From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org [172.17.192.35]) by mail.linuxfoundation.org (Postfix) with ESMTPS id 69F5BBC9 for ; Wed, 8 Jul 2015 14:40:59 +0000 (UTC) Received: from mail.emea.novell.com (mail.emea.novell.com [130.57.118.101]) by smtp1.linuxfoundation.org (Postfix) with ESMTPS id B2683121 for ; Wed, 8 Jul 2015 14:40:58 +0000 (UTC) Date: Wed, 8 Jul 2015 16:40:39 +0200 (CEST) From: Jiri Kosina To: Theodore Ts'o In-Reply-To: <20150708140155.GA20551@thunk.org> Message-ID: References: <20150707224025.GJ11162@sirena.org.uk> <20150707225223.GG12491@dtor-ws> <20150708021619.GC3102@kroah.com> <20150708093511.GL11162@sirena.org.uk> <20150708140155.GA20551@thunk.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: ksummit-discuss@lists.linuxfoundation.org Subject: Re: [Ksummit-discuss] [CORE TOPIC] services needed from kernel.org infrastructure List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , On Wed, 8 Jul 2015, Theodore Ts'o wrote: > 1) It will require a lot of configuration --- just because a commit > shows up on a branch does not mean it is guaranteed that it will hit > mainline. > > In fact, a maintainer might push a commit onto a throwaway branch on > kernel.org just so that the zero-day testing systems can give the commit > a spin. So that means it's not just enough to throw a bunch of git hook > scripts on master.kernel.org, because maintainers will need to have to > configure, if not customize, them. > > This leads to my second concern which is: Yeah, some kind of pattern matching would be very useful (like "send mails only for commits that newly appar in 'for-next' branch", or some such). > 2) Having shell scripts run on master.kernel.org can be a significant > security concern; this is *especially* true if customization or > configuration is required. I don't think there is any principal reason this needs to run on master. It can be on any kind of scratch one-purpose system that would just be a slave git mirror. -- Jiri Kosina SUSE Labs