -0800, Hal Murray wrote:
>
> Most of the man pages have a wrapper than includes the core. If I edit the
> core, then run waf build, it doesn't rebuild the man page.
>
> Is this reasonable to fix?
This is fixed.
Amar.
From verm at darkbeer.org Fri Nov 20 17:26:38 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Fri, 20 Nov 2015 17:26:38 +0000
Subject: Change of Buildbot status emails.
In-Reply-To: <20151120095314.24AD9406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151119172153.GA13899@darkbeer.org>
<20151120095314.24AD9406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151120172638.GB70585@darkbeer.org>
On 2015-11-20 01:53 -0800, Hal Murray wrote:
>
> verm at darkbeer.org said:
> > Essentially no more superfluous emails saying the build succeeded.
>
> Actually, I think we want one message saying all the builds succeeded. The
> idea is to know when buildbot has processed your push so you can tell
> somebody to try your latest fix.
I've added this.
Amar.
From dtpoirot at gmail.com Fri Nov 20 17:28:48 2015
From: dtpoirot at gmail.com (Daniel Poirot)
Date: Fri, 20 Nov 2015 11:28:48 -0600
Subject: waf check -- Should it always run tests?
In-Reply-To: <20151119183728.GA15421@darkbeer.org>
References: <20151119150929.GA11848@darkbeer.org>
<20151119183413.D559B406057@ip-64-139-1-69.sjc.megapath.net>
<20151119183728.GA15421@darkbeer.org>
Message-ID:
On Thu, Nov 19, 2015 at 12:37 PM, Amar Takhar wrote:
> I can add a flag to force re-run the tests. Running unrelated tests to the
> changes you've made is going to generate a lot of unnecessary noise.
Hello Amar,
When do you think you might have a 'force' option to re-run all available tests?
I am new to 'waf'. I would like to submit an enhancement request - or
request enlightenment on how to do the following:
The Coverity tools use environment variables to enable test separation.
In the case of 'git', for example, I call the following to run the set
of unit test shell scripts:
export COVERITY_TEST_SUITE=$(basename $0 .sh)
for i in `ls t[0-9]*.sh`; do
echo "*** $i ***"
export COVERITY_TEST_NAME=$(basename $i .sh)
export COVERITY_TEST_SOURCE=$i
/bin/sh $i
done
The 'basename' part is optional. ;-)
Thank you!
- dan
From verm at darkbeer.org Fri Nov 20 17:30:24 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Fri, 20 Nov 2015 17:30:24 +0000
Subject: waf check -- Should it always run tests?
In-Reply-To:
References: <20151119150929.GA11848@darkbeer.org>
<20151119183413.D559B406057@ip-64-139-1-69.sjc.megapath.net>
<20151119183728.GA15421@darkbeer.org>
Message-ID: <20151120173024.GA70715@darkbeer.org>
On 2015-11-20 11:28 -0600, Daniel Poirot wrote:
> On Thu, Nov 19, 2015 at 12:37 PM, Amar Takhar wrote:
> > I can add a flag to force re-run the tests. Running unrelated tests to the
> > changes you've made is going to generate a lot of unnecessary noise.
>
> Hello Amar,
>
> When do you think you might have a 'force' option to re-run all available tests?
hah, nice timing I was just about to email you about this. I fixed it
yesterday.
The build automatically regenerates and runs each test based on the files you
modify now -- full depenency chain.
'waf check' will run all tests irrespective of dependency status now. 'waf
check -v' will dump log info.
> I am new to 'waf'. I would like to submit an enhancement request - or
> request enlightenment on how to do the following:
>
> The Coverity tools use environment variables to enable test separation.
>
> In the case of 'git', for example, I call the following to run the set
> of unit test shell scripts:
>
> export COVERITY_TEST_SUITE=$(basename $0 .sh)
> for i in `ls t[0-9]*.sh`; do
> echo "*** $i ***"
> export COVERITY_TEST_NAME=$(basename $i .sh)
> export COVERITY_TEST_SOURCE=$i
> /bin/sh $i
> done
>
> The 'basename' part is optional. ;-)
Can you open a ticket for this please and I will add this.
Amar.
From hmurray at megapathdsl.net Sun Nov 22 02:40:47 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Sat, 21 Nov 2015 18:40:47 -0800
Subject: Testing
Message-ID: <20151122024047.2D6C2406057@ip-64-139-1-69.sjc.megapath.net>
I ran into a bug in ntpq from NTP Classic 4.3.79 A cleanup had changed an
int to a size_t. That broke an end test which turned into a SEGFAULT from a
stack buffer overflow. (I'm assume size_t is unsigned.)
The first observation is that a TESTFRAME would have caught this. That
assumes we had captured an appropriate data set. We should be sure to apply
TESTFRAME to other programs rather than just ntp, and we should try to
capture test data for every bug where it makes sense.
The next observation is that I don't know how to do arithmetic with mixed
signed/unsigned types. Or maybe I don't know how to do subtracts with
unsigned, Is there a good tutorial on this? How much can the compiler help?
We don't get any compiler warnings. Is that because our code is clean or
because we don't have enough flags turned on?
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Sun Nov 22 04:27:35 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Sat, 21 Nov 2015 20:27:35 -0800
Subject: doc quirks
Message-ID: <20151122042735.86700406057@ip-64-139-1-69.sjc.megapath.net>
The source has things like +foo+
I think the + is supposed to turn the enclosed text into a different font,
something to indicate that it's text you are likely to type in or a chunk of
code.
It's not working for me in either the man pages or the web pages.
------
The web page for ntpq has a bunch of links to other programs at the top. So
do several other web pages for programs. I assume that's a bug, but don't
know what the right fix is.
--
These are my opinions. I hate spam.
From esr at thyrsus.com Sun Nov 22 04:42:04 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Sat, 21 Nov 2015 23:42:04 -0500
Subject: Testing
In-Reply-To: <20151122024047.2D6C2406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151122024047.2D6C2406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151122044204.GA21002@thyrsus.com>
Hal Murray :
>
> I ran into a bug in ntpq from NTP Classic 4.3.79 A cleanup had changed an
> int to a size_t. That broke an end test which turned into a SEGFAULT from a
> stack buffer overflow. (I'm assume size_t is unsigned.)
That assumption is correct. There is a corresponding standard signed
type ssize_t.
> The first observation is that a TESTFRAME would have caught this. That
> assumes we had captured an appropriate data set. We should be sure to apply
> TESTFRAME to other programs rather than just ntp, and we should try to
> capture test data for every bug where it makes sense.
The second (capture test data for every bug where it makes sense) is already
in my goal set. The first (apply TESTFRAME to other programs rather than just
ntp) is going to be tricky and I don't have a detailed technical plan for it
yet. I'll look at this again after TESTFRAME lands.
> The next observation is that I don't know how to do arithmetic with mixed
> signed/unsigned types. Or maybe I don't know how to do subtracts with
> unsigned, Is there a good tutorial on this? How much can the compiler help?
Sadly, I don't know of any good tutorials on this. It is a swamp full
of razor blades for even very experienced C programmers. If you have a
particular exporession you want me to analyze I might be able to say
something useful.
> We don't get any compiler warnings. Is that because our code is clean or
> because we don't have enough flags turned on?
One of the first things I did after the fork point was clean up all warnings.
I'm a bit obsessive about that, having exoperienced too many situations where
serious errors got lost in the clutter.
We still build with -Wall, so the code really is clean that way.
--
Eric S. Raymond
From esr at thyrsus.com Sun Nov 22 04:49:07 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Sat, 21 Nov 2015 23:49:07 -0500
Subject: doc quirks
In-Reply-To: <20151122042735.86700406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151122042735.86700406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151122044907.GB21002@thyrsus.com>
Hal Murray :
> The source has things like +foo+
> I think the + is supposed to turn the enclosed text into a different font,
> something to indicate that it's text you are likely to type in or a chunk of
> code.
Yes, that is supposed to map to const-width font - or in HTML
> It's not working for me in either the man pages or the web pages.
Please point me at a particular instance; I'll see what I can do to
trace the problem.
> The web page for ntpq has a bunch of links to other programs at the top. So
> do several other web pages for programs. I assume that's a bug, but don't
> know what the right fix is.
Dave Mills designed it that way. It wouldn't be difficult to change, but
I'm trying to avoid moving away from his look and feel before we have
him recruited/co-opted.
--
Eric S. Raymond
From hmurray at megapathdsl.net Sun Nov 22 05:02:44 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Sat, 21 Nov 2015 21:02:44 -0800
Subject: Testing
In-Reply-To: Message from "Eric S. Raymond"
of "Sat, 21 Nov 2015 23:42:04 EST." <20151122044204.GA21002@thyrsus.com>
Message-ID: <20151122050244.B7864406057@ip-64-139-1-69.sjc.megapath.net>
esr at thyrsus.com said:
> Sadly, I don't know of any good tutorials on this. It is a swamp full of
> razor blades for even very experienced C programmers. If you have a
> particular exporession you want me to analyze I might be able to say
> something useful.
The old code was:
int chars;
char req_buf[CTL_MAX_DATA_LEN];
req = req_buf;
req_end = req_buf + sizeof(req_buf);
#define REQ_ROOM (req_end - req)
chars = strlen(buf);
if (REQ_ROOM - chars < 1)
break;
The new code is:
size_t chars;
if (REQ_ROOM <= chars)
break;
The old if didn't work after chars changed to size_t.
--
These are my opinions. I hate spam.
From fallenpegasus at gmail.com Sun Nov 22 05:08:22 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Sun, 22 Nov 2015 05:08:22 +0000
Subject: Testing
In-Reply-To: <20151122044204.GA21002@thyrsus.com>
References: <20151122024047.2D6C2406057@ip-64-139-1-69.sjc.megapath.net>
<20151122044204.GA21002@thyrsus.com>
Message-ID:
On Sat, Nov 21, 2015 at 8:42 PM Eric S. Raymond wrote:
>
> The second (capture test data for every bug where it makes sense) is
> already
> in my goal set. The first (apply TESTFRAME to other programs rather than
> just
> ntp) is going to be tricky and I don't have a detailed technical plan for
> it
> yet. I'll look at this again after TESTFRAME lands.
>
It can be done with a LD preload that precatches the standard library
and/or syscalls.
It has the downside of being very OS specific: pick ahead of time Linux or
one of the *BSDs.
A project to start from for it as inspiration could be libeatmydata,
written by my friend Stewart Smith:
https://flamingspork.com/projects/libeatmydata/
And it's close relative, libhostile, maintained by my friend LinuxJedi:
https://github.com/libhostile/libhostile
BTW, giving the libhostile treatment to ntpsec will likely prove to be
amusing.
> > We don't get any compiler warnings. Is that because our code is clean or
> > because we don't have enough flags turned on?
>
> One of the first things I did after the fork point was clean up all
> warnings.
> I'm a bit obsessive about that, having exoperienced too many situations
> where
> serious errors got lost in the clutter.
>
> We still build with -Wall, so the code really is clean that way.
>
There are additional warnings that are not turned on with -Wall. They can
be turned on with -Wextra, which may have caught this because it enables
*-Wsign**-compare and **-Wsign**-conversion.*
..m
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From hmurray at megapathdsl.net Sun Nov 22 05:27:27 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Sat, 21 Nov 2015 21:27:27 -0800
Subject: doc quirks
In-Reply-To: Message from "Eric S. Raymond"
of "Sat, 21 Nov 2015 23:49:07 EST." <20151122044907.GB21002@thyrsus.com>
Message-ID: <20151122052727.8A13F406057@ip-64-139-1-69.sjc.megapath.net>
[+foo+]
> Yes, that is supposed to map to const-width font - or in HTML
from docs/includes/ntpq-body.txt
+-w+, +--wide+::
from build/docs/ntpq.html
-w, --wide
from build/ntpq/ntpq.1
.RE
.PP
\-w, \-\-wide
.RS 4
It's possible that something is broken on my asciidoc setup.
This system is Fedora 22
It says asciidoc.noarch 8.6.8-6.fc21 is installed.
That fc21 looks fishy, but I'm pretty sure it is the latest.
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Sun Nov 22 05:50:16 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Sat, 21 Nov 2015 21:50:16 -0800
Subject: doc quirks
In-Reply-To: Message from "Eric S. Raymond"
of "Sat, 21 Nov 2015 23:49:07 EST." <20151122044907.GB21002@thyrsus.com>
Message-ID: <20151122055016.3ED5D406057@ip-64-139-1-69.sjc.megapath.net>
> Dave Mills designed it that way. It wouldn't be difficult to change, but
> I'm trying to avoid moving away from his look and feel before we have him
> recruited/co-opted.
Here is a sample ntpq page from NTP Classic, starting after the cartoon:
More Help
[HR]
Synopsis
ntpq [-46dinp] [-c command] [host] [...]
Description
The ntpq utility program is used to ...
Here is the top of our ntpq.html:
More Help
[HR]
Program Manual Pages
[HR]
ntpd - Network Time Protocol (NTP) daemon
ntpdig - Simple Network Time Protocol (SNTP) client
ntpq - standard NTP query program
ntpfrob - frob the local clock hardware
ntpkeygen - generate public and private keys
ntpleapfetch(8) fetch and manage leap-offset file
ntpdsim(8) - Network Time Protocol (NTP) simulator
ntptime - read and set kernel time variables
ntptrace - trace a chain of NTP servers back to the primary source
Site Map
(There are links behind most of those text strings.)
[HR]
Synopsis
[HR]
ntpq [-46dinpw] [-c command] [host] [...]
Description
[HR]
The ntpq utility program is used to ...
-------------
docs/ntpq.txt includes:
include::includes/manual.txt[]
It's also included by ntpdsim, ntpkeygen, ntpleapfetch, and sitemap
That's the source of the extra clump of links. It looks reasonable if I
delete that line, but I'm not sure that's the appropriate fix.
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Sun Nov 22 08:13:49 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Sun, 22 Nov 2015 00:13:49 -0800
Subject: What's the relation between GitLab/issues and devel/TODO?
