From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/75246 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.gnus.general Subject: Re: Add note about Oort Gnus releases, and No Gnus. Date: Sat, 18 Dec 2010 09:30:50 -0600 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <87wrn7dro5.fsf@lifelogs.com> References: <87eia67lxj.fsf@topper.koldfront.dk> <871v667ger.fsf@topper.koldfront.dk> <87lj3slziq.fsf@lifelogs.com> <87oc8lzb3v.fsf_-_@topper.koldfront.dk> <87r5dh7650.fsf@lifelogs.com> <87ipys4hb8.fsf@lifelogs.com> <877hf7glmk.fsf@lifelogs.com> <874oabnm4x.fsf@topper.koldfront.dk> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Trace: dough.gmane.org 1292686313 11053 80.91.229.12 (18 Dec 2010 15:31:53 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Sat, 18 Dec 2010 15:31:53 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M23601@lists.math.uh.edu Sat Dec 18 16:31:49 2010 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1PTyl9-0005U9-Rc for ding-account@gmane.org; Sat, 18 Dec 2010 16:31:48 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1PTykW-0005Pt-5u; Sat, 18 Dec 2010 09:31:08 -0600 Original-Received: from mx1.math.uh.edu ([129.7.128.32]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PTykU-0005Pg-5I for ding@lists.math.uh.edu; Sat, 18 Dec 2010 09:31:06 -0600 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx1.math.uh.edu with esmtp (Exim 4.72) (envelope-from ) id 1PTykP-0002dm-Rl for ding@lists.math.uh.edu; Sat, 18 Dec 2010 09:31:06 -0600 Original-Received: from lo.gmane.org ([80.91.229.12]) by quimby.gnus.org with esmtp (Exim 4.72) (envelope-from ) id 1PTykP-0001qH-42 for ding@gnus.org; Sat, 18 Dec 2010 16:31:01 +0100 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1PTykO-00056q-P4 for ding@gnus.org; Sat, 18 Dec 2010 16:31:00 +0100 Original-Received: from c-67-186-102-106.hsd1.il.comcast.net ([67.186.102.106]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sat, 18 Dec 2010 16:31:00 +0100 Original-Received: from tzz by c-67-186-102-106.hsd1.il.comcast.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sat, 18 Dec 2010 16:31:00 +0100 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 27 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: c-67-186-102-106.hsd1.il.comcast.net X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6;d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/24.0.50 (gnu/linux) Cancel-Lock: sha1:A/BW8T3rTb+8WUZD/mgTjMvZmXk= X-Spam-Score: -1.9 (-) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:75246 Archived-At: On Sat, 18 Dec 2010 16:20:14 +0100 asjo@koldfront.dk (Adam Sjøgren) wrote: AS> On Sat, 18 Dec 2010 09:13:07 -0600, Ted wrote: >> I then did the deployment like this: >> cd /home/tzz >> sudo rm -rf gnus-html-external-worktree /var/tmp/gnus-html >> git --work-tree /var/tmp/gnus-html clone git://git.gnus.org/home/gnus/html/gnus-html.git gnus-html-external-worktree >> sudo chown -R www /var/tmp/gnus-html >> sudo chmod -R a+rX /var/tmp/gnus-html >> sudo rsync -avP --delete /var/tmp/gnus-html/ $GNUS_HTML_ROOT AS> Why does it need to be more complicated than "cd $GNUS_HTML_ROOT && git AS> pull" ? I trust chmod, chown, rsync, install/ginstall, and cfengine and Puppet (and similar sysadmin tools). But Git was not written to manage file deployments or be secure so I don't trust it to do it right. The rsync step can be modified to exclude .htaccess, for instance, because it's a security risk. If you `git pull' a compromised repo, though, you're screwed. Also the .git directory under the HTML tree would bother me and is a potential security risk. Ted