[Gt-eos] gct and gsissh

[Mischa Salle]

Hi Mátyás,

On Tue, Nov 28, 2017 at 08:58:45AM -0600, Mátyás Selmeci wrote:
> I don't think that's the master patch. The script "prep-gsissh" downloads
> the original OpenSSH sources and applies the following patches to them,
> downloaded directly from the globus/gsi-openssh GitHub repo:
Ah, but I meant the patch between openssh and gsi-openssh. On top of
that you have the HPN and iSSHD patches which Jim suggested we drop,
those are the first two you have here below.

> # Patch0 is the HPN-SSH patch to Portable OpenSSH
> Patch0="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/openssh-7_5_P1-hpn-14.13.diff"
> # Patch1 is the iSSHD patch to HPN-SSH
> Patch1="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn-14.13-isshd.v3.19.1.patch"
> # Patch2 is the GSI patch to be applied on top of the iSSHD patch
> Patch2="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn_isshd-gsi.7.5p1b.patch"
> ##Patch3 is the OpenSSL 1.1 patch to be applied on top of the GSI patch and is constructed as follows:
> Patch3="https://github.com/globus/gsi-openssh/releases/download/${gsissh_version}/hpn_isshd-gsi_ossl.${gsissh_version}.patch"
> 
> This is also something I'd like to get rid of: builds that require internet
> access hurt reproducibility.
I fully agree. It's also something that actually is not allowed in OS
packaging since it breaks reproduceability too.

    Mischa

> On 11/28/2017 04:06 AM, Mischa Salle wrote:
> > Hi Jim, others,
> > 
> > two things, one in response to your email.
> > Do you have any idea of the (size of the) user group of the two patches?
> > My naive guess would be that (almost) all people use the 'standard'
> > version, but it would be a pity if that turns out not to be the case.
> > Would it be feasible and perhaps more useful to merge them into the
> > 'EPEL' gsissh?
> > 
> > Secondly, and related, Matyas in https://github.com/gridcf/gct/pull/5
> > suggests to remove a large seemingly unused patch. Is that the grand
> > unified patch for gsissh? It might be nice to keep that at least
> > somewhere as background info, whether the gct is the right place for it
> > I don't know, perhaps in some separate directory, what do you think?
> > 
> > Regards,
> > Mischa
> > 
> > On Mon, Nov 27, 2017 at 03:40:32PM +0000, Jim Basney wrote:
> > > Hi,
> > > 
> > > What’s our gct plan for gsissh? Currently the Globus Toolkit uses [1].
> > > Mattias separately maintains EPEL/Fedora packages [2]. The Globus
> > > Toolkit version contains extra patches, particularly PSC’s HPN [3] for
> > > improved scp performance and NERSC’s iSSHD [4] for user activity
> > > auditing. In my opinion, these extra patches are not critical for gct.
> > > For the sake of simplicity and compatibility with EPEL, I propose that
> > > gct should use Mattias’ packages/sources and we let support for the
> > > Globus Toolkit version end. Venkat and I are happy to assist as
> > > needed.
> > > 
> > > Mattias, do you agree? Did I miss any details?
> > > 
> > > What does everyone think? Anyone want to argue for inclusion of HPN and/or iSSHD in gct?
> > > 
> > > Regards,
> > > Jim
> > > 
> > > [1] https://github.com/globus/gsi-openssh
> > > [2] https://apps.fedoraproject.org/packages/gsi-openssh
> > > [3] https://www.psc.edu/index.php/hpn-ssh
> > > [4] https://github.com/set-element/openssh-hpn-isshd
> > > 
> > > 
> > > 
> > > _______________________________________________
> > > Gt-eos mailing list
> > > Gt-eos at mailman.egi.eu
> > > http://mailman.egi.eu/mailman/listinfo/gt-eos
> > 
> > 
> > _______________________________________________
> > Gt-eos mailing list
> > Gt-eos at mailman.egi.eu
> > http://mailman.egi.eu/mailman/listinfo/gt-eos

> _______________________________________________
> Gt-eos mailing list
> Gt-eos at mailman.egi.eu
> http://mailman.egi.eu/mailman/listinfo/gt-eos


-- 
Nikhef                      Room  H155
Science Park 105            Tel.  +31-20-592 5102
1098 XG Amsterdam           Fax   +31-20-592 5155
The Netherlands             Email msalle at nikhef.nl
  __ .. ... _._. .... ._  ... ._ ._.. ._.. .._..
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3402 bytes
Desc: not available
URL: <http://mailman.egi.eu/pipermail/discuss/attachments/20171128/f86dc481/attachment.p7s>