Message-ID: <20151122081349.96665406057@ip-64-139-1-69.sjc.megapath.net>
Where do we keep track of bugs?
There are 2 bugs that should be on our list.
The first is the obscure DNS mixup I ran into a while ago.
It's in ensure_workresp_empty_slot in libntp/work_thread.c
Appending to an array used as a fifo to make more room
doesn't work if the finger is pointing into the middle of the array.
There is similar code when passing names to the worker thread.
I think that one doesn't get triggered because the finger isn't
pointing into the middle when it fills up.
I think the right solution is to replace the array with a linked list.
It needs a lock and such.
A hack good-enough solution would be to make the array bigger.
Chris has been thinking about a major cleanup/simplification
of that whole area. That seems right to me. (If he doesn't do it, I will.)
The trigger case is a DNS name that does a lookup using packets
followed by 5 names that use the local /etc/hosts.
It didn't fail every time, but wasn't hard to tickle.
The second bug is a screwup in ntpq/mrulist.
The mrulist command may take a long time to collect all the data.
^C is supposed to stop collecting and print out what it has.
Instead, it sometimes gives an error message and bails.
Ctrl-C will stop MRU retrieval and display partial results.
1305 (0 updates) ^C./glypnod/ntpq/ntpq: select fails: Interrupted system
call***Server returns unknown error code -1
It doesn't happen all the time, but it isn't hard to tickle, at least in my
setup.
--
These are my opinions. I hate spam.
From esr at thyrsus.com Sun Nov 22 13:55:41 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Sun, 22 Nov 2015 08:55:41 -0500
Subject: Testing
In-Reply-To: <20151122050244.B7864406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151122044204.GA21002@thyrsus.com>
<20151122050244.B7864406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151122135541.GB25127@thyrsus.com>
Hal Murray :
>
> esr at thyrsus.com said:
> > Sadly, I don't know of any good tutorials on this. It is a swamp full of
> > razor blades for even very experienced C programmers. If you have a
> > particular exporession you want me to analyze I might be able to say
> > something useful.
>
> The old code was:
>
> int chars;
> char req_buf[CTL_MAX_DATA_LEN];
>
> req = req_buf;
> req_end = req_buf + sizeof(req_buf);
> #define REQ_ROOM (req_end - req)
>
> chars = strlen(buf);
> if (REQ_ROOM - chars < 1)
> break;
>
> The new code is:
>
> size_t chars;
>
> if (REQ_ROOM <= chars)
> break;
>
> The old if didn't work after chars changed to size_t.
Right. That's a good change. Any time you eliminate a subtraction you
eliminate a potential overflow point. I'm still not happy with this
code, because REQ_ROOM looks like a constant but conceals another
subtraction.
What happened here, I think, is that because of the signed to unsigned
conversion results of the subtraction that would have gone to less than zero
turned into a large unsigned value due to modular wraparound.
Hm. Maybe I need to *write* a tutorial on this. The trouble is that while I
probably know enough to do it, my knowledge is tacit and reactive rather
than explicit.
In the mean time, I'm going to follow Mark's advice and experiment with -Wextra.
Maybe that will flush out similar instances.
--
Eric S. Raymond
From esr at thyrsus.com Sun Nov 22 14:05:04 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Sun, 22 Nov 2015 09:05:04 -0500
Subject: What's the relation between GitLab/issues and devel/TODO?
In-Reply-To: <20151122081349.96665406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151122081349.96665406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151122140504.GC25127@thyrsus.com>
Hal Murray :
> Where do we keep track of bugs?
The bugtracker will usually be the best place, now that we have one.
devel/TODO may still be a better place for internal feature requests
and "it would be nice" notes that don't rise to the level of bugs.
> There are 2 bugs that should be on our list.
Please add these to the bugtracker. For PR reasons, if you know that
a bug is inherited from Classic, so mark it. I think that's true
of the first, perhaps not of the second.
--
Eric S. Raymond
From esr at thyrsus.com Sun Nov 22 14:11:26 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Sun, 22 Nov 2015 09:11:26 -0500
Subject: doc quirks
In-Reply-To: <20151122055016.3ED5D406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151122044907.GB21002@thyrsus.com>
<20151122055016.3ED5D406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151122141126.GD25127@thyrsus.com>
Hal Murray :
>
> > Dave Mills designed it that way. It wouldn't be difficult to change, but
> > I'm trying to avoid moving away from his look and feel before we have him
> > recruited/co-opted.
>
> Here is a sample ntpq page from NTP Classic, starting after the cartoon:
>
> More Help
> [HR]
> Synopsis
> ntpq [-46dinp] [-c command] [host] [...]
> Description
>
> The ntpq utility program is used to ...
>
> Here is the top of our ntpq.html:
>
> More Help
> [HR]
> Program Manual Pages
> [HR]
> ntpd - Network Time Protocol (NTP) daemon
> ntpdig - Simple Network Time Protocol (SNTP) client
> ntpq - standard NTP query program
> ntpfrob - frob the local clock hardware
> ntpkeygen - generate public and private keys
> ntpleapfetch(8) fetch and manage leap-offset file
> ntpdsim(8) - Network Time Protocol (NTP) simulator
> ntptime - read and set kernel time variables
> ntptrace - trace a chain of NTP servers back to the primary source
> Site Map
> (There are links behind most of those text strings.)
> [HR]
> Synopsis
> [HR]
> ntpq [-46dinpw] [-c command] [host] [...]
>
> Description
> [HR]
> The ntpq utility program is used to ...
>
> -------------
>
> docs/ntpq.txt includes:
> include::includes/manual.txt[]
> It's also included by ntpdsim, ntpkeygen, ntpleapfetch, and sitemap
>
> That's the source of the extra clump of links. It looks reasonable if I
> delete that line, but I'm not sure that's the appropriate fix.
It will be, once we don't have adhering to Dave Mills's present ideas about
correct page design as a major goal of the Web UI. That is most
likely to occur after we make the pilgrimage to Delaware and I get
a chance to have a nice long chat with him about it.
--
Eric S. Raymond
From esr at thyrsus.com Sun Nov 22 14:27:07 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Sun, 22 Nov 2015 09:27:07 -0500
Subject: doc quirks
In-Reply-To: <20151122052727.8A13F406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151122044907.GB21002@thyrsus.com>
<20151122052727.8A13F406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151122142707.GE25127@thyrsus.com>
Hal Murray :
>
> [+foo+]
>
> > Yes, that is supposed to map to const-width font - or in HTML
>
> from docs/includes/ntpq-body.txt
>
> +-w+, +--wide+::
>
> from build/docs/ntpq.html
>
>
> -w, --wide
>
>
> from build/ntpq/ntpq.1
>
> .RE
> .PP
> \-w, \-\-wide
> .RS 4
>
> It's possible that something is broken on my asciidoc setup.
On the Web side this was a CSS error which I just fixed. I don't know what to
do about the man page rendering, though; that looks like a bug in the a2x
stylesheets. I'll look for a way to report it upstream.
--
Eric S. Raymond
From hmurray at megapathdsl.net Sun Nov 22 20:25:33 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Sun, 22 Nov 2015 12:25:33 -0800
Subject: doc quirks
In-Reply-To: Message from "Eric S. Raymond"
of "Sun, 22 Nov 2015 09:11:26 EST." <20151122141126.GD25127@thyrsus.com>
Message-ID: <20151122202533.10E97406057@ip-64-139-1-69.sjc.megapath.net>
esr at thyrsus.com said:
> It will be, once we don't have adhering to Dave Mills's present ideas about
> correct page design as a major goal of the Web UI. That is most likely to
> occur after we make the pilgrimage to Delaware and I get a chance to have a
> nice long chat with him about it.
We aren't on the same wavelength yet. Let me try again.
The cartoon at the top is reproduced reasonably closely. (It is missing the
last edit.)
I'm trying to point out some cruft that is NOT in the version from NTP
Classic.
It looks good to me if I remove the includes/manual.txt, but I want to make
sure that you didn't expect that to do something important.
--
These are my opinions. I hate spam.
From esr at thyrsus.com Sun Nov 22 21:16:45 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Sun, 22 Nov 2015 16:16:45 -0500
Subject: doc quirks
In-Reply-To: <20151122202533.10E97406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151122141126.GD25127@thyrsus.com>
<20151122202533.10E97406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151122211645.GA22918@thyrsus.com>
Hal Murray :
>
> esr at thyrsus.com said:
> > It will be, once we don't have adhering to Dave Mills's present ideas about
> > correct page design as a major goal of the Web UI. That is most likely to
> > occur after we make the pilgrimage to Delaware and I get a chance to have a
> > nice long chat with him about it.
>
> We aren't on the same wavelength yet. Let me try again.
>
> The cartoon at the top is reproduced reasonably closely. (It is missing the
> last edit.)
>
> I'm trying to point out some cruft that is NOT in the version from NTP
> Classic.
>
> It looks good to me if I remove the includes/manual.txt, but I want to make
> sure that you didn't expect that to do something important.
Oh. In that case, remove it. That must have been a slip of someone's
finger while Nalette and I were converting the HTML to asciidoc.
--
Eric S. Raymond
From chrisj at ntpsec.org Mon Nov 23 01:21:37 2015
From: chrisj at ntpsec.org (Chris Johns)
Date: Mon, 23 Nov 2015 12:21:37 +1100
Subject: What's the relation between GitLab/issues and devel/TODO?
In-Reply-To: <20151122081349.96665406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151122081349.96665406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <56526A21.3040305@ntpsec.org>
On 22/11/2015 7:13 PM, Hal Murray wrote:
>
> Chris has been thinking about a major cleanup/simplification
> of that whole area. That seems right to me. (If he doesn't do it, I will.)
I need to get a stretch of time to do this but other issues are
distracting me. I will try look at the code this week.
Chris
From hmurray at megapathdsl.net Mon Nov 23 02:53:37 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Sun, 22 Nov 2015 18:53:37 -0800
Subject: feature 'CRYPTO' does not exist - bind at least one method to it
Message-ID: <20151123025337.2A4EB406057@ip-64-139-1-69.sjc.megapath.net>
That's from the top of ./waf build
I don't know what it's trying to tell me. It seems to continue building so
I'm ignoring it.
--
These are my opinions. I hate spam.
From verm at darkbeer.org Mon Nov 23 03:05:17 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Mon, 23 Nov 2015 03:05:17 +0000
Subject: feature 'CRYPTO' does not exist - bind at least one method to it
In-Reply-To: <20151123025337.2A4EB406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151123025337.2A4EB406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151123030517.GA29884@darkbeer.org>
On 2015-11-22 18:53 -0800, Hal Murray wrote:
>
> That's from the top of ./waf build
>
> I don't know what it's trying to tell me. It seems to continue building so
> I'm ignoring it.
Fixed, I meant to put this in use=
Thanks.
Amar.
From esr at snark.thyrsus.com Mon Nov 23 03:41:22 2015
From: esr at snark.thyrsus.com (Eric S. Raymond)
Date: Sun, 22 Nov 2015 22:41:22 -0500 (EST)
Subject: The new website directory
Message-ID: <20151123034122.1A059C00A6@snark.thyrsus.com>
You wrote this:
>I converted the WWW repo to waf and put it on oldtimer in
>
> /data/git/www-asciidoc.git
>
>I will hookup buildbot to build and then install to www.ntpsec.org after every
>commit.
>
>Please take a look at the repo to make sure it works for everyone here. It
>should. Usage is simple:
>
> # waf configure --prefix=/path/to/www/
> # waf install
>
>You don't need to install it to view it just go to the build/ dir and open
>index.html it will work fine.
And then this:
>In order to see the site add:
>
>140.211.9.65 www.ntpsec.org nwww
>
>To your hosts file.
>
>The source is built and installed after every commit via Buildbot:
>
> https://buildbot.ntpsec.org/#/builders/13
>
>I will enable it after I'm given the all-clear. This will fix our SSL issues.
You didn't specify an URL to clone from. I had to figure out that it
was ssh://esr at oldtimer.ntpsec.org/data/git/www-asciidoc.git
One I cloned it, I found that the README still said
>Edit cycle:
>
>1. Modify the asciidoc.
>
>2. Run 'rebuild' to generate HTML from the masters.
>
>3. Commit everything, then push.
>
>The github.io site ignores the .txt files and makes the HTML visible.
>
>The HTML is normally write-locked to remind you not to modify it.
even though there is no rebuild script there any more. Your change
may have been well-intentioned, but because you failed to document
it properly you have changed a setup I knew how to use into a setup
I don't know how to use.
I am left with the following questions:
1. If I modify a .txt file and push it, will the corresponding *.html
file be created and published?
2. If not, what rebuild step must I perform?
3. Why did the site favicon stop being displayed? What can be done to
fix that?
4. Why is waf involved at all?
5. What problem was this solving? Why were you making apparently
gratuitous changes to the website publishing machinery when what
0.9.1 most needs from you is for all the unit tests to work?
--
Eric S. Raymond
The right of self-defense is the first law of nature: in most
governments it has been the study of rulers to confine this right
within the narrowest limits possible. Wherever standing armies
are kept up, and when the right of the people to keep and bear
arms is, under any color or pretext whatsoever, prohibited,
liberty, if not already annihilated, is on the brink of
destruction."
-- Henry St. George Tucker (in Blackstone's Commentaries)
From fallenpegasus at gmail.com Mon Nov 23 04:09:20 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Mon, 23 Nov 2015 04:09:20 +0000
Subject: The new website directory
In-Reply-To: <20151123034122.1A059C00A6@snark.thyrsus.com>
References: <20151123034122.1A059C00A6@snark.thyrsus.com>
Message-ID:
Hi Eric, everyone:
The website canonical repo is the one on gitlab. I asked Amar to use the
gitlab push hooks so that pushes to that repo would rebuild the HTML and
put the results on the web server.
We had to move our web pages off GitHub Pages to our own web server, to
solve the problem of bricking someone's browser against our site if they
manually typed "https://ntpsec.org".
