<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">I don't think that's the master patch.
The script "prep-gsissh" downloads the original OpenSSH sources
and applies the following patches to them, downloaded directly
from the globus/gsi-openssh GitHub repo:<br>
<br>
<pre># Patch0 is the HPN-SSH patch to Portable OpenSSH
Patch0=<a class="moz-txt-link-rfc2396E" href="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/openssh-7_5_P1-hpn-14.13.diff">"https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/openssh-7_5_P1-hpn-14.13.diff"</a>
# Patch1 is the iSSHD patch to HPN-SSH
Patch1=<a class="moz-txt-link-rfc2396E" href="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn-14.13-isshd.v3.19.1.patch">"https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn-14.13-isshd.v3.19.1.patch"</a>
# Patch2 is the GSI patch to be applied on top of the iSSHD patch
Patch2=<a class="moz-txt-link-rfc2396E" href="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn_isshd-gsi.7.5p1b.patch">"https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn_isshd-gsi.7.5p1b.patch"</a>
##Patch3 is the OpenSSL 1.1 patch to be applied on top of the GSI patch and is constructed as follows:
Patch3=<a class="moz-txt-link-rfc2396E" href="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn_isshd-gsi_ossl.${gsissh_version}.patch">"https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn_isshd-gsi_ossl.${gsissh_version}.patch"</a>
</pre>
This is also something I'd like to get rid of: builds that require
internet access hurt reproducibility.<br>
<br>
-Mat<br>
<br>
On 11/28/2017 04:06 AM, Mischa Salle wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20171128100619.xmcmcq7ryxz2obau@nikhef.nl">
<pre wrap="">Hi Jim, others,
two things, one in response to your email.
Do you have any idea of the (size of the) user group of the two patches?
My naive guess would be that (almost) all people use the 'standard'
version, but it would be a pity if that turns out not to be the case.
Would it be feasible and perhaps more useful to merge them into the
'EPEL' gsissh?
Secondly, and related, Matyas in <a class="moz-txt-link-freetext" href="https://github.com/gridcf/gct/pull/5">https://github.com/gridcf/gct/pull/5</a>
suggests to remove a large seemingly unused patch. Is that the grand
unified patch for gsissh? It might be nice to keep that at least
somewhere as background info, whether the gct is the right place for it
I don't know, perhaps in some separate directory, what do you think?
Regards,
Mischa
On Mon, Nov 27, 2017 at 03:40:32PM +0000, Jim Basney wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi,
What’s our gct plan for gsissh? Currently the Globus Toolkit uses [1].
Mattias separately maintains EPEL/Fedora packages [2]. The Globus
Toolkit version contains extra patches, particularly PSC’s HPN [3] for
improved scp performance and NERSC’s iSSHD [4] for user activity
auditing. In my opinion, these extra patches are not critical for gct.
For the sake of simplicity and compatibility with EPEL, I propose that
gct should use Mattias’ packages/sources and we let support for the
Globus Toolkit version end. Venkat and I are happy to assist as
needed.
Mattias, do you agree? Did I miss any details?
What does everyone think? Anyone want to argue for inclusion of HPN and/or iSSHD in gct?
Regards,
Jim
[1] <a class="moz-txt-link-freetext" href="https://github.com/globus/gsi-openssh">https://github.com/globus/gsi-openssh</a>
[2] <a class="moz-txt-link-freetext" href="https://apps.fedoraproject.org/packages/gsi-openssh">https://apps.fedoraproject.org/packages/gsi-openssh</a>
[3] <a class="moz-txt-link-freetext" href="https://www.psc.edu/index.php/hpn-ssh">https://www.psc.edu/index.php/hpn-ssh</a>
[4] <a class="moz-txt-link-freetext" href="https://github.com/set-element/openssh-hpn-isshd">https://github.com/set-element/openssh-hpn-isshd</a>
_______________________________________________
Gt-eos mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Gt-eos@mailman.egi.eu">Gt-eos@mailman.egi.eu</a>
<a class="moz-txt-link-freetext" href="http://mailman.egi.eu/mailman/listinfo/gt-eos">http://mailman.egi.eu/mailman/listinfo/gt-eos</a>
</pre>
</blockquote>
<pre wrap="">
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Gt-eos mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Gt-eos@mailman.egi.eu">Gt-eos@mailman.egi.eu</a>
<a class="moz-txt-link-freetext" href="http://mailman.egi.eu/mailman/listinfo/gt-eos">http://mailman.egi.eu/mailman/listinfo/gt-eos</a>
</pre>
</blockquote>
</body>
</html>