From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from eggs.gnu.org ([2001:4830:134:3::10]:46793)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <alex.bennee@linaro.org>) id 1bHreW-0007XK-R7
	for qemu-devel@nongnu.org; Tue, 28 Jun 2016 07:58:06 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <alex.bennee@linaro.org>) id 1bHreS-0002px-PV
	for qemu-devel@nongnu.org; Tue, 28 Jun 2016 07:58:04 -0400
Received: from mail-wm0-x22c.google.com ([2a00:1450:400c:c09::22c]:37227)
	by eggs.gnu.org with esmtp (Exim 4.71)
	(envelope-from <alex.bennee@linaro.org>) id 1bHreS-0002nR-77
	for qemu-devel@nongnu.org; Tue, 28 Jun 2016 07:58:00 -0400
Received: by mail-wm0-x22c.google.com with SMTP id a66so24173362wme.0
	for <qemu-devel@nongnu.org>; Tue, 28 Jun 2016 04:57:59 -0700 (PDT)
From: Alex =?utf-8?Q?Benn=C3=A9e?= <alex.bennee@linaro.org>
In-reply-to: <20160627181322.17082-1-bobby.prani@gmail.com>
Date: Tue, 28 Jun 2016 12:58:01 +0100
Message-ID: <87d1n1ed9y.fsf@linaro.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Subject: Re: [Qemu-devel] [PATCH v2] .travis.yml: Disable IRC build status
 updates from forks
List-Id: <qemu-devel.nongnu.org>
List-Unsubscribe: <https://lists.nongnu.org/mailman/options/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.nongnu.org/archive/html/qemu-devel/>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <https://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: Pranith Kumar <bobby.prani@gmail.com>
Cc: "open list:-----------------..." <qemu-devel@nongnu.org>, serge.fdrv@gmail.com, peter.maydell@linaro.org


Pranith Kumar <bobby.prani@gmail.com> writes:

> We want the travis build bot to post notifications on IRC only for the
> master qemu repository and not the various forks/branches of
> others. Currently there is no direct option to restrict the updates to
> one repository. This is being worked upon by the developers and
> tracked in https://github.com/travis-ci/travis-ci/issues/1094.
>
> Until such time, we can use the workaround as posted in
> ref. https://github.com/facebook/flow/pull/1822.
>
> This basically creates an ecrypted string which decrypts to qemu IRC
> channel only on "qemu/qemu" repo and not on the forks. This enables
> the build bot to notify the IRC only for the main repo.
>
> Signed-off-by: Pranith Kumar <bobby.prani@gmail.com>
> CC: serge.fdrv@gmail.com
> CC: peter.maydell@linaro.org
> ---
> v2: Add comment about what the string is and how the string is generated
>
>  .travis.yml | 5 ++++-
>  1 file changed, 4 insertions(+), 1 deletion(-)
>
> diff --git a/.travis.yml b/.travis.yml
> index c13881e..f30b10e 100644
> --- a/.travis.yml
> +++ b/.travis.yml
> @@ -34,10 +34,13 @@ addons:
>        - sparse
>        - uuid-dev
>
> +# The channel name "irc.oftc.net#qemu" is encrypted against qemu/qemu
> +# to prevent IRC notifications from forks. This was created using:
> +# $ travis encrypt -r "qemu/qemu" "irc.oftc.net#qemu"

Interesting. I didn't realise anyone outside the repository can still
create encrypted strings. I guess there is a repository secret that we
never see.

>  notifications:
>    irc:
>      channels:
> -      - "irc.oftc.net#qemu"
> +      - secure: "F7GDRgjuOo5IUyRLqSkmDL7kvdU4UcH3Lm/W2db2JnDHTGCqgEdaYEYKciyCLZ57vOTsTsOgesN8iUT7hNHBd1KWKjZe9KDTZWppWRYVwAwQMzVeSOsbbU4tRoJ6Pp+3qhH1Z0eGYR9ZgKYAoTumDFgSAYRp4IscKS8jkoedOqM="
>      on_success: change
>      on_failure: always
>  env:


--
Alex Bennée