I myself find it useful to have WAF rebuild the HTML, because I don't have
asciidoc installed on every machine I may be using when editing the site.
Plus I was noticing random changes in the site stemming from me having
slightly different versions of asciidoc installed than other team members.
Changing it to being built via the push hooks solved that problem.
Open a bug on the issue tracker about the favicon, and Amar will be able to
fix it.
Thanks!
..m
On Sun, Nov 22, 2015 at 7:41 PM Eric S. Raymond
wrote:
> You wrote this:
>
> >I converted the WWW repo to waf and put it on oldtimer in
> >
> > /data/git/www-asciidoc.git
> >
> >I will hookup buildbot to build and then install to www.ntpsec.org after
> every
> >commit.
> >
> >Please take a look at the repo to make sure it works for everyone here.
> It
> >should. Usage is simple:
> >
> > # waf configure --prefix=/path/to/www/
> > # waf install
> >
> >You don't need to install it to view it just go to the build/ dir and open
> >index.html it will work fine.
>
> And then this:
>
> >In order to see the site add:
> >
> >140.211.9.65 www.ntpsec.org nwww
> >
> >To your hosts file.
> >
> >The source is built and installed after every commit via Buildbot:
> >
> > https://buildbot.ntpsec.org/#/builders/13
> >
> >I will enable it after I'm given the all-clear. This will fix our SSL
> issues.
>
> You didn't specify an URL to clone from. I had to figure out that it
> was ssh://esr at oldtimer.ntpsec.org/data/git/www-asciidoc.git
>
> One I cloned it, I found that the README still said
>
> >Edit cycle:
> >
> >1. Modify the asciidoc.
> >
> >2. Run 'rebuild' to generate HTML from the masters.
> >
> >3. Commit everything, then push.
> >
> >The github.io site ignores the .txt files and makes the HTML visible.
> >
> >The HTML is normally write-locked to remind you not to modify it.
>
> even though there is no rebuild script there any more. Your change
> may have been well-intentioned, but because you failed to document
> it properly you have changed a setup I knew how to use into a setup
> I don't know how to use.
>
> I am left with the following questions:
>
> 1. If I modify a .txt file and push it, will the corresponding *.html
> file be created and published?
>
> 2. If not, what rebuild step must I perform?
>
> 3. Why did the site favicon stop being displayed? What can be done to
> fix that?
>
> 4. Why is waf involved at all?
>
> 5. What problem was this solving? Why were you making apparently
> gratuitous changes to the website publishing machinery when what
> 0.9.1 most needs from you is for all the unit tests to work?
> --
> Eric S. Raymond
>
> The right of self-defense is the first law of nature: in most
> governments it has been the study of rulers to confine this right
> within the narrowest limits possible. Wherever standing armies
> are kept up, and when the right of the people to keep and bear
> arms is, under any color or pretext whatsoever, prohibited,
> liberty, if not already annihilated, is on the brink of
> destruction."
> -- Henry St. George Tucker (in Blackstone's Commentaries)
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From esr at thyrsus.com Mon Nov 23 04:58:41 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Sun, 22 Nov 2015 23:58:41 -0500
Subject: The new website directory
In-Reply-To:
References: <20151123034122.1A059C00A6@snark.thyrsus.com>
Message-ID: <20151123045841.GA32744@thyrsus.com>
Mark Atwood :
> Hi Eric, everyone:
>
> The website canonical repo is the one on gitlab. I asked Amar to use the
> gitlab push hooks so that pushes to that repo would rebuild the HTML and
> put the results on the web server.
So, I should ignore the repo at
ssh://esr at oldtimer.ntpsec.org/data/git/www-asciidoc.git
?
> We had to move our web pages off GitHub Pages to our own web server, to
> solve the problem of bricking someone's browser against our site if they
> manually typed "https://ntpsec.org".
>
> I myself find it useful to have WAF rebuild the HTML, because I don't have
> asciidoc installed on every machine I may be using when editing the site.
Do I have to run waf when I want to push a change to the site?
> Plus I was noticing random changes in the site stemming from me having
> slightly different versions of asciidoc installed than other team members.
> Changing it to being built via the push hooks solved that problem.
>
> Open a bug on the issue tracker about the favicon, and Amar will be able to
> fix it.
Done.
The README still needs to describe correct procedure?
--
Eric S. Raymond
From hmurray at megapathdsl.net Mon Nov 23 05:32:18 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Sun, 22 Nov 2015 21:32:18 -0800
Subject: doc quirks
In-Reply-To: Message from "Eric S. Raymond"
of "Sun, 22 Nov 2015 09:27:07 EST." <20151122142707.GE25127@thyrsus.com>
Message-ID: <20151123053218.CB48C406057@ip-64-139-1-69.sjc.megapath.net>
> On the Web side this was a CSS error which I just fixed.
Thanks.
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Mon Nov 23 05:42:11 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Sun, 22 Nov 2015 21:42:11 -0800
Subject: doc quirks
In-Reply-To: Message from "Eric S. Raymond"
of "Sun, 22 Nov 2015 16:16:45 EST." <20151122211645.GA22918@thyrsus.com>
Message-ID: <20151123054211.26892406057@ip-64-139-1-69.sjc.megapath.net>
[cruft on top of web pages]
> Oh. In that case, remove it. That must have been a slip of someone's
> finger while Nalette and I were converting the HTML to asciidoc.
I figured out what is going on. You and Nalette did the right thing.
The problem is that I run my browser with javascript disabled. There are a
few places where the web pages from NTP Classic use javascript to include
stuff that is replicated on several pages. I didn't see that stuff that was
included that way.
Of course, I didn't catch that until I had pushed the "fix", so I pushed an
unfix.
I did the unfix by hand. Is there a way to undo changes in git? Or get it
to make a change that undoes a particular commit?
--
These are my opinions. I hate spam.
From esr at thyrsus.com Mon Nov 23 05:50:11 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Mon, 23 Nov 2015 00:50:11 -0500
Subject: doc quirks
In-Reply-To: <20151123054211.26892406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151122211645.GA22918@thyrsus.com>
<20151123054211.26892406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151123055011.GA1354@thyrsus.com>
Hal Murray :
> I did the unfix by hand. Is there a way to undo changes in git? Or get it
> to make a change that undoes a particular commit?
Yes. Look up "git revert".
--
Eric S. Raymond
From hmurray at megapathdsl.net Wed Nov 25 01:33:20 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Tue, 24 Nov 2015 17:33:20 -0800
Subject: How do I find out which test is failing?
Message-ID: <20151125013320.E87BB406057@ip-64-139-1-69.sjc.megapath.net>
After a git pull a few minutes ago:
Waf: Leaving directory `/home/murray/ntpsec/play/glypnod'
execution summary
tests that pass 1/2
/home/murray/ntpsec/play/glypnod/tests/test_ntpdig
tests that fail 1/2
/home/murray/ntpsec/play/glypnod/tests/test_libntp
'build' finished successfully (2m40.091s)
There is no info in the normal printout. (Or I'm not looking in the right
place.)
[343/366] Compiling tests/common/tests_main.c
[344/366] Linking glypnod/tests/test_ntpdig
[345/366] Processing glypnod/tests/test_ntpdig
[346/366] Compiling tests/libntp/calyearstart.c
[355/366] Compiling tests/common/caltime.c
[356/366] Linking glypnod/tests/test_libntp
[357/366] Processing glypnod/tests/test_libntp
[358/366] Compiling ntpwait/ntpwait
--
These are my opinions. I hate spam.
From verm at darkbeer.org Wed Nov 25 01:35:39 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Wed, 25 Nov 2015 01:35:39 +0000
Subject: How do I find out which test is failing?
In-Reply-To: <20151125013320.E87BB406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151125013320.E87BB406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151125013539.GA73900@darkbeer.org>
On 2015-11-24 17:33 -0800, Hal Murray wrote:
>
> After a git pull a few minutes ago:
>
> Waf: Leaving directory `/home/murray/ntpsec/play/glypnod'
> execution summary
> tests that pass 1/2
> /home/murray/ntpsec/play/glypnod/tests/test_ntpdig
> tests that fail 1/2
> /home/murray/ntpsec/play/glypnod/tests/test_libntp
> 'build' finished successfully (2m40.091s)
waf check -v
It's probably the prettydate test I just pushed a fix for that.
Amar.
From hmurray at megapathdsl.net Wed Nov 25 02:26:00 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Tue, 24 Nov 2015 18:26:00 -0800
Subject: How do I find out which test is failing?
In-Reply-To: Message from Amar Takhar
of "Wed, 25 Nov 2015 01:35:39 GMT." <20151125013539.GA73900@darkbeer.org>
Message-ID: <20151125022600.33205406057@ip-64-139-1-69.sjc.megapath.net>
verm at darkbeer.org said:
> waf check -v
Thanks.
Please try to set things up so the details get saved somewhere so that I see
what happened after a test fails. I'd like to be setup that way in case we
ever get a test that is flaky rather than solid. You might as well print it
out if you detect a failure.
> It's probably the prettydate test I just pushed a fix for that.
Thanks. It's happy now.
--
These are my opinions. I hate spam.
From verm at darkbeer.org Wed Nov 25 02:30:54 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Wed, 25 Nov 2015 02:30:54 +0000
Subject: How do I find out which test is failing?
In-Reply-To: <20151125022600.33205406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151125013539.GA73900@darkbeer.org>
<20151125022600.33205406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151125023054.GA74708@darkbeer.org>
On 2015-11-24 18:26 -0800, Hal Murray wrote:
>
> verm at darkbeer.org said:
> > waf check -v
>
> Thanks.
>
> Please try to set things up so the details get saved somewhere so that I see
> what happened after a test fails. I'd like to be setup that way in case we
> ever get a test that is flaky rather than solid. You might as well print it
> out if you detect a failure.
Can you open a ticket for this please and assign it to me?
Thanks.
Amar.
From fallenpegasus at gmail.com Wed Nov 25 05:00:58 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Wed, 25 Nov 2015 05:00:58 +0000
Subject: checking in
Message-ID:
Hi everyone.
Sorry for going silent for half a week, I'm helping to build Yet Another
501c6 open source project foundation to wrap around Yet Another big
multi-company open source project. When it announces foundation formation,
I'll say what it is.
I'll backtrack this evening and tomorrow morning through list emails to
catch up.
Also, this is a good time for everyone to chime in with what things you've
got working this past week, and what you thing you will be hacking on next
week. ("Next week" being modulo the US Thanksgiving Holiday).
Thanks!
..m
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From esr at thyrsus.com Wed Nov 25 05:27:19 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 25 Nov 2015 00:27:19 -0500
Subject: checking in
In-Reply-To:
References:
Message-ID: <20151125052719.GA22989@thyrsus.com>
Mark Atwood :
> Also, this is a good time for everyone to chime in with what things you've
> got working this past week, and what you thing you will be hacking on next
> week. ("Next week" being modulo the US Thanksgiving Holiday).
Fixing small bugs opportunistically.
Working on TESTFRAME. About 75% of the capture side is done, but the last
three intercepts are the hard ones. There's some strange stuff going on
in the swings-both-ways IPv4/IPv6 networking code that I'm going to need
to grok before I can do the packet-in/packet-out intercepts.
--
Eric S. Raymond
From chrisj at ntpsec.org Wed Nov 25 07:23:12 2015
From: chrisj at ntpsec.org (Chris Johns)
Date: Wed, 25 Nov 2015 18:23:12 +1100
Subject: checking in
In-Reply-To:
References:
Message-ID: <565561E0.5020001@ntpsec.org>
On 25/11/2015 4:00 PM, Mark Atwood wrote:
> Also, this is a good time for everyone to chime in with what things
> you've got working this past week, and what you thing you will be
> hacking on next week. ("Next week" being modulo the US Thanksgiving
> Holiday).
Working on the threading. I have been attempting to figure out
scheduled_sleep and dnsworker_ctx. It seems to back off DNS after a
signal is received. Any insights would be appreciated. Also been getting
some back ground info on pools from Hal, again related to DNS and so
threading.
Chris
From hmurray at megapathdsl.net Wed Nov 25 08:54:09 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 25 Nov 2015 00:54:09 -0800
Subject: Another lesson on compare warnings please ...
Message-ID: <20151125085409.AB79B406057@ip-64-139-1-69.sjc.megapath.net>
In ntpd/refclock_palisade.h
short rpt_cnt; /* TSIP packet length so far */
char rpt_buf[BMAX]; /* packet assembly buffer */
>From ntpd/refclock_palisade.c
else if (up->rpt_cnt > BMAX)
That code is correct, but I would have used sizeof(rpt_buf) rather than BMAX.
With a little bit of poking around, you can figure out that rpt_buf is the
buffer. With BMAX, you have to go look in another file to see that it's the
size of the buffer.
But that gets:
../ntpd/refclock_palisade.c:1415:24: warning: comparison between signed and unsigned integer expressions [-Wsign-compare]
else if (up->rpt_cnt > sizeof(up->rpt_buf)) {
Both BMAX and sizeof work if I change the short to u_int.
So what is the type of sizeof, and what is the type of a literal constant? I expected them to be the same.
What is the best way to do this sort of thing?
Do I get a segfault if I botch something and get an underflow on a unsigned int and then use it as an index with a 64 bit pointer?
--
These are my opinions. I hate spam.
From joel at rtems.org Wed Nov 25 14:28:38 2015
From: joel at rtems.org (Joel Sherrill)
Date: Wed, 25 Nov 2015 08:28:38 -0600
Subject: Another lesson on compare warnings please ...
In-Reply-To: <20151125085409.AB79B406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151125085409.AB79B406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID:
On Nov 25, 2015 2:54 AM, "Hal Murray" wrote:
>
>
> In ntpd/refclock_palisade.h
> short rpt_cnt; /* TSIP packet length so far */
> char rpt_buf[BMAX]; /* packet assembly buffer */
>
> From ntpd/refclock_palisade.c
> else if (up->rpt_cnt > BMAX)
>
> That code is correct, but I would have used sizeof(rpt_buf) rather than
BMAX.
