From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga14.intel.com (mga14.intel.com [143.182.124.37]) by mx1.pokylinux.org (Postfix) with ESMTP id 5EC254C80BCF for ; Tue, 9 Nov 2010 12:38:41 -0600 (CST) Received: from azsmga001.ch.intel.com ([10.2.17.19]) by azsmga102.ch.intel.com with ESMTP; 09 Nov 2010 10:35:29 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="4.59,175,1288594800"; d="scan'208";a="346565119" Received: from unknown (HELO [10.255.13.54]) ([10.255.13.54]) by azsmga001.ch.intel.com with ESMTP; 09 Nov 2010 10:35:29 -0800 Message-ID: <4CD9946F.5020802@linux.intel.com> Date: Tue, 09 Nov 2010 10:35:27 -0800 From: Darren Hart User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: Denys Dmytriyenko References: <017987BD9AB15445B9968338EC889BB1082088F12E@AUSX7MCPS301.AMER.DELL.COM> <20101109170207.GA8761@denix.org> <4CD98347.9070402@linux.intel.com> <4CD98638.8050306@dell.com> <20101109180658.GB8761@denix.org> In-Reply-To: <20101109180658.GB8761@denix.org> Cc: "poky@yoctoproject.org" Subject: Re: Introduction and Request for HTTP Git Access X-BeenThere: poky@yoctoproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Poky build system developer discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 18:38:41 -0000 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit On 11/09/2010 10:06 AM, Denys Dmytriyenko wrote: > On Tue, Nov 09, 2010 at 11:34:48AM -0600, Ryan D Phillips wrote: >> On 11/9/2010 11:22 AM, Darren Hart wrote: >>> On 11/09/2010 09:02 AM, Denys Dmytriyenko wrote: >>>> On Tue, Nov 09, 2010 at 10:31:37AM -0600, Ryan_D_Phillips@Dell.com wrote: >>>>> Good Day! >>>>> >>>>> My name is Ryan Phillips (irc: rphillips), a former Gentoo Linux >>>>> Developer, >>>>> currently a software developer architecting an embedded firmware >>>>> solution on >>>>> OE for my employer. With the release of Yocto, we are extremely >>>>> interested >>>>> in trying it out and possibly contributing to the project. My cohort >>>>> working >>>>> with me is Sean Hudson (irc: darknighte), and is someone who you may see >>>>> contributions from as well. >>>>> >>>>> A major stumbling block we must work around is the restrictive firewall >>>>> and >>>>> git checkouts. We have found out the git-http-backend works extremely >>>>> well, >>>>> and are requesting this support on git.pokylinux.org. We suspect other >>>>> people within larger corporations would have a similar problem, and by >>>>> adding this support would help the community at large. >>>> >>>> Ryan, >>>> >>>> It's nice to see another Gentooist! >>>> >>>> Have you looked at core.gitProxy setting or GIT_PROXY_COMMAND environment >>>> in >>>> git-config(1)? People behind strict firewalls been using that for years >>>> to >>>> tunnel their git access through proxies. Used together with things like >>>> netcat, socat or corkscrew work miracles even with HTTP-only proxies! >>> >>> It is certainly sub-ideal (but so is git over http), but it should >>> provide the functionality you need. Please give the above a shot and if >>> for some reason it is insufficient, please let us know. >>> >> >> I don't understand the comment that git over http is sub-ideal (see github >> using https for git by default), but the issue we have is the proxy server >> restricts outbound ports to 80 and 443, and doesn't allow CONNECT. > > git-over-http used to be sub-ideal until version 1.6.6 of git, as it only > provided "dumb" read-only access. Now, with git-http-backend(1) there is a > "smart" transport available, which can also handle pushing over https... > > http://www.kernel.org/pub/software/scm/git/docs/git-http-backend.html > http://progit.org/2010/03/04/smart-http.html Aha, I didn't realize that. My concern would be how that would tie in with the ssh key based user auth we currently use. I'll have to leave that to Richard or perhaps someone else that knows the backend setup better than I do. -- Darren Hart Embedded Linux Kernel