[Gt-eos] gct and gsissh

Mátyás Selmeci matyas at cs.wisc.edu
Tue Nov 28 15:58:45 CET 2017


I don't think that's the master patch. The script "prep-gsissh" 
downloads the original OpenSSH sources and applies the following patches 
to them, downloaded directly from the globus/gsi-openssh GitHub repo:

# Patch0 is the HPN-SSH patch to Portable OpenSSH
Patch0="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/openssh-7_5_P1-hpn-14.13.diff"
# Patch1 is the iSSHD patch to HPN-SSH
Patch1="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn-14.13-isshd.v3.19.1.patch"
# Patch2 is the GSI patch to be applied on top of the iSSHD patch
Patch2="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn_isshd-gsi.7.5p1b.patch"
##Patch3 is the OpenSSL 1.1 patch to be applied on top of the GSI patch and is constructed as follows:
Patch3="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn_isshd-gsi_ossl.${gsissh_version}.patch"

This is also something I'd like to get rid of: builds that require 
internet access hurt reproducibility.

-Mat

On 11/28/2017 04:06 AM, Mischa Salle wrote:
> Hi Jim, others,
>
> two things, one in response to your email.
> Do you have any idea of the (size of the) user group of the two patches?
> My naive guess would be that (almost) all people use the 'standard'
> version, but it would be a pity if that turns out not to be the case.
> Would it be feasible and perhaps more useful to merge them into the
> 'EPEL' gsissh?
>
> Secondly, and related, Matyas in https://github.com/gridcf/gct/pull/5
> suggests to remove a large seemingly unused patch. Is that the grand
> unified patch for gsissh? It might be nice to keep that at least
> somewhere as background info, whether the gct is the right place for it
> I don't know, perhaps in some separate directory, what do you think?
>
> Regards,
> Mischa
>
> On Mon, Nov 27, 2017 at 03:40:32PM +0000, Jim Basney wrote:
>> Hi,
>>
>> What’s our gct plan for gsissh? Currently the Globus Toolkit uses [1].
>> Mattias separately maintains EPEL/Fedora packages [2]. The Globus
>> Toolkit version contains extra patches, particularly PSC’s HPN [3] for
>> improved scp performance and NERSC’s iSSHD [4] for user activity
>> auditing. In my opinion, these extra patches are not critical for gct.
>> For the sake of simplicity and compatibility with EPEL, I propose that
>> gct should use Mattias’ packages/sources and we let support for the
>> Globus Toolkit version end. Venkat and I are happy to assist as
>> needed.
>>
>> Mattias, do you agree? Did I miss any details?
>>
>> What does everyone think? Anyone want to argue for inclusion of HPN and/or iSSHD in gct?
>>
>> Regards,
>> Jim
>>
>> [1] https://github.com/globus/gsi-openssh
>> [2] https://apps.fedoraproject.org/packages/gsi-openssh
>> [3] https://www.psc.edu/index.php/hpn-ssh
>> [4] https://github.com/set-element/openssh-hpn-isshd
>>
>>
>>
>> _______________________________________________
>> Gt-eos mailing list
>> Gt-eos at mailman.egi.eu
>> http://mailman.egi.eu/mailman/listinfo/gt-eos
>
>
> _______________________________________________
> Gt-eos mailing list
> Gt-eos at mailman.egi.eu
> http://mailman.egi.eu/mailman/listinfo/gt-eos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.egi.eu/pipermail/discuss/attachments/20171128/6bf958f1/attachment.html>


More information about the discuss mailing list