> With a little bit of poking around, you can figure out that rpt_buf is
the
> buffer. With BMAX, you have to go look in another file to see that it's
the
> size of the buffer.
>
> But that gets:
> ../ntpd/refclock_palisade.c:1415:24: warning: comparison between signed
and unsigned integer expressions [-Wsign-compare]
> else if (up->rpt_cnt > sizeof(up->rpt_buf)) {
>
> Both BMAX and sizeof work if I change the short to u_int.
>
> So what is the type of sizeof, and what is the type of a literal
constant? I expected them to be the same.
Use size_t.
> What is the best way to do this sort of thing?
>
> Do I get a segfault if I botch something and get an underflow on a
unsigned int and then use it as an index with a 64 bit pointer?
>
>
> --
> These are my opinions. I hate spam.
>
>
>
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From verm at darkbeer.org Wed Nov 25 14:55:15 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Wed, 25 Nov 2015 14:55:15 +0000
Subject: checking in
In-Reply-To:
References:
Message-ID: <20151125145515.GA86577@darkbeer.org>
On 2015-11-25 05:00 +0000, Mark Atwood wrote:
> Also, this is a good time for everyone to chime in with what things you've got
> working this past week, and what you thing you will be hacking on next week. ??
> ("Next week" being modulo the US Thanksgiving Holiday).
Working on the new test suite alongside converting the current one. I'm far
enough in that I'm getting a clear idea of how it should be re-organised for
easier usage.
Along with this I've:
* Started work on automated coverage reporting which will go on the web.
* Setup docs.ntpsec.org (not active, today hopefully)
- Builds HTML NTP docs
- I will be adding the manpages eventually
* Building gprof reports into waf for the testsuite and regular binaries.
I'm about 50-60% done the testsuite it's hard to tell since many tests are
obsolete and several are going to have to be moved around / split up. Hopefully
it will be done within a week or two.
Amar.
From fallenpegasus at gmail.com Wed Nov 25 17:06:37 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Wed, 25 Nov 2015 17:06:37 +0000
Subject: checking in
In-Reply-To: <20151125145515.GA86577@darkbeer.org>
References:
<20151125145515.GA86577@darkbeer.org>
Message-ID:
thank you Amar.
please focus primarily on the testsuite.
..m
On Wed, Nov 25, 2015, 6:55 AM Amar Takhar wrote:
> On 2015-11-25 05:00 +0000, Mark Atwood wrote:
> > Also, this is a good time for everyone to chime in with what things
> you've got
> > working this past week, and what you thing you will be hacking on next
> week.
> > ("Next week" being modulo the US Thanksgiving Holiday).
>
> Working on the new test suite alongside converting the current one. I'm
> far
> enough in that I'm getting a clear idea of how it should be re-organised
> for
> easier usage.
>
> Along with this I've:
>
> * Started work on automated coverage reporting which will go on the web.
> * Setup docs.ntpsec.org (not active, today hopefully)
> - Builds HTML NTP docs
> - I will be adding the manpages eventually
> * Building gprof reports into waf for the testsuite and regular binaries.
>
> I'm about 50-60% done the testsuite it's hard to tell since many tests are
> obsolete and several are going to have to be moved around / split up.
> Hopefully
> it will be done within a week or two.
>
>
> Amar.
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From verm at darkbeer.org Wed Nov 25 17:13:20 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Wed, 25 Nov 2015 17:13:20 +0000
Subject: checking in
In-Reply-To:
References:
<20151125145515.GA86577@darkbeer.org>
Message-ID: <20151125171320.GB88317@darkbeer.org>
On 2015-11-25 17:06 +0000, Mark Atwood wrote:
> thank you Amar.
>
> please focus primarily on the testsuite.
I'm not sure what you're asking. With exception to the docs -- which is an open
ticket this is all testsuite work.
Amar.
From fallenpegasus at gmail.com Wed Nov 25 17:35:27 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Wed, 25 Nov 2015 17:35:27 +0000
Subject: checking in
In-Reply-To: <20151125171320.GB88317@darkbeer.org>
References:
<20151125145515.GA86577@darkbeer.org>
<20151125171320.GB88317@darkbeer.org>
Message-ID:
Ah, I misunderstood.
So, the state we are in now is:
- All the tests run?
- All the test pass?
This is great news!
Regarding "Working on the new test suite alongside converting the current
one."
Why a new test suite? What are you converting the current one into?
..m
On Wed, Nov 25, 2015 at 9:13 AM Amar Takhar wrote:
> On 2015-11-25 17:06 +0000, Mark Atwood wrote:
> > thank you Amar.
> >
> > please focus primarily on the testsuite.
>
> I'm not sure what you're asking. With exception to the docs -- which is
> an open
> ticket this is all testsuite work.
>
>
> Amar.
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From verm at darkbeer.org Wed Nov 25 17:42:10 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Wed, 25 Nov 2015 17:42:10 +0000
Subject: checking in
In-Reply-To:
References:
<20151125145515.GA86577@darkbeer.org>
<20151125171320.GB88317@darkbeer.org>
Message-ID: <20151125174210.GA89109@darkbeer.org>
On 2015-11-25 17:35 +0000, Mark Atwood wrote:
> Ah, I misunderstood.
>
> So, the state we are in now is:
> - All the tests run?
> - All the test pass?
When you say "all" yes all the ones converted run and pass -- with exception to a
few which I will get back to later they've been commented out.
> Regarding "Working on the new test suite alongside converting the current one."
>
> Why a new test suite??? What are you converting the current one into?
The old test suite used Google Test which is C++. The development model of the
project changed to one incompatible with the project. Right now I am converting
it all to C using Unity.
The 'new' test suite involves re-arranging it into a more suitable format to
edit and test. We need to be setup better for regression testing as well.
It's complicated since the C++ code uses classes and function overloading which
is going to require a lot of refactoring. I'm leaving these ones to the end
>From the old C++ tests it's about 60% complete conversion wise. I'll hopefully
have this done 'soon' barring any strangeness which I've already hit..
Amar.
From joel at rtems.org Wed Nov 25 18:17:53 2015
From: joel at rtems.org (Joel Sherrill)
Date: Wed, 25 Nov 2015 12:17:53 -0600
Subject: checking in
In-Reply-To:
References:
Message-ID:
I have been attempting to build on CentOS/RHEL 6 and 7. I filed tickets
based on experiences on each
CentOS 6 does not have an RPM for libevent2. Thus without special work by
each person building NTPsec, it won't build. AFAIK this distribution is the
latest RHEL approved for use on DoD networks. I could not find a STIG for
RHEL 7 so any organization which requires the DISA STIG to be applied is
stuck at 6.
My CentOS 7 was missing a package and the build didn't disable the
reference clocks that depended on it. Ticket filed.
The CentOS 6 issue raises some questions. Did we intend to support this OS?
Long term, it highlights the problem of assuming a newer external support
library is going to be part of a LTS OS distribution. I don't know if this
was on the master list of supported OSes and checked when libevent2 as a
dependency was discussed. I don't recall having a checklist OSes to ensure
we checked all.
--joel
On Nov 24, 2015 11:01 PM, "Mark Atwood" wrote:
> Hi everyone.
>
> Sorry for going silent for half a week, I'm helping to build Yet Another
> 501c6 open source project foundation to wrap around Yet Another big
> multi-company open source project. When it announces foundation formation,
> I'll say what it is.
>
> I'll backtrack this evening and tomorrow morning through list emails to
> catch up.
>
> Also, this is a good time for everyone to chime in with what things you've
> got working this past week, and what you thing you will be hacking on next
> week. ("Next week" being modulo the US Thanksgiving Holiday).
>
> Thanks!
>
> ..m
>
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From dtpoirot at gmail.com Wed Nov 25 18:33:27 2015
From: dtpoirot at gmail.com (Daniel Poirot)
Date: Wed, 25 Nov 2015 12:33:27 -0600
Subject: checking in
In-Reply-To:
References:
Message-ID: <00d101d127af$c6ff5f80$54fe1e80$@gmail.com>
I am using the following in Ubuntu 14.04 LTS:
sudo apt-get update
sudo apt-get install bison libevent-2.0-5 libevent-dev libcap2 libcap-dev libssl1.0.0 libssl-dev libreadline6 libreadline6-dev pps-tools asciidoc
git clone https://github.com/ntpsec/ntpsec.git
cd ntpsec
/usr/bin/python2.7 /home/user/work/ntpsec/waf clean
/usr/bin/python2.7 /home/user/work/ntpsec/waf configure
/usr/bin/python2.7 /home/user/work/ntpsec/waf build check
From: devel [mailto:devel-bounces at ntpsec.org] On Behalf Of Joel Sherrill
Sent: Wednesday, November 25, 2015 12:18 PM
To: Mark Atwood
Cc: devel at ntpsec.org
Subject: Re: checking in
I have been attempting to build on CentOS/RHEL 6 and 7. I filed tickets based on experiences on each
CentOS 6 does not have an RPM for libevent2. Thus without special work by each person building NTPsec, it won't build. AFAIK this distribution is the latest RHEL approved for use on DoD networks. I could not find a STIG for RHEL 7 so any organization which requires the DISA STIG to be applied is stuck at 6.
My CentOS 7 was missing a package and the build didn't disable the reference clocks that depended on it. Ticket filed.
The CentOS 6 issue raises some questions. Did we intend to support this OS? Long term, it highlights the problem of assuming a newer external support library is going to be part of a LTS OS distribution. I don't know if this was on the master list of supported OSes and checked when libevent2 as a dependency was discussed. I don't recall having a checklist OSes to ensure we checked all.
--joel
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From fallenpegasus at gmail.com Wed Nov 25 19:03:55 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Wed, 25 Nov 2015 19:03:55 +0000
Subject: States of tests
In-Reply-To: <20151125174210.GA89109@darkbeer.org>
References:
<20151125145515.GA86577@darkbeer.org>
<20151125171320.GB88317@darkbeer.org>
<20151125174210.GA89109@darkbeer.org>
Message-ID:
On Wed, Nov 25, 2015 at 9:42 AM Amar Takhar wrote:
> On 2015-11-25 17:35 +0000, Mark Atwood wrote:
> > Ah, I misunderstood.
> >
> > So, the state we are in now is:
> > - All the tests run?
> > - All the test pass?
>
> When you say "all" yes all the ones converted run and pass -- with
> exception to a
> few which I will get back to later they've been commented out.
>
Ok. Why were they commented out? Did we comment them out, or were they
commented out in NTP Classic?
|> Why a new test suite? What are you converting the current one into?
>
> The old test suite used Google Test which is C++. The development model
> of the
> project changed to one incompatible with the project. Right now I am
> converting
> it all to C using Unity.
>
Ok. Expand that a bit for me, please. The development model of the
Google Test project changed to one incompatible with the NTPsec project?
Or the development model of the NTPsec project changed to one incompatible
with the Google Test project?
I am inclined agree to want the tests in standard C99 C instead of C++, but
also it needs to bring a value-add, such as making it easier for non-core
contributors to write new tests and run them.
> The 'new' test suite involves re-arranging it into a more suitable format
> to
> edit and test. We need to be setup better for regression testing as well.
>
> It's complicated since the C++ code uses classes and function overloading
> which
> is going to require a lot of refactoring. I'm leaving these ones to the
> end
>
> From the old C++ tests it's about 60% complete conversion wise. I'll
> hopefully
> have this done 'soon' barring any strangeness which I've already hit..
>
>
Ok. Do please email to devel at ntpsec.org each time you convert another
test, and what the test was that you converted.
I'm pushing really hard on the tests because getting all the tests running
is a good marker for 0.9.1, and also once we have that working, I'm going
to ask you to go back and start the work to waf-ify the fork point and
forward, so we can get bisect to work.
Thanks!
..m
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From fallenpegasus at gmail.com Wed Nov 25 19:16:32 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Wed, 25 Nov 2015 19:16:32 +0000
Subject: regarding RHEL6, libevent2, and DOD STIG
In-Reply-To:
References:
Message-ID:
On Wed, Nov 25, 2015 at 10:17 AM Joel Sherrill wrote:
> CentOS 6 does not have an RPM for libevent2. Thus without special work by
> each person building NTPsec, it won't build. AFAIK this distribution is the
> latest RHEL approved for use on DoD networks. I could not find a STIG for
> RHEL 7 so any organization which requires the DISA STIG to be applied is
> stuck at 6.
>
What do other packages that have to run on DoD RHEL6 systems do? Do you
have any contacts in DOD contractors who already have to face/fix this
issue?
If there is no clean way to do this, then there is no clean way to do it,
and we will just have to bake that "special work" into the build
instructions or build scripts. What does the special work involve?
We don't have to rush to fix this, it doesnt have to be in 0.9.1 or 0.9.2,
but it probably should be in 1.0.0.
I will email some contacts at RH about if it's possible to backport a
package into official RHEL6/CentOS6.
..m
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From verm at darkbeer.org Wed Nov 25 19:17:24 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Wed, 25 Nov 2015 19:17:24 +0000
Subject: States of tests
In-Reply-To:
References:
<20151125145515.GA86577@darkbeer.org>
<20151125171320.GB88317@darkbeer.org>
<20151125174210.GA89109@darkbeer.org>
Message-ID: <20151125191724.GA90630@darkbeer.org>
On 2015-11-25 19:03 +0000, Mark Atwood wrote:
>
> Ok.?? Why were they commented out??? Did we comment them out, or were they
> commented out in NTP Classic?
It's 3 tests, I commented them out because I may have a better understanding of
why they aren't working after the rest of the conversion is done. It's a waste
of time trying to figure it out now. It is 3 tests of 97.
I will fix them at the end.
> Ok.?? Expand that a bit for me, please. ?? The development model of the Google
> Test project changed to one incompatible with the NTPsec project??? Or the
> development model of the NTPsec project changed to one incompatible with the
> Google Test project?
The first. they recommend you include the entire project within your project in
order to use it. Also, there are some quirks running it with C code that did
not exist before -- not back in 2010.
> I am inclined agree to want the tests in standard C99 C instead of C++, but
> also it needs to bring a value-add, such as making it easier for non-core
> contributors to write new tests and run them.
This is one of the main reasons why I am doing this I stated that in my first
email: to make it easier to maintain and do regression tests.
> Ok.?? Do please email to devel at ntpsec.org??each time you convert another test,
> and what the test was that you converted.
If you look at the commit logs you can see that I'm converting each batch one by
one. If you subscribe to vc at ntpsec.org you will see the commit logs. The name
of the tests and files speak for themselves. Documentation for these tests
already exist at:
https://support.ntp.org/bin/view/Dev/NtpdFunctionMap
https://support.ntp.org/bin/view/Dev/UnitTestingNotes
I will be creating better documentation for this at the end which will be
combined with the new test harness.
> I'm pushing really hard on the tests because getting all the tests running is a
> good marker for 0.9.1, and also once we have that working, I'm going to ask you
> to go back and start the work to waf-ify the fork point and forward, so we can
> get bisect to work.
I have explained what we need to do in order to get this to work it is far more
than just the build system.
We need to coalesce commits and re-play them over the fork point with
pre-commit building to ensure they work.
The current build system as-is can be used for this as long as we rename all the
defines and do the file moves right at the start point.
Just doing the build system does not ensure each commit actually builds which is
the whole point of making bisect useful.
If it's easier think of it this way. The development done now was done to
figure out what we need to build on our platforms. Now that we know this we
push the build system to the front and put everything on top of it. With what
we have now this ensures every commit will actually build which is something
that was not possible before since we did not know what we needed
Amar.
From hmurray at megapathdsl.net Wed Nov 25 19:21:20 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 25 Nov 2015 11:21:20 -0800
Subject: States of tests
Message-ID: <20151125192120.4A25440605C@ip-64-139-1-69.sjc.megapath.net>
fallenpegasus at gmail.com said:
> I am inclined agree to want the tests in standard C99 C instead of C++, but
> also it needs to bring a value-add, such as making it easier for non-core
> contributors to write new tests and run them.
Core contributors too. Some of us don't know anything about C++.
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Wed Nov 25 20:24:34 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 25 Nov 2015 12:24:34 -0800
Subject: Tests broken...
Message-ID: <20151125202434.7904040605C@ip-64-139-1-69.sjc.megapath.net>
[175/204] Compiling tests/libntp/a_md5encrypt.c
../tests/libntp/a_md5encrypt.c:30:25: error: initializer element is not constant
const int totalLength = packetLength + keyIdLength + digestLength;
I can't figure out what's going on. It looks reasonable to me.
const int packetLength = 16;
const int keyIdLength = 4;
const int digestLength = 16;
const int totalLength = packetLength + keyIdLength + digestLength;
In case it matters, that's from a Fedora 22 system.
gcc (GCC) 5.1.1 20150618 (Red Hat 5.1.1-4)
--
These are my opinions. I hate spam.
From verm at darkbeer.org Wed Nov 25 20:38:53 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Wed, 25 Nov 2015 20:38:53 +0000
Subject: Tests broken...
In-Reply-To: <20151125202434.7904040605C@ip-64-139-1-69.sjc.megapath.net>
References: <20151125202434.7904040605C@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151125203853.GA92298@darkbeer.org>
On 2015-11-25 12:24 -0800, Hal Murray wrote:
> [175/204] Compiling tests/libntp/a_md5encrypt.c
> ../tests/libntp/a_md5encrypt.c:30:25: error: initializer element is not constant
> const int totalLength = packetLength + keyIdLength + digestLength;
>
> I can't figure out what's going on. It looks reasonable to me.
>
> const int packetLength = 16;
> const int keyIdLength = 4;
> const int digestLength = 16;
> const int totalLength = packetLength + keyIdLength + digestLength;
>
> In case it matters, that's from a Fedora 22 system.
> gcc (GCC) 5.1.1 20150618 (Red Hat 5.1.1-4)
It's because packetLength, keyIdLength, digestLength could be redefined using
#define so it may not be constant. It wants it to be:
const int totalLength = 36; or 16 + 4 + 16 this way it cannot be changed.
That's quite pedantic I like it. I didn't even get a warning under CLang 3.4.1.
I'll put in a temp fix and mark it for looking at later on.
Amar.
From fallenpegasus at gmail.com Wed Nov 25 20:57:16 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Wed, 25 Nov 2015 20:57:16 +0000
Subject: Tests broken...
In-Reply-To: <20151125203853.GA92298@darkbeer.org>
References: <20151125202434.7904040605C@ip-64-139-1-69.sjc.megapath.net>
<20151125203853.GA92298@darkbeer.org>
Message-ID:
| It's because packetLength, keyIdLength, digestLength could be redefined
using
#define so it may not be constant. It wants it to be:
That can't be right. #define is done by the preprocessor, so what the
compiler sees *is*
const int totalLength = 16 + 4 + 16;
Hal, I suggest seting the flag in the compiler to dump the output of the
prepropressor, and find the expression, and see if it's a constant
expression or not.
..m
On Wed, Nov 25, 2015 at 12:38 PM Amar Takhar wrote:
> On 2015-11-25 12:24 -0800, Hal Murray wrote:
> > [175/204] Compiling tests/libntp/a_md5encrypt.c
> > ../tests/libntp/a_md5encrypt.c:30:25: error: initializer element is not
> constant
> > const int totalLength = packetLength + keyIdLength + digestLength;
> >
> > I can't figure out what's going on. It looks reasonable to me.
> >
> > const int packetLength = 16;
> > const int keyIdLength = 4;
> > const int digestLength = 16;
> > const int totalLength = packetLength + keyIdLength + digestLength;
> >
> > In case it matters, that's from a Fedora 22 system.
> > gcc (GCC) 5.1.1 20150618 (Red Hat 5.1.1-4)
>
> It's because packetLength, keyIdLength, digestLength could be redefined
> using
> #define so it may not be constant. It wants it to be:
>
> const int totalLength = 36; or 16 + 4 + 16 this way it cannot be changed.
>
> That's quite pedantic I like it. I didn't even get a warning under CLang
> 3.4.1.
>
> I'll put in a temp fix and mark it for looking at later on.
>
>
> Amar.
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From verm at darkbeer.org Wed Nov 25 21:05:28 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Wed, 25 Nov 2015 21:05:28 +0000
Subject: Tests broken...
In-Reply-To:
References: <20151125202434.7904040605C@ip-64-139-1-69.sjc.megapath.net>
<20151125203853.GA92298@darkbeer.org>
Message-ID: <20151125210528.GA92751@darkbeer.org>
On 2015-11-25 20:57 +0000, Mark Atwood wrote:
> #define so it may not be constant.?? It wants it to be:
>
> That can't be right. ??#define is done by the??preprocessor, so what the compiler
> sees *is*??
> ????const int totalLength = 16 + 4 + 16;
>
> Hal, I suggest seting the flag in the compiler to dump the output of the
> prepropressor, and find the expression, and see if it's a constant expression
> or not.
Making the change I suggested fixed the problem.
The bottom answer here explains why we're getting the error quite nicely:
http://stackoverflow.com/questions/3025050/error-initializer-element-is-not-constant-when-trying-to-initialize-variable-w
This is not the first time I've run into it but it is the first time it's
happened by default.
Amar.
From esr at thyrsus.com Wed Nov 25 21:22:32 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 25 Nov 2015 16:22:32 -0500
Subject: The libevent issue (Was: Re: checking in)
In-Reply-To:
References:
Message-ID: <20151125212232.GA31609@thyrsus.com>
Joel Sherrill :
> I have been attempting to build on CentOS/RHEL 6 and 7. I filed tickets
> based on experiences on each
>
> CentOS 6 does not have an RPM for libevent2. Thus without special work by
> each person building NTPsec, it won't build. AFAIK this distribution is the
> latest RHEL approved for use on DoD networks. I could not find a STIG for
> RHEL 7 so any organization which requires the DISA STIG to be applied is
> stuck at 6.
This is a little bad, but not unrecoverable. Only ntpdig requires libevent2;
ntpd, in particular, builds without it. If we have to document that as a
limitation I don't think we're going to lose customers over it.
I have changed the ticket to have the 'build' label and asked Amar to change the
build so it fails gracefully in the absence of libevent2, making everything
but ntpdig.
> My CentOS 7 was missing a package and the build didn't disable the
> reference clocks that depended on it. Ticket filed.
This can be fixed with a relatively minor build system tweak. I have added
that request to the ticket.
> The CentOS 6 issue raises some questions. Did we intend to support this OS?
> Long term, it highlights the problem of assuming a newer external support
> library is going to be part of a LTS OS distribution. I don't know if this
> was on the master list of supported OSes and checked when libevent2 as a
> dependency was discussed. I don't recall having a checklist OSes to ensure
> we checked all.
I guess now is a good time for me to come clean about one of the
assumptions behind my original technical planning.
I never pushed having a checklist of OSes to support for the same
reason I advocated coding to a strict POSIX.1-2001/C99 baseline.
(Joel, this discussion took place well before you were on board.)
Experience with GPSD had persuaded me that the traditional Unix
strategy of keeping a lot of porting code around just in case led to
carrying a lot of historical baggage that had outlasted its time. I
believed having a large a-priori set of Unix variants to support would
pull in that direction as well, and it was not the direction I thought
we should go. I believed our overwhelming priority should be reducing
attack surface by discarding code.
See the project motto: "Perfection is achieved, not when there is
nothing more to add, but when there is nothing left to take away."
This choice was not just me being cute - I viewed it as a direct
implication of our security focus.
In accordance, I deliberately went to the opposite extreme - to be as
aggressive and strict in platform requirements as I thought I could
get away with, in order to throw away as much code as possible,
and then patch around the resulting porting issues.
So far this strategy has had exactly two real downsides:
1. We've had to simulate POSIX clock_gettime() for MAC OS X using a native call.
2. The libevent2 dependency blocks ntpdig on CentOS 6 and older NetBSDs as well.
If these are the worst problems we have as a result - and that looks likely
at this point - I'm going to claim a strategic victory. We are, as far as I
know, good on all *current* LTSes.
Now here's the controversial part:
In truth, I was anticipating something like the libevent problem
(failure to insta-port to older releases) with an attitude almost like
hope. That is, if we hadn't run into *anything* like it, I'd consider
that I hadn't pushed quite hard enough towards "nothing left to take
away". While I would have lived with that outcome, I would have
considered it suboptimal.
In effect, I was hoping for a sort of optimal pain level, enough to signal
strong success at the clean-up-and-pare-down without seriously messing
up functionality. I think we have that.
I'll admit to having been a little quiet and sneaky about that
success criterion; I didn't want the arguments I'd get if I made it
explicit.
Finally, I will observe that if this let-it-break-a-little stance seems
like a dicy or over-bold choice to have made, some reflection on why
Classic NTP stagnated may be in order. Fear of breaking anything can
be a trap; among other reasons you want a system architect around is to
exercise judgment about when it's time to bust out, judgment that takes
into account the whole-life-cycle perspective. Including considerations
like reducing downstream maintainance costs, attack surface and
defect rates.
--
Eric S. Raymond
From esr at thyrsus.com Wed Nov 25 21:31:30 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 25 Nov 2015 16:31:30 -0500
Subject: States of tests
In-Reply-To:
References:
<20151125145515.GA86577@darkbeer.org>
<20151125171320.GB88317@darkbeer.org>
<20151125174210.GA89109@darkbeer.org>
Message-ID: <20151125213130.GB31609@thyrsus.com>
Mark Atwood :
> I'm pushing really hard on the tests because getting all the tests running
> is a good marker for 0.9.1, and also once we have that working, I'm going
> to ask you to go back and start the work to waf-ify the fork point and
> forward, so we can get bisect to work.
*blink*
This is why you are the right PM, not me - I had not actually thought
that far forward. Yes, I got that all unit tests is the right
completion marker for 0.9.1, but, despite all our discussion of it,
hadn't quite gotten to the pro-bisection replay as being the right
*next* thing. Too focused on TESTFRAME.
Duh. Yes. Will execute.
--
Eric S. Raymond
From esr at thyrsus.com Wed Nov 25 21:32:56 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 25 Nov 2015 16:32:56 -0500
Subject: States of tests
In-Reply-To: <20151125192120.4A25440605C@ip-64-139-1-69.sjc.megapath.net>
References: <20151125192120.4A25440605C@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151125213256.GC31609@thyrsus.com>
Hal Murray :
>
> fallenpegasus at gmail.com said:
> > I am inclined agree to want the tests in standard C99 C instead of C++, but
> > also it needs to bring a value-add, such as making it easier for non-core
> > contributors to write new tests and run them.
>
> Core contributors too. Some of us don't know anything about C++.
And some of us are constantly struggling to know less about it. :-)
--
Eric S. Raymond
From dtpoirot at gmail.com Wed Nov 25 21:53:08 2015
From: dtpoirot at gmail.com (Daniel Poirot)
Date: Wed, 25 Nov 2015 15:53:08 -0600
Subject: Target OS list? (Was: RE: The libevent issue (Was: Re: checking in))
Message-ID: <005701d127cb$ac4bace0$04e306a0$@gmail.com>
Speaking of requirements and such...
Is there a candidate list of OSes to be targeted? You can put just about
anything on a VM these days! ;-)
- dan
From esr at thyrsus.com Wed Nov 25 23:11:57 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 25 Nov 2015 18:11:57 -0500
Subject: Target OS list? (Was: RE: The libevent issue (Was: Re: checking
in))
In-Reply-To: <005701d127cb$ac4bace0$04e306a0$@gmail.com>
References: <005701d127cb$ac4bace0$04e306a0$@gmail.com>
Message-ID: <20151125231157.GB2456@thyrsus.com>
Daniel Poirot :
> Speaking of requirements and such...
>
> Is there a candidate list of OSes to be targeted? You can put just about
> anything on a VM these days! ;-)
We don't have a really elaborate one, partly for reasons I explained in my
recent long reply to Joel. We've been focused on our main development
platforms, which happen to be Debian-family Linuxes and recent FreeBSD,
and on POSIX/C99 compliance.
You should talk with Amar about this; he presently runs the VM farm.
--
Eric S. Raymond
From hmurray at megapathdsl.net Wed Nov 25 23:16:10 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 25 Nov 2015 15:16:10 -0800
Subject: Target OS list? (Was: RE: The libevent issue (Was: Re: checking
in))
In-Reply-To: Message from "Daniel Poirot"
of "Wed, 25 Nov 2015 15:53:08 CST." <005701d127cb$ac4bace0$04e306a0$@gmail.com>
Message-ID: <20151125231610.DD32840605C@ip-64-139-1-69.sjc.megapath.net>
dtpoirot at gmail.com said:
> Is there a candidate list of OSes to be targeted?
For Linux, OS isn't good enough. You also have to specify the distro. I
think I've seen something similar for one of the *BSDs, but I forget the
details.
For all OSes/distros, you also need to specify the version. Most
OSes/distros support 2 versions, or 2.5 depending on how you count. There is
normally something like:
The current released version
The previous released version
The in-progress next version.
There is often a bit of overlap for a short while after a new version is
released. For example, on Fedora 3 versions are normally supported for a
month or so before support for the now old-old version gets dropped.
> You can put just about anything on a VM these days! ;-)
I'm not familiar with running VMs. Is xen on Linux/Fedora reasonably easy to
setup and learn? (and reasonably solit) Can I boot from any handy CD? Or
do things work a lot better if the guest kernal knows it will be running on
VM?
--
These are my opinions. I hate spam.
From fallenpegasus at gmail.com Wed Nov 25 23:18:09 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Wed, 25 Nov 2015 15:18:09 -0800
Subject: The libevent issue (Was: Re: checking in)
In-Reply-To: <20151125212232.GA31609@thyrsus.com>
References:
<20151125212232.GA31609@thyrsus.com>
Message-ID:
Ive reached out to contacts of contacts at "Red Hat Consulting for the Public Sector? about how they deal with libevent2?s absence in RHEL6 on DOD systems. ?Unfortunately, its now past 6pm in Raleigh and in DC on the US Thanksgiving Holiday.
Mayhap I get some suggestions back next week.
..m
On November 25, 2015 at 1:23:02 PM, Eric S. Raymond (esr at thyrsus.com) wrote:
> Joel Sherrill :
> > I have been attempting to build on CentOS/RHEL 6 and 7. I filed tickets
> > based on experiences on each
> >
> > CentOS 6 does not have an RPM for libevent2. Thus without special work by
> > each person building NTPsec, it won't build. AFAIK this distribution is the
> > latest RHEL approved for use on DoD networks. I could not find a STIG for
> > RHEL 7 so any organization which requires the DISA STIG to be applied is
> > stuck at 6.
>
> This is a little bad, but not unrecoverable. Only ntpdig requires libevent2;
> ntpd, in particular, builds without it. If we have to document that as a
> limitation I don't think we're going to lose customers over it.
>
> I have changed the ticket to have the 'build' label and asked Amar to change the
> build so it fails gracefully in the absence of libevent2, making everything
> but ntpdig.
>
> > My CentOS 7 was missing a package and the build didn't disable the
> > reference clocks that depended on it. Ticket filed.
>
> This can be fixed with a relatively minor build system tweak. I have added
> that request to the ticket.
>
> > The CentOS 6 issue raises some questions. Did we intend to support this OS?
> > Long term, it highlights the problem of assuming a newer external support
> > library is going to be part of a LTS OS distribution. I don't know if this
> > was on the master list of supported OSes and checked when libevent2 as a
> > dependency was discussed. I don't recall having a checklist OSes to ensure
> > we checked all.
>
> I guess now is a good time for me to come clean about one of the
> assumptions behind my original technical planning.
>
> I never pushed having a checklist of OSes to support for the same
> reason I advocated coding to a strict POSIX.1-2001/C99 baseline.
> (Joel, this discussion took place well before you were on board.)
>
> Experience with GPSD had persuaded me that the traditional Unix
> strategy of keeping a lot of porting code around just in case led to
> carrying a lot of historical baggage that had outlasted its time. I
> believed having a large a-priori set of Unix variants to support would
> pull in that direction as well, and it was not the direction I thought
> we should go. I believed our overwhelming priority should be reducing
> attack surface by discarding code.
>
> See the project motto: "Perfection is achieved, not when there is
> nothing more to add, but when there is nothing left to take away."
> This choice was not just me being cute - I viewed it as a direct
> implication of our security focus.
>
> In accordance, I deliberately went to the opposite extreme - to be as
> aggressive and strict in platform requirements as I thought I could
> get away with, in order to throw away as much code as possible,
> and then patch around the resulting porting issues.
>
> So far this strategy has had exactly two real downsides:
>
> 1. We've had to simulate POSIX clock_gettime() for MAC OS X using a native call.
>
> 2. The libevent2 dependency blocks ntpdig on CentOS 6 and older NetBSDs as well.
>
> If these are the worst problems we have as a result - and that looks likely
> at this point - I'm going to claim a strategic victory. We are, as far as I
> know, good on all *current* LTSes.
>
> Now here's the controversial part:
>
> In truth, I was anticipating something like the libevent problem
> (failure to insta-port to older releases) with an attitude almost like
> hope. That is, if we hadn't run into *anything* like it, I'd consider
> that I hadn't pushed quite hard enough towards "nothing left to take
> away". While I would have lived with that outcome, I would have
> considered it suboptimal.
>
> In effect, I was hoping for a sort of optimal pain level, enough to signal
> strong success at the clean-up-and-pare-down without seriously messing
> up functionality. I think we have that.
>
> I'll admit to having been a little quiet and sneaky about that
> success criterion; I didn't want the arguments I'd get if I made it
> explicit.
>
> Finally, I will observe that if this let-it-break-a-little stance seems
> like a dicy or over-bold choice to have made, some reflection on why
> Classic NTP stagnated may be in order. Fear of breaking anything can
> be a trap; among other reasons you want a system architect around is to
> exercise judgment about when it's time to bust out, judgment that takes
> into account the whole-life-cycle perspective. Including considerations
> like reducing downstream maintainance costs, attack surface and
> defect rates.
> --
> Eric S. Raymond
>
From joel at rtems.org Wed Nov 25 23:33:43 2015
From: joel at rtems.org (Joel Sherrill)
Date: Wed, 25 Nov 2015 17:33:43 -0600
Subject: The libevent issue (Was: Re: checking in)
In-Reply-To:
References:
<20151125212232.GA31609@thyrsus.com>
Message-ID:
FWIW I am OK with disabling what requires libevent2 when it isn't available
as long as the waf configure ends with a very clear message of what had to
be disabled.
And hopefully, we can build a table of platforms supporting everything,
missing X, missing y, etc. and file tickets that are referenced in
configure output.
On Nov 25, 2015 5:18 PM, "Mark Atwood" wrote:
> Ive reached out to contacts of contacts at "Red Hat Consulting for the
> Public Sector? about how they deal with libevent2?s absence in RHEL6 on DOD
> systems. Unfortunately, its now past 6pm in Raleigh and in DC on the US
> Thanksgiving Holiday.
>
> Mayhap I get some suggestions back next week.
>
> ..m
>
>
> On November 25, 2015 at 1:23:02 PM, Eric S. Raymond (esr at thyrsus.com)
> wrote:
> > Joel Sherrill :
> > > I have been attempting to build on CentOS/RHEL 6 and 7. I filed tickets
> > > based on experiences on each
> > >
> > > CentOS 6 does not have an RPM for libevent2. Thus without special work
> by
> > > each person building NTPsec, it won't build. AFAIK this distribution
> is the
> > > latest RHEL approved for use on DoD networks. I could not find a STIG
> for
> > > RHEL 7 so any organization which requires the DISA STIG to be applied
> is
> > > stuck at 6.
> >
> > This is a little bad, but not unrecoverable. Only ntpdig requires
> libevent2;
> > ntpd, in particular, builds without it. If we have to document that as a
> > limitation I don't think we're going to lose customers over it.
> >
> > I have changed the ticket to have the 'build' label and asked Amar to
> change the
> > build so it fails gracefully in the absence of libevent2, making
> everything
> > but ntpdig.
> >
> > > My CentOS 7 was missing a package and the build didn't disable the
> > > reference clocks that depended on it. Ticket filed.
> >
> > This can be fixed with a relatively minor build system tweak. I have
> added
> > that request to the ticket.
> >
> > > The CentOS 6 issue raises some questions. Did we intend to support
> this OS?
> > > Long term, it highlights the problem of assuming a newer external
> support
> > > library is going to be part of a LTS OS distribution. I don't know if
> this
> > > was on the master list of supported OSes and checked when libevent2 as
> a
> > > dependency was discussed. I don't recall having a checklist OSes to
> ensure
> > > we checked all.
> >
> > I guess now is a good time for me to come clean about one of the
> > assumptions behind my original technical planning.
> >
> > I never pushed having a checklist of OSes to support for the same
> > reason I advocated coding to a strict POSIX.1-2001/C99 baseline.
> > (Joel, this discussion took place well before you were on board.)
> >
> > Experience with GPSD had persuaded me that the traditional Unix
> > strategy of keeping a lot of porting code around just in case led to
> > carrying a lot of historical baggage that had outlasted its time. I
> > believed having a large a-priori set of Unix variants to support would
> > pull in that direction as well, and it was not the direction I thought
> > we should go. I believed our overwhelming priority should be reducing
> > attack surface by discarding code.
> >
> > See the project motto: "Perfection is achieved, not when there is
> > nothing more to add, but when there is nothing left to take away."
> > This choice was not just me being cute - I viewed it as a direct
> > implication of our security focus.
> >
> > In accordance, I deliberately went to the opposite extreme - to be as
> > aggressive and strict in platform requirements as I thought I could
> > get away with, in order to throw away as much code as possible,
> > and then patch around the resulting porting issues.
> >
> > So far this strategy has had exactly two real downsides:
> >
> > 1. We've had to simulate POSIX clock_gettime() for MAC OS X using a
> native call.
> >
> > 2. The libevent2 dependency blocks ntpdig on CentOS 6 and older NetBSDs
> as well.
> >
> > If these are the worst problems we have as a result - and that looks
> likely
> > at this point - I'm going to claim a strategic victory. We are, as far
> as I
> > know, good on all *current* LTSes.
> >
> > Now here's the controversial part:
> >
> > In truth, I was anticipating something like the libevent problem
> > (failure to insta-port to older releases) with an attitude almost like
> > hope. That is, if we hadn't run into *anything* like it, I'd consider
> > that I hadn't pushed quite hard enough towards "nothing left to take
> > away". While I would have lived with that outcome, I would have
> > considered it suboptimal.
> >
> > In effect, I was hoping for a sort of optimal pain level, enough to
> signal
> > strong success at the clean-up-and-pare-down without seriously messing
> > up functionality. I think we have that.
> >
> > I'll admit to having been a little quiet and sneaky about that
> > success criterion; I didn't want the arguments I'd get if I made it
> > explicit.
> >
> > Finally, I will observe that if this let-it-break-a-little stance seems
> > like a dicy or over-bold choice to have made, some reflection on why
> > Classic NTP stagnated may be in order. Fear of breaking anything can
> > be a trap; among other reasons you want a system architect around is to
> > exercise judgment about when it's time to bust out, judgment that takes
> > into account the whole-life-cycle perspective. Including considerations
> > like reducing downstream maintainance costs, attack surface and
> > defect rates.
> > --
> > Eric S. Raymond
> >
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From hmurray at megapathdsl.net Thu Nov 26 00:13:52 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 25 Nov 2015 16:13:52 -0800
Subject: The libevent issue (Was: Re: checking in)
In-Reply-To: Message from "Eric S. Raymond"
of "Wed, 25 Nov 2015 16:22:32 EST." <20151125212232.GA31609@thyrsus.com>
Message-ID: <20151126001352.AD08340605C@ip-64-139-1-69.sjc.megapath.net>
> This is a little bad, but not unrecoverable. Only ntpdig requires
> libevent2; ntpd, in particular, builds without it. If we have to document
> that as a limitation I don't think we're going to lose customers over it.
I agree with your general approach, but it's more complicated than that.
libevent2 is currently linked with ntpkeygen
I just tried removing it and it still builds. I'll push the fix (or send an
update) shortly.
ntpdig is the ntpdate replacement. It's often used as part of the boot time
startup tangle. CentOS 7 does that. I'm pretty sure we can work out a clean
alternative, but we haven't done that yet. Even if they like it, it's not
obvious to me how long it takes for a conservative organization to merge in
that sort of change. They could continue to use the old ntpdate.
--
These are my opinions. I hate spam.
From esr at thyrsus.com Thu Nov 26 01:34:51 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 25 Nov 2015 20:34:51 -0500
Subject: The libevent issue (Was: Re: checking in)
In-Reply-To:
References:
<20151125212232.GA31609@thyrsus.com>
Message-ID: <20151126013451.GA3896@thyrsus.com>
Joel Sherrill :
> FWIW I am OK with disabling what requires libevent2 when it isn't available
> as long as the waf configure ends with a very clear message of what had to
> be disabled.
Yes, that is clearly the right thing.
> And hopefully, we can build a table of platforms supporting everything,
> missing X, missing y, etc. and file tickets that are referenced in
> configure output.
Hal has been agitating for a features vs. test-status matrix for a while.
I agree it would be a good idea, but I'm not well-positioned to do anything
about it myself - I don't do enough cross-platform testing. I think either Hal
or Amar will have to take the lead on this.
--
Eric S. Raymond
From esr at thyrsus.com Thu Nov 26 02:12:01 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 25 Nov 2015 21:12:01 -0500
Subject: The libevent issue (Was: Re: checking in)
In-Reply-To: <20151126001352.AD08340605C@ip-64-139-1-69.sjc.megapath.net>
References: <20151125212232.GA31609@thyrsus.com>
<20151126001352.AD08340605C@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151126021201.GB3896@thyrsus.com>
Hal Murray :
>
> > This is a little bad, but not unrecoverable. Only ntpdig requires
> > libevent2; ntpd, in particular, builds without it. If we have to document
> > that as a limitation I don't think we're going to lose customers over it.
>
> I agree with your general approach, but it's more complicated than that.
>
> libevent2 is currently linked with ntpkeygen
> I just tried removing it and it still builds. I'll push the fix (or send an
> update) shortly.
Just pulled it - thanks.
> ntpdig is the ntpdate replacement. It's often used as part of the boot time
> startup tangle. CentOS 7 does that.
Are you sure? I did a check on major distributions in the debate around dropping
ntpdate. I'm pretty sure I checked Fedora and they were launching with ntpd -g
like everybody else.
--
Eric S. Raymond
From hmurray at megapathdsl.net Thu Nov 26 03:34:47 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Wed, 25 Nov 2015 19:34:47 -0800
Subject: The libevent issue (Was: Re: checking in)
In-Reply-To: Message from "Eric S. Raymond"
of "Wed, 25 Nov 2015 21:12:01 EST." <20151126021201.GB3896@thyrsus.com>
Message-ID: <20151126033447.6D3C140605C@ip-64-139-1-69.sjc.megapath.net>
esr at thyrsus.com said:
>> ntpdig is the ntpdate replacement. It's often used as part of the
>> boot time startup tangle. CentOS 7 does that.
> Are you sure? I did a check on major distributions in the debate around
> dropping ntpdate. I'm pretty sure I checked Fedora and they were launching
> with ntpd -g like everybody else.
Anything ntp related on my systems has been hacked to run whatever I'm
testing and/or some of my systems have been upgraded from many releases ago
and who knows what got left behind. So I could easily be confused.
Did you check CentOS as compared to Fedora?
In any case, we need a how-to-start-ntpd document that covers all the issues.
The ones I know about are:
the initial time may be way off
wait until the time gets set
start up as fast as possible
data bases freak out if time goes backwards
--
These are my opinions. I hate spam.
From dtpoirot at gmail.com Thu Nov 26 03:40:07 2015
From: dtpoirot at gmail.com (Daniel Poirot)
Date: Wed, 25 Nov 2015 21:40:07 -0600
Subject: Target OS list? (Was: RE: The libevent issue (Was: Re: checking
in))
In-Reply-To: <20151125231610.DD32840605C@ip-64-139-1-69.sjc.megapath.net>
References: Message from "Daniel Poirot" of "Wed,
25 Nov 2015 15:53:08 CST."
<005701d127cb$ac4bace0$04e306a0$@gmail.com>
<20151125231610.DD32840605C@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <000601d127fc$253335d0$6f99a170$@gmail.com>
I just wasted the afternoon trying to coerce Outlook into bottom-posting.
What are folks using for am MUA? I am a grey-beard but not enough of one to
use emacs for mail...
Speaking of the grey around the muzzle, after 15 years at NASA, I am in my
second decade of selling and supporting commercial software development
tools into the Linux market.
All of Linux that matters can be divided into two parts - Red Hat-based
(CentOS, Fedora) and Debian-based (Ubuntu). Capture them and the rest
follow.
The *BSD's are strong in the enterprise server and Internet backbone.
OpenBSD, NetBSD and FreeBSD are like the axis of Cartesian-space - common
origin but orthogonal in every way that matters!
I would expect a favorable reception in the Solaris camp but there is little
else in the vendor UNIX world still around. The giants - Irix, Ultrix, HP-UX
and AIX - are all but gone.
The testing effort is highly important. Once a full test suite is in place,
Linux distros can be knocked out several per day!
I am very comfortable answering questions in the VM area. My desktop has 16
cores and 72 GB RAM. There are usually several VMs running! One can stand up
a minimal system in just a few minutes. I generally use type-2 hypervisors
like VirtualBox or VMWare rather than the bare metal type.
The wild card in the quest for robust, secure time service may very well be
Android! Mac OS seems well represented already and nobody wants to be
bothered by Windows just yet...
Is DistroWatch still the best measure of the market?
- dan
-----Original Message-----
From: Hal Murray [mailto:hmurray at megapathdsl.net]
Sent: Wednesday, November 25, 2015 5:16 PM
To: Daniel Poirot
Cc: devel at ntpsec.org; hmurray at megapathdsl.net
Subject: Re: Target OS list? (Was: RE: The libevent issue (Was: Re: checking
in))
dtpoirot at gmail.com said:
> Is there a candidate list of OSes to be targeted?
For Linux, OS isn't good enough. You also have to specify the distro. I
think I've seen something similar for one of the *BSDs, but I forget the
details.
For all OSes/distros, you also need to specify the version. Most
OSes/distros support 2 versions, or 2.5 depending on how you count. There
is normally something like:
The current released version
The previous released version
The in-progress next version.
There is often a bit of overlap for a short while after a new version is
released. For example, on Fedora 3 versions are normally supported for a
month or so before support for the now old-old version gets dropped.
> You can put just about anything on a VM these days! ;-)
I'm not familiar with running VMs. Is xen on Linux/Fedora reasonably easy
to setup and learn? (and reasonably solit) Can I boot from any handy CD?
Or do things work a lot better if the guest kernal knows it will be running
on VM?
--
These are my opinions. I hate spam.
From esr at thyrsus.com Thu Nov 26 04:26:35 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 25 Nov 2015 23:26:35 -0500
Subject: The libevent issue (Was: Re: checking in)
In-Reply-To: <20151126033447.6D3C140605C@ip-64-139-1-69.sjc.megapath.net>
References: <20151126021201.GB3896@thyrsus.com>
<20151126033447.6D3C140605C@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151126042635.GB5243@thyrsus.com>
Hal Murray :
> > Are you sure? I did a check on major distributions in the debate around
> > dropping ntpdate. I'm pretty sure I checked Fedora and they were launching
> > with ntpd -g like everybody else.
>
> Anything ntp related on my systems has been hacked to run whatever I'm
> testing and/or some of my systems have been upgraded from many releases ago
> and who knows what got left behind. So I could easily be confused.
>
> Did you check CentOS as compared to Fedora?
I don't think I did. Situation still confused.
> In any case, we need a how-to-start-ntpd document that covers all the issues.
> The ones I know about are:
> the initial time may be way off
> wait until the time gets set
> start up as fast as possible
> data bases freak out if time goes backwards
Agreed. docs/quick.txt might be a start.
--
Eric S. Raymond
From esr at thyrsus.com Thu Nov 26 04:41:54 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Wed, 25 Nov 2015 23:41:54 -0500
Subject: Target OS list? (Was: RE: The libevent issue (Was: Re: checking
in))
In-Reply-To: <000601d127fc$253335d0$6f99a170$@gmail.com>
References: <005701d127cb$ac4bace0$04e306a0$@gmail.com>
<20151125231610.DD32840605C@ip-64-139-1-69.sjc.megapath.net>
<000601d127fc$253335d0$6f99a170$@gmail.com>
Message-ID: <20151126044154.GC5243@thyrsus.com>
Daniel Poirot :
> I just wasted the afternoon trying to coerce Outlook into bottom-posting.
>
> What are folks using for am MUA? I am a grey-beard but not enough of one to
> use emacs for mail...
mutt, here.
> Speaking of the grey around the muzzle, after 15 years at NASA, I am in my
> second decade of selling and supporting commercial software development
> tools into the Linux market.
>
> All of Linux that matters can be divided into two parts - Red Hat-based
> (CentOS, Fedora) and Debian-based (Ubuntu). Capture them and the rest
> follow.
>
> The *BSD's are strong in the enterprise server and Internet backbone.
> OpenBSD, NetBSD and FreeBSD are like the axis of Cartesian-space - common
> origin but orthogonal in every way that matters!
That pretty much matches the assessment we have of how to get early adoption.
Our strategy has been Linux (mostly Debian family) first, FreeBSD second,
others as they fall in our laps, have a Windows port but don't stress out
about getting it quickly.
> I would expect a favorable reception in the Solaris camp but there is little
> else in the vendor UNIX world still around. The giants - Irix, Ultrix, HP-UX
> and AIX - are all but gone.
I had the impression AIX and HP-UX were still ponderable, though declining.
> I am very comfortable answering questions in the VM area. My desktop has 16
> cores and 72 GB RAM. There are usually several VMs running! One can stand up
> a minimal system in just a few minutes. I generally use type-2 hypervisors
> like VirtualBox or VMWare rather than the bare metal type.
Right, you should have a long conversation with Amar. I'm trying to
stay walled off from those details; I have other things I have to focus on.
> The wild card in the quest for robust, secure time service may very well be
> Android! Mac OS seems well represented already and nobody wants to be
> bothered by Windows just yet...
Interesting. NTP Classic traditionally has a Windowa port.
> Is DistroWatch still the best measure of the market?
Dunno. Haven't followed it closely enough in years.
--
Eric S. Raymond
From fallenpegasus at gmail.com Thu Nov 26 05:28:34 2015
From: fallenpegasus at gmail.com (Mark Atwood)
Date: Wed, 25 Nov 2015 21:28:34 -0800
Subject: Target OS list? (Was: RE: The libevent issue (Was: Re:
checking in))
In-Reply-To: <20151126044154.GC5243@thyrsus.com>
References: <005701d127cb$ac4bace0$04e306a0$@gmail.com>
<20151125231610.DD32840605C@ip-64-139-1-69.sjc.megapath.net>
<000601d127fc$253335d0$6f99a170$@gmail.com>
<20151126044154.GC5243@thyrsus.com>
Message-ID:
On November 25, 2015 at 8:41:58 PM, Eric S. Raymond (esr at thyrsus.com) wrote:
> Daniel Poirot :
> > I would expect a favorable reception in the Solaris camp but there is little
> > else in the vendor UNIX world still around. The giants - Irix, Ultrix, HP-UX
> > and AIX - are all but gone.
>
> I had the impression AIX and HP-UX were still ponderable, though declining.
HP sells a *lot* of expensive support contracts for HP-UX, for OpenVMS, and for Tandem Nonstop.
I have it as a level B priority to get build lab accounts on those OSes into our buildbot farm, and then lean on my friends at IBM to do the same for AIX and for Z.
The reason this is even thinkable is that they all at least claim to have a POSIX compliant OS API.
..m?
From dtpoirot at gmail.com Thu Nov 26 11:50:31 2015
From: dtpoirot at gmail.com (Daniel Poirot)
Date: Thu, 26 Nov 2015 05:50:31 -0600
Subject: Target OS list? (Was: RE: The libevent issue (Was: Re: checking
in))
In-Reply-To:
References: <005701d127cb$ac4bace0$04e306a0$@gmail.com>
<20151125231610.DD32840605C@ip-64-139-1-69.sjc.megapath.net>
<000601d127fc$253335d0$6f99a170$@gmail.com>
<20151126044154.GC5243@thyrsus.com>
Message-ID: <002e01d12840$a9313f50$fb93bdf0$@gmail.com>
I am not here to rain on anyone's parade!
The sooner there is a high fidelity test suite and formal acceptance test, the sooner the "level B's" can help themselves!
I have Solaris and OpenVMS in a VM but never found AIX or HP-UX.
- Dan
-----Original Message-----
From: Mark Atwood [mailto:fallenpegasus at gmail.com]
Sent: Wednesday, November 25, 2015 11:29 PM
To: esr at thyrsus.com; Daniel Poirot
Cc: devel at ntpsec.org
Subject: Re: Target OS list? (Was: RE: The libevent issue (Was: Re: checking in))
On November 25, 2015 at 8:41:58 PM, Eric S. Raymond (esr at thyrsus.com) wrote:
> Daniel Poirot :
> > I would expect a favorable reception in the Solaris camp but there
> > is little else in the vendor UNIX world still around. The giants -
> > Irix, Ultrix, HP-UX and AIX - are all but gone.
>
> I had the impression AIX and HP-UX were still ponderable, though declining.
HP sells a *lot* of expensive support contracts for HP-UX, for OpenVMS, and for Tandem Nonstop.
I have it as a level B priority to get build lab accounts on those OSes into our buildbot farm, and then lean on my friends at IBM to do the same for AIX and for Z.
The reason this is even thinkable is that they all at least claim to have a POSIX compliant OS API.
..m
From dtpoirot at gmail.com Thu Nov 26 12:07:30 2015
From: dtpoirot at gmail.com (Daniel Poirot)
Date: Thu, 26 Nov 2015 06:07:30 -0600
Subject: How much for a 1 GHz computer?
Message-ID: <003301d12843$07bc35f0$1734a1d0$@gmail.com>
This broke my brain:
https://www.raspberrypi.org/blog/raspberry-pi-zero/
buildbot for everyone!
From joel at rtems.org Thu Nov 26 13:01:03 2015
From: joel at rtems.org (Joel Sherrill)
Date: Thu, 26 Nov 2015 07:01:03 -0600
Subject: How much for a 1 GHz computer?
In-Reply-To: <003301d12843$07bc35f0$1734a1d0$@gmail.com>
References: <003301d12843$07bc35f0$1734a1d0$@gmail.com>
Message-ID:
On Nov 26, 2015 6:07 AM, "Daniel Poirot" wrote:
>
> This broke my brain:
> https://www.raspberrypi.org/blog/raspberry-pi-zero/
>
> buildbot for everyone!
>
An RTEMS user built a SPARC cross toolset for RTEMS, built RTEMS, and ran
tests on a CPU simulator on an original Pi. The performance was comparable
to a mid-90s Sun workstation. About a SPARC Station 20. :)
When we moved to a Pentium Pro Linux computer, build times were five times
faster though.
--joel
> _______________________________________________
> devel mailing list
> devel at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
From esr at thyrsus.com Thu Nov 26 13:37:15 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Thu, 26 Nov 2015 08:37:15 -0500
Subject: ntpsec: reference driver 38/hopf 6021
In-Reply-To: <4f92eb835caeaf15c14cf6fcef8d83b1@nocabal.de>
References: <4f92eb835caeaf15c14cf6fcef8d83b1@nocabal.de>
Message-ID: <20151126133715.GA10005@thyrsus.com>
(Copied to the ntpsec devel list.)
Martin Kotzan :
> Hi Eric,
>
> great to see you are taking ntp into this century!
>
>
> I'd like to holler about the planned removal of driver type 38 (Hopf 6021
> serial).
>
> This driver is still needed by current Hopf clocks connected via serial
> connection, so the "6021" part is probably a misnomer. These clocks are
> used for infrastructure applications on systems not connected to the
> internet. (So my employer will start using ntpsec in 5 years or so when
> it has made it into an enterprise distribution.)
>
> Reference:
> http://www.hopf.com/en/ => Download => Technical Descriptions
> http://www.hopf.com/en/manuals_en.html
>
> e.g. current GPS clock 6844:
> http://www.hopf.com/manuals/english/pdf_6---/e6844(RC)_0601.pdf
>
> "6.3.3 Data String for NTP (Network Time Protocol)"
> "parameter of transmission:
> - hopf Standard String (6021)"
>
>
> Regards,
> Martin
Noted. You are our very first device-saving holler from outside the
devteam itself.
Should we change the device name to just "Hopf serial"? What models other
than the 6021 does this cover?
--
Eric S. Raymond
From esr at thyrsus.com Thu Nov 26 14:05:00 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Thu, 26 Nov 2015 09:05:00 -0500
Subject: How to I modify the website?
Message-ID: <20151126140500.GA10437@thyrsus.com>
esr at snark:~/software/ntp-rescue/www-asciidoc$ git pull
fatal: '/data/git/www-asciidoc.git' does not appear to be a git repository
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.
esr at snark:~/software/ntp-rescue$ cat www-asciidoc/.git/config
[core]
repositoryformatversion = 0
filemode = true
bare = false
logallrefupdates = true
[remote "origin"]
url = ssh://esr at oldtimer.ntpsec.org/data/git/www-asciidoc.git
fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
remote = origin
merge = refs/heads/master
Even pull access to the website repository no longer works.
How am I supposed to modify it now? I need to take Hopf Serial off the
endangered list.
--
Eric S. Raymond
From esr at thyrsus.com Thu Nov 26 14:21:15 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Thu, 26 Nov 2015 09:21:15 -0500
Subject: ntpsec: reference driver 38/hopf 6021
In-Reply-To:
References: <4f92eb835caeaf15c14cf6fcef8d83b1@nocabal.de>
<20151126133715.GA10005@thyrsus.com>
Message-ID: <20151126142115.GA10791@thyrsus.com>
Joel Sherrill :
> There was a long list of devices at the manuals URL. I am in favor of
> renaming it. But an email to the manufacturer would clarify what is
> supported by which drivers and what they refer to the family or families
> as. Then we could use their naming convention.
>
> In RTEMS, we tend to put generic in the name or x's in the part number to
> indicate a range. Like gen52xx which should work on any PowerPC MPC52xx
> board given a bit of info.
Would you be willing to do this research?
--
Eric S. Raymond
From m-ntp at kotzan.net Thu Nov 26 14:23:25 2015
From: m-ntp at kotzan.net (Martin Kotzan)
Date: Thu, 26 Nov 2015 15:23:25 +0100
Subject: ntpsec: reference driver 38/hopf 6021
Message-ID:
On 2015-11-26 14:37, Eric S. Raymond wrote:
> (Copied to the ntpsec devel list.)
>
> Martin Kotzan :
>> I'd like to holler about the planned removal of driver type 38 (Hopf
>> 6021
>> serial).
>>
>> This driver is still needed by current Hopf clocks connected via
>> serial
>> connection, so the "6021" part is probably a misnomer.
> [...]
>
> Should we change the device name to just "Hopf serial"? What models
> other
> than the 6021 does this cover?
"Hopf serial" would be more more fitting for NTP, but these clocks can
output
about a dozen different strings. Since the hopf documentation refers to
the string as "Standard 6021 (hopf6021, time and date)" I would argue
the
"6021" should be kept in the description.
All Hopf GPS and DCF77 clocks with a serial interface will emit that
string:
"All hopf units with a serial interface can provide the serial data
string for NTP."
http://www.hopf.com/en/article_en.html#ntpseri
Martin
From verm at darkbeer.org Thu Nov 26 14:24:18 2015
From: verm at darkbeer.org (Amar Takhar)
Date: Thu, 26 Nov 2015 14:24:18 +0000
Subject: How to I modify the website?
In-Reply-To: <20151126140500.GA10437@thyrsus.com>
References: <20151126140500.GA10437@thyrsus.com>
Message-ID: <20151126142418.GA9012@darkbeer.org>
On 2015-11-26 09:05 -0500, Eric S. Raymond wrote:
> esr at snark:~/software/ntp-rescue/www-asciidoc$ git pull
> fatal: '/data/git/www-asciidoc.git' does not appear to be a git repository
> fatal: Could not read from remote repository.
It's www.git on Gitlab.
Amar.
From hmurray at megapathdsl.net Thu Nov 26 23:04:40 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Thu, 26 Nov 2015 15:04:40 -0800
Subject: How much for a 1 GHz computer
Message-ID: <20151126230440.739E440605C@ip-64-139-1-69.sjc.megapath.net>
Note that the new board doesn't have an Ethernet.
The Raspberry Pi comes in various versions.
https://en.wikipedia.org/wiki/Raspberry_Pi
The Pi 2 has a 4 core ARM v7, 900 MHz, 1 GB of ram, micro SD, Ethernet, and
4 USB slots. This is the only version I would consider buying today if the
goal is hacking with ntpsec. It runs waf configure and build in 2-3 minutes.
(That's without asciidoc.)
There is no TOY/RTC clock.
I use it headless so I haven't paid much attention to the graphics. You
probably need console access to get started. I have an HDMI to VGA adapter
and ??? to USB for the keyboard/mouse.
The main OS is Rasbian, derived from Debian.
I think it also runs NetBSD and FreeBSD, but I haven't tried them yet.
--
These are my opinions. I hate spam.
From chrisj at ntpsec.org Fri Nov 27 03:51:11 2015
From: chrisj at ntpsec.org (Chris Johns)
Date: Fri, 27 Nov 2015 14:51:11 +1100
Subject: How much for a 1 GHz computer
In-Reply-To: <20151126230440.739E440605C@ip-64-139-1-69.sjc.megapath.net>
References: <20151126230440.739E440605C@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <5657D32F.4030704@ntpsec.org>
On 27/11/2015 10:04 AM, Hal Murray wrote:
> Note that the new board doesn't have an Ethernet.
>
> The Raspberry Pi comes in various versions.
> https://en.wikipedia.org/wiki/Raspberry_Pi
>
> The Pi 2 has a 4 core ARM v7, 900 MHz, 1 GB of ram, micro SD, Ethernet, and
> 4 USB slots. This is the only version I would consider buying today if the
> goal is hacking with ntpsec. It runs waf configure and build in 2-3 minutes.
> (That's without asciidoc.)
I agree they are great, I have a few. Just a note on the ethernet, it is
via a USB2 connected MAC device and not directly connected to the DDR so
the performance is ok not great, ie they are not for NAS type applications.
> I use it headless so I haven't paid much attention to the graphics.
The graphics is very good using the Broadcom binary blob. Load Kodi on
it to make a media box and you will see the nice HD video performance.
Chris
From hmurray at megapathdsl.net Mon Nov 30 09:28:09 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Mon, 30 Nov 2015 01:28:09 -0800
Subject: libevent2 quirk on NetBSD
Message-ID: <20151130092809.C4CC4406057@ip-64-139-1-69.sjc.megapath.net>
Does anybody understand this one? Do we need to add some magic to the recipe
waf is using?
It built without errors, but can't find the library at run time.
-bash-4.3$ bob2/ntpdig/ntpdig
Shared object "libevent-2.0.so.5" not found
It's in /usr/pkg/lib/
ldd says:
bob2/ntpdig/ntpdig:
-lm.0 => /usr/lib/libm.so.0
-lgcc_s.1 => /usr/lib/libgcc_s.so.1
-lc.12 => /usr/lib/libc.so.12
-lpthread.1 => /usr/lib/libpthread.so.1
-levent-2.0.5 => not found
-levent_core-2.0.5 => not found
-levent_pthreads-2.0.5 => not found
-lrt.1 => /usr/lib/librt.so.1
It works if I add:
-bash-4.3$ LD_LIBRARY_PATH=/usr/pkg/lib/
-bash-4.3$ export LD_LIBRARY_PATH
-bash-4.3$ bob2/ntpdig/ntpdig
ntpdig: Must supply at least one of -b hostname, -c hostname, or hostname.
-bash-4.3$
I assume that buildbot doesn't have a NetBSD box (yet?). One of the tests
uses libevent2.
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Mon Nov 30 10:38:49 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Mon, 30 Nov 2015 02:38:49 -0800
Subject: mdns stuff in intercept_finish is broken
Message-ID: <20151130103849.7E7FC406057@ip-64-139-1-69.sjc.megapath.net>
I think it only gets tested on NetBSD.
The first problem is that it doesn't include the header file.
The second is that mdns is over in ntpd.c
I think the idea of moving that much actual code over there is a bad idea.
If you want to leave everything there, I suggest commenting out the mdns
stuff and adding a big note.
--------
This looks fishy :
sig_desc = NULL;
sig_desc = strsignal(sig);
if (sig_desc == NULL)
sig_desc = "";
It's leftover from when strsignal might not exist and didn't get cleaned up
when you removed that ifdef test. My man page says some systems (not Linux)
might return NULL on an invalid signal. I assume anything passed to that
routine will be valid.
-------
There are 2 ways into that code. One is via a kill command, probably from
something like "service ntpd stop". The other is from a SIGBUS. The SIGBUS
case should probably bypass the cleanup and exit non-zero.
I think the idea of doing more than a simple log message and exit is to free
up all the mallocs so the tool that monitors malloc usage would see a close
to clean result at exit and everything left would be lost memory. I don't
see the code I expect. There is a lot of mallocing in the config file parser
and big chunks of memory for the mrulist. The config stuff is using an
atexit-hook. That's probably a bad idea if we are going to catch SIGBUS and
expect to do anything.
--
These are my opinions. I hate spam.
From hmurray at megapathdsl.net Mon Nov 30 10:49:55 2015
From: hmurray at megapathdsl.net (Hal Murray)
Date: Mon, 30 Nov 2015 02:49:55 -0800
Subject: An interesting warning
Message-ID: <20151130104955.3A908406057@ip-64-139-1-69.sjc.megapath.net>
It's from Debian wheezy (and decendents like Rasbian)
gcc (Debian 4.7.2-5) 4.7.2
[109/174] Compiling ntpd/ntp_io.c
../ntpd/ntp_io.c: In function ???process_routing_msgs???:
../ntpd/ntp_io.c:4629:7: warning: comparison between signed and unsigned
integer expressions [-Wsign-compare]
That line of code is:
NLMSG_OK(nh, cnt);
It's the middle term in a for loop.
nh is a pointer, cnt is an int.
NLMSG_OK comes from /usr/include/linux/netlink.h
#define NLMSG_OK(nlh,len) ((len) >= (int)sizeof(struct nlmsghdr) && \
(nlh)->nlmsg_len >= sizeof(struct nlmsghdr) && \
(nlh)->nlmsg_len <= (len))
nlmsg_len comes from a struct nlmsghdr:
__u32 nlmsg_len; /* Length of message including header
*/
That part of the header didn't change from wheezy to jessie.
The 3rd term is comparing an unsigned with an int. So the real question is
why the compiler on other systems don't complain.
Is there a clean fix for this, or do we just document it as a glitch in this
environment?
--
These are my opinions. I hate spam.
From esr at thyrsus.com Mon Nov 30 13:28:07 2015
From: esr at thyrsus.com (Eric S. Raymond)
Date: Mon, 30 Nov 2015 08:28:07 -0500
Subject: An interesting warning
In-Reply-To: <20151130104955.3A908406057@ip-64-139-1-69.sjc.megapath.net>
References: <20151130104955.3A908406057@ip-64-139-1-69.sjc.megapath.net>
Message-ID: <20151130132807.GA1545@thyrsus.com>
Hal Murray :
> It's from Debian wheezy (and decendents like Rasbian)
> gcc (Debian 4.7.2-5) 4.7.2
>
> [109/174] Compiling ntpd/ntp_io.c
> ../ntpd/ntp_io.c: In function ???process_routing_msgs???:
> ../ntpd/ntp_io.c:4629:7: warning: comparison between signed and unsigned
> integer expressions [-Wsign-compare]
>
> That line of code is:
> NLMSG_OK(nh, cnt);
> It's the middle term in a for loop.
>
> nh is a pointer, cnt is an int.
>
> NLMSG_OK comes from /usr/include/linux/netlink.h
> #define NLMSG_OK(nlh,len) ((len) >= (int)sizeof(struct nlmsghdr) && \
> (nlh)->nlmsg_len >= sizeof(struct nlmsghdr) && \
> (nlh)->nlmsg_len <= (len))
> nlmsg_len comes from a struct nlmsghdr:
> __u32 nlmsg_len; /* Length of message including header
> */
>
> That part of the header didn't change from wheezy to jessie.
>
> The 3rd term is comparing an unsigned with an int. So the real question is
> why the compiler on other systems don't complain.
>
> Is there a clean fix for this, or do we just document it as a glitch in this
> environment?
Try replacing the call with NLMSG_OK(nh, (uint32_t)cnt). That might do it.
But please test in other environments before you commit. It seems to me
the most likely reason that this error isn't everywhere is that the
type declaration of nlmsg_len is not stable across NLS versions. If so,
trying to fix this could induce more warnings than it solves